Skip to content

Bump minimatch and aws-cdk-lib#496

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-1b315e02bd
Open

Bump minimatch and aws-cdk-lib#496
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/npm_and_yarn/multi-1b315e02bd

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 10, 2026

Bumps minimatch to 3.1.5 and updates ancestor dependencies minimatch and aws-cdk-lib. These dependencies need to be updated together.

Updates minimatch from 3.1.2 to 3.1.5

Commits

Updates minimatch from 9.0.5 to 9.0.9

Commits

Updates aws-cdk-lib from 2.233.0 to 2.242.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.242.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

    • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.

Features

Bug Fixes

  • aws-cdk-lib: Asset uses a lot of memory (#37186) (70cae75)
  • large amounts of metadata can break 512MB string limit (#34480) (20c3154)
  • opensearchservice: enableAutoSoftwareUpdate: false is not reflected in the CloudFormation template (#37152) (dec8e6f), closes #36382
  • s3: discover existing bucket policies in default trait factory (#37166) (f090816)

Alpha modules (2.242.0-alpha.0)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

v2.241.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed.

Features

Bug Fixes

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.242.0-alpha.0 (2026-03-10)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

2.241.0-alpha.0 (2026-03-02)

Features

  • mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#37042) (dd94c31)
  • mixins-preview: cross account delivery destinations (#36827) (a759eb6)

2.240.0-alpha.0 (2026-02-23)

2.239.0-alpha.0 (2026-02-19)

⚠ BREAKING CHANGES

redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE

Features

  • bedrock-agentcore-alpha: add fromCodeAsset method to create runtime artifact with local code assets (#36472) (c5a87e6), closes #36473
  • bedrock-agentcore-alpha: added new target type (api gateway) in agentcore gateway target. (#36841) (0842754), closes #36817
  • mixins-preview: add ECS ClusterSettingsMixin (#36796) (b8ab5be)
  • mixins-preview: add s3 bucket mixin for publicAccessBlock (#36905) (feed4b2)
  • mixins-preview: send Vended Logs to pre-created DeliveryDestination using toDestination() (#36896) (48f1fe6)

Bug Fixes

  • redshift-alpha: update default node type from DC2_LARGE to RA3_LARGE (#36516) (ea19e5c), closes #36416

2.238.0-alpha.0 (2026-02-09)

Features

  • eks-v2-alpha: add support for bootstrapSelfManagedAddons (#36740) (1ffe38d)
  • eks-v2-alpha: add support for EKS hybrid nodes (#36749) (48ace56)

... (truncated)

Commits
  • 5e49f50 chore: update analytics metadata blueprints
  • 3189116 feat(ecr): add RepositoryAutoDeleteImages mixin (#37176)
  • 793ad97 feat(core): support PropertyMergeStrategy to merge arbitrary CFN property o...
  • 70cae75 fix(aws-cdk-lib): Asset uses a lot of memory (#37186)
  • 1dfaf5f feat: update L1 CloudFormation resource definitions (#37173)
  • 20c3154 fix: large amounts of metadata can break 512MB string limit (#34480)
  • e5ddd79 feat(s3): graduate BucketAutoDeleteObjects mixin into aws-cdk-lib (#37161)
  • fee849b chore: use slightly less memory for construct iteration (#36986)
  • c0b1d4e feat(opensearchservice): s3 vectors engine (#36382)
  • f090816 fix(s3): discover existing bucket policies in default trait factory (#37166)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.5 and updates ancestor dependencies [minimatch](https://github.com/isaacs/minimatch) and [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib). These dependencies need to be updated together.


Updates `minimatch` from 3.1.2 to 3.1.5
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `minimatch` from 9.0.5 to 9.0.9
- [Changelog](https://github.com/isaacs/minimatch/blob/main/changelog.md)
- [Commits](isaacs/minimatch@v3.1.2...v3.1.5)

Updates `aws-cdk-lib` from 2.233.0 to 2.242.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/v2.242.0/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.242.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: minimatch
  dependency-version: 3.1.5
  dependency-type: indirect
- dependency-name: minimatch
  dependency-version: 9.0.9
  dependency-type: indirect
- dependency-name: aws-cdk-lib
  dependency-version: 2.242.0
  dependency-type: direct:development
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Mar 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants