Upgrade: [dependabot] - bump aws-cdk-lib from 2.219.0 to 2.220.0 (#109)

Bumps
[aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib)
from 2.219.0 to 2.220.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's
releases</a>.</em></p>
<blockquote>
<h2>v2.220.0</h2>
<h3>⚠ BREAKING CHANGES</h3>
<hr />
<p>L1 resources are automatically generated from public CloudFormation
Resource Schemas. They are built to closely reflect the real state of
CloudFormation. Sometimes these updates can contain changes that are
incompatible with previous types, but more accurately reflect reality.
In this release we have changed:</p>
<ul>
<li><strong>aws-neptune</strong>: AWS::Neptune::EventSubscription:
SnsTopicArn property is now required.</li>
<li><strong>aws-neptune</strong>: AWS::Neptune::EventSubscription: Id
attribute removed.</li>
<li><strong>aws-servicecatalog</strong>:
AWS::ServiceCatalog::PortfolioShare: Id attribute removed.</li>
<li><strong>aws-lex</strong>: AWS::Lex::ResourcePolicy: ResourceArn
property is now immutable.</li>
</ul>
<p>Co-authored-by: aws-cdk-automation <a
href="mailto:[email protected]">[email protected]</a></p>
<hr />
<h3>Features</h3>
<ul>
<li><strong>batch:</strong> ec2 Managed Compute Environment support
default instance classes, deprecate
<code>useOptimalInstanceClasses</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35537">#35537</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/9d59dd8676bdfbba6f562d82411a527e1f7b6296">9d59dd8</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35515">#35515</a></li>
<li><strong>kinesis:</strong> shard-level metrics for stream (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34963">#34963</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/ce9b3a8ddba75b646db54f6b8834067d6f50cea5">ce9b3a8</a>)</li>
<li><strong>lambda:</strong> refactor Function URL permissions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35725">#35725</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d38d015dfe752249236224c25946d8acc12448f5">d38d015</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35679">#35679</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/dec6e6a24ae4529b64eebeb529a92772e6a292d7">dec6e6a</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35695">#35695</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/8a6cf46db1d3821cd2a16f0209dc70b03c1e2485">8a6cf46</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35712">#35712</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/27a8760c1905badbc8597926473da01796bc29fa">27a8760</a>)</li>
<li><strong>amplify:</strong> support build compute type (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34796">#34796</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a02c6565cf0768024de244b96ecfc0d972c89f3d">a02c656</a>)</li>
<li><strong>cloudfront-origins:</strong> add ipAddressType property to
Lambda Function URL origins (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35458">#35458</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6cf6dc800d888fcce1746fd8564fa2e7371a21cc">6cf6dc8</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35450">#35450</a></li>
<li><strong>ec2:</strong> add BEDROCK_AGENTCORE and
BEDROCK_AGENTCORE_GATEWAY to InterfaceVpcEndpointAwsService (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35667">#35667</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6966c03b1a7aece0846f5a91bbeb825cd7491689">6966c03</a>)</li>
<li><strong>ec2:</strong> support for automatic VPN session reconnect on
client VPN endpoint (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35538">#35538</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/95364728f518c46cd6035dbea3953bdd71839e66">9536472</a>)</li>
<li><strong>eks:</strong> add removal policy support for EKS cluster
construct (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35560">#35560</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/4b4e3221182fba200c2b1f25043904e9dc1f10fb">4b4e322</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/25544">#25544</a></li>
<li><strong>logs:</strong> add parameter to allow metric filter on
transformed logs (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35359">#35359</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/effa46d0e6edd197fa53f94bb9d3d6fc071afa25">effa46d</a>)</li>
<li><strong>opensearch:</strong> add OpenSearch 3.1 engine version (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35477">#35477</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/3bd7cf944f2ec0b4b0191942682d19b954423536">3bd7cf9</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35471">#35471</a></li>
<li><strong>route53:</strong> add fromPrivateHostedZoneAttributes
function to PrivateHostedZone (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35552">#35552</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c8d7a79f204315a2dab1700ce5c358d73aa80756">c8d7a79</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/23268">#23268</a></li>
<li><strong>synthetics:</strong> allow root level canary scripts files
for Puppeteer versions 11 and greater (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35426">#35426</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/46fb2dc010afd029d318b8c5f033bd94b23a60c4">46fb2dc</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cloudwatch:</strong> metric period in AnomalyDetectionAlarm
is not being respected (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35319">#35319</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c7d80040d0d64858a083757dd4805df70460bc10">c7d8004</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34614">#34614</a>
<a
href="https://github.com/aws//github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts/issues/L16-L18">/github.com/aws/aws-cdk/blob/6966c03b1a7aece0846f5a91bbeb825cd7491689/packages/aws-cdk-lib/aws-cloudwatch/lib/private/alarm-options.ts#L16-L18</a>
<a
href="https://github.com/aws//github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json/issues/L32">/github.com/aws/aws-cdk/blob/86638f6daca6ead382d0b9c1cf65bb04f70d4b3d/packages/aws-cdk-lib/package.json#L32</a>
<a
href="https://redirect.github.com/aws//redirect.github.com/aws/aws-cdk/pull/35319/issues/discussion_r2407134489">aws/aws-cdk#35319</a></li>
<li><strong>ecs:</strong> update task definition validations for managed
instances (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35684">#35684</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/8638a788e4c4bc482139830b53ca460f490ca322">8638a78</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35644">#35644</a></li>
<li><strong>lambda-nodejs:</strong> bump bun to 1.2.23 for ARM64 support
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/35702">#35702</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/3aa186c7b5c2aba8a84e1cee9278034136cd9d03">3aa186c</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35534">#35534</a></li>
<li><strong>s3:</strong> resolve synthesis error in
BucketPolicy.fromCfnBucketPolicy() (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35633">#35633</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d9085cc851a4fe16419c4c3f5c51e6c1b032e786">d9085cc</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34322">#34322</a></li>
<li><strong>s3tables:</strong> s3 table bucket read access role uses
incorrect permission for s3tables:ListNamespaces (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35420">#35420</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/eb949bb13a145c046d096937ce1e9c26d4b84f7b">eb949bb</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.220.0-alpha.0)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>amplify-alpha:</strong> handle empty customResponseHeaders
array (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35700">#35700</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/57f90687d56ebe2cdc3fd5cff1dc35329c502ee4">57f9068</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35693">#35693</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.219.0-alpha.0...v2.220.0-alpha.0">2.220.0-alpha.0</a>
(2025-10-14)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>amplify-alpha:</strong> handle empty customResponseHeaders
array (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35700">#35700</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/57f90687d56ebe2cdc3fd5cff1dc35329c502ee4">57f9068</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35693">#35693</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.218.0-alpha.0...v2.219.0-alpha.0">2.219.0-alpha.0</a>
(2025-10-01)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.217.0-alpha.0...v2.218.0-alpha.0">2.218.0-alpha.0</a>
(2025-09-29)</h2>
<ul>
<li><strong>elasticache-alpha:</strong> implement Serverless ElastiCache
L2 Construct (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35424">#35424</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/0e08c8ccc17f45a9023433c17c22a951b23cad43">0e08c8c</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.216.0-alpha.0...v2.217.0-alpha.0">2.217.0-alpha.0</a>
(2025-09-25)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.215.0-alpha.0...v2.216.0-alpha.0">2.216.0-alpha.0</a>
(2025-09-22)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.214.0-alpha.0...v2.215.0-alpha.0">2.215.0-alpha.0</a>
(2025-09-15)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock-alpha:</strong> added missing validation when prompt
uses default variant (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35366">#35366</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/cbd271e36b68adbbaa1c87f95e7b99eaf3817264">cbd271e</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.213.0-alpha.0...v2.214.0-alpha.0">2.214.0-alpha.0</a>
(2025-09-02)</h2>
<h3>Features</h3>
<ul>
<li><strong>bedrock-alpha:</strong> add guardrails l2 construct (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34765">#34765</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/b4fdb2b494abf41eccab90cca0d0f64d38009fbe">b4fdb2b</a>)</li>
<li><strong>eks-v2-alpha:</strong> support eks with k8s 1.33 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34713">#34713</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c24565e015d692e9a9c5dc9703372ec51b04be6b">c24565e</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34520">#34520</a>
<a
href="https://redirect.github.com/aws/aws-cdk/issues/34911">#34911</a></li>
<li><strong>s3tables-alpha:</strong> add TablePolicy support to L2
construct library (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35223">#35223</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/2741dfbf69bbfa3e4353b4b3cbb4423fddc53226">2741dfb</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/33054">#33054</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.212.0-alpha.0...v2.213.0-alpha.0">2.213.0-alpha.0</a>
(2025-08-27)</h2>
<h3>Features</h3>
<ul>
<li><strong>s3tables-alpha:</strong> add TablePolicy support to L2
construct library (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35223">#35223</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a4aad78a45fb776f2c2c71cb7818b4f8cbeaadd0">a4aad78</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/33054">#33054</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.211.0-alpha.0...v2.212.0-alpha.0">2.212.0-alpha.0</a>
(2025-08-20)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.210.0-alpha.0...v2.211.0-alpha.0">2.211.0-alpha.0</a>
(2025-08-12)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.209.1-alpha.0...v2.210.0-alpha.0">2.210.0-alpha.0</a>
(2025-08-06)</h2>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk/commit/9359e0778f21574c18b97f35ec01f51aff92e5e8"><code>9359e07</code></a>
chore: update analytics metadata blueprints</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e07b341fd9bc10620dd93f87e2193949a46271e1"><code>e07b341</code></a>
chore(ec2): add m8a,c8i,c8i-flex instance class (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35719">#35719</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/d38d015dfe752249236224c25946d8acc12448f5"><code>d38d015</code></a>
feat(lambda): refactor Function URL permissions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35725">#35725</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/ce9b3a8ddba75b646db54f6b8834067d6f50cea5"><code>ce9b3a8</code></a>
feat(kinesis): shard-level metrics for stream (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/34963">#34963</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/8638a788e4c4bc482139830b53ca460f490ca322"><code>8638a78</code></a>
fix(ecs): update task definition validations for managed instances (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35684">#35684</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/9d59dd8676bdfbba6f562d82411a527e1f7b6296"><code>9d59dd8</code></a>
feat(batch): ec2 Managed Compute Environment support default instance
classes...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/27a8760c1905badbc8597926473da01796bc29fa"><code>27a8760</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35712">#35712</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/c7d80040d0d64858a083757dd4805df70460bc10"><code>c7d8004</code></a>
fix(cloudwatch): metric period in AnomalyDetectionAlarm is not being
respecte...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/46fb2dc010afd029d318b8c5f033bd94b23a60c4"><code>46fb2dc</code></a>
feat(synthetics): allow root level canary scripts files for Puppeteer
version...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/3aa186c7b5c2aba8a84e1cee9278034136cd9d03"><code>3aa186c</code></a>
fix(lambda-nodejs): bump bun to 1.2.23 for ARM64 support (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35702">#35702</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-cdk/commits/v2.220.0/packages/aws-cdk-lib">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-cdk-lib&package-manager=npm_and_yarn&previous-version=2.219.0&new-version=2.220.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

package-lock.json

@@ -12,7 +12,7 @@
   "dependencies": {
     "@aws-cdk/aws-lambda-python-alpha": "^2.205.0-alpha.0",
     "@cdklabs/generative-ai-cdk-constructs": "^0.1.310",
-    "aws-cdk-lib": "^2.219.0",
+    "aws-cdk-lib": "^2.220.0",
     "cdk-nag": "^2.37.55",
     "constructs": "^10.4.2",
     "source-map-support": "^0.5.21"