chore(deps): update aws-cdk monorepo to v2.258.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.253.1 → 2.258.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.258.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: ConnectorArn property is now required.
• aws-pcaconnectorad: AWS::PCAConnectorAD::ServicePrincipalName: DirectoryRegistrationArn property is now required.
• aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: GroupSecurityIdentifier property is now required.
• aws-pcaconnectorad: AWS::PCAConnectorAD::TemplateGroupAccessControlEntry: TemplateArn property is now required.

Features

• core: trace property assignments in CfnResource.addPropertyOverride (#​38072) (a226372)
• update L1 CloudFormation resource definitions (#​37993) (664a878)
• aws-cdk-lib: emits performance counters if synthesis is slow (#​38004) (cb03794), closes #​37919 #​37843
• bedrockagentcore: expose default endpoint application log group on Runtime (#​37812) (8e25d78), closes #​37796
• core: add scope to IPolicyValidationContext (#​38006) (cae7456)
• core: allow validation plugins to create new files in cloud assembly (#​38007) (d9f38a9)
• core: fine-grained control over cross-stack reference strength (#​37840) (bddcd44)
• core: include suppressed violations in validation-report.json (#​38009) (f396892)
• core: new validation report schema (#​37970) (4e09b52), closes aws/aws-cdk-cli#1515
• eks: add AlbControllerVersion support for v2.8.3 through v3.2.2 (#​37752) (20abc6a), closes #​37414
• eks: add deletionProtection property to Cluster construct (#​36474) (5b19ac5), closes #​36460
• elasticache: replace CacheEngine/UserEngine enums with enum-like classes (#​37816) (6ad84b3), closes #​37813

Bug Fixes

• autoscaling: use of ScheduledAction.endTime is dangerous (#​38014) (109fae7)
• aws-cdk-lib: make token resolution ~25% faster (#​37920) (87483dc)
• bedrockagentcore: relax allowlistedHeaders pattern to match CFN schema (#​37969) (e0d6c8a), closes #​37964
• cloudwatch: metric math validation reports quoted strings as unknown identifiers (#​37977) (59bae38)
• core: cross-region SSM writer orphans parameters when resource is replaced during stack update (#​38059) (f130388)
• core: handle string "false" for boolean context values in validation (#​37989) (a26ed73)
• integ-tests: responseURL logged in onTimeout (#​37972) (b9259dd)
• lambda-nodejs: bundling rejects entry paths containing ".." (#​38022) (a7cc53c), closes #​38017 #​37572 #​37572
• lambda-nodejs: perf counters e2e test uses incorrect filename (#​38033) (d88637f)

---

Alpha modules (2.258.0-alpha.0)

Features

• integ-tests-alpha: add option to set the provider log level (#​38005) (c634a79)

Bug Fixes

• custom-resource-handlers: deterministic asset hashes for generated lambdas (#​37634) (6c3d5bc), closes #​34307
• glue-alpha: deprecate Ray Jobs (#​38055) (3fa428b)
• glue-alpha: restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (#​37815) (05be88a), closes #​33839
• integ-tests-alpha: assertion failures print too much unnecessary information (#​37974) (bc0de1d)
• mediapackagev2-alpha: cdnAuth on OriginEndpoint now generates the required policy (#​38013) (1d56b46)

v2.257.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

  • aws-neptunegraph: AWS::NeptuneGraph::GraphSnapshot: GraphIdentifier property is now required.

Features

• update L1 CloudFormation resource definitions (#​37955) (211b06c)
• core: failSynthOnValidationErrors context key to suppress console output and exit code (#​37909) (deb968f), closes aws/aws-cdk-cli#1515

---

Alpha modules (2.257.0-alpha.0)

v2.256.1

Compare Source

Bug Fixes

• invalid lock file (#​37943) (73ae91d), closes #​37726 #​37929 #​37870

---

Alpha modules (2.256.1-alpha.0)

v2.256.0

Compare Source

Features

• aws-cdk-lib: emits performance counters if synthesis is slow (#​37919) (caa0f4c), closes #​37843
• core: validations report is always written to cloud assembly (#​37867) (dddc6e0)
• ec2: replace any return types with specific interfaces in IPeer methods (#​36637) (626e44d), closes #​36636
• s3: support bucketNamePrefix and bucketNamespace properties (#​37386) (997b003), closes #​37760

Bug Fixes

• core: handle token-wrapped Boxes in property merge strategies (#​37902) (18435e3)
• core: prevent stack overflow on large construct trees (#​37901) (10163cb), closes #​37903

---

Alpha modules (2.256.0-alpha.0)

v2.255.0

Compare Source

Features

• aws-cdk-lib: emits performance counters if synthesis is slow (#​37843) (ea33967)
• bedrockagentcore: graduate to stable 🚀 (#​37876) (00cf601)
• core: builtin PropertyMergeStrategys are now compatible with deferred Box values (#​37844) (ca4b722)
• core: persist asset fingerprinting cache (#​37822) (605a776)
• ec2: add C8A instance type support (#​36736) (0d088ca), closes #​36722

Bug Fixes

• core: cached Lazys use the Box API internally (#​37889) (464fa3d)
• core: default stack trace size adds unnecessary overhead (#​37827) (0b1fb2b)
• core: share a single IAM role across cross-account Fn::GetStackOutput consumers (#​37871) (fee8b90)
• dynamodb: remove deprecated scope for stream grants (#​36680) (570d552), closes #​36289
• iam: validate PolicyStatement SID is alphanumeric for identity policies (#​36150) (a7edd72), closes #​34819 #​34828 #​34819

---

Alpha modules (2.255.0-alpha.0)

Features

• bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#​37876) (00cf601)

v2.254.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed.
aws-sagemaker: AWS::SageMaker::Model: Id attribute removed.
aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive.

Features

• update L1 CloudFormation resource definitions (#​37826) (fb4197e)
• cloudwatch: add PromQL Alarm L2 construct (#​37793) (13a4924)
• core: PropertyMergeStrategy now supports array merge strategies (#​37841) (701305d)
• core: plugin violations can be suppressed (#​37808) (a47ad39), closes #​37781
• core: weak cross environment references (#​37800) (fe23dce)
• core: weak cross-stack references in the same environment (#​37824) (167ff3c)
• dynamodb: resource policies for streams (#​37254) (7e5679c)
• lambda: add SQS provisionedPollerConfig support with validation and fix type mismatch (#​37550) (086738b), closes #​37197 /github.com/aws/aws-cdk/pull/37197#pullrequestreview-2772143562 #​37197
• ses: auto email validation for configuration sets (#​36679) (3a58641)

Bug Fixes

• file fingerprinting is now ~33% faster (#​37802) (b871018)
• core: "exports cannot be updated" for cross-region references (#​37790) (af11f00)
• rds: add lower bound validation for ClusterInstance promotionTier (#​37519) (16c0a29), closes #​37518
• s3deploy: empty sources leads to deployment error (#​37786) (d28ad30)
• bundled jsonschema in @​aws-cdk/cloud-assembly-api causes ELSPROBLEMS (#​37774) (64651d3), closes #​37756

---

Alpha modules (2.254.0-alpha.0)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#​37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#​37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#​37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#​37782) (e678d5c), closes #​37828
• custom-resource-handlers: deployment fails when parameter already exists (#​37852) (025c38c)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.