chore(deps): update dependency aws-cdk-lib to v2.131.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib (source)	2.124.0 -> 2.131.0

@coderabbitai: ignore

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.131.0

Compare Source

Features

• apigatewayv2-integrations: stepfunctions integration (#​28982) (19d75d6), closes #​28904
• applicationautoscaling: add missing PredefinedMetricType enum values (#​29066) (63390e1), closes #​29065
• appsync: environmentVariables property for GraphqlApi (#​29064) (f0af5b1)
• appsync: add the grant method to the imported GraphqlApi (#​29086) (7e8239b), closes #​23031
• core: add description to exportValue and exportStringListValue methods (#​29150) (2e080fe), closes #​29092
• docdb: support snapshot removal policy (3686f91)
• docdb: support snapshot removal policy (#​28798) (05b1bb0), closes #​28773
• ec2: support for the credit configuration mode for burstable instances (#​28728) (3cbad4a), closes #​19166
• ecs-patterns: allow custom ephemeral storage for ECS Fargate services (#​29275) (9156b13), closes #​18105 /docs.aws.amazon.com/AmazonECS/latest/developerguide/fargate-task-storage.html#fargate-task-storage-pv14 /github.com/aws/aws-cdk/commit/f1bf935c47006096b33fb7bf0c847ffab9230870#diff-dcfbc499b4d3c10afcd4e63ad0e4ecc54df2464e45af67f1fdae69d3fa2d43a0
• update L1 CloudFormation resource definitions (#​29257) (f3d74bb)

Bug Fixes

• autoscaling: step scaling without adjustment type fails (#​29158) (a7de7fe), closes /github.com/aws/aws-cdk/blob/v2.122.0/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L105-L115 /github.com/aws/aws-cdk/blob/v2.122.0/packages/aws-cdk-lib/aws-autoscaling/lib/step-scaling-policy.ts#L26
• cli: add skip-tests.txt file for v2.130.0 (#​29320) (fdacbe0), closes #​29313
• CLI: sam resources hidden in changeset diffs (#​29223) (aa186ac), closes #​29185
• cli-integ: add regression patch for cli integ fix (#​29313) (f803cf6), closes #​29305
• cli-integ: use Python_3_12 instead of Python_3_7 lambda runtime (#​29305) (8d07b85)
• cloudtrail: isOrganizationTrail attaches insufficient permissions to bucket (#​29242) (457afa9)
• core: a number of resources are not taggable with Tags.of() (#​28989) (7a4c189)
• custom-resources: custom resource response may silently get dropped (#​28826) (c52ff08)
• ec2: internet gateway is created even if public subnets are reserved (#​28607) (985c7e4), closes /github.com/aws/aws-cdk/blob/v2.118.0/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts#L1493-L1497 /github.com/aws/aws-cdk/blob/v2.118.0/packages/aws-cdk-lib/aws-ec2/lib/vpc.ts#L1513-L1517 #​28593
• ecs: autoscalingGroup attribute does not exist on ImportedCluster (#​29244) (98b9bf2), closes #​29241
• ecs: stack name can result in noncompliant capacity provider name (#​29235) (aca68ba), closes #​29151
• stepfunctions: escaped curly braces result in error during state machine execution (#​29267) (a21e429), closes #​29261

---

Alpha modules (2.131.0-alpha.0)

v2.130.0

Compare Source

Features

• appconfig: graduate to stable 🚀 (#​29188) (7feabc1)
• bedrock: stabilityai model (#​29210) (6c17ca5)

Bug Fixes

• custom-resources-handlers: s3 deployment handler log injection vulnerability (#​28599) (83aa395), closes #​28469
• pipelines: generates warning since CDK 2.128.0 due to addition of v2 pipeline support in aws-codepipeline (#​29199) (eca1bcf), closes #​29190 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/pipelines/lib/codepipeline/codepipeline.ts#L467-L480

---

Alpha modules (2.130.0-alpha.0)

v2.129.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​29191) (c579e3c)
• applicationautoscaling: timezone for ScheduledAction (#​29116) (8694125), closes #​22645 #​27754
• cloudfront-origin: adding FunctionUrlOrigin (#​29101) (2b0ed53)
• ecs: credentialSpecs in ContainerDefinitionOptions (#​29085) (e92dbec)
• events-targets: launchType property for ECS task (#​29069) (b4daf84), closes #​28990
• lambda: Add Ipv6AllowedforDualStack support for Lambda function (#​28928) (90caad9)
• lambda: adding .net 8 (dotnet8) lambda runtime support (#​29178) (74335f6)
• rds: support Aurora MySQL 3.05.2 (#​29166) (da0b82c)
• sns: enforce ssl with topic policy (#​29144) (a75f447), closes #​29142
• synthetics: latest canary runtimes for NodeJS, Python (#​29132) (3c122a4), closes #​29135

---

Alpha modules (2.129.0-alpha.0)

Bug Fixes

• appconfig: scope generated alarm role policy to '*' for composite alarm support (#​29171) (c17879d)

v2.128.0

Compare Source

Features

• cloudwatch: add TableWidget (#​29078) (4599aa3), closes #​28975
• codedeploy: ignoreAlarmConfiguration parameter to Deployment Groups (#​26957) (e890e89)
• codepipeline: pipeline type v2 with pipeline-level variables and triggers (#​28538) (40ffe2b), closes #​28476 #​28694
• ses: grant methods to IEmailIdentity (#​29084) (c3c771c), closes #​29083
• allow overriding the filename of the processed file after substitution (#​29029) (88decc6), closes #​28450

Bug Fixes

• lambda: @​deprecated tag to deprecated runtimes (#​29081) (2503f68)
• stepfunctions-tasks: missing permissions for running tasks on ecs (#​27891) (683d595), closes #​27803

---

Alpha modules (2.128.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• app-staging-synthesizer-alpha: stagingBucketEncryption property is now required. For existing apps, specify BucketEncryption.KMS to retain existing behavior. For new apps, choose the bucket encryption that makes most sense for your use case. BucketEncryption.S3_MANAGED is available and is intended to be the default when this module is stabilized.

Features

• app-staging-synthesizer-alpha: require passing stagingBucketEncryption and note that we intend to default to S3_MANAGED in the future (#​28978) (fc8b955), closes #​28815 #​28903 /github.com/aws/aws-cdk/pull/28978#issuecomment-1930007176
• pipes-enrichments: new EventBridge Pipes enrichments alpha module (#​29063) (5a54ec5)
• pipes-targets: new EventBridge Pipes targets alpha module (#​29057) (9419f54)
• scheduler-targets-alpha: SageMakerStartPipelineExecution Target (#​28927) (db260b0), closes #​27457

Bug Fixes

• appconfig: deployment recreated on every cdk deployment (#​28782) (a21731c)

v2.127.0

Compare Source

Features

• eks: support for Kubernetes version 1.29 (#​29040) (9dfabb1), closes #​27930 #​28983
• update L1 CloudFormation resource definitions (#​29053) (7fcd5be)
• codebuild: new CodeBuild lambda compute images (#​28630) (610fce1)
• codepipeline: change default value for crossAccountKeys to false (under feature flag) (#​28556) (144b1b9), closes /github.com/aws/aws-cdk/blob/f4c1d1253ee34c2837a57a93faa47c9da97ef6d8/packages/aws-cdk-lib/aws-codepipeline/lib/pipeline.ts#L380-L381 #​28247
• cognito: specifying the trigger event version in UserPool.addTrigger() (#​28899) (7f2d4f1), closes #​28683 #​28683
• ecs: idleTimeout and perRequestTimeout for service connect (#​28877) (ffcae2f)
• ecs-patterns: healthCheck property for ApplicationLoadBalancedFargateService (#​28797) (5996856), closes #​28796
• efs: create read-only file system for use as a destination of replication (#​28913) (832f70c), closes #​28912
• lambda: support enums in loggingFormat (#​28942) (fb2329f)
• route53: multivalue answer routing (#​28938) (0e6e37e), closes #​28939
• sns: message archive policy (#​29008) (9782f6b), closes #​29007
• stepfunctions: distributed map construct (#​28821) (97e3827), closes #​23216

Bug Fixes

• cloudwatch: Math:UnknownIdentifier warning for INSIGHT_RULE_METRIC (#​28870) (7eedb54)
• ec2: deploying an isolated subnet fails when ipv6AssignAddressOnCreation is set to true (#​28902) (9de77bb), closes /github.com/aws/aws-cdk/issues/28843#issuecomment-1909006632 #​28843
• lambda: LoggingConfig default error (#​28973) (8c79bdc)
• lambda-event-sources: update s3-event-source to accept IBucket (#​28943) (431df3b), closes #​4323 #​25782
• migrate: --from-stack does not retrieved processed template (#​29035) (74c4c6f)
• stepfunctions: the Retry field in the statesJson in CustomState is always overwrited (#​28793) (3c33e2c), closes /github.com/aws/aws-cdk/blob/45b8398bec9ba9c03f195c14f3b92188c9058a7b/packages/aws-cdk-lib/aws-stepfunctions/lib/states/custom-state.ts#L74 #​28769 #​28586

---

Alpha modules (2.127.0-alpha.0)

Features

• pipes-sources: new EventBridge Pipes sources alpha module (#​29048) (2e53568)

Bug Fixes

• appconfig: deprecate deploy method (#​29021) (9675bcd)
• integ-tests: cannot use v3 package name in an awsApiCall (#​28895) (5035080), closes /github.com/aws/aws-cdk/pull/27313/files#diff-3ab65cbf843775673ff370c9c90deceba5f0ead8a3e016e0c2f243d27bf84609 #​28844

v2.126.0

Compare Source

Features

• migrate: Add CDK Migrate --from-scan functionality (#​28962) (bbc14b3)

---

Alpha modules (2.126.0-alpha.0)

v2.125.0

Compare Source

Features

• applicationautoscaling: validate evaluationPeriods and datapointsToAlarm for step scaling policy (#​28880) (4034adb)
• batch: add fargate Runtime Platform properties to ECS Fargate C… (#​28841) (ac8251f), closes #​26484
• CLI: Diff Supports Import Change Sets (#​28787) (d973615), closes #​28336
• cloudfront: retrieve default distribution metrics (#​28894) (8e115db), closes #​28893
• cognito: validate oidc provider name (#​28802) (534794c), closes #​28667
• sqs: support for permission settings for dead letter source queues (#​28745) (9e21803), closes #​19766

Bug Fixes

• stepfunctions-tasks: mediapackagevod service generates wrong action in role policy (#​28775) (305dae0), closes #​28774
• revert deprecation of logRetention properties (#​28934) (f89a7d2), closes #​28919
• apigatewayv2: WebSocketAwsIntegration ignores requestParameters and integrationPassThrough behaviors (#​28921) (990ead3)
• eks: Could not use ec2 instance type and size that their names contains dashes (#​28040) (b32f47c), closes #​27587

---

Alpha modules (2.125.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• integ-runner: Parsing of the cli input caused arguments passed after the first instance --language <language> to be interpreted as a language as well. This prevented passing a test name after providing cli options. To overcome this limitation, integ-runner now requires an explicit --language option for each language you want to include: integ-runner --language javascript --language python. This was already documented that way and always the intended way to use this feature.
• neptune-alpha: Corrected LogRetention IDs for DatabaseCluster. Previously, regardless of the log type, the string ‘objectObject’ was always included, but after the correction, the log type is now included.

Features

• app-staging-synthesizer-alpha: encryption type for staging bucket (#​28903) (69f4b8d), closes #​28815
• pipes: EventBridge Pipes alpha module (#​28388) (2d9106b), closes #​23495

Bug Fixes

• integ-runner: cannot pass test name after --language (#​28922) (f9fbbb4)
• neptune-alpha: multiple cloudwatchLogsExports cannot be set when configuring log retention (#​28643) (56794fc), closes #​26295

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (2.131.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.