7.2.3

What's Changed

• fix(http-urlencode-body-parser): preserve duplicate keys as arrays using getAll() @cloudyun888 #1614

Full Changelog: 7.2.2...7.2.3

7.2.2

What's Changed

• Low risk Prototype Pollution with internal in @middy/util NPM Package @dfzysmy2tf-create #1609
• @middy/http-cors: Punycode normalization breaks origin matching for mixed-case hostnames (since v7.1.1) @WtfJoke #1608
• chore(deps): bump github/codeql-action from 4.32.6 to 4.33.0 by @dependabot[bot] in #1606
• chore(deps): bump softprops/action-gh-release from 2.5.0 to 2.6.1 by @dependabot[bot] in #1605
• chore(deps): bump github/codeql-action from 4.33.0 to 4.35.1 by @dependabot[bot] in #1610

Full Changelog: 7.2.1...7.2.2

7.2.1

What changed

• @middy/cloudformation-response version 7.1.7 breaks life cycle of custom resource #1602

Full Changelog: 7.2.0...7.2.1

7.2.0

What's Changed

• event-normalizer: add support for rmq

Full Changelog: 7.1.8...7.2.0

7.1.8

What's Changed

• fix appconfig: crash when Configuration absent in GetLatestConfiguration response (SDK >= 3.929.0) #1600

Full Changelog: 7.1.7...7.1.8

7.1.7

What's Changed

• @middy/secrets-manager: Fixed crash when LastRotationDate or LastChangedDate is undefined during rotation-date-based cache expiry calculation. Previously, Math.max(undefined, ...) would produce NaN, breaking the cache logic. Now defaults to 0 when either date is missing.
• @middy/cloudformation-response: Auto-populate PhysicalResourceId from context.logStreamName when not explicitly set. This prevents CloudFormation custom resource responses from failing due to a missing required field.
• @middy/core (types): Widened the TErr generic in UseFn from Error to any, allowing middleware that uses custom error types to be passed to .use() without type errors.

• Issue/1594 in #1597

Full Changelog: 7.1.6...7.1.7

7.1.6

What's Changed

• Compatability with lambda power tools broken since 7.1.3 #1594
• chore(deps): bump actions/download-artifact from 8.0.0 to 8.0.1 by @dependabot[bot] in #1593
• chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #1592

Full Changelog: 7.1.5...7.1.6

7.1.5

What's Changed

• httpResponseSerializer generates type error in Middy 7.1.4 #1590
• (http-event-normalizer): API Gateway Event v2 is not accepted #1589
• chore: update type test setup by @mrazauskas in #1588

Full Changelog: 7.1.4...7.1.5

7.1.4

What's Changed

• 7.1.3 introduced type error "Argument not assignable to parameter of type Context" #1585
• chore(deps): bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #1582
• chore(deps): bump actions/setup-node from 6.2.0 to 6.3.0 by @dependabot[bot] in #1583
• chore(deps): bump aquasecurity/trivy-action from 0.34.1 to 0.34.2 by @dependabot[bot] in #1584

Full Changelog: 7.1.3...7.1.4

7.1.3

What's Changed

• validator: Fix type definition regression (#1580)
• http-multipart-body-parser, http-urlencode-body-parser, http-urlencode-path-parser,
  http-security-headers: Fix HTTP status code handling in type definitions and runtime
• Performance improvements across core and multiple middleware packages (core, event-normalizer,
  http-content-encoding, http-cors, http-error-handler, http-header-normalizer, http-security-headers,
  input-output-logger, secrets-manager, ssm, util, and others)
• Add missing type definitions for http-content-negotiation, service-discovery, sts, secrets-manager,
  ws-router
• Improve type definitions across core, cloudformation-router, http-router, http-event-normalizer,
  s3-object-response, sqs-partial-batch-failure, warmup, error-logger, and others
• Simplify s3-object-response type definitions
• Add comprehensive type tests across all packages

• chore(deps): bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #1574
• chore(deps): bump aquasecurity/trivy-action from 0.34.0 to 0.34.1 by @dependabot[bot] in #1575
• chore(deps): bump actions/attest-build-provenance from 3.2.0 to 4.1.0 by @dependabot[bot] in #1573
• chore(deps): bump actions/download-artifact from 7.0.0 to 8.0.0 by @dependabot[bot] in #1576
• chore(deps): bump actions/upload-artifact from 6.0.0 to 7.0.0 by @dependabot[bot] in #1577

Full Changelog: 7.1.2...7.1.3