Skip to content

chore(deps): update aws-cdk-lib - #565

Open
renovate[bot] wants to merge 1 commit into
mainlinefrom
renovate/aws-cdk-lib
Open

renovate[bot] wants to merge 1 commit into
mainlinefrom
renovate/aws-cdk-lib

Conversation

@renovate

@renovate renovate Bot commented Sep 12, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
aws-cdk (source) 2.1140.02.1142.0 age adoption passing confidence
aws-cdk-lib (source) 2.268.02.270.0 age adoption passing confidence

Release Notes

aws/aws-cdk-cli (aws-cdk)

v2.1142.0

Compare Source

2.1142.0 (2026-09-16)

Features
Bug Fixes

v2.1141.0

Compare Source

2.1141.0 (2026-09-09)

Features
aws/aws-cdk (aws-cdk-lib)

v2.270.0

Compare Source

⚠ BREAKING CHANGES
  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can
    contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    aws-codecommit: AWS::CodeCommit::Repository: Id attribute removed.
    aws-config: AWS::Config::DeliveryChannel: DeliveryFrequency property values narrowed to an enum.
    aws-dms: AWS::DMS::ReplicationTask: Id attribute removed.

Features
  • update L1 CloudFormation resource definitions (#​38823) (4386bf1)
  • core: add cross-resource GameLift launch-path rules (CDK-GameLift-006/007) (ba98771)
  • core: merge default Rego rules into explicitly registered plugins (160c8a6)
  • core: replace schema-covered Rego rules with cross-field invariants (07a8153)
  • core: ship default CloudFormation validation rules in Rego (5388c88)
  • core: ship default CloudFormation validation rules in Rego (#​38448) (4ccdad8), closes #​38456
  • glue: graduate to stable 🚀 (#​38799) (a9e36a3)
  • lambda: add DirectS3Read support for S3 Files filesystem mounts (#​38752) (1482712), closes #​38751
Bug Fixes

Alpha modules (2.270.0-alpha.0)

v2.269.0

Compare Source

Features
Bug Fixes

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES
  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved
    arguments passed through defaultArguments. Previously, a managed argument set via
    defaultArguments was silently honored in SparkJob and PythonShellJob (customer
    value won over the construct default) and silently ignored in RayJob (construct
    default won). Both behaviors let a caller bypass the construct's security and
    observability defaults with no error. Passing any of the following through
    defaultArguments now throws a ValidationError at synthesis time:
  • construct-managed arguments — --enable-continuous-cloudwatch-log,
    --continuous-log-logGroup, --continuous-log-logStreamPrefix,
    --continuous-log-conversionPattern, --enable-continuous-log-filter,
    --enable-metrics, --enable-observability-metrics, --enable-spark-ui,
    --spark-event-logs-path, --job-language, --class, --extra-jars,
    --user-jars-first, --extra-py-files, --extra-files, library-set
  • Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a
disabled feature (e.g. enableMetrics: false) cannot be re-enabled through
defaultArguments. Configure these through their dedicated props instead
(continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI,
className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For
example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' }
with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g.
--enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed.
It is replaced by two protected members: setManagedArgument(key, value?), which each
job class calls to declare (and, when a value is present, emit) a managed argument, and
mergeDefaultArguments(defaultArguments?), which validates the caller-supplied
defaultArguments against the accumulated reserved set and returns the merged map.

  • route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.
  • glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptionsEventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.
  • glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.
  • glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.
Features
Bug Fixes
  • route53resolver-alpha: association silently ignored mutationProtection and name (#​38795) (5ab40b2)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on saturday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@github-actions

Copy link
Copy Markdown

Diff for stage: DefaultStage

Warning

3 Destructive Changes

No Changes for stack: GitHubOidcStack ✅

Diff for stack: Service-prod - 3 to add, 3 to update, 3 to destroy

Details

[!WARNING]
Destructive Changes ‼️
Stack: Service-prod - Resource: AuthApiDeploymentB62B2E46bda7a3ee526845c6f831f98a8023195f - Impact: WILL_DESTROY

Stack: Service-prod - Resource: TokenApiDeploymentB896C219ee4433fd7a430b8eb183e22b78e32990 - Impact: WILL_DESTROY

Stack: Service-prod - Resource: ProfileApiDeployment84A54415750bd55753532dd2ebecd42716cf4155 - Impact: WILL_DESTROY

Resources
[-] AWS::ApiGateway::Deployment AuthApiDeploymentB62B2E46bda7a3ee526845c6f831f98a8023195f destroy
[-] AWS::ApiGateway::Deployment TokenApiDeploymentB896C219ee4433fd7a430b8eb183e22b78e32990 destroy
[-] AWS::ApiGateway::Deployment ProfileApiDeployment84A54415750bd55753532dd2ebecd42716cf4155 destroy
[+] AWS::ApiGateway::Deployment AuthApiDeploymentB62B2E46ac99c3a69dd45f19958cb37bb317091a
[+] AWS::ApiGateway::Deployment TokenApiDeploymentB896C21940d30031daf269dad58a2f6f3cd50e46
[+] AWS::ApiGateway::Deployment ProfileApiDeployment84A54415225de1b126ba8d19e1f58d99b83b22e1
[~] AWS::ApiGateway::Stage AuthApiDeploymentStageprodB0E4172A
 └─ [~] DeploymentId
     └─ [~] .Ref:
         ├─ [-] AuthApiDeploymentB62B2E46bda7a3ee526845c6f831f98a8023195f
         └─ [+] AuthApiDeploymentB62B2E46ac99c3a69dd45f19958cb37bb317091a
[~] AWS::ApiGateway::Stage TokenApiDeploymentStageprod11035AE4
 └─ [~] DeploymentId
     └─ [~] .Ref:
         ├─ [-] TokenApiDeploymentB896C219ee4433fd7a430b8eb183e22b78e32990
         └─ [+] TokenApiDeploymentB896C21940d30031daf269dad58a2f6f3cd50e46
[~] AWS::ApiGateway::Stage ProfileApiDeploymentStageprodF609D968
 └─ [~] DeploymentId
     └─ [~] .Ref:
         ├─ [-] ProfileApiDeployment84A54415750bd55753532dd2ebecd42716cf4155
         └─ [+] ProfileApiDeployment84A54415225de1b126ba8d19e1f58d99b83b22e1

Diff for stack: Frontend-prod - 0 to add, 0 to update, 0 to destroy

Details
Resources
[~] AWS::Lambda::Function CustomCDKBucketDeployment8693BB64968944B69AAFB0CC9EB8756C81C01536
 ├─ [~] Code
 │   └─ [~] .S3Key:
 │       ├─ [-] 97e9ebf0b174a5c8f7faa505739022b7f509edddffcab9211dcd08b759944c4f.zip
 │       └─ [+] 35328da138f26fbd9160297abc9a2522d93dbf75878cd5114a9c050419fc1ce0.zip
 └─ [~] Metadata
     └─ [~] .aws:asset:path:
         ├─ [-] asset.97e9ebf0b174a5c8f7faa505739022b7f509edddffcab9211dcd08b759944c4f
         └─ [+] asset.35328da138f26fbd9160297abc9a2522d93dbf75878cd5114a9c050419fc1ce0

No Changes for stack: Monitoring-prod ✅

Generated for commit c092deb at 2026-09-12T01:19:35.255Z

@renovate

renovate Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json
npm warn Unknown env config "store". This will error in a future major version of npm. See `npm help npmrc` for supported config options.
npm error code EALLOWREMOTE
npm error Fetching packages of type "remote" have been disabled
npm error Refusing to fetch "https://registry.npmjs.org/aws-cdk-lib/-/aws-cdk-lib-2.270.0.tgz"
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2026-09-17T22_39_12_967Z-debug-0.log

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants