Skip to content

chore(deps): bump the cdk group across 1 directory with 2 updates - #17176

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cdk-b809b28e6b
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/cdk-b809b28e6b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the cdk group with 2 updates in the / directory: aws-cdk-lib and aws-cdk.

Updates aws-cdk-lib from 2.274.0 to 2.275.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.275.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.RelevanceScore type narrowed from number | string to number.
aws-bedrockagentcore: AWS::BedrockAgentCore::Harness: HarnessAgentCoreMemoryRetrievalConfig.TopK type narrowed from integer | string to integer.
aws-codebuild: AWS::CodeBuild::ReportGroup: Id attribute removed.
aws-dax: AWS::DAX::SubnetGroup: Id attribute removed.
aws-dms: AWS::DMS::MigrationProject: InstanceProfileArn property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: InstanceProfileName property removed (now a read-only attribute).
aws-dms: AWS::DMS::MigrationProject: MigrationProjectCreationTime property removed (now a read-only attribute).
aws-emr: AWS::EMR::InstanceFleetConfig: Id attribute removed.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.Aggregates property is now immutable.
aws-fsx: AWS::FSx::Volume: AggregateConfiguration.ConstituentsPerAggregate property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.AggregateConfiguration property is now immutable.
aws-fsx: AWS::FSx::Volume: OntapConfiguration.VolumeStyle property is now immutable.
aws-medialive: AWS::MediaLive::Input: InputNetworkLocation property type narrowed to enum (AWS | ON_PREMISES).
aws-medialive: AWS::MediaLive::Input: Type property type narrowed to enum (16 values).
aws-medialive: AWS::MediaLive::Input: Tags property type narrowed from json to Map<string, string>.
aws-medialive: AWS::MediaLive::Input: RouterDestinationSettings.AvailabilityZoneName property is now required.
aws-medialive: AWS::MediaLive::Input: RouterSettings.EncryptionType property type narrowed to enum (AUTOMATIC | SECRETS_MANAGER).
aws-medialive: AWS::MediaLive::InputSecurityGroup: Tags property type narrowed from json to Map<string, string>.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: LowLatencyHlsManifestConfiguration.FilterConfiguration type narrowed to LowLatencyHlsFilterConfiguration.
aws-mediapackagev2: AWS::MediaPackageV2::OriginEndpoint: MssManifestConfiguration.FilterConfiguration type narrowed to MssFilterConfiguration.

Features

Bug Fixes

  • core: overly defensive plugin invocation leads to slowness (#39451) (783a981)
  • stepfunctions-tasks: use a dedicated Lambda function for each EvaluateExpression task (#39436) (641ff6f)
  • add graduate tool to lerna.json (#39423) (3d6f9d3)
  • lambda-nodejs: preCompilation fails with TypeScript 6 or later (#39401) (8ce48a6)

Alpha modules (2.275.0-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.275.0-alpha.0 (2026-10-26)

2.274.0-alpha.0 (2026-10-20)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

Bug Fixes

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer

... (truncated)

Commits
  • b671f24 chore: update analytics metadata blueprints
  • 7097b9e chore(release): 2.275.0
  • a4d9f09 docs(eks): explain how to pass null helm chart values from non-typescript lan...
  • d60598a feat(lambda-nodejs): support repeated esbuild arguments (#39344)
  • 783a981 fix(core): overly defensive plugin invocation leads to slowness (#39451)
  • 5f51a82 feat(core): switch off built-in CloudFormation Validate using App prop (#39452)
  • 641ff6f fix(stepfunctions-tasks): use a dedicated Lambda function for each EvaluateEx...
  • f723c42 docs(cloudfront): document feature-flagged Function runtime default (#38601)
  • 8fb96fc feat: update L1 CloudFormation resource definitions (#39393)
  • d9505e0 feat(cloudfront): add sigv4a always-amz-auth signing for origin access contro...
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1146.1 to 2.1147.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1147.0

2.1147.0 (2026-10-30)

Features

Bug Fixes

Commits

@dependabot
dependabot Bot requested a review from a team as a code owner November 5, 2026 18:33
@dependabot dependabot Bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Nov 5, 2026
@github-actions

github-actions Bot commented Nov 5, 2026

Copy link
Copy Markdown

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

🚀 Image pushed to AWS ECR

Image digest: sha256:56f22ebe958b68e10181ea8042f5bebe734c2e5020489a07bbcd594a83eeea90

🐛 Run the image locally

The following can be used to run the image locally:

# Refer to image using the immutable digest. Find alternatives below.
IMAGE_IDENTIFIER="@sha256:56f22ebe958b68e10181ea8042f5bebe734c2e5020489a07bbcd594a83eeea90"

# Refer to image using branch tag
# IMAGE_IDENTIFIER=":branch-dependabot-npm_and_yarn-cdk-b809b28e6b"

# Refer to image using build tag
# IMAGE_IDENTIFIER=":build-33979"

# Set environment variables for the AWS CLI
AWS_PROFILE="<A_PROFILE_FROM_JANUS>"
AWS_DEFAULT_REGION="eu-west-1"

IMAGE_ACCOUNT_ID=$(aws ssm get-parameter --name /organisation/accounts/artifacts --query "Parameter.Value" --output text)
REGISTRY="${IMAGE_ACCOUNT_ID}.dkr.ecr.${AWS_DEFAULT_REGION}.amazonaws.com"
IMAGE="${REGISTRY}/guardian/dotcom-rendering/dotcom-rendering${IMAGE_IDENTIFIER}"

# Login to AWS ECR https://docs.aws.amazon.com/AmazonECR/latest/userguide/registry_auth.html
aws ecr get-login-password | docker login --username AWS --password-stdin $REGISTRY

# Pull the image
docker pull $IMAGE

# Run the image. You'll likely need to set additional flags. See https://docs.docker.com/reference/cli/docker/container/run.
docker run $IMAGE

From guardian/actions-ecr.

@github-actions

github-actions Bot commented Nov 5, 2026 •

Copy link
Copy Markdown

Bumps the cdk group with 2 updates in the / directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk-lib` from 2.274.0 to 2.275.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.275.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1146.1 to 2.1147.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1147.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1147.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.275.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump the cdk group with 2 updates chore(deps): bump the cdk group across 1 directory with 2 updates Nov 6, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/cdk-b809b28e6b branch from 87e8944 to 4856b6e Compare November 6, 2026 18:33
@akash1810
akash1810 enabled auto-merge November 9, 2026 08:20
@akash1810

Copy link
Copy Markdown
Member

@dependabot rebase

1 similar comment
@akash1810

Copy link
Copy Markdown
Member

@dependabot rebase

@dependabot @github

dependabot Bot commented on behalf of github Nov 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Nov 9, 2026
auto-merge was automatically disabled November 9, 2026 09:02

Pull request was closed

@dependabot
dependabot Bot deleted the dependabot/npm_and_yarn/cdk-b809b28e6b branch November 9, 2026 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant