Skip to content

chore(deps): bump the node-minor-patch group across 2 directories with 10 updates - #481

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/node-minor-patch-e09917ae26
Aug 3, 2026
Merged

chore(deps): bump the node-minor-patch group across 2 directories with 10 updates#481
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/node-minor-patch-e09917ae26

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 3, 2026

Copy link
Copy Markdown
Contributor

Bumps the node-minor-patch group with 10 updates in the / directory:

Package From To
@aws-sdk/client-ssm 3.1090.0 3.1095.0
@aws-sdk/client-sts 3.1093.0 3.1095.0
@aws-sdk/credential-providers 3.1090.0 3.1095.0
inversify 8.2.2 8.2.3
astro 7.1.1 7.1.3
aws-cdk 2.1132.1 2.1133.0
@biomejs/biome 2.5.3 2.5.5
aws-cdk-lib 2.261.0 2.262.1
constructs 10.6.0 10.7.1
tsx 4.23.0 4.23.1

Bumps the node-minor-patch group with 1 update in the /tests/sdks/nodejs directory: @aws-sdk/client-ssm.

Updates @aws-sdk/client-ssm from 3.1090.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-ssm's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-ssm's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-ssm

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-ssm

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/client-ssm

3.1092.0 (2026-07-21)

Features

  • client-ssm: Added a WarningMessage field to Automation along with corresponding public documentation. (7af6eb5)

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/client-ssm

Commits
  • 753d651 Publish v3.1095.0
  • bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
  • c379112 Publish v3.1094.0
  • 0f79b6a Publish v3.1093.0
  • 80f0df5 Publish v3.1092.0
  • 7af6eb5 feat(client-ssm): Added a WarningMessage field to Automation along with corre...
  • a1269f7 Publish v3.1091.0
  • See full diff in compare view

Updates @aws-sdk/client-sts from 3.1093.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/client-sts's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/client-sts's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/client-sts

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/client-sts

Commits
  • 753d651 Publish v3.1095.0
  • bb564e5 chore(codegen): sync for CBOR large map deser, event-streams exceptions, endp...
  • c379112 Publish v3.1094.0
  • See full diff in compare view

Updates @aws-sdk/credential-providers from 3.1090.0 to 3.1095.0

Release notes

Sourced from @​aws-sdk/credential-providers's releases.

v3.1095.0

3.1095.0(2026-07-24)

Chores
  • codegen: sync for CBOR large map deser, event-streams exceptions, endpoints features, ChecksumStream fix (#8218) (bb564e57)
  • core/protocols: JSON serde consistency testing and perf tuning (#8214) (8dac2514)
Documentation Changes
  • client-odb: Documentation-only update to clarify the operation-specific valid values for the externalIdType field. (e1f6b3ae)
New Features
  • clients: update client endpoints as of 2026-07-24 (f84113a7)
  • client-neptune-graph: Update validations for Tag Keys and KMS Key ARNs. (9109ccf7)
  • client-cognito-identity-provider: Amazon Cognito user pools now support the AdminGetUserAuthFactors operation, which lets administrators retrieve the configured authentication factors (such as password, SMS, email, and TOTP) available for a specific user in a user pool. (fb3d908c)
  • client-dynamodb: Endpoint test standardizations (2e9ccdb4)
  • client-rtbfabric: The deprecated inboundLinksCount field has been removed from the GetResponderGateway API response. Customers who previously relied on this field should use linksRequestedCount instead. (70e61b39)
  • client-artifact: Added the PutComplianceInquiryFeedback API, enabling customers to submit feedback on compliance inquiry responses. Customers can rate responses as helpful or not helpful and provide optional reason codes and comments. (e2d5f0e2)
  • client-application-insights: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (20dd5886)
  • core: update clock skew detection threshold and configs (#8189) (a2773d56)
Bug Fixes
  • core/protocols: avoid Buffer.slice in return ByteJsonShapeSerializer.flush (#8222) (d4f2aeb5)
Tests
  • core/httpAuthSchemes: fix test race condition (#8223) (a4dd3ded)

For list of updated packages, view updated-packages.md in assets-3.1095.0.zip

v3.1094.0

3.1094.0(2026-07-23)

New Features
  • client-kendra-ranking: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (1b65b736)
  • client-sagemaker: Release support for c6a, m6a, m6g, m7g, m8g instance types for SageMaker HyperPod (9af2f247)
  • client-gameliftstreams: GameLift Streams now supports configuring a custom aspect ratio per stream session to accommodate different player devices. Supported aspect ratios include landscape, portrait, and square - delivering a full-screen experience without letterboxing or cropping. (77119b6b)
  • client-workspaces-instances: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (ce7eec0f)
  • client-bcm-pricing-calculator: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (f47c152c)
  • client-mediapackagev2: This release adds support for non-epoch-locked CMAF ingest in MediaPackageV2 channels. (024499b2)
  • client-bcm-recommended-actions: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.0. The SDK will prioritize its most performant protocol. (635ae75d)
  • client-appstream: This release adds Smithy RPC v2 CBOR as an additional protocol alongside the existing AWS JSON 1.1. The SDK will prioritize its most performant protocol. (aa5d998d)
  • client-redshift-data: This release include long polling provids a new parameter wait-time-seconds to 5 API operations, new API ListSessions, and a new parameter execution-mode to BatchExecuteStatement (ad898eba)

... (truncated)

Changelog

Sourced from @​aws-sdk/credential-providers's changelog.

3.1095.0 (2026-07-24)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1094.0 (2026-07-23)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1093.0 (2026-07-22)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1092.0 (2026-07-21)

Note: Version bump only for package @​aws-sdk/credential-providers

3.1091.0 (2026-07-20)

Note: Version bump only for package @​aws-sdk/credential-providers

Commits

Updates inversify from 8.2.2 to 8.2.3

Release notes

Sourced from inversify's releases.

inversify@8.2.3

Patch Changes

  • Updated dependencies
    • @​inversifyjs/core@​15.0.1
    • @​inversifyjs/container@​3.1.3
Commits
  • 5ba2e20 Merge pull request #2023 from inversify/changeset-release/main
  • 1123fa9 chore: bump package versions
  • be063f1 Merge pull request #2022 from inversify/fix/resolution-on-jit-for-big-arity
  • 68ebd78 test: improve assertions
  • 063632c fix: jit resolution
  • eefb744 Merge pull request #2021 from inversify/perf/improve-dynamic-value-resolution
  • c494a54 chore: update benchmark scenarios with async flows
  • 8608291 chore: add container benchmark scenario
  • 9a858d9 perf: update DynamicValueBinding
  • 6057964 chore: update vitest config to exclude fixtures from coverage
  • See full diff in compare view

Updates astro from 7.1.1 to 7.1.3

Release notes

Sourced from astro's releases.

astro@7.1.3

Patch Changes

  • #17427 630b382 Thanks @​astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

astro@7.1.2

Patch Changes

  • #17445 a5f7230 Thanks @​ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

  • #17402 a89c137 Thanks @​farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

  • #17405 91992ef Thanks @​Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

Changelog

Sourced from astro's changelog.

7.1.3

Patch Changes

  • #17427 630b382 Thanks @​astrobot-houston! - Fixes image optimization during astro build using too many parallel processes in CPU-limited containers. Builds now respect the container's CPU limit, reducing peak memory usage and avoiding out-of-memory crashes.

7.1.2

Patch Changes

  • #17445 a5f7230 Thanks @​ocavue! - Updates dependency cookie to v2. Cookie values made entirely of URL-safe characters are no longer percent-encoded in Set-Cookie headers; encoded values round-trip exactly as before.

  • #17402 a89c137 Thanks @​farrosfr! - Fixes a bug where mutated Astro.locals during the request lifecycle are lost and not passed to custom error pages (404.astro/500.astro)

  • #17405 91992ef Thanks @​Araluma! - Prevents an unhandled promise rejection from the prefetch fetch fallback. In WebKit (Safari), <link rel="prefetch"> is unsupported, so prefetch uses the fetch() fallback; on a flaky connection that fetch rejects with TypeError: Load failed, and because the promise was not awaited or caught, it surfaced as an unhandled rejection to the page's global error handlers. The best-effort prefetch now swallows the failure with .catch().

Commits

Updates aws-cdk from 2.1132.1 to 2.1133.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1133.0

2.1133.0 (2026-07-23)

Features

  • cdk-explorer: advertise LSP feature and protocol manifest (#1750) (70cf0e3)
  • deps: upgrade aws-cdk-lib (#1752) (2810a54)

Bug Fixes

Commits
  • 712d792 fix(cli): forward --no-validation to the app process via CDK_VALIDATION (#1756)
  • 2810a54 feat(deps): upgrade aws-cdk-lib (#1752)
  • 09f70ce docs: update TypeScript examples from ts-node to tsx (#1749)
  • 70cf0e3 feat(cdk-explorer): advertise LSP feature and protocol manifest (#1750)
  • See full diff in compare view

Updates @biomejs/biome from 2.5.3 to 2.5.5

Release notes

Sourced from @​biomejs/biome's releases.

Biome CLI v2.5.5

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Changelog

Sourced from @​biomejs/biome's changelog.

2.5.5

Patch Changes

  • #10972 ab8c21b Thanks @​ematipico! - Fixed useExhaustiveSwitchCases for unions of bigint literals. The rule now reports missing bigint cases and compares bigint literals by value, including binary, octal, hexadecimal, and separator-containing spellings. For example, this switch now reports the missing 2n case:

    declare const value: 1n | 2n;
switch (value) {
  case 1n:
    break;
}

  • #10972 ab8c21b Thanks @​ematipico! - Fixed false positives in noBaseToString and useNullishCoalescing when member, stringification, or nullish inference cannot complete. These rules now suppress diagnostics instead of reporting from partial type information. For example, neither expression is reported when a recursive type cannot be fully resolved:

    type Recursive = Recursive;
declare const value: Recursive;
String(value);
value || "fallback";

  • #10977 0bf7486 Thanks @​ematipico! - Fixed #10922: the action useSortedAttributes no longer triggers for HTML instructions.

  • #10957 cf263c4 Thanks @​dyc3! - Fixed noThenProperty failing to detect Object.fromEntries, Object.defineProperty, and Reflect.defineProperty calls with comments between their tokens.

  • #10983 edc0ed7 Thanks @​ayaangazali! - Fixed #10980: useAriaPropsSupportedByRole no longer reports false positives when the attribute that determines an element's implicit ARIA role is written as a shorthand attribute, such as <a {href} aria-label="..."> in Astro and Svelte files.

    Shorthand attributes are now taken into account when computing the implicit role, so the anchor above correctly resolves to the link role instead of generic.

  • #10889 89526e3 Thanks @​denbezrukov! - Fixed CSS formatter casing for syntax-owned names while preserving author-defined names, including scoped keyframes and container scroll-state queries.

    - A:HOVER { COLOR: INITIAL; }
+ A:hover { color: initial; }
- @KEYFRAMES :GLOBAL KeepFrames { FROM { COLOR: RED; } }
+ @keyframes :GLOBAL KeepFrames { from { color: RED; } }
- @CONTAINER scroll-state((SCROLLED: TOP) AND (STUCK)) { A:HOVER { COLOR: RED; } }
+ @container scroll-state((SCROLLED: TOP) AND (STUCK)) { A:hover { color: RED; } }

  • #10964 794ccd0 Thanks @​denbezrukov! - Fixed CSS formatting for comments between declaration values and !important.

    -a { color: /* before */ /* after */ red !important; }
+a { color: /* before */ red /* after */ !important; }

... (truncated)

Commits

Updates aws-cdk-lib from 2.261.0 to 2.262.1

Release notes

Sourced from aws-cdk-lib's releases.

v2.262.1

Bug Fixes

  • core: bump @aws/cloudformation-validate to 1.5.1-beta to fix install on Node != 22.x (#38382) (d409b96), closes #38380
  • core: env CDK_VALIDATION=false does not disable built-in template validation (#38379) (cc4208c), closes #38378

Alpha modules (2.262.1-alpha.0)

v2.262.0

Features

  • ecs: add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689) (ad665c4)
  • mediaconnect: l2 construct (#37945) (8e9e001)
  • update L1 CloudFormation resource definitions (#38275) (2b1c632)
  • apigateway: alb integration (#36247) (20dbdd9), closes #36184
  • bedrockagentcore: support service/region in IAM credential provider for gateway targets (#37697) (08a2543), closes #37696
  • cloudfront: add Managed-HostHeaderOnly origin request policy (#38236) (0e66e47), closes #38234
  • core: templates are validated against a comprehensive default rule set (#38135) (023c5bf)

Bug Fixes

Reverts

Alpha modules (2.262.0-alpha.0)

Bug Fixes

  • redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)
Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

@dependabot
chore(deps): bump the node-minor-patch group across 2 directories wit…
281cca5 
…h 10 updates

Bumps the node-minor-patch group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm) | `3.1090.0` | `3.1095.0` |
| [@aws-sdk/client-sts](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-sts) | `3.1093.0` | `3.1095.0` |
| [@aws-sdk/credential-providers](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages/credential-providers) | `3.1090.0` | `3.1095.0` |
| [inversify](https://github.com/inversify/monorepo) | `8.2.2` | `8.2.3` |
| [astro](https://github.com/withastro/astro/tree/HEAD/packages/astro) | `7.1.1` | `7.1.3` |
| [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1132.1` | `2.1133.0` |
| [@biomejs/biome](https://github.com/biomejs/biome/tree/HEAD/packages/@biomejs/biome) | `2.5.3` | `2.5.5` |
| [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.261.0` | `2.262.1` |
| [constructs](https://github.com/aws/constructs) | `10.6.0` | `10.7.1` |
| [tsx](https://github.com/privatenumber/tsx) | `4.23.0` | `4.23.1` |

Bumps the node-minor-patch group with 1 update in the /tests/sdks/nodejs directory: [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm).


Updates `@aws-sdk/client-ssm` from 3.1090.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ssm)

Updates `@aws-sdk/client-sts` from 3.1093.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-sts/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-sts)

Updates `@aws-sdk/credential-providers` from 3.1090.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages/credential-providers/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/packages/credential-providers)

Updates `inversify` from 8.2.2 to 8.2.3
- [Release notes](https://github.com/inversify/monorepo/releases)
- [Changelog](https://github.com/inversify/monorepo/blob/main/docs/release.md)
- [Commits](https://github.com/inversify/monorepo/compare/inversify@8.2.2...inversify@8.2.3)

Updates `astro` from 7.1.1 to 7.1.3
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/astro/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/astro@7.1.3/packages/astro)

Updates `aws-cdk` from 2.1132.1 to 2.1133.0
- [Release notes](https://github.com/aws/aws-cdk-cli/releases)
- [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1133.0/packages/aws-cdk)

Updates `@biomejs/biome` from 2.5.3 to 2.5.5
- [Release notes](https://github.com/biomejs/biome/releases)
- [Changelog](https://github.com/biomejs/biome/blob/main/packages/@biomejs/biome/CHANGELOG.md)
- [Commits](https://github.com/biomejs/biome/commits/@biomejs/biome@2.5.5/packages/@biomejs/biome)

Updates `aws-cdk-lib` from 2.261.0 to 2.262.1
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/commits/v2.262.1/packages/aws-cdk-lib)

Updates `constructs` from 10.6.0 to 10.7.1
- [Release notes](https://github.com/aws/constructs/releases)
- [Commits](aws/constructs@v10.6.0...v10.7.1)

Updates `tsx` from 4.23.0 to 4.23.1
- [Release notes](https://github.com/privatenumber/tsx/releases)
- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)
- [Commits](privatenumber/tsx@v4.23.0...v4.23.1)

Updates `@aws-sdk/client-ssm` from 3.1090.0 to 3.1095.0
- [Release notes](https://github.com/aws/aws-sdk-js-v3/releases)
- [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md)
- [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1095.0/clients/client-ssm)

---
updated-dependencies:
- dependency-name: "@aws-sdk/client-ssm"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: "@aws-sdk/client-sts"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: "@aws-sdk/credential-providers"
  dependency-version: 3.1095.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: inversify
  dependency-version: 8.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-minor-patch
- dependency-name: astro
  dependency-version: 7.1.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-minor-patch
- dependency-name: aws-cdk
  dependency-version: 2.1133.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: "@biomejs/biome"
  dependency-version: 2.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-minor-patch
- dependency-name: aws-cdk-lib
  dependency-version: 2.262.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: constructs
  dependency-version: 10.7.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
- dependency-name: tsx
  dependency-version: 4.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: node-minor-patch
- dependency-name: "@aws-sdk/client-ssm"
  dependency-version: 3.1095.0
  dependency-type: direct:development
  update-type: version-update:semver-minor
  dependency-group: node-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot requested a review from macalbert as a code owner August 3, 2026 08:20
@dependabot dependabot Bot added dependencies Dependency updates (Dependabot) npm Pull requests that update npm/pnpm packages labels Aug 3, 2026
@github-actions github-actions Bot added chore Build, tooling or maintenance — no product change size/M Medium change — 50-199 lines / 5-9 files iac Infrastructure as Code (AWS CDK) and removed chore Build, tooling or maintenance — no product change size/M Medium change — 50-199 lines / 5-9 files labels Aug 3, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) August 3, 2026 08:20
@github-actions
github-actions Bot merged commit 8ac68a5 into main Aug 3, 2026
18 of 22 checks passed
@github-actions
github-actions Bot deleted the dependabot/npm_and_yarn/node-minor-patch-e09917ae26 branch August 3, 2026 08:21
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@macalbert macalbert Awaiting requested review from macalbert macalbert is a code owner

Assignees

@macalbert macalbert

Labels

dependencies Dependency updates (Dependabot) iac Infrastructure as Code (AWS CDK) npm Pull requests that update npm/pnpm packages

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@macalbert