Chore(deps): Bump the multi-account-python-minor-patch group across 4 directories with 5 updates

[dependabot]

Bumps the multi-account-python-minor-patch group with 5 updates in the /backend/multi-account directory:

Package	From	To
aws-cdk-lib	2.251.0	2.254.0
moto	5.1.22	5.2.1
cdk-nag	2.38.1	2.38.2
coverage	7.13.5	7.14.0
ruff	0.15.12	0.15.13

Bumps the multi-account-python-minor-patch group with 2 updates in the /backend/multi-account/backups directory: aws-cdk-lib and moto.
Bumps the multi-account-python-minor-patch group with 4 updates in the /backend/multi-account/control-tower directory: aws-cdk-lib, cdk-nag, coverage and ruff.
Bumps the multi-account-python-minor-patch group with 1 update in the /backend/multi-account/log-aggregation directory: aws-cdk-lib.

Updates aws-cdk-lib from 2.251.0 to 2.254.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.254.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed. aws-sagemaker: AWS::SageMaker::Model: Id attribute removed. aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive.

Features

• update L1 CloudFormation resource definitions (#37826) (fb4197e)
• cloudwatch: add PromQL Alarm L2 construct (#37793) (13a4924)
• core: PropertyMergeStrategy now supports array merge strategies (#37841) (701305d)
• core: plugin violations can be suppressed (#37808) (a47ad39), closes #37781
• core: weak cross environment references (#37800) (fe23dce)
• core: weak cross-stack references in the same environment (#37824) (167ff3c)
• dynamodb: resource policies for streams (#37254) (7e5679c)
• lambda: add SQS provisionedPollerConfig support with validation and fix type mismatch (#37550) (086738b), closes #37197 aws/aws-cdk#37197 #37197
• ses: auto email validation for configuration sets (#36679) (3a58641)

Bug Fixes

• file fingerprinting is now ~33% faster (#37802) (b871018)
• core: "exports cannot be updated" for cross-region references (#37790) (af11f00)
• rds: add lower bound validation for ClusterInstance promotionTier (#37519) (16c0a29), closes #37518
• s3deploy: empty sources leads to deployment error (#37786) (d28ad30)
• bundled jsonschema in @​aws-cdk/cloud-assembly-api causes ELSPROBLEMS (#37774) (64651d3), closes #37756

---

Alpha modules (2.254.0-alpha.0)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
• custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

v2.253.1

Bug Fixes

• core: "exports cannot be updated" for cross-region references (#37790) (b0c00e2)
• s3deploy: empty sources leads to deployment error (#37786) (f61656a)

---

Alpha modules (2.253.1-alpha.0)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

• bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
• custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

2.253.1-alpha.0 (2026-05-08)

2.253.0-alpha.0 (2026-05-06)

Features

• bedrock-agentcore-alpha: add OnlineEvaluationConfig and Evaluator L2 constructs (#37615) (c13de04), closes #37614
• glue-alpha: add extraPythonFiles support to PythonShellJob (#37130) (c9c6f9c), closes #34448

Bug Fixes

• bedrock-agentcore-alpha: self-managed memory strategy validation throws on unresolved tokens (#37691) (7956537), closes #37197

2.252.0-alpha.0 (2026-04-29)

2.251.0-alpha.0 (2026-04-24)

... (truncated)

Commits

• df4cca7 chore(release): 2.254.0 (#37859)
• 3854570 Update CHANGELOG.v2.alpha.md
• 4e11659 Update CHANGELOG.v2.md
• b1864c9 chore: update analytics metadata blueprints
• c9faa87 chore(release): 2.254.0
• fb4197e feat: update L1 CloudFormation resource definitions (#37826)
• 086738b feat(lambda): add SQS provisionedPollerConfig support with validation and fix...
• 025c38c fix(custom-resource-handlers): deployment fails when parameter already exists...
• 69d6457 refactor(core): unify validation plugin execution into single loop (#37809)
• 13a4924 feat(cloudwatch): add PromQL Alarm L2 construct (#37793)
• Additional commits viewable in compare view

Updates moto from 5.1.22 to 5.2.1

Changelog

Sourced from moto's changelog.

5.2.1

Docker Digest for 5.2.1: sha256:fe6575dcd878842124f05d20e4ffde2d1126e1e38ad03e196353b9e53649bcdf

Miscellaneous:
    * DynamoDB: batch_write_item() now correctly handles PUT requests with Binary (B) attributes (broken in 5.2.0)
    * S3: Uploading files no longer fails with 'Unsupported protocol' (broken in 5.2.0)
    * S3: create_multipart_upload() is now compatible with Java SDK again (broken in 5.2.0)
    * Route53: update_health_check() now correctly updates falsy values (broken in 5.2.0)

5.2.0

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services
New Services:

* Bedrock-AgentCore-Control:

* create_agent_runtime()

* create_agent_runtime_endpoint()

* create_gateway()

* create_gateway_target()

* create_memory()

* delete_agent_runtime()

* delete_agent_runtime_endpoint()

* delete_gateway()

* delete_gateway_target()

* delete_memory()

* get_agent_runtime()

* get_agent_runtime_endpoint()

* get_gateway()

* get_gateway_target()

* get_memory()

* list_agent_runtimes()

* list_agent_runtime_endpoints()

* list_agent_runtime_versions()

* list_gateways()

* list_gateway_targets()

* list_memories()

* list_tags_for_resource()

* tag_resource()

* update_agent_runtime()

* update_agent_runtime_endpoint()

* update_gateway()

* update_gateway_target()

* untag_resource()

... (truncated)

Commits

• 543c687 Pre-Release: Up Version Number
• b653a99 Prep release 5.2.1 (#10020)
• df3dc92 Core: Disable flaky AWS tests (#10019)
• ef42e0e S3: Make CreateMultipartUpload compatible with Java SDK (#10017)
• 50ab624 Core: Make compatible with mypy 2 (#10016)
• 6b3cf8d Route53: update_health_check() should handle falsy values correctly (#10014)
• b4f8b78 Core: short circuit protocol detection for S3 (#10012)
• 665e817 DynamoDB: fix BatchWriteItem handling of binary attributes (#10007)
• e754d88 Admin: Post-release steps
• 4d17a10 Pre-Release: Up Version Number
• Additional commits viewable in compare view

Updates cdk-nag from 2.38.1 to 2.38.2

Release notes

Sourced from cdk-nag's releases.

v2.38.2

2.38.2 (2026-04-27)

Bug Fixes

• prefix using Stage Construct ID to avoid StageName colissions (#2338) (c0d76f6)

Commits

• c0d76f6 fix: prefix using Stage Construct ID to avoid StageName colissions (#2338)
• 0d52df5 chore: add tests for uncovered branches in elasticbeanstalk rules (#2210)
• 4511bc0 chore: add tests for uncovered branches in apigw rules (#2190)
• b684354 chore: add tests for uncovered branches in codebuild rules (#2196)
• e4dc7d9 chore: add tests for uncovered branches in ecs rules (#2206)
• c6f2d4f chore: add tests for uncovered branches in ec2 rules (#2202)
• 07e6258 chore: add tests for uncovered branches in elasticache rules (#2208)
• e5d11b1 chore: add tests for uncovered branches in ecr rules (#2204)
• 8396469 chore: add tests for uncovered branches in cloudwatch rules (#2194)
• 51dd228 chore: add tests for uncovered branches in cognito rules (#2198)
• Additional commits viewable in compare view

Updates coverage from 7.13.5 to 7.14.0

Changelog

Sourced from coverage's changelog.

Version 7.14.0 — 2026-05-10

• Feature: now when running one of the reporting commands, if there are parallel data files that need combining, they will be implicitly combined before creating the report. There is no option to avoid the combination; let us know if you have a use case that requires it. Thanks, Tim Hatch <pull 2162_>. Closes issue 1781.

• Fix: the output from combine was too verbose, listing each file considered. Now it shows a single line with the counts of files combined, files skipped, and files with errors. The -q flag suppresses this line. The old detailed lines are available with the new --debug=combine option.

• Fix: running a Python file through a symlink now sets the sys.path correctly, matching regular Python behavior. Fixes issue 2157_.

• Fix: Collector.flush_data could fail with "RuntimeError: Set changed size during iteration" when a tracer in another thread added a line to the per-file set that add_lines (or add_arcs) was iterating. The values passed to CoverageData are now snapshotted via dict.copy() and set.copy(), which are atomic under the GIL. Thanks, Alex Vandiver <pull 2165_>_.

• Fix: the soft keyword lazy is now bolded in HTML reports.

• We are no longer testing eventlet support. Eventlet started issuing stern deprecation warnings that break our tests. Our support code is still there.

.. _issue 1781: coveragepy/coveragepy#1781 .. _issue 2157: coveragepy/coveragepy#2157 .. _pull 2162: coveragepy/coveragepy#2162 .. _pull 2165: coveragepy/coveragepy#2165

.. _changes_7-13-5:

Commits

• 646351b docs: sample HTML for 7.14.0
• 39cd015 docs: prep for 7.14.0
• 649e8aa docs: thanks Alex Vandiver for #2165
• 8cd392e fix: snapshot data in Collector.flush_data to avoid threading race (#2165)
• c48e0ed fix: less output for combining
• c2a3a28 docs: explain the change from #2162
• 1cd47aa fix: implicit combine-during-report now removes the combined data files
• 2d99fd7 feat: automatically combine coverage in report, thanks Tim Hatch (#2162)
• 9fbdcdf fix: lazy soft keywords are bolded
• 5de7d02 build: oops, misplaced quote
• Additional commits viewable in compare view

Updates ruff from 0.15.12 to 0.15.13

Release notes

Sourced from ruff's releases.

0.15.13

Release Notes

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

... (truncated)

Changelog

Sourced from ruff's changelog.

0.15.13

Released on 2026-05-14.

Preview features

• Add a rule to flag lazy imports that are eagerly evaluated (#25016)
• [pylint] Standardize diagnostic message (PLR0914, PLR0917) (#24996)

Bug fixes

• Fix F811 false positive for class methods (#24933)
• Fix setting selection for multi-folder workspace (#24819)
• [eradicate] Fix false positive for lines with leading whitespace (ERA001) (#25122)
• [flake8-pyi] Fix false positive for f-string debug specifier (PYI016) (#24098)

Rule changes

• Always include panic payload in panic diagnostic message (#24873)
• Restrict PYI034 for in-place operations to enclosing class (#24511)
• Improve error message for parameters that are declared global (#24902)
• Update known stdlib (#25103)

Performance

• [isort] Avoid constructing glob::Patterns for literal known modules (#25123)

CLI

• Add TOML examples to --config help text (#25013)
• Colorize ruff check 'All checks passed' (#25085)

Configuration

• Increase max allowed value of line-length setting (#24962)

Documentation

• Add D203 to rules that conflict with the formatter (#25044)
• Clarify COM819 and formatter interaction (#25045)
• Clarify that NotImplemented is a value, not an exception (F901) (#25054)
• Update number of lint rules supported (#24942)

Other changes

• Simplify the playground's markdown template (#24924)

Contributors

• @​MichaReiser

... (truncated)

Commits

• 2afb467 Bump 0.15.13 (#25157)
• 3008796 [ty] classify TypeVar semantic tokens as type parameters (#24891)
• 79470e3 [isort] Avoid constructing glob::Patterns for literal known modules (#25123)
• 2522549 Remove shellcheck from prek (#25154)
• 7db7170 [ty] Support TypedDict key completions in incomplete, anonymous contexts (#25...
• bb3dd53 [ty] Run full iteration analysis on narrowed typevars (#25143)
• 828cdb7 [ty] Isolate file-watching test environment (#25151)
• 89e1d86 [ty] Preserve TypedDict keys through dict unpacking (#24523)
• 86f3064 [ty] Avoid accessing args[0] for static_assert (#25149)
• ed819f9 [ty] Treat custom enum __new__ values as dynamic (#25136)
• Additional commits viewable in compare view

Updates aws-cdk-lib from 2.251.0 to 2.254.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.254.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed. aws-sagemaker: AWS::SageMaker::Model: Id attribute removed. aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive.

Features

• update L1 CloudFormation resource definitions (#37826) (fb4197e)
• cloudwatch: add PromQL Alarm L2 construct (#37793) (13a4924)
• core: PropertyMergeStrategy now supports array merge strategies (#37841) (701305d)
• core: plugin violations can be suppressed (#37808) (a47ad39), closes #37781
• core: weak cross environment references (#37800) (fe23dce)
• core: weak cross-stack references in the same environment (#37824) (167ff3c)
• dynamodb: resource policies for streams (#37254) (7e5679c)
• lambda: add SQS provisionedPollerConfig support with validation and fix type mismatch (#37550) (086738b), closes #37197 aws/aws-cdk#37197 #37197
• ses: auto email validation for configuration sets (#36679) (3a58641)

Bug Fixes

• file fingerprinting is now ~33% faster (#37802) (b871018)
• core: "exports cannot be updated" for cross-region references (#37790) (af11f00)
• rds: add lower bound validation for ClusterInstance promotionTier (#37519) (16c0a29), closes #37518
• s3deploy: empty sources leads to deployment error (#37786) (d28ad30)
• bundled jsonschema in @​aws-cdk/cloud-assembly-api causes ELSPROBLEMS (#37774) (64651d3), closes #37756

---

Alpha modules (2.254.0-alpha.0)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
• custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

v2.253.1

Bug Fixes

• core: "exports cannot be updated" for cross-region references (#37790) (b0c00e2)
• s3deploy: empty sources leads to deployment error (#37786) (f61656a)

---

Alpha modules (2.253.1-alpha.0)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

• bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
• custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

2.253.1-alpha.0 (2026-05-08)

2.253.0-alpha.0 (2026-05-06)

Features

• bedrock-agentcore-alpha: add OnlineEvaluationConfig and Evaluator L2 constructs (#37615) (c13de04), closes #37614
• glue-alpha: add extraPythonFiles support to PythonShellJob (#37130) (c9c6f9c), closes #34448

Bug Fixes

• bedrock-agentcore-alpha: self-managed memory strategy validation throws on unresolved tokens (#37691) (7956537), closes #37197

2.252.0-alpha.0 (2026-04-29)

2.251.0-alpha.0 (2026-04-24)

... (truncated)

Commits

• df4cca7 chore(release): 2.254.0 (#37859)
• 3854570 Update CHANGELOG.v2.alpha.md
• 4e11659 Update CHANGELOG.v2.md
• b1864c9 chore: update analytics metadata blueprints
• c9faa87 chore(release): 2.254.0
• fb4197e feat: update L1 CloudFormation resource definitions (#37826)
• 086738b feat(lambda): add SQS provisionedPollerConfig support with validation and fix...
• 025c38c fix(custom-resource-handlers): deployment fails when parameter already exists...
• 69d6457 refactor(core): unify validation plugin execution into single loop (#37809)
• 13a4924 feat(cloudwatch): add PromQL Alarm L2 construct (#37793)
• Additional commits viewable in compare view

Updates moto from 5.1.22 to 5.2.1

Changelog

Sourced from moto's changelog.

5.2.1

Docker Digest for 5.2.1: sha256:fe6575dcd878842124f05d20e4ffde2d1126e1e38ad03e196353b9e53649bcdf

Miscellaneous:
    * DynamoDB: batch_write_item() now correctly handles PUT requests with Binary (B) attributes (broken in 5.2.0)
    * S3: Uploading files no longer fails with 'Unsupported protocol' (broken in 5.2.0)
    * S3: create_multipart_upload() is now compatible with Java SDK again (broken in 5.2.0)
    * Route53: update_health_check() now correctly updates falsy values (broken in 5.2.0)

5.2.0

Docker Digest for 5.2.0: sha256:d8d063e3e704d256cbe8165072fa273c17698be91311e49fc602b7716f459bea

General:
    * Drops support for Python 3.9
    * Lambda Containers now configure the AWS_ENDPOINT_URL, automatically intercepting requests to other AWS services
New Services:

* Bedrock-AgentCore-Control:

* create_agent_runtime()

* create_agent_runtime_endpoint()

* create_gateway()

* create_gateway_target()

* create_memory()

* delete_agent_runtime()

* delete_agent_runtime_endpoint()

* delete_gateway()

* delete_gateway_target()

* delete_memory()

* get_agent_runtime()

* get_agent_runtime_endpoint()

* get_gateway()

* get_gateway_target()

* get_memory()

* list_agent_runtimes()

* list_agent_runtime_endpoints()

* list_agent_runtime_versions()

* list_gateways()

* list_gateway_targets()

* list_memories()

* list_tags_for_resource()

* tag_resource()

* update_agent_runtime()

* update_agent_runtime_endpoint()

* update_gateway()

* update_gateway_target()

* untag_resource()

... (truncated)

Commits

• 543c687 Pre-Release: Up Version Number
• b653a99 Prep release 5.2.1 (#10020)
• df3dc92 Core: Disable flaky AWS tests (#10019)
• ef42e0e S3: Make CreateMultipartUpload compatible with Java SDK (#10017)
• 50ab624 Core: Make compatible with mypy 2 (#10016)
• 6b3cf8d Route53: update_health_check() should handle falsy values correctly (#10014)
• b4f8b78 Core: short circuit protocol detection for S3 (#10012)
• 665e817 DynamoDB: fix BatchWriteItem handling of binary attributes (#10007)
• e754d88 Admin: Post-release steps
• 4d17a10 Pre-Release: Up Version Number
• Additional commits viewable in compare view

Updates aws-cdk-lib from 2.251.0 to 2.254.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.254.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticache: AWS::ElastiCache::CacheCluster: Id attribute removed. aws-sagemaker: AWS::SageMaker::Model: Id attribute removed. aws-vpclattice: AWS::VpcLattice::AuthPolicy: State attribute enum values changed from ACTIVE|INACTIVE to Active|Inactive.

Features

• update L1 CloudFormation resource definitions (#37826) (fb4197e)
• cloudwatch: add PromQL Alarm L2 construct (#37793) (13a4924)
• core: PropertyMergeStrategy now supports array merge strategies (#37841) (701305d)
• core: plugin violations can be suppressed (#37808) (a47ad39), closes #37781
• core: weak cross environment references (#37800) (fe23dce)
• core: weak cross-stack references in the same environment (#37824) (167ff3c)
• dynamodb: resource policies for streams (#37254) (7e5679c)
• lambda: add SQS provisionedPollerConfig support with validation and fix type mismatch (#37550) (086738b), closes #37197 aws/aws-cdk#37197 #37197
• ses: auto email validation for configuration sets (#36679) (3a58641)

Bug Fixes

• file fingerprinting is now ~33% faster (#37802) (b871018)
• core: "exports cannot be updated" for cross-region references (#37790) (af11f00)
• rds: add lower bound validation for ClusterInstance promotionTier (#37519) (16c0a29), closes #37518
• s3deploy: empty sources leads to deployment error (#37786) (d28ad30)
• bundled jsonschema in @​aws-cdk/cloud-assembly-api causes ELSPROBLEMS (#37774) (64651d3), closes #37756

---

Alpha modules (2.254.0-alpha.0)

Features

• bedrock-agentcore-alpha: add tags support to Evaluator and OnlineEvaluationConfig (#37804) (adbf88f)
• bedrock-agentcore-alpha: add identity L2 constructs (#37610) (67c3af2)
• mediapackagev2-alpha: add OAC integration between CloudFront and MediaPackageV2 (#37701) (654f59c)

Bug Fixes

• bedrock-agentcore-alpha: fix cedar policy bug (#37782) (e678d5c), closes #37828
• custom-resource-handlers: deployment fails when parameter already exists (#37852) (025c38c)

v2.253.1

Bug Fixes

• core: "exports cannot be updated" for cross-region references (#37790) (b0c00e2)
• s3deploy: empty sources leads to deployment error (#37786) (f61656a)

---

Alpha modules (2.253.1-alpha.0)

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

• bedrock-agentcore-alpha: Graduation of the library to stable. The Policy submodule is the only submodule that remains in alpha. All other constructs have graduated to stable in aws-cdk-lib/aws-bedrockagentcore and we recommend migrating to the stable versions (#37876) (00cf601)

2.254.0-alpha.0 (2026-05-13)

Features

• bedrock-agentcore-alpha:Description has been truncated