Update dependency aws-cdk-lib to v2.85.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib	2.79.1 -> 2.85.0

---

Release Notes

aws/aws-cdk

v2.85.0

Compare Source

Features

• cfnspec: cloudformation spec v126.0.0 (#​25918) (757fba9)
• cfnspec: cloudformation spec v127.0.0 (#​26009) (4e57a8c)
• core: add option to suppress indentation in templates (#​25892) (b705956), closes #​18694 #​8712 #​19656
• ec2: add addSecurityGroup method to launth template (#​25697) (28df618), closes /github.com/aws/aws-cdk/issues/18712#issuecomment-1026975615 #​18712
• s3-deployment: create DeployTimeSubstitutedFile to allow substitutions in file (#​25876) (ca2e6a2), closes #​1461
• stepfunctions: support string and file definitions (#​25932) (1cb9351)

Bug Fixes

• cli: deployment continues if ECR asset fails to build or publish (#​26060) (37caaab), closes #​26048 #​25827
• remaining usage of node 14 (#​25995) (67975ed), closes #​25940
• app-mesh: Missing port property in gRPC routers matchers (#​25868) (8ab920b), closes #​25810
• cloudfront: avoid to sort TTLs when using Tokens in CachePolicy (#​25920) (bc80331), closes #​25795
• core: prevent the error when the condition is split into groups of 10 and 1 in Fn.conditionOr() (#​25708) (c135656), closes #​25696 /github.com/aws/aws-cdk/issues/25696#issuecomment-1560136915 /github.com/aws/aws-cdk/issues/25696#issuecomment-1559887661
• ec2: securityGroups is mandatory in fromClusterAttributes (#​25976) (d8f5e2d), closes #​11146
• ecr: autoDeleteImages fails on multiple repositories (#​25964) (c121180)
• lambda: corrected environment variable naming for params and secrets extension (#​26016) (30596fe), closes #​26011
• s3: fail fast for s3 lifecycle configuration when ExpiredObjectDeleteMarker specified with ExpirationInDays, ExpirationDate, or TagFilters. (#​25841) (1a82d85), closes #​25824
• vpc: detect subnet with TGW route as PRIVATE_WITH_EGRESS (#​25958) (49643d6), closes #​25626

---

Alpha modules (2.85.0-alpha.0)

Features

• app-staging-synthesizer: clean up staging resources on deletion (#​25906) (3b14213), closes #​25722
• batch: ephemeralStorage property on job definitions (#​25399) (a8768f4), closes #​25393

Bug Fixes

• apprunner: incorrect serviceName (#​26015) (ad89f01), closes #​26002

v2.84.0

Compare Source

Features

• backup: add recovery point tags param to backup plan rule (#​25863) (445543c), closes #​25671
• ecr: repo.grantPush (#​25845) (01f0d92)
• eks: enable ipv6 for eks cluster (#​25819) (75d1853)
• events-targets: support assignPublicIp flag to EcsTask (#​25660) (37f1eb0), closes #​9233
• lambda: provide support for AWS Parameters and Secrets Extension for Lambda (#​25725) (7a74513), closes #​23187
• lambda: provide support for AWS Parameters and Secrets Extension for Lambda (#​25928) (4a3903f), closes #​23187
• s3: support s3 bucket double encryption mode aws:kms:dsse (… (#​25961) (df263a6)

Bug Fixes

• autoscaling: AutoScalingGroup maxCapacity defaults to minCapacity when using Token (#​25922) (3bd973a), closes #​25920 /github.com/aws/aws-cdk/issues/25795#issuecomment-1571580559
• cli: assets shared between stages lead to an error (#​25907) (3196cbc)
• codebuild: add possibility to specify BUILD_GENERAL1_SMALL compute type with Linux GPU build image (#​25880) (2d74a46), closes #​25857
• core: Add stage prefix to stack name shortening process (#​25359) (79c58ed)
• ecs: remove accidental duplication of cloudmap namespaces with service connect (#​25891) (4f60293), closes #​25616 #​25616
• eks: imported clusters can't deploy manifests (#​25908) (23a84d3)
• iam: Modify addManagedPolicy to compare ARN instead of instance reference (#​25529) (5cc2b0b)
• stepfunctions-tasks: incorrect policy generated for athena startqueryexecution task (#​25911) (86e1b4c), closes #​22314 #​25875

---

Alpha modules (2.84.0-alpha.0)

Bug Fixes

• batch: computeEnvironmentName is not set in FargateComputeEnvironment (#​25944) (fb9f559)

v2.83.1

Compare Source

Bug Fixes

• cli: assets shared between stages lead to an error (#​25907) (68ed8ca)

---

Alpha modules (2.83.1-alpha.0)

v2.83.0

Compare Source

Features

• cfnspec: cloudformation spec v125.0.0 (#​25834) (674ec01)
• custom-resource: AwsCustomResource supports AWS SDK for JavaScript v3 (#​25406) (60699f4)
• events-targets: support enableExecuteCommand in EcsTask construct (#​25639) (7f3152a)

Bug Fixes

• apigateway: allow overriding apiKeyRequired on methods (#​25682) (ae778cc), closes #​8827
• cli: asset existence check is slow for many assets (#​25866) (d17642a)
• cli: deployment gets stuck deploying stacks with shared assets (#​25846) (8b97bdf), closes #​25719 #​25806
• cli: ENOENT during asset publishing (#​25869) (1668dbd), closes #​25293
• codepipeline: incorrect cross-account permissions with StepFunct ionInvokeAction (#​25850) (3694670)
• ecr: auto delete images on ECR repository containing manifest list (#​25789) (830e6d3)
• kms: aliasName references alias itself (under feature flag) (#​25822) (45734e3), closes #​25761
• lambda-nodejs: cannot use .mts, .cts, and .cjs entry files (#​25642) (cbe9fe5), closes #​21635
• lambda-nodejs: ignore noEmit in tsconfig when pre-compiling (#​25604) (dd16cf8), closes #​25603

---

Alpha modules (2.83.0-alpha.0)

Features

• cloud9: support setting automaticStopTimeMinutes (#​25593) (437345e), closes #​25592

v2.82.0

Compare Source

Features

• cfnspec: cloudformation spec v123.0.0 (#​25649) (d19646b)
• cfnspec: cloudformation spec v124.0.0 (#​25753) (fb6ec6a)
• cfnspec: cloudformation spec v124.0.0 (#​25790) (4c067c5)
• core: support nodejs18.x for CustomResourceProviderRuntime. (#​25709) (d99733f), closes #​25665
• ecr: validate repository arn in fromRepositoryArn (#​25302) (383cccb)
• lambda: add Runtime.RUBY_3_2 (#​25817) (33c820b)
• lambda: response payload streaming (#​25375) (9664515)
• rds: Support Aurora I/O Optimized for Aurora database. (#​25704) (f5797b2), closes #​25629
• rds: support Aurora Serverless V2 instances (#​25437) (fe5ed10), closes #​20197
• route53: HostedZone's default period at the end should be optional (#​25379) (cc204ca), closes #​22406
• stepfunctions: add getters for context object fields (#​25646) (42b43d6), closes #​25415

Bug Fixes

• aws-cdk-lib: attribute FindingsFilterListItems on AWS::Macie::FindingsFilter does not work (#​25778) (98fd69a)
• ec2: non-agnostic stack throws error with availability zones defined in VPC (#​25468) (c2a22fa), closes #​21690

---

Alpha modules (2.82.0-alpha.0)

Features

• synthetics: support runtime nodejs puppeteer 4.0 (#​25553) (1d7a9a8), closes #​25493
• app-staging-synthesizer: new synthesizer separates assets out per CDK application (#​24430) (ae21ecc)

v2.81.0

Compare Source

Features

• ec2: added support for network interfaces on ec2 instances by providing an associatePublicIpAddress property (#​25441) (d43834d), closes #​17127
• glue: Add G.4X and G.8X worker types for AWS Glue (#​25637) (1e4ffcd)
• lambda: lambda code assets are marked as deploy time assets (#​25705) (8a6b376)
• logs: filterName property in MetricFilter (#​25246) (4f8aae5)
• s3-deployment: add some convenient methods to CacheControl (#​25477) (21fc1d1)
• secretsmanager: add support for rotateImmediatelyOnUpdate for secret rotation schedule (#​25652) (cdafcc5), closes #​25365
• new synthesizer separates assets out per CDK application (#​24430) (ae21ecc)

Bug Fixes

• core: allow override with cross-stack references (#​24920) (1135356), closes #​18882
• core: cdk deploy stops early if 2 stacks with a dependency between them share an asset (#​25719) (9e45095), closes #​25714
• lambda: validation for FunctionUrlCorsOptions.maxAge (#​25495) (0f40880)
• s3: KMS encryption works fine for server access logging target buckets (#​25350) (6c5b67e)

---

Alpha modules (2.81.0-alpha.0)

Features

• batch-alpha: tag instances launched from your managed CEs (#​25643) (8498740)

v2.80.0

Compare Source

⚠ BREAKING CHANGES

• eks: A masters role is no longer provisioned by default. Use the mastersRole property to explicitly pass a role that needs cluster access. In addition, the creation role no longer allows any identity (with the appropriate sts:AssumeRole permissions) to assume it.

Features

• apigateway: add grantExecute to API Methods (#​25630) (ecb59fd)
• appmesh: access log format support for app mesh (#​25229) (c4b00be)
• appsync: Add Private API support when creating a GraphqlApi (#​25569) (d7e263d)
• cfnspec: cloudformation spec v122.0.0 (#​25555) (5ccc569)
• cli: assets can now depend on stacks (#​25536) (25d5d60)
• cli: logging can be corked (#​25644) (0643020), closes #​25536
• codepipeline-actions: add KMSEncryptionKeyARN for S3DeployAction (#​24536) (b60876f), closes #​24535
• eks: alb controller include versions 2.4.2 - 2.5.1 (#​25330) (83c4c36), closes #​25307
• msk: Kafka version 3.4.0 (#​25557) (6317518), closes #​25522
• scheduler: schedule expression construct (#​25422) (97a698e)

Bug Fixes

• bootstrap: bootstrap doesn't work in non-aws partitions anymore (revert security hub finding fix) (#​25540) (8854739), closes /github.com/aws/aws-cdk/issues/19380#issuecomment-1512009270 #​25272 #​25273 #​25507
• eks: overly permissive trust policies (#​25473) (51f0193). We would like to thank @​twelvemo and @​stefreak for reporting this issue.

---

Alpha modules (2.80.0-alpha.0)

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.