Upgrade: [dependabot] - bump aws-cdk-lib from 2.223.0 to 2.225.0 (#369)

Bumps
[aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib)
from 2.223.0 to 2.225.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's
releases</a>.</em></p>
<blockquote>
<h2>v2.225.0</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>
<p>** L1 resources are automatically generated from public
CloudFormation Resource Schemas. They are built to closely reflect the
real state of CloudFormation. Sometimes these updates can contain
changes that are incompatible with previous types, but more accurately
reflect reality. In this release we have changed:</p>
<ul>
<li><strong>aws-dynamodb</strong>: AWS::DynamoDB::GlobalTable:
ResourcePolicy property is now required.</li>
</ul>
</li>
</ul>
<h3>Features</h3>
<ul>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36082">#36082</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/3df1d81014f305c21e33522aa7cd26a91a21371b">3df1d81</a>)</li>
<li><strong>custom-resource:</strong> add External ID support for
AwsCustomResource (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35252">#35252</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/9f6c02ba7a1c5369add94d0f2c3ffe4ecadd2761">9f6c02b</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34018">#34018</a></li>
<li><strong>route53:</strong> support restricting delegated zone names
when using grantDelegation (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35129">#35129</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d832aca6059a9737437d2fe9d349d79cddbb0605">d832aca</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>aws-cdk-lib:</strong> temporary Cloud Assemblies are not
cleaned up (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36043">#36043</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/1ace1efdca879f3e871a7f32bababfe62d8b0afc">1ace1ef</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/802">#802</a></li>
<li><strong>cognito:</strong> remove overly strict validation for threat
protection on non-PLUS plans (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36027">#36027</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/172c65feb7f25060abf98fc704d815acfe4c9d6d">172c65f</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36023">#36023</a></li>
<li><strong>s3-deployment:</strong> <code>Source.jsonData()</code> fails
with null JSON values (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36054">#36054</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/67b85f2e71ca59bd7dd522bb5a63fef6401e51b0">67b85f2</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36052">#36052</a></li>
</ul>
<h3>Reverts</h3>
<ul>
<li>(dynamodb) revert Table.table field to private to fix .NET naming
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/36029">#36029</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d84fce84868157649f5a3cabbdbe06233317aacc">d84fce8</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36025">#36025</a>
<a
href="https://redirect.github.com/aws/aws-cdk/issues/35554">#35554</a></li>
</ul>
<hr />
<h2>Alpha modules (2.225.0-alpha.0)</h2>
<h2>v2.224.0</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li><strong>aws-cdk-lib:</strong> Reference interfaces (such as
<code>IBucketRef,</code> <code>IRoleRef,</code> etc.) were moved to a
new <code>aws-cdk-lib.interfaces</code> submodule to prevent cyclic
dependencies between service modules. If you are importing reference
interfaces, you have to update import statements accordingly. See <a
href="https://redirect.github.com/aws/aws-cdk/issues/36060">#36060</a>
for full details.</li>
<li><strong>Amazon.CDK.Lib (.NET):</strong> The .NET namespace for
multiple submodules has changed. If you are using any of the renamed
submodules, you have to update <code>using</code> statements for these
submodules. See <a
href="https://redirect.github.com/aws/aws-cdk/issues/36037">#36037</a>
for full details.</li>
<li><strong>L1 resources are automatically generated from public
CloudFormation Resource Schemas.</strong> They are built to closely
reflect the real state of CloudFormation. Sometimes these updates can
contain changes that are incompatible with previous types, but more
accurately reflect reality. In this release we have changed:</li>
</ul>
<p>aws-opensearchserverless: AWS::OpenSearchServerless::Collection:
StandbyReplicas property is now immutable.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation:
Id attribute removed.</p>
<h3>Features</h3>
<ul>
<li><strong>apigateway:</strong> add option for consolidating lambda
permissions for rest and http lambda integrations (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36021">#36021</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/35f8e46b8bf78b91c8bf626bd6b9de30d88dbe87">35f8e46</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/9327">#9327</a> <a
href="https://redirect.github.com/aws/aws-cdk/issues/19535">#19535</a>
<a
href="https://redirect.github.com/aws/aws-cdk/issues/35705">#35705</a></li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35994">#35994</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/47a9a201609805481040d8a085ffdf9b000c4c78">47a9a20</a>)</li>
<li><strong>core:</strong> add methods to SecretValue and
aws-secretsmanager Secret to obtain a literal (unresolved by
CloudFormation) dynamic reference key (<a
href="https://redirect.github.com/aws/aws-cdk/issues/34397">#34397</a>)
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/35105">#35105</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/457aa99259cd72f66fcc3f4db19aaa0e20d1e607">457aa99</a>),
closes <a
href="https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/secret-value.ts/issues/L98C17-L98C31">/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/secret-value.ts#L98C17-L98C31</a>
<a
href="https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-secretsmanager/lib/secret.ts/issues/L499">/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-secretsmanager/lib/secret.ts#L499</a></li>
<li><strong>eks:</strong> add support for Kubernetes version 1.34 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36016">#36016</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/60096ac4afbb0964a3ef4e5f702b9102c01de927">60096ac</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35717">#35717</a></li>
<li><strong>lambda:</strong> add nodejs24.x runtime for Lambda (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36001">#36001</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/404bf1a90a01ad9e4afc8dbb7fbcd269701117b9">404bf1a</a>)</li>
<li><strong>sagemaker:</strong> add support for serverless inference
endpoints (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35557">#35557</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/3f5c5acc0f5f03cbbfb8fa0c4c1f18383ae602cd">3f5c5ac</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/23148">#23148</a>
<a
href="https://redirect.github.com/aws/aws-cdk/issues/23148">#23148</a></li>
<li><strong>stepfunctions-tasks:</strong> add architecture support to
EvaluateExpression (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35468">#35468</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/771ea13c3067ee87b15575049d3ad6a10a393518">771ea13</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34974">#34974</a></li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.224.0-alpha.0...v2.225.0-alpha.0">2.225.0-alpha.0</a>
(2025-11-17)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.223.0-alpha.0...v2.224.0-alpha.0">2.224.0-alpha.0</a>
(2025-11-13)</h2>
<h3>Features</h3>
<ul>
<li><strong>imagebuilder-alpha:</strong> add support for EC2 Image
Builder L2 Constructs - Infrastructure Configuration (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35882">#35882</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/db1d964b7775e0609c137b12051bac535094f8cd">db1d964</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a>
<a
href="https://redirect.github.com/aws/aws-cdk-rfcs/issues/789">aws/aws-cdk-rfcs#789</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.222.0-alpha.0...v2.223.0-alpha.0">2.223.0-alpha.0</a>
(2025-11-10)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.221.1-alpha.0...v2.222.0-alpha.0">2.222.0-alpha.0</a>
(2025-11-04)</h2>
<h3>Features</h3>
<ul>
<li><strong>eks-v2-alpha:</strong> eks-v2-alpha is now in developer
preview (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35801">#35801</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/32afc0ff940394da737714e599ddc3c25ff738e3">32afc0f</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bedrock-alpha:</strong> apply permission dependency to
existing and non-existing roles (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35123">#35123</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/b39ccf3a874401c2a0a7ae0806f1be02b9b75d5e">b39ccf3</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35120">#35120</a></li>
<li><strong>eks-v2-alpha:</strong> remove hyphen from Go package name
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/35927">#35927</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/2cdfc8a909ce3752833e46dd2ed0106fee0e785a">2cdfc8a</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.221.0-alpha.0...v2.221.1-alpha.0">2.221.1-alpha.0</a>
(2025-10-29)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.220.0-alpha.0...v2.221.0-alpha.0">2.221.0-alpha.0</a>
(2025-10-24)</h2>
<h3>Features</h3>
<ul>
<li><strong>msk-alpha:</strong> support Kafka 4.1 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35759">#35759</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/67539de15ee70a61629fa8dfc7f7b42b187a82e0">67539de</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>elasticache-alpha:</strong> cannot import Redis 7 serverless
cache (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35629">#35629</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/2bde1a02ecb1fc3439249eb1bb756bf335ec3553">2bde1a0</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.219.0-alpha.0...v2.220.0-alpha.0">2.220.0-alpha.0</a>
(2025-10-14)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>amplify-alpha:</strong> handle empty customResponseHeaders
array (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35700">#35700</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/57f90687d56ebe2cdc3fd5cff1dc35329c502ee4">57f9068</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/35693">#35693</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.218.0-alpha.0...v2.219.0-alpha.0">2.219.0-alpha.0</a>
(2025-10-01)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.217.0-alpha.0...v2.218.0-alpha.0">2.218.0-alpha.0</a>
(2025-09-29)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk/commit/440742a4f72479eb402201e92d3a73f7a81e31d4"><code>440742a</code></a>
chore: update analytics metadata blueprints</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/3df1d81014f305c21e33522aa7cd26a91a21371b"><code>3df1d81</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36082">#36082</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/9f6c02ba7a1c5369add94d0f2c3ffe4ecadd2761"><code>9f6c02b</code></a>
feat(custom-resource): add External ID support for AwsCustomResource (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35252">#35252</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/af61744f90863132afe60e619dad1eb209978b71"><code>af61744</code></a>
chore(ec2): add VPC interface endpoints for Cognito (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35984">#35984</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/5b58c56c15a86cffd11676f39eec7ac6a3205fca"><code>5b58c56</code></a>
chore(rds): add support for 8.0.mysql_aurora.3.11.0 (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36026">#36026</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a119de5124b438fd3134dc10314fcad1789c6b5b"><code>a119de5</code></a>
chore(rds): deprecate MySQL versions 5.7.44, 8.0.32-36 (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35949">#35949</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a2df80e3281824341ace21e14916eeb0d461bd78"><code>a2df80e</code></a>
chore(rds): add PostgreSQL extended support versions 11.22-rds.20250814,
12.2...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/900d7f7ae54544e3bfe2ab8c8a0062e0200689ce"><code>900d7f7</code></a>
chore(rds): add MariaDB versions 10.6.23, 10.11.14, and 11.4.8 (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35896">#35896</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/26a33bc95c1e16658c5d03a147035fcaf412933e"><code>26a33bc</code></a>
chore(rds): deprecate Aurora MySQL versions 3.05.2-3.07.1 (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/35952">#35952</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/b293fd88372174f13e6cd77f8fa0c08b4fd81785"><code>b293fd8</code></a>
chore(rds): deprecate Aurora PostgreSQL versions 13.11-13, 14.8-10,
15.3-5 (#...</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-cdk/commits/v2.225.0/packages/aws-cdk-lib">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=aws-cdk-lib&package-manager=npm_and_yarn&previous-version=2.223.0&new-version=2.225.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

package-lock.json

@@ -35,7 +35,7 @@
   },
   "dependencies": {
     "aws-cdk": "^2.1031.2",
-    "aws-cdk-lib": "^2.223.0",
+    "aws-cdk-lib": "^2.225.0",
     "cdk-nag": "^2.37.52",
     "constructs": "^10.4.3",
     "esbuild": "^0.27.0"

package.json

@@ -21,7 +21,7 @@
     "type": "module",
     "dependencies": {
         "aws-cdk": "^2.1031.2",
-        "aws-cdk-lib": "^2.223.0",
+        "aws-cdk-lib": "^2.225.0",
         "cdk-nag": "^2.37.52",
         "constructs": "^10.4.3"
     },