Skip to content

chore(deps): bump the cdk group across 1 directory with 3 updates - #7246

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/infra-gen2/cdk-e2e4ee524e
Open

chore(deps): bump the cdk group across 1 directory with 3 updates#7246
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/npm_and_yarn/infra-gen2/cdk-e2e4ee524e

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 6, 2026

Copy link
Copy Markdown
Contributor

Bumps the cdk group with 3 updates in the /infra-gen2 directory: aws-amplify, aws-cdk and aws-cdk-lib.

Updates aws-amplify from 6.19.0 to 6.20.0

Release notes

Sourced from aws-amplify's releases.

aws-amplify@6.20.0

Minor Changes

  • #14866 bcdc02b Thanks @​soberm! - feat(notifications): add Amazon Connect Customer Profiles push notifications provider

    Push Notifications can now be delivered through Amazon Connect Customer Profiles via the new aws-amplify/push-notifications/customer-profiles sub-path export. The provider ships identifyUser, initializePushNotifications, registerDevice, and removeDevice alongside the transport-agnostic badge, permission, launch-notification, and notification/token listener APIs, with SigV4-signed device registration and client-side user-profile validation. Amplify.configure accepts the corresponding amazon_connect notifications configuration from amplify_outputs.json.

    Device registration follows the signed-in principal: initializePushNotifications registers the device when a push token is received and re-registers it on sign-in so an existing registration is re-homed to the authenticated principal. Because de-registration is authorized against the calling principal, applications should await removeDevice() before signOut() to stop delivery to a device.

    The default aws-amplify/push-notifications entry point emits a one-time ConsoleLogger notice at runtime directing customers to the Customer Profiles sub-path, since that entry point is backed by Amazon Pinpoint and AWS ends support for Amazon Pinpoint on October 30, 2026. Both changes are backwards compatible: existing exports keep their names, types, and signatures.

Patch Changes

  • Updated dependencies [bcdc02b]:
    • @​aws-amplify/core@​6.18.0
    • @​aws-amplify/notifications@​2.1.0
    • @​aws-amplify/api@​6.3.29
    • @​aws-amplify/datastore@​5.1.10
Changelog

Sourced from aws-amplify's changelog.

6.20.0

Minor Changes

  • #14866 bcdc02b Thanks @​soberm! - feat(notifications): add Amazon Connect Customer Profiles push notifications provider

    Push Notifications can now be delivered through Amazon Connect Customer Profiles via the new aws-amplify/push-notifications/customer-profiles sub-path export. The provider ships identifyUser, initializePushNotifications, registerDevice, and removeDevice alongside the transport-agnostic badge, permission, launch-notification, and notification/token listener APIs, with SigV4-signed device registration and client-side user-profile validation. Amplify.configure accepts the corresponding amazon_connect notifications configuration from amplify_outputs.json.

    Device registration follows the signed-in principal: initializePushNotifications registers the device when a push token is received and re-registers it on sign-in so an existing registration is re-homed to the authenticated principal. Because de-registration is authorized against the calling principal, applications should await removeDevice() before signOut() to stop delivery to a device.

    The default aws-amplify/push-notifications entry point emits a one-time ConsoleLogger notice at runtime directing customers to the Customer Profiles sub-path, since that entry point is backed by Amazon Pinpoint and AWS ends support for Amazon Pinpoint on October 30, 2026. Both changes are backwards compatible: existing exports keep their names, types, and signatures.

Patch Changes

  • Updated dependencies [bcdc02b]:
    • @​aws-amplify/core@​6.18.0
    • @​aws-amplify/notifications@​2.1.0
    • @​aws-amplify/api@​6.3.29
    • @​aws-amplify/datastore@​5.1.10
Commits
  • 5d8009f Version Packages (main) (#14898)
  • e1067a9 fix(push-notifications): add customer-profiles subpath package.json for legac...
  • bcdc02b feat(notifications): add Amazon Connect Customer Profiles provider for Push N...
  • See full diff in compare view

Updates aws-cdk from 2.1134.0 to 2.1136.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1136.0

2.1136.0 (2026-08-12)

Features

aws-cdk@v2.1135.1

2.1135.1 (2026-08-07)

aws-cdk@v2.1135.0

2.1135.0 (2026-08-03)

Features

Bug Fixes

Commits

Updates aws-cdk-lib from 2.262.0 to 2.265.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.265.0

Features

Bug Fixes


Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
  • mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

v2.264.0

⚠ BREAKING CHANGES

  • bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the old dimensions must be updated.
  • bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

  • glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
  • glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
  • glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
  • glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
  • glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
  • glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

  • glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
  • glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
  • glue-alpha: new hasEncryptedData property (#38511) (c977e36)
  • glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
  • glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

  • glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
  • glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
  • mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

  • glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
  • glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

  • glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
  • glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
  • glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

  • glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)

... (truncated)

Commits
  • 3c8d99e chore: update analytics metadata blueprints
  • a29b5c0 fix(secretsmanager): correct SAR rotation app versions for GovCloud (#38462)
  • 974e43b feat(cloudwatch): support AT_LEAST expression for composite alarm rules (#37693)
  • e322035 fix(cloudwatch): make concrete widgets assignable to widget interface (#37695)
  • b98477b chore(core): update feature flag documentation for @​aws-cdk/core:defaultCross...
  • 000f532 feat(ec2): add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#37900)
  • 6e05a63 chore: yarn upgrade dependencies requiring intervention (#38125)
  • 817c50b feat(bedrock-agentcore): add StreamDeliveryResources support to Memory L2 Con...
  • fcf54bf feat(docdb): add managed password support (#35711)
  • da4281e feat(ec2): add volume initialization rate to ebs props for launchtemplate (#3...
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 6, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner August 6, 2026 12:44
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Aug 6, 2026
@dependabot dependabot Bot changed the title chore(deps): bump the cdk group in /infra-gen2 with 3 updates chore(deps): bump the cdk group across 1 directory with 3 updates Aug 13, 2026
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/infra-gen2/cdk-e2e4ee524e branch from aa84984 to c4e2fd1 Compare August 13, 2026 12:45
Bumps the cdk group with 3 updates in the /infra-gen2 directory: [aws-amplify](https://github.com/aws-amplify/amplify-js/tree/HEAD/packages/aws-amplify), [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) and [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib).


Updates `aws-amplify` from 6.19.0 to 6.20.0
- [Release notes](https://github.com/aws-amplify/amplify-js/releases)
- [Changelog](https://github.com/aws-amplify/amplify-js/blob/main/packages/aws-amplify/CHANGELOG.md)
- [Commits](https://github.com/aws-amplify/amplify-js/commits/aws-amplify@6.20.0/packages/aws-amplify)

Updates `aws-cdk` from 2.1134.0 to 2.1136.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1136.0/packages/aws-cdk)

Updates `aws-cdk-lib` from 2.262.0 to 2.265.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.265.0/packages/aws-cdk-lib)

---
updated-dependencies:
- dependency-name: aws-amplify
  dependency-version: 6.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: aws-cdk
  dependency-version: 2.1135.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cdk
- dependency-name: aws-cdk-lib
  dependency-version: 2.263.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: cdk
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/npm_and_yarn/infra-gen2/cdk-e2e4ee524e branch from c4e2fd1 to 240acf6 Compare August 20, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants