Skip to content

chore(deps): bump the aws-cdk group across 1 directory with 3 updates - #23

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-4075bae137
Open

chore(deps): bump the aws-cdk group across 1 directory with 3 updates#23
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/aws-cdk-4075bae137

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 9, 2026 •
edited
Loading

Copy link
Copy Markdown

Bumps the aws-cdk group with 3 updates in the / directory: aws-cdk-lib, cdk-nag and aws-cdk.

Updates aws-cdk-lib from 2.99.1 to 2.269.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.269.0

Features

Bug Fixes

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through defaultArguments now throws a ValidationError at synthesis time:
  • construct-managed arguments — --enable-continuous-cloudwatch-log, --continuous-log-logGroup, --continuous-log-logStreamPrefix, --continuous-log-conversionPattern, --enable-continuous-log-filter, --enable-metrics, --enable-observability-metrics, --enable-spark-ui, --spark-event-logs-path, --job-language, --class, --extra-jars, --user-jars-first, --extra-py-files, --extra-files, library-set
  • Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. enableMetrics: false) cannot be re-enabled through defaultArguments. Configure these through their dedicated props instead (continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI, className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' } with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g. --enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through defaultArguments now throws a ValidationError at synthesis time:
  • construct-managed arguments — --enable-continuous-cloudwatch-log, --continuous-log-logGroup, --continuous-log-logStreamPrefix, --continuous-log-conversionPattern, --enable-continuous-log-filter, --enable-metrics, --enable-observability-metrics, --enable-spark-ui, --spark-event-logs-path, --job-language, --class, --extra-jars, --user-jars-first, --extra-py-files, --extra-files, library-set
  • Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. enableMetrics: false) cannot be re-enabled through defaultArguments. Configure these through their dedicated props instead (continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI, className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' } with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g. --enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed. It is replaced by two protected members: setManagedArgument(key, value?), which each job class calls to declare (and, when a value is present, emit) a managed argument, and mergeDefaultArguments(defaultArguments?), which validates the caller-supplied defaultArguments against the accumulated reserved set and returns the merged map.

  • route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.
  • glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptions → EventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.
  • glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.
  • glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.

Features

  • glue-alpha: ensure job parameters consistency (#38480) (bc7dc0c)
  • glue-alpha: model Connection VPC placement as a value object (#38729) (f72e9fe)
  • glue-alpha: model partition projection variants as internal state (#38726) (16527cd)
  • glue-alpha: overhaul the workflow trigger API (#38579) (c8f917d)

... (truncated)

Commits
  • 5df21f1 chore: update analytics metadata blueprints
  • 61bba72 chore(release): 2.269.0
  • 2b95e32 feat(bedrockagentcore): graduate Policy submodule to stable (#38687)
  • 57b3043 fix(dynamodb): TableV2 emits internal grants deprecation warnings (#38806)
  • d703eb6 fix(core): upgrade CloudFormation validation to latest version (#38804)
  • 1b5e2e0 feat: update L1 CloudFormation resource definitions (#38784)
  • 855dfeb fix(ecs): allow ephemeralStorageGiB for Windows Fargate platform version 1.0....
  • 1083ba5 docs(stepfunctions-tasks): clarify that fromStringSet only accepts static arr...
  • 73100f6 fix(ecs): removing the last target group from a service is not deployed (#38776)
  • 0749210 chore(bedrock-alpha): add OpenAI foundation models (#38760)
  • Additional commits viewable in compare view

Updates cdk-nag from 2.28.0 to 3.0.2

Release notes

Sourced from cdk-nag's releases.

v3.0.2

3.0.2 (2026-08-04)

Bug Fixes

  • isAcknowledged() misses acknowledgments on aws-cdk-lib >=2.262.1 due to prefix casing (#2362) (67ae6d0)

v3.0.1

3.0.1 (2026-06-15)

Bug Fixes

  • walk ancestor tree in isAcknowledged and WriteNagSuppressions (#2349) (9c2d2cb)

v3.0.0

3.0.0 (2026-06-12)

⚠ BREAKING CHANGES

  • cdk nag v3 rewrites the core engine from an IAspect to an IPolicyValidationPlugin. Rule packs now participate in CDK's native policy validation framework instead of emitting annotations during synthesis.

Features

v2.38.2

2.38.2 (2026-04-27)

Bug Fixes

  • prefix using Stage Construct ID to avoid StageName colissions (#2338) (c0d76f6)

v2.38.1

2.38.1 (2026-04-21)

Bug Fixes

  • remove unnecessary test for serverSideEncryptionConfiguration to not be undefined (#2227) (9436814), closes #2226

v2.38.0

... (truncated)

Commits
  • 67ae6d0 fix: isAcknowledged() misses acknowledgments on aws-cdk-lib >=2.262.1 due to ...
  • 876778c chore(deps): upgrade dev dependencies (#2363)
  • 9db6d74 chore(deps): upgrade dev dependencies (#2361)
  • 7357acd chore(deps): upgrade dev dependencies (#2360)
  • 109b7b3 chore(deps): upgrade dev dependencies (#2358)
  • 33a24be chore(deps): upgrade dev dependencies (#2355)
  • ca6d1b5 chore(deps): upgrade dev dependencies (#2354)
  • 5b9ed9a chore(deps): upgrade dev dependencies (#2353)
  • 195b723 chore(deps): upgrade dev dependencies (#2352)
  • 9c2d2cb fix: walk ancestor tree in isAcknowledged and WriteNagSuppressions (#2349)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for cdk-nag since your current version.


Updates aws-cdk from 2.99.1 to 2.1141.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1141.0

2.1141.0 (2026-09-09)

Features

aws-cdk@v2.1140.0

2.1140.0 (2026-09-04)

Features

Bug Fixes

  • fatal failures hide the underlying error cause (#1939) (5b77563)

aws-cdk@v2.1139.0

2.1139.0 (2026-08-26)

Features

Bug Fixes

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

... (truncated)

Commits
Maintainer changes

This version was pushed to npm by GitHub Actions, a new releaser for aws-cdk since your current version.

@dependabot @github

dependabot Bot commented on behalf of github Jul 9, 2026

Copy link
Copy Markdown
Author

Labels

The following labels could not be found: automerge, dependencies. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@dependabot dependabot Bot changed the title chore(deps): bump the aws-cdk group with 3 updates chore(deps): bump the aws-cdk group across 1 directory with 3 updates Jul 20, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-4075bae137 branch from b2700a6 to 4b99c6b Compare July 20, 2026 19:56
@dependabot
chore(deps): bump the aws-cdk group across 1 directory with 3 updates
d6e97cb 
Bumps the aws-cdk group with 3 updates in the / directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [cdk-nag](https://github.com/cdklabs/cdk-nag) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk-lib` from 2.99.1 to 2.269.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.269.0/packages/aws-cdk-lib)

Updates `cdk-nag` from 2.28.0 to 3.0.2
- [Release notes](https://github.com/cdklabs/cdk-nag/releases)
- [Commits](cdklabs/cdk-nag@v2.28.0...v3.0.2)

Updates `aws-cdk` from 2.99.1 to 2.1141.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1141.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk
  dependency-version: 2.1129.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.261.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
- dependency-name: cdk-nag
  dependency-version: 3.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: aws-cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/aws-cdk-4075bae137 branch from 4b99c6b to d6e97cb Compare September 14, 2026 19:56

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants