Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 6, 2026

Bumps the cdk group with 4 updates in the / directory: @guardian/cdk, aws-cdk, aws-cdk-lib and constructs.

Updates @guardian/cdk from 62.0.1 to 62.2.1

Release notes

Sourced from @​guardian/cdk's releases.

v62.2.1

Patch Changes

  • 438089b: Update aws-cdk to ^2.1033.0, aws-cdk-lib to ^2.232.1, constructs to ^10.4.3

v62.2.0

Minor Changes

  • c49c7a0: Add GuJanusAssumableRole construct

v62.1.3

Patch Changes

  • 7c25920: Downgrade @guardian/eslint-config to v12.0.0 to remove react transitive dependency.

v62.1.2

Patch Changes

v62.1.1

Patch Changes

Changelog

Sourced from @​guardian/cdk's changelog.

62.2.1

Patch Changes

  • 438089b: Update aws-cdk to ^2.1033.0, aws-cdk-lib to ^2.232.1, constructs to ^10.4.3

62.2.0

Minor Changes

  • c49c7a0: Add GuJanusAssumableRole construct

62.1.3

Patch Changes

  • 7c25920: Downgrade @guardian/eslint-config to v12.0.0 to remove react transitive dependency.

62.1.2

Patch Changes

62.1.1

Patch Changes

62.1.0

Minor Changes

  • a335873: Upgrade aws sdk to v3
Commits
  • a4f39cc Bump package version (#2802)
  • 438089b fix(deps): Update AWS CDK libraries to ^2.1033.0, and constructs to ^10.4.3 (...
  • 647ed60 Bump package version (#2800)
  • ac006df Merge pull request #2799 from guardian/kc/changeset
  • c49c7a0 chore: Add changeset for new GuJanusAssumableRole
  • e906ca0 feat: Add GuJanusProvisionedRole construct (#2797)
  • d2126d4 chore(deps): bump storybook from 10.1.7 to 10.1.10 (#2796)
  • 886e38d Ignore aws libraries in dependabot (#2792)
  • 270aa03 chore(deps): bump @​guardian/eslint-config in the code-quality group (#2790)
  • cb2cc24 Tweaks to dependabot configuration (#2784)
  • Additional commits viewable in compare view
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​guardian/cdk since your current version.


Updates aws-cdk from 2.1030.0 to 2.1100.3

Release notes

Sourced from aws-cdk's releases.

[email protected]

2.1100.3 (2026-01-06)

[email protected]

2.1100.2 (2026-01-05)

Bug Fixes

[email protected]

2.1100.1 (2025-12-17)

Bug Fixes

  • cli: cdk init creates README.md with wrong package manager when --package-manager option is used (#989) (db19110)
  • cli: drop invalid commands from telemetry (#997) (191ed69)

[email protected]

2.1100.0 (2025-12-15)

Features

[email protected]

2.1034.0 (2025-12-11)

Features

  • cli: add package manager option to cdk init (#961) (4f01af8), closes #940
  • init-templates enable test cleanup by default (#986) (82fb0f3)
  • show early validation errors on deploy (#970) (3ca8b70)

Bug Fixes

  • cli: flag report is inconsistent with warnings (#967) (6693243)

[email protected]

... (truncated)

Commits
  • 63e8147 fix(cli): upgrade jest in init-templates to remove one deprecation warning (#...
  • a9d5b84 fix(cli): use caret version for aws-cdk-lib in init templates (#1002)
  • af211ad chore(deps): upgrade dependencies (#999)
  • f17ac7a chore: upgrade cdk-from-cfn to latest version (#998)
  • db19110 fix(cli): cdk init creates README.md with wrong package manager when `--p...
  • 191ed69 fix(cli): drop invalid commands from telemetry (#997)
  • 8ac049e feat: release telemetry (#969)
  • 672ee1c feat(cli): stabilize --telemetry-file option (#988)
  • 82fb0f3 feat: init-templates enable test cleanup by default (#986)
  • 563f702 chore: upgrade SDK and remove process.exit (#981)
  • Additional commits viewable in compare view

Updates aws-cdk-lib from 2.220.0 to 2.233.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.233.0

⚠ BREAKING CHANGES

CHANGES TO L1 RESOURCES: L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-ec2: AWS::EC2::EC2Fleet: DefaultTargetCapacityType property is now immutable.
aws-ec2: AWS::EC2::EC2Fleet: TargetCapacityUnitType property is now immutable.

Features

  • update L1 CloudFormation resource definitions (#36390) (a6077a2)
  • events-targets: support messageGroupId for standard SQS queues (#36068) (95d4ed5)
  • update L1 CloudFormation resource definitions (#36367) (e551afe)
  • codebuild: add support for macOS 15 runners (#35836) (1b8b4e3)
  • route53-patterns: HttpsRedirect use Distribution as the default CloudFront distribution (under feature flag) (#34312) (e2987eb), closes #31546
  • update L1 CloudFormation resource definitions (#36326) (cb82627)
  • ec2: add Interface VPC Endpoints for ACM and ACM-PCA (#35890) (06e6b25)
  • route53: support failover routing policy for record sets (#35909) (9395467), closes #35910

Bug Fixes


Alpha modules (2.233.0-alpha.0)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users.
  • elasticache-alpha: The engine property in NoPasswordUserProps has been removed.

Bug Fixes

  • bedrock-agentcore-alpha: runtime construct incorrectly forces default lifecycleConfiguration values (#36379) (7954354), closes #36376
  • elasticache-alpha: the default engine for NoPasswordUser contradict in the docs (#35920) (495fa37), closes #35847
  • mixins-preview: improving delivery source and delivery destination creation (#36314) (86092ab)

v2.232.2

Bug Fixes

  • re-export of ResourceEnvironment is not an alias (#36370) (6178d32)

Alpha modules (2.232.2-alpha.0)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.233.0-alpha.0 (2025-12-18)

⚠ BREAKING CHANGES

  • bedrock-agentcore-alpha: Runtime constructs will no longer automatically include lifecycleConfiguration with default values when not explicitly specified by users.
  • elasticache-alpha: The engine property in NoPasswordUserProps has been removed.

Bug Fixes

  • bedrock-agentcore-alpha: runtime construct incorrectly forces default lifecycleConfiguration values (#36379) (7954354), closes #36376
  • elasticache-alpha: the default engine for NoPasswordUser contradict in the docs (#35920) (495fa37), closes #35847
  • mixins-preview: improving delivery source and delivery destination creation (#36314) (86092ab)

2.232.2-alpha.0 (2025-12-12)

2.232.1-alpha.0 (2025-12-05)

2.232.0-alpha.0 (2025-12-04)

Bug Fixes

  • bedrock-agentcore-alpha: use static construct ID for asset-based runtime artifacts (#36241) (e2bdddd), closes #35968
  • mixins-preview: service exports are different then in aws-cdk-lib (#36201) (5858006), closes #36210
  • mixins-preview: strongly-typed ConstructSelector interface (#36266) (1d2f473)

2.231.0-alpha.0 (2025-12-01)

Features

2.230.0-alpha.0 (2025-11-26)

Features

... (truncated)

Commits
  • 1013a07 chore(release): 2.233.0
  • 7395b41 fix(ecs): removal of canContainersAccessInstanceRole instance role (#36362)
  • a6077a2 feat: update L1 CloudFormation resource definitions (#36390)
  • 01c7d2e fix(region-info): standalone use of @aws-cdk/region-info throws an `Cannot ...
  • a943b2f chore(ec2): add SES interface VPC endpoint (#36318)
  • 95d4ed5 feat(events-targets): support messageGroupId for standard SQS queues (#36068)
  • 54a4bc7 chore(appconfig): reference interfaces (#36392)
  • 25fbdbc chore(lambda): add dotnet10 runtime to Lambda (#36366)
  • e050e36 chore(apigateway): reference interfaces (#36373)
  • 61ee074 fix(cloudtrail): do not attach s3 bucket permission when orgId is not set for...
  • Additional commits viewable in compare view

Updates constructs from 10.4.2 to 10.4.4

Release notes

Sourced from constructs's releases.

v10.4.4

10.4.4 (2025-12-11)

Bug Fixes

v10.4.3

10.4.3 (2025-11-06)

Bug Fixes

Commits
Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for constructs since your current version.


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Jan 6, 2026
@dependabot dependabot bot requested review from a team as code owners January 6, 2026 18:05
@github-actions
Copy link

github-actions bot commented Jan 6, 2026

Hello 👋! When you're ready to run Chromatic, please apply the run_chromatic label to this PR.

You will need to reapply the label each time you want to run Chromatic.

Click here to see the Chromatic project.

@github-actions
Copy link

github-actions bot commented Jan 6, 2026

@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/cdk-5b4389be05 branch 3 times, most recently from d968be1 to b8b826b Compare January 8, 2026 18:38
Bumps the cdk group with 4 updates in the / directory: [@guardian/cdk](https://github.com/guardian/cdk), [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [constructs](https://github.com/aws/constructs).


Updates `@guardian/cdk` from 62.0.1 to 62.2.1
- [Release notes](https://github.com/guardian/cdk/releases)
- [Changelog](https://github.com/guardian/cdk/blob/main/CHANGELOG.md)
- [Commits](guardian/cdk@v62.0.1...v62.2.1)

Updates `aws-cdk` from 2.1030.0 to 2.1100.3
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/[email protected]/packages/aws-cdk)

Updates `aws-cdk-lib` from 2.220.0 to 2.233.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.233.0/packages/aws-cdk-lib)

Updates `constructs` from 10.4.2 to 10.4.4
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.4.2...v10.4.4)

---
updated-dependencies:
- dependency-name: "@guardian/cdk"
  dependency-version: 62.2.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: aws-cdk
  dependency-version: 2.1100.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.233.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: constructs
  dependency-version: 10.4.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: cdk
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/npm_and_yarn/cdk-5b4389be05 branch from b8b826b to f95aa64 Compare January 9, 2026 18:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant