Skip to content

Bump the npm group across 3 directories with 3 updates - #309

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-6c7e2649b4
Oct 27, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-6c7e2649b4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 27, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 3 updates in the / directory: aws-cdk-lib, aws-cdk and @aws-cdk/cloud-assembly-schema.
Bumps the npm group with 3 updates in the /example directory: aws-cdk-lib, aws-cdk and @aws-cdk/cloud-assembly-schema.
Bumps the npm group with 3 updates in the /package directory: aws-cdk-lib, aws-cdk and @aws-cdk/cloud-assembly-schema.

Updates aws-cdk-lib from 2.273.0 to 2.274.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.274.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.
aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.
aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map<string, string>.
aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.
aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).

Features

  • update L1 CloudFormation resource definitions (#39139) (8a10135)
  • cloudfront: add always-amz-auth signing behavior for origin access control (#39196) (7cf79a1), closes #39195 #38629
  • cloudfront: add sigv4a signing protocol for origin access control (#38629) (805bfbe), closes #38627 #38627
  • codebuild: add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_STANDARD_4_0 images (#37588) (3beecb3), closes #37586

Bug Fixes

  • apigateway: log group destination ARN causes permanent Stage drift (#38816) (65c6aa0), closes #38796
  • bedrockagentcore: Runtime annotations cannot be acknowledged (#38770) (165bf8b), closes #38741
  • core: can't trace construct to template for nested stacks (#39141) (173a2ff)
  • core: preserve unresolved Tags property tokens (#37759) (644489c), closes #37734
  • core: validations with different messages are confusingly combined (#39132) (54fb0ea), closes #38982
  • stepfunctions: default StateMachine IAM role  missing confused deputy protection best practices (#37688) (638a681), closes #37567 #37567 #37567

Alpha modules (2.274.0-alpha.0)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.275.0-alpha.0 (2026-10-26)

2.274.0-alpha.0 (2026-10-20)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

Bug Fixes

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer

... (truncated)

Commits
  • 73c853e chore: update analytics metadata blueprints
  • 0592a9c chore(release): 2.274.0
  • f6ad73c chore: npm-check-updates && yarn upgrade (#38488)
  • a74fc58 chore(deps): upgrade @​aws-cdk/cloud-assembly-api to ^2.5.0 (#39349)
  • dcd8b3a chore(deps): upgrade @​aws-cdk/cloud-assembly-schema to ^55.0.0 (#39314)
  • 54fb0ea fix(core): validations with different messages are confusingly combined (#39132)
  • e111402 chore(bedrock-alpha): add OpenAI GPT-6 and GPT-6.1 foundation models (#38927)
  • 8a10135 feat: update L1 CloudFormation resource definitions (#39139)
  • 3beecb3 feat(codebuild): add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_...
  • 65c6aa0 fix(apigateway): log group destination ARN causes permanent Stage drift (#38816)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1145.0 to 2.1146.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1146.0

2.1146.0 (2026-10-20)

Features

Bug Fixes

Commits
  • 60e0a2d fix(toolkit-lib): region lookup ignores AWS_EC2_METADATA_DISABLED (#2049)
  • 2e67f12 chore(deps): upgrade dependencies (#2052)
  • 1b0155a fix(toolkit-lib): change-set diff hides an added key in a JSON string with an...
  • 0b4f9eb fix(toolkit-lib): restore the replacement guard when rollback is disabled (#2...
  • 9091cb5 fix(toolkit-lib): commands fail when deployed template has duplicate keys (#2...
  • d27b445 fix(cli): pass CloudFormation parameters to diff change sets (#2030)
  • 01e711b feat(deps): upgrade aws-cdk-lib (#2038)
  • 3589463 chore(deps): upgrade dependencies (#2037)
  • 133dfa4 feat(toolkit-lib): support CloudFormation rollback triggers (#1881)
  • See full diff in compare view

Updates @aws-cdk/cloud-assembly-schema from 54.26.0 to 55.1.0

Release notes

Sourced from @​aws-cdk/cloud-assembly-schema's releases.

@​aws-cdk/cloud-assembly-schema@​v55.1.0

55.1.0 (2026-10-20)

@​aws-cdk/cloud-assembly-schema@​v55.0.0

55.0.0 (2026-10-08)

Features

Commits

Updates aws-cdk-lib from 2.273.0 to 2.274.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.274.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.
aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.
aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map<string, string>.
aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.
aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).

Features

  • update L1 CloudFormation resource definitions (#39139) (8a10135)
  • cloudfront: add always-amz-auth signing behavior for origin access control (#39196) (7cf79a1), closes #39195 #38629
  • cloudfront: add sigv4a signing protocol for origin access control (#38629) (805bfbe), closes #38627 #38627
  • codebuild: add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_STANDARD_4_0 images (#37588) (3beecb3), closes #37586

Bug Fixes

  • apigateway: log group destination ARN causes permanent Stage drift (#38816) (65c6aa0), closes #38796
  • bedrockagentcore: Runtime annotations cannot be acknowledged (#38770) (165bf8b), closes #38741
  • core: can't trace construct to template for nested stacks (#39141) (173a2ff)
  • core: preserve unresolved Tags property tokens (#37759) (644489c), closes #37734
  • core: validations with different messages are confusingly combined (#39132) (54fb0ea), closes #38982
  • stepfunctions: default StateMachine IAM role  missing confused deputy protection best practices (#37688) (638a681), closes #37567 #37567 #37567

Alpha modules (2.274.0-alpha.0)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.275.0-alpha.0 (2026-10-26)

2.274.0-alpha.0 (2026-10-20)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

Bug Fixes

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer

... (truncated)

Commits
  • 73c853e chore: update analytics metadata blueprints
  • 0592a9c chore(release): 2.274.0
  • f6ad73c chore: npm-check-updates && yarn upgrade (#38488)
  • a74fc58 chore(deps): upgrade @​aws-cdk/cloud-assembly-api to ^2.5.0 (#39349)
  • dcd8b3a chore(deps): upgrade @​aws-cdk/cloud-assembly-schema to ^55.0.0 (#39314)
  • 54fb0ea fix(core): validations with different messages are confusingly combined (#39132)
  • e111402 chore(bedrock-alpha): add OpenAI GPT-6 and GPT-6.1 foundation models (#38927)
  • 8a10135 feat: update L1 CloudFormation resource definitions (#39139)
  • 3beecb3 feat(codebuild): add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_...
  • 65c6aa0 fix(apigateway): log group destination ARN causes permanent Stage drift (#38816)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1145.0 to 2.1146.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1146.0

2.1146.0 (2026-10-20)

Features

Bug Fixes

Commits
  • 60e0a2d fix(toolkit-lib): region lookup ignores AWS_EC2_METADATA_DISABLED (#2049)
  • 2e67f12 chore(deps): upgrade dependencies (#2052)
  • 1b0155a fix(toolkit-lib): change-set diff hides an added key in a JSON string with an...
  • 0b4f9eb fix(toolkit-lib): restore the replacement guard when rollback is disabled (#2...
  • 9091cb5 fix(toolkit-lib): commands fail when deployed template has duplicate keys (#2...
  • d27b445 fix(cli): pass CloudFormation parameters to diff change sets (#2030)
  • 01e711b feat(deps): upgrade aws-cdk-lib (#2038)
  • 3589463 chore(deps): upgrade dependencies (#2037)
  • 133dfa4 feat(toolkit-lib): support CloudFormation rollback triggers (#1881)
  • See full diff in compare view

Updates @aws-cdk/cloud-assembly-schema from 54.26.0 to 55.1.0

Release notes

Sourced from @​aws-cdk/cloud-assembly-schema's releases.

@​aws-cdk/cloud-assembly-schema@​v55.1.0

55.1.0 (2026-10-20)

@​aws-cdk/cloud-assembly-schema@​v55.0.0

55.0.0 (2026-10-08)

Features

Commits

Updates aws-cdk-lib from 2.273.0 to 2.274.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.274.0

⚠ BREAKING CHANGES

  • ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-cloudwatch: AWS::CloudWatch::AnomalyDetector: Id attribute removed.
aws-glue: AWS::Glue::Table: Id attribute removed.
aws-glue: AWS::Glue::Table: IcebergInput.MetadataOperation type narrowed from json to string.
aws-glue: AWS::Glue::Table: IcebergTableInput.Properties type narrowed from json to Map<string, string>.
aws-iot: AWS::IoT::PolicyPrincipalAttachment: Id attribute removed.
aws-quicksight: AWS::QuickSight::Analysis: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Dashboard: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).
aws-quicksight: AWS::QuickSight::Template: SheetLayoutGroupMember.Type type narrowed from json to string enum (ELEMENT|GROUP).

Features

  • update L1 CloudFormation resource definitions (#39139) (8a10135)
  • cloudfront: add always-amz-auth signing behavior for origin access control (#39196) (7cf79a1), closes #39195 #38629
  • cloudfront: add sigv4a signing protocol for origin access control (#38629) (805bfbe), closes #38627 #38627
  • codebuild: add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_STANDARD_4_0 images (#37588) (3beecb3), closes #37586

Bug Fixes

  • apigateway: log group destination ARN causes permanent Stage drift (#38816) (65c6aa0), closes #38796
  • bedrockagentcore: Runtime annotations cannot be acknowledged (#38770) (165bf8b), closes #38741
  • core: can't trace construct to template for nested stacks (#39141) (173a2ff)
  • core: preserve unresolved Tags property tokens (#37759) (644489c), closes #37734
  • core: validations with different messages are confusingly combined (#39132) (54fb0ea), closes #38982
  • stepfunctions: default StateMachine IAM role  missing confused deputy protection best practices (#37688) (638a681), closes #37567 #37567 #37567

Alpha modules (2.274.0-alpha.0)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.275.0-alpha.0 (2026-10-26)

2.274.0-alpha.0 (2026-10-20)

Features

Bug Fixes

  • ec2-alpha: allow valid secondary CIDR blocks outside RFC 1918 (#36873) (8f48c90), closes #36111
  • redshift-alpha: backslashes in user passwords and comments are not preserved (#39306) (1f752b6)

2.273.0-alpha.0 (2026-10-08)

⚠ BREAKING CHANGES

  • redshift-alpha: PUBLIC in any ASCII letter case is rejected as the name of a created user, or of an imported user that is granted table privileges. Existing PUBLIC grants are not removed, but narrowing one is rejected. Migrating to an ordinary name still works.
  • redshift-alpha: The loggingProperties prop on ClusterProps (and the LoggingProperties interface) has been removed from @aws-cdk/aws-redshift-alpha. Use the new logging prop with ClusterLogging.s3({ bucket, keyPrefix }) or ClusterLogging.cloudWatch({ logExports }) instead.

Features

Bug Fixes

2.272.0-alpha.0 (2026-09-30)

2.271.0-alpha.0 (2026-09-25)

2.270.0-alpha.0 (2026-09-17)

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

  • glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer

... (truncated)

Commits
  • 73c853e chore: update analytics metadata blueprints
  • 0592a9c chore(release): 2.274.0
  • f6ad73c chore: npm-check-updates && yarn upgrade (#38488)
  • a74fc58 chore(deps): upgrade @​aws-cdk/cloud-assembly-api to ^2.5.0 (#39349)
  • dcd8b3a chore(deps): upgrade @​aws-cdk/cloud-assembly-schema to ^55.0.0 (#39314)
  • 54fb0ea fix(core): validations with different messages are confusingly combined (#39132)
  • e111402 chore(bedrock-alpha): add OpenAI GPT-6 and GPT-6.1 foundation models (#38927)
  • 8a10135 feat: update L1 CloudFormation resource definitions (#39139)
  • 3beecb3 feat(codebuild): add STANDARD_8_0, AMAZON_LINUX_2023_6 and AMAZON_LINUX_2023_...
  • 65c6aa0 fix(apigateway): log group destination ARN causes permanent Stage drift (#38816)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1145.0 to 2.1146.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1146.0

2.1146.0 (2026-10-20)

Features

Bug Fixes

Commits
  • 60e0a2d fix(toolkit-lib): region lookup ignores AWS_EC2_METADATA_DISABLED (#2049)
  • 2e67f12 chore(deps): upgrade dependencies (#2052)
  • 1b0155a fix(toolkit-lib): change-set diff hides an added key in a JSON string with an...
  • 0b4f9eb fix(toolkit-lib): restore the replacement guard when rollback is disabled (#2...
  • 9091cb5 fix(toolkit-lib): commands fail when deployed template has duplicate keys (#2...
  • d27b445 fix(cli): pass CloudFormation parameters to diff change sets (#2030)
  • 01e711b feat(deps): upgrade aws-cdk-lib (#2038)
  • 3589463 chore(deps): upgrade dependencies (#2037)
  • 133dfa4 feat(toolkit-lib): support CloudFormation rollback triggers (#1881)
  • See full diff in compare view

Updates @aws-cdk/cloud-assembly-schema from 54.26.0 to 55.1.0

Release notes

Sourced from @​aws-cdk/cloud-assembly-schema's releases.

@​aws-cdk/cloud-assembly-schema@​v55.1.0

55.1....

Description has been truncated

Bumps the npm group with 3 updates in the / directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) and [@aws-cdk/cloud-assembly-schema](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/cloud-assembly-schema).
Bumps the npm group with 3 updates in the /example directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) and [@aws-cdk/cloud-assembly-schema](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/cloud-assembly-schema).
Bumps the npm group with 3 updates in the /package directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib), [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) and [@aws-cdk/cloud-assembly-schema](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/@aws-cdk/cloud-assembly-schema).


Updates `aws-cdk-lib` from 2.273.0 to 2.274.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.274.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1145.0 to 2.1146.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1146.0/packages/aws-cdk)

Updates `@aws-cdk/cloud-assembly-schema` from 54.26.0 to 55.1.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/cloud-assembly-schema@v55.1.0/packages/@aws-cdk/cloud-assembly-schema)

Updates `aws-cdk-lib` from 2.273.0 to 2.274.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.274.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1145.0 to 2.1146.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1146.0/packages/aws-cdk)

Updates `@aws-cdk/cloud-assembly-schema` from 54.26.0 to 55.1.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/cloud-assembly-schema@v55.1.0/packages/@aws-cdk/cloud-assembly-schema)

Updates `aws-cdk-lib` from 2.273.0 to 2.274.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.274.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1145.0 to 2.1146.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1146.0/packages/aws-cdk)

Updates `@aws-cdk/cloud-assembly-schema` from 54.26.0 to 55.1.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/@aws-cdk/cloud-assembly-schema@v55.1.0/packages/@aws-cdk/cloud-assembly-schema)

---
updated-dependencies:
- dependency-name: aws-cdk-lib
  dependency-version: 2.274.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1146.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@aws-cdk/cloud-assembly-schema"
  dependency-version: 55.1.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.274.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1146.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@aws-cdk/cloud-assembly-schema"
  dependency-version: 55.1.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.274.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1146.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: "@aws-cdk/cloud-assembly-schema"
  dependency-version: 55.1.0
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Oct 27, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) October 27, 2026 18:09
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/aws-cdk 2.1146.0 UnknownUnknown
npm/aws-cdk-lib 2.274.0 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Fuzzing🟢 10project is fuzzed
SAST🟢 9SAST tool detected but not run on all commits

Scanned Files

  • example/package.json

@github-actions
github-actions Bot merged commit 84ee190 into main Oct 27, 2026
4 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/npm-6c7e2649b4 branch October 27, 2026 18:10
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant