chore(deps): bump the aws group across 1 directory with 12 updates by dependabot[bot] · Pull Request #1755 · aligent/cdk-constructs

dependabot · 2026-09-07T02:30:27Z

Bumps the aws group with 12 updates in the / directory:

Package	From	To
@types/aws-lambda	`8.10.162`	`8.10.163`
aws-cdk	`2.1132.0`	`2.1139.0`
aws-cdk-lib	`2.261.0`	`2.268.0`
constructs	`10.6.0`	`10.8.1`
@aws-sdk/client-cloudfront	`3.1092.0`	`3.1126.0`
@aws-sdk/client-sns	`3.1092.0`	`3.1126.0`
@aws-sdk/client-dynamodb	`3.1092.0`	`3.1126.0`
@aws-sdk/client-s3	`3.1092.0`	`3.1126.0`
@aws-sdk/client-secrets-manager	`3.1092.0`	`3.1126.0`
@aws-sdk/client-sqs	`3.1092.0`	`3.1126.0`
@aws-sdk/client-ssm	`3.1092.0`	`3.1126.0`
@aws-solutions-constructs/aws-lambda-sqs-lambda	`2.103.0`	`2.104.0`

Updates @types/aws-lambda from 8.10.162 to 8.10.163

Commits

See full diff in compare view

Updates aws-cdk from 2.1132.0 to 2.1139.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1139.0

2.1139.0 (2026-08-26)

Features

cli: default to errors-only progress when run by an AI agent (#1850) (37bbd4d), closes #1800

deps: upgrade aws-cdk-lib (#1868) (7ff50e7)

show the target environment in cdk diff stack headers (#1885) (f875d81), closes #286

Bug Fixes

aws-cdk: cdk migrate deduplication drops resources with compound identifiers (#1879) (d30e791)

aws-cdk: remove SIGINT listener leak in TelemetrySession (#1863) (83dcea3), closes #1862

cli: --yes mode requires a TTY when a request's default is falsy (#1892) (acc6f4d)

cli: cdk CLI alias package declares an entrypoint that does not exist (#1897) (2a6a802)

cli: guide Stage users to a working pattern in stack-selection error (#1847) (d51353e), closes #1451 #1451

cli: recognize the AI_AGENT convention and more coding agents (#1855) (6f7d58e), closes /github.com/anthropics/claude-code/blob/770933ea1ad2fa7b858191e397a65e6644771c64/CHANGELOG.md#L2349 /github.com/charmbracelet/crush/blob/7d78d7422a92918441a68d01d96d48fa3b9fd9db/internal/shell/shell.go#L46 /github.com/anomalyco/opencode/blob/b155b15694dbcc6768f11d2f25cc2bdd1f738ab4/packages/opencode/src/index.ts#L75 /github.com/anomalyco/opencode/blob/b155b15694dbcc6768f11d2f25cc2bdd1f738ab4/packages/opencode/src/index.ts#L76 /github.com/github/copilot-cli/blob/3f9c5e1ce792150a852804132e2b08c58e9a8e95/changelog.md#L1971 /github.com/QwenLM/qwen-code/blob/099a71c9364473303adb31e0dfb5f488b31634d9/packages/core/src/services/shellExecutionService.ts#L806 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/protocol/src/shell_environment.rs#L7 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/core/src/spawn.rs#L26 /github.com/openai/codex/blob/4a942885c8b4745757a9f86ad2075e16c42483c5/codex-rs/core/src/unified_exec/process_manager.rs#L93 /github.com/cline/cline/blob/16875140fbc7bae51aad79c203837b4f51e54aa5/apps/vscode/src/hosts/vscode/terminal/VscodeTerminalRegistry.ts#L31

toolkit-lib: finalizing deployment after refactor intermittently fails while stacks are still in UPDATE_IN_PROGRESS (#1805) (beb1e2f), closes #1804

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

Features

cli: add "errors-only" progress mode that only prints errors (#1800) (a4c0282)

cli: support notification-arns in cdk import (#1740) (f8e7da1), closes aws/aws-cdk#23548

Bug Fixes

cli: cdk context header always claims the context was found in cdk.json (#1816) (b7783b5), closes #1814

cli: cdk flags --set leaks synthesized cloud assembly directories (#1833) (fd891fb), closes #1832

cli: fail fast when --proxy has no or an unsupported protocol (#1843) (da37001), closes #453

cli: refactor fails on stacks with bundled assets (#1812) (8458a4a), closes #1810

cli: reject non-numeric ids in cdk acknowledge (#1844) (c71ab23), closes #248

aws-cdk@v2.1137.0

2.1137.0 (2026-08-17)

Features

deps: upgrade aws-cdk-lib (#1840) (0b2e50a)

... (truncated)

Commits

d51353e fix(cli): guide Stage users to a working pattern in stack-selection error (#1...
793316b refactor(cli): consolidate stack selection on toolkit-lib selectors (#1896)
2a6a802 fix(cli): cdk CLI alias package declares an entrypoint that does not exist ...
83dcea3 fix(aws-cdk): remove SIGINT listener leak in TelemetrySession (#1863)
acc6f4d fix(cli): --yes mode requires a TTY when a request's default is falsy (#1892)
c31e049 refactor(cli): make IoHost listener removers using-compatible (#1888)
e895513 refactor(cli): scope IoHost listeners via suppressMessages decorator (#1887)
f875d81 feat: show the target environment in cdk diff stack headers (#1885)
0bae125 test(cli): snapshot the cdk synth output contract (#1865)
d30e791 fix(aws-cdk): cdk migrate deduplication drops resources with compound identif...
Additional commits viewable in compare view

Updates aws-cdk-lib from 2.261.0 to 2.268.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.268.0

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-athena: AWS::Athena::Session removed.

aws-bcmdataexports: AWS::BCMDataExports::Table removed.

aws-bedrock: AWS::Bedrock::DefaultPromptRouter and AWS::Bedrock::ModelInvocationJob removed.

aws-bedrockagentcore: AWS::BedrockAgentCore::Browser, AWS::BedrockAgentCore::CodeInterpreter, and AWS::BedrockAgentCore::TokenVault removed; AWS::BedrockAgentCore::PaymentConnector ConnectorType and AWS::BedrockAgentCore::PaymentCredentialProvider CredentialProviderVendor are now immutable; AWS::BedrockAgentCore::CapacityProvider OperatingSystem allowed values in the LaunchParameters type reduced from [LINUX_X86_64, LINUX_ARM64, MAC_ARM64, WINDOWS_X86_64] to [LINUX_X86_64, LINUX_ARM64].

aws-certificatemanager: AWS::CertificateManager::Certificate Id attribute removed.

aws-chime: on both AWS::Chime::AppInstance and AWS::Chime::AppInstanceBot, the CreatedTimestamp and LastUpdatedTimestamp attribute types changed from number to string.

aws-cloudformation: AWS::CloudFormation::ResourceScan removed.

aws-codeartifact: AWS::CodeArtifact::Package removed.

aws-codebuild: AWS::CodeBuild::Sandbox removed; AWS::CodeBuild::SourceCredential Id attribute removed.

aws-dax: AWS::DAX::ParameterGroup Id attribute removed; Description property is now immutable.

aws-dms: Id attribute removed from AWS::DMS::Endpoint, AWS::DMS::EventSubscription, and AWS::DMS::ReplicationSubnetGroup; AWS::DMS::ReplicationTask MigrationType property is now immutable.

aws-docdb: Id attribute removed from AWS::DocDB::DBClusterParameterGroup and AWS::DocDB::DBSubnetGroup.

aws-dynamodb: AWS::DynamoDB::Export removed.

aws-elasticache: AWS::ElastiCache::ReservedCacheNode removed.

aws-emr: AWS::EMR::NotebookExecution removed.

aws-events: AWS::Events::Replay removed.

aws-fis: AWS::FIS::SafetyLever removed.

aws-glue:

Id attribute removed from AWS::Glue::Classifier, AWS::Glue::Connection, AWS::Glue::CustomEntityType, AWS::Glue::DataQualityRuleset, AWS::Glue::MLTransform, AWS::Glue::SecurityConfiguration, AWS::Glue::TableOptimizer, and AWS::Glue::Workflow.

AWS::Glue::Connection: complex-property types AuthenticationConfigurationInput and OAuth2PropertiesInput renamed to AuthenticationConfiguration and OAuth2Properties respectively.

AWS::Glue::DataQualityRuleset: Name, TargetTable.DatabaseName, and TargetTable.TableName properties are now required; Name property is now immutable; Tags property type changed from json to map<string>.

AWS::Glue::CustomEntityType: Name property is now immutable; Tags property is no longer recognised as resource tags.

AWS::Glue::MLTransform: TransformEncryption property is now immutable.

aws-greengrassv2: AWS::GreengrassV2::Component and AWS::GreengrassV2::CoreDevice removed.

aws-identitystore: AWS::IdentityStore::AllGroupMemberships removed.

aws-imagebuilder: AWS::ImageBuilder::AllImageBuildVersions, AWS::ImageBuilder::AllWorkflowBuildVersions, AWS::ImageBuilder::WorkflowExecution, and AWS::ImageBuilder::WorkflowStepExecution removed.

aws-medialive: AWS::MediaLive::Offering removed.

aws-mediaconvert: AWS::MediaConvert::Preset Id attribute removed.

aws-mediapackage: AWS::MediaPackage::HarvestJob removed.

aws-memorydb: AWS::MemoryDB::MultiRegionParameterGroup and AWS::MemoryDB::ReservedNode removed.

aws-omics: AWS::Omics::Reference removed.

aws-osis: AWS::OSIS::PipelineBlueprint removed.

aws-personalize: AWS::Personalize::DataDeletionJob and AWS::Personalize::Recipe removed.

aws-redshiftserverless: AWS::RedshiftServerless::RecoveryPoint removed.

aws-route53: AWS::Route53::RecordSet GeoProximityLocation property removed, along with its supporting GeoProximityLocation and Coordinates complex-property types; Id attribute removed.

aws-sagemaker: AWS::SageMaker::ModelCardExportJob, AWS::SageMaker::MonitoringScheduleAlert, and AWS::SageMaker::TransformJob removed.

aws-ses: AWS::SES::ReceiptRuleSet Id attribute removed.

aws-signer: AWS::Signer::SigningJob removed.

aws-ssm: AWS::SSM::Session removed; AWS::SSM::Association InstanceId property is now immutable.

aws-sso: AWS::SSO::ApplicationProvider removed.

aws-stepfunctions: AWS::StepFunctions::MapRun removed.

aws-transcribe: AWS::Transcribe::MedicalTranscriptionJob removed.

aws-vpclattice: AWS::VpcLattice::ServiceNetwork SharingConfig property is now immutable.

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.268.0-alpha.0 (2026-09-02)

⚠ BREAKING CHANGES

glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.

glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.

glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.

glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.

Features

glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#38730) (c8fafbd)

Code Refactoring

glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#38725) (604ac23)

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

glue-alpha: schema Type is now an opaque class; construct column types via the Schema factories or Schema.custom(...) rather than { isPrimitive, inputString } literals. StorageParameter.custom(key, value) requires a string value, and StorageParameter.writeKmsKeyId takes a kms.IKey instead of a string.

glue-alpha: S3TableProps.bucket/encryption/encryptionKey are removed. Use storage: S3TableStorage.managedBucket(S3TableEncryption.kms(key?)) / S3TableStorage.fromBucket(bucket) and clientSideEncryption: TableClientSideEncryption.kms(key?). S3Table.encryption/encryptionKey are removed (clientSideEncryptionKey exposes the client-side key; read bucket.encryptionKey for server-side). The TableEncryption enum and the deprecated Table/TableProps are removed — use S3Table.

Features

glue-alpha: add a typed secret input to Connection (#38585) (ede4a1c)

glue-alpha: add subnet selection to Connection (#38561) (f9d7eac)

glue-alpha: model S3Table storage/encryption as value objects (#38591) (9990e16)

glue-alpha: opaque Schema Type with Schema.custom, and stronger StorageParameter types (#38592) (5c45eb0)

msk-alpha: support Kafka 4.2 (#38323) (97b181c)

s3tables-alpha: add storage class configuration support (#37339) (63ccf6d)

Bug Fixes

glue-alpha: validate that DATE partition projection interval is set when required (#38594) (0e2b582)

lambda-python-alpha: escape Docker bundling command arguments (#38583) (f7ce07b)

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

... (truncated)

Commits

26336c6 chore: update analytics metadata blueprints
53fdc99 feat: update L1 CloudFormation resource definitions (#38732)
f2e3b7d chore(core): validateAgainstDefaultRules feature flag is ignored when set via...
d5df2ee fix(core): upgrade CloudFormation validation to latest version (#38668)
ecdafa9 fix(eks-v2): generate and export L1 constructs from aws-eks-v2 (#37640)
9322f5d docs: fix typo in circuit breaker error message (#38723)
688b0c1 fix(core): templates are not checked for circular dependencies (#38712)
b0f7d9c feat(ec2): support CpuOptions on LaunchTemplate (#38193)
51234fd feat: update L1 CloudFormation resource definitions (#38693)
8fd1ef6 fix(core): ignored external symlinks throw validation error (#38679)
Additional commits viewable in compare view

Updates constructs from 10.6.0 to 10.8.1

Release notes

Sourced from constructs's releases.

v10.8.1

10.8.1 (2026-08-03)

Bug Fixes

dropping jsii.tsc.outDir breaks Java/Go transliteration for jsii-rosetta consumers (#2880) (740480f), closes aws/jsii-compiler#2740 #2879

v10.8.0

10.8.0 (2026-07-30)

Features

constructs: restrict package exports to public API (#2878) (9f11c08)

v10.7.2

10.7.2 (2026-07-29)

Bug Fixes

ids with a newline can produce duplicate addresses (#2876) (25edded)

v10.7.1

10.7.1 (2026-07-20)

Bug Fixes

Node.path takes a lot of time on deep construct trees (#2873) (857a94f)

v10.7.0

10.7.0 (2026-07-15)

Features

removeDependency (#2872) (67495a0)

Commits

740480f fix: dropping jsii.tsc.outDir breaks Java/Go transliteration for jsii-rosetta...
9f11c08 feat(constructs): restrict package exports to public API (#2878)
61a20b4 chore(deps): upgrade cdklabs-projen-project-types (#2877)
25edded fix: ids with a newline can produce duplicate addresses (#2876)
b0d316d chore(deps): upgrade dev dependencies (#2875)
4756e27 chore(deps): upgrade dev dependencies (#2874)
857a94f fix: Node.path takes a lot of time on deep construct trees (#2873)
67495a0 feat: removeDependency (#2872)
34b862f chore(deps): upgrade dev dependencies (#2871)
9b63ef8 chore(deps): upgrade dev dependencies (#2870)
Additional commits viewable in compare view

Updates @aws-sdk/client-cloudfront from 3.1092.0 to 3.1126.0

Release notes

Sourced from @aws-sdk/client-cloudfront's releases.

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

client-sfn: Updates Step Functions API documentation around CloudTrail, Execution name reuse and sort order of ListExecutions API (8dda8b4b)

client-elastic-load-balancing-v2: This release adds support for sending TCP resets for Gateway Load Balancer when a flow's idle timeout expires, or when a target becomes unhealthy or is deregistered. This adds updates the CLI documentation. (a16f1659)

New Features

client-socialmessaging: Adding support for WhatsApp Flows with endpoints. (3a3a6205)

client-transfer: AWS Transfer Family SFTP Connectors now support specifying an ordered list of AWS Secrets Manager version stages for secret retrieval. This enables seamless credential rotation workflows where external partners may take time to update their systems with new credentials. (e4bf3ecc)

client-transcribe: Amazon Transcribe now supports specifying up to 29 PII entity types in the ContentRedaction configuration of a StartTranscriptionJob request, allowing all supported entity types to be redacted in a single batch transcription job. (5fb0b9a5)

client-connect: This release enables TagOnCreate for Rule resource on CreateRule API. It also introduces a new field called PreEvaluationFilters to Rule resource, thereby impacting all Create, Update, Describe and Search APIs for Rules (18bb14bc)

client-ecs: Adds a critical parameter to the Amazon ECS managed daemon APIs that controls whether a daemon task failure drains the container instance. Non-critical daemon failures no longer drain the instance or block instance registration. (2e6a07d5)

client-evs: Amazon EVS now allows users to set, update, and retrieve values for parameters that apply across all EVS Environments in their account at a regional level, such as the VCF License portability core count. (803b694c)

client-drs: AWS Elastic Disaster Recovery now includes source server architecture in SourceProperties to identify x86 and ARM64 systems. (20f19e0e)

client-bedrock-agentcore: Adds log group name prefix trace source selection, custom or source log group result destinations, and metrics namespace customization (823b2d33)

client-bedrock-agentcore-control: AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization. (2f826477)

client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted. (c66ca41b)

client-guardduty: Adding support for Sequence Activities in GuardDuty Findings (5c12a0eb)

lib-transfer-manager: add download directory functionality (#8274) (6e591ee8)

For list of updated packages, view updated-packages.md in assets-3.1126.0.zip

v3.1125.0

3.1125.0(2026-09-02)

New Features

client-ec2: This release adds support to retain interruptible Capacity Reservations in an active state when all capacity is reclaimed. (336c7896)

client-sagemaker-featurestore-runtime: Amazon SageMaker Feature Store now supports the UpdateRecord API, enabling partial updates to individual feature values in an existing Online Store record without rewriting the entire record. This reduces write payloads and latency for high-frequency feature-level writes . (71920960)

client-sagemaker: Amazon SageMaker Feature Store now supports the Standard V2 online store type, which enables feature-level writes to feature groups. You can select Standard V2 when creating a feature group, and update the storage type of an existing feature group via UpdateFeatureGroup. (5287db7f)

client-odb: Adds the ListFlexComponents API for listing the flex components available for a given DB system shape. (551174bf)

client-mgn: AWS Transform for migrations adds a second network migration option - apply your source security posture to existing VPCs. Upload a source network file with firewall rules, tag the in-scope VPCs, and AWS Transform matches source subnets to them by CIDR and generates the security groups. (822144b2)

client-mwaa: Enabled customers to clear optional S3 paths (plugins, requirements, and startup script) for their Amazon MWAA environments by accepting empty strings for the associated fields in UpdateEnvironment requests. (9fa2e0c1)

client-bedrock-agentcore: Batch evaluation now supports up to 10 CloudWatch log groups per CloudWatchLogsSource (cebd3179)

client-medialive: AWS Elemental MediaLive now supports AB forensic video watermarking (d48e9e15)

client-appintegrations: This release adds a force parameter to DeleteApplication and a ConflictException to UpdateApplication, letting customers delete applications with existing associations in one call and get a clear error when an update conflicts with the application's current state. (62b7304c)

Bug Fixes

cloudfront-signer: preserve plus in query strings when signing URLs (#8283) (dd76a0dd)

... (truncated)

Changelog

Sourced from @aws-sdk/client-cloudfront's changelog.

3.1126.0 (2026-09-03)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1125.0 (2026-09-02)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1124.0 (2026-09-01)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1123.0 (2026-08-31)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1122.0 (2026-08-31)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1121.0 (2026-08-28)

Note: Version bump only for package @aws-sdk/client-cloudfront

3.1120.0 (2026-08-27)

... (truncated)

Commits

7131e74 Publish v3.1126.0
678282b Publish v3.1125.0
e80cab3 Publish v3.1124.0
49a1557 Publish v3.1123.0
e1cf460 Publish v3.1122.0
e53a25a Publish v3.1121.0
d6be6f8 Publish v3.1120.0
ba4e449 Publish v3.1119.0
c65dd65 Publish v3.1118.0
78b069a Publish v3.1117.0
Additional commits viewable in compare view

Updates @aws-sdk/client-sns from 3.1092.0 to 3.1126.0

Release notes

Sourced from @aws-sdk/client-sns's releases.

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

client-sfn: Updates Step Functions API documentation around CloudTrail, Execution name reuse and sort order of ListExecutions API (8dda8b4b)

client-elastic-load-balancing-v2: This release adds support for sending TCP resets for Gateway Load Balancer when a flow's idle timeout expires, or when a target becomes unhealthy or is deregistered. This adds updates the CLI documentation. (a16f1659)

New Features

client-socialmessaging: Adding support for WhatsApp Flows with endpoints. (3a3a6205)

client-transfer: AWS Transfer Family SFTP Connectors now support specifying an ordered list of AWS Secrets Manager version stages for secret retrieval. This enables seamless credential rotation workflows where external partners may take time to update their systems with new credentials. (e4bf3ecc)

client-transcribe: Amazon Transcribe now supports specifying up to 29 PII entity types in the ContentRedaction configuration of a StartTranscriptionJob request, allowing all supported entity types to be redacted in a single batch transcription job. (5fb0b9a5)

client-connect: This release enables TagOnCreate for Rule resource on CreateRule API. It also introduces a new field called PreEvaluationFilters to Rule resource, thereby impacting all Create, Update, Describe and Search APIs for Rules (18bb14bc)

client-ecs: Adds a critical parameter to the Amazon ECS managed daemon APIs that controls whether a daemon task failure drains the container instance. Non-critical daemon failures no longer drain the instance or block instance registration. (2e6a07d5)

client-evs: Amazon EVS now allows users to set, update, and retrieve values for parameters that apply across all EVS Environments in their account at a regional level, such as the VCF License portability core count. (803b694c)

client-drs: AWS Elastic Disaster Recovery now includes source server architecture in SourceProperties to identify x86 and ARM64 systems. (20f19e0e)

client-bedrock-agentcore: Adds log group name prefix trace source selection, custom or source log group result destinations, and metrics namespace customization (823b2d33)

client-bedrock-agentcore-control: AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization. (2f826477)

client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted. (c66ca41b)

client-guardduty: Adding support for Sequence Activities in GuardDuty Findings (5c12a0eb)

lib-transfer-manager: add download directory functionality (#8274) (6e591ee8)

For list of updated packages, view updated-packages.md in assets-3.1126.0.zip

v3.1125.0

3.1125.0(2026-09-02)

New Features

client-ec2: This release adds support to retain interruptible Capacity Reservations in an active state when all capacity is reclaimed. (336c7896)

client-sagemaker-featurestore-runtime: Amazon SageMaker Feature Store now supports the UpdateRecord API, enabling partial updates to individual feature values in an existing Online Store record without rewriting the entire record. This reduces write payloads and latency for high-frequency feature-level writes . (71920960)

client-sagemaker: Amazon SageMaker Feature Store now supports the Standard V2 online store type, which enables feature-level writes to feature groups. You can select Standard V2 when creating a feature group, and update the storage type of an existing feature group via UpdateFeatureGroup. (5287db7f)

client-odb: Adds the ListFlexComponents API for listing the flex components available for a given DB system shape. (551174bf)

client-mgn: AWS Transform for migrations adds a second network migration option - apply your source security posture to existing VPCs. Upload a source network file with firewall rules, tag the in-scope VPCs, and AWS Transform matches source subnets to them by CIDR and generates the security groups. (822144b2)

client-mwaa: Enabled customers to clear optional S3 paths (plugins, requirements, and startup script) for their Amazon MWAA environments by accepting empty strings for the associated fields in UpdateEnvironment requests. (9fa2e0c1)

client-bedrock-agentcore: Batch evaluation now supports up to 10 CloudWatch log groups per CloudWatchLogsSource (cebd3179)

client-medialive: AWS Elemental MediaLive now supports AB forensic video watermarking (d48e9e15)

client-appintegrations: This release adds a force parameter to DeleteApplication and a ConflictException to UpdateApplication, letting customers delete applications with existing associations in one call and get a clear error when an update conflicts with the application's current state. (62b7304c)

Bug Fixes

cloudfront-signer: preserve plus in query strings when signing URLs (#8283) (dd76a0dd)

... (truncated)

Changelog

Sourced from @aws-sdk/client-sns's changelog.

3.1126.0 (2026-09-03)

Note: Version bump only for package @aws-sdk/client-sns

3.1125.0 (2026-09-02)

Note: Version bump only for package @aws-sdk/client-sns

3.1124.0 (2026-09-01)

Note: Version bump only for package @aws-sdk/client-sns

3.1123.0 (2026-08-31)

Note: Version bump only for package @aws-sdk/client-sns

3.1122.0 (2026-08-31)

Note: Version bump only for package @aws-sdk/client-sns

3.1121.0 (2026-08-28)

Note: Version bump only for package @aws-sdk/client-sns

3.1120.0 (2026-08-27)

... (truncated)

Commits

7131e74 Publish v3.1126.0
678282b Publish v3.1125.0
e80cab3 Publish v3.1124.0
49a1557 Publish v3.1123.0
e1cf460 Publish v3.1122.0
e53a25a Publish v3.1121.0
d6be6f8 Publish v3.1120.0
ba4e449 Publish v3.1119.0
c65dd65 Publish v3.1118.0
78b069a Publish v3.1117.0
Additional commits viewable in compare view

Updates @aws-sdk/client-dynamodb from 3.1092.0 to 3.1126.0

Release notes

Sourced from @aws-sdk/client-dynamodb's releases.

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

client-sfn: Updates Step Functions API documentation around CloudTrail, Execution name reuse and sort order of ListExecutions API (8dda8b4b)

client-elastic-load-balancing-v2: This release adds support for sending TCP resets for Gateway Load Balancer when a flow's idle timeout expires, or when a target becomes unhealthy or is deregistered. This adds updates the CLI documentation. (a16f1659)

New Features

client-socialmessaging: Adding support for WhatsApp Flows with endpoints. (3a3a6205)

client-transfer: AWS Transfer Family SFTP Connectors now support specifying an ordered list of AWS Secrets Manager version stages for secret retrieval. This enables seamless credential rotation workflows where external partners may take time to update their systems with new credentials. (e4bf3ecc)

client-transcribe: Amazon Transcribe now supports specifying up to 29 PII entity types in the ContentRedaction configuration of a StartTranscriptionJob request, allowing all supported entity types to be redacted in a single batch transcription job. (5fb0b9a5)

client-connect: This release enables TagOnCreate for Rule resource on CreateRule API. It also introduces a new field called PreEvaluationFilters to Rule resource, thereby impacting all Create, Update, Describe and Search APIs for Rules (18bb14bc)

client-ecs: Adds a critical parameter to the Amazon ECS managed daemon APIs that controls whether a daemon task failure drains the container instance. Non-critical daemon failures no longer drain the instance or block instance registration. (2e6a07d5)

client-evs: Amazon EVS now allows users to set, update, and retrieve values for parameters that apply across all EVS Environments in their account at a regional level, such as the VCF License portability core count. (803b694c)

client-drs: AWS Elastic Disaster Recovery now includes source server architecture in SourceProperties to identify x86 and ARM64 systems. (20f19e0e)

client-bedrock-agentcore: Adds log group name prefix trace source selection, custom or source log group result destinations, and metrics namespace customization (823b2d33)

client-bedrock-agentcore-control: AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization. (2f826477)

client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted. (c66ca41b)

client-guardduty: Adding support for Sequence Activities in GuardDuty Findings (5c12a0eb)

lib-transfer-manager: add download directory functionality (#8274) (6e591ee8)

For list of updated packages, view updated-packages.md in assets-3.1126.0.zip

v3.1125.0

3.1125.0(2026-09-02)

New Features

client-ec2: This release adds support to retain interruptible Capacity Reservations in an active state when all capacity is reclaimed. (336c7896)

client-sagemaker-featurestore-runtime: Amazon SageMaker Feature Store now supports the UpdateRecord API, enabling partial updates to individual feature values in an existing Online Store record without rewriting the entire record. This reduces write payloads and latency for high-frequency feature-level writes . (71920960)

client-sagemaker: Amazon SageMaker Feature Store now supports...
Description has been truncated

Bumps the aws group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [@types/aws-lambda](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/aws-lambda) | `8.10.162` | `8.10.163` | | [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1132.0` | `2.1139.0` | | [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.261.0` | `2.268.0` | | [constructs](https://github.com/aws/constructs) | `10.6.0` | `10.8.1` | | [@aws-sdk/client-cloudfront](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cloudfront) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-sns](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sns) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-dynamodb](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dynamodb) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-s3](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-s3) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-secrets-manager](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-secrets-manager) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-sqs](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sqs) | `3.1092.0` | `3.1126.0` | | [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm) | `3.1092.0` | `3.1126.0` | | [@aws-solutions-constructs/aws-lambda-sqs-lambda](https://github.com/awslabs/aws-solutions-constructs/tree/HEAD/source/patterns/@aws-solutions-constructs/aws-lambda-sqs-lambda) | `2.103.0` | `2.104.0` | Updates `@types/aws-lambda` from 8.10.162 to 8.10.163 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/aws-lambda) Updates `aws-cdk` from 2.1132.0 to 2.1139.0 - [Release notes](https://github.com/aws/aws-cdk-cli/releases) - [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1139.0/packages/aws-cdk) Updates `aws-cdk-lib` from 2.261.0 to 2.268.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.268.0/packages/aws-cdk-lib) Updates `constructs` from 10.6.0 to 10.8.1 - [Release notes](https://github.com/aws/constructs/releases) - [Commits](aws/constructs@v10.6.0...v10.8.1) Updates `@aws-sdk/client-cloudfront` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cloudfront/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-cloudfront) Updates `@aws-sdk/client-sns` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sns/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-sns) Updates `@aws-sdk/client-dynamodb` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dynamodb/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-dynamodb) Updates `@aws-sdk/client-s3` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-s3/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-s3) Updates `@aws-sdk/client-secrets-manager` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-secrets-manager/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-secrets-manager) Updates `@aws-sdk/client-sqs` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sqs/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-sqs) Updates `@aws-sdk/client-ssm` from 3.1092.0 to 3.1126.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1126.0/clients/client-ssm) Updates `@aws-solutions-constructs/aws-lambda-sqs-lambda` from 2.103.0 to 2.104.0 - [Release notes](https://github.com/awslabs/aws-solutions-constructs/releases) - [Changelog](https://github.com/awslabs/aws-solutions-constructs/blob/main/CHANGELOG.md) - [Commits](https://github.com/awslabs/aws-solutions-constructs/commits/v2.104.0/source/patterns/@aws-solutions-constructs/aws-lambda-sqs-lambda) --- updated-dependencies: - dependency-name: "@types/aws-lambda" dependency-version: 8.10.163 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: aws - dependency-name: aws-cdk dependency-version: 2.1139.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: aws - dependency-name: aws-cdk-lib dependency-version: 2.268.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: constructs dependency-version: 10.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-cloudfront" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-sns" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-dynamodb" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-s3" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-secrets-manager" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-sqs" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-sdk/client-ssm" dependency-version: 3.1126.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws - dependency-name: "@aws-solutions-constructs/aws-lambda-sqs-lambda" dependency-version: 2.104.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: aws ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-09-07T02:31:10Z

⚠️ No Changeset Detected

This pull request modifies code that affects the following packages (detected by Nx):

Affected Packages:

@aligent/cdk-cdk-aspects
@aligent/cdk-constructs

If this PR should trigger a release:

yarn changeset

Follow the prompts to select the affected packages and describe your changes.

If this PR should NOT trigger a release:

Documentation-only changes
Internal refactoring with no API changes
Test updates
Build/CI configuration changes
Changes only to root files (package.json, workflows, etc.)

In this case, no action is needed - this comment is just a reminder for reviewers.

This check uses Nx to accurately detect which packages are affected by your changes. If you're unsure whether a changeset is needed, please ask a maintainer!

🔧 Commands & Tips

# Add a changeset for your changes
yarn changeset

# Check which packages Nx thinks are affected
npx nx show projects --affected

# Check current changeset status
yarn changeset:status

# Add an empty changeset if no release needed
yarn changeset --empty

Pro tip: When running yarn changeset, select only the packages listed above that you actually changed the public API of.

dependabot Bot added the dependencies Pull requests that update a dependency file label Sep 7, 2026

dependabot Bot requested a review from a team as a code owner September 7, 2026 02:30

dependabot Bot added the javascript Pull requests that update Javascript code label Sep 7, 2026

dependabot Bot requested review from AdamJHall and aaronmedina-dev September 7, 2026 02:30

Add changeset for bot PR

d7f3329

Navigation Menu

Uh oh!

chore(deps): bump the aws group across 1 directory with 12 updates - #1755

chore(deps): bump the aws group across 1 directory with 12 updates#1755
dependabot[bot] wants to merge 2 commits into
mainfrom
dependabot/npm_and_yarn/main/aws-951562c4aa

dependabot Bot commented on behalf of github Sep 7, 2026

Uh oh!

github-actions Bot commented Sep 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Sep 7, 2026

aws-cdk@v2.1139.0

2.1139.0 (2026-08-26)

Features

Bug Fixes

aws-cdk@v2.1138.0

2.1138.0 (2026-08-19)

Features

Bug Fixes

aws-cdk@v2.1137.0

2.1137.0 (2026-08-17)

Features

v2.268.0

⚠ BREAKING CHANGES

Features

Changelog

2.268.0-alpha.0 (2026-09-02)

⚠ BREAKING CHANGES

Features

Code Refactoring

2.267.0-alpha.0 (2026-08-27)

⚠ BREAKING CHANGES

Features

Bug Fixes

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

v10.8.1

10.8.1 (2026-08-03)

Bug Fixes

v10.8.0

10.8.0 (2026-07-30)

Features

v10.7.2

10.7.2 (2026-07-29)

Bug Fixes

v10.7.1

10.7.1 (2026-07-20)

Bug Fixes

v10.7.0

10.7.0 (2026-07-15)

Features

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

New Features

v3.1125.0

3.1125.0(2026-09-02)

New Features

Bug Fixes

3.1126.0 (2026-09-03)

3.1125.0 (2026-09-02)

3.1124.0 (2026-09-01)

3.1123.0 (2026-08-31)

3.1122.0 (2026-08-31)

3.1121.0 (2026-08-28)

3.1120.0 (2026-08-27)

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

New Features

v3.1125.0

3.1125.0(2026-09-02)

New Features

Bug Fixes

3.1126.0 (2026-09-03)

3.1125.0 (2026-09-02)

3.1124.0 (2026-09-01)

3.1123.0 (2026-08-31)

3.1122.0 (2026-08-31)

3.1121.0 (2026-08-28)

3.1120.0 (2026-08-27)

v3.1126.0

3.1126.0(2026-09-03)

Documentation Changes

New Features

v3.1125.0

3.1125.0(2026-09-02)

New Features