Skip to content

feat(deps): upgrade aws-cdk-lib - #1840

Merged
aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk
Aug 17, 2026
Merged

feat(deps): upgrade aws-cdk-lib#1840
aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk

Conversation

@aws-cdk-automation

Copy link
Copy Markdown
Collaborator

Upgrades project dependencies. See details in workflow run.


Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow

Upgrades project dependencies. See details in [workflow run].

[Workflow Run]: https://github.com/aws/aws-cdk-cli/actions/runs/31981448711

------

*Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow*

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@aws-cdk-automation
aws-cdk-automation requested a review from a team August 17, 2026 00:16
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/aws-cdk-lib 2.265.0 🟢 5.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
SAST🟢 9SAST tool detected but not run on all commits
Binary-Artifacts⚠️ 0binaries present in source code
Fuzzing🟢 10project is fuzzed
npm/@aws-cdk/asset-awscli-v1 2.2.292 UnknownUnknown
npm/aws-cdk-lib 2.265.0 🟢 5.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Packaging⚠️ -1packaging workflow not detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Security-Policy🟢 10security policy file detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
SAST🟢 9SAST tool detected but not run on all commits
Binary-Artifacts⚠️ 0binaries present in source code
Fuzzing🟢 10project is fuzzed

Scanned Files

  • packages/aws-cdk/package.json
  • yarn.lock

@codecov-commenter

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 90.27%. Comparing base (750d650) to head (0dd7ba8).

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #1840      +/-   ##
==========================================
- Coverage   90.32%   90.27%   -0.05%     
==========================================
  Files          80       80              
  Lines       12124    12124              
  Branches     1716     1714       -2     
==========================================
- Hits        10951    10945       -6     
- Misses       1139     1145       +6     
  Partials       34       34              
Flag Coverage Δ
suite.unit 90.27% <ø> (-0.05%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@aws-cdk-automation
aws-cdk-automation added this pull request to the merge queue Aug 17, 2026
Merged via the queue into main with commit 0b2e50a Aug 17, 2026
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants