Skip to content

Bump the npm group across 2 directories with 3 updates#800

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-a3aa8441d8
Apr 3, 2026
Merged

Bump the npm group across 2 directories with 3 updates#800
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/npm-a3aa8441d8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the npm group with 3 updates in the / directory: @aws-sdk/client-cloudformation, aws-cdk-lib and aws-cdk.
Bumps the npm group with 2 updates in the /test directory: aws-cdk-lib and aws-cdk.

Updates @aws-sdk/client-cloudformation from 3.1020.0 to 3.1021.0

Release notes

Sourced from @​aws-sdk/client-cloudformation's releases.

v3.1021.0

3.1021.0(2026-03-31)

Documentation Changes
  • client-ec2: This release updates the examples in the documentation for DescribeRegions and DescribeAvailabilityZones. (50b1eeee)
New Features
  • clients: update client endpoints as of 2026-03-31 (461ac73c)
  • client-kinesis-analytics-v2: Support for Flink 2.2 in Managed Service for Apache Flink (62c491f2)
  • client-observabilityadmin: This release adds the Bedrock and Security Hub resource types for Omnia Enablement launch for March 31. (6614c09e)
  • client-partnercentral-selling: Adding EURO Currency for MRR Amount (807094be)
  • client-s3: Add Bucket Metrics configuration support to directory buckets (67ff7cc5)
  • client-quicksight: Adds StartAutomationJob and DescribeAutomationJob APIs for automation jobs. Adds three custom permission capabilities that allow admins to control whether users can manage Spaces and chat agents. Adds an OAuthClientCredentials structure to provide OAuth 2.0 client credentials inline to data sources. (4f13aba2)
  • client-s3-control: Adding an optional auditContext parameter to S3 Access Grants credential vending API GetDataAccess to enable job-level audit correlation in S3 CloudTrail logs (78652f0b)
  • client-sustainability: This is the first release of the AWS Sustainability SDK, which enables customers to access their sustainability impact data via API. (bfa72518)
  • client-database-migration-service: To successfully connect to the IBM DB2 LUW database server, you may need to specify additional security parameters that are passed to the JDBC driver. These parameters are EncryptionAlgorithm and SecurityMechanism. Both parameters accept integer values. (6cdf6680)
  • client-s3tables: S3 Tables now supports nested types when creating tables. Users can define complex column schemas using struct, list, and map types. These types can be composed together to model complex, hierarchical data structures within table schemas. (b105320b)
  • client-cloudfront: This release adds bring your own IP (BYOIP) IPv6 support to CloudFront's CreateAnycastIpList and UpdateAnycastIpList API through the IpamCidrConfigs field. (5d0f7300)
  • client-pinpoint-sms-voice-v2: This release adds RCS for Business messaging and Notify support. RCS lets you create and manage agents, send and receive messages in the US and Canada via SendTextMessage API, and configure SMS fallback. Notify lets you send templated OTP messages globally in minutes with no phone number required. (11d660ce)
  • client-odb: Adds support for EC2 Placement Group integration with ODB Network. The GetOdbNetwork and ListOdbNetworks API responses now include the ec2PlacementGroupIds field. (33da2f5a)
  • client-marketplace-agreement: This release adds 8 new APIs for AWS Marketplace sellers. 4 APIs for Cancellations (Send, List, Get, Cancel action on AgreementCancellationRequest), 3 APIs for Billing Adjustments (BatchCreate, List, Get action on BillingAdjustmentRequest), and 1 API to List Invoices (ListAgreementInvoiceLineItems) (4ac54712)
  • client-devops-agent: AWS DevOps Agent service General Availability release. (85d0436b)
  • client-geo-maps: This release expands map customization options with adjustable contour line density, dark mode support for Hybrid and Satellite views, enhanced traffic information across multiple map styles, and transit and truck travel modes for Monochrome and Hybrid map styles. (f7e1a716)
  • client-mailmanager: Amazon SES Mail Manager now supports optional TLS policy for accepting unencrypted connections and mTLS authentication for ingress endpoints with configurable trust stores. Two new rule actions are available, Bounce for sending non-delivery reports and Lambda invocation for custom email processing. (1fc40826)
  • client-organizations: Added Path field to Account and OrganizationalUnit objects in AWS Organizations API responses. (8699003a)
  • client-datazone: Adds environmentConfigurationName field to CreateEnvironmentInput and UpdateEnvironmentInput, so that Domain Owners can now recover orphaned environments by recreating deleted configurations with the same name, and will auto-recover orphaned environments (e372358f)
  • client-dataexchange: Support Tags for AWS Data Exchange resource Assets (43896f50)
  • client-acm: Adds support for searching for ACM certificates using the new SearchCertificates API. (4fd3187c)
  • client-securityagent: AWS Security Agent is a service that proactively secures applications throughout the development lifecycle with automated security reviews and on-demand penetration testing. (744d89a1)
  • client-opensearch: Support RegisterCapability, GetCapability, DeregisterCapability API for AI Assistant feature management for OpenSearch UI Applications (e1738b0a)
Bug Fixes
  • codegen: sync for adaptive retry throttling detection fix (#7905) (03f108d0)

For list of updated packages, view updated-packages.md in assets-3.1021.0.zip

Changelog

Sourced from @​aws-sdk/client-cloudformation's changelog.

3.1021.0 (2026-03-31)

Bug Fixes

  • codegen: sync for adaptive retry throttling detection fix (#7905) (03f108d)
Commits

Updates aws-cdk-lib from 2.245.0 to 2.246.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.246.0

Features

Bug Fixes

Reverts


Alpha modules (2.246.0-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.248.0-alpha.0 (2026-04-02)

2.247.0-alpha.0 (2026-04-02)

Features

2.246.0-alpha.0 (2026-03-31)

2.245.0-alpha.0 (2026-03-27)

Features

  • s3tables-alpha: add support for partition spec, sort order, and table properties (#36811) (2696cd1)
  • s3tables-alpha: add metrics configuration support for TableBucket (#37275) (e8786f5)
  • s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#37277) (69c8944), closes #33054

2.244.0-alpha.0 (2026-03-19)

Bug Fixes

  • kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#37155) (0a89447)

2.243.0-alpha.0 (2026-03-11)

2.242.0-alpha.0 (2026-03-10)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

2.241.0-alpha.0 (2026-03-02)

Features

  • mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#37042) (dd94c31)
  • mixins-preview: cross account delivery destinations (#36827) (a759eb6)

... (truncated)

Commits
  • 2d5b667 chore: update analytics metadata blueprints
  • 4fd0002 revert(core): add source tracing for L1 construct property mutations (#37415)
  • a92105c fix(lambda-nodejs): use powershell for spawn steps on Windows (#37412)
  • 819f632 chore: use HTTPS for AWS documentation links (#37359)
  • 9d46d2f chore: fix duplicate word typos in documentation comments (#37357)
  • 5a3f2ea chore: remove obsolete tslint disable comments (#37358)
  • 87416f8 chore: fix spelling errors in documentation comments (#37360)
  • 698ae90 docs(cx-api): fix typos in README (#37406)
  • 3b3a09d docs: fix duplicate word typos in README files (#37370)
  • 0f62b21 docs: fix typo and use HTTPS for AWS links in README files (#37371)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1115.0 to 2.1115.1

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1115.1

2.1115.1 (2026-03-31)

Bug Fixes

Commits

Updates aws-cdk-lib from 2.245.0 to 2.246.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.246.0

Features

Bug Fixes

Reverts


Alpha modules (2.246.0-alpha.0)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.248.0-alpha.0 (2026-04-02)

2.247.0-alpha.0 (2026-04-02)

Features

2.246.0-alpha.0 (2026-03-31)

2.245.0-alpha.0 (2026-03-27)

Features

  • s3tables-alpha: add support for partition spec, sort order, and table properties (#36811) (2696cd1)
  • s3tables-alpha: add metrics configuration support for TableBucket (#37275) (e8786f5)
  • s3tables-alpha: implement ITaggableV2 on TableBucket and Table L2 constructs (#37277) (69c8944), closes #33054

2.244.0-alpha.0 (2026-03-19)

Bug Fixes

  • kinesisanalytics-flink-alpha: mark deprecated flink runtimes as deprecated (#37155) (0a89447)

2.243.0-alpha.0 (2026-03-11)

2.242.0-alpha.0 (2026-03-10)

Features

  • mixins-preview: allow passing resource objects into properties in CFN Property mixins (#37148) (f238629)
  • mixins-preview: generate EventBridge pattern for all events (#37081) (f30e836)
  • mixins-preview: support custom merge strategies via IMergeStrategy (#37170) (0dec011)

2.241.0-alpha.0 (2026-03-02)

Features

  • mixins-preview: add recordFields and outputFormat to Vended Logs Mixin (#37042) (dd94c31)
  • mixins-preview: cross account delivery destinations (#36827) (a759eb6)

... (truncated)

Commits
  • 2d5b667 chore: update analytics metadata blueprints
  • 4fd0002 revert(core): add source tracing for L1 construct property mutations (#37415)
  • a92105c fix(lambda-nodejs): use powershell for spawn steps on Windows (#37412)
  • 819f632 chore: use HTTPS for AWS documentation links (#37359)
  • 9d46d2f chore: fix duplicate word typos in documentation comments (#37357)
  • 5a3f2ea chore: remove obsolete tslint disable comments (#37358)
  • 87416f8 chore: fix spelling errors in documentation comments (#37360)
  • 698ae90 docs(cx-api): fix typos in README (#37406)
  • 3b3a09d docs: fix duplicate word typos in README files (#37370)
  • 0f62b21 docs: fix typo and use HTTPS for AWS links in README files (#37371)
  • Additional commits viewable in compare view

Updates aws-cdk from 2.1115.0 to 2.1115.1

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1115.1

2.1115.1 (2026-03-31)

Bug Fixes

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the npm group with 3 updates in the / directory: [@aws-sdk/client-cloudformation](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cloudformation), [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).
Bumps the npm group with 2 updates in the /test directory: [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) and [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk).


Updates `@aws-sdk/client-cloudformation` from 3.1020.0 to 3.1021.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cloudformation/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1021.0/clients/client-cloudformation)

Updates `aws-cdk-lib` from 2.245.0 to 2.246.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.246.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1115.0 to 2.1115.1
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1115.1/packages/aws-cdk)

Updates `aws-cdk-lib` from 2.245.0 to 2.246.0
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.246.0/packages/aws-cdk-lib)

Updates `aws-cdk` from 2.1115.0 to 2.1115.1
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1115.1/packages/aws-cdk)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-cloudformation"
  dependency-version: 3.1021.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1115.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
- dependency-name: aws-cdk-lib
  dependency-version: 2.246.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: npm
- dependency-name: aws-cdk
  dependency-version: 2.1115.1
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: npm
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code labels Apr 3, 2026
@github-actions github-actions Bot enabled auto-merge (squash) April 3, 2026 21:16
@github-actions

github-actions Bot commented Apr 3, 2026

Copy link
Copy Markdown

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

Snapshot Warnings

⚠️: No snapshots were found for the head SHA 3bd3fa2.
Ensure that dependencies are being submitted on PR branches and consider enabling retry-on-snapshot-warnings. See the documentation for more information and troubleshooting advice.

License Issues

test/package.json

PackageVersionLicenseIssue Type
aws-cdk-lib^2.246.0NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
npm/@aws-cdk/cloud-assembly-schema 53.12.0 UnknownUnknown
npm/@aws-sdk/client-cloudformation 3.1021.0 🟢 5.5
Details
CheckScoreReason
Code-Review⚠️ 2Found 8/30 approved changesets -- score normalized to 2
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
License🟢 10license file detected
Signed-Releases⚠️ 0Project has not signed or included provenance with any releases.
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Security-Policy🟢 10security policy file detected
Packaging🟢 10packaging workflow detected
SAST🟢 10SAST tool is run on all commits
Binary-Artifacts🟢 8binaries present in source code
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Fuzzing⚠️ 0project is not fuzzed
npm/aws-cdk 2.1115.1 UnknownUnknown
npm/aws-cdk-lib 2.246.0 🟢 5.6
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
License🟢 10license file detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy🟢 10security policy file detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
npm/electron-to-chromium 1.5.331 UnknownUnknown
npm/node-releases 2.0.37 🟢 3.9
Details
CheckScoreReason
Code-Review⚠️ 0Found 0/30 approved changesets -- score normalized to 0
Binary-Artifacts🟢 10no binaries found in the repo
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Maintained🟢 1013 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Pinned-Dependencies⚠️ 2dependency not pinned by hash detected -- score normalized to 2
SAST⚠️ 0no SAST tool detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Security-Policy⚠️ 0security policy file not detected
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ 0branch protection not enabled on development/release branches
npm/aws-cdk ^2.1115.1 UnknownUnknown
npm/aws-cdk-lib ^2.246.0 UnknownUnknown

Scanned Files

  • pnpm-lock.yaml
  • test/package.json

@github-actions github-actions Bot merged commit f2e1a6c into main Apr 3, 2026
7 checks passed
@github-actions github-actions Bot deleted the dependabot/npm_and_yarn/npm-a3aa8441d8 branch April 3, 2026 21:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file javascript Pull requests that update Javascript code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants