Repository: serverless/dashboard (language: python)

Issue:
AWS Lambda SDK: Do not trace DynamoDb request `expressionValues`
It may contain sensitive information which we do not expose in all cases.

While in dev mode users will still have it in request response data


Discussion / hints:

Fix patch:
diff --git a/node/package.json b/node/package.json
index 388bf4fe9..a4187f454 100644
--- a/node/package.json
+++ b/node/package.json
@@ -15,33 +15,33 @@
     ]
   },
   "devDependencies": {
-    "@aws-sdk/client-api-gateway": "^3.186.0",
-    "@aws-sdk/client-apigatewayv2": "^3.186.0",
-    "@aws-sdk/client-cloudwatch-logs": "^3.186.0",
-    "@aws-sdk/client-dynamodb": "^3.186.0",
-    "@aws-sdk/client-iam": "^3.186.0",
-    "@aws-sdk/client-lambda": "^3.186.0",
-    "@aws-sdk/client-s3": "^3.186.0",
-    "@aws-sdk/client-sns": "^3.186.0",
-    "@aws-sdk/client-sqs": "^3.186.0",
-    "@aws-sdk/client-sts": "^3.186.0",
+    "@aws-sdk/client-api-gateway": "^3.188.0",
+    "@aws-sdk/client-apigatewayv2": "^3.188.0",
+    "@aws-sdk/client-cloudwatch-logs": "^3.188.0",
+    "@aws-sdk/client-dynamodb": "^3.188.0",
+    "@aws-sdk/client-iam": "^3.188.0",
+    "@aws-sdk/client-lambda": "^3.188.0",
+    "@aws-sdk/client-s3": "^3.188.0",
+    "@aws-sdk/client-sns": "^3.188.0",
+    "@aws-sdk/client-sqs": "^3.188.0",
+    "@aws-sdk/client-sts": "^3.188.0",
     "@commitlint/cli": "^17.1.2",
     "@commitlint/lint": "^17.1.0",
-    "@octokit/rest": "^19.0.4",
+    "@octokit/rest": "^19.0.5",
     "@rollup/plugin-multi-entry": "^4.1.0",
     "@rollup/plugin-node-resolve": "^13.3.0",
     "@rollup/plugin-typescript": "^8.5.0",
     "@serverless/eslint-config": "^5.0.1",
     "@serverless/sdk-schema": "^0.10.1",
     "@serverless/test": "^11.0.2",
-    "@serverless/utils": "^6.7.0",
+    "@serverless/utils": "^6.8.0",
     "@tsconfig/node16": "^1.0.3",
     "adm-zip": "^0.5.9",
     "chai": "^4.3.6",
     "chalk": "^4.1.2",
     "child-process-ext": "^2.1.1",
     "deasync": "^0.1.28",
-    "esbuild": "^0.15.10",
+    "esbuild": "^0.15.11",
     "esbuild-plugin-d.ts": "^1.1.0",
     "eslint": "^8.25.0",
     "eslint-plugin-import": "^2.26.0",
@@ -67,7 +67,7 @@
     "standard-version": "^9.5.0",
     "stream-promise": "^3.2.0",
     "timers-ext": "^0.1.7",
-    "ts-proto": "^1.126.1",
+    "ts-proto": "^1.129.0",
     "tslib": "^2.4.0",
     "type": "^2.7.2",
     "typescript": "^4.8.4",
diff --git a/node/packages/aws-lambda-sdk/CHANGELOG.md b/node/packages/aws-lambda-sdk/CHANGELOG.md
index 060b4624a..1514dee01 100644
--- a/node/packages/aws-lambda-sdk/CHANGELOG.md
+++ b/node/packages/aws-lambda-sdk/CHANGELOG.md
@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+### [0.9.1](https://github.com/serverless/console/compare/@serverless/aws-lambda-sdk@0.9.0...@serverless/aws-lambda-sdk@0.9.1) (2022-10-17)
+
+### Features
+
+- Do not trace DynamoDb request `expressionValues` ([bbc118d](https://github.com/serverless/console/commit/bbc118dd3cd8d92178b198439e96be040629c72f))
+
 ## [0.9.0](https://github.com/serverless/console/compare/@serverless/aws-lambda-sdk@0.8.1...@serverless/aws-lambda-sdk@0.9.0) (2022-10-11)
 
 ### ⚠ BREAKING CHANGES
diff --git a/node/packages/aws-lambda-sdk/package.json b/node/packages/aws-lambda-sdk/package.json
index 124bf75a8..58f0e0c75 100644
--- a/node/packages/aws-lambda-sdk/package.json
+++ b/node/packages/aws-lambda-sdk/package.json
@@ -1,7 +1,7 @@
 {
   "name": "@serverless/aws-lambda-sdk",
   "repository": "serverless/console",
-  "version": "0.9.0",
+  "version": "0.9.1",
   "author": "Serverless, Inc.",
   "dependencies": {
     "@serverless/sdk-schema": "^0.10.1",


Test patch:
diff --git a/node/packages/aws-lambda-sdk/test/fixtures/lambdas/package.json b/node/packages/aws-lambda-sdk/test/fixtures/lambdas/package.json
index 580a24c7d..795c56f6f 100644
--- a/node/packages/aws-lambda-sdk/test/fixtures/lambdas/package.json
+++ b/node/packages/aws-lambda-sdk/test/fixtures/lambdas/package.json
@@ -1,9 +1,9 @@
 {
   "dependencies": {
-    "@aws-sdk/client-dynamodb": "^3.186.0",
-    "@aws-sdk/client-sns": "^3.186.0",
-    "@aws-sdk/client-sqs": "^3.186.0",
-    "@aws-sdk/client-sts": "^3.186.0",
+    "@aws-sdk/client-dynamodb": "^3.188.0",
+    "@aws-sdk/client-sns": "^3.188.0",
+    "@aws-sdk/client-sqs": "^3.188.0",
+    "@aws-sdk/client-sts": "^3.188.0",
     "express": "^4.18.2",
     "serverless-http": "^3.0.3",
     "timers-ext": "^0.1.7"
diff --git a/node/packages/aws-lambda-sdk/test/integration/index.test.js b/node/packages/aws-lambda-sdk/test/integration/index.test.js
index abc90633c..75df7aa51 100644
--- a/node/packages/aws-lambda-sdk/test/integration/index.test.js
+++ b/node/packages/aws-lambda-sdk/test/integration/index.test.js
@@ -253,7 +253,6 @@ describe('integration', function () {
       expect(sdkTags).to.not.have.property('error');
       expect(sdkTags.dynamodb.tableName).to.equal(tableName);
       expect(sdkTags.dynamodb.keyCondition).to.equal('#id = :id');
-      expect(sdkTags.dynamodb.attributeValues).to.equal(JSON.stringify({ ':id': { S: 'test' } }));
       // Delete
       expect(dynamodbDeleteSpan.parentSpanId.toString()).to.equal(invocationSpan.id.toString());
       expect(dynamodbDeleteSpan.name).to.equal('aws.sdk.dynamodb.deletetable');