chore(deps): update dependency @aws-cdk/assert to v2.68.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
@aws-cdk/assert (source)	2.27.0 -> 2.68.0

---

Release Notes

aws/aws-cdk (@​aws-cdk/assert)

v2.68.0

Compare Source

Bug Fixes

• apprunner-alpha: env vars and secrets can't solely be added via .add*() methods (#​24346) (45195b6), closes #​24345
• cli: cannot cdk import resources with multiple identifiers (#​24439) (a70ff1a), closes #​20895
• core: Fix dotnet version check to allow .NET 7.0 (#​24467) (a4856e9), closes #​24466
• lambda-nodejs: esbuild preCompilation tsconfig precedence is wrong (#​23871) (790a709)
• lambda-nodejs: Required auto prefix of handler with index. breaks custom non-index handler settings used by layers (#​24406) (d7a1c34), closes #​24403
• rds: add clusterResourceIdentifier property to database cluster (#​23605) (6bda4e5)

---

Alpha modules (2.68.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
  Since the application RAM share name is calculated by the application construct, where one property is removed. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.

Features

• msk: add Kafka version 3.3.2 (#​24440) (1b2014e), closes #​24432
• redshift: column compression encodings and comments can now be customised (#​24177) (1ca3e00), closes #​24165 #​23597 #​22506
• redshift: columns require an id attribute (under feature flag) (#​24272) (9a07ab0), closes #​24234

Bug Fixes

• servicecatalogappregistry: allow disabling automatic CfnOutput (#​24483) (3db1a0d), closes #​23779
• servicecatalogappregistry: Associate an application with attribute group (#​24378) (d1264c1)

v2.67.0

Compare Source

Features

• apigateway: minCompressionSize on SpecRestApi (#​24067) (2a81f0f), closes #​22926
• bootstrap: prevent accidental bootstrap overwrites (#​24302) (3b251a5)
• cli: update csharp & fsharp template to net6.0 (#​23926) (3bd611d), closes #​23921
• codebuild: adds file asset support to build-spec (#​24289) (7cda567), closes #​1138
• ecs: enable default capacity provider strategy (#​23955) (5a30ea6)
• eks: add helm flag --skip-crds (#​24213) (f68dbc2), closes #​24296
• sns: Add FilterPolicyScope support (#​23108) (d986e14)
• stepfunctions-tasks: add revision number (#​24226) (643042b), closes #​23491

Bug Fixes

• cdk-assets: Error when building Docker Image Assets with Podman (#​24003) (4b08e20), closes /github.com/aws/aws-cdk/issues/16209#issue-978267269 #​16209
• cloudwatch: math expressions incorrectly warn about search and metrics (#​24313) (f3596eb), closes #​20136
• ec2: userData in launchTemplate is created automatically when machineImege is provided (#​23593) (bb4311b), closes #​23592 /github.com/aws/aws-cdk/pull/12385#discussion_r564614928
• ecr-assets: fix repeated deploys of stacks with tar assets (#​23497) (c2296a8), closes #​18823 #​18822
• efs: support tagging for access point (#​24336) (f9af47f), closes #​20743
• eks: changing the subnets or securityGroupIds order causes an error (#​24163) (09c2c19), closes #​24162
• eks: fix helm deploy login for public ECR repositories (#​24104) (71ec6b6), closes #​23977
• eks: integ tests errors (#​24276) (07f2d7b)
• secretsmanager: secret resource policy already exists in stack (under feature flag) (#​24365) (7dd8b7e), closes #​24383
• servicecatalog: wrong asset path is generated in case outdir is absolute (#​24393) (0ebbf58), closes #​24392
• sns: sns subscription filter policy condition limit should be 150 (#​24269) (1e1131c)
• Correct SamlConsolePrincipal for non-China (#​24277) (e47646c), closes #​24243

---

Alpha modules (2.67.0-alpha.0)

Features

• msk: add Kafka versions 3.1.1, 3.2.0, and and 3.3.1 (#​23918) (53a1d5f), closes #​23899

Bug Fixes

• servicecatalogappregistry: applicationName can not be changed after deployment (#​24409) (6aa763f)

v2.66.1

Compare Source

Bug Fixes

• Correct SamlConsolePrincipal for non-China (#​24277) (d562871), closes #​24243

---

Alpha modules (2.66.1-alpha.0)

v2.66.0

Compare Source

Features

• cloudwatch: parse all metrics statistics and support long format (#​23095) (853e3d6), closes #​23074 40aws-cdk/aws-cloudwatch/lib/metric.ts#L295-L296
• core: Size.bytes() (#​24136) (9b2a45a), closes #​24106
• efs: support file system policy (#​24196) (5e0f44b), closes #​24042
• logs: Add support for multiple parse and filter statements in QueryString (#​24022) (75eb933)
• stepfunctions: removal policy for state machines (#​24105) (5f33a26)

Bug Fixes

• apigateway: rest api deployment does not depend on authorizers (#​23215) (12e13c1)
• cognito: changing installLatestAwsSdk breaks Client Secret reference (#​23798) (844d407), closes #​23796
• ecs: validate ecs healthcheck (#​24197) (89802a9)
• eks: nested OCI repository names for private ECR helmchart deployments are not properly handled (#​23378) (72f2a95)
• lambda: RuntimeManagementMode.FUNCTION_UPDATE has wrong value (#​24252) (fdb0cf1)

---

Alpha modules (2.66.0-alpha.0)

Features

• apigatewayv2: allow websockets routes to return response to client (#​22984) (f8fe1d2)
• lambda-python: add optional poetry bundling exclusion list parameter (#​23670) (53beeae), closes #​22585 #​22585
• redshift: optionally reboot Clusters to apply parameter changes (#​22063) (f61d950), closes #​22009 #​22055 #​22059

Bug Fixes

• servicecatalogappregistry: Allow user to control stack id via stack name for Application stack (#​24171) (0c7c7e4), closes #​24160

v2.65.0

Compare Source

Features

• autoscaling: L2 construct for enabling capacity rebalance of autoscaling (#​24025) (d2c63f5), closes #​22625
• chatbot: support guardrail policies (#​24114) (4c72a7d), closes #​20788
• core: Allow passing Docker build secrets (#​23778) (74512fa), closes #​14910 #​14395
• elbv2: add metrics to INetworkTargetGroup and IApplicationTargetGroup (#​23993) (6a9e43f), closes #​23853 #​10850
• lambda: add insights version 1.0.178.0 (#​23836) (5272908)

Bug Fixes

• bootstrap: remove Security Hub finding S3.10 (#​24175) (a1da757), closes /docs.aws.amazon.com/securityhub/latest/userguide/securityhub-standards-fsbp-controls.html#fsbp-s3-10
• codedeploy: unable to remove alarms from deployment group (#​23308) (eee005f)
• codepipeline: x-env ECS deployment lacking support stack-dependency (#​24053) (adfe4fa), closes #​24050 #​24051
• core: messages are displayed multiple times per construct (#​24019) (57770bb), closes #​9565
• ec2: enable set throughput param to CfnVolume (#​24118) (32781f8), closes #​24107 #​24107
• elbv2: healthcheck interval is overly restrictive (#​24157) (4f83e02), closes #​24156
• iam: PrincipalWithConditions.addCondition fails with a new key (#​23782) (8951d01), closes #​23781
• iam: SamlConsolePrincipal does not work in China #​22091 (#​24034) (2902043)
• pipelines: SelfMutation CodeBuild project not accessible (#​24073) (5942978)
• rds: database proxies use ids as their resource names directly (under feature flag) (#​23703) (03a0f79), closes #​18578
• s3: logging bucket blocks KMS_MANAGED encryption (#​23514) (1e8926f)

---

Alpha modules (2.65.0-alpha.0)

Features

• glue: support Ray jobs (#​23822) (8de50d6)
• redshift: IAM roles can be attached to a cluster, post creation (#​23791) (1a46808), closes #​22632
• synthetics: support runtime 3.9 (#​24101) (9d23cad)

v2.64.0

Compare Source

Features

• cfnspec: cloudformation spec v109.0.0 (#​23968) (5d59134)
• cfnspec: cloudformation spec v109.0.0 (#​23984) (affe040)
• cli: --hotswap will not use CFN anymore, --hotswap-fallback to fall back if necessary (#​23653) (a5317ca), closes #​22784 #​21773 #​21556 #​23640
• elbv2: add metrics to INetworkLoadBalancer and IApplicationLoadBalancer (#​23853) (cb889bc), closes #​10850
• iam: implement IGrantable to Policy and ManagedPolicy (#​22712) (d3df40f), closes #​10308
• lambda: enable RuntimeManagementConfig (#​23891) (be4f971), closes #​23890
• s3: allow configuring S3 Object Lock (#​23744) (bdcd6c8), closes #​5247 #​21738

Bug Fixes

• Use the correct LB full name when creating metrics for imported LBs (#​23972) (16c23b7), closes #​23853
• cdk-assets: asset concurrency leaves a corrupted archive (#​24026) (989454f)
• cdk-assets: packaging assets is broken on Node older than 14.17 (#​23994) (5bde92c), closes #​23859
• codedeploy: cross-region referenced groups use wrong config (#​23986) (390ec78)
• core: cross-stack reference error doesn't include violation (#​23987) (c7ad66f)
• ec2: Cannot deploy VPC flow log with other resources that requires bucket policies (#​23889) (e646ad5), closes #​18985
• pipelines: cannot configure actionName for all sources (#​24027) (9cd639b)
• s3: infer bucketWebsiteUrl and bucketDomainName suffixes from bucket region (#​23919) (252f052)
• s3-deployment: wrong URL in BucketDeployment.deployedBucket.bucketWebsiteUrl (#​24055) (ece46db), closes #​23354

---

Alpha modules (2.64.0-alpha.0)

Features

• cloud9: support setting environment owner (#​23878) (08a2f36), closes #​22474
• redshift: Tables can include comments (#​23847) (46cadd4), closes #​22682

Bug Fixes

• servicecatalogappregistry: default stack name is not meaningful and causes conflict when multiple stacks deployed to the same account-region (#​23823) (420b5ff)

v2.63.2

Compare Source

---

Alpha modules (2.63.2-alpha.0)

v2.63.1

Compare Source

Reverts

• cdk-assets: packaging assets is broken on Node older than 14.17 (#​23994) (1976f1a), closes #​23859

---

Alpha modules (2.63.1-alpha.0)

v2.63.0

Compare Source

Features

• cfnspec: cloudformation spec v109.0.0 (#​23868) (8ee97b0)
• cfnspec: cloudformation spec v109.0.0 (#​23929) (39f8a30)
• core: add creation policy configuration for appstream (#​23607) (8909a04), closes #​23604
• core: allow asset bundling on docker remote host / docker in docker (#​23576) (afce30a), closes #​8799
• stepfunctions: task and heartbeat timeout specified by a path (#​23755) (26e48c7), closes #​15531

Bug Fixes

• appsync: sanitized datasource name isn't exported (#​23802) (0b25265)
• imports from ESM modules cannot find correct type definitions (#​23870) (356a128)
• eks: reuse chart name as chart dir for helmchart deployment from OCI repository (#​23392) (070f5ec)
• aws-cdk-lib imports from ESM modules are broken (#​23846) (cf2e498), closes #​23813

---

Alpha modules (2.63.0-alpha.0)

Features

• synthetics: Adding DeleteLambdaResourcesOnCanaryDeletion prop to the canary L2 (#​23820) (45c191e)
• redshift: support default role for redshift clusters (#​22551)

v2.62.2

Compare Source

Bug Fixes

• imports from ESM modules cannot find correct type definitions (#​23870) (1b9f3f7)

---

Alpha modules (2.62.2-alpha.0)

v2.62.1

Compare Source

Bug Fixes

• aws-cdk-lib imports from ESM modules are broken (#​23846) (46b93a9), closes #​23813

---

Alpha modules (2.62.1-alpha.0)

v2.62.0

Compare Source

Features

• certificatemanager: deprecate DnsValidatedCertificate (#​21982) (64bfbf9), closes #​8934 #​2914 #​20698 #​17349 #​15217 #​14519
• cfnspec: cloudformation spec v107.0.0 (#​23750) (3dc40b4)
• cfnspec: cloudformation spec v108.0.0 (#​23769) (ff0070d)
• cfnspec: cloudformation spec v108.0.0 (#​23808) (858ff23)
• lambda-event-sources: events source mapping support for sqs max concurrency (#​23714) (6dcec2d)
• logs: add grantRead function to LogGroup (#​23280) (42ef507)

Bug Fixes

• appsync: Populate construct name dynamically for lambda authorizer permission in appsync (#​23777) (92f02e9)
• importing aws-cdk-lib is slow (#​23813) (8aaeffb)
• bootstrap: bootstrap stack version was not bumped during previous update (#​23669) (f56cb70)
• cfnspec: incorrectly handling array result from jsondiff (#​23795) (4a701f1), closes /github.com/andreyvit/json-diff/blob/35582a9d19f8b0b2773360d67937e57ce2866781/test/diff_test.coffee#L78
• cli: only load sourcemap when --debug flag is enabled (#​23752) (94102c1)
• codeguruprofiler: imported profiling group environment configured with stack region (#​23568) (8bfa695)
• lambda: lambda functions that use triggers error when invoked (#​23728) (37974ed), closes #​23062 #​23062 #​23407 #​23407
• lambda-nodejs: aws-sdk version detection broken for self-defined runtimes (#​23416) (8a7dffd), closes #​22989 /github.com/aws/aws-cdk/pull/22989/files#diff-cd86fbd4f2bbefcbcffc2143adccabafa1debe5981edbcdfcc766b5a705fe770R371-R383

---

Alpha modules (2.62.0-alpha.0)

Features

• apprunner: apprunner secrets manager (#​23692) (a914fc0)

Bug Fixes

• integ-runner: cleanup tmp snapshot before running test (#​23773) (366f2ab)

v2.61.1

Compare Source

Bug Fixes

• lambda: lambda functions that use triggers error when invoked (#​23728) (5fd9135), closes #​23062 #​23062 #​23407 #​23407

---

Alpha modules (2.61.1-alpha.0)

v2.61.0

Compare Source

Features

• cfnspec: cloudformation spec v107.0.0 (#​23698) (aca8a25)
• core: stack synthesizers can be shared between stacks (#​23571) (0ce19f0)
• logs: add unit to metric filter (#​23608) (7cbe8ac)
• opensearch: add support for latest amazon opensearch service 2.3 (#​22943) (0303d6f)
• pipeline: enable key rotation (#​23620) (29d7336)
• route53-patterns: use Certificate as the default certificate (under feature flag) (#​23575) (77709c8)

Bug Fixes

• aws-s3: log delivery may be incorrectly configured when target bucket is imported (#​23552) (41327d8), closes #​23547 #​23588
• cdk-assets: concurrent asset builds can leave a corrupted archive (#​23677) (18e0481), closes #​23290
• cli: can not assume role from 2-level SSO (#​23702) (c3a345b), closes #​23520
• cloudtrail: Trail fails during resource creation due to invalid template properties when management events are 'None' (#​23569) (15ced88), closes #​16387 #​15488
• lambda: ever-changing Version hash with LayerVersion from tokens (#​23629) (88fc62d)
• pipelines: cross-stack step dependencies have wrong name (#​23594) (0d8142b), closes #​21843
• servicecatalog: incorrect objectkey produced from asset relative… (#​23580) (b4a6120), closes #​23560
• stepfunctions-tasks: fix IAM policy statements for step functions API calls (#​22959) (dce662c)

---

Alpha modules (2.61.0-alpha.0)

Features

• cli-lib: [JS/TS only] experimental support for programmatic CLI api (#​22836) (0b6b716)

Bug Fixes

• glue: --conf parameter is no longer a reserved keyword for glue jobs (#​23673) (3d0f4ba)
• servicecatalogappregistry: outputs are not deployable (#​23652) (fa9eef0), closes #​23641

v2.60.0

Compare Source

Features

• appsync: js resolver support (#​23551) (2318384), closes #​22921
• appsync: stabilize appsync module 🎆🎆 🎆 (#​23633) (e5b0230), closes #​6836
• cfnspec: cloudformation spec v106.0.0 (#​23586) (f178c98)
• cloudfront: remove headers and server timing (#​23558) (44a4812)
• cognito: use secretsmanager secrets for clientSecretValue (#​22885) (4baea78)
• ec2: subnet ipv4 cidr blocks on imported vpc (#​23317) (e0885db)
• ecr-assets: Support docker outputs flag (#​23304) (61e5495), closes #​20566
• pipelines: Expose stack output namespaces in custom pipelines.Steps (#​23110) (14f6811), closes /github.com/aws/aws-cdk/issues/23000#issuecomment-1324379670

Bug Fixes

• acm: domainName length constraint failure due to Tokens (#​23567) (2d7e3c0), closes #​23565
• aws-custom-resource: switch off installLatestAwsSdk by default (#​23591) (c9b2548), closes #​23113
• bootstrap: KMS keys cannot be tagged (#​21975) (0e552db), closes #​21281
• events: cross stack rules require concrete environment (#​23549) (22d3341), closes #​18405
• iam: create stack based default policies for roles (#​23100) (dea4216)
• lambda: automatic currentVersion conflicts with explicit Version resource (#​23636) (de68652), closes #​23225

---

Alpha modules (2.60.0-alpha.0)

Features

• gamelift: add MatchmakingConfiguration L2 Construct for GameLift (#​23326) (9b2573b)
• integ-runner: support --language presets for JavaScript, TypeScript, Python and Go (#​22058) (22673b2), closes #​21169

v2.59.0

Compare Source

Features

• cfnspec: cloudformation spec v105.0.0 (#​23501) (72bd3a0)
• s3: use Bucket Policy for Server Access Logging grant (under feature flag) (#​23386) (6975a7e), closes #​22183
• servicecatalog: Add Product Stack Asset Support (#​22857) (ceaac3a), closes #​20690

Bug Fixes

• lambda-nodejs: unable to use nodeModules with pnpm (#​21911) (7c752db), closes #​21910
• servicecatalog: make assetBuckets a required property (#​23507) (10b6b96)

---

Alpha modules (2.59.0-alpha.0)

v2.58.1

Compare Source

Features

• cfnspec: cloudformation spec v105.0.0 (#​23501) (05c3411)

---

Alpha modules (2.58.1-alpha.0)

v2.58.0

Compare Source

Features

• assertions: improve printing of match failures (#​23453) (2676386)

---

Alpha modules (2.58.0-alpha.0)

v2.57.0

Compare Source

Features

• cfnspec: cloudformation spec v103.0.0 (#​23452) (e49e57d)
• lambda: add support for auto-instrumentation with ADOT Lambda layer (#​23027) (fc70535)

Bug Fixes

• cfnspec: v101.0.0 introduced specific types on several types that previously were typed as json (#​23448) (4fbc182)
• codedeploy: referenced Applications are not environment-aware (#​23405) (96242d7)
• s3: buckets with SSE-KMS silently fail to receive logs (#​23385) (1b7a384)

---

Alpha modules (2.57.0-alpha.0)

Bug Fixes

• aws-redshift: Columns are not dropped on removal from array (#​23011) (2981313), closes #​22208

v2.56.1

Compare Source

Bug Fixes

• cfnspec: v101.0.0 introduced specific types on several types that previously were typed as json (#​23448) (1b4e3a4)

---

Alpha modules (2.56.1-alpha.0)

v2.56.0

Compare Source

Features

• aws-cognito: add AuthSessionValidity property on a UserPoolClient (#​23040) (8896fb9), closes #​22854
• cfnspec: cloudformation spec v102.0.0 (#​23372) (480b0a5)
• core: CfnResource dependency methods (#​23383) (ecedb00), closes #​20419 #​20418
• lambda: expose all docker run options to container bundling of all lambda variants (#​23318) (02d0876), closes #​22829
• trigger: Allow trigger to work with Lambda functions with long timeouts (#​23062) (9fd3811), closes #​23058

Bug Fixes

• apigateway: allow multi-level base path mapping (#​23362) (86b6c6f), closes #​23347
• autoscaling: Allow adding AutoScalingGroup to multiple target groups (#​23044) (07acd18), closes /github.com/aws/aws-cdk/issues/5667#issuecomment-636657482 #​5667
• aws-eks: fail to update both logging and access at the same time (#​22957) (606837d)
• cognito: quote or mime-encode fromName to comply RFC 5322 (#​23227) (78d474a), closes #​18903 /www.rfc-editor.org/rfc/rfc5322#section-3
• core: cross region ssm writer update (#​23356) (87bd42d)
• dynamodb: add kms permissions to grantStreamRead (#​23400) (fcf1bfa), closes [40aws-cdk/aws-dynamodb/lib/table.ts#L1025-L1061](https://redirect.github.com/40aws-cdk/aws-dynamodb/

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge, however this is not possible so it has been raised as a PR instead.

---

• Branch has one or more failed status checks