Release v8.0.5

Author: bryceaug

CHANGELOG.md

@@ -5,6 +5,15 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [8.0.5] - 2026-05-11
+
+### Fixed
+- Migration issue preventing users from upgrading past major version v8.0.0 [#644](https://github.com/aws-solutions/dynamic-image-transformation-for-amazon-cloudfront/issues/644)
+- Animated content in the .gif format had the abiltiy to be converted to non-animated image formats, breaking the animation and serving a still image
+
+### Security
+- Bump `fast-xml-parser` to 5.7.0 to mitigate [CVE-2026-41650](https://github.com/advisories/GHSA-gh4j-gqv2-49f6)
+
 ## [8.0.4] - 2026-04-20
 
 ### Security

NOTICE

@@ -1434,6 +1434,9 @@ fast-check under the MIT license.
 @rollup/rollup-openbsd-x64 under the MIT license.
 @rollup/rollup-openharmony-arm64 under the MIT license.
 @rollup/rollup-win32-x64-gnu under the MIT license.
+@nodable/entities under the MIT license.
+xml-naming under the MIT license.
+
 
 ********************
 OPEN SOURCE LICENSES
@@ -1458,3 +1461,4 @@ BlueOak-1.0.0 - https://opensource.org/licenses/BlueOak-1.0.0
 Unlicense - https://unlicense.org/
 
 
+

source/admin-ui/package-lock.json

@@ -73,14 +73,14 @@
     "minimatch@9": "9.0.8",
     "ajv@6": "6.14.0",
     "rollup": "4.59.0",
-    "fast-xml-parser": "5.5.7",
     "flatted": "3.4.2",
     "yaml@1": "1.10.3",
     "diff@4": "4.0.4",
     "handlebars": "4.7.9",
     "picomatch@2": "2.3.2",
     "picomatch@4": "4.0.4",
     "brace-expansion@1": "1.1.13",
-    "brace-expansion@5": "5.0.5"
+    "brace-expansion@5": "5.0.5",
+    "uuid": "11.1.1"
   }
 }

source/admin-ui/package.json

@@ -49,7 +49,6 @@
     "lodash": "^4.18.0",
     "minimatch@3": "3.1.5",
     "ajv@6": "6.14.0",
-    "fast-xml-parser": "5.5.7",
     "handlebars": "4.7.9",
     "flatted": "3.4.2",
     "picomatch@2": "2.3.2",

source/admin-ui/src/e2e-tests/package-lock.json

@@ -2,7 +2,7 @@
   "app": "npx ts-node --prefer-ts-exts bin/constructs.ts",
   "context": {
     "solutionId": "SO0023",
-    "solutionVersion": "custom-v8.0.4",
+    "solutionVersion": "custom-v8.0.5",
     "solutionName": "dynamic-image-transformation-for-amazon-cloudfront",
     "vpcCidr": "10.0.0.0/16",
     "environment": "dev"

source/admin-ui/src/e2e-tests/package.json

@@ -25,6 +25,7 @@ import { ApiGatewayArchitecture } from "./api-gateway-architecture";
 import { S3ObjectLambdaArchitecture } from "./s3-object-lambda-architecture";
 import { SolutionsMetrics, ExecutionDay } from "metrics-utils";
 import { ConditionAspect } from "../../utils/aspects";
+import { EventSourceMappingResolver } from "../common-resources/event-source-mapping-resolver-construct";
 import { OperationalInsightsDashboard } from "../dashboard/ops-insights-dashboard";
 import { Dashboard } from "aws-cdk-lib/aws-cloudwatch";
 
@@ -225,6 +226,15 @@ export class BackEnd extends Construct {
       ).toString(),
     });
 
+    // Resolve EventSourceMapping conflicts caused by the construct ID rename (v7→v8).
+    // Only runs on first creation of this Custom Resource (i.e. the upgrade).
+    const resolverTargets = EventSourceMappingResolver.findTargetsInMetrics(solutionsMetrics);
+    if (resolverTargets) {
+      const resolver = new EventSourceMappingResolver(this, "EventSourceMappingResolver", resolverTargets);
+      resolver.addDependencyToEventSourceMappings(solutionsMetrics);
+      Aspects.of(resolver).add(new ConditionAspect(props.sendAnonymousStatistics));
+    }
+
     const conditionalCloudFrontDistributionId = Fn.conditionIf(
       props.conditions.useExistingCloudFrontDistributionCondition.logicalId,
       existingDistribution.distributionId,