Skip to content

chore(deps): bump the aws-cdk group across 1 directory with 3 updates - #5524

Merged
svozza merged 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-f7858dae53
Aug 18, 2026
Merged

chore(deps): bump the aws-cdk group across 1 directory with 3 updates#5524
svozza merged 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-f7858dae53

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the aws-cdk group with 3 updates in the / directory: @aws-cdk/toolkit-lib, aws-cdk-lib and aws-cdk.

Updates @aws-cdk/toolkit-lib from 1.35.0 to 1.38.2

Release notes

Sourced from @​aws-cdk/toolkit-lib's releases.

@​aws-cdk/toolkit-lib@​v1.38.2

1.38.2 (2026-08-12)

Bug Fixes

  • toolkit-lib: refactor digest ignores the properties of resources that have a DependsOn attribute (#1813) (c1c46b0), closes #1811

@​aws-cdk/toolkit-lib@​v1.38.1

1.38.1 (2026-08-07)

Bug Fixes

  • cli: REVERT hotswap fallback deployments use standard mode (#1801) (6551740)

@​aws-cdk/toolkit-lib@​v1.38.0

1.38.0 (2026-08-03)

Features

  • toolkit-lib: diagnose hook failures in the central stack diagnoser (#1786) (8c37fc4)

Bug Fixes

@​aws-cdk/toolkit-lib@​v1.37.0

1.37.0 (2026-07-30)

Features

  • toolkit-lib: add watchValidate action and cdk validate --watch (#1771) (49eaa58), closes #1762
  • toolkit-lib: simplify deploy approval message and surface auto-confirm (#1585) (0062024), closes #828
  • toolkit-lib: surface CloudTrail control-plane errors for failed resources (#1676) (7ca5b57)
  • toolkit-lib: Use COLUMNS env var for tables (#1704) (53368d1)

Bug Fixes

... (truncated)

Commits
  • c1c46b0 fix(toolkit-lib): refactor digest ignores the properties of resources that ha...
  • 3d19877 chore(deps): upgrade dependencies (#1806)
  • 6551740 fix(cli): REVERT hotswap fallback deployments use standard mode (#1801)
  • b6a2d8d chore(deps): upgrade dependencies (#1794)
  • ee9a40c fix(toolkit-lib): refactor ignores a custom toolkit stack name (#1791)
  • 8c37fc4 feat(toolkit-lib): diagnose hook failures in the central stack diagnoser (#1786)
  • 129b1ae fix: change-set diff can miss changes to JSON-typed properties (#1785)
  • 62a6b2c chore: migrate repo tooling and docs from ts-node to tsx (#1783)
  • 957c309 chore: revert "refactor: migrate all subprocess call sites to the shared subp...
  • e8aaa6b refactor: migrate all subprocess call sites to the shared subprocess module (...
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.261.0 to 2.265.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.265.0

Features

Bug Fixes

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

v2.264.0

⚠ BREAKING CHANGES

  • bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the old dimensions must be updated.
  • bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

2.264.0-alpha.0 (2026-08-10)

⚠ BREAKING CHANGES

  • glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated accordingly.

Features

Bug Fixes

  • glue-alpha: enable key rotation for security configuration encryption (#38512) (18560e0)
  • mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#38515) (3c71466), closes #38517

2.263.0-alpha.0 (2026-07-31)

⚠ BREAKING CHANGES

  • mediaconnect: removalPolicy prop removed from FlowProps, GatewayProps, and BridgeProps. These resources now follow CloudFormation's default deletion behaviour (Delete).

... (truncated)

Commits
  • 3c8d99e chore: update analytics metadata blueprints
  • a29b5c0 fix(secretsmanager): correct SAR rotation app versions for GovCloud (#38462)
  • 974e43b feat(cloudwatch): support AT_LEAST expression for composite alarm rules (#37693)
  • e322035 fix(cloudwatch): make concrete widgets assignable to widget interface (#37695)
  • b98477b chore(core): update feature flag documentation for @​aws-cdk/core:defaultCross...
  • 000f532 feat(ec2): add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#37900)
  • 6e05a63 chore: yarn upgrade dependencies requiring intervention (#38125)
  • 817c50b feat(bedrock-agentcore): add StreamDeliveryResources support to Memory L2 Con...
  • fcf54bf feat(docdb): add managed password support (#35711)
  • da4281e feat(ec2): add volume initialization rate to ebs props for launchtemplate (#3...
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1132.0 to 2.1136.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1136.0

2.1136.0 (2026-08-12)

Features

aws-cdk@v2.1135.1

2.1135.1 (2026-08-07)

aws-cdk@v2.1135.0

2.1135.0 (2026-08-03)

Features

Bug Fixes

aws-cdk@v2.1134.0

2.1134.0 (2026-07-30)

Features

  • deps: upgrade aws-cdk-lib (#1764) (2089d55)
  • toolkit-lib: add watchValidate action and cdk validate --watch (#1771) (49eaa58), closes #1762
  • toolkit-lib: simplify deploy approval message and surface auto-confirm (#1585) (0062024), closes #828
  • toolkit-lib: surface CloudTrail control-plane errors for failed resources (#1676) (7ca5b57)
  • toolkit-lib: Use COLUMNS env var for tables (#1704) (53368d1)

Bug Fixes

  • cli: version check trusts stale registry mirrors and recommends non-upgrades (#1769) (d818543)
  • route metadata through toolkit-lib (#1747) (b81e875)

aws-cdk@v2.1133.0

... (truncated)

Commits
  • 536ad69 feat(deps): upgrade aws-cdk-lib (#1820)
  • 3d19877 chore(deps): upgrade dependencies (#1806)
  • c1228cd chore(deps): bump ip-address from 10.2.0 to 10.4.0 (#1796)
  • 0fa27ff feat(deps): upgrade aws-cdk-lib (#1795)
  • b6a2d8d chore(deps): upgrade dependencies (#1794)
  • ee9a40c fix(toolkit-lib): refactor ignores a custom toolkit stack name (#1791)
  • 129b1ae fix: change-set diff can miss changes to JSON-typed properties (#1785)
  • 43f30d1 feat(deps): upgrade aws-cdk-lib (#1787)
  • 2189832 chore: aws-cdk-lib upgrade workflow fails on yarn age gate (#1784)
  • 62a6b2c chore: migrate repo tooling and docs from ts-node to tsx (#1783)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Changes that touch dependencies, e.g. Dependabot, etc. javascript Pull requests that update Javascript code labels Jul 31, 2026
@powertools-for-aws-oss-automation powertools-for-aws-oss-automation Bot added the size/S PR between 10-29 LOC label Aug 3, 2026
@svozza

svozza commented Aug 6, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-f7858dae53 branch from 24e2159 to 86d056d Compare August 6, 2026 22:08
@dreamorosi

dreamorosi commented Aug 7, 2026

Copy link
Copy Markdown
Contributor

@svozza this will continue failing the Dependency Review CI check until CDK actually bumps the vulnerable dependency.

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-f7858dae53 branch 7 times, most recently from ee1dfb5 to e4d47a1 Compare August 12, 2026 13:19
@dreamorosi

dreamorosi commented Aug 12, 2026

Copy link
Copy Markdown
Contributor

@dependabot recreate

@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-f7858dae53 branch 4 times, most recently from 9f7ad0a to 526ca36 Compare August 16, 2026 00:16
@dependabot
chore(deps): bump the aws-cdk group across 1 directory with 3 updates
dab739f 
Bumps the aws-cdk group with 3 updates in the / directory: [@aws-cdk/toolkit-lib](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/toolkit-lib), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `@aws-cdk/toolkit-lib` from 1.35.0 to 1.38.2
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/toolkit-lib@v1.38.2/packages/@aws-cdk/toolkit-lib)

Updates `aws-cdk-lib` from 2.261.0 to 2.265.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.265.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1132.0 to 2.1136.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1136.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: "@aws-cdk/toolkit-lib"
  dependency-version: 1.36.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk
  dependency-version: 2.1133.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.262.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-f7858dae53 branch from 526ca36 to dab739f Compare August 17, 2026 20:46
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
@svozza
svozza deployed to e2e-tests August 18, 2026 09:37 — with GitHub Actions Active
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@svozza svozza svozza approved these changes

Assignees

No one assigned

Labels

dependencies Changes that touch dependencies, e.g. Dependabot, etc. javascript Pull requests that update Javascript code size/S PR between 10-29 LOC

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@svozza @dreamorosi