From 5d123b941aa3577115b7877ec0e008ba08e69f8c Mon Sep 17 00:00:00 2001
From: Adam Moussa <adam@seahavenind.com>
Date: Fri, 5 Jun 2026 13:14:47 -0400
Subject: [PATCH] fix(deps): bump aws-cdk-lib pin to 2.257.0

Org pin moved from 2.253.1 (bundles vulnerable fast-uri 3.1.0, 2 high
GHSAs) to 2.257.0 (bundles patched 3.1.2). Removes the blanket
dependabot ignore per the new handbook pinning policy (exact pins kept
current by Dependabot; blanket ignores banned).
---
 .github/dependabot.yml | 2 --
 cdk/requirements.txt   | 2 +-
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 8fbf73d..0ef7c9b 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -4,8 +4,6 @@ updates:
     directory: "/cdk"
     schedule:
       interval: "weekly"
-    ignore:
-      - dependency-name: aws-cdk-lib
     groups:
       minor-and-patch:
         update-types:
diff --git a/cdk/requirements.txt b/cdk/requirements.txt
index 060fdcb..392ba6a 100644
--- a/cdk/requirements.txt
+++ b/cdk/requirements.txt
@@ -1,2 +1,2 @@
-aws-cdk-lib==2.253.1
+aws-cdk-lib==2.257.0
 constructs>=10.6.0