Update dependency software.amazon.awscdk:aws-cdk-lib to v2.131.0 - autoclosed

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
software.amazon.awscdk:aws-cdk-lib	2.93.0 -> 2.131.0

---

Release Notes

aws/aws-cdk (software.amazon.awscdk:aws-cdk-lib)

v2.131.0

Features

• apigatewayv2-integrations: stepfunctions integration (#​28982) (19d75d6), closes #​28904
• applicationautoscaling: add missing PredefinedMetricType enum values (#​29066) (63390e1), closes #​29065
• appsync: environmentVariables property for GraphqlApi (#​29064) (f0af5b1)
• appsync: add the grant method to the imported GraphqlApi (#​29086) (7e8239b), closes #​23031
• core: add description to exportValue and exportStringListValue methods (#​29150) (2e080fe), closes #​29092
• docdb: support snapshot removal policy (#​28798) (05b1bb0), closes #​28773
• ec2: support for the credit configuration mode for burstable instances (#​28728) (3cbad4a), closes #​19166
• ecs-patterns: allow custom ephemeral storage for ECS Fargate services (#​29275) (9156b13), closes #​18105
• update L1 CloudFormation resource definitions (#​29257) (f3d74bb)

Bug Fixes

• autoscaling: step scaling without adjustment type fails (#​29158) (a7de7fe)
• cli: add skip-tests.txt file for v2.130.0 (#​29320) (fdacbe0), closes #​29313
• CLI: sam resources hidden in changeset diffs (#​29223) (aa186ac), closes #​29185
• cli-integ: add regression patch for cli integ fix (#​29313) (f803cf6), closes #​29305
• cli-integ: use Python_3_12 instead of Python_3_7 lambda runtime (#​29305) (8d07b85)
• cloudtrail: isOrganizationTrail attaches insufficient permissions to bucket (#​29242) (457afa9)
• core: a number of resources are not taggable with Tags.of() (#​28989) (7a4c189)
• custom-resources: custom resource response may silently get dropped (#​28826) (c52ff08)
• ec2: internet gateway is created even if public subnets are reserved (#​28607) (985c7e4), closes #​28593
• ecs: autoscalingGroup attribute does not exist on ImportedCluster (#​29244) (98b9bf2), closes #​29241
• ecs: stack name can result in noncompliant capacity provider name (#​29235) (aca68ba), closes #​29151
• stepfunctions: escaped curly braces result in error during state machine execution (#​29267) (a21e429), closes #​29261

---

Alpha modules (2.131.0-alpha.0)

v2.130.0

Features

• appconfig: graduate to stable 🚀 (#​29188) (7feabc1)
• bedrock: stabilityai model (#​29210) (6c17ca5)

Bug Fixes

• custom-resources-handlers: s3 deployment handler log injection vulnerability (#​28599) (83aa395), closes #​28469
• pipelines: generates warning since CDK 2.128.0 due to addition of v2 pipeline support in aws-codepipeline (#​29199) (eca1bcf), closes #​29190 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/pipelines/lib/codepipeline/codepipeline.ts#L467-L480

---

Alpha modules (2.130.0-alpha.0)

v2.129.0

Features

• update L1 CloudFormation resource definitions (#​29191) (c579e3c)
• applicationautoscaling: timezone for ScheduledAction (#​29116) (8694125), closes #​22645 #​27754
• cloudfront-origin: adding FunctionUrlOrigin (#​29101) (2b0ed53)
• ecs: credentialSpecs in ContainerDefinitionOptions (#​29085) (e92dbec)
• events-targets: launchType property for ECS task (#​29069) (b4daf84), closes #​28990
• lambda: Add Ipv6AllowedforDualStack support for Lambda function (#​28928) (90caad9)
• lambda: adding .net 8 (dotnet8) lambda runtime support (#​29178) (74335f6)
• rds: support Aurora MySQL 3.05.2 (#​29166) (da0b82c)
• sns: enforce ssl with topic policy (#​29144) (a75f447), closes #​29142
• synthetics: latest canary runtimes for NodeJS, Python (#​29132) (3c122a4), closes #​29135

---

Alpha modules (2.129.0-alpha.0)

Bug Fixes

• appconfig: scope generated alarm role policy to '*' for composite alarm support (#​29171) (c17879d)

v2.128.0

Features

• cloudwatch: add TableWidget (#​29078) (4599aa3), closes #​28975
• codedeploy: ignoreAlarmConfiguration parameter to Deployment Groups (#​26957) (e890e89)
• codepipeline: pipeline type v2 with pipeline-level variables and triggers (#​28538) (40ffe2b), closes #​28476 #​28694
• ses: grant methods to IEmailIdentity (#​29084) (c3c771c), closes #​29083
• allow overriding the filename of the processed file after substitution (#​29029) (88decc6), closes #​28450

Bug Fixes

• lambda: @​deprecated tag to deprecated runtimes (#​29081) (2503f68)
• stepfunctions-tasks: missing permissions for running tasks on ecs (#​27891) (683d595), closes #​27803

---

Alpha modules (2.128.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• app-staging-synthesizer-alpha: stagingBucketEncryption property is now required. For existing apps, specify BucketEncryption.KMS to retain existing behavior. For new apps, choose the bucket encryption that makes most sense for your use case. BucketEncryption.S3_MANAGED is available and is intended to be the default when this module is stabilized.

Features

• app-staging-synthesizer-alpha: require passing stagingBucketEncryption and note that we intend to default to S3_MANAGED in the future (#​28978) (fc8b955), closes #​28815 #​28903 /github.com/aws/aws-cdk/pull/28978#issuecomment-1930007176
• pipes-enrichments: new EventBridge Pipes enrichments alpha module (#​29063) (5a54ec5)
• pipes-targets: new EventBridge Pipes targets alpha module (#​29057) (9419f54)
• scheduler-targets-alpha: SageMakerStartPipelineExecution Target (#​28927) (db260b0), closes #​27457

Bug Fixes

• appconfig: deployment recreated on every cdk deployment (#​28782) (a21731c)

v2.127.0

Features

• eks: support for Kubernetes version 1.29 (#​29040) (9dfabb1), closes #​27930 #​28983
• update L1 CloudFormation resource definitions (#​29053) (7fcd5be)
• codebuild: new CodeBuild lambda compute images (#​28630) (610fce1)
• codepipeline: change default value for crossAccountKeys to false (under feature flag) (#​28556) (144b1b9), closes /github.com/aws/aws-cdk/blob/f4c1d1253ee34c2837a57a93faa47c9da97ef6d8/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts#L380-L381 #​28247
• cognito: specifying the trigger event version in UserPool.addTrigger() (#​28899) (7f2d4f1), closes #​28683 #​28683
• ecs: idleTimeout and perRequestTimeout for service connect (#​28877) (ffcae2f)
• ecs-patterns: healthCheck property for ApplicationLoadBalancedFargateService (#​28797) (5996856), closes #​28796
• efs: create read-only file system for use as a destination of replication (#​28913) (832f70c), closes #​28912
• lambda: support enums in loggingFormat (#​28942) (fb2329f)
• route53: multivalue answer routing (#​28938) (0e6e37e), closes #​28939
• sns: message archive policy (#​29008) (9782f6b), closes #​29007
• stepfunctions: distributed map construct (#​28821) (97e3827), closes #​23216

Bug Fixes

• cloudwatch: Math:UnknownIdentifier warning for INSIGHT_RULE_METRIC (#​28870) (7eedb54)
• ec2: deploying an isolated subnet fails when ipv6AssignAddressOnCreation is set to true (#​28902) (9de77bb), closes /github.com/aws/aws-cdk/issues/28843#issuecomment-1909006632 #​28843
• lambda: LoggingConfig default error (#​28973) (8c79bdc)
• lambda-event-sources: update s3-event-source to accept IBucket (#​28943) (431df3b), closes #​4323 #​25782
• migrate: --from-stack does not retrieved processed template (#​29035) (74c4c6f)
• stepfunctions: the Retry field in the statesJson in CustomState is always overwrited (#​28793) (3c33e2c), closes /github.com/aws/aws-cdk/blob/45b8398bec9ba9c03f195c14f3b92188c9058a7b/packages/aws-cdk-lib/aws-stepfunctions/lib/states/custom-state.ts#L74 #​28769 #​28586

---

Alpha modules (2.127.0-alpha.0)

Features

• pipes-sources: new EventBridge Pipes sources alpha module (#​29048) (2e53568)

Bug Fixes

• appconfig: deprecate deploy method (#​29021) (9675bcd)
• integ-tests: cannot use v3 package name in an awsApiCall (#​28895) (5035080), closes /github.com/aws/aws-cdk/pull/27313/files#diff-3ab65cbf843775673ff370c9c90deceba5f0ead8a3e016e0c2f243d27bf84609 #​28844

v2.126.0

Features

• migrate: Add CDK Migrate --from-scan functionality (#​28962) (bbc14b3)

---

Alpha modules (2.126.0-alpha.0)

v2.125.0

Features

• applicationautoscaling: validate evaluationPeriods and datapointsToAlarm for step scaling policy (#​28880) (4034adb)
• batch: add fargate Runtime Platform properties to ECS Fargate C… (#​28841) (ac8251f), closes #​26484
• CLI: Diff Supports Import Change Sets (#​28787) (d973615), closes #​28336
• cloudfront: retrieve default distribution metrics (#​28894) (8e115db), closes #​28893
• cognito: validate oidc provider name (#​28802) (534794c), closes #​28667
• sqs: support for permission settings for dead letter source queues (#​28745) (9e21803), closes #​19766

Bug Fixes

• stepfunctions-tasks: mediapackagevod service generates wrong action in role policy (#​28775) (305dae0), closes #​28774
• revert deprecation of logRetention properties (#​28934) (f89a7d2), closes #​28919
• apigatewayv2: WebSocketAwsIntegration ignores requestParameters and integrationPassThrough behaviors (#​28921) (990ead3)
• eks: Could not use ec2 instance type and size that their names contains dashes (#​28040) (b32f47c), closes #​27587

---

Alpha modules (2.125.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• integ-runner: Parsing of the cli input caused arguments passed after the first instance --language <language> to be interpreted as a language as well. This prevented passing a test name after providing cli options. To overcome this limitation, integ-runner now requires an explicit --language option for each language you want to include: integ-runner --language javascript --language python. This was already documented that way and always the intended way to use this feature.
• neptune-alpha: Corrected LogRetention IDs for DatabaseCluster. Previously, regardless of the log type, the string ‘objectObject’ was always included, but after the correction, the log type is now included.

Features

• app-staging-synthesizer-alpha: encryption type for staging bucket (#​28903) (69f4b8d), closes #​28815
• pipes: EventBridge Pipes alpha module (#​28388) (2d9106b), closes #​23495

Bug Fixes

• integ-runner: cannot pass test name after --language (#​28922) (f9fbbb4)
• neptune-alpha: multiple cloudwatchLogsExports cannot be set when configuring log retention (#​28643) (56794fc), closes #​26295

v2.124.0

Features

• update L1 CloudFormation resource definitions (#​28878) (98cea43), closes /docs.aws.amazon.com/datasync/latest/userguide/create-s3-location.html#create-s3
• update L1 CloudFormation resource definitions (#​28886) (6a7a24a)
• cloudfront: additional cloudfront distribution metrics (#​28777) (95d187e), closes #​22922
• cloudfront: associate key value stores to functions (#​28571) (5ede456), closes #​28377
• route53: latency based routing (#​28723) (169fd91), closes #​28722
• s3: date-based partitioning for log objects (#​28790) (2952408), closes /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-properties-s3-bucket-loggingconfiguration.html#cfn-s3 #​28141
• sns: suffix matching to sub filter (#​28795) (2bf6d82), closes #​28765

Bug Fixes

• cloudwatch-actions: multiple alarms with LambdaAction for the same Lambda fail (under feature flag) (#​28712) (b1e3dfd)
• cognito: allow custom email msg placeholder (#​28832) (1dbfa14)
• eks: helm uninstall in custom resource handler does not respect Wait (#​28830) (7a30f5d), closes #​28831
• iam: allow intrinsic functions in deletion policy (#​28834) (2801355)
• iam: SamlConsolePrincipal returns incorrect url in GovCloud and ISO regions (#​28704) (c1f2abb), closes #​25723
• opensearch: always create CloudWatch Logs resource policy when logging is enabled (#​28707) (a5a8855), closes #​23637
• rds: proxy target is missing KMS permissions (#​28858) (c17dbde), closes #​28850

---

Alpha modules (2.124.0-alpha.0)

v2.123.0

Features

• apigatewayv2: AWS type websocket api integration in http api (#​28718) (4d7374e), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-apigatewayv2-integration.html#cfn-apigatewayv2
• autoscaling: datapointsToAlarm property for step scaling policy (#​28792) (baf2bfb), closes #​28749
• core: add validations for export name in CfnOutput (#​28575) (513d9fb), closes #​28563
• core: custom resources deprecate logRetention in favor of logGroup (#​28783) (ea34c89), closes #​28737
• dynamodb: import data from the bucket (#​28610) (45b8398), closes #​21825
• ec2: flow logs from TransitGateway and TransitGatewayAttachment (#​28605) (a238590), closes #​27222
• ecs: add neuron to ecs AMI hardware type (#​28819) (ef1d64e), closes #​28198
• ecs: support for explicit activation of the circuit breaker (#​28611) (bbb9555), closes #​27131
• ecs-patterns: cooldown parameter to QueueProcessingServiceBaseProps (#​28730) (b3b672a), closes #​8298
• logs: support data protection custom data identifiers (#​28553) (1222aaa), closes #​28430
• rds: allocatedStorage parameter for DatabaseInstanceReadReplica (#​28789) (df8fbc4), closes #​17083
• rds: Kerberos authentication support in Aurora Database Clusters (#​28559) (bdf4285), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/instance.ts#L625 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-rds/lib/instance.ts#L633 #​28050
• stepfunctions: support Map ItemSelector (#​28771) (b226a8c), closes #​27913 #​23265
• update L1 CloudFormation resource definitions (#​28811) (1b6be8b)

Bug Fixes

• appsync: add dependency to logretention for graphql apis log group (#​28548) (04e5480), closes #​26564
• CLI: cdk diff is not clear enough about using read-only change sets (#​28741) (bb50f97)
• lambda: lambda does not set environment variables for AWS_CODEGURU_PROFILER properties when creating Amazon CodeGuruProfiler profiling group (#​28762) (2511956), closes #​23511
• rds: Failed to create a Database Instance with Kerberos authentication configured (#​28601) (b620f1b), closes #​28600

---

Alpha modules (2.123.0-alpha.0)

Features

• iot-actions-alpha: open search action in IoT topic rule (#​28748) (84b23cb)

Bug Fixes

• amplify: addBranch fails synth with "cannot find entry file..." (#​28772) (cb522bb), closes #​28658 #​28764
• redshift: enableRebootForParameterChanges fails synth with "cannot find entry file…" (#​28760) (4952f36)

v2.122.0

Features

• CodePipelineActions: Add support for custom events in CodeCommit source action (#​28008) (c3802c4), closes #​12045
• ec2: add dual stack vpc support (#​28480) (caf83f1), closes #​894
• ecs: L2 for ebs task attach (#​28691) (fc0a89a)
• ecs: support for capacity provider managed instance draining (#​28672) (aaa2a09)
• efs: One-Zone filesystem (#​28501) (c0085d5), closes /github.com/aws/aws-cdk/issues/15864#issuecomment-895483167 #​15864
• efs: transition to archive for FileSystem (#​28719) (03c08b0), closes #​28720
• elbv2: Implement IConnectable to NLB (#​28494) (1e69cc6), closes #​26735
• firehose-destinations-alpha: support zero buffering (#​28716) (db2e78e), closes #​28714
• lambda: deprecate logRetention properties in favor of logGroup (#​28737) (4a09720)
• rds: Add log group property to RDS instance and RDS cluster (#​28676) (9aa7281)
• route53: weighted routing (#​28705) (4a0c24d), closes #​26753
• update L1 CloudFormation resource definitions (#​28677) (b2c60cb), closes /docs.aws.amazon.com/transfer/latest/userguide/create-b2b-server.html#configure-as2
• update L1 CloudFormation resource definitions (#​28684) (cbe2378), closes /docs.aws.amazon.com/kendra/latest/dg/ds-schemas.html#ds-s3

Bug Fixes

• cli: program execution fails without debug information (#​28687) (8fbd385)
• cli: running the cli with --debug does not print stack traces (#​28669) (dd04725)
• cloudformation-diff: Fix aws-sdk dependency issue (#​28680) (109b2ab), closes #​28679
• ec2: max iops value for io2 EBS volume is wrong (#​28695) (a30a205), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-volume.html#cfn-ec2
• ecs: EC2 metadata access is blocked when using EC2 capacity provider for autoscaling (#​28437) (30a0d33), closes /github.com/aws/aws-cdk/blame/2d9de189e583186f2b77386ae4fcfff42c864568/packages/aws-cdk-lib/aws-ecs/lib/cluster.ts#L502-L504 #​28270 #​28270
• lambda: circular dependencies when EFS and Lambda are deployed in separate stacks (#​28560) (6e9045f), closes /github.com/aws/aws-cdk/blob/dde59755cb71aee73a58f3b2c2068f2ae01e9b72/packages/aws-cdk-lib/aws-lambda/lib/function.ts#L1416 /github.com/aws/aws-cdk/blob/dde59755cb71aee73a58f3b2c2068f2ae01e9b72/packages/aws-cdk-lib/aws-ec2/lib/connections.ts#L157 /github.com/aws/aws-cdk/blob/dde59755cb71aee73a58f3b2c2068f2ae01e9b72/packages/aws-cdk-lib/aws-ec2/lib/security-group.ts#L84 /github.com/aws/aws-cdk/blob/dde59755cb71aee73a58f3b2c2068f2ae01e9b72/packages/aws-cdk-lib/aws-ec2/lib/connections.ts#L139 /github.com/aws/aws-cdk/blob/dde59755cb71aee73a58f3b2c2068f2ae01e9b72/packages/aws-cdk-lib/aws-ec2/lib/connections.ts#L141 #​18759
• opensearchservice: OpenSearchAccessPolicy unnecessarily attempts to install latest sdk version (#​28688) (d07deec)
• rds: RDS Parameter Group doesn't support custom removal policy (#​28660) (617a595)

Reverts

• allowing log group config for SFN CR (#​28699) (8a67f39), closes #​27310

---

Alpha modules (2.122.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• appconfig: deploymentStrategyId prop in fromDeploymentStrategyId now takes a DeploymentStrategyId rather than a string. To import a predefined deployment strategy id, use DeploymentStrategyId.CANARY_10_PERCENT_20_MINUTES. Otherwise, use DeploymentStrategyId.fromString('abc123').
• appconfig: ApplicationProps.name renamed to ApplicationProps.applicationName
  • appconfig: EnvironmentProps.name renamed to EnvironmentProps.environmentName
  • appconfig: DeploymentStrategyProps.name renamed to DeploymentStrategyProps.deploymentStrategyName
  • appconfig: ExtensionProps.name renamed to ExtensionProps.extensionName

Bug Fixes

• amplify: addBranch fails synth with "cannot find entry file..." (#​28658) (0f2b8f8), closes #​27955 #​28633 #​28089
• appconfig: fromDeploymentStrategyId takes an enum-like class rather than a string (#​28743) (2b59ed1), closes #​28671
• appconfig: prefix names with resource name (#​28742) (3960720), closes #​28671

v2.121.1

Reverts

• allowing log group config for SFN CR (#​28699) (f3f217e), closes #​27310

---

Alpha modules (2.121.1-alpha.0)

v2.121.0

Features

• ec2: add dual stack vpc support (#​28480) (754fd99), closes #​894

---

Alpha modules (2.121.0-alpha.0)

v2.120.0

Features

• ecs: support for capacity provider managed instance draining (#​28672) (cf97f47)

---

Alpha modules (2.120.0-alpha.0)

v2.119.0

Features

• certificatemanager: key algorithm support for PrivateCertificate and Certificate (#​28597) (1822cc9), closes #​22887
• cli: option to ignore no stacks (#​28387) (37c79b9), closes #​28371
• cloudwatch-actions: support alarm lambda action (#​28484) (b9f4923), closes #​28483
• codebuild: X-Large Linux compute type (#​28642) (7912d88)
• opensearchservice: TLS security policy for TLS 1.3 and perfect forward secrecy (#​28583) (9cf9baa)
• pipelines: expose crossRegionReplicationBuckets (#​28447) (d184ac2), closes #​28446
• rds: RDS for SQL Server 15.00.4345.5.v1 (#​28614) (0f38b6e)
• rds: RDS for SQL Server 16 without a specific minor version (#​28615) (382d261)
• signer: Notation-OCI-SHA384-ECDSA platform (#​28612) (d7aa196), closes #​28580
• update L1 CloudFormation resource definitions (#​28613) (fdf4830)

Bug Fixes

• cli: cdk diff falsely reports resource replacements on trivial template changes (#​28336) (10ed194)
• core: single-file bundling breaks due to left over temp dir (#​28566) (a74aacf)
• ec2: passing keypair to instance unexpectedly does nothing (#​28482) (22e6ce8), closes #​28478
• ecs: unnecessary CloudWatch logs ResourcePolicy (#​28495) (5f96d13), #​22307 #​20313
• stepfunctions: retry block in CustomState is always empty (#​28598) (0042e53), closes #​28586

---

Alpha modules (2.119.0-alpha.0)

Features

• neptune-alpha: engineVersion v1.3 (#​28647) (957598b), closes #​28648

v2.118.0

Features

• appsync: IntrospectionConfig property (#​28500) (98ed6b3), closes #​28429
• autoscaling: add support for InstanceRequirements property (#​28464) (276e3a6), closes #​28393
• cloudfront: CloudFront Function runtime property (#​28099) (9b466ae), closes #​28163
• cloudfront: Key Value Store L2 (#​28473) (030db42), closes #​28377
• codepipeline-actions: more convenient methods to CacheControl (#​28491) (a59dc0c), closes #​25477
• ecs: interactive option in ContainerDefinitionOptions (#​28536) (1f9788f), closes #​24326
• ecs: enable cluster to grant task protection API permissions to IAM entities (#​28486) (9bc972b), closes #​26233
• ecs: nvidia support to BottlerocketEcsVariant enum for gpu-accelerated tasks (#​28488) (832e29a), closes #​25980
• iam: validate roleName (#​28509) (999c01a), closes #​28502
• opensearchservice: ip address type for domain (#​28497) (6b80338), closes #​28436
• rds: timeout and timeoutAction properties to ServerlessCluster (#​28534) (508825b), closes #​27183
• rds: ClientPasswordAuthType property on DatabaseProxy (#​28540) (669e6ff), closes #​28415
• rds: new Aurora Postgres engine versions (#​28508) (9d8b06f)
• stepfunctions-tasks: add timeout parameter for EmrCreateCluster (#​28532) (ca91626), closes [/github.com/feat(stepfunctions-tasks): add validations for EmrCreateCluster aws/aws-cdk#28529#discussion_r1438587964](https://github.com/aws//github.com/aws/aws-cdk/pull/28529/issu

---

Configuration

📅 Schedule: Branch creation - "after 6am,before 8pm" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.