chore(deps-dev): bump aws-cdk-aws-lambda-python-alpha from 2.259.0a0 to 2.266.0a0

[dependabot]

Bumps aws-cdk-aws-lambda-python-alpha from 2.259.0a0 to 2.266.0a0.

Release notes

Sourced from aws-cdk-aws-lambda-python-alpha's releases.

v2.265.0

Features

• bedrock-agentcore: add StreamDeliveryResources support to Memory L2 Construct (#37527) (817c50b)
• cloudwatch: support AT_LEAST expression for composite alarm rules (#37693) (974e43b), closes #37692 #36100
• docdb: add managed password support (#35711) (fcf54bf)
• ec2: add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#37900) (000f532), closes #37883
• ec2: add volume initialization rate to ebs props for launchtemplate (#36451) (da4281e), closes #36374
• kinesisfirehose: add HTTP Endpoint and Datadog destination (#33657) (4c47171), closes #20354 #15502

Bug Fixes

• cloudwatch: make concrete widgets assignable to widget interface (#37695) (e322035), closes #37600
• core: cdk validate can hang indefinitely (#38510) (0a238f3), closes #38498 #38425
• secretsmanager: correct SAR rotation app versions for GovCloud (#38462) (a29b5c0)
• bump brace-expansion to 5.0.9 to address CVE-2026-69152 (#38520) (8764b7b), closes #38496 #38410

---

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
• glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

• glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
• glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
• glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

• glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)
• mediaconnect-alpha: update validation to allow adding an underscore to name (#38539) (7c85994)

v2.264.0

⚠ BREAKING CHANGES

• bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the old dimensions must be updated.
• bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

• update L1 CloudFormation resource definitions (#38526) (b5693cb)
• cloudwatch: support alarm mute rules (#37504) (c3540bb), closes #37502
• update L1 CloudFormation resource definitions (#38479) (279340d)

... (truncated)

Commits

• See full diff in compare view

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[mergify]

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

• Queue this pull request

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 96.64%. Comparing base (bb51178) to head (28f5e68).
⚠️ Report is 3 commits behind head on develop.

Additional details and impacted files

@@           Coverage Diff            @@
##           develop    #8395   +/-   ##
========================================
  Coverage    96.64%   96.64%           
========================================
  Files          296      296           
  Lines        14765    14765           
  Branches      1245     1245           
========================================
  Hits         14269    14269           
  Misses         361      361           
  Partials       135      135           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.