[Snyk] Security upgrade aws-amplify from 4.3.13 to 5.2.6

[zachjonesnoel]

This PR was automatically created by Snyk using the credentials of a real user.

Snyk has created this PR to fix one or more vulnerable packages in the `npm` dependencies of this project.

Changes included in this PR

• Changes to the following files to upgrade the vulnerable dependencies to a fixed version:
  • package.json
  • package-lock.json

Vulnerabilities that will be fixed

With an upgrade:

Severity	Priority Score (*)	Issue	Breaking Change	Exploit Maturity
	661/1000 Why? Recently disclosed, Has a fix available, CVSS 7.5	Regular Expression Denial of Service (ReDoS) SNYK-JS-FASTXMLPARSER-5668858	Yes	No Known Exploit

(*) Note that the real score may have changed since the PR was raised.

Commit messages

Package name: aws-amplify

The new version differs by 250 commits.

• 67aa321 chore(release): Publish [ci skip]
• ecab61a release(required): Amplify JS release (#11497)
• 129e35f fix: Update AmazonAIConvertPredictionsProvider.ts (#11453)
• 3d17208 chore: update sdk client patch versions for fast-xml-parser security update (#11489)
• 08fc7ee chore: Pins the version of `url` used in the library (#11494)
• b2ad835 fix: Update playwright image version (#11493)
• 15353e0 chore(geo): update size limit (#11462)
• 3e5e6f9 chore: run all size tests before process exists (#11382)
• f7d127d chore(release): update API docs [ci skip]
• 6a84560 chore(release): Publish [ci skip]
• c370e9a release: Amplify JS release (#11458)
• 2d934a3 feat(clients): use custom cognito-identity and pinpoint clients (#11427)
• e402fa7 Merge branch 'main' into v5/custom-clients
• c38d4c6 fix: Core build issue (#11449)
• 2d6eecf fix: address feedbacks
• 47ff2e1 chore: prepare for release; split out data packages diffs
• e718b47 Merge branch 'main' into v5/custom-clients
• f576be5 fix(clients): middleware chain revert after every invocation (#11432)
• ffe65ea chore: Add GitHub workflow for detecting changes to `aws-amplify` package.json (#11416)
• 94da23c Merge remote-tracking branch 'upstream/main' into v5/custom-clients (#11428)
• 1699ab6 Merge remote-tracking branch 'upstream/main' into v5/custom-clients
• 2e8acaa chore(release): update API docs [ci skip]
• e7a6f07 chore(release): Publish [ci skip]
• aefcff2 release(required): Amplify JS release (#11415)

See the full diff

Check the changes in this PR to ensure they won't cause issues with your project.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report

🛠 Adjust project settings

📚 Read more about Snyk's upgrade and patch logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Regular Expression Denial of Service (ReDoS)