Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 7, 2025

Bumps the aws-cdk group with 1 update in the / directory: aws-cdk-lib.

Updates aws-cdk-lib from 2.209.1 to 2.210.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.210.0

Reverts


Alpha modules (2.210.0-alpha.0)

Features

  • glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.210.0-alpha.0 (2025-08-06)

Features

  • glue-alpha: add optional metrics control for cost optimization (#35154) (6e24133), closes #35149

2.209.1-alpha.0 (2025-08-06)

Bug Fixes

  • eks-v2-alpha: fix helm commands not running ecr public login (#35162) (6c2a8b8)

2.209.0-alpha.0 (2025-08-05)

2.208.0-alpha.0 (2025-07-29)

Features

  • glue: throw ValidationError instead of untyped errors (#35084) (1e20df6)

2.207.0-alpha.0 (2025-07-24)

2.206.0-alpha.0 (2025-07-16)

2.205.0-alpha.0 (2025-07-15)

2.204.0-alpha.0 (2025-07-04)

Features

2.203.1-alpha.0 (2025-07-02)

2.203.0-alpha.0 (2025-07-01)

Features

  • ec2: support for client route enforcement for client VPN endpoint (#34405) (063f4e7)

... (truncated)

Commits
  • 29e15ae chore: update analytics metadata blueprints
  • 88696e9 revert(ecs): add support for native blue/green deployments in ECS L2 (#35061)...
  • e128b29 chore(kms): add new enum values for kms (#35139)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Changes that touch dependencies, e.g. Dependabot, etc. javascript Pull requests that update Javascript code labels Aug 7, 2025
@boring-cyborg boring-cyborg bot added the documentation Improvements or additions to documentation label Aug 7, 2025
@pull-request-size pull-request-size bot added the size/XS PR between 0-9 LOC label Aug 7, 2025
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/aws-cdk-a6e4400705 branch from 4185d77 to 7b647d0 Compare August 7, 2025 14:43
@dreamorosi
Copy link
Contributor

I'm thinking of decreasing the update schedule for this and AWS SDKs to every 1 or 2 weeks instead of running every day - it's becoming a significant time sink and literally nothing relevant to us changes.

Dependabot will continue opening PRs for security patches as soon as they're available, regardless of that configuration.

@svozza
Copy link
Contributor

svozza commented Aug 7, 2025

Yes, agreed. Especially the CDK ones because we usually run the E2E tests before approving.

@dreamorosi
Copy link
Contributor

@sdangol what do you think? If you agree, please go ahead, create an issue for it, and if you want also propose a change to the Dependabot config next week when you're back. Thanks!

@sdangol
Copy link
Contributor

sdangol commented Aug 7, 2025

Sure, I'll create an issue for that

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/aws-cdk-a6e4400705 branch 6 times, most recently from 332f554 to 3a1847f Compare August 8, 2025 14:57
Bumps the aws-cdk group with 1 update in the / directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib).


Updates `aws-cdk-lib` from 2.209.1 to 2.210.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.210.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.210.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws-cdk
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/aws-cdk-a6e4400705 branch from 3a1847f to ad3c981 Compare August 8, 2025 14:59
Copy link

sonarqubecloud bot commented Aug 8, 2025

Copy link
Contributor

@dreamorosi dreamorosi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

End to end tests passing.

@dreamorosi dreamorosi merged commit 3a5c5aa into main Aug 8, 2025
34 checks passed
@dreamorosi dreamorosi deleted the dependabot/npm_and_yarn/aws-cdk-a6e4400705 branch August 8, 2025 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Changes that touch dependencies, e.g. Dependabot, etc. documentation Improvements or additions to documentation javascript Pull requests that update Javascript code size/XS PR between 0-9 LOC

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants