Upgrade: [dependabot] - bump aws-cdk-lib from 2.230.0 to 2.233.0 (#412)

Bumps
[aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib)
from 2.230.0 to 2.233.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's
releases</a>.</em></p>
<blockquote>
<h2>v2.233.0</h2>
<h3>⚠ BREAKING CHANGES</h3>
<p><strong>CHANGES TO L1 RESOURCES:</strong> L1 resources are
automatically generated from public CloudFormation Resource Schemas.
They are built to closely reflect the real state of CloudFormation.
Sometimes these updates can contain changes that are incompatible with
previous types, but more accurately reflect reality. In this release we
have changed:</p>
<p>aws-ec2: AWS::EC2::EC2Fleet: DefaultTargetCapacityType property is
now immutable.<br />
aws-ec2: AWS::EC2::EC2Fleet: TargetCapacityUnitType property is now
immutable.</p>
<h3>Features</h3>
<ul>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36390">#36390</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a6077a20bfa0658ea643ff2d74303d13247c861b">a6077a2</a>)</li>
<li><strong>events-targets:</strong> support messageGroupId for standard
SQS queues (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36068">#36068</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/95d4ed53d054dad668453eb5e5fa6a79ddb158b5">95d4ed5</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36367">#36367</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e551afe30a783d0102ff001e3729bafde5a644a7">e551afe</a>)</li>
<li><strong>codebuild:</strong> add support for macOS 15 runners (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35836">#35836</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/1b8b4e33f91a143b1654e20cdf7d5cbbd85811a7">1b8b4e3</a>)</li>
<li><strong>route53-patterns:</strong> <code>HttpsRedirect</code> use
<code>Distribution</code> as the default CloudFront distribution (under
feature flag) (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34312">#34312</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e2987eb322168e563d9ddf214cbffba7316dd821">e2987eb</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/31546">#31546</a></li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36326">#36326</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/cb82627b311610b749a28537ff4ee133cfd9d2b9">cb82627</a>)</li>
<li><strong>ec2:</strong> add Interface VPC Endpoints for ACM and
ACM-PCA (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35890">#35890</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/06e6b25c3a736be065a0a562ed0698c9a72ee66a">06e6b25</a>)</li>
<li><strong>route53:</strong> support failover routing policy for record
sets (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35909">#35909</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/9395467d3630da052ba5ffae3bbe51b9b13abaef">9395467</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35910">#35910</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>aws-cdk-lib:</strong> make grants factory methods public (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36317">#36317</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/7dde6251abb58ba6e51df2725031089cefa37959">7dde625</a>)</li>
<li><strong>ci:</strong> checkout the pr head instead of the default
main head (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36311">#36311</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a1cbcf91e3105e731dc9c41c90a6592e539cde23">a1cbcf9</a>),
closes <a
href="https://github.com/aws//github.com/aws/aws-cdk/blob/main/.github/workflows/integration-test-deployment.yml/issues/L39C11-L39C57">/github.com/aws/aws-cdk/blob/main/.github/workflows/integration-test-deployment.yml#L39C11-L39C57</a></li>
<li><strong>cloudtrail:</strong> do not attach s3 bucket permission when
orgId is not set for organization trail (<a
href="https://redirect.github.com/aws/aws-cdk/issues/30778">#30778</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/61ee074843c51a3acc36691808c5653f4470b1e9">61ee074</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/30490">#30490</a></li>
<li><strong>custom-resources:</strong> waiter state machine retry fails
with ExecutionAlreadyExists (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35988">#35988</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/36ea606334f1a4590a61d19b0675300ee202f798">36ea606</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35957">#35957</a></li>
<li><strong>ecs:</strong> removal of
<code>canContainersAccessInstanceRole</code> instance role (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36362">#36362</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/7395b41687718366940bddb9117bc3a8e9f09863">7395b41</a>)</li>
<li><strong>pipelines:</strong> propagate CodeBuild <code>fleet</code>
and <code>certificate</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35673">#35673</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/71cfd607999cfd84cfb4c62757be5c8325477770">71cfd60</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35664">#35664</a></li>
<li><strong>region-info:</strong> standalone use of
<code>@aws-cdk/region-info</code> throws an <code>Cannot find module
'aws-cdk-lib/core/lib/errors'</code> error (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36414">#36414</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/01c7d2eda4df63db4b3c5c3edd05b95ceaf24236">01c7d2e</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36399">#36399</a></li>
<li>ci fix for spec updater workflow (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36364">#36364</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a0b42ccb4fa496dba34c6146bba553d83f7ce54d">a0b42cc</a>)</li>
<li>re-export of <code>ResourceEnvironment</code> is not an alias (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36370">#36370</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/ba8e194891e96848d512e1e60f9143746fde0954">ba8e194</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.233.0-alpha.0)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> Runtime constructs will no
longer automatically include lifecycleConfiguration with default values
when not explicitly specified by users.</li>
<li><strong>elasticache-alpha:</strong> The <code>engine</code> property
in <code>NoPasswordUserProps</code> has been removed.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> runtime construct
incorrectly forces default lifecycleConfiguration values (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36379">#36379</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/795435459e06e90aa9818bc99967930b125754bf">7954354</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36376">#36376</a></li>
<li><strong>elasticache-alpha:</strong> the default engine for
NoPasswordUser contradict in the docs (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35920">#35920</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/495fa3707a71f025f55bf37fdd13017554b89a32">495fa37</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35847">#35847</a></li>
<li><strong>mixins-preview:</strong> improving delivery source and
delivery destination creation (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36314">#36314</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/86092ab023681bcf81678ad881b990bccc457737">86092ab</a>)</li>
</ul>
<h2>v2.232.2</h2>
<h3>Bug Fixes</h3>
<ul>
<li>re-export of <code>ResourceEnvironment</code> is not an alias (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36370">#36370</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6178d3222e17e77ea67eef060a3faec276595ae8">6178d32</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.232.2-alpha.0)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.232.2-alpha.0...v2.233.0-alpha.0">2.233.0-alpha.0</a>
(2025-12-18)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> Runtime constructs will no
longer automatically include lifecycleConfiguration with default values
when not explicitly specified by users.</li>
<li><strong>elasticache-alpha:</strong> The <code>engine</code> property
in <code>NoPasswordUserProps</code> has been removed.</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> runtime construct
incorrectly forces default lifecycleConfiguration values (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36379">#36379</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/795435459e06e90aa9818bc99967930b125754bf">7954354</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36376">#36376</a></li>
<li><strong>elasticache-alpha:</strong> the default engine for
NoPasswordUser contradict in the docs (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35920">#35920</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/495fa3707a71f025f55bf37fdd13017554b89a32">495fa37</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35847">#35847</a></li>
<li><strong>mixins-preview:</strong> improving delivery source and
delivery destination creation (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36314">#36314</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/86092ab023681bcf81678ad881b990bccc457737">86092ab</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.232.1-alpha.0...v2.232.2-alpha.0">2.232.2-alpha.0</a>
(2025-12-12)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.232.0-alpha.0...v2.232.1-alpha.0">2.232.1-alpha.0</a>
(2025-12-05)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.231.0-alpha.0...v2.232.0-alpha.0">2.232.0-alpha.0</a>
(2025-12-04)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> use static construct ID
for asset-based runtime artifacts (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36241">#36241</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e2bdddd82f3e04f1cb2aebb187c580563bae453f">e2bdddd</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35968">#35968</a></li>
<li><strong>mixins-preview:</strong> service exports are different then
in <code>aws-cdk-lib</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36201">#36201</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/585800660b65a3a87d2b358054c7b5e162faabcf">5858006</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36210">#36210</a></li>
<li><strong>mixins-preview:</strong> strongly-typed ConstructSelector
interface (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36266">#36266</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/1d2f4730cc4358d35198980957e4fc01a21e9daf">1d2f473</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.230.0-alpha.0...v2.231.0-alpha.0">2.231.0-alpha.0</a>
(2025-12-01)</h2>
<h3>Features</h3>
<ul>
<li><strong>glue-alpha:</strong> support Glue Version 5.1 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36223">#36223</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/b9564923ee1136e7b680115a2983ad317b0c30fb">b956492</a>)</li>
<li><strong>imagebuilder-alpha:</strong> add support for Image Construct
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/36154">#36154</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/eee3ae6a55ff632012c19c384bb11e91b820bcc3">eee3ae6</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a>
<a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.229.1-alpha.0...v2.230.0-alpha.0">2.230.0-alpha.0</a>
(2025-11-26)</h2>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> update resources on
grantInvokeXXX for runtime (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35864">#35864</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/5dad62f94c1a9f02c5fda1df7aa105e14630beb3">5dad62f</a>)</li>
<li><strong>imagebuilder-alpha:</strong> add support for Image Pipeline
Construct (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36153">#36153</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d8c324ae31db5997f9511e3f43affceea57d86c3">d8c324a</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a>
<a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a></li>
<li><strong>imagebuilder-alpha:</strong> add support for Lifecycle
Policy Construct (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36152">#36152</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/7e31eb6a310344634fefa0651bf55c7493fc09bd">7e31eb6</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a>
<a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a></li>
<li><strong>mixins-preview:</strong> adds LogDelivery Mixins for 47
resources (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36158">#36158</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6607ce95256acda86107fa30b1f000a9dc189df7">6607ce9</a>)</li>
<li><strong>mixins-preview:</strong> vended log deliveries (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36138">#36138</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/69442a88b16b39d485bf7ec57d520599c564a612">69442a8</a>)</li>
<li><strong>mixins-preview:</strong> helpers to generate EventBridge
event patterns for 26 services (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36121">#36121</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/073185d46e5d8a95915579013d1ef8fe47e6343c">073185d</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk/commit/1013a07c04aaf6aa7831c9b76fb7df421fafb723"><code>1013a07</code></a>
chore(release): 2.233.0</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/7395b41687718366940bddb9117bc3a8e9f09863"><code>7395b41</code></a>
fix(ecs): removal of <code>canContainersAccessInstanceRole</code>
instance role (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36362">#36362</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a6077a20bfa0658ea643ff2d74303d13247c861b"><code>a6077a2</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36390">#36390</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/01c7d2eda4df63db4b3c5c3edd05b95ceaf24236"><code>01c7d2e</code></a>
fix(region-info): standalone use of <code>@aws-cdk/region-info</code>
throws an `Cannot ...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a943b2fafdb453e46aa0c328c42aded4f3b59b44"><code>a943b2f</code></a>
chore(ec2): add SES interface VPC endpoint (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36318">#36318</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/95d4ed53d054dad668453eb5e5fa6a79ddb158b5"><code>95d4ed5</code></a>
feat(events-targets): support messageGroupId for standard SQS queues (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36068">#36068</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/54a4bc730d88c954f4c926048df3e9d433ec01b6"><code>54a4bc7</code></a>
chore(appconfig): reference interfaces (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36392">#36392</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/25fbdbcbe20b130516de5882d2b7068eeca9c86d"><code>25fbdbc</code></a>
chore(lambda): add dotnet10 runtime to Lambda (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36366">#36366</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e050e3689c084c27512ae3b0caa6f5d1874a839e"><code>e050e36</code></a>
chore(apigateway): reference interfaces (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36373">#36373</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/61ee074843c51a3acc36691808c5653f4470b1e9"><code>61ee074</code></a>
fix(cloudtrail): do not attach s3 bucket permission when orgId is not
set for...</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-cdk/commits/v2.233.0/packages/aws-cdk-lib">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-cdk-lib&package-manager=npm_and_yarn&previous-version=2.230.0&new-version=2.233.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

package-lock.json

@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "aws-cdk": "^2.1100.1",
-    "aws-cdk-lib": "^2.230.0",
+    "aws-cdk-lib": "^2.233.0",
     "cdk-nag": "^2.37.52",
     "constructs": "^10.4.4",
     "esbuild": "^0.27.0"

package.json

@@ -21,7 +21,7 @@
     "type": "module",
     "dependencies": {
         "aws-cdk": "^2.1100.1",
-        "aws-cdk-lib": "^2.230.0",
+        "aws-cdk-lib": "^2.233.0",
         "cdk-nag": "^2.37.52",
         "constructs": "^10.4.4"
     },