Skip to content

chore(deps): bump the aws-cdk group across 1 directory with 3 updates - #5590

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-420ae29068
Open

chore(deps): bump the aws-cdk group across 1 directory with 3 updates#5590
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-420ae29068

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 26, 2026

Copy link
Copy Markdown
Contributor

Bumps the aws-cdk group with 3 updates in the / directory: @aws-cdk/toolkit-lib, aws-cdk-lib and aws-cdk.

Updates @aws-cdk/toolkit-lib from 1.38.2 to 1.39.0

Release notes

Sourced from @​aws-cdk/toolkit-lib's releases.

@​aws-cdk/toolkit-lib@​v1.39.0

1.39.0 (2026-08-19)

Features

Bug Fixes

  • bucket URL is incorrect for local S3 emulators (#1625) (927a6cc)
  • toolkit-lib: asset publisher cache ignores environment on cache hit (#1839) (88f6ad1), closes #1838
  • toolkit-lib: downstream stack selection uses wrong key for nested stacks (#1835) (a80074a), closes #1834
  • toolkit-lib: drift numResourcesUnchecked ignores UNKNOWN-status resources (#1837) (4374bc6), closes #1836
  • toolkit-lib: drop the deep clone used to remove one metadata key (#1826) (a826ad8), closes #1823 #1824
  • toolkit-lib: fail gc on ECR tagging permission errors (#1828) (8e19558), closes #347
  • toolkit-lib: hotswap deployments fail with TypeError when a nested stack output joins a List<> parameter (#1842) (bee9159), closes #1829
  • toolkit-lib: hotswap silently drops empty-string Lambda Description (#1831) (da4c982), closes #1830
  • toolkit-lib: NoStack masks the real error when a new stack fails to deploy (#1845) (a9a23b4), closes #1802 #1803 #1802
  • toolkit-lib: stale REVIEW_IN_PROGRESS read fails a running deployment (#1848) (9321643), closes #1802 #1803

@​aws-cdk/toolkit-lib@​v1.38.3

1.38.3 (2026-08-17)

Bug Fixes

  • cli: deployments skipped even though changes exist when previous deployment was with hotswap (#1819) (52c292d)
  • toolkit-lib: clean up the diff change set when early validation fails (#1821) (750d650), closes #1767
  • toolkit-lib: every change-set deployment announces "waiting in review for manual execution (--no-execute)" although the change set is executed (#1818) (86ee97e), closes #1815 #1273
Commits
  • a4c0282 feat(cli): add "errors-only" progress mode that only prints errors (#1800)
  • 9321643 fix(toolkit-lib): stale REVIEW_IN_PROGRESS read fails a running deployment (#...
  • 4374bc6 fix(toolkit-lib): drift numResourcesUnchecked ignores UNKNOWN-status resource...
  • 8e19558 fix(toolkit-lib): fail gc on ECR tagging permission errors (#1828)
  • a80074a fix(toolkit-lib): downstream stack selection uses wrong key for nested stacks...
  • a826ad8 fix(toolkit-lib): drop the deep clone used to remove one metadata key (#1826)
  • 927a6cc fix: bucket URL is incorrect for local S3 emulators (#1625)
  • b409e72 docs(toolkit-lib): fix resource import mapping docs to say keys are logical I...
  • f8e7da1 feat(cli): support notification-arns in cdk import (#1740)
  • 88f6ad1 fix(toolkit-lib): asset publisher cache ignores environment on cache hit (#1839)
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.265.0 to 2.266.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.266.0

Features

Bug Fixes

  • ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853
  • sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

  • glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
  • glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
  • mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

  • glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
  • glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
  • mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)

... (truncated)

Commits
  • 0163b4c chore: update analytics metadata blueprints
  • ccd2633 feat: update L1 CloudFormation resource definitions (#38578)
  • f0207a1 docs(s3): clarify cross-account replication ownership (#38349)
  • ab272bc fix(ec2): add DependsOn VPCGatewayAttachment to IPv6 default route (#37893)
  • 834909b docs(aws_elasticloadbalancerv2): documentation Update for multiValueHeaderEna...
  • ebb622f Merge branch 'main' into merge-back/2.265.0
  • 67a7eb1 fix(sns-subscriptions): use regionalized service principal for opt-in region ...
  • 94e5c1a feat: adding controlPlaneScalingConfig to Cluster (#36863)
  • See full diff in compare view

Updates aws-cdk from 2.1136.0 to 2.1138.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

Features

Bug Fixes

  • cli: cdk context header always claims the context was found in cdk.json (#1816) (b7783b5), closes #1814
  • cli: cdk flags --set leaks synthesized cloud assembly directories (#1833) (fd891fb), closes #1832
  • cli: fail fast when --proxy has no or an unsupported protocol (#1843) (da37001), closes #453
  • cli: refactor fails on stacks with bundled assets (#1812) (8458a4a), closes #1810
  • cli: reject non-numeric ids in cdk acknowledge (#1844) (c71ab23), closes #248

aws-cdk@v2.1137.0

2.1137.0 (2026-08-17)

Features

Bug Fixes

  • toolkit-lib: every change-set deployment announces "waiting in review for manual execution (--no-execute)" although the change set is executed (#1818) (86ee97e), closes #1815 #1273
Commits
  • a4c0282 feat(cli): add "errors-only" progress mode that only prints errors (#1800)
  • 8458a4a fix(cli): refactor fails on stacks with bundled assets (#1812)
  • fd891fb fix(cli): cdk flags --set leaks synthesized cloud assembly directories (#1833)
  • f8e7da1 feat(cli): support notification-arns in cdk import (#1740)
  • da37001 fix(cli): fail fast when --proxy has no or an unsupported protocol (#1843)
  • bcc0f2b chore(deps): upgrade dependencies (#1841)
  • b7783b5 fix(cli): cdk context header always claims the context was found in cdk.json ...
  • c71ab23 fix(cli): reject non-numeric ids in cdk acknowledge (#1844)
  • 0b2e50a feat(deps): upgrade aws-cdk-lib (#1840)
  • 86ee97e fix(toolkit-lib): every change-set deployment announces "waiting in review fo...
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Changes that touch dependencies, e.g. Dependabot, etc. javascript Pull requests that update Javascript code labels Aug 26, 2026
Bumps the aws-cdk group with 3 updates in the / directory: [@aws-cdk/toolkit-lib](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/toolkit-lib), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `@aws-cdk/toolkit-lib` from 1.38.2 to 1.39.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/toolkit-lib@v1.39.0/packages/@aws-cdk/toolkit-lib)

Updates `aws-cdk-lib` from 2.265.0 to 2.266.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.266.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1136.0 to 2.1138.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1138.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: "@aws-cdk/toolkit-lib"
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk
  dependency-version: 2.1138.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.266.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-420ae29068 branch from e6a4a79 to 503cda3 Compare August 27, 2026 01:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes that touch dependencies, e.g. Dependabot, etc. javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants