Merge branch 'main' into dependabot/npm_and_yarn/modules/fmops/sagemaker-hugging-face-endpoint/lodash-4.17.23

Author: weklund

CHANGELOG.md

@@ -11,6 +11,12 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
 
 ### **Changed**
 
+- fixed duplicate principal error in `sagemaker-templates` module when dev, pre-prod, and prod account IDs resolve to the same AWS account
+- fixed `sagemaker-templates` Model Deploy seed code incorrectly granting S3 permissions to a ManagedPolicy instead of a Role, which caused deployment failures with CDK 2.174.0+
+- update qs to 6.14.1 via npm override to address security vulnerability
+- pin @cdklabs/generative-ai-cdk-constructs to 0.1.311 to fix build compatibility
+- update starlette to 0.50.0 and fastapi to 0.128.0 to address security vulnerabilities
+
 ## v3.1.0
 
 ### **Added**

modules/examples/mlops-stepfunctions/requirements.in

@@ -5,6 +5,8 @@ pydantic==2.7.4
 pydantic-settings==2.3.3
 aws-cdk-aws-lambda-python-alpha==2.153.0a0
 sagemaker>=2.237.3
+fastapi>=0.115.13
+starlette>=0.47.2
 pandas==2.2.2
 scikit-learn==1.5.1
 joblib-stubs==1.4.2.3.20240619

modules/examples/mlops-stepfunctions/requirements.txt

@@ -1,13 +1,13 @@
 # This file was autogenerated by uv via the following command:
 #    uv pip compile requirements.in -o requirements.txt
+annotated-doc==0.0.4
+    # via fastapi
 annotated-types==0.7.0
     # via pydantic
 antlr4-python3-runtime==4.9.3
     # via omegaconf
 anyio==3.7.1
-    # via
-    #   fastapi
-    #   starlette
+    # via starlette
 attrs==23.2.0
     # via
     #   cattrs
@@ -60,8 +60,10 @@ dill==0.3.8
     #   pathos
 docker==7.1.0
     # via sagemaker
-fastapi==0.103.2
-    # via sagemaker
+fastapi==0.128.0
+    # via
+    #   -r requirements.in
+    #   sagemaker
 google-pasta==0.2.0
     # via sagemaker
 h11==0.16.0
@@ -208,8 +210,10 @@ smdebug-rulesconfig==1.0.1
     # via sagemaker
 sniffio==1.3.1
     # via anyio
-starlette==0.27.0
-    # via fastapi
+starlette==0.50.0
+    # via
+    #   -r requirements.in
+    #   fastapi
 tblib==3.0.0
     # via sagemaker
 threadpoolctl==3.5.0
@@ -229,13 +233,14 @@ types-pytz==2024.1.0.20240417
     # via pandas-stubs
 types-pyyaml==6.0.12.20240808
     # via -r requirements.in
-typing-extensions==4.7.1
+typing-extensions==4.15.0
     # via
     #   fastapi
     #   joblib-stubs
     #   jsii
     #   pydantic
     #   pydantic-core
+    #   starlette
 tzdata==2024.1
     # via pandas
 urllib3==2.6.3