chore(deps): update dependency aws-cdk-lib to v2.104.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib	2.78.0 -> 2.104.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.104.0

Compare Source

Features

• apigateway: add useDefaultMethodResponses property for StepFunctionsIntegrations (#​27645) (22a3234), closes #​27520
• codedeploy: support multiple load balancers for deployment groups (#​27607) (d57504e), closes #​27407
• dynamodb: add seed capacity property to support changing table billing mode (#​27734) (22168b1), closes #​27735
• dynamodb: add tagging support to TableV2 (#​27649) (d46b535), closes #​27146
• ec2: Add support for P5 instances EC2 (#​27705) (c3357ad), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html#cfn-ec2 #​27704
• ec2: support for m6in, m6idn, r6in and r6idn instance types in aws-ec2 (#​27795) (23b8f8f), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html#cfn-ec2
• eks: support updateConfig properties for managed node groups (#​27593) (f9ee5e6)
• rds: support aurora MySQL 3.05.0 (#​27748) (d449cfd)
• update AWS Service Spec (#​27755) (72bf499)

Bug Fixes

• apigateway: validation for path parts does not allow creation of resources beginning with dollar sign (#​27619) (a8f5326)
• autoscaling: AutoScalingGroup.requireImdsv2 throws error with LaunchTemplates (#​27648) (a4142aa), closes #​27586
• cli: fix stack monitoring when the stack events do not have phsical resource id set (#​27692) (857ab7d)
• cloudwatch: setting gauge widget annotations caused deployment failures (#​27720) (9198807), closes #​25496
• codepipeline-actions: default branch for CodeCommit is master (under feature flag) (#​27753) (93c6a9a), closes #​27710
• opensearchservice: IM4GN instances don't support EBS (#​27765) (af1f6bd), closes #​27757
• duration doesn't get accurately compared in multi alb service base (#​27664) (7e426c8)

---

Alpha modules (2.104.0-alpha.0)

Features

• appconfig: support for CfnMonitorsProperty in environments (#​27680) (05f3453)
• cloud9-alpha: add support for federated-user and assumed-role for Cloud9 environment ownership (#​27001) (00d2ff2)
• scheduler-alpha: target properties override (#​27603) (1433ff2), closes #​27545

Bug Fixes

• apigatewayv2: defaultAuthorizer cannot be applied to HttpRoute (#​27576) (f397071), closes #​27436
• apigatewayv2: trigger on websocket connect and disconnect is not working (#​27732) (89f4f86), closes #​19532 40aws-cdk/aws-apigatewayv2-integrations-alpha/lib/websocket/lambda.ts#L36

v2.103.1

Compare Source

Reverts

• "fix(pipelines): using the same source (s3, connection, or codecommit) in a pipeline causes duplicate id error" (#​27700) (47db081), closes aws/aws-cdk#27602

---

Alpha modules (2.103.1-alpha.0)

v2.103.0

Compare Source

Features

• update AWS Service Spec (#​27650) (d1c36c6)
• cli: support Fn::ImportValue intrinsic function for hotswap deployments (#​27292) (a54ea0f)
• ec2: support for c7i and r7iz instance types in aws-ec2 (#​27611) (382a0ed), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#cfn-ec2
• ec2: support for i4g instance types in aws-ec2 (#​27639) (039071d), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-ec2-instance.html#cfn-ec2 #​27631
• lambda: add grantInvokeCompositePrincipal method (#​27529) (447b63c), closes #​27503
• opensearch: OpenSearch 2.9 engine version (#​27612) (1f7075f), closes #​27574
• secretsmanager: validate maximum value of automaticallyAfter in RotationSchedule (#​27592) (99740b3), closes /github.com/aws/aws-cdk/pull/27570#pullrequestreview-1682163803 /github.com/aws/aws-cdk/pull/27570#pullrequestreview-1684311044
• synthetics: syn-python-selenium-2.0 runtime (#​27565) (1a89ef9), closes #​27566

Bug Fixes

• cdk: Add AppSync:Api_Key as hot swappable and fix a bug with AppSync.function (#​27559) (12ff023)
• ec2: naming collisions when using ec2.InitFile.fromAsset() on multiple instances in the same stack (#​27468) (fc3be31), closes #​16891 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-ec2/lib/cfn-init-elements.ts#L427
• pipelines: using the same source (s3, connection, or codecommit) in a pipeline causes duplicate id error (#​27602) (70acc84), closes #​23916 #​19875
• region-info: facts only returned from constant region list (#​27506) (7121c7e), closes #​27260
• stepfunctions-tasks: cloudwatchlogs service generates wrong action in role policy (#​27623) (de7fb04), closes #​27573

---

Alpha modules (2.103.0-alpha.0)

Features

• schedule-alpha: support customer managed KMS keys (#​27609) (df24d22), closes #​27543

v2.102.1

Compare Source

Bug Fixes

• region-info: adding missing regions for kinesisfirehose (#​27672) (46372e0), closes #​27656

---

Alpha modules (2.102.1-alpha.0)

v2.102.0

Compare Source

Features

• update AWS Service Spec (#​27557) (af63162)

Bug Fixes

• custom-resources: custom resource provider can't exceed 1 hour (#​27533) (b655b08), closes #​24974
• eks: partition is hardcoded in ALB controller IAM policies (#​27541) (75e56ea), closes #​22520

Reverts

• "fix(s3): grantRead does not allow s3:HeadObject (#​27416)" (#​27556) (8dc1c18)

---

Alpha modules (2.102.0-alpha.0)

Features

• scheduler: metrics for all schedules (#​27544) (5448009), closes #​23394

v2.101.1

Compare Source

Reverts

• "fix(s3): grantRead does not allow s3:HeadObject (#​27416)" (#​27556) (d013677)

---

Alpha modules (2.101.1-alpha.0)

v2.101.0

Compare Source

Features

• ec2: Add SubnetFilter for CIDR Range (#​27425) (b1ce47b), closes #​27421
• init-templates: update init templates to use the current LTS version of Java (#​27422) (6c34c9a)
• stepfunctions: adding custom state name prop (#​27306) (61be7a6)
• stepfunctions-tasks: add ExecutionParameters to AthenaStartQueryExecution (#​27287) (3fc86ca), closes #​27286
• update AWS Service Spec (#​27464) (3899f15)

Bug Fixes

• assertions: cannot use HTTP apis that do not return JSON (#​27463) (cae9db6)
• s3: grantRead does not allow s3:HeadObject (#​27416) (beac675), closes #​27389
• stepfunctions-tasks: SNS FIFO tasks does not support messageGroupId and messageDeduplicationId (#​27369) (9cb9fb8), closes #​27341

Reverts

• "fix(cli): cannot hotswap ECS task definitions containing certain intrinsics" (#​27358) (48d7726), closes #​27343 #​27343

---

Alpha modules (2.101.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• glue-alpha: SparkUIProps.prefix strings in the original /prefix-name format will now result in a validation error. To retain the same behavior, prefixes must be changed to the new prefix-name/ format.

Features

• lambda-python-alpha: add without-urls option for poetry (#​27442) (5893b3f), closes #​27103
• scheduler-targets: step function start execution target (#​27424) (3a87141), closes 40aws-cdk/aws-scheduler-targets-alpha/lib/lambda-invoke.ts#L8 #​27377

Bug Fixes

• glue-alpha: prefix validation logic is incorrect (#​27472) (b898d3b), closes #​27396
• integ-tests: cannot make two or more identical assertions (#​27380) (ea06f7d), closes #​22043 #​23049

v2.100.0

Compare Source

Features

• aws-cdk-lib: reduce JavaScript load time, second attempt (#​27362) (0bb49b4), closes #​27314 #​27353
• cdk: add AppSync GraphQLSchema and pipeline resolvers as hot swappable (#​27197) (0ea6313), closes #​2659 #​24112 #​24113
• cli: CDK Migrate CLI command (#​27325) (db051ea)
• cli: declare cdk import stable (#​27390) (1057ef0)
• eks: support INF2 instance types (#​27373) (bed9b8d)
• s3-deployment: support Fn::Select in renderData() (#​27237) (8b20c11), closes #​25504 /github.com/aws/aws-cdk/blob/3edd2400bc0c8a86366a29d3a7eef1ef4fa5e016/packages/aws-cdk-lib/aws-elasticloadbalancingv2/lib/alb/application-target-group.ts#L438
• synthetics: CloudWatch Synthetics NodeJS Pupeteer 6.0 Runtime with NodeJS 18 (#​27339) (e48af04), closes #​27337
• update AWS Service Spec (#​27375) (26d4afe)
• rds: add new RDS versions (#​27351) (e0c9792)

Bug Fixes

• autoscaling: ssmSessionPermissions does not add managed policy to role specified in launch template (#​27220) (20e4760), closes #​25904
• cdk: Resolve cross stack and default parameters for hotswaps (#​27195) (3507141), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/quickref-cloudformation.html#w2ab1c17c23c19b5
• cli: report errors from resource failures in nested stacks (#​27318) (1f639c7)
• custom-resources: IAM policy incorrect for SDKv3 names (#​27313) (c68ea44), closes #​27255 #​27268 #​27270 #​27395
• logs: remove invalid data protection data identifier (#​27388) (4db166d)
• s3: bucket deletion fails if object creation races against cleanup (#​26875) (735b786), closes #​26874
• sns-subscriptions: cannot add SqsSubscription when using an Sqs Construct from a different Constructs library (#​27227) (52eee85), closes #​27225
• stepfunctions: Escaping newline characters in Step Functions intrinsics caused schema validation failures (#​27323) (4e96edd)
• reduce load time of JavaScript library, for real (#​27314) (48acd37)

---

Alpha modules (2.100.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• redshift: the behavior of redshift tables has changed. UPDATE action will not be triggered on new table names and instead be triggered on table id changes.

Bug Fixes

• redshift: UserTablePriviliges to track changes using table IDs (#​26955) (7e4fdc7), closes #​26558

v2.99.1

Compare Source

Bug Fixes

• load time regression (#​27314) (fca5a73)

---

Alpha modules (2.99.1-alpha.0)

v2.99.0

Compare Source

Features

• s3: specify minimum TLS version (#​27297) (f47d09c), closes #​27279
• synthetics: graduate to stable 🚀 (#​27305) (dd00d05)

Bug Fixes

• batch: make instanceType optional on multinode jobs (#​27223) (6616026), closes #​27185

---

Alpha modules (2.99.0-alpha.0)

Features

• apprunner: add HealthCheckConfiguration property in Service (#​27029) (4e8c9c4), closes #​26972

Bug Fixes

• appconfig: allow multiple environment monitor roles to be created (#​27243) (9312c97)

v2.98.0

Compare Source

Features

• update AWS Service Spec (#​27276) (3d9ca8d)
• aws-cdk-lib: reduce load time of JavaScript library (#​27217) (faffce0)

Bug Fixes

• rds: prevent rendering deprecated credentials when creating a database cluster from a snapshot (under feature flag) (#​27174) (1fd22a7), closes #​23815

---

Alpha modules (2.98.0-alpha.0)

Features

• scheduler: disable Schedule on creation (#​27236) (193cd3f)

v2.97.1

Compare Source

Reverts

• "feat(core): Schedule class" (#​27284) (e2fc724), closes aws/aws-cdk#27105 #​27259

---

Alpha modules (2.97.1-alpha.0)

v2.97.0

Compare Source

Features

• update AWS Service Spec (#​27224) (a2a4f68)
• appsync: Standalone L2 construct for SourceApiAssociation (#​27121) (7b9652e), closes #​27025 #​26986
• cloudwatch: add verticalAnnotations property to GraphWidget (#​26819) (d41005e), closes #​7622
• core: Schedule class (#​27105) (a8f0a71), closes #​19197 #​27052 #​27012
• update AWS Service Spec (#​27218) (2855da6)
• cloudwatch: validate Dashboards with an end time must also have a start time (#​27124) (097bd0f), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/aws-cloudwatch/lib/graph.ts#L245-L247
• cloudwatch: Widgets can define start and end times, including relative values (#​26969) (2866240), closes #​26945
• core: add setter for termination protection on stack (#​26992) (54083de), closes #​14463 #​21304
• ec2: support of m7i and m7i-flex ec2-instancetypes (#​27156) (fe0955f), closes /docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-ec2-instance.html#aws-properties-ec2
• ecr: make validateRepositoryName errors human readable (#​27186) (e15d0c0), closes #​26715
• rds: support CA certificate for cluster instances (#​27138) (f5a5a08), closes #​26865
• stepfunctions: add comment ability for when condition (#​27010) (70006ab), closes #​27005
• update AWS Service Spec (#​27163) (0634c68)

Bug Fixes

• apigateway: CORS response body has unexpected space (#​27219) (abf21c9)
• cli: equals sign in a tag value is dropped (#​27130) (b7eeda6), closes #​5773 #​21003
• custom-resources: does not accept strings where numbers are expected, skips recursive types (#​27112) (8e21b2c)
• ec2: restrictDefaultSecurityGroup fails when default rules are not present (#​27039) (1e67f9d), closes #​26390
• eks: use Python 3.10 runtime for kubectl-provider (#​27031) (55859c9), closes #​26994
• rds: cluster.instanceIdentifiers does not container writer instance ID (#​26929) (d3789ab), closes #​25947
• rds: unable to create cluster with per-instance parameters (under feature flag) (#​27040) (1be9894), closes #​27035
• sample-app: exclude all pycache in cdk.json (#​27191) (d9f1f09)

---

Alpha modules (2.97.0-alpha.0)

Features

• cli-lib-alpha: support hotswap deployments (#​26786) (e01faff), closes #​26785

Bug Fixes

• synthetics: synth-time failure for canary assets in nested stages (#​27167) (7a04a5a), closes #​27089 #​26291

v2.96.2

Compare Source

Bug Fixes

• custom-resources: does not accept strings where numbers are expected, skips recursive types (#​27112) (d8dcd75)

---

Alpha modules (2.96.2-alpha.0)

v2.96.1

Compare Source

Reverts

• "chore(ecs): clarify it's possible to use image digest on fromEcrRepository" (#​27143) (049153e), closes aws/aws-cdk#27115

---

Alpha modules (2.96.1-alpha.0)

v2.96.0

Compare Source

Features

• update AWS Service Spec (#​27095) (4942658)
• batch: Stabilize Batch (#​27059) (5fc707a), closes #​27054
• ecs: add Amazon Linux 2023 to EcsOptimizedImage (#​26989) (0bac8a5), closes #​26988

Bug Fixes

• codedeploy: CustomLambdaDeploymentConfig is broken (#​27087) (c53831d)
• codepipeline-actions: update zip to noncorrupted one (#​27120) (eb1d363), closes #​27117
• custom-resources: AwsCustomResource fails when SDKv3 expects Uint8Array (#​27065) (70d9bf7), closes #​27034
• custom-resources: maxwaittime reduced to 60 seconds from 300 seconds (#​27076) (c3a4b7b)
• dynamodb: update CfnGlobalTable in TableV2 constructor to use this instead of scope (#​27075) (889ad8c), closes #​27062
• lambda: update default runtimes and tests to node 18 (#​27066) (04b30f3)
• route53: timeouts due to delete-existing-record-set-handler's wait time (#​27068) (d730f7f), closes #​27060
• triggers: errors are shown as list of bytes (#​27119) (07c6775), closes #​27113

---

Alpha modules (2.96.0-alpha.0)

Features

• glue: add ExternalTable for use with connections (#​24753) (1c03cb3), closes #​24741

Bug Fixes

• integ-tests: use transformToString on API call response body (#​27122) (b0bbd5e), closes 1#L573-L576 #​27114
• synthetics: include auto-delete-underlying-resources in package (#​27096) (5046a9b)

v2.95.1

Compare Source

Bug Fixes

• dynamodb: update CfnGlobalTable in TableV2 constructor to use this instead of scope (#​27075) (afd3890), closes #​27062

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• dynamodb: TableV2 scope change results in resource replacement.

---

Alpha modules (2.95.1-alpha.0)

v2.95.0

Compare Source

Features

• dynamodb: TableV2 supports imports, drift detection, and better control over replicas (#​27023) (e52acd8)
• stepfunctions: properties for ErrorPath, CausePath, MaxDelay, Jitter (#​27051) (dfe29ce)
• update AWS Service Spec (#​26999) (a0458b7)

Bug Fixes

• cli: deployment stops on AccessDenied looking up bootstrap stack (#​26925) (6f3e838), closes #​26588 #​26588
• custom-resources: empty Lambda response payload causes deployment failure (#​27000) (e260d30), closes #​26429
• events-targets: AwsApi fails when SDKv3 Command expects Uint8Array (#​27034) (641f9e8), closes #​27002
• events-targets: AwsApi is still using Node 16 (#​27002) (49e5739), closes #​26998
• firehose: remove unused role during DeliveryStream creation (#​26930) (993ee48), closes #​26927
• lambda-nodejs: incorrect SDK v2 warning generated (#​27014) (856b303), closes #​26966
• logs: log retention custom resource timed out during deploy (#​26995) (a73f256), closes #​24485
• route53: CrossAccountZoneDelegationRecord is still using Node 16 (#​26980) (d69c51a), closes #​26212 #​26593 #​26976

---

Alpha modules (2.95.0-alpha.0)

Bug Fixes

• integ-tests: Uint8Arrays are not decoded properly (#​27009) (47ab5c8)

v2.94.0

Compare Source

Features

• apigateway: L2 construct for Sagemaker Integration (#​25459) (53d61bb)
• appsync: merged APIs (#​26895) (fe930a5), closes #​25960
• cloudfront: Add RealtimeLogConfig to Distribution (#​26808) (b1f4e27)
• ec2: add c7gn instance type (#​26905) (8cc9ecb), closes #​23147
• ec2: contributor insight rules for vpc endpoint service (#​25965) (c6a96f0)
• lambda: L2 constructs for SnapStart (#​26761) (356f302), closes #​23153 /github.com/aws/aws-cdk/issues/23153#issuecomment-1407779812
• rds: add support for postgresql 11.21, 12.16, 13.12, 14.9, 15.4 and deprecate versions out-of-support (#​26906) (4b0c378)
• rds: support certificate autority certificate (#​26883) (4fd510e), closes #​26865
• s3-deployment: specify lambda execution role in DeployTimeSubstitutedFile (#​26896) (6c2143c), closes #​26879
• stepfunctions-tasks: algorithmName validation for SageMakerCreateTrainingJob (#​26877) (1cead3b), closes #​26675
• update AWS Service Spec (#​26911) (d345335)
• stepfunctions-tasks: FastFile mode for SageMaker Training Job (#​26675) (5fef403), closes /github.com/aws/aws-cdk/blob/v2.90.0/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/sagemaker/base-types.ts#L458 #​26653

Bug Fixes

• aws-cdk-lib: ADOT Lambda Layer constants update - v0.32.0 (#​26801) (ad9d764), closes #​26793
• cli: asset not uploaded with different synthesizer configs (#​26910) (b06a38f), closes #​25927
• cli: ecs hotswap fails on log configuration enabled (#​26876) (6cffca0), closes #​26871
• core: add RetainExceptOnCreate to ParseDeletionPolicy method (#​26880) (702d9d5), closes /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/helpers-internal/cfn-parse.ts#L468 #​26863
• core: support cache-from and cache-to flags in DockerImage (#​26337) (d152d61), closes #​24024 #​24024 #​25925
• core: undeprecate addWarning (#​26943) (4ce64fe), closes #​26914
• custom-resources: cross-environment call fails in opt-in region (#​26917) (3701aa7), closes #​26562
• ec2: networkAclName property for NetworkAcl does not work (#​26898) (7f31da8), closes #​26371 #​26897
• elasticloadbalancingv2: remove equality check for health threshold counts (#​26949) (c8b8f1c), closes #​26941
• lambda: GO_1_X runtime will be EOL soon, deprecate in favor of PROVIDED_AL2 runtime (#​26899) (37c59a4)
• lambda: NodeJS14 runtime will be EOL soon, deprecate in favor of newer runtimes (#​26903) (31ff125)
• lambda: PROVIDED runtime will be EOL soon, deprecate in favor of PROVIDED_AL2 (#​26904) (fded078)
• lambda: update default runtimes and tests to node 16 everywhere (#​26921) (bdce16c)
• logs: LogRetention resources fail with rate exceeded errors (#​26858) (b60e6ef), closes #​26837 #​26837
• route53: IHostedZone cannot be used for ses.Identity.publicHostedZone anymore (#​26888) (b5bd39e), closes #​26872
• secrets-manager: SecretRotationApplication creates lambda on python 3.7 which is EOL (#​26884) (2d9d8d6), closes #​26866
• servicecatalog: only one ProductStack per Portfolio can use assets (#​26885) (9cb395c), closes #​25189
• sqs: encryptionType is incorrect when encryptionMasterKey is provided (#​26886) (bf441fa), closes #​26719

---

Alpha modules (2.94.0-alpha.0)

Features

• amplify: enables apps hosted with server side rendering (#​26861) (c67da83), closes #​24076 #​23325
• scheduler: base target methods and lambda invoke target (#​26575) (39cbd46)
• synthetics-alpha: add latest two NodeJS runtimes (#​26967) (0a0b37c)

v2.93.0

Compare Source

Features

• apigateway: set RestApi CloudWatchRole and Account retention policy (#​26836) (7af20ba), closes #​26827
• aws-cdk-lib: ADOT Lambda Layer v0.32.0 (#​26793) (89393a2)
• core: acknowledge warnings (#​26144) (dd912da)
• core: support bundling for single non-archive file (#​26106) (0aee083)
• ecs: container port ranges in port mappings (#​26692) (4997bca), closes #​23509
• efs: add grantRead and grantReadWrite, grantRootAccess to FileSystem (#​25486) (9c12199)
• opensearchservice: configuring gp3 throughput (#​26172) ([47df704](https://togithub.com/aws/aws-cdk/commit/47df704b

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[github-actions]

🎉 This PR is included in version 3.3.1 🎉

The release is available on:

• npm package (@latest dist-tag)
• GitHub release

Your semantic-release bot 📦🚀