Skip to content

chore(deps): bump the aws-cdk group across 1 directory with 3 updates - #2686

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/aws-cdk-e96a8e8bf0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/main/aws-cdk-e96a8e8bf0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 22, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the aws-cdk group with 3 updates in the / directory: @aws-cdk/cdk-assets-lib, @aws-cdk/toolkit-lib and aws-cdk-lib.

Updates @aws-cdk/cdk-assets-lib from 1.4.10 to 1.5.1

Release notes

Sourced from @​aws-cdk/cdk-assets-lib's releases.

@​aws-cdk/cdk-assets-lib@​v1.5.1

1.5.1 (2026-10-08)

Bug Fixes

  • asset publishing subprocess calls not published properly (#2006) (a26e409)

@​aws-cdk/cdk-assets-lib@​v1.5.0

1.5.0 (2026-09-04)

Features

@​aws-cdk/cdk-assets-lib@​v1.4.17

1.4.17 (2026-08-26)

Bug Fixes

  • cdk-assets-lib: bucket ownership cache ignores expectedAccount, can silently bypass the cross-account safety check (#1859) (7a88564), closes #1858
  • cdk-assets-lib: pLimit.dispose() doesn't stop new jobs from starting (#1877) (0696f5c), closes #1876

@​aws-cdk/cdk-assets-lib@​v1.4.16

1.4.16 (2026-08-19)

Bug Fixes

  • bucket URL is incorrect for local S3 emulators (#1625) (927a6cc)
Commits
  • a26e409 fix: asset publishing subprocess calls not published properly (#2006)
  • 71ebb9f chore(deps): upgrade dependencies (#2018)
  • b777bd3 chore(deps): upgrade dependencies (#1999)
  • a719384 chore(deps): upgrade dependencies (#1977)
  • fa68b1c chore(deps): upgrade dependencies (#1961)
  • bebc0f2 chore(deps): upgrade dependencies (#1948)
  • 0f07983 feat(cdk-assets): redact secret-bearing flag values from logged docker comman...
  • 6ae45d7 chore(deps): upgrade dependencies (#1913)
  • 5766544 chore: ban direct child_process and shell:true outside the subprocess tool (#...
  • 0696f5c fix(cdk-assets-lib): pLimit.dispose() doesn't stop new jobs from starting (#1...
  • Additional commits viewable in compare view

Updates @aws-cdk/toolkit-lib from 1.28.0 to 1.44.1

Release notes

Sourced from @​aws-cdk/toolkit-lib's releases.

@​aws-cdk/toolkit-lib@​v1.44.1

1.44.1 (2026-10-22)

Bug Fixes

  • cli: cdk deploy --method=execute-change-set asks for approval without showing the diff (#2072) (8c52d44), closes #2071, references #1585 #1585

@​aws-cdk/toolkit-lib@​v1.44.0

1.44.0 (2026-10-20)

Features

Bug Fixes

@​aws-cdk/toolkit-lib@​v1.43.0

1.43.0 (2026-10-08)

Features

Bug Fixes

@​aws-cdk/toolkit-lib@​v1.42.1

1.42.1 (2026-09-30)

@​aws-cdk/toolkit-lib@​v1.42.0

1.42.0 (2026-09-23)

Features

... (truncated)

Commits
  • 8c52d44 fix(cli): cdk deploy --method=execute-change-set asks for approval without ...
  • 60e0a2d fix(toolkit-lib): region lookup ignores AWS_EC2_METADATA_DISABLED (#2049)
  • 2e67f12 chore(deps): upgrade dependencies (#2052)
  • 1b0155a fix(toolkit-lib): change-set diff hides an added key in a JSON string with an...
  • 0b4f9eb fix(toolkit-lib): restore the replacement guard when rollback is disabled (#2...
  • df34416 fix(toolkit-lib): paginate stack resource drift results (#2028)
  • 9091cb5 fix(toolkit-lib): commands fail when deployed template has duplicate keys (#2...
  • fa91c9c fix(toolkit-lib): list the resources of each stack once during hotswap evalua...
  • 3589463 chore(deps): upgrade dependencies (#2037)
  • 133dfa4 feat(toolkit-lib): support CloudFormation rollback triggers (#1881)
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.262.1 to 2.274.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.274.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.
aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.
aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map<string, string>.
aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.
aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).

Features

  • update L1 CloudFormation resource definitions (#39139) (8a10135)
  • cloudfront: add always-amz-auth signing behavior for origin access control (#39196) (7cf79a1), closes #39195 #38629
  • cloudfront: add sigv4a signing protocol for origin access control (#38629) (805bfbe), closes #38627 #38627
  • codebuild: add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_STANDARD_4_0 images (#37588) (3beecb3), closes #37586

Bug Fixes

  • apigateway: log group destination ARN causes permanent Stage drift (#38816) (65c6aa0), closes #38796
  • bedrockagentcore: Runtime annotations cannot be acknowledged (#38770) (165bf8b), closes #38741
  • core: can't trace construct to template for nested stacks (#39141) (173a2ff)
  • core: preserve unresolved Tags property tokens (#37759) (644489c), closes #37734
  • core: validations with different messages are confusingly combined (#39132) (54fb0ea), closes #38982
  • stepfunctions: default StateMachine IAM role  missing confused deputy protection best practices (#37688) (638a681), closes #37567 #37567 #37567

Alpha modules (2.274.0-alpha.0)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

v2.273.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-appstream: AWS::AppStream::StackFleetAssociation: FleetName property is now immutable. aws-appstream: AWS::AppStream::StackFleetAssociation: StackName property is now immutable. aws-appsync: AWS::AppSync::ApiCache: AtRestEncryptionEnabled property is now immutable.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.274.0-alpha.0 (2026-10-20)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

Bug Fixes

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and

... (truncated)

Commits
  • 73c853e chore: update analytics metadata blueprints
  • 0592a9c chore(release): 2.274.0
  • f6ad73c chore: npm-check-updates && yarn upgrade (#38488)
  • a74fc58 chore(deps): upgrade @​aws-cdk/cloud-assembly-api to ^2.5.0 (#39349)
  • dcd8b3a chore(deps): upgrade @​aws-cdk/cloud-assembly-schema to ^55.0.0 (#39314)
  • 54fb0ea fix(core): validations with different messages are confusingly combined (#39132)
  • e111402 chore(bedrock-alpha): add OpenAI GPT-6 and GPT-6.1 foundation models (#38927)
  • 8a10135 feat: update L1 CloudFormation resource definitions (#39139)
  • 3beecb3 feat(codebuild): add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_...
  • 65c6aa0 fix(apigateway): log group destination ARN causes permanent Stage drift (#38816)
  • Additional commits viewable in compare view

@dependabot
dependabot Bot requested a review from a team October 22, 2026 23:06
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 22, 2026
@github-actions github-actions Bot added size/xl PR size: XL and removed size/xl PR size: XL labels Oct 22, 2026
Bumps the aws-cdk group with 3 updates in the / directory: [@aws-cdk/cdk-assets-lib](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/cdk-assets-lib), [@aws-cdk/toolkit-lib](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/toolkit-lib) and [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib).


Updates `@aws-cdk/cdk-assets-lib` from 1.4.10 to 1.5.1
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/cdk-assets-lib@v1.5.1/packages/@aws-cdk/cdk-assets-lib)

Updates `@aws-cdk/toolkit-lib` from 1.28.0 to 1.44.1
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/toolkit-lib@v1.44.1/packages/@aws-cdk/toolkit-lib)

Updates `aws-cdk-lib` from 2.262.1 to 2.274.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.274.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: "@aws-cdk/cdk-assets-lib"
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: "@aws-cdk/toolkit-lib"
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.273.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the aws-cdk group with 3 updates chore(deps): bump the aws-cdk group across 1 directory with 3 updates Oct 26, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/main/aws-cdk-e96a8e8bf0 branch from 29ed7a6 to 31ff6b7 Compare October 26, 2026 14:55
@github-actions github-actions Bot added size/l PR size: L and removed size/xl PR size: XL size/l PR size: L labels Oct 26, 2026

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code size/l PR size: L

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants