Skip to content

deps(npm)(deps): bump the javascript-minor-and-patch group across 1 directory with 3 updates - #342

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk/javascript-minor-and-patch-69e2e7adf4
Open

deps(npm)(deps): bump the javascript-minor-and-patch group across 1 directory with 3 updates#342
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk/javascript-minor-and-patch-69e2e7adf4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the javascript-minor-and-patch group with 3 updates in the /src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk directory: aws-cdk-lib, @types/node and aws-cdk.

Updates aws-cdk-lib from 2.265.0 to 2.267.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.267.0

⚠ BREAKING CHANGES

  • kinesisfirehose: After this change, specifying an unsupported timeZone on the Firehose S3Bucket destination now throws a ValidationError during synthesis instead of failing at CloudFormation deployment. Affected values: 3-letter IANA abbreviations (e.g. EST), Etc/UTC, Etc/GMT, Factory, and strings containing characters outside [a-zA-Z/_]+. Use a supported standard IANA identifier (e.g. America/New_York) or UTC for synth to pass.

Features

  • backup: add indexActions prop to BackupPlanRule (#34051) (b8be853), closes #34050
  • bedrockagentcore: add manageDeliveryResourcePolicy opt-out for runtime observability (#38372) (5fb086b), closes #38342
  • ci: integration test deployment on maintainer approval (#38519) (c5f6b4f), closes #37333
  • core: Size objects now properly stringify (#38662) (90fe151)
  • sqs: metricApproximateNumberOfMessagesOutstanding (#38661) (f29b27b)

Bug Fixes

  • assets: SymlinkFollowMode.BLOCK_EXTERNAL will throw errors while bundling (#38506) (a11e451)
  • bedrockagentcore: least-privilege browser recording S3 grant (#38604) (7e11d11)
  • ci: add environment for Atmosphere variables access (#38625) (785773e), closes #38519
  • cloudfront-origins: readTimeout and keepaliveTimeout reject valid values (#38432) (6251e1a), closes #38433 #18628
  • core: performance counters use too much memory (#38620) (d0ce23c)
  • core: single file bundled output should be file (#38548) (9e22774)
  • core: stack.node.addDependency gets slower as stacks grow (#38597) (2ab9be4), closes #38522
  • core: symlinks in directory bundling output (#38665) (8d8ae2c)
  • core: validation plugin check adds too much overhead (#38619) (df15b9f)
  • dynamodb: TableV2.grants.*Data does not include index resources (#37892) (e48a97f), closes #37569
  • dynamodb: TableV2MultiAccountReplica rejects imported tables with tokenized ARNs (#38365) (08f05e5), closes #38354
  • dynamodb: avoid TableGrantsProps deprecation warnings for TableV2 (#38399) (fb5c25b), closes #37221
  • ec2: NatInstanceProvider and NatInstanceProviderV2 always trigger the keyName deprecation warning (#38347) (47f2151), closes #30806
  • kinesisfirehose: add validation for customTimeZone in S3BucketProps (#38514) (8cf9f90), closes #36089
  • lambda: allow SnapStart for container image functions (#38680) (a5adc00), closes #38281 #38281 #38265
  • rds: serverlessV2 capacity props reject tokens at synth time (#38044) (b7880de), closes #38043 #9044 #31810 #32905
  • s3-deployment: increase default memory limit from 128MB to 1024MB (#35501) (7a04f32), closes #35487
  • stepfunctions-tasks: resolve EvaluateExpression paths via a values lookup (#38682) (02301ea)
  • stack.availabilityZones are not stable strings (#38580) (f89474a)

Alpha modules (2.267.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

  • glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.
  • glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

  • glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)
  • glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)
  • glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)
  • glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)
  • msk-alpha: support Kafka 4.2 (#38323) (97b181c)
  • s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

  • glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)
  • lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

... (truncated)

Commits
  • 71747d9 chore: update analytics metadata blueprints
  • 02301ea fix(stepfunctions-tasks): resolve EvaluateExpression paths via a values looku...
  • a5adc00 fix(lambda): allow SnapStart for container image functions (#38680)
  • b8be853 feat(backup): add indexActions prop to BackupPlanRule (#34051)
  • 8d8ae2c fix(core): symlinks in directory bundling output (#38665)
  • be1a352 chore(core): auto-load temporary schemas for CloudFormation validation (#38595)
  • b7880de fix(rds): serverlessV2 capacity props reject tokens at synth time (#38044)
  • 08f05e5 fix(dynamodb): TableV2MultiAccountReplica rejects imported tables with toke...
  • fb5c25b fix(dynamodb): avoid TableGrantsProps deprecation warnings for TableV2 (#38399)
  • 5fb086b feat(bedrockagentcore): add manageDeliveryResourcePolicy opt-out for runtime ...
  • Additional commits viewable in compare view

Updates @types/node from 26.2.0 to 26.4.0

Commits

Updates aws-cdk from 2.1136.0 to 2.1139.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1139.0

2.1139.0 (2026-08-26)

Features

Bug Fixes

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

Features

Bug Fixes

  • cli: cdk context header always claims the context was found in cdk.json (#1816) (b7783b5), closes #1814
  • cli: cdk flags --set leaks synthesized cloud assembly directories (#1833) (fd891fb), closes #1832
  • cli: fail fast when --proxy has no or an unsupported protocol (#1843) (da37001), closes #453
  • cli: refactor fails on stacks with bundled assets (#1812) (8458a4a), closes #1810
  • cli: reject non-numeric ids in cdk acknowledge (#1844) (c71ab23), closes #248

aws-cdk@v2.1137.0

2.1137.0 (2026-08-17)

Features

... (truncated)

Commits
  • d51353e fix(cli): guide Stage users to a working pattern in stack-selection error (#1...
  • 793316b refactor(cli): consolidate stack selection on toolkit-lib selectors (#1896)
  • 2a6a802 fix(cli): cdk CLI alias package declares an entrypoint that does not exist ...
  • 83dcea3 fix(aws-cdk): remove SIGINT listener leak in TelemetrySession (#1863)
  • acc6f4d fix(cli): --yes mode requires a TTY when a request's default is falsy (#1892)
  • c31e049 refactor(cli): make IoHost listener removers using-compatible (#1888)
  • e895513 refactor(cli): scope IoHost listeners via suppressMessages decorator (#1887)
  • f875d81 feat: show the target environment in cdk diff stack headers (#1885)
  • 0bae125 test(cli): snapshot the cdk synth output contract (#1865)
  • d30e791 fix(aws-cdk): cdk migrate deduplication drops resources with compound identif...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…irectory with 3 updates

Bumps the javascript-minor-and-patch group with 3 updates in the /src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk-lib` from 2.265.0 to 2.267.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.267.0/packages/aws-cdk-lib)

Updates `@types/node` from 26.2.0 to 26.4.0
- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)
- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)

Updates `aws-cdk` from 2.1136.0 to 2.1139.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1139.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.267.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-minor-and-patch
- dependency-name: "@types/node"
  dependency-version: 26.4.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor-and-patch
- dependency-name: aws-cdk
  dependency-version: 2.1139.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
@dependabot
dependabot Bot requested a review from stevenfackley as a code owner August 31, 2026 10:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants