chore(deps): bump the aws-cdk group with 3 updates

[dependabot]

Bumps the aws-cdk group with 3 updates: @aws-cdk/cdk-assets-lib, @aws-cdk/toolkit-lib and aws-cdk-lib.

Updates @aws-cdk/cdk-assets-lib from 1.4.10 to 1.4.13

Release notes

Sourced from @​aws-cdk/cdk-assets-lib's releases.

@​aws-cdk/cdk-assets-lib@​v1.4.13

1.4.13 (2026-07-10)

@​aws-cdk/cdk-assets-lib@​v1.4.12

1.4.12 (2026-06-22)

Bug Fixes

• remove ~48 transitive dependencies from asset packaging (#1654) (f979da7)

@​aws-cdk/cdk-assets-lib@​v1.4.11

1.4.11 (2026-06-15)

Bug Fixes

• cdk-assets: re-tag docker image for multi-destination publishes (#1591) (3ec7934)

Commits

• 24211a5 chore(deps): upgrade dependencies (#1692)
• 1e25583 chore(deps): upgrade projen and regenerate project files (#1690)
• fc95a5a chore: modernize tsconfig settings across all packages (#1685)
• f979da7 fix: remove ~48 transitive dependencies from asset packaging (#1654)
• 995a457 chore(deps): upgrade dependencies (#1626)
• 16d8bc4 refactor: extract zip utilities into shared @aws-cdk/tools package (#1512)
• 3ec7934 fix(cdk-assets): re-tag docker image for multi-destination publishes (#1591)
• 1b92d2c chore(deps): upgrade dependencies (#1599)
• See full diff in compare view

Updates @aws-cdk/toolkit-lib from 1.28.0 to 1.34.0

Release notes

Sourced from @​aws-cdk/toolkit-lib's releases.

@​aws-cdk/toolkit-lib@​v1.34.0

1.34.0 (2026-07-13)

Features

• toolkit-lib: configurable stack stabilization polling interval on deploy, destroy and prepareStack (#1724) (65f7430), closes #1723 #1709 #1710 #1710

@​aws-cdk/toolkit-lib@​v1.33.0

1.33.0 (2026-07-10)

Features

• toolkit-lib: configurable stack event polling interval on deploy and destroy (#1710) (8580fe4), closes #1709

Bug Fixes

• fatal validations are not properly hyphenated (#1720) (a7a40e0)
• namespaced rule names are doubled up (#1707) (9edbb25)

@​aws-cdk/toolkit-lib@​v1.32.0

1.32.0 (2026-07-01)

Features

• cli: Integrate with express mode using --express flag for deploy, destroy, and bootstrap (#1689) (629ca49)

@​aws-cdk/toolkit-lib@​v1.31.0

1.31.0 (2026-06-30)

Features

• aws-cdk: surface custom resource Lambda logs on deployment failure (#1645) (90ce5c6)
• cli: allow customizing role session name via CDK_ROLE_SESSION_NAME (#1672) (9943606), closes #1120 aws/aws-cdk#22631
• toolkit-lib: register message codes for dependency-stack selection lines (#1677) (99902e1), closes #1663

Bug Fixes

• changeset-based diff is not showing changes caused by SSM parameters (#1668) (4f61577), closes aws/aws-cdk#30093 #1575 #641 #1575
• cli: a declined cdk destroy now returns exit code 1 (#1667) (fff4c93)
• cli: route cdk destroy through toolkit-lib (#1686) (5659329)

... (truncated)

Commits

• 65f7430 feat(toolkit-lib): configurable stack stabilization polling interval on deplo...
• a7a40e0 fix: fatal validations are not properly hyphenated (#1720)
• 8580fe4 feat(toolkit-lib): configurable stack event polling interval on deploy and de...
• 9edbb25 fix: namespaced rule names are doubled up (#1707)
• 81e414d chore: dedupe packages and upgrade sdk version (#1693)
• 24211a5 chore(deps): upgrade dependencies (#1692)
• 1e25583 chore(deps): upgrade projen and regenerate project files (#1690)
• 629ca49 feat(cli): Integrate with express mode using --express flag for deploy, des...
• fc95a5a chore: modernize tsconfig settings across all packages (#1685)
• 5659329 fix(cli): route cdk destroy through toolkit-lib (#1686)
• Additional commits viewable in compare view

Updates aws-cdk-lib from 2.258.0 to 2.261.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.261.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type.
• aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName.

Features

• update L1 CloudFormation resource definitions (#38189) (5aabd32)
• core: add git source metadata to CloudFormation templates (#37368) (765271b)
• rds: support native Secrets Manager integration for RDS Cluster and Instance (#35734) (07d5623), closes #29239

Bug Fixes

• improve internal path detection (#38205) (6a1934d)
• ecr-assets: tarball asset build command not escaped (#38171) (bad8a3a)
• print validation errors according to new style (#38166) (031aba8)

---

Alpha modules (2.261.0-alpha.0)

Features

• metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

v2.260.0

Features

• update L1 CloudFormation resource definitions (#38151) (f266a47), closes /docs.aws.amazon.com/AmazonS3/latest/userguide/s3-files-prereq-policies.html#s3
• core: add external traces to ConstructError (#38131) (e360dd9)
• core: append external stack traces to metadata if available (#38124) (c77a08c)

Bug Fixes

• bundling: docker build can be skipped if already performed (#38134) (2f9ae95)
• core: stack traces contain decorator paths (#38130) (318f645)
• core: weak cross-stack references fail for list attributes (#37948) (6bb9d75), closes #37910
• lambda-nodejs: reuse posixShellEscape for Docker bundling file operations (#38133) (baa9e1d)

---

Alpha modules (2.260.0-alpha.0)

v2.259.0

⚠ BREAKING CHANGES

• lambda: Runtime.NODEJS_LATEST now resolves to nodejs24.x in every region. Customers who pin to a concrete runtime (Runtime.NODEJS_22_X, useLatestRuntimeVersion: false in aws-lambda-nodejs.NodejsFunction) are unaffected. Existing AWS::Lambda::Function resources synthesized with NODEJS_LATEST will see Runtime: nodejs22.x → Runtime: nodejs24.x on next deploy. Lambda accepts runtime updates in place.

  Customer-code compatibility — IMPORTANT: Node.js 24 removes support for callback-style asynchronous handlers ((event, context, callback) => {...}) per the launch blog. Customers whose Lambda code still uses callback-based handlers will see runtime errors after the bump. Customers should migrate to async (event, context) => {...} or pin to Runtime.NODEJS_22_X explicitly.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.261.0-alpha.0 (2026-07-02)

Features

• metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

• integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

• custom-resource-handlers: deterministic asset hashes for generated lambdas (#37634) (6c3d5bc), closes #34307
• glue-alpha: deprecate Ray Jobs (#38055) (3fa428b)
• glue-alpha: restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (#37815) (05be88a), closes #33839
• integ-tests-alpha: assertion failures print too much unnecessary information (#37974) (bc0de1d)
• mediapackagev2-alpha: cdnAuth on OriginEndpoint now generates the required policy (#38013) (1d56b46)

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

• bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

... (truncated)

Commits

• 1be62ae chore: update analytics metadata blueprints
• a5da749 chore(aws-cdk-lib): remove unused table dependency (CVE-2026-13676) (#38235)
• 5aabd32 feat: update L1 CloudFormation resource definitions (#38189)
• 2c6988d chore(ec2): add g7e instance class (NVIDIA Blackwell B200) (#37971)
• 6a1934d fix: improve internal path detection (#38205)
• 45c9d5e docs: fix grammar errors and typos in source comments (#37577)
• 07d5623 feat(rds): support native Secrets Manager integration for RDS Cluster and Ins...
• bad8a3a fix(ecr-assets): tarball asset build command not escaped (#38171)
• 031aba8 fix: print validation errors according to new style (#38166)
• 1a342e0 chore(core): use cloud-assembly-schema types for validation (#38168)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions