Skip to content

deps(npm)(deps): bump the javascript-minor-and-patch group across 1 directory with 2 updates - #338

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk/javascript-minor-and-patch-25f545c22b
Open

deps(npm)(deps): bump the javascript-minor-and-patch group across 1 directory with 2 updates#338
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk/javascript-minor-and-patch-25f545c22b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 24, 2026

Copy link
Copy Markdown
Contributor

Bumps the javascript-minor-and-patch group with 2 updates in the /src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk directory: aws-cdk-lib and aws-cdk.

Updates aws-cdk-lib from 2.265.0 to 2.266.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.266.0

Features

Bug Fixes

  • ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#37893) (ab272bc), closes #37853
  • sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#38339) (67a7eb1), closes #32526

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

  • glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
  • glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
  • mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

  • glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
  • glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
  • mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)

... (truncated)

Commits
  • 0163b4c chore: update analytics metadata blueprints
  • ccd2633 feat: update L1 CloudFormation resource definitions (#38578)
  • f0207a1 docs(s3): clarify cross-account replication ownership (#38349)
  • ab272bc fix(ec2): add DependsOn VPCGatewayAttachment to IPv6 default route (#37893)
  • 834909b docs(aws_elasticloadbalancerv2): documentation Update for multiValueHeaderEna...
  • ebb622f Merge branch 'main' into merge-back/2.265.0
  • 67a7eb1 fix(sns-subscriptions): use regionalized service principal for opt-in region ...
  • 94e5c1a feat: adding controlPlaneScalingConfig to Cluster (#36863)
  • See full diff in compare view

Updates aws-cdk from 2.1136.0 to 2.1138.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

Features

Bug Fixes

  • cli: cdk context header always claims the context was found in cdk.json (#1816) (b7783b5), closes #1814
  • cli: cdk flags --set leaks synthesized cloud assembly directories (#1833) (fd891fb), closes #1832
  • cli: fail fast when --proxy has no or an unsupported protocol (#1843) (da37001), closes #453
  • cli: refactor fails on stacks with bundled assets (#1812) (8458a4a), closes #1810
  • cli: reject non-numeric ids in cdk acknowledge (#1844) (c71ab23), closes #248

aws-cdk@v2.1137.0

2.1137.0 (2026-08-17)

Features

Bug Fixes

  • toolkit-lib: every change-set deployment announces "waiting in review for manual execution (--no-execute)" although the change set is executed (#1818) (86ee97e), closes #1815 #1273
Commits
  • a4c0282 feat(cli): add "errors-only" progress mode that only prints errors (#1800)
  • 8458a4a fix(cli): refactor fails on stacks with bundled assets (#1812)
  • fd891fb fix(cli): cdk flags --set leaks synthesized cloud assembly directories (#1833)
  • f8e7da1 feat(cli): support notification-arns in cdk import (#1740)
  • da37001 fix(cli): fail fast when --proxy has no or an unsupported protocol (#1843)
  • bcc0f2b chore(deps): upgrade dependencies (#1841)
  • b7783b5 fix(cli): cdk context header always claims the context was found in cdk.json ...
  • c71ab23 fix(cli): reject non-numeric ids in cdk acknowledge (#1844)
  • 0b2e50a feat(deps): upgrade aws-cdk-lib (#1840)
  • 86ee97e fix(toolkit-lib): every change-set deployment announces "waiting in review fo...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…irectory with 2 updates

Bumps the javascript-minor-and-patch group with 2 updates in the /src/StackAlchemist.Templates/Tier3-Infrastructure/infra/cdk directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `aws-cdk-lib` from 2.265.0 to 2.266.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.266.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1136.0 to 2.1138.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1138.0/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.266.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: javascript-minor-and-patch
- dependency-name: aws-cdk
  dependency-version: 2.1138.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: javascript-minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
@dependabot
dependabot Bot requested a review from stevenfackley as a code owner August 24, 2026 10:11
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Aug 24, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants