fix(deps): update dependency software.amazon.awscdk:aws-cdk-lib to v2.248.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
software.amazon.awscdk:aws-cdk-lib	2.240.0 → 2.248.0

---

Release Notes

aws/aws-cdk (software.amazon.awscdk:aws-cdk-lib)

v2.248.0

Compare Source

Bug Fixes

• eks: downgrade isolated subnet validation from error to warning (#​37500) (470856c), closes #​37491

---

Alpha modules (2.248.0-alpha.0)

v2.247.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.

Features

• update L1 CloudFormation resource definitions (#​37410) (bd2c318)
• apigatewayv2: add role support for lambda authorizers (#​35706) (2fb2f16), closes #​35696
• batch: skip unregister job definition on update (#​36011) (2fb2240)
• elasticloadbalancingv2: jwt verification for application load balancer (#​36099) (aacd28a), closes #​36096

Bug Fixes

• bump brace-expansion from 5.0.3 to 5.0.5 to address CVE-2026-33750 (#​37379) (69cf4c9)
• prevent prototype pollution in 2 APIs (#​37453) (1016537)
• aws-cdk-lib: condensed stack trace hides namespaced package name (#​37413) (cb8e7fb)

---

Alpha modules (2.247.0-alpha.0)

Features

• mediapackagev2-alpha: new L2 construct (#​37279) (7debfb9)

v2.246.0

Compare Source

Features

• bedrock: add MiniMax and GLM foundation model identifiers (#​37348) (2015344), closes #​37347

Bug Fixes

• dynamodb: throw error when grantee is an unsupported ServicePrincipal (#​37335) (d12754f), closes #​35817 /github.com/aws/aws-cdk/issues/37273#issuecomment-4099645443
• lambda-nodejs: use powershell for spawn steps on Windows (#​37412) (a92105c), closes #​37387
• core: noisy property deprecation warnings (#​37415) (4fd0002), closes #​37407

Reverts

• core: add source tracing for L1 construct property mutations (#​37415) (4fd0002), closes aws/aws-cdk#37285

---

Alpha modules (2.246.0-alpha.0)

v2.245.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​37332) (6cdf84a)
• autoscaling: add instanceLifecyclePolicy support to AutoScalingGroup Property (#​36434) (b72ffcc)
• cloudfront: use JavaScript runtime 2.0 as the default for CloudFront Functions (under feature flag) (#​35941) (cd0df14)
• core: add source tracing for L1 construct property mutations (#​37285) (f0b6da8)
• ecr-assets: add support for docker build context (#​36930) (c0849ea), closes #​31598
• s3: add blockedEncryptionTypes field to s3.Bucket (#​37047) (262e8a7), closes #​36988
• synthetics: add enum value for Synthetics Canary NodeJS 3.1 runtime (#​37282) (af1e89c), closes /docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html#CloudWatch_Synthetics_runtimeversion-syn-nodejs-3

Bug Fixes

• aws-cdk-lib: toolkit is unaware of CDK app errors (#​37294) (093de92)
• eks: throw error when kubectl subnets are isolated (#​37217) (73e5006), closes #​26613
• lambda: fix typo in addPermission() warning message (#​37365) (fa21e62)
• lambda-nodejs: use direct spawn for local bundling (#​37292) (9bf4263)
• mixin: use withMixin in Stack to set mixin metadata in its constructs (#​37269) (293ce90), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts#L30
• rds: enablePerformanceInsights false is ignored when other performance insight properties are set (#​37287) (b4bca75), closes #​37051
• construct errors are rendered in a messy way (#​37290) (5104256)
• spec2cdk: throw on unrecognized uppercase prefix in event pattern (#​37283) (c68f2f5)

---

Alpha modules (2.245.0-alpha.0)

Features

• s3tables-alpha: add support for partition spec, sort order, and table properties (#​36811) (2696cd1)
• s3tables-alpha: add metrics configuration support for TableBucket (#​37275) (e8786f5)
• s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#​37277) (69c8944), closes #​33054

v2.244.0

Compare Source

Features

• codebuild: add support for macOS 26 runners (#​37240) (1b7b292), closes #​37241 #​35836
• update L1 CloudFormation resource definitions (#​37260) (40a5142)
• rds: add standalone resource creation for ParameterGroup (#​37165) (5441a51), closes #​9741
• ecs: add forceNewDeployment feature for ecs service (#​35726) (d16dc7e), closes #​27762
• mixins: helpers to convert between Aspects and Mixins (#​37235) (4537f69)
• spec2cdk: add actions() method to Grants classes (#​36987) (bbeaf5d)

Bug Fixes

• aws-cdk-lib: error annotations now have error codes (#​37270) (0b9629e)
• eks: clear OCI repo/version after local pull for Helm v4 compatibility (#​37142) (e6a8804), closes /github.com/helm/helm/blob/v3.19.0/pkg/action/install.go#L753-L769 /github.com/helm/helm/blob/main/pkg/action/install.go#L893-L909
• all errors now have error codes (#​36934) (408c12f)

---

Alpha modules (2.244.0-alpha.0)

Bug Fixes

• kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#​37155) (0a89447)

v2.243.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​37201) (85daaf5)
• cfn-property-mixins: graduate to stable @​aws-cdk/cfn-property-mixins package (#​37215) (f071e67)

Bug Fixes

• dynamodb: resource policies don't have the index ARNs when indexes are added after granting permissions (#​37213) (eb37071)

---

Alpha modules (2.243.0-alpha.0)

v2.242.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-ssm: AWS::SSM::MaintenanceWindow: Id attribute removed.

Features

• core: support PropertyMergeStrategy to merge arbitrary CFN property objects (#​37206) (793ad97)
• ecr: add RepositoryAutoDeleteImages mixin (#​37176) (3189116)
• s3 and ecs service mixins are now available in aws-cdk-lib (#​37151) (52c99da)
• update L1 CloudFormation resource definitions (#​37173) (1dfaf5f), closes #​37BFF5 #​37BFF5
• apigateway: add TLS 1.3 security policies for domain names (#​36303) (9d0300b), closes #​36280
• appsync: add EnhancedMetricsConfigProperty for GraphQL api (#​35328) (ebfaf89), closes #​29933
• opensearchservice: s3 vectors engine (#​36382) (c0b1d4e)
• s3: graduate BucketAutoDeleteObjects mixin into aws-cdk-lib (#​37161) (e5ddd79)

Bug Fixes

• aws-cdk-lib: Asset uses a lot of memory (#​37186) (70cae75)
• large amounts of metadata can break 512MB string limit (#​34480) (20c3154)
• opensearchservice: enableAutoSoftwareUpdate: false is not reflected in the CloudFormation template (#​37152) (dec8e6f), closes #​36382
• s3: discover existing bucket policies in default trait factory (#​37166) (f090816)

---

Alpha modules (2.242.0-alpha.0)

Features

• mixins-preview: allow passing resource objects into properties in CFN Property mixins (#​37148) (f238629)
• mixins-preview: generate EventBridge pattern for all events (#​37081) (f30e836)
• mixins-preview: support custom merge strategies via IMergeStrategy (#​37170) (0dec011)

v2.241.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-codedeploy: AWS::CodeDeploy::DeploymentGroup: Id attribute removed.

Features

• update L1 CloudFormation resource definitions (#​37103) (f1ee45c)
• autoscaling: add deletionProtection property to AutoScalingGroup (#​36924) (467f2b4)
• core: introducing CDK Mixins (#​37055) (cda96cb)
• eks: add support for Kubernetes version 1.35 (#​37065) (909fca3), closes #​36920 #​36016 cdklabs/awscdk-asset-kubectl#2669 #​37070 #​36950 #​36016
• s3: attribute-based access control (#​36229) (9ec4db3)

Bug Fixes

• bump minimatch to ^10.2.3 to resolve ReDoS vulnerabilities (#​37127) (c359329), closes #​37100
• dynamodb: fix SID for grants on multi-account global tables (#​37057) (98d5e82)
• rds: correct engine version deprecation tags and add missing versions (#​37080) (127b359), closes #​37079 #​36937

---

Alpha modules (2.241.0-alpha.0)

Features

• mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#​37042) (dd94c31)
• mixins-preview: cross account delivery destinations (#​36827) (a759eb6)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.