chore(deps): bump the minor-and-patch group in /cdk with 3 updates (#153)

Bumps the minor-and-patch group in /cdk with 3 updates:
[@aws-sdk/client-cognito-identity-provider](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cognito-identity-provider),
[aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib)
and
[aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).

Updates `@aws-sdk/client-cognito-identity-provider` from 3.1068.0 to
3.1072.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/releases">@​aws-sdk/client-cognito-identity-provider's
releases</a>.</em></p>
<blockquote>
<h2>v3.1072.0</h2>
<h4>3.1072.0(2026-06-18)</h4>
<h5>Documentation Changes</h5>
<ul>
<li><strong>client-ec2:</strong> Documentation updates clarifying
CancelCapacityReservation cancellable states (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/e3723ba73e2f2d307254d49ec73c5b3d91b8d892">e3723ba7</a>)</li>
</ul>
<h5>New Features</h5>
<ul>
<li><strong>client-compute-optimizer:</strong> This release surfaces two
new metrics Volume IOPS Exceeded and Volume Throughput Exceeded into EBS
volume rightsizing recommendations. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/ded6618d5249ab413bd90b26d4cea91d5f4b9b8f">ded6618d</a>)</li>
<li><strong>client-application-auto-scaling:</strong> Adds support for
ECS high-resolution predefined scaling metrics
(ECSServiceAverageCPUUtilizationHighResolution,
ECSServiceAverageMemoryUtilizationHighResolution) enabling 20-second
metric periods for faster scaling (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/95b3513a224a678fb92dc623f149d24adb96ae7b">95b3513a</a>)</li>
<li><strong>client-cognito-identity-provider:</strong> In order to
support the new TLS Self-Service feature, this change adds
SecurityPolicyType to CustomDomainConfigType. During
CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a
custom domain's TLS enforcement, and for DescribeUserPoolDomain it
informs users about the current TLS. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/e89377876aa392ea403636b6821cdb3df253648b">e8937787</a>)</li>
<li><strong>client-sagemaker:</strong> Adds support for automatic AMI
patching on HyperPod clusters. Customers can configure patching
strategies to automatically apply security patch with zero job
termination. Customers can also specify an AMI version at instance group
level and update cluster software to a certain AMI version. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/fd33a5e46ca314f064b9149900abe4e451661b5e">fd33a5e4</a>)</li>
<li><strong>client-ecs:</strong> Amazon ECS services now support high
resolution (20 second) CloudWatch metrics for CPUUtilization and
MemoryUtilization. Use these metrics for faster service auto scaling.
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/93055ac93bffca3e2957b2d67cb24ecdc784457a">93055ac9</a>)</li>
<li><strong>client-healthlake:</strong> Adding New Configurations to the
FHIR Create Datastore. The new configurations include NLP Configuration,
AnalyticsConfiguration, ProfileConfiguration (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/494fa59f48705e23ab79da259046966831183c71">494fa59f</a>)</li>
<li><strong>client-gamelift:</strong> Amazon GameLift Servers has
launched support for customizing Linux capabilities in container fleets.
You can now specify additional Linux capabilities for containers in a
container group definition, giving you finer control over the default
Docker capabilities available to your containers. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/93cefd905d4fc0c649b1d7ed69f4c8f0d79d3371">93cefd90</a>)</li>
<li><strong>client-eks:</strong> Adds support for configurable control
plane egress routing in Amazon EKS, allowing you to route control plane
egress traffic through your VPC and control how the control plane
reaches resources in your network such as webhook servers and OIDC
providers. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/693db62958c6818b4cb847887b8e36a66347c119">693db629</a>)</li>
<li><strong>client-lambda:</strong> Converging and fixing existing
documentation gaps in Lambda SDK (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/6555a565348a308dad7a51c85457c2bcee87feb8">6555a565</a>)</li>
<li><strong>client-synthetics:</strong> CloudWatch Synthetics adds
support for multi-location canaries. Customers can now monitor their
endpoints from multiple locations with centralized management from a
primary location. The SDK includes new parameters for configuring
multiple locations and tracking their state. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/f2c8b480812b5ba2d1e173a8a074df6d72654239">f2c8b480</a>)</li>
<li><strong>client-cloudwatch-logs:</strong> Added optional
startFromHead parameter to FilterLogEvents enabling descending timestamp
order (newest first) when set to false. Default true preserves existing
ascending order. Reverse sorting requires a startTime on or after Jan 1,
2024. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/1be63ed942af46df978e55df4bec6fb6c9d16e60">1be63ed9</a>)</li>
<li><strong>client-batch:</strong> Adds Support for ordered allocation
strategies- BEST-FIT-PROGRESSIVE-ORDERED or
SPOT-CAPACITY-OPTIMIZED-PRIORITIZED (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/0e57e53b1e0914a03b5b7c7d346245a1e6b6da11">0e57e53b</a>)</li>
</ul>
<hr />
<p>For list of updated packages, view
<strong>updated-packages.md</strong> in
<strong>assets-3.1072.0.zip</strong></p>
<h2>v3.1071.0</h2>
<h4>3.1071.0(2026-06-17)</h4>
<h5>New Features</h5>
<ul>
<li><strong>client-partnercentral-selling:</strong> Cosell Resonate AND
Prospecing API Launch with ARN correction (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/7e8c98abe070924fbbd1ea2abc183f0715f80945">7e8c98ab</a>)</li>
<li><strong>client-compute-optimizer-automation:</strong> This launch
adds IfExists comparison operators to Compute Optimizer Automation rule
criteria, so a rule can include recommended actions whose specified
attribute isn't present. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/ab2c616d167a0796fba91e44d1118a6a8baee60d">ab2c616d</a>)</li>
<li><strong>client-bedrock-agent:</strong> Launching Bedrock Managed
Knowledge Bases. Added support for resource-based policies on Knowledge
Base resources, enabling cross-account access for Managed Knowledge
Bases. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/de0affe4ad738b7f07d91574e2b2cfd83a447d44">de0affe4</a>)</li>
<li><strong>client-securityagent:</strong> Updated AWS Security Agent
SDK model with new APIs for threat modeling, code review, security
requirements, and additional integration providers. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/9c3d3351842902b1ea1e8be52c4e7f40b868daae">9c3d3351</a>)</li>
<li><strong>client-opensearch:</strong> Adds support for configuring IAM
Identity Center options on existing OpenSearch applications via the
UpdateApplication API. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/94f06a20a15ab75302088d5f3c31d708a8256e5c">94f06a20</a>)</li>
<li><strong>client-glue:</strong> This release adds support for Search
and Discovery in AWS Glue, letting you and your applications search Data
Catalog assets such as table and enrich them with business context and
glossary terms. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/b394fc0b39c814d5f72593dfc4db5ff5c2cbe643">b394fc0b</a>)</li>
<li><strong>client-bedrock-agentcore-control:</strong> AgentCore Gateway
now supports inference targets to LLM providers (direct config or
built-in connectors), HTTP passthrough targets with session stickiness,
runtime target API schemas, AWS WAF web ACL association with
configurable fail-open or fail-close modes, and interceptor payload
filtering. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/75f1d588d526de04060ebd653ca1a96e7ea75ff6">75f1d588</a>)</li>
<li><strong>client-devops-agent:</strong> Adds support for Remote A2A
(Agent-to-Agent) agent registration and management. Adds new Release
Readiness Review and Release Testing capabilities. Adds support for Git
managed skills in AWS DevOps Agent. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/ebc040e1f3fc292d3eee1a9b146c972338e14807">ebc040e1</a>)</li>
<li><strong>client-bedrock-agentcore:</strong> AgentCore Harness service
will be Generally Available at NYS 2026 with this Treb release. Harness
will support invoking specific endpoints via the qualifier parameter,
AWS Skills for pre-built agent capabilities, and improved validation for
skill git source URLs. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/5bf9fcccc3b4cc204df57caea2adcf254c5d3846">5bf9fccc</a>)</li>
<li><strong>client-ecs:</strong> Releasing the ability to bring-your-own
task-definition for CreateExpressGatewayService and
UpdateGatewayExpressService (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/b7b9cb4f46a34c4ab0fedf2138a9a5ba17bdd731">b7b9cb4f</a>)</li>
<li><strong>client-mq:</strong> This release adds private networking
support for Amazon MQ for RabbitMQ. You can now associate AWS RAM
resource shares with your broker and retrieve shared resource details
using the new DescribeSharedResources API. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/e96af4503bfea9a6f211bc905b8e949af6cc38d7">e96af450</a>)</li>
<li><strong>client-bedrock-agent-runtime:</strong> Adds new
AgenticRetrieveStream API for managed knowledge bases to use
conversation history and autonomously plan for multi-hop multi-KB
reasoning with built-in evaluation and access-control. Updates Retrieve
API for access-control-based filtering for managed knowledge bases. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/557f7b3246fb6530fb8dcb481f1035d7827d2a1e">557f7b32</a>)</li>
</ul>
<h5>Tests</h5>
<ul>
<li><strong>core:</strong>
<ul>
<li>prebuild before integration and e2e (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8111">#8111</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/363f3fb7165d327e3ca24b3d7beffb19cc528c31">363f3fb7</a>)</li>
<li>prebuild core before unit tests (<a
href="https://redirect.github.com/aws/aws-sdk-js-v3/pull/8108">#8108</a>)
(<a
href="https://github.com/aws/aws-sdk-js-v3/commit/5f789e7fe2089eacff868a6e1d0b6c2c11313bbc">5f789e7f</a>)</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cognito-identity-provider/CHANGELOG.md">@​aws-sdk/client-cognito-identity-provider's
changelog</a>.</em></p>
<blockquote>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1071.0...v3.1072.0">3.1072.0</a>
(2026-06-18)</h1>
<h3>Features</h3>
<ul>
<li><strong>client-cognito-identity-provider:</strong> In order to
support the new TLS Self-Service feature, this change adds
SecurityPolicyType to CustomDomainConfigType. During
CreateUserPoolDomain and UpdateUserPoolDomain this is used to select a
custom domain's TLS enforcement, and for DescribeUserPoolDomain it
informs users about the current TLS. (<a
href="https://github.com/aws/aws-sdk-js-v3/commit/e89377876aa392ea403636b6821cdb3df253648b">e893778</a>)</li>
</ul>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1070.0...v3.1071.0">3.1071.0</a>
(2026-06-17)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-cognito-identity-provider</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1069.0...v3.1070.0">3.1070.0</a>
(2026-06-16)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-cognito-identity-provider</code></p>
<h1><a
href="https://github.com/aws/aws-sdk-js-v3/compare/v3.1068.0...v3.1069.0">3.1069.0</a>
(2026-06-15)</h1>
<p><strong>Note:</strong> Version bump only for package
<code>@​aws-sdk/client-cognito-identity-provider</code></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/501cd332619533ae96f154d7c226dc2f7bf8d615"><code>501cd33</code></a>
Publish v3.1072.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/e89377876aa392ea403636b6821cdb3df253648b"><code>e893778</code></a>
feat(client-cognito-identity-provider): In order to support the new TLS
Self-...</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/3ce820aa54c953459eb58abe4f06e28ba4ceb87d"><code>3ce820a</code></a>
Publish v3.1071.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/4f2cfe1cfc420d0b5bfa226ae6619dd67de73ccc"><code>4f2cfe1</code></a>
Publish v3.1070.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/7058d13814795c6ff06a960077269458520bf161"><code>7058d13</code></a>
Publish v3.1069.0</li>
<li><a
href="https://github.com/aws/aws-sdk-js-v3/commit/67981c5a65d6dd797a065df034a8d0fcdaa9b7bd"><code>67981c5</code></a>
chore(scripts): tuning the build graph (<a
href="https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cognito-identity-provider/issues/8095">#8095</a>)</li>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-js-v3/commits/v3.1072.0/clients/client-cognito-identity-provider">compare
view</a></li>
</ul>
</details>
<br />

Updates `aws-cdk-lib` from 2.259.0 to 2.260.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's
releases</a>.</em></p>
<blockquote>
<h2>v2.260.0</h2>
<h3>Features</h3>
<ul>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38151">#38151</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/f266a47595832d6018b8a0d43dcae6afde511de6">f266a47</a>),
closes <a
href="https://github.com/aws//docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html/issues/s3">/docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3</a></li>
<li><strong>core:</strong> add external traces to ConstructError (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38131">#38131</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e360dd9b44d2111e28cd16ac683a813f33ed5793">e360dd9</a>)</li>
<li><strong>core:</strong> append external stack traces to metadata if
available (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38124">#38124</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c77a08c19eb16a3734183f079e598b90383d28a3">c77a08c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>bundling:</strong> docker build can be skipped if already
performed (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38134">#38134</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/2f9ae95d55cda7dc5011c8a04b66af7fca0c4f9d">2f9ae95</a>)</li>
<li><strong>core:</strong> stack traces contain decorator paths (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38130">#38130</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/318f645df3f0c903f64126975fb4a4a65c0a18d0">318f645</a>)</li>
<li><strong>core:</strong> weak cross-stack references fail for list
attributes (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37948">#37948</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6bb9d75f71c229d246e39942cdf37e7406dfd5cb">6bb9d75</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/37910">#37910</a></li>
<li><strong>lambda-nodejs:</strong> reuse posixShellEscape for Docker
bundling file operations (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38133">#38133</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/baa9e1dff469306cc23b8f4bd232d703f98bf68a">baa9e1d</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.260.0-alpha.0)</h2>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.259.0-alpha.0...v2.260.0-alpha.0">2.260.0-alpha.0</a>
(2026-06-16)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.258.1-alpha.0...v2.259.0-alpha.0">2.259.0-alpha.0</a>
(2026-06-11)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.258.0-alpha.0...v2.258.1-alpha.0">2.258.1-alpha.0</a>
(2026-06-08)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.257.0-alpha.0...v2.258.0-alpha.0">2.258.0-alpha.0</a>
(2026-06-04)</h2>
<h3>Features</h3>
<ul>
<li><strong>integ-tests-alpha:</strong> add option to set the provider
log level (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38005">#38005</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c634a795de080df21b86fad191d05dfde884eb4e">c634a79</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>custom-resource-handlers:</strong> deterministic asset
hashes for generated lambdas (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37634">#37634</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6c3d5bc36e19b8834319578fbd8525615a47a4b9">6c3d5bc</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34307">#34307</a></li>
<li><strong>glue-alpha:</strong> deprecate Ray Jobs (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38055">#38055</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/3fa428b9b24d286841940cfff5200d16817196bf">3fa428b</a>)</li>
<li><strong>glue-alpha:</strong> restore notifyDelayAfter to PySpark and
Scala Spark ETL jobs (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37815">#37815</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/05be88aa324635108076bdc648a4ee940d22a386">05be88a</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/33839">#33839</a></li>
<li><strong>integ-tests-alpha:</strong> assertion failures print too
much unnecessary information (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37974">#37974</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/bc0de1dacc59b95a2e89f9c3ec96589e98b35ed2">bc0de1d</a>)</li>
<li><strong>mediapackagev2-alpha:</strong> cdnAuth on OriginEndpoint now
generates the required policy (<a
href="https://redirect.github.com/aws/aws-cdk/issues/38013">#38013</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/1d56b46abd477f188021d32d77551be1377765d0">1d56b46</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.256.1-alpha.0...v2.257.0-alpha.0">2.257.0-alpha.0</a>
(2026-05-21)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.256.0-alpha.0...v2.256.1-alpha.0">2.256.1-alpha.0</a>
(2026-05-20)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.255.0-alpha.0...v2.256.0-alpha.0">2.256.0-alpha.0</a>
(2026-05-19)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.254.0-alpha.0...v2.255.0-alpha.0">2.255.0-alpha.0</a>
(2026-05-18)</h2>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> Graduation of the library
to stable. The <strong>Policy</strong> submodule is the only submodule
that remains in alpha. All other constructs have graduated to stable in
<code>aws-cdk-lib/aws-bedrockagentcore</code> and we recommend migrating
to the stable versions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37876">#37876</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/00cf6015f30755653de7a541f79c944d4a68f423">00cf601</a>)</li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.253.1-alpha.0...v2.254.0-alpha.0">2.254.0-alpha.0</a>
(2026-05-13)</h2>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> add tags support to
Evaluator and OnlineEvaluationConfig (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37804">#37804</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/adbf88faeb4d2b762563389aea160cfda496f200">adbf88f</a>)</li>
<li><strong>bedrock-agentcore-alpha:</strong> add identity L2 constructs
(<a
href="https://redirect.github.com/aws/aws-cdk/issues/37610">#37610</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/67c3af260cedb8e610dff36f829afb36114dd93a">67c3af2</a>)</li>
<li><strong>mediapackagev2-alpha:</strong> add OAC integration between
CloudFront and MediaPackageV2 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37701">#37701</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/654f59c559f6eb2b5240e7885372ac82ea05a996">654f59c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk/commit/f266a47595832d6018b8a0d43dcae6afde511de6"><code>f266a47</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38151">#38151</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/318f645df3f0c903f64126975fb4a4a65c0a18d0"><code>318f645</code></a>
fix(core): stack traces contain decorator paths (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38130">#38130</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/2f9ae95d55cda7dc5011c8a04b66af7fca0c4f9d"><code>2f9ae95</code></a>
fix(bundling): docker build can be skipped if already performed (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38134">#38134</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/aeafa634f3315995eafc0e5b3241312562219ebb"><code>aeafa63</code></a>
docs(pipelines): clarify format of DockerHub creds (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38132">#38132</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/baa9e1dff469306cc23b8f4bd232d703f98bf68a"><code>baa9e1d</code></a>
fix(lambda-nodejs): reuse posixShellEscape for Docker bundling file
operation...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e360dd9b44d2111e28cd16ac683a813f33ed5793"><code>e360dd9</code></a>
feat(core): add external traces to ConstructError (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38131">#38131</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/5619d4304c2d681bc5033be4883b35460e5b04dc"><code>5619d43</code></a>
Merge branch 'main' into merge-back/2.259.0</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/6bb9d75f71c229d246e39942cdf37e7406dfd5cb"><code>6bb9d75</code></a>
fix(core): weak cross-stack references fail for list attributes (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/37948">#37948</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/c77a08c19eb16a3734183f079e598b90383d28a3"><code>c77a08c</code></a>
feat(core): append external stack traces to metadata if available (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/38124">#38124</a>)</li>
<li>See full diff in <a
href="https://github.com/aws/aws-cdk/commits/v2.260.0/packages/aws-cdk-lib">compare
view</a></li>
</ul>
</details>
<br />

Updates `aws-cdk` from 2.1126.0 to 2.1128.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk-cli/releases">aws-cdk's
releases</a>.</em></p>
<blockquote>
<h2>aws-cdk@v2.1128.0</h2>
<h2><a
href="https://github.com/aws/aws-cdk-cli/compare/aws-cdk@v2.1127.0...aws-cdk@v2.1128.0">2.1128.0</a>
(2026-06-17)</h2>
<h3>Features</h3>
<ul>
<li><strong>deps:</strong> upgrade aws-cdk-lib (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1639">#1639</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/9c73eaf9df441bc82436358124992f30dee5312c">9c73eaf</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cli:</strong> cdk list pollutes stdout with synthesis time
(<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1637">#1637</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/7daa10461aee67d2be3bb2cc490f3c0284c33ef4">7daa104</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1632">#1632</a>
<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1603">#1603</a></li>
</ul>
<h2>aws-cdk@v2.1127.0</h2>
<h2><a
href="https://github.com/aws/aws-cdk-cli/compare/aws-cdk@v2.1126.0...aws-cdk@v2.1127.0">2.1127.0</a>
(2026-06-15)</h2>
<h3>Features</h3>
<ul>
<li><strong>cli:</strong> <code>cdk validate</code> command (behind
<code>--unstable</code> flag) (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1527">#1527</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/c03ef3eac256b023bd78d0055e4a112b41e3d600">c03ef3e</a>)</li>
<li><strong>cli:</strong> add --debug-app and --debug-cli flags (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1604">#1604</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/a0e68fb1a0cc3d22f503597164ba8d3059c2b5ea">a0e68fb</a>)</li>
<li><strong>cli:</strong> cdk validate --online (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1539">#1539</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/a731ce83f0b7743adf23a77021c231d75e759bdf">a731ce8</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1527">#1527</a></li>
<li><strong>deps:</strong> upgrade aws-cdk-lib (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1600">#1600</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/3e1f708578f055092c51eb84534b51f09265c034">3e1f708</a>)</li>
<li><strong>deps:</strong> upgrade aws-cdk-lib (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1615">#1615</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/8d3083c002baab881512afc9266ccdbfc8245377">8d3083c</a>)</li>
<li><strong>deps:</strong> upgrade aws-cdk-lib (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1627">#1627</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/304156071581edf0d3350162c9318f9bb9880ba3">3041560</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>not enough information to count sequential failures (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1614">#1614</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/eb1882c731ba6994045487929789257b02f793ed">eb1882c</a>)</li>
<li>total deploy time is not well-accounted for (<a
href="https://redirect.github.com/aws/aws-cdk-cli/issues/1596">#1596</a>)
(<a
href="https://github.com/aws/aws-cdk-cli/commit/c5db51a6a17c866fd658c6025595e86044702f2e">c5db51a</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/7daa10461aee67d2be3bb2cc490f3c0284c33ef4"><code>7daa104</code></a>
fix(cli): cdk list pollutes stdout with synthesis time (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1637">#1637</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/6b49a209216c2ab92366cd05c8a00de3c4943100"><code>6b49a20</code></a>
chore: better hotswap fallback surfacing in telemetry (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1635">#1635</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/9c73eaf9df441bc82436358124992f30dee5312c"><code>9c73eaf</code></a>
feat(deps): upgrade aws-cdk-lib (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1639">#1639</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/304156071581edf0d3350162c9318f9bb9880ba3"><code>3041560</code></a>
feat(deps): upgrade aws-cdk-lib (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1627">#1627</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/995a45718515ae94824813eb59bfa2b07e03d6f1"><code>995a457</code></a>
chore(deps): upgrade dependencies (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1626">#1626</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/16d8bc48e006b3a982fe50e34ea97c44de873283"><code>16d8bc4</code></a>
refactor: extract zip utilities into shared <code>@aws-cdk/tools</code>
package (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1512">#1512</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/a0e68fb1a0cc3d22f503597164ba8d3059c2b5ea"><code>a0e68fb</code></a>
feat(cli): add --debug-app and --debug-cli flags (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1604">#1604</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/a731ce83f0b7743adf23a77021c231d75e759bdf"><code>a731ce8</code></a>
feat(cli): cdk validate --online (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1539">#1539</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/eb1882c731ba6994045487929789257b02f793ed"><code>eb1882c</code></a>
fix: not enough information to count sequential failures (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1614">#1614</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk-cli/commit/a0588770764d3ec3d83d1596ed26739610e16739"><code>a058877</code></a>
refactor(cli): use the list action from toolkit-lib in the CLI (<a
href="https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk/issues/1603">#1603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1128.0/packages/aws-cdk">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]