Skip to content

feat(deps): upgrade aws-cdk-lib - #2000

Merged
aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk
Sep 28, 2026
Merged

aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk

Conversation

@aws-cdk-automation

Copy link
Copy Markdown
Collaborator

Upgrades project dependencies. See details in workflow run.


Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow

Upgrades project dependencies. See details in [workflow run].

[Workflow Run]: https://github.com/aws/aws-cdk-cli/actions/runs/36363137535

------

*Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow*

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/aws-cdk-lib 2.271.0 🟢 5.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
License🟢 10license file detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
npm/@aws-cdk/cloud-assembly-schema 54.25.0 UnknownUnknown
npm/@aws/cloudformation-validate 1.12.1 UnknownUnknown
npm/aws-cdk-lib 2.271.0 🟢 5.9
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10
Code-Review🟢 10all changesets reviewed
Packaging⚠️ -1packaging workflow not detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
License🟢 10license file detected
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed

Scanned Files

  • packages/aws-cdk/package.json
  • yarn.lock

@aws-cdk-automation
aws-cdk-automation added this pull request to the merge queue Sep 28, 2026
Merged via the queue into main with commit ff8add0 Sep 28, 2026
46 checks passed

This branch was successfully deployed

3 active (1 outdated) deployments
run-tests — bfab98cd Deployed Sep 28, 2026 by aws-cdk-automation via integ_cli (cli-integ-tests, 24.19, 10) #7011
no-approval — bfab98cd Deployed Sep 28, 2026 by aws-cdk-automation via prepare #7011
automation — bd59bfb5 Deployed Sep 28, 2026 by aws-cdk-automation via Triage Pull Requests #2140
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants