Skip to content

chore: bump data packages (API plugin TLS 1.2 fix)#14784

Open
sarayev wants to merge 1 commit intodevfrom
guest/data/bump-api-plugin-tls-fix
Open

chore: bump data packages (API plugin TLS 1.2 fix)#14784
sarayev wants to merge 1 commit intodevfrom
guest/data/bump-api-plugin-tls-fix

Conversation

@sarayev
Copy link
Copy Markdown
Contributor

@sarayev sarayev commented Apr 15, 2026

Description

Bumps Gen1 data packages to pull in the latest releases from amplify-category-api, most notably the OpenSearch TLS 1.2 security policy fix.

Key package updates

Package From To
amplify-category-api ^5.15.3 ^5.15.5
@aws-amplify/graphql-searchable-transformer ^2.7.19 ^2.7.20
@aws-amplify/graphql-auth-transformer ^3.6.15 ^3.6.16
@aws-amplify/graphql-maps-to-transformer ^3.5.3 ^3.5.4
graphql-auth-transformer ^7.2.89 ^7.2.90

Motivation

The @searchable directive creates OpenSearch domains without explicitly setting a TLS security policy, defaulting to Policy-Min-TLS-1-0-2019-07. With AWS deprecating TLS 1.0/1.1 for OpenSearch (April 2026), this bump pulls in:

  • @aws-amplify/graphql-searchable-transformer@2.7.20 — sets TLSSecurityPolicy: TLS_1_2 on new Gen2 OpenSearch domains
  • graphql-elasticsearch-transformer@5.2.89 (transitive via amplify-category-api@5.15.5) — sets TLSSecurityPolicy: Policy-Min-TLS-1-2-2019-07 on new Gen1 OpenSearch domains

Testing

  • E2E: 276 test suite triggered on this branch
  • No functional changes — dependency version bumps only

@sarayev sarayev requested a review from a team as a code owner April 15, 2026 12:41
svidgen
svidgen previously approved these changes Apr 15, 2026
@sarayev sarayev dismissed stale reviews from adrianjoshua-strutt and svidgen via ae1d8d3 April 15, 2026 19:45
@sarayev sarayev force-pushed the guest/data/bump-api-plugin-tls-fix branch from dbf930d to ae1d8d3 Compare April 15, 2026 19:45
@sarayev sarayev force-pushed the guest/data/bump-api-plugin-tls-fix branch from ae1d8d3 to ebea16e Compare April 15, 2026 21:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants