Update dependency aws-cdk-lib to v2.219.0

[renovate]

Note

Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to mend[bot].

This notice will be removed on 2025-10-07.

---

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.214.0 -> 2.219.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.219.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PortfolioId property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioPrincipalAssociation: PrincipalARN property is now required.
aws-servicecatalog: AWS::ServiceCatalog::PortfolioProductAssociation: Id attribute removed.

Co-authored-by: aws-cdk-automation aws-cdk-automation@users.noreply.github.com

Features

• ecs: new L2 construct for ManagedInstances CapacityProvider (#​35648) (c72a09b)
• update L1 CloudFormation resource definitions (#​35646) (860ce0d)
• codebuild: add custom instance type and VPC to Fleets (#​34572) (5c2781b)
• codebuild: support overflow behavior of fleet (#​35480) (e4113b0)
• update L1 CloudFormation resource definitions (#​35614) (fb0a114)

Bug Fixes

• cloudfront: edgefunction does not propagate stack tags correctly (#​35518) (63088e8)

---

Alpha modules (2.219.0-alpha.0)

v2.218.0

Compare Source

Features

• cloudfront-origins: ip address type for http origin (#​35445) (196c7ae), closes #​35427
• docdb: support for serverless clusters (#​35574) (89bfef7), closes #​35199
• pipelines: CodeBuildFactory support Docker server (#​35584) (c62d996)
• spec2cdk: generate from<Resource>Arn and from<Resource><Prop> in every L1 (#​35470) (c588061)

---

Alpha modules (2.218.0-alpha.0)

• elasticache-alpha: implement Serverless ElastiCache L2 Construct (#​35424) (0e08c8c)

v2.217.0

Compare Source

Features

• update L1 CloudFormation resource definitions (#​35491) (d095f68)
• update L1 CloudFormation resource definitions (#​35567) (b0ccf81)

Bug Fixes

• cloudfront: Function ARN reference changed from GetAtt to Ref (#​35547) (8a26869), closes #​35531
• core: negated gitignore patterns inside subdirectories are not including matched files (#​35511) (44781ef), closes #​9146 #​22002
• kms: Alias reference incorrectly resolves to underlying Key (#​35545) (43ffcff), closes #​35543
• lambda: function.latestVersion points to wrong ARN (#​35546) (761dde2), closes #​35545
• rds: cannot use connections in rds.DatabaseInstance.fromLookup (#​35193) (973d234), closes #​35192

Reverts

• dynamodb: use keyId instead of keyArn for TableV2 replica encryption (#​35568) (b1f7f78), closes aws/aws-cdk#35144 #​35144 #​35551

---

Alpha modules (2.217.0-alpha.0)

v2.216.0

Compare Source

Features

• apigatewayv2: add disableSchemaValidation for Websocket api (#​35290) (bc391ce)
• cloudfront-origins: response completion timeout (#​35485) (7d70bf4)
• elasticloadbalancingv2: support target group health attributes (#​33351) (2de6e39), closes #​31821
• events: add support for Event Bus Logging Configuration (#​35201) (7ceaefb), closes #​35000
• route53: add SVCB and HTTPS resource record classes (#​34744) (8be219a), closes #​34673
• stepfunctions-tasks: EmrCreateClusterOptions support ebsRootVolumeIops, ebsRootVolumeThroughput and managedScalingPolicy (#​34677) (b3ad6f9), closes #​33431

Bug Fixes

• cloudformation-include: aws::novalue type validation error for non-string properties (#​35425) (ce76a56), closes #​18420
• kinesisanalytics: deprecate using KinesisAnalyticsV2 from aws-kinesisanalytics, use aws-kinesisanalyticsv2 instead (#​35519) (4255b23)
• kms: cannot access aliasTargetKey on an Alias imported by Alias.fromAliasName (#​35521) (c0c9933), closes #​35520
• secretsmanager: SecretRotationApplication creates lambda on python 3.9 which is EOL (#​35528) (756b683), closes #​34168
• secretsmanager: secret transformation (#​35202) (f4b26af), closes #​34168

---

Alpha modules (2.216.0-alpha.0)

v2.215.0

Compare Source

Features

• 33270: support new bun lock file (#​34873) (0a55ed1), closes #​33270
• codebuild: support remote Docker server (#​34976) (eb8e74b), closes #​34494
• update L1 CloudFormation resource definitions (#​35435) (d7f211f)
• batch: ecs execute command (#​35341) (30722f2)
• custom-resource: upgrade to python runtime 3.13 for custom resources (#​35342) (3db140e)
• rds: add DatabaseProxyEndpoint L2 construct (#​35064) (04d8a95), closes #​14186
• stepfunctions-tasks: add Node.js 22 support to EvaluateExpression (#​35370) (640821d), closes #​35353
• synthetics: browser type for canary (#​35423) (fe0708b)
• new resource interfaces shared by both L1s and L2s (#​35032) (5e8c0d5)

Bug Fixes

• correct typo 'notfication' to 'notification' in Stack docstring (#​35455) (bfb54b0), closes #​35433
• ecr-assets: TarballImageAsset respects CDK_DOCKER environment variable (#​35344) (8bf6b00), closes #​35336
• s3: scope BucketNotificationsHandler IAM permissions to specific bucket ARNs (#​35334) (c0300d2), closes #​35331
• stepfunctions: incorrect/missing permissions to run/redrive DistributedMap in state machine (#​34760) (bbebb79), closes #​35390 /github.com/aws/aws-cdk/issues/28820#issuecomment-2065316882 /github.com/aws/aws-cdk/blob/aea1372ab7bc68c489cea5ee5e499233755910e8/packages/aws-cdk-lib/aws-stepfunctions/lib/state-graph.ts#L178-L180
• stepfunctions: unable to run distributed map when only defined in nested StateGraphs (#​35417) (036b413), closes #​35391 /github.com/aws/aws-cdk/pull/34760#discussion_r2313620609

---

Alpha modules (2.215.0-alpha.0)

Bug Fixes

• bedrock-alpha: added missing validation when prompt uses default variant (#​35366) (cbd271e)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.