Bump the minor-and-patch group with 2 updates #57

Closed

dependabot[bot] wants to merge 1 commit from dependabot/npm_and_yarn/minor-and-patch-cfd4922964 into main

dependabot[bot] commented

2026-06-13 16:23:14 +00:00

(Migrated from github.com)

Bumps the minor-and-patch group with 2 updates: aws-cdk-lib and @types/node.

Updates aws-cdk-lib from 2.258.0 to 2.259.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.259.0

⚠ BREAKING CHANGES

lambda: Runtime.NODEJS_LATEST now resolves to nodejs24.x in every region. Customers who pin to a concrete runtime (Runtime.NODEJS_22_X, useLatestRuntimeVersion: false in aws-lambda-nodejs.NodejsFunction) are unaffected. Existing AWS::Lambda::Function resources synthesized with NODEJS_LATEST will see Runtime: nodejs22.x → Runtime: nodejs24.x on next deploy. Lambda accepts runtime updates in place.

Customer-code compatibility — IMPORTANT: Node.js 24 removes support for callback-style asynchronous handlers ((event, context, callback) => {...}) per the launch blog. Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to async (event, context) => {...} or pin to Runtime.NODEJS_22_X explicitly.

Features

core: recommend the use of weak references if no choice has been made (#38070) (6e74e5e)

ecs: add forceNewDeployment option for Fargate and EC2 services (#36797) (3d9c4df), closes #27762

eks: use the recommended AL2023 instead of AL2 AMI type (under feature flag) (#37850) (6a2dcb7), closes #32211

lambda: upgrade lambda and custom resource default runtime to nodejs24.x (#38031) (36c84c6)

Bug Fixes

spec2cdk: sanitize hyphens in EventBridge event namespace names (#38088) (b8f41bf), closes 40aws-cdk/spec2cdk/lib/naming/conventions.ts#L195

Reverts

"chore(bundling): check if docker image is cached before building" (#38116) (359f2fb), closes aws/aws-cdk#37951

Alpha modules (2.259.0-alpha.0)

v2.258.1

Reverts

"chore(bundling): check if docker image is cached before building" (#38116) (8ec236c), closes aws/aws-cdk#37951

Alpha modules (2.258.1-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

custom-resource-handlers: deterministic asset hashes for generated lambdas (#37634) (6c3d5bc), closes #34307

glue-alpha: deprecate Ray Jobs (#38055) (3fa428b)

glue-alpha: restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (#37815) (05be88a), closes #33839

integ-tests-alpha: assertion failures print too much unnecessary information (#37974) (bc0de1d)

mediapackagev2-alpha: cdnAuth on OriginEndpoint now generates the required policy (#38013) (1d56b46)

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)

bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)

mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828

... (truncated)

Commits

772eeba chore: update analytics metadata blueprints
2e409c7 chore(release): 2.259.0
36c84c6 chore(lambda): upgrade lambda and custom resource default runtime to nodejs24...
acf0971 chore(deps): bump the pip group across 8 directories with 1 update (#37355)
359f2fb revert: "chore(bundling): check if docker image is cached before building" (#...
3d9c4df feat(ecs): add forceNewDeployment option for Fargate and EC2 services (#36797)
dd383ac chore(tools): metadata-updater source keys break on non-standard repo paths (...
6a2dcb7 feat(eks): use the recommended AL2023 instead of AL2 AMI type (under feature ...
a8d5cc8 docs: document CloudWatch Dashboard widget compaction (#38090)
6e74e5e feat(core): recommend the use of weak references if no choice has been made (...
Additional commits viewable in compare view

Updates @types/node from 25.9.2 to 25.9.3

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 2 updates: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node). Updates `aws-cdk-lib` from 2.258.0 to 2.259.0 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's releases</a>.</em></p> <blockquote> <h2>v2.259.0</h2> <h3>⚠ BREAKING CHANGES</h3> <ul> <li> <p><strong>lambda:</strong> <code>Runtime.NODEJS_LATEST</code> now resolves to <code>nodejs24.x</code> in every region. Customers who pin to a concrete runtime (<code>Runtime.NODEJS_22_X</code>, <code>useLatestRuntimeVersion: false</code> in <code>aws-lambda-nodejs.NodejsFunction</code>) are unaffected. Existing <code>AWS::Lambda::Function</code> resources synthesized with <code>NODEJS_LATEST</code> will see <code>Runtime: nodejs22.x</code> → <code>Runtime: nodejs24.x</code> on next deploy. Lambda accepts runtime updates <strong>in place</strong>.</p> <p><strong>Customer-code compatibility — IMPORTANT</strong>: Node.js 24 removes support for callback-style asynchronous handlers (<code>(event, context, callback) => {...}</code>) per the <a href="https://aws.amazon.com/blogs/compute/node-js-24-runtime-now-available-in-aws-lambda/">launch blog</a>. Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to <code>async (event, context) => {...}</code> or pin to <code>Runtime.NODEJS_22_X</code> explicitly.</p> </li> </ul> <h3>Features</h3> <ul> <li><strong>core:</strong> recommend the use of weak references if no choice has been made (<a href="https://redirect.github.com/aws/aws-cdk/issues/38070">#38070</a>) (<a href="https://github.com/aws/aws-cdk/commit/6e74e5ebbea3959a86af3aea038df0ab87aa27b6">6e74e5e</a>)</li> <li><strong>ecs:</strong> add forceNewDeployment option for Fargate and EC2 services (<a href="https://redirect.github.com/aws/aws-cdk/issues/36797">#36797</a>) (<a href="https://github.com/aws/aws-cdk/commit/3d9c4df185026440f5668b82dd2adb47e0c366de">3d9c4df</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/27762">#27762</a></li> <li><strong>eks:</strong> use the recommended AL2023 instead of AL2 AMI type (under feature flag) (<a href="https://redirect.github.com/aws/aws-cdk/issues/37850">#37850</a>) (<a href="https://github.com/aws/aws-cdk/commit/6a2dcb7ab6e2d4a69999625947ab6a152b82bc19">6a2dcb7</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/32211">#32211</a></li> <li><strong>lambda:</strong> upgrade lambda and custom resource default runtime to nodejs24.x (<a href="https://redirect.github.com/aws/aws-cdk/issues/38031">#38031</a>) (<a href="https://github.com/aws/aws-cdk/commit/36c84c6d6ef8a4772249afadec78c2d25c44cd90">36c84c6</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>spec2cdk:</strong> sanitize hyphens in EventBridge event namespace names (<a href="https://redirect.github.com/aws/aws-cdk/issues/38088">#38088</a>) (<a href="https://github.com/aws/aws-cdk/commit/b8f41bf4f2a8ef3556f3279c7fdd8259f3b6086b">b8f41bf</a>), closes <a href="https://github.com/40aws-cdk/spec2cdk/lib/naming/conventions.ts/issues/L195">40aws-cdk/spec2cdk/lib/naming/conventions.ts#L195</a></li> </ul> <h3>Reverts</h3> <ul> <li>"chore(bundling): check if docker image is cached before building" (<a href="https://redirect.github.com/aws/aws-cdk/issues/38116">#38116</a>) (<a href="https://github.com/aws/aws-cdk/commit/359f2fbbebb58da0e911b0550b49033fcc84f371">359f2fb</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/37951">aws/aws-cdk#37951</a></li> </ul> <hr /> <h2>Alpha modules (2.259.0-alpha.0)</h2> <h2>v2.258.1</h2> <h3>Reverts</h3> <ul> <li>"chore(bundling): check if docker image is cached before building" (<a href="https://redirect.github.com/aws/aws-cdk/issues/38116">#38116</a>) (<a href="https://github.com/aws/aws-cdk/commit/8ec236cfd72bd53b44e1c29a62f3c3077923f43c">8ec236c</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/37951">aws/aws-cdk#37951</a></li> </ul> <hr /> <h2>Alpha modules (2.258.1-alpha.0)</h2> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's changelog</a>.</em></p> <blockquote> <h1>Changelog</h1> <p>All notable changes to this project will be documented in this file. See <a href="https://github.com/conventional-changelog/standard-version">standard-version</a> for commit guidelines.</p> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.258.1-alpha.0...v2.259.0-alpha.0">2.259.0-alpha.0</a> (2026-06-11)</h2> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.258.0-alpha.0...v2.258.1-alpha.0">2.258.1-alpha.0</a> (2026-06-08)</h2> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.257.0-alpha.0...v2.258.0-alpha.0">2.258.0-alpha.0</a> (2026-06-04)</h2> <h3>Features</h3> <ul> <li><strong>integ-tests-alpha:</strong> add option to set the provider log level (<a href="https://redirect.github.com/aws/aws-cdk/issues/38005">#38005</a>) (<a href="https://github.com/aws/aws-cdk/commit/c634a795de080df21b86fad191d05dfde884eb4e">c634a79</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>custom-resource-handlers:</strong> deterministic asset hashes for generated lambdas (<a href="https://redirect.github.com/aws/aws-cdk/issues/37634">#37634</a>) (<a href="https://github.com/aws/aws-cdk/commit/6c3d5bc36e19b8834319578fbd8525615a47a4b9">6c3d5bc</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/34307">#34307</a></li> <li><strong>glue-alpha:</strong> deprecate Ray Jobs (<a href="https://redirect.github.com/aws/aws-cdk/issues/38055">#38055</a>) (<a href="https://github.com/aws/aws-cdk/commit/3fa428b9b24d286841940cfff5200d16817196bf">3fa428b</a>)</li> <li><strong>glue-alpha:</strong> restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (<a href="https://redirect.github.com/aws/aws-cdk/issues/37815">#37815</a>) (<a href="https://github.com/aws/aws-cdk/commit/05be88aa324635108076bdc648a4ee940d22a386">05be88a</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/33839">#33839</a></li> <li><strong>integ-tests-alpha:</strong> assertion failures print too much unnecessary information (<a href="https://redirect.github.com/aws/aws-cdk/issues/37974">#37974</a>) (<a href="https://github.com/aws/aws-cdk/commit/bc0de1dacc59b95a2e89f9c3ec96589e98b35ed2">bc0de1d</a>)</li> <li><strong>mediapackagev2-alpha:</strong> cdnAuth on OriginEndpoint now generates the required policy (<a href="https://redirect.github.com/aws/aws-cdk/issues/38013">#38013</a>) (<a href="https://github.com/aws/aws-cdk/commit/1d56b46abd477f188021d32d77551be1377765d0">1d56b46</a>)</li> </ul> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.256.1-alpha.0...v2.257.0-alpha.0">2.257.0-alpha.0</a> (2026-05-21)</h2> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.256.0-alpha.0...v2.256.1-alpha.0">2.256.1-alpha.0</a> (2026-05-20)</h2> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.255.0-alpha.0...v2.256.0-alpha.0">2.256.0-alpha.0</a> (2026-05-19)</h2> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.254.0-alpha.0...v2.255.0-alpha.0">2.255.0-alpha.0</a> (2026-05-18)</h2> <h3>Features</h3> <ul> <li><strong>bedrock-agentcore-alpha:</strong> Graduation of the library to stable. The <strong>Policy</strong> submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in <code>aws-cdk-lib/aws-bedrockagentcore</code> and we recommend migrating to the stable versions (<a href="https://redirect.github.com/aws/aws-cdk/issues/37876">#37876</a>) (<a href="https://github.com/aws/aws-cdk/commit/00cf6015f30755653de7a541f79c944d4a68f423">00cf601</a>)</li> </ul> <h2><a href="https://github.com/aws/aws-cdk/compare/v2.253.1-alpha.0...v2.254.0-alpha.0">2.254.0-alpha.0</a> (2026-05-13)</h2> <h3>Features</h3> <ul> <li><strong>bedrock-agentcore-alpha:</strong> add tags support to Evaluator and OnlineEvaluationConfig (<a href="https://redirect.github.com/aws/aws-cdk/issues/37804">#37804</a>) (<a href="https://github.com/aws/aws-cdk/commit/adbf88faeb4d2b762563389aea160cfda496f200">adbf88f</a>)</li> <li><strong>bedrock-agentcore-alpha:</strong> add identity L2 constructs (<a href="https://redirect.github.com/aws/aws-cdk/issues/37610">#37610</a>) (<a href="https://github.com/aws/aws-cdk/commit/67c3af260cedb8e610dff36f829afb36114dd93a">67c3af2</a>)</li> <li><strong>mediapackagev2-alpha:</strong> add OAC integration between CloudFront and MediaPackageV2 (<a href="https://redirect.github.com/aws/aws-cdk/issues/37701">#37701</a>) (<a href="https://github.com/aws/aws-cdk/commit/654f59c559f6eb2b5240e7885372ac82ea05a996">654f59c</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>bedrock-agentcore-alpha:</strong> fix cedar policy bug (<a href="https://redirect.github.com/aws/aws-cdk/issues/37782">#37782</a>) (<a href="https://github.com/aws/aws-cdk/commit/e678d5cc251f00a0a67bc308b562a3fddca6a73c">e678d5c</a>), closes <a href="https://redirect.github.com/aws/aws-cdk/issues/37828">#37828</a></li> </ul>  </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/aws/aws-cdk/commit/772eeba2564af8c6dff6b678dab6150d78c20e14"><code>772eeba</code></a> chore: update analytics metadata blueprints</li> <li><a href="https://github.com/aws/aws-cdk/commit/2e409c78277cc711c99ed85db4590f90710e14dd"><code>2e409c7</code></a> chore(release): 2.259.0</li> <li><a href="https://github.com/aws/aws-cdk/commit/36c84c6d6ef8a4772249afadec78c2d25c44cd90"><code>36c84c6</code></a> chore(lambda): upgrade lambda and custom resource default runtime to nodejs24...</li> <li><a href="https://github.com/aws/aws-cdk/commit/acf0971e54b291ec547b9daf52d472acc0533978"><code>acf0971</code></a> chore(deps): bump the pip group across 8 directories with 1 update (<a href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/37355">#37355</a>)</li> <li><a href="https://github.com/aws/aws-cdk/commit/359f2fbbebb58da0e911b0550b49033fcc84f371"><code>359f2fb</code></a> revert: "chore(bundling): check if docker image is cached before building" (#...</li> <li><a href="https://github.com/aws/aws-cdk/commit/3d9c4df185026440f5668b82dd2adb47e0c366de"><code>3d9c4df</code></a> feat(ecs): add forceNewDeployment option for Fargate and EC2 services (<a href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36797">#36797</a>)</li> <li><a href="https://github.com/aws/aws-cdk/commit/dd383ac257ebc1deb5bbf0f1d5828e8605249b3c"><code>dd383ac</code></a> chore(tools): metadata-updater source keys break on non-standard repo paths (...</li> <li><a href="https://github.com/aws/aws-cdk/commit/6a2dcb7ab6e2d4a69999625947ab6a152b82bc19"><code>6a2dcb7</code></a> feat(eks): use the recommended AL2023 instead of AL2 AMI type (under feature ...</li> <li><a href="https://github.com/aws/aws-cdk/commit/a8d5cc8ab7231926a1bafd5fc55c51381205398c"><code>a8d5cc8</code></a> docs: document CloudWatch Dashboard widget compaction (<a href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38090">#38090</a>)</li> <li><a href="https://github.com/aws/aws-cdk/commit/6e74e5ebbea3959a86af3aea038df0ab87aa27b6"><code>6e74e5e</code></a> feat(core): recommend the use of weak references if no choice has been made (...</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-cdk/commits/v2.259.0/packages/aws-cdk-lib">compare view</a></li> </ul> </details> <br /> Updates `@types/node` from 25.9.2 to 25.9.3 <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details>

amoussa1229 commented

2026-06-16 21:26:29 +00:00

(Migrated from github.com)

Closing as wontfix per maintainer triage.

dependabot[bot] commented

2026-06-16 21:26:31 +00:00

(Migrated from github.com)

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure [ignore rules](https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#ignore) in dependabot.yml

This repo is archived. You cannot comment on pull requests.

No reviewers