Update dependency aws-cdk-lib to v2.88.0 - autoclosed #350

mend-for-github-com · 2023-09-14T03:20:32Z

This PR contains the following updates:

Package	Type	Update	Change
aws-cdk-lib (source)	devDependencies	minor	`2.37.1` -> `2.88.0`
aws-cdk-lib (source)	dependencies	minor	`2.37.1` -> `2.88.0`

By merging this PR, the issue #272 will be automatically resolved and closed:

Severity	CVSS Score	CVE
High	8.8	CVE-2023-35165
High	7.5	CVE-2022-25883

Release Notes

aws/aws-cdk (aws-cdk-lib)

`v2.88.0`

Compare Source

Features

app-mesh: support port property on weighted targets (#26114) (54f91c8), closes #26083
autoscaling: deprecate launch configurations (under feature flag) (#25910) (ff21c69), closes #23165
aws-cdk-lib: use new L1 codegen (#26318) (f15ed23)
cfnspec: cloudformation spec v130.0.0 (#26278) (d316af7)
cfnspec: cloudformation spec v130.1.0 (#26362) (52e20c9)
cloudfront: add denyList to OriginRequestPolicy behaviors (#25767) (7926560), closes /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-630d84276f15d7dbe9836107b0c289d8692c9279ae10adacf34344273f28fcecR33 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-83c67e21c489d688c4da6943452187182e96e8974f447bd3479044da752fe43bR34 /github.com/awsdocs/aws-cloudformation-user-guide/commit/a38f2735de1b0b34a4feac1c7bde47524e0966b5#diff-96b632ead034b3554fb62969ffa46e799f53a1edfb3cfed5deba5df4d769aab1R34
cloudwatch: allow configuring period on SingleValueWidget (#26260) (c8edc87), closes #26259
cloudwatch: dashboard variables (#26285) (73f2741), closes #26200
codebuild: support for Docker Registry Image for Linux Arm (#26121) (f522796), closes #24367 #24342
core: allow user to specify --platform (#26368) (2f8df43), closes #25759
custom-resources: add custom environmentEncryption for Provider lambda functions (#26236) (546456a), closes #26197
ec2: make VPC internet gateway creation controllable (#26314) (cc4ce12), closes #26270
ec2: support using ssm parameter to resolve AMI ID at instance launch time (#26273) (2462b0b)
eks: support eks with k8s 1.27 (#25897) (fdd3309)
lambda-event-sources: added filters support to kafka sources (#26366) (c575dde), closes #26348
opensearch: opensearch 2.7 engine version (#26313) (fb580b5)
opensearchservice: support for MultiAZWithStandBy (under feature flag) (#26082) (6c75581), closes #26026
rds: support Aurora MySQL engine v. 2.11.3 (#26419) (c646644), closes #26407
rds: support aurora postgresql 14.8 (#26427) (e8fc7a8)
rds: support aurora postgresql 15.3 (#26377) (669dd7f), closes #26363
rds: support configuring secret rotation behavior via rotateImmediatelyOnUpdate prop (#26329) (979cbff), closes #26099

Bug Fixes

apigateway: method response from rest api default options are not passed to Method (#26275) (9bcc6d5), closes #26252
aws_ecs: Do not output NetworkConfiguraiton to ECS Service when using EXTERNAL deployment controller (#26338) (170edda), closes #26335
cli: credential plugin exceptions stop the entire CLI (#26244) (1a8f5ad)
cli: hotswap doesn't update SSM parameter environment variables properly (#26382) (32654f5), closes #25387 #25483
core: cross region exports fail when parameter doesn't exist (#26434) (d130bd7)
custom-resource: ignoreErrorCodesMatching broken on sdk v3 (#26430) (e21dd4e)
ecs: DeploymentAlarms property is specified for ECS service with CODE_DEPLOY and EXTERNAL deployment controller (#26317) (b799c82), closes #25840 #26307
ecs: Windows ECS Optimized AMI SSM parameter format is incorrect (#26326) (43013d0), closes #26327
lambda: add instrument handler option to adotInstrumentation to support python lambda functions (#26040) (bd06669), closes #24666
lambda: bundling fails with pnpm >= 8.4.0 (#25612) (#26386) (928cbc8), closes #25617
lambda: Update Python Lambda Adot Lambda layer versions (#26411) (47f15a6), closes #26168
s3: auto-delete-objects fails when bucket doesn't exist (#26433) (228901a), closes #16756
bad error checks in custom resources (#26392) (267e42c)
pkglint: library creation generates incorrect package names (#26330) (05d875b), closes #26331
s3: allow empty string as keyPrefixEquals (#26243) (9381880), closes #26242
servicecatalog: product stack asset bucket with forced encryption (#26303) (cb5bef5), closes #26302
servicecatalog: support nested stacks in product stacks (#26311) (cad0635), closes #24317

Alpha modules (2.88.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

apprunner-alpha: This change will be destructive if the serviceName is set on an existing resources.

Features

glue: support Data Quality ruleset (#26272) (af3a188)
glue: validate maxCapacity, workerCount, and workerType (#26241) (349e4d4)
iot-actions: iot rule https action l2 construct (#25535) (3aee826), closes #25491
synthetics: lifecycle rules for auto-generated artifact buckets (#26290) (ad0d40c), closes #22863 #22634

Bug Fixes

apprunner-alpha: respect serviceName property (#26238) (6da9a4c), closes #26237
batch: grant execution role logs:CreateLogStream by default (#26288) (c755f50), closes #25675
batch: SSM parameters can't be used as ECS Container secrets (#26373) (bc3d6a7), closes #26339
integ-tests-alpha: assertions handler is broken (#26400) (111a1cf), closes #26271 #26359 #26360
integ-tests-alpha: incorrect sdk client resolution (#26271) (17e343a)
redshift-alpha: incorrect CR runtime version (#26406) (c8d8421), closes #26397
synthetics: asset code validation failed on bundled assets (#26291) (02a5482), closes #19342 #11630

`v2.87.0`

Compare Source

Features

cfnspec: cloudformation spec v129.0.0 (#26179) (fa3caf3)
codebuild: Support for CodeBuild Image aws/codebuild/amazonlinux2-x86_64-standard:5.0 (#26058) (bc029fe)
ecs: enable alarm-based rollbacks (#25840) (1a44f69), closes #25346
update alpha modules to sdk v3 (#25895) (0a4140e)

Bug Fixes

Most aws-cdk-lib custom resources now use Node18, some are still missing. Please bear with us while we are migrating the remaining custom resources. (#26212) (399b6bb)
aws-cdk-lib: specifying EC2 private IP with associate public IP enabled generates invalid CFn (#26208) (1520d77), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2 #26187
core: tags disappear if CDK app is bundled+minified (#26181) (1f81718), closes #26169
rds: monitoring role is not created by default when using readers and writers (#26006) (9065b25), closes /github.com/aws/aws-cdk/blob/4c9016a264c2fec9c0e0e3fae1d7c4216c964b31/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L635 /github.com/aws/aws-cdk/blob/4c9016a264c2fec9c0e0e3fae1d7c4216c964b31/packages/aws-cdk-lib/aws-rds/lib/cluster.ts#L1228 #25941
sns-subscriptions: cannot add Lambda Subscription when using a Lambda Construct from a different Construct Library (#26206) (06b33d5), closes #24788
ssm: cannot import a ssm parameter with a name containing unresolved token (#25749) (1f1b642), closes #17094

Alpha modules (2.87.0-alpha.0)

Features

cli-lib: support bootstrap command (#26205) (9364e94)
glue: add ExecutionClass for FLEX (#26203) (db923dd), closes #22224
iot: add action to start Step Functions State Machine (#26059) (bd86993), closes #17698
scheduler: ScheduleTargetInput (#25663) (bc9f3de)

Bug Fixes

batch: Allow ECS JobDefinition Containers to pass Secrets as Environment Variables & Enable Kubernetes Secret Volumes (#26126) (dc6f120), closes #25559
cli-lib: bundle bootstrap template (#26229) (41cb288), closes #26224
glue: support Ray jobs with Runtime parameter (#25867) (8153237), closes #25787

`v2.86.0`

Compare Source

Features

cfnspec: cloudformation spec v128.1.0 (#26096) (d71c040)

Bug Fixes

cdk-lib: Pass lookupRoleArn to NestedStackSynthesizer (#26116) (3c29223)
core: network option is not being propagated to Docker (#26014) (341de48)
core: prevent the error when the condition is split into groups of 10 and 1 in Fn.conditionAnd() (#25999) (ee3d41e), closes /github.com/aws/aws-cdk/issues/25696#issuecomment-1561064092
ecs: potential race condition on TaskRole default policy update with CfnService (#26070) (2d9078c), closes #24880
ecs: validation for task definition fails when task-level memory is defined but container-level memory and memoryReservation are not defined with EC2 compatibility (#26027) (0e251e6), closes #25275
elbv2: correct wrong timeout validation (#26031) (636841c), closes #26023
stepfunctions: nested arrays are not serialized correctly (#26055) (f9d4573), closes #26045

Alpha modules (2.86.0-alpha.0)

Features

app-staging-synthesizer: select different bootstrap region (#26129) (2fec6a4)
integ-runner: integ-runner --watch (#26087) (1fe2f09)
integ-tests: new HttpApiCall method to easily make http calls (#26102) (00b9c84)

Bug Fixes

batch-alpha: cannot import FargateComputeEnvironment with fromFargateComputeEnvironmentArn (#25985) (05810f4), closes 40aws-cdk/aws-batch-alpha/lib/managed-compute-environment.ts#L1071 40aws-cdk/aws-batch-alpha/lib/managed-compute-environment.ts#L1077-L1079 #25979

`v2.85.0`

Compare Source

Features

cfnspec: cloudformation spec v126.0.0 (#25918) (757fba9)
cfnspec: cloudformation spec v127.0.0 (#26009) (4e57a8c)
core: add option to suppress indentation in templates (#25892) (b705956), closes #18694 #8712 #19656
ec2: add addSecurityGroup method to launth template (#25697) (28df618), closes /github.com/aws/aws-cdk/issues/18712#issuecomment-1026975615 #18712
s3-deployment: create DeployTimeSubstitutedFile to allow substitutions in file (#25876) (ca2e6a2), closes #1461
stepfunctions: support string and file definitions (#25932) (1cb9351)

Bug Fixes

cli: deployment continues if ECR asset fails to build or publish (#26060) (37caaab), closes #26048 #25827
remaining usage of node 14 (#25995) (67975ed), closes #25940
app-mesh: Missing port property in gRPC routers matchers (#25868) (8ab920b), closes #25810
cloudfront: avoid to sort TTLs when using Tokens in CachePolicy (#25920) (bc80331), closes #25795
core: prevent the error when the condition is split into groups of 10 and 1 in Fn.conditionOr() (#25708) (c135656), closes #25696 /github.com/aws/aws-cdk/issues/25696#issuecomment-1560136915 /github.com/aws/aws-cdk/issues/25696#issuecomment-1559887661
ec2: securityGroups is mandatory in fromClusterAttributes (#25976) (d8f5e2d), closes #11146
ecr: autoDeleteImages fails on multiple repositories (#25964) (c121180)
lambda: corrected environment variable naming for params and secrets extension (#26016) (30596fe), closes #26011
s3: fail fast for s3 lifecycle configuration when ExpiredObjectDeleteMarker specified with ExpirationInDays, ExpirationDate, or TagFilters. (#25841) (1a82d85), closes #25824
vpc: detect subnet with TGW route as PRIVATE_WITH_EGRESS (#25958) (49643d6), closes #25626

Alpha modules (2.85.0-alpha.0)

Features

app-staging-synthesizer: clean up staging resources on deletion (#25906) (3b14213), closes #25722
batch: ephemeralStorage property on job definitions (#25399) (a8768f4), closes #25393

Bug Fixes

apprunner: incorrect serviceName (#26015) (ad89f01), closes #26002

`v2.84.0`

Compare Source

Features

backup: add recovery point tags param to backup plan rule (#25863) (445543c), closes #25671
ecr: repo.grantPush (#25845) (01f0d92)
eks: enable ipv6 for eks cluster (#25819) (75d1853)
events-targets: support assignPublicIp flag to EcsTask (#25660) (37f1eb0), closes #9233
lambda: provide support for AWS Parameters and Secrets Extension for Lambda (#25725) (7a74513), closes #23187
lambda: provide support for AWS Parameters and Secrets Extension for Lambda (#25928) (4a3903f), closes #23187
s3: support s3 bucket double encryption mode aws:kms:dsse (… (#25961) (df263a6)

Bug Fixes

autoscaling: AutoScalingGroup maxCapacity defaults to minCapacity when using Token (#25922) (3bd973a), closes #25920 /github.com/aws/aws-cdk/issues/25795#issuecomment-1571580559
cli: assets shared between stages lead to an error (#25907) (3196cbc)
codebuild: add possibility to specify BUILD_GENERAL1_SMALL compute type with Linux GPU build image (#25880) (2d74a46), closes #25857
core: Add stage prefix to stack name shortening process (#25359) (79c58ed)
ecs: remove accidental duplication of cloudmap namespaces with service connect (#25891) (4f60293), closes #25616 #25616
eks: imported clusters can't deploy manifests (#25908) (23a84d3)
iam: Modify addManagedPolicy to compare ARN instead of instance reference (#25529) (5cc2b0b)
stepfunctions-tasks: incorrect policy generated for athena startqueryexecution task (#25911) (86e1b4c), closes #22314 #25875

Alpha modules (2.84.0-alpha.0)

Bug Fixes

batch: computeEnvironmentName is not set in FargateComputeEnvironment (#25944) (fb9f559)

`v2.83.1`

Compare Source

Bug Fixes

cli: assets shared between stages lead to an error (#25907) (68ed8ca)

Alpha modules (2.83.1-alpha.0)

`v2.83.0`

Compare Source

Features

cfnspec: cloudformation spec v125.0.0 (#25834) (674ec01)
custom-resource: AwsCustomResource supports AWS SDK for JavaScript v3 (#25406) (60699f4)
events-targets: support enableExecuteCommand in EcsTask construct (#25639) (7f3152a)

Bug Fixes

apigateway: allow overriding apiKeyRequired on methods (#25682) (ae778cc), closes #8827
cli: asset existence check is slow for many assets (#25866) (d17642a)
cli: deployment gets stuck deploying stacks with shared assets (#25846) (8b97bdf), closes #25719 #25806
cli: ENOENT during asset publishing (#25869) (1668dbd), closes #25293
codepipeline: incorrect cross-account permissions with StepFunct ionInvokeAction (#25850) (3694670)
ecr: auto delete images on ECR repository containing manifest list (#25789) (830e6d3)
kms: aliasName references alias itself (under feature flag) (#25822) (45734e3), closes #25761
lambda-nodejs: cannot use .mts, .cts, and .cjs entry files (#25642) (cbe9fe5), closes #21635
lambda-nodejs: ignore noEmit in tsconfig when pre-compiling (#25604) (dd16cf8), closes #25603

Alpha modules (2.83.0-alpha.0)

Features

cloud9: support setting automaticStopTimeMinutes (#25593) (437345e), closes #25592

`v2.82.0`

Compare Source

Features

cfnspec: cloudformation spec v123.0.0 (#25649) (d19646b)
cfnspec: cloudformation spec v124.0.0 (#25753) (fb6ec6a)
cfnspec: cloudformation spec v124.0.0 (#25790) (4c067c5)
core: support nodejs18.x for CustomResourceProviderRuntime. (#25709) (d99733f), closes #25665
ecr: validate repository arn in fromRepositoryArn (#25302) (383cccb)
lambda: add Runtime.RUBY_3_2 (#25817) (33c820b)
lambda: response payload streaming (#25375) (9664515)
rds: Support Aurora I/O Optimized for Aurora database. (#25704) (f5797b2), closes #25629
rds: support Aurora Serverless V2 instances (#25437) (fe5ed10), closes #20197
route53: HostedZone's default period at the end should be optional (#25379) (cc204ca), closes #22406
stepfunctions: add getters for context object fields (#25646) (42b43d6), closes #25415

Bug Fixes

aws-cdk-lib: attribute FindingsFilterListItems on AWS::Macie::FindingsFilter does not work (#25778) (98fd69a)
ec2: non-agnostic stack throws error with availability zones defined in VPC (#25468) (c2a22fa), closes #21690

Alpha modules (2.82.0-alpha.0)

Features

synthetics: support runtime nodejs puppeteer 4.0 (#25553) (1d7a9a8), closes #25493
app-staging-synthesizer: new synthesizer separates assets out per CDK application (#24430) (ae21ecc)

`v2.81.0`

Compare Source

Features

ec2: added support for network interfaces on ec2 instances by providing an associatePublicIpAddress property (#25441) (d43834d), closes #17127
glue: Add G.4X and G.8X worker types for AWS Glue (#25637) (1e4ffcd)
lambda: lambda code assets are marked as deploy time assets (#25705) (8a6b376)
logs: filterName property in MetricFilter (#25246) (4f8aae5)
s3-deployment: add some convenient methods to CacheControl (#25477) (21fc1d1)
secretsmanager: add support for rotateImmediatelyOnUpdate for secret rotation schedule (#25652) (cdafcc5), closes #25365
new synthesizer separates assets out per CDK application (#24430) (ae21ecc)

Bug Fixes

core: allow override with cross-stack references (#24920) (1135356), closes #18882
core: cdk deploy stops early if 2 stacks with a dependency between them share an asset (#25719) (9e45095), closes #25714
lambda: validation for FunctionUrlCorsOptions.maxAge (#25495) (0f40880)
s3: KMS encryption works fine for server access logging target buckets (#25350) (6c5b67e)

Alpha modules (2.81.0-alpha.0)

Features

batch-alpha: tag instances launched from your managed CEs (#25643) (8498740)

`v2.80.0`

Compare Source

⚠ BREAKING CHANGES

eks: A masters role is no longer provisioned by default. Use the mastersRole property to explicitly pass a role that needs cluster access. In addition, the creation role no longer allows any identity (with the appropriate sts:AssumeRole permissions) to assume it.

Features

apigateway: add grantExecute to API Methods (#25630) (ecb59fd)
appmesh: access log format support for app mesh (#25229) (c4b00be)
appsync: Add Private API support when creating a GraphqlApi (#25569) (d7e263d)
cfnspec: cloudformation spec v122.0.0 (#25555) (5ccc569)
cli: assets can now depend on stacks (#25536) (25d5d60)
cli: logging can be corked (#25644) (0643020), closes #25536
codepipeline-actions: add KMSEncryptionKeyARN for S3DeployAction (#24536) (b60876f), closes #24535
eks: alb controller include versions 2.4.2 - 2.5.1 (#25330) (83c4c36), closes #25307
msk: Kafka version 3.4.0 (#25557) (6317518), closes #25522
scheduler: schedule expression construct (#25422) (97a698e)

Bug Fixes

bootstrap: bootstrap doesn't work in non-aws partitions anymore (revert security hub finding fix) (#25540) (8854739), closes /github.com/aws/aws-cdk/issues/19380#issuecomment-1512009270 #25272 #25273 #25507
eks: overly permissive trust policies (#25473) (51f0193). We would like to thank @twelvemo and @stefreak for reporting this issue.

Alpha modules (2.80.0-alpha.0)

`v2.79.1`

Compare Source

Bug Fixes

bootstrap: bootstrap doesn't work in non-aws partitions anymore (revert security hub finding fix) (#25272) (4c4014e)

Alpha modules (2.79.1-alpha.0)

`v2.79.0`

Compare Source

Features

cfnspec: cloudformation spec v121.0 (#25499) (c2ef657)
ecr: grantRead on repositories (#25445) (ce7bdea)
logs: support DataProtectionPolicy in LogGroup construct (#23402) (ed3962a), closes #23399

Bug Fixes

batch: JobDefinition's ContainerDefinition's Image is synthesized with [Object object] (#25466) (b3d0d57), closes #25250
cfn2ts: doesn't handle property types with the same type as a primitive type (#25460) (b76c182), closes aws-cdk/cfnspec/spec-source/specification/000_cfn/000_official/000_AWS_IoT.json#L1437-L1442 aws-cdk/cfnspec/spec-source/specification/000_cfn/000_official/000_AWS_IoT.json#L1727-L1742 #22732
core: crossRegionReferences don't work across multiple regions (#25384) (65265e1), closes #25190 #25377
dynamodb: fix hardcoded partition in replica-provider IAM policy (#25428) (b5b4f66), closes #25407
elasticloadbalancingv2: ALB auth return internal server error (#24510) (75212eb), closes #21939 #19035 #18944
servicecatalogappregistry: Revert deprecated method removing PR to keep deprecated method in alpha version (#25454) (b20b1f2)

Alpha modules (2.79.0-alpha.0)

Bug Fixes

servicecatalogappregistry: Revert deprecated method to keep deprecated method in alpha version (b20b123)
batch: JobDefinition's ContainerDefinition's Image is synthesized with [Object object] (#25250) (b3d0d57)

`v2.78.0`

Compare Source

Features

appsync: L2 construct for EventBridge DataSource. (#25369) (a0ad49d), closes #24809
cfnspec: cloudformation spec v120.0.0 (#25354) (9096602)
codebuild: add support for aws/codebuild/amazonlinux2-aarch64-standard:3.0 (#25351) (0d187c1), closes #25334
ec2: Prefixlist Constructs (#25252) (b2dfac0), closes #24714
ec2: restrict access to default security group (under feature flag) (#25297) (d8272ef), closes /docs.aws.amazon.com/securityhub/latest/userguide/ec2-controls.html#ec2-2 #19394
events: Validate events rule name (#25366) (5bdb012), closes #25352
rds: add missing PerformanceInsightRetention options (#25347) (1dbae20)

Bug Fixes

api-gateway: add validation to variables property on Stage resource ([#25267](https://togith

Update dependency aws-cdk-lib to v2.80.0

cb648ec

mend-for-github-com bot requested review from peterzhuamazon, bbarani, gaiksaya, rishabh6788, zelinh, jordarlu, prudhvigodithi and Divyaasm as code owners September 14, 2023 03:20

mend-for-github-com bot added the security fix Security fix generated by Mend label Sep 14, 2023

mend-for-github-com bot changed the title ~~Update dependency aws-cdk-lib to v2.88.0~~ Update dependency aws-cdk-lib to v2.88.0 - autoclosed Feb 21, 2024

mend-for-github-com bot closed this Feb 21, 2024

mend-for-github-com bot deleted the whitesource-remediate/aws-cdk-lib-2.x branch July 11, 2024 18:44

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update dependency aws-cdk-lib to v2.88.0 - autoclosed #350

Update dependency aws-cdk-lib to v2.88.0 - autoclosed #350

mend-for-github-com bot commented Sep 14, 2023 •

edited

Loading

Update dependency aws-cdk-lib to v2.88.0 - autoclosed #350

Update dependency aws-cdk-lib to v2.88.0 - autoclosed #350

Conversation

mend-for-github-com bot commented Sep 14, 2023 • edited Loading

Release Notes

Features

Bug Fixes

Alpha modules (2.88.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

Features

Bug Fixes

Features

Bug Fixes

Alpha modules (2.87.0-alpha.0)

Features

Bug Fixes

Features

Bug Fixes

Alpha modules (2.86.0-alpha.0)

Features

Bug Fixes

Features

Bug Fixes

Alpha modules (2.85.0-alpha.0)

Features

Bug Fixes

Features

Bug Fixes

Alpha modules (2.84.0-alpha.0)

Bug Fixes

Bug Fixes

Alpha modules (2.83.1-alpha.0)

Features

Bug Fixes

Alpha modules (2.83.0-alpha.0)

Features

Features

Bug Fixes

Alpha modules (2.82.0-alpha.0)

Features

Features

Bug Fixes

Alpha modules (2.81.0-alpha.0)

Features

⚠ BREAKING CHANGES

Features

Bug Fixes

Alpha modules (2.80.0-alpha.0)

Bug Fixes

Alpha modules (2.79.1-alpha.0)

Features

Bug Fixes

Alpha modules (2.79.0-alpha.0)

Bug Fixes

Features

Bug Fixes

mend-for-github-com bot commented Sep 14, 2023 •

edited

Loading