chore(deps): update dependency aws-cdk-lib to v2.243.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib (source)	2.237.1 → 2.243.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.243.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​37201) (85daaf5)
• cfn-property-mixins: graduate to stable @​aws-cdk/cfn-property-mixins package (#​37215) (f071e67)

Bug Fixes

• dynamodb: resource policies don't have the index ARNs when indexes are added after granting permissions (#​37213) (eb37071)

---

Alpha modules (2.243.0-alpha.0)

v2.242.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.

Features

• core: support PropertyMergeStrategy to merge arbitrary CFN property objects (#​37206) (793ad97)
• ecr: add RepositoryAutoDeleteImages mixin (#​37176) (3189116)
• s3 and ecs service mixins are now available in aws-cdk-lib (#​37151) (52c99da)
• update L1 CloudFormation resource definitions (#​37173) (1dfaf5f), closes #​37BFF5 #​37BFF5
• apigateway: add TLS 1.3 security policies for domain names (#​36303) (9d0300b), closes #​36280
• appsync: add EnhancedMetricsConfigProperty for GraphQL api (#​35328) (ebfaf89), closes #​29933
• opensearchservice: s3 vectors engine (#​36382) (c0b1d4e)
• s3: graduate BucketAutoDeleteObjects mixin into aws-cdk-lib (#​37161) (e5ddd79)

Bug Fixes

• aws-cdk-lib: Asset uses a lot of memory (#​37186) (70cae75)
• large amounts of metadata can break 512MB string limit (#​34480) (20c3154)
• opensearchservice: enableAutoSoftwareUpdate: false is not reflected in the CloudFormation template (#​37152) (dec8e6f), closes #​36382
• s3: discover existing bucket policies in default trait factory (#​37166) (f090816)

---

Alpha modules (2.242.0-alpha.0)

Features

• mixins-preview: allow passing resource objects into properties in CFN Property mixins (#​37148) (f238629)
• mixins-preview: generate EventBridge pattern for all events (#​37081) (f30e836)
• mixins-preview: support custom merge strategies via IMergeStrategy (#​37170) (0dec011)

v2.241.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed.

Features

• update L1 CloudFormation resource definitions (#​37103) (f1ee45c)
• autoscaling: add deletionProtection property to AutoScalingGroup (#​36924) (467f2b4)
• core: introducing CDK Mixins (#​37055) (cda96cb)
• eks: add support for Kubernetes version 1.35 (#​37065) (909fca3), closes #​36920 #​36016 cdklabs/awscdk-asset-kubectl#2669 #​37070 #​36950 #​36016
• s3: attribute-based access control (#​36229) (9ec4db3)

Bug Fixes

• bump minimatch to ^10.2.3 to resolve ReDoS vulnerabilities (#​37127) (c359329), closes #​37100
• dynamodb: fix SID for grants on multi-account global tables (#​37057) (98d5e82)
• rds: correct engine version deprecation tags and add missing versions (#​37080) (127b359), closes #​37079 #​36937

---

Alpha modules (2.241.0-alpha.0)

Features

• mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#​37042) (dd94c31)
• mixins-preview: cross account delivery destinations (#​36827) (a759eb6)

v2.240.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​37039) (17b2d93)
• eks-v2: graduate to stable 🚀 (#​36950) (a7de51c)
• update L1 CloudFormation resource definitions (#​37034) (62d40f8)

Bug Fixes

• bump minimatch to ^10.2.1 to resolve ReDoS vulnerability (GHSA-3ppc-4f35-3m26) (#​37027) (e48ea41)

---

Alpha modules (2.240.0-alpha.0)

v2.239.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-licensemanager: AWS::LicenseManager::License: Beneficiary property is now required
aws-licensemanager: AWS::LicenseManager::License: ProductSKU property is now required
aws-sagemaker: AWS::SageMaker::Cluster: Orchestrator.Eks property is now immutable

Features

• update L1 CloudFormation resource definitions (#​37031) (bc65c09)
• dynamodb: add cross-account global table replication support (#​36895) (353a9bb)
• kinesisfirehose: support dynamic partitioning (#​35903) (4f86a05), closes #​28740
• resource policy and encrypted resource wrappers for L1s (#​36849) (ee87e26)
• update L1 CloudFormation resource definitions (#​36923) (64cfc4d)
• update L1 CloudFormation resource definitions (#​36997) (e3eecad)

Bug Fixes

• aws-cdk-lib: update cloud-assembly-schema to resolve peer dependency conflict (#​36953) (f194236), closes #​36939
• aws-cdk-lib: upgrade version of ajv that triggers CVE scanners (#​37022) (45662ba)
• ec2: add VPC endpoint naming conventions for some isolated regions (#​36794) (5a7fca5)
• rds: mark deprecated versions and add new engine versions (#​36937) (6e061d0)

---

Alpha modules (2.239.0-alpha.0)

⚠ BREAKING CHANGES

redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE

Features

• bedrock-agentcore-alpha: add fromCodeAsset method to create runtime artifact with local code assets (#​36472) (c5a87e6), closes #​36473
• bedrock-agentcore-alpha: added new target type (api gateway) in agentcore gateway target. (#​36841) (0842754), closes #​36817
• mixins-preview: add ECS ClusterSettingsMixin (#​36796) (b8ab5be)
• mixins-preview: add s3 bucket mixin for publicAccessBlock (#​36905) (feed4b2)
• mixins-preview: send Vended Logs to pre-created DeliveryDestination using toDestination() (#​36896) (48f1fe6)

Bug Fixes

• redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE (#​36516) (ea19e5c), closes #​36416

v2.238.0

Compare Source

⚠ BREAKING CHANGES

• bedrock-agentcore: Interface extensions require new property implementations
• aws-bedrock-agentcore-alpha:
• • IGateway now requires gatewayRef getter
• • IGatewayTarget now requires gatewayTargetRef getter
• • IMemory now requires memoryRef getter
• • IBedrockAgentRuntime now requires runtimeRef getter
• • IRuntimeEndpoint now requires runtimeEndpointRef getter
• • IBrowserCustom now requires browserCustomRef getter
• • ICodeInterpreterCustom now requires codeInterpreterCustomRef getter

Features

• update L1 CloudFormation resource definitions (#​36834) (5143fdf)
• core: allow indentation suppression in nested stacks (#​35122) (d629b15), closes #​32798 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/nested-stack.ts#L25C18-L25C34
• ec2: support Firehose IDeliveryStreamRef as flow log destination (#​36278) (cd73498), closes #​33883 #​34596 #​33757
• eks: add removal policy for all constructs (#​35835) (875d9b8)
• eks: add support for EC2, HYBRID_LINUX, and HYPERPOD_LINUX access entry types (#​36350) (cc059c6), closes #​34394
• glue: typed partition projection (#​35660) (cb1658f), closes #​35428

Bug Fixes

• core: intrinsic cfn function tokens are not detected as such in java (#​36843) (3f29f11)
• events: restore Match.anyOf support for raw strings (#​36908) (6804c7c), closes #​36902 #​36602 #​36602
• iam: undeprecate openIdConnectProviderArn and openIdConnectProviderIssuer in IOidcProvider (#​36859) (cbf0b03)

Miscellaneous Chores

• bedrock-agentcore: reference interface (#​36803) (87f1087)

---

Alpha modules (2.238.0-alpha.0)

Features

• eks-v2-alpha: add support for bootstrapSelfManagedAddons (#​36740) (1ffe38d)
• eks-v2-alpha: add support for EKS hybrid nodes (#​36749) (48ace56)

Bug Fixes

• eks-v2-alpha: ensure kubectl provider and handler functions use the same vpc configuration (#​36735) (4e02f08), closes #​34878 #​34877
• ivs-alpha: add region constraints to integration tests (#​36851) (d55fec4)
• mixins-preview: apply mixins in order (#​36847) (726060c)
• mixins-preview: apply mixins in order in MixinApplicator (#​36877) (09db1c9), closes #​36847

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud