chore(deps): update dependency aws-cdk-lib to v2.273.0 by renovate[bot] · Pull Request #9 · machinehead/cdk-webapp-skeleton

renovate · 2024-07-05T00:07:05Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib	`2.149.0` → `2.273.0`

Release Notes

aws/aws-cdk (aws-cdk-lib)

`v2.273.0`

Compare Source

⚠ BREAKING CHANGES

** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-appstream: AWS::AppStream::StackFleetAssociation: FleetName property is now immutable.
aws-appstream: AWS::AppStream::StackFleetAssociation: StackName property is now immutable.
aws-appsync: AWS::AppSync::ApiCache: AtRestEncryptionEnabled property is now immutable.
aws-appsync: AWS::AppSync::ApiCache: TransitEncryptionEnabled property is now immutable.
aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: OutputConfig attribute removed.
aws-cloud9: AWS::Cloud9::EnvironmentEC2: Id attribute removed.
aws-config: AWS::Config::ConfigurationRecorder: Id attribute removed.
aws-config: AWS::Config::OrganizationConfigRule: Id attribute removed.
aws-datazone: AWS::DataZone::PolicyGrant: Detail property is now required.
aws-datazone: AWS::DataZone::PolicyGrant: Principal property is now required.
aws-directoryservice: AWS::DirectoryService::MicrosoftAD: Id attribute removed.
aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.NetworkProtocol property is now required.
aws-lambda: AWS::Lambda::NetworkConnector: VpcEgressConfiguration.SecurityGroupIds property is now required.

Features

update L1 CloudFormation resource definitions (#38969) (ed0df78)
batch: add ConsumableResource L2 construct (#36971) (a12f3a1)
bedrockagentcore: support runtime platformVersion (#38924) (227423f)
cloudfront: default Distribution behaviors to redirect HTTP to HTTPS (#38721) (6ede006), closes #38599
opensearchservice: add useLatestServiceSoftwareForBlueGreen support (#38499) (6aa03e5), closes #38664 #38664
pipelines: add executionMode support in CodePipeline L3 construct (#35022) (7283d38), closes #35014

Bug Fixes

bump bundled brace-expansion to 5.0.12 (#38929) (ff25def), closes #38932
applicationautoscaling: target tracking silently ignores custom metric account and region (#36503) (5d10288), closes #36401
bedrockagentcore: accept aws-cn ECR image URIs in Runtime container URI validation (#38948) (49ac618), closes #38947
cloudfront-origins: missing OAC permissions for Function URL (#35919) (d213cc7), closes #35872 /github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts#L144-L153 /github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-cloudfront-origins/lib/function-url-origin.ts#L144-L153 /github.com/aws/aws-cdk/blob/75139b2145010bc74e8017b23450d7af95327f49/packages/aws-cdk-lib/aws-lambda/lib/function-base.ts#L577 #35725
core: validation E2001 inadvertently not enabled (#38920) (0b763a7)
eks: allow access policies on AccessEntryType.EC2 access entries (#38782) (e507e07), closes #37496
s3-deployment: Source.data objectKey can write outside the staging directory (#38921) (53439f9)

Alpha modules (2.273.0-alpha.0)

⚠ BREAKING CHANGES

redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

redshift-alpha: audit logging to cloudwatch (#36410) (f2bf5d3), closes #25755

Bug Fixes

redshift-alpha: reject PUBLIC user names (#38935) (3335407)

`v2.272.0`

Compare Source

⚠ BREAKING CHANGES

** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can
contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-servicediscovery: AWS::ServiceDiscovery::Instance: primary identifier is now ServiceId and InstanceId, so InstanceReference now requires serviceId.

Features

update L1 CloudFormation resource definitions (#38864) (3bd350b)
ec2: regional NAT Gateway (#36538) (3901dde), closes #36198
glue: support Glue version 6.0 (#38632) (372e021), closes #38631
synthetics: add environmentEncryption KMS key prop to Canary (#38750) (ec884bc), closes #38797

Bug Fixes

bedrockagentcore: browser grantUse is missing ConnectBrowserAutomationStream (#38657) (aff4a2f), closes #38656
core: synth crashes with EISDIR on cloud-placeholder directories in cdk.out (#38672) (269052d), closes #38653 #38299
lambda-nodejs: local bundling fails under AllSigned PowerShell execution policy (#38447) (edd162d), closes #38439 #37412

Alpha modules (2.272.0-alpha.0)

`v2.271.0`

Compare Source

Features

codebuild: add hostKernel to build environment (#38513) (deec895), closes #38338 #38338 #38275 #38338
kinesisanalytics-flink: add support for Flink 2.2 (#37914) (a719f53), closes #37915 #37915
lambda: add s3 object storage mode (#38745) (7c429d9), closes #38260 /github.com/aws/aws-cdk/pull/38278#discussion_r3841272090
s3tables: make tableBucketName optional on TableBucket (#37749) (90e1bea), closes #37747
render property traces with 'cdk --debug' (#38844) (da68298)

Bug Fixes

core: upgrade CloudFormation validation to latest version (#38884) (0c5e732)
ecs: support digest references in TagParameterContainerImage via imageDigest option (#37868) (f482f4f), closes #37718
ssm secret.fromSsmParameter introduces W2001 warning (#38833) (9526219), closes #38396
telemetry numbers don't allow making a good model for synth time yet (#38889) (600ffc8)
validating CloudAssembly throws Invalid URL error (#38867) (6eb07dd)
cloudwatch: iqm alarms are not rendered correctly (#38834) (7f714ce), closes #28812
core: resolveReferences should only update references that require updates on its second pass in nested stacks (#38813) (6cf5313)
core: acknowledgeWarning before emit on same construct is ignored (#38821) (e840b92), closes #38820
core: validations.acknowledge() does not respect scopes (#38789) (2f32847), closes #38495
ec2: synth-time AMI lookup leads to W9010 (#38840) (0870fcf), closes #38390

Alpha modules (2.271.0-alpha.0)

`v2.270.0`

Compare Source

⚠ BREAKING CHANGES

** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can
contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codecommit: AWS::CodeCommit::Repository: Id attribute removed.
aws-config: AWS::Config::DeliveryChannel: DeliveryFrequency property values narrowed to an enum.
aws-dms: AWS::DMS::ReplicationTask: Id attribute removed.

Features

update L1 CloudFormation resource definitions (#38823) (4386bf1)
core: add cross-resource GameLift launch-path rules (CDK-GameLift-006/007) (ba98771)
core: merge default Rego rules into explicitly registered plugins (160c8a6)
core: replace schema-covered Rego rules with cross-field invariants (07a8153)
core: ship default CloudFormation validation rules in Rego (5388c88)
core: ship default CloudFormation validation rules in Rego (#38448) (4ccdad8), closes #38456
glue: graduate to stable 🚀 (#38799) (a9e36a3)
lambda: add DirectS3Read support for S3 Files filesystem mounts (#38752) (1482712), closes #38751

Bug Fixes

apigatewayv2: missing WebSocket Lambda permissions for routes sharing one integration (#38154) (4317f8e), closes #38148
core: annotations cannot be acked without feature flag (#38772) (941f847)
ecs: correct enableManagedDraining docs to reflect CloudFormation implicit default (#37228) (74c19a3), closes #35539 /github.com/aws/aws-cdk/issues/35539#issuecomment-3319165306
s3: l2 construct Bucket replication metrics cannot be enabled without replication time control (RTC) (#35929) (cd97d96), closes #35772 /github.com/aws/aws-cdk/issues/35772#issuecomment-3427574206

Alpha modules (2.270.0-alpha.0)

`v2.269.0`

Compare Source

Features

bedrockagentcore: graduate Policy submodule to stable (#38687) (2b95e32), closes #37219
update L1 CloudFormation resource definitions (#38784) (1b5e2e0)
logs: support DELIVERY log group class (#38703) (b7a057a), closes #34338
s3-deployment: expose deployed object version IDs (#38766) (09342df), closes #38765

Bug Fixes

awslint: use a default import for chalk (#38110) (36d14e0), closes #38109 #38058
core: cdk-nag warnings cannot be suppressed (#38787) (211029f)
core: cdk-nag's findings duplicated in multi-environment apps (#38707) (4b7b2e7), closes #38483 #38135
core: tree.json generation is quadratic in the number of subtrees (#38761) (3d034b6), closes #38762
core: unnecessary warnings around builtins and AZs (#38673) (6860777)
core: upgrade CloudFormation validation to latest version (#38804) (d703eb6)
dynamodb: TableV2 emits internal grants deprecation warnings (#38806) (57b3043), closes #38709 #38399 #37892
ecs: allow ephemeralStorageGiB for Windows Fargate platform version 1.0.0 (#37589) (855dfeb), closes #37510
ecs: removing the last target group from a service is not deployed (#38776) (73100f6), closes #35446 #35446 #35452
lambda-go: escape generated go build path arguments (#38785) (279d101)
s3-deployment: sanitize all log outputs to mitigate CWE-117/93 (#37670) (47a3a38), closes #37671 #30746 #28469 #30211

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved
arguments passed through defaultArguments. Previously, a managed argument set via
defaultArguments was silently honored in SparkJob and PythonShellJob (customer
value won over the construct default) and silently ignored in RayJob (construct
default won). Both behaviors let a caller bypass the construct's security and
observability defaults with no error. Passing any of the following through
defaultArguments now throws a ValidationError at synthesis time:
construct-managed arguments — --enable-continuous-cloudwatch-log,
--continuous-log-logGroup, --continuous-log-logStreamPrefix,
--continuous-log-conversionPattern, --enable-continuous-log-filter,
--enable-metrics, --enable-observability-metrics, --enable-spark-ui,
--spark-event-logs-path, --job-language, --class, --extra-jars,
--user-jars-first, --extra-py-files, --extra-files, library-set
Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a
disabled feature (e.g. enableMetrics: false) cannot be re-enabled through
defaultArguments. Configure these through their dedicated props instead
(continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI,
className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For
example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' }
with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g.
--enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed.
It is replaced by two protected members: setManagedArgument(key, value?), which each
job class calls to declare (and, when a value is present, emit) a managed argument, and
mergeDefaultArguments(defaultArguments?), which validates the caller-supplied
defaultArguments against the accumulated reserved set and returns the merged map.

route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.
glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptions → EventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.
glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.
glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.

Features

glue-alpha: ensure job parameters consistency (#38480) (bc7dc0c)
glue-alpha: model Connection VPC placement as a value object (#38729) (f72e9fe)
glue-alpha: model partition projection variants as internal state (#38726) (16527cd)
glue-alpha: overhaul the workflow trigger API (#38579) (c8f917d)

Bug Fixes

route53resolver-alpha: association silently ignored mutationProtection and name (#38795) (5ab40b2)

`v2.268.0`

Compare Source

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-athena: AWS::Athena::Session removed.
aws-bcmdataexports: AWS::BCMDataExports::Table removed.
aws-bedrock: AWS::Bedrock::DefaultPromptRouter and AWS::Bedrock::ModelInvocationJob removed.
aws-bedrockagentcore: AWS::BedrockAgentCore::Browser, AWS::BedrockAgentCore::CodeInterpreter, and AWS::BedrockAgentCore::TokenVault removed; AWS::BedrockAgentCore::PaymentConnector ConnectorType and AWS::BedrockAgentCore::PaymentCredentialProvider CredentialProviderVendor are now immutable; AWS::BedrockAgentCore::CapacityProvider OperatingSystem allowed values in the LaunchParameters type reduced from [LINUX_X86_64, LINUX_ARM64, MAC_ARM64, WINDOWS_X86_64] to [LINUX_X86_64, LINUX_ARM64].
aws-certificatemanager: AWS::CertificateManager::Certificate Id attribute removed.
aws-chime: on both AWS::Chime::AppInstance and AWS::Chime::AppInstanceBot, the CreatedTimestamp and LastUpdatedTimestamp attribute types changed from number to string.
aws-cloudformation: AWS::CloudFormation::ResourceScan removed.
aws-codeartifact: AWS::CodeArtifact::Package removed.
aws-codebuild: AWS::CodeBuild::Sandbox removed; AWS::CodeBuild::SourceCredential Id attribute removed.
aws-dax: AWS::DAX::ParameterGroup Id attribute removed; Description property is now immutable.
aws-dms: Id attribute removed from AWS::DMS::Endpoint, AWS::DMS::EventSubscription, and AWS::DMS::ReplicationSubnetGroup; AWS::DMS::ReplicationTask MigrationType property is now immutable.
aws-docdb: Id attribute removed from AWS::DocDB::DBClusterParameterGroup and AWS::DocDB::DBSubnetGroup.
aws-dynamodb: AWS::DynamoDB::Export removed.
aws-elasticache: AWS::ElastiCache::ReservedCacheNode removed.
aws-emr: AWS::EMR::NotebookExecution removed.
aws-events: AWS::Events::Replay removed.
aws-fis: AWS::FIS::SafetyLever removed.
aws-glue:
- Id attribute removed from AWS::Glue::Classifier, AWS::Glue::Connection, AWS::Glue::CustomEntityType, AWS::Glue::DataQualityRuleset, AWS::Glue::MLTransform, AWS::Glue::SecurityConfiguration, AWS::Glue::TableOptimizer, and AWS::Glue::Workflow.
- AWS::Glue::Connection: complex-property types AuthenticationConfigurationInput and OAuth2PropertiesInput renamed to AuthenticationConfiguration and OAuth2Properties respectively.
- AWS::Glue::DataQualityRuleset: Name, TargetTable.DatabaseName, and TargetTable.TableName properties are now required; Name property is now immutable; Tags property type changed from json to map<string>.
- AWS::Glue::CustomEntityType: Name property is now immutable; Tags property is no longer recognised as resource tags.
- AWS::Glue::MLTransform: TransformEncryption property is now immutable.
aws-greengrassv2: AWS::GreengrassV2::Component and AWS::GreengrassV2::CoreDevice removed.
aws-identitystore: AWS::IdentityStore::AllGroupMemberships removed.
aws-imagebuilder: AWS::ImageBuilder::AllImageBuildVersions, AWS::ImageBuilder::AllWorkflowBuildVersions, AWS::ImageBuilder::WorkflowExecution, and AWS::ImageBuilder::WorkflowStepExecution removed.
aws-medialive: AWS::MediaLive::Offering removed.
aws-mediaconvert: AWS::MediaConvert::Preset Id attribute removed.
aws-mediapackage: AWS::MediaPackage::HarvestJob removed.
aws-memorydb: AWS::MemoryDB::MultiRegionParameterGroup and AWS::MemoryDB::ReservedNode removed.
aws-omics: AWS::Omics::Reference removed.
aws-osis: AWS::OSIS::PipelineBlueprint removed.
aws-personalize: AWS::Personalize::DataDeletionJob and AWS::Personalize::Recipe removed.
aws-redshiftserverless: AWS::RedshiftServerless::RecoveryPoint removed.
aws-route53: AWS::Route53::RecordSet GeoProximityLocation property removed, along with its supporting GeoProximityLocation and Coordinates complex-property types; Id attribute removed.
aws-sagemaker: AWS::SageMaker::ModelCardExportJob, AWS::SageMaker::MonitoringScheduleAlert, and AWS::SageMaker::TransformJob removed.
aws-ses: AWS::SES::ReceiptRuleSet Id attribute removed.
aws-signer: AWS::Signer::SigningJob removed.
aws-ssm: AWS::SSM::Session removed; AWS::SSM::Association InstanceId property is now immutable.
aws-sso: AWS::SSO::ApplicationProvider removed.
aws-stepfunctions: AWS::StepFunctions::MapRun removed.
aws-transcribe: AWS::Transcribe::MedicalTranscriptionJob removed.
aws-vpclattice: AWS::VpcLattice::ServiceNetwork SharingConfig property is now immutable.

Features

update L1 CloudFormation resource definitions (#38732) (53fdc99)
codebuild: add Node.js 24 Lambda build image constants (#38471) (41ca888), closes #38172 #34197
ec2: support CpuOptions on LaunchTemplate (#38193) (b0f7d9c), closes #38187
medialive: new AWS Elemental MediaLive L2 Construct with integration on MediaConnect L2 alpha (#38563) (730b2ee)
update L1 CloudFormation resource definitions (#38645) (e238f54)
update L1 CloudFormation resource definitions (#38693) (51234fd)
s3-deployment: run the deployment handler on arm64 (Graviton) (#37174) (c2df7a3), closes #29996

Bug Fixes

core: ignored external symlinks throw validation error (#38679) (8fd1ef6)
core: templates are not checked for circular dependencies (#38712) (688b0c1)
core: upgrade CloudFormation validation to latest version (#38668) (d5df2ee)
eks-v2: generate and export L1 constructs from aws-eks-v2 (#37640) (ecdafa9), closes #37563 #37350 #37350
s3-deployment: replace deprecated addDependency in integ test (#38684) (43c4921)

Alpha modules (2.268.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.
glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.
glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.

Features

glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#38730) (c8fafbd)

Code Refactoring

glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#38725) (604ac23)

`v2.267.0`

Compare Source

⚠ BREAKING CHANGES

kinesisfirehose: After this change, specifying an unsupported timeZone on the Firehose S3Bucket destination now throws a ValidationError during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. EST), Etc/UTC, Etc/GMT, Factory, and strings containing characters outside [a-zA-Z/_]+. Use a supported standard IANA identifier (e.g. America/New_York) or UTC for synth to pass.

Features

backup: add indexActions prop to BackupPlanRule (#34051) (b8be853), closes #34050
bedrockagentcore: add manageDeliveryResourcePolicy opt-out for runtime observability (#38372) (5fb086b), closes #38342
ci: integration test deployment on maintainer approval (#38519) (c5f6b4f), closes #37333
core: Size objects now properly stringify (#38662) (90fe151)
sqs: metricApproximateNumberOfMessagesOutstanding (#38661) (f29b27b)

Bug Fixes

assets: SymlinkFollowMode.BLOCK_EXTERNAL will throw errors while bundling (#38506) (a11e451)
bedrockagentcore: least-privilege browser recording S3 grant (#38604) (7e11d11)
ci: add environment for Atmosphere variables access (#38625) (785773e), closes #38519
cloudfront-origins: readTimeout and keepaliveTimeout reject valid values (#38432) (6251e1a), closes #38433 #18628
core: performance counters use too much memory (#38620) (d0ce23c)
core: single file bundled output should be file (#38548) (9e22774)
core: stack.node.addDependency gets slower as stacks grow (#38597) (2ab9be4), closes #38522
core: symlinks in directory bundling output (#38665) (8d8ae2c)
core: validation plugin check adds too much overhead (#38619) (df15b9f)
dynamodb: TableV2.grants.*Data does not include index resources (#37892) (e48a97f), closes #37569
dynamodb: TableV2MultiAccountReplica rejects imported tables with tokenized ARNs (#38365) (08f05e5), closes #38354
dynamodb: avoid TableGrantsProps deprecation warnings for TableV2 (#38399) (fb5c25b), closes #37221
ec2: NatInstanceProvider and NatInstanceProviderV2 always trigger the keyName deprecation warning (#38347) (47f2151), closes #30806
kinesisfirehose: add validation for customTimeZone in S3BucketProps (#38514) (8cf9f90), closes #36089
lambda: allow SnapStart for container image functions (#38680) (a5adc00), closes #38281 #38281 #38265
rds: serverlessV2 capacity props reject tokens at synth time (#38044) (b7880de), closes #38043 #9044 #31810 #32905
s3-deployment: increase default memory limit from 128MB to 1024MB (#35501) (7a04f32), closes #35487
stepfunctions-tasks: resolve EvaluateExpression paths via a values lookup (#38682) (02301ea)
stack.availabilityZones are not stable strings (#38580) (f89474a)

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
msk-alpha: support Kafka 4.2 (#38323) (97b181c)
s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)
lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

`v2.266.0`

Compare Source

Features

adding controlPlaneScalingConfig to Cluster (#36863) (94e5c1a)
update L1 CloudFormation resource definitions (#38578) (ccd2633)

Bug Fixes

ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853
sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by
dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
glue-alpha: new hasEncryptedData property (#38511) (c977e36)
glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

`v2.265.0`

Compare Source

Features

bedrock-agentcore: add StreamDeliveryResources support to Memory L2 Construct (#37527) (817c50b)
cloudwatch: support AT_LEAST expression for composite alarm rules (#37693) (974e43b), closes [#37692](https:/

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

codecov · 2024-07-05T00:08:33Z

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from b88a046 to d31ebdc Compare July 6, 2024 01:53

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.147.3~~ fix(deps): update dependency aws-cdk-lib to v2.148.0 Jul 6, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from d31ebdc to 02cd182 Compare July 11, 2024 06:43

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.148.0~~ fix(deps): update dependency aws-cdk-lib to v2.148.1 Jul 11, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 02cd182 to 5c579d0 Compare July 12, 2024 21:52

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.148.1~~ fix(deps): update dependency aws-cdk-lib to v2.149.0 Jul 12, 2024

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.149.0~~ fix(deps): update dependency aws-cdk-lib to v2.149.0 - autoclosed Jul 20, 2024

renovate Bot closed this Jul 20, 2024

renovate Bot deleted the renovate/aws-cdk-monorepo branch July 20, 2024 21:32

renovate Bot restored the renovate/aws-cdk-monorepo branch July 23, 2024 03:06

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.149.0 - autoclosed~~ fix(deps): update dependency aws-cdk-lib to v2.149.0 Jul 23, 2024

renovate Bot reopened this Jul 23, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 5c579d0 to 952d07f Compare July 23, 2024 08:24

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.149.0~~ fix(deps): update dependency aws-cdk-lib to v2.150.0 Jul 23, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 952d07f to 641309b Compare August 2, 2024 19:24

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.150.0~~ fix(deps): update dependency aws-cdk-lib to v2.151.0 Aug 2, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 641309b to fb48db3 Compare August 14, 2024 22:09

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.151.0~~ fix(deps): update dependency aws-cdk-lib to v2.151.1 Aug 14, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from fb48db3 to 4983e33 Compare August 15, 2024 07:32

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.151.1~~ fix(deps): update dependency aws-cdk-lib to v2.152.0 Aug 15, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 4983e33 to 8c02404 Compare August 20, 2024 04:39

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.152.0~~ fix(deps): update dependency aws-cdk-lib to v2.153.0 Aug 20, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 8c02404 to f406d1d Compare August 22, 2024 02:28

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.153.0~~ fix(deps): update dependency aws-cdk-lib to v2.154.0 Aug 22, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from f406d1d to bf063e3 Compare August 23, 2024 08:57

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.154.0~~ fix(deps): update dependency aws-cdk-lib to v2.154.1 Aug 23, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from bf063e3 to 117cd98 Compare August 30, 2024 03:38

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.154.1~~ fix(deps): update dependency aws-cdk-lib to v2.155.0 Aug 30, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 117cd98 to ad88e57 Compare September 6, 2024 06:48

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.160.0~~ fix(deps): update dependency aws-cdk-lib to v2.161.0 Oct 4, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from e7a211c to 3a30c30 Compare October 5, 2024 06:13

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.161.0~~ fix(deps): update dependency aws-cdk-lib to v2.161.1 Oct 5, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 3a30c30 to 1c19566 Compare October 10, 2024 22:48

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.161.1~~ fix(deps): update dependency aws-cdk-lib to v2.162.0 Oct 10, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 1c19566 to a4d93b5 Compare October 11, 2024 18:25

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.162.0~~ fix(deps): update dependency aws-cdk-lib to v2.162.1 Oct 11, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from a4d93b5 to 9465f1a Compare October 22, 2024 03:10

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.162.1~~ fix(deps): update dependency aws-cdk-lib to v2.163.0 Oct 22, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 9465f1a to 87dbcec Compare October 22, 2024 19:46

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.163.0~~ fix(deps): update dependency aws-cdk-lib to v2.163.1 Oct 22, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 87dbcec to 69a08db Compare October 24, 2024 23:19

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.163.1~~ fix(deps): update dependency aws-cdk-lib to v2.164.0 Oct 24, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 69a08db to a6f9b3b Compare October 25, 2024 19:59

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.164.0~~ fix(deps): update dependency aws-cdk-lib to v2.164.1 Oct 25, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from a6f9b3b to 4c0c971 Compare October 31, 2024 23:13

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.164.1~~ fix(deps): update dependency aws-cdk-lib to v2.165.0 Oct 31, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 4c0c971 to b2be285 Compare November 7, 2024 01:55

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.165.0~~ fix(deps): update dependency aws-cdk-lib to v2.166.0 Nov 7, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from b2be285 to 191daff Compare November 14, 2024 00:53

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.166.0~~ fix(deps): update dependency aws-cdk-lib to v2.167.0 Nov 14, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 191daff to 105a767 Compare November 15, 2024 14:17

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.167.0~~ fix(deps): update dependency aws-cdk-lib to v2.167.1 Nov 15, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 105a767 to a0473ff Compare November 19, 2024 15:54

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.167.1~~ fix(deps): update dependency aws-cdk-lib to v2.167.2 Nov 19, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from a0473ff to 22c6f40 Compare November 20, 2024 20:01

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.167.2~~ fix(deps): update dependency aws-cdk-lib to v2.168.0 Nov 20, 2024

renovate Bot force-pushed the renovate/aws-cdk-monorepo branch from 22c6f40 to 6423850 Compare November 21, 2024 09:35

renovate Bot changed the title ~~fix(deps): update dependency aws-cdk-lib to v2.168.0~~ fix(deps): update dependency aws-cdk-lib to v2.169.0 Nov 21, 2024

chore(deps): update aws-cdk monorepo to v2.258.0

8c28b1c

Navigation Menu

Repository navigation

chore(deps): update dependency aws-cdk-lib to v2.273.0 - #9

chore(deps): update dependency aws-cdk-lib to v2.273.0#9
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/aws-cdk-monorepo

renovate Bot commented Jul 5, 2024 •

edited

Loading

Uh oh!

codecov Bot commented Jul 5, 2024 •

edited

Loading

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate Bot commented Jul 5, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.273.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.272.0-alpha.0)

Features

Bug Fixes

Alpha modules (2.271.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.270.0-alpha.0)

Features

Bug Fixes

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.268.0-alpha.0)

⚠ BREAKING CHANGES

Features

Code Refactoring

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

Features

Bug Fixes

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

Features

Bug Fixes

Features

Configuration

Uh oh!

codecov Bot commented Jul 5, 2024 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

This branch has not been deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate Bot commented Jul 5, 2024 •

edited

Loading

codecov Bot commented Jul 5, 2024 •

edited

Loading