chore(deps): bump the minor-and-patch group with 20 updates by dependabot[bot] · Pull Request #300 · aws-samples/serverless-full-stack-webapp-starter-kit

dependabot · 2026-09-18T09:52:07Z

Bumps the minor-and-patch group with 20 updates:

Package	From	To
oxfmt	`0.67.0`	`0.68.0`
oxlint	`1.82.0`	`1.83.0`
@aws-sdk/client-translate	`3.1127.0`	`3.1132.0`
@types/node	`26.5.0`	`26.5.1`
zod	`4.5.4`	`4.6.5`
@aws-sdk/client-cognito-identity-provider	`3.1127.0`	`3.1132.0`
@cdklabs/deploy-time-build	`0.1.7`	`0.1.10`
aws-cdk-lib	`2.268.0`	`2.269.0`
aws-cdk	`2.1140.0`	`2.1141.0`
@aws-sdk/client-lambda	`3.1127.0`	`3.1132.0`
@aws-sdk/client-ssm	`3.1127.0`	`3.1132.0`
next	`16.3.4`	`16.3.5`
react	`19.2.8`	`19.3.0`
@types/react	`19.2.18`	`19.3.0`
react-dom	`19.2.8`	`19.3.0`
@types/react-dom	`19.2.7`	`19.3.0`
react-hook-form	`7.87.0`	`7.88.0`
tailwind-merge	`3.6.0`	`3.7.0`
@aws-sdk/client-dsql	`3.1127.0`	`3.1132.0`
@aws-sdk/credential-provider-node	`3.972.82`	`3.972.83`

Updates oxfmt from 0.67.0 to 0.68.0

Changelog

Sourced from oxfmt's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
See full diff in compare view

Updates oxlint from 1.82.0 to 1.83.0

Release notes

Sourced from oxlint's releases.

oxlint v1.83.0 & oxfmt v0.68.0

Table of Contents

Oxlint v1.83.0

Oxfmt v0.68.0

Oxlint v1.83.0

🚀 Features

afe950d linter/react: Update lint rules to accomodate changes in React 19.3 (#26571) (Connor Shea)

🐛 Bug Fixes

fb87ed7 linter/unicorn/prefer-array-flat-map: Report .filter().flatMap() chains (#26626) (camc314)

336b654 linter/unicorn/prefer-at: Report single-character substring calls (#26623) (camc314)

a5bba6d linter/eslint/no-unused-vars: Respect rest params after-used option (#26579) (Bartok)

c1470a2 linter/eslint/no-unused-vars: Preserve ambient implicit exports (#26582) (Dex Hunter)

9a469d2 linter/unicorn/prefer-global-this: Preserve window event method references (#26611) (Dex Hunter)

aaff758 linter/unicorn/prefer-default-parameters: Report violation for ??= and ||= (#26607) (Bartok)

2bed25a linter/unicorn/prefer-array-flat: Skip plain concat normalization (#26604) (im10furry)

72bc7f2 oxlint: Replace backlashes path for "no js runtime" diagnostic (#26599) (Sysix)

1aa5ec1 linter/typescript/prefer-for-of: Handle computed collections (#26584) (camc314)

1e90019 linter/typescript: Mark no-unnecessary-type-parameters and prefer-find suggestions as implemented (#26586) (Mikhail Baev)

4231536 linter: Compare label text in runtime optimization assertion (#26526) (camc314)

36d5534 linter: Include file path in diagnostic assertion (#26525) (camc314)

31508b1 parser: Reject return types on constructor overloads (#26523) (camc314)

⚡ Performance

1d681b0 linter/react/jsx-pascal-case: Avoid temporary name segment vector (#26531) (camc314)

2ad7d49 linter/promise/catch-or-return: Avoid temporary formatting vectors (#26505) (camc314)

203235b linter/jsx-a11y/no-static-element-interactions: Avoid role vector (#26504) (camc314)

2e95167 linter/jsx-a11y/anchor-is-valid: Avoid temporary attribute vector (#26501) (camc314)

deafdba linter/react/exhaustive-deps: Avoid temporary dependency vector (#26502) (camc314)

4f1627f linter/oxc/branches-sharing-code: Compute deletion spans lazily (#26500) (camc314)

c068fd2 linter/react/jsx-curly-brace-presence: Avoid newline position allocation (#26499) (camc314)

ed4357c linter/eslint/no-restricted-properties: Skip empty configurations (#26497) (camc314)

92e41b7 linter/oxc/no-barrel-file: Iterate module requests directly (#26498) (camc314)

5255ee3 linter/unicorn/prefer-single-call: Avoid temporary argument vector (#26494) (camc314)

96ef365 linter/unicorn/prefer-includes: Reduce suggestion allocations (#26492) (camc314)

a71fd7f linter/unicorn/no-new-buffer: Avoid temporary argument vector (#26491) (camc314)

11085e7 linter/jsdoc/require-yields: Short-circuit JSDoc checks (#26488) (camc314)

9b1aff8 linter/unicorn/no-useless-undefined: Skip calls without trailing undefined (#26481) (camc314)

1e5d5d7 linter/eslint/no-unused-vars: Skip absent global declaration checks (#26457) (camc314)

403f899 linter/eslint/no-undef: Check globals once per unresolved name (#26456) (camc314)

118adb0 linter/eslint/no-restricted-imports: Avoid redundant import scans (#26455) (camc314)

ab848f2 linter/eslint/no-useless-assignment: Skip tracking exported symbols (#26449) (camc314)

1b6e409 linter/unicorn/prefer-object-from-entries: Avoid allocating configured paths (#26448) (camc314)

2206875 linter/eslint/new-cap: Avoid unnecessary callee name allocations (#26447) (camc314)

... (truncated)

Changelog

Sourced from oxlint's changelog.

Changelog

All notable changes to this package will be documented in this file.

The format is based on Keep a Changelog.

Commits

7bf68f7 release(apps): oxlint v1.83.0 && oxfmt v0.68.0 (#26631)
See full diff in compare view

Updates @aws-sdk/client-translate from 3.1127.0 to 3.1132.0

Release notes

Sourced from @aws-sdk/client-translate's releases.

v3.1132.0

3.1132.0(2026-09-14)

New Features

clients: update client endpoints as of 2026-09-14 (8ab948b9)

client-codedeploy: AWS CodeDeploy now returns the deployment mode on GetDeployment and BatchGetDeployments. The new deploymentMode field on DeploymentInfo indicates whether a deployment used the standard deployment process or restarted the application using a previously installed revision (RESTART mode). (05f1a7a2)

client-sts: Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated. (906e0db8)

client-imagebuilder: This release adds a dryRun option to Image Builder create APIs (except CreateImage), structured failure context on failed images including component and distribution failure details, and step retry attempt tracking. (7ee2144d)

client-glue: Amazon Glue releasing the new API ListIntegrationTableProperties and adding IntegrationArn to TargetTableConfig (ab0dc23e)

client-billing: Increased the maximum number of services returned in the supportEligibleSpendByService field of ListEnterpriseSupportLinkedAccountCharges (eb2a3871)

client-billingconductor: This release adds support for custom volume tiering. You can now define custom tiers on a pricing rule's tiering configuration, where each tier specifies a usage range and the rate applied to usage in that range. (7d5844d5)

Tests

client-cloudwatch: update error tests for ValidationException (#8304) (51802645)

For list of updated packages, view updated-packages.md in assets-3.1132.0.zip

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

client-s3: Updated S3 Object Lock Default Retention documentation. (996d6642)

New Features

clients: update client endpoints as of 2026-09-11 (036bf165)

client-lightsail: Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options. (24e18ac6)

client-batch: Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields. (036dd996)

client-ecs: This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service. (62bd9bf2)

client-mediaconvert: Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs. (32973df6)

client-invoicing: Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval. (2cf8ccd9)

For list of updated packages, view updated-packages.md in assets-3.1131.0.zip

v3.1130.0

3.1130.0(2026-09-10)

New Features

clients: update client endpoints as of 2026-09-10 (96951f65)

client-outposts: Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources. (d6ec7dce)

... (truncated)

Changelog

Sourced from @aws-sdk/client-translate's changelog.

3.1132.0 (2026-09-14)

Note: Version bump only for package @aws-sdk/client-translate

3.1131.0 (2026-09-11)

Note: Version bump only for package @aws-sdk/client-translate

3.1130.0 (2026-09-10)

Note: Version bump only for package @aws-sdk/client-translate

3.1129.0 (2026-09-09)

Note: Version bump only for package @aws-sdk/client-translate

3.1128.0 (2026-09-08)

Note: Version bump only for package @aws-sdk/client-translate

Commits

99b4bd0 Publish v3.1132.0
33f2cc7 Publish v3.1131.0
cd49ceb Publish v3.1130.0
cece980 Publish v3.1129.0
523fff6 Publish v3.1128.0
See full diff in compare view

Updates @types/node from 26.5.0 to 26.5.1

Commits

See full diff in compare view

Updates zod from 4.5.4 to 4.6.5

Release notes

Sourced from zod's releases.

v4.6.5

Commits:

d2b135cfb7a3582b9eb515756b9166bcb9521f4a docs: add the 4.6.x patch highlights to the 4.6 post

f1448f7cee00df9fe1e9ad84a000aa1828cc8bc1 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections

de65a5cb39ed22a507fac935788f718fa88d104f docs: lead the properties section with the check and add a Zod Mini tab (#6598)

56222cd1532c07bcb91b67df529cab4c0a215330 feat(instanceof): key the .properties() shape off the instance type (#6600)

ca0229a404818290e6cdcfefcd7eb2d04bcbb543 Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)"

cc4cd4ee9c52fcaa10964e48cc144541e41a5ed9 Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)""

0f3f5ee3ca56c7574bf849e54f79e9a6e02562ee 4.6.5

59bbc03e10c636b9eb3c393dfeb552819774ec21 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump

v4.6.4

A patch on top of 4.6.3.

d6bc1e30 feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed weekly by CI (#6595)

ad32d751 perf: z.url() rejects an invalid URL with URL.canParse() instead of a throwing constructor, about 50x faster; fewer allocations on the validation path (#6588)

2bb08717 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump

f6e1701a chore(deps): bump next to 15.5.25 and vite to 7.3.6 (#6153)

v4.6.3

A patch on top of 4.6.2.

413cce9a fix(v4): make z.properties() a check again (#6594) — removes the standalone z.properties() schema from 4.6.0; z.instanceof().properties() and .check(...z.properties()) are unchanged

75d63ee1 docs: show only the .properties() method form in the 4.6 post

46da9572 docs: match the error-message examples to what the parsers emit

v4.6.2

A patch on top of 4.6.1.

9446b5cc fix: preserve undefined prefault outputs and object keys (#6587) — closes #6585

0c483c58 docs: the Zod 4.6 announcement post (#6546)

a00c3f34 docs: use Trigger.dev's brand-kit lockups for the platinum card

v4.6.1

A patch on top of 4.6.0.

b12aa523 fix: preserve unique tags with defaulted discriminators (#6582) — closes #6577

dd9c36fa fix(v4): defer recursive object index inference (#6580)

3b154992 feat(lang): add Tajik (tg) locale (#6581) by @ismoil77

2efa8b80 ci: give the npm wait a real budget and drop the back-publish path (#6583)

v4.6.0

Zod 4.6 is now available.
npm install zod@latest
At a glance:

... (truncated)

Commits

59bbc03 chore: re-pin the integration peers to the workspace zod after the 4.6.5 bump
0f3f5ee 4.6.5
cc4cd4e Revert "Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, ref...
ca0229a Revert "feat: add z.currencyCode() over a vendored ISO 4217 list, refreshed w...
56222cd feat(instanceof): key the .properties() shape off the instance type (#6600)
de65a5c docs: lead the properties section with the check and add a Zod Mini tab (#6598)
f1448f7 docs: fold the 4.6.x patch highlights into the 4.6 post's own sections
d2b135c docs: add the 4.6.x patch highlights to the 4.6 post
2bb0871 chore: re-pin the integration peers to the workspace zod after the 4.6.4 bump
743aedb 4.6.4
Additional commits viewable in compare view

Updates @aws-sdk/client-cognito-identity-provider from 3.1127.0 to 3.1132.0

Release notes

Sourced from @aws-sdk/client-cognito-identity-provider's releases.

v3.1132.0

3.1132.0(2026-09-14)

New Features

clients: update client endpoints as of 2026-09-14 (8ab948b9)

client-codedeploy: AWS CodeDeploy now returns the deployment mode on GetDeployment and BatchGetDeployments. The new deploymentMode field on DeploymentInfo indicates whether a deployment used the standard deployment process or restarted the application using a previously installed revision (RESTART mode). (05f1a7a2)

client-sts: Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated. (906e0db8)

client-imagebuilder: This release adds a dryRun option to Image Builder create APIs (except CreateImage), structured failure context on failed images including component and distribution failure details, and step retry attempt tracking. (7ee2144d)

client-glue: Amazon Glue releasing the new API ListIntegrationTableProperties and adding IntegrationArn to TargetTableConfig (ab0dc23e)

client-billing: Increased the maximum number of services returned in the supportEligibleSpendByService field of ListEnterpriseSupportLinkedAccountCharges (eb2a3871)

client-billingconductor: This release adds support for custom volume tiering. You can now define custom tiers on a pricing rule's tiering configuration, where each tier specifies a usage range and the rate applied to usage in that range. (7d5844d5)

Tests

client-cloudwatch: update error tests for ValidationException (#8304) (51802645)

For list of updated packages, view updated-packages.md in assets-3.1132.0.zip

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

client-s3: Updated S3 Object Lock Default Retention documentation. (996d6642)

New Features

clients: update client endpoints as of 2026-09-11 (036bf165)

client-lightsail: Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options. (24e18ac6)

client-batch: Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields. (036dd996)

client-ecs: This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service. (62bd9bf2)

client-mediaconvert: Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs. (32973df6)

client-invoicing: Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval. (2cf8ccd9)

For list of updated packages, view updated-packages.md in assets-3.1131.0.zip

v3.1130.0

3.1130.0(2026-09-10)

New Features

clients: update client endpoints as of 2026-09-10 (96951f65)

client-outposts: Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources. (d6ec7dce)

... (truncated)

Changelog

Sourced from @aws-sdk/client-cognito-identity-provider's changelog.

3.1132.0 (2026-09-14)

Note: Version bump only for package @aws-sdk/client-cognito-identity-provider

3.1131.0 (2026-09-11)

Note: Version bump only for package @aws-sdk/client-cognito-identity-provider

3.1130.0 (2026-09-10)

Note: Version bump only for package @aws-sdk/client-cognito-identity-provider

3.1129.0 (2026-09-09)

Note: Version bump only for package @aws-sdk/client-cognito-identity-provider

3.1128.0 (2026-09-08)

Note: Version bump only for package @aws-sdk/client-cognito-identity-provider

Commits

99b4bd0 Publish v3.1132.0
33f2cc7 Publish v3.1131.0
cd49ceb Publish v3.1130.0
cece980 Publish v3.1129.0
523fff6 Publish v3.1128.0
See full diff in compare view

Updates @cdklabs/deploy-time-build from 0.1.7 to 0.1.10

Release notes

Sourced from @cdklabs/deploy-time-build's releases.

v0.1.10

0.1.10 (2026-09-11)

v0.1.9

0.1.9 (2026-09-11)

v0.1.8

0.1.8 (2026-09-11)

Commits

0f994f8 chore(deps): bump the npm_and_yarn group across 4 directories with 4 updates ...
d47a9ec chore(deps): upgrade cdklabs-projen-project-types (#87)
f4c98c2 chore(deps): upgrade typescript to ~5.9.0 (#88)
See full diff in compare view

Updates aws-cdk-lib from 2.268.0 to 2.269.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.269.0

Features

bedrockagentcore: graduate Policy submodule to stable (#38687) (2b95e32), closes #37219

update L1 CloudFormation resource definitions (#38784) (1b5e2e0)

logs: support DELIVERY log group class (#38703) (b7a057a), closes #34338

s3-deployment: expose deployed object version IDs (#38766) (09342df), closes #38765

Bug Fixes

awslint: use a default import for chalk (#38110) (36d14e0), closes #38109 #38058

core: cdk-nag warnings cannot be suppressed (#38787) (211029f)

core: cdk-nag's findings duplicated in multi-environment apps (#38707) (4b7b2e7), closes #38483 #38135

core: tree.json generation is quadratic in the number of subtrees (#38761) (3d034b6), closes #38762

core: unnecessary warnings around builtins and AZs (#38673) (6860777)

core: upgrade CloudFormation validation to latest version (#38804) (d703eb6)

dynamodb: TableV2 emits internal grants deprecation warnings (#38806) (57b3043), closes #38709 #38399 #37892

ecs: allow ephemeralStorageGiB for Windows Fargate platform version 1.0.0 (#37589) (855dfeb), closes #37510

ecs: removing the last target group from a service is not deployed (#38776) (73100f6), closes #35446 #35446 #35452

lambda-go: escape generated go build path arguments (#38785) (279d101)

s3-deployment: sanitize all log outputs to mitigate CWE-117/93 (#37670) (47a3a38), closes #37671 #30746 #28469 #30211

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES

glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through defaultArguments now throws a ValidationError at synthesis time:

construct-managed arguments — --enable-continuous-cloudwatch-log, --continuous-log-logGroup, --continuous-log-logStreamPrefix, --continuous-log-conversionPattern, --enable-continuous-log-filter, --enable-metrics, --enable-observability-metrics, --enable-spark-ui, --spark-event-logs-path, --job-language, --class, --extra-jars, --user-jars-first, --extra-py-files, --extra-files, library-set

Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. enableMetrics: false) cannot be re-enabled through defaultArguments. Configure these through their dedicated props instead (continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI, className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' } with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g. --enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

glue-alpha: Glue job constructs now reject construct-managed and Glue-reserved arguments passed through defaultArguments. Previously, a managed argument set via defaultArguments was silently honored in SparkJob and PythonShellJob (customer value won over the construct default) and silently ignored in RayJob (construct default won). Both behaviors let a caller bypass the construct's security and observability defaults with no error. Passing any of the following through defaultArguments now throws a ValidationError at synthesis time:

construct-managed arguments — --enable-continuous-cloudwatch-log, --continuous-log-logGroup, --continuous-log-logStreamPrefix, --continuous-log-conversionPattern, --enable-continuous-log-filter, --enable-metrics, --enable-observability-metrics, --enable-spark-ui, --spark-event-logs-path, --job-language, --class, --extra-jars, --user-jars-first, --extra-py-files, --extra-files, library-set

Glue-reserved arguments — --debug, --mode, --JOB_NAME, --endpoint

A managed argument is rejected whether or not the current configuration emits it, so a disabled feature (e.g. enableMetrics: false) cannot be re-enabled through defaultArguments. Configure these through their dedicated props instead (continuousLogging, enableMetrics, enableObservabilityMetrics, sparkUI, className, extraJars, extraJarsFirst, extraPythonFiles, extraFiles). For example, replace defaultArguments: { '--enable-continuous-cloudwatch-log': 'false' } with continuousLogging: { enabled: false }. Arguments without a dedicated prop (e.g. --enable-glue-datacatalog) are unaffected and remain settable via defaultArguments.

The checkNoReservedArgs(defaultArguments?) method on the Job base class was removed. It is replaced by two protected members: setManagedArgument(key, value?), which each job class calls to declare (and, when a value is present, emit) a managed argument, and mergeDefaultArguments(defaultArguments?), which validates the caller-supplied defaultArguments against the accumulated reserved set and returns the merged map.

route53resolver-alpha: FirewallRuleGroupAssociation now honors the previously-ignored mutationProtection and name props. Stacks that set mutationProtection: true will enable mutation protection on redeploy (which blocks further CloudFormation update/delete until it is set back to false); stacks that set name will write it to the template, which may replace the association.

glue-alpha: trigger Action and Condition are no longer plain objects — use Action.job(...) / Action.crawler(...) and Condition.job(...) / Condition.crawler(...). Jobs are referenced via IJobRef and crawlers via ICrawlerRef (a CfnCrawler instance or CfnCrawler.fromCrawlerName(...)) instead of a CfnCrawler field or crawler-name string; IJob now extends the generated IJobRef. addDailyScheduledTrigger/addWeeklyScheduledTrigger/addCustomScheduledTrigger are replaced by addScheduledTrigger(id, { schedule, ... }) (use TriggerSchedule.daily()/weekly()/cron(...)). addNotifyEventTrigger is renamed addEventTrigger (NotifyEventTriggerOptions → EventTriggerOptions). All addXxxTrigger methods now return ITriggerRef instead of CfnTrigger.

glue-alpha: PartitionProjectionConfiguration's variant fields (integerRange, dateRange, interval, digits, format, intervalUnit, values) are no longer public; DATE projection now takes step: { interval, intervalUnit } instead of top-level interval/intervalUnit.

glue-alpha: ConnectionOptions no longer has subnet, vpc, or vpcSubnets; use network: ConnectionNetwork.subnet(...) or network: ConnectionNetwork.vpc(...) instead.

Features

glue-alpha: ensure job parameters consistency (#38480) (bc7dc0c)

glue-alpha: model Connection VPC placement as a value object (#38729) (f72e9fe)

glue-alpha: model partition projection variants as internal state (#38726) (16527cd)

glue-alpha: overhaul the workflow trigger API (#38579) (c8f917d)

... (truncated)

Commits

5df21f1 chore: update analytics metadata blueprints
61bba72 chore(release): 2.269.0
2b95e32 feat(bedrockagentcore): graduate Policy submodule to stable (#38687)
57b3043 fix(dynamodb): TableV2 emits internal grants deprecation warnings (#38806)
d703eb6 fix(core): upgrade CloudFormation validation to latest version (#38804)
1b5e2e0 feat: update L1 CloudFormation resource definitions (#38784)
855dfeb fix(ecs): allow ephemeralStorageGiB for Windows Fargate platform version 1.0....
1083ba5 docs(stepfunctions-tasks): clarify that fromStringSet only accepts static arr...
73100f6 fix(ecs): removing the last target group from a service is not deployed (#38776)
0749210 chore(bedrock-alpha): add OpenAI foundation models (#38760)
Additional commits viewable in compare view

Updates aws-cdk from 2.1140.0 to 2.1141.0

Release notes

Sourced from aws-cdk's releases.

aws-cdk@v2.1141.0

2.1141.0 (2026-09-09)

Features

cli: cdk synth --watch re-synthesizes on file changes (#1851) (ef24968), closes #1782

deps: upgrade aws-cdk-lib (#1943) (af2f9a3)

exclude stacks from the selection with ! patterns (#1920) (021a083), closes #1908 #758 #1909

Commits

ef24968 feat(cli): cdk synth --watch re-synthesizes on file changes (#1851)
021a083 feat: exclude stacks from the selection with ! patterns (#1920)
d4cb6e9 chore(cli): publish toolkit versions to docs (#1944)
bebc0f2 chore(deps): upgrade dependencies (#1948)
af2f9a3 feat(deps): upgrade aws-cdk-lib (#1943)
See full diff in compare view

Updates @aws-sdk/client-lambda from 3.1127.0 to 3.1132.0

Release notes

Sourced from @aws-sdk/client-lambda's releases.

v3.1132.0

3.1132.0(2026-09-14)

New Features

clients: update client endpoints as of 2026-09-14 (8ab948b9)

client-codedeploy: AWS CodeDeploy now returns the deployment mode on GetDeployment and BatchGetDeployments. The new deploymentMode field on DeploymentInfo indicates whether a deployment used the standard deployment process or restarted the application using a previously installed revision (RESTART mode). (05f1a7a2)

client-sts: Increases the maximum session token size to 4,096 bytes and removes the packed policy size limit. Adds SessionTokenSize and SessionTokenUtilization fields and a new MinimumSessionTokenSize parameter. PackedPolicySize is deprecated. (906e0db8)

client-imagebuilder: This release adds a dryRun option to Image Builder create APIs (except CreateImage), structured failure context on failed images including component and distribution failure details, and step retry attempt tracking. (7ee2144d)

client-glue: Amazon Glue releasing the new API ListIntegrationTableProperties and adding IntegrationArn to TargetTableConfig (ab0dc23e)

client-billing: Increased the maximum number of services returned in the supportEligibleSpendByService field of ListEnterpriseSupportLinkedAccountCharges (eb2a3871)

client-billingconductor: This release adds support for custom volume tiering. You can now define custom tiers on a pricing rule's tiering configuration, where each tier specifies a usage range and the rate applied to usage in that range. (7d5844d5)

Tests

client-cloudwatch: update error tests for ValidationException (#8304) (51802645)

For list of updated packages, view updated-packages.md in assets-3.1132.0.zip

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

client-s3: Updated S3 Object Lock Default Retention documentation. (996d6642)

New Features

clients: update client endpoints as of 2026-09-11 (036bf165)

client-lightsail: Amazon Lightsail now lets you serve website content from a private Lightsail bucket through a Lightsail distribution. This release adds enablePrivateOriginAccess to the CreateDistribution and UpdateDistribution actions, plus new defaultRootObject and customErrorResponses options. (24e18ac6)

client-batch: Added new bulk job APIs (CancelJobs, TerminateJobs, TerminateServiceJobs) and new fields on ListJobs and ListServiceJobs responses. This allows customers to cancel or terminate multiple jobs in a single request. ListJobs and ListServiceJobs responses now include isCancelled and isTerminated fields. (036dd996)

client-ecs: This feature adds support for setting the cpu architecture type that should be used to launch tasks for an Express Gateway Service. (62bd9bf2)

client-mediaconvert: Adds Dolby Vision metadata to Probe results, including profile, level, and presence of the RPU, base layer, and enhancement layer. Adds video sample and display aspect ratios. Adds the UnprocessableEntityException (HTTP 422) error to Probe for recognized but malformed or corrupt inputs. (32973df6)

client-invoicing: Add ListProcurementPortals and ListProcurementPortalSuppliers APIs to retrieve AWS-supported 3rd party procurement portals and their suppliers for e-invoice delivery and purchase order retrieval. (2cf8ccd9)

For list of updated packages, view updated-packages.md in assets-3.1131.0.zip

v3.1130.0

3.1130.0(2026-09-10)

New Features

clients: update client endpoints as of 2026-09-10 (96951f65)

client-outposts: Added fields to identify Outpost generation and rack scaling configuration on Outpost and CatalogItem resources. (d6ec7dce)

... (truncated)

Changelog

Sourced from @aws-sdk/client-lambda's changelog.

3.1132.0 (2026-09-14)

Note: Version bump only for package @aws-sdk/client-lambda

3.1131.0 (2026-09-11)

Note: Version bump only for package @aws-sdk/client-lambda

3.1130.0 (2026-09-10)

Description has been truncated

Bumps the minor-and-patch group with 20 updates: | Package | From | To | | --- | --- | --- | | [oxfmt](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxfmt) | `0.67.0` | `0.68.0` | | [oxlint](https://github.com/oxc-project/oxc/tree/HEAD/npm/oxlint) | `1.82.0` | `1.83.0` | | [@aws-sdk/client-translate](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-translate) | `3.1127.0` | `3.1132.0` | | [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) | `26.5.0` | `26.5.1` | | [zod](https://github.com/colinhacks/zod) | `4.5.4` | `4.6.5` | | [@aws-sdk/client-cognito-identity-provider](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-cognito-identity-provider) | `3.1127.0` | `3.1132.0` | | [@cdklabs/deploy-time-build](https://github.com/cdklabs/deploy-time-build) | `0.1.7` | `0.1.10` | | [aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib) | `2.268.0` | `2.269.0` | | [aws-cdk](https://github.com/aws/aws-cdk-cli/tree/HEAD/packages/aws-cdk) | `2.1140.0` | `2.1141.0` | | [@aws-sdk/client-lambda](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-lambda) | `3.1127.0` | `3.1132.0` | | [@aws-sdk/client-ssm](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-ssm) | `3.1127.0` | `3.1132.0` | | [next](https://github.com/vercel/next.js) | `16.3.4` | `16.3.5` | | [react](https://github.com/react/react/tree/HEAD/packages/react) | `19.2.8` | `19.3.0` | | [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) | `19.2.18` | `19.3.0` | | [react-dom](https://github.com/react/react/tree/HEAD/packages/react-dom) | `19.2.8` | `19.3.0` | | [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) | `19.2.7` | `19.3.0` | | [react-hook-form](https://github.com/react-hook-form/react-hook-form) | `7.87.0` | `7.88.0` | | [tailwind-merge](https://github.com/dcastil/tailwind-merge/tree/HEAD/packages/tailwind-merge) | `3.6.0` | `3.7.0` | | [@aws-sdk/client-dsql](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/clients/client-dsql) | `3.1127.0` | `3.1132.0` | | [@aws-sdk/credential-provider-node](https://github.com/aws/aws-sdk-js-v3/tree/HEAD/packages-internal/credential-provider-node) | `3.972.82` | `3.972.83` | Updates `oxfmt` from 0.67.0 to 0.68.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxfmt/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxfmt_v0.68.0/npm/oxfmt) Updates `oxlint` from 1.82.0 to 1.83.0 - [Release notes](https://github.com/oxc-project/oxc/releases) - [Changelog](https://github.com/oxc-project/oxc/blob/main/npm/oxlint/CHANGELOG.md) - [Commits](https://github.com/oxc-project/oxc/commits/oxlint_v1.83.0/npm/oxlint) Updates `@aws-sdk/client-translate` from 3.1127.0 to 3.1132.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-translate/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1132.0/clients/client-translate) Updates `@types/node` from 26.5.0 to 26.5.1 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) Updates `zod` from 4.5.4 to 4.6.5 - [Release notes](https://github.com/colinhacks/zod/releases) - [Commits](colinhacks/zod@v4.5.4...v4.6.5) Updates `@aws-sdk/client-cognito-identity-provider` from 3.1127.0 to 3.1132.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-cognito-identity-provider/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1132.0/clients/client-cognito-identity-provider) Updates `@cdklabs/deploy-time-build` from 0.1.7 to 0.1.10 - [Release notes](https://github.com/cdklabs/deploy-time-build/releases) - [Commits](cdklabs/deploy-time-build@v0.1.7...v0.1.10) Updates `aws-cdk-lib` from 2.268.0 to 2.269.0 - [Release notes](https://github.com/aws/aws-cdk/releases) - [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md) - [Commits](https://github.com/aws/aws-cdk/commits/v2.269.0/packages/aws-cdk-lib) Updates `aws-cdk` from 2.1140.0 to 2.1141.0 - [Release notes](https://github.com/aws/aws-cdk-cli/releases) - [Commits](https://github.com/aws/aws-cdk-cli/commits/aws-cdk@v2.1141.0/packages/aws-cdk) Updates `@aws-sdk/client-lambda` from 3.1127.0 to 3.1132.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-lambda/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1132.0/clients/client-lambda) Updates `@aws-sdk/client-ssm` from 3.1127.0 to 3.1132.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-ssm/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1132.0/clients/client-ssm) Updates `next` from 16.3.4 to 16.3.5 - [Release notes](https://github.com/vercel/next.js/releases) - [Commits](vercel/next.js@v16.3.4...v16.3.5) Updates `react` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `react-dom` from 19.2.8 to 19.3.0 - [Release notes](https://github.com/react/react/releases) - [Changelog](https://github.com/react/react/blob/main/CHANGELOG.md) - [Commits](https://github.com/react/react/commits/v19.3.0/packages/react-dom) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `react-hook-form` from 7.87.0 to 7.88.0 - [Release notes](https://github.com/react-hook-form/react-hook-form/releases) - [Changelog](https://github.com/react-hook-form/react-hook-form/blob/master/CHANGELOG.md) - [Commits](react-hook-form/react-hook-form@v7.87.0...v7.88.0) Updates `tailwind-merge` from 3.6.0 to 3.7.0 - [Release notes](https://github.com/dcastil/tailwind-merge/releases) - [Commits](https://github.com/dcastil/tailwind-merge/commits/tailwind-merge@3.7.0/packages/tailwind-merge) Updates `@types/react` from 19.2.18 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react) Updates `@types/react-dom` from 19.2.7 to 19.3.0 - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom) Updates `@aws-sdk/client-dsql` from 3.1127.0 to 3.1132.0 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/clients/client-dsql/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/v3.1132.0/clients/client-dsql) Updates `@aws-sdk/credential-provider-node` from 3.972.82 to 3.972.83 - [Release notes](https://github.com/aws/aws-sdk-js-v3/releases) - [Changelog](https://github.com/aws/aws-sdk-js-v3/blob/main/packages-internal/credential-provider-node/CHANGELOG.md) - [Commits](https://github.com/aws/aws-sdk-js-v3/commits/HEAD/packages-internal/credential-provider-node) --- updated-dependencies: - dependency-name: oxfmt dependency-version: 0.68.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: oxlint dependency-version: 1.83.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-translate" dependency-version: 3.1132.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/node" dependency-version: 26.5.1 dependency-type: direct:development update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: zod dependency-version: 4.6.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-cognito-identity-provider" dependency-version: 3.1132.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@cdklabs/deploy-time-build" dependency-version: 0.1.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: aws-cdk-lib dependency-version: 2.269.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: aws-cdk dependency-version: 2.1141.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-lambda" dependency-version: 3.1132.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-ssm" dependency-version: 3.1132.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: next dependency-version: 16.3.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: react dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-dom dependency-version: 19.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: react-hook-form dependency-version: 7.88.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: tailwind-merge dependency-version: 3.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@types/react-dom" dependency-version: 19.3.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/client-dsql" dependency-version: 3.1132.0 dependency-type: direct:development update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: "@aws-sdk/credential-provider-node" dependency-version: 3.972.83 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file javascript Pull requests that update javascript code labels Sep 18, 2026

github-actions Bot approved these changes Sep 18, 2026

View reviewed changes

github-actions Bot merged commit 9eec77b into main Sep 18, 2026
3 of 4 checks passed

github-actions Bot deleted the dependabot/npm_and_yarn/minor-and-patch-ab362b959e branch September 18, 2026 09:52

Navigation Menu

chore(deps): bump the minor-and-patch group with 20 updates - #300

chore(deps): bump the minor-and-patch group with 20 updates#300
github-actions[bot] merged 1 commit into
mainfrom
dependabot/npm_and_yarn/minor-and-patch-ab362b959e

dependabot Bot commented on behalf of github Sep 18, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 18, 2026

Changelog

oxlint v1.83.0 & oxfmt v0.68.0

Table of Contents

Oxlint v1.83.0

🚀 Features

🐛 Bug Fixes

⚡ Performance

Changelog

v3.1132.0

3.1132.0(2026-09-14)

New Features

Tests

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

New Features

v3.1130.0

3.1130.0(2026-09-10)

New Features

3.1132.0 (2026-09-14)

3.1131.0 (2026-09-11)

3.1130.0 (2026-09-10)

3.1129.0 (2026-09-09)

3.1128.0 (2026-09-08)

v4.6.5

Commits:

v4.6.4

v4.6.3

v4.6.2

v4.6.1

v4.6.0

v3.1132.0

3.1132.0(2026-09-14)

New Features

Tests

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

New Features

v3.1130.0

3.1130.0(2026-09-10)

New Features

3.1132.0 (2026-09-14)

3.1131.0 (2026-09-11)

3.1130.0 (2026-09-10)

3.1129.0 (2026-09-09)

3.1128.0 (2026-09-08)

v0.1.10

0.1.10 (2026-09-11)

v0.1.9

0.1.9 (2026-09-11)

v0.1.8

0.1.8 (2026-09-11)

v2.269.0

Features

Bug Fixes

Alpha modules (2.269.0-alpha.0)

⚠ BREAKING CHANGES

Changelog

2.269.0-alpha.0 (2026-09-10)

⚠ BREAKING CHANGES

Features

aws-cdk@v2.1141.0

2.1141.0 (2026-09-09)

Features

v3.1132.0

3.1132.0(2026-09-14)

New Features

Tests

v3.1131.0

3.1131.0(2026-09-11)

Documentation Changes

New Features

v3.1130.0

3.1130.0(2026-09-10)

New Features

3.1132.0 (2026-09-14)

3.1131.0 (2026-09-11)