Bump minimatch and aws-cdk-lib in /scenarios/3-urls-with-localhost/cdk (#73)

Bumps [minimatch](https://github.com/isaacs/minimatch) to 3.1.5 and
updates ancestor dependency
[aws-cdk-lib](https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib).
These dependencies need to be updated together.

Updates `minimatch` from 3.1.2 to 3.1.5
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/isaacs/minimatch/commit/7bba97888a27a6162983056bcce2a6e28f668712"><code>7bba978</code></a>
3.1.5</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/bd259425b2ca17b42897997f93e890314155522d"><code>bd25942</code></a>
docs: add warning about ReDoS</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/1a9c27c75725474dbde57db2995b6281b267756d"><code>1a9c27c</code></a>
fix partial matching of globstar patterns</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/1a2e084af579731af66c221214e3ca8222c9bf23"><code>1a2e084</code></a>
3.1.4</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/ae24656237c3d58067442f790ce17eff84463a47"><code>ae24656</code></a>
update lockfile</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/b1003749228b2a79e1f237963a0d559ef7a0941e"><code>b100374</code></a>
limit recursion for **, improve perf considerably</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/26ffeaa091b9f660833e23f42e07165b33e85c13"><code>26ffeaa</code></a>
lockfile update</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/9eca892a4e5dbb20534f9f30483b85cdeee6c2eb"><code>9eca892</code></a>
lock node version to 14</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/00c323b188b704e5d4bc534ecec2268cfa70a32a"><code>00c323b</code></a>
3.1.3</li>
<li><a
href="https://github.com/isaacs/minimatch/commit/30486b2048929264f44d18822891cfffa02af78b"><code>30486b2</code></a>
update CI matrix and actions</li>
<li>Additional commits viewable in <a
href="https://github.com/isaacs/minimatch/compare/v3.1.2...v3.1.5">compare
view</a></li>
</ul>
</details>
<br />

Updates `aws-cdk-lib` from 2.189.1 to 2.240.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/releases">aws-cdk-lib's
releases</a>.</em></p>
<blockquote>
<h2>v2.240.0</h2>
<h3>Features</h3>
<ul>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37039">#37039</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/17b2d93f1f1aa422729e344649d43eb92e3999de">17b2d93</a>)</li>
<li><strong>eks-v2:</strong> graduate to stable 🚀 (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36950">#36950</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a7de51c33497b0c4db26c344da19e72eeb9327a7">a7de51c</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37034">#37034</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/62d40f85388bfb78ad7997b75c094b5dfd52347d">62d40f8</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>bump minimatch to ^10.2.1 to resolve ReDoS vulnerability
(GHSA-3ppc-4f35-3m26) (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37027">#37027</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e48ea41cc049264cb3d64ac99b8250202de96c29">e48ea41</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.240.0-alpha.0)</h2>
<h2>v2.239.0</h2>
<h3>⚠ BREAKING CHANGES</h3>
<ul>
<li>** L1 resources are automatically generated from public
CloudFormation Resource Schemas. They are built to closely reflect the
real state of CloudFormation. Sometimes these updates can contain
changes that are incompatible with previous types, but more accurately
reflect reality. In this release we have changed:</li>
</ul>
<p>aws-licensemanager: AWS::LicenseManager::License: Beneficiary
property is now required
aws-licensemanager: AWS::LicenseManager::License: ProductSKU property is
now required
aws-sagemaker: AWS::SageMaker::Cluster: Orchestrator.Eks property is now
immutable</p>
<h3>Features</h3>
<ul>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37031">#37031</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/bc65c09fc43279ada39c9213e03f4e7fed103be8">bc65c09</a>)</li>
<li><strong>dynamodb:</strong> add cross-account global table
replication support (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36895">#36895</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/353a9bbb27c501972cc1638f7361060ba2e5aa1b">353a9bb</a>)</li>
<li><strong>kinesisfirehose:</strong> support dynamic partitioning (<a
href="https://redirect.github.com/aws/aws-cdk/issues/35903">#35903</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/4f86a05cbf43885e7017b3af3111315dbf31ff16">4f86a05</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/28740">#28740</a></li>
<li>resource policy and encrypted resource wrappers for L1s (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36849">#36849</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/ee87e26dfd36fa3b36b20445071aeb577f114283">ee87e26</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36923">#36923</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/64cfc4d3a38a7de070e56de2f5b28f91152de491">64cfc4d</a>)</li>
<li>update L1 CloudFormation resource definitions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36997">#36997</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/e3eecad143499cce542c30bce4554e88714e3029">e3eecad</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>aws-cdk-lib:</strong> update cloud-assembly-schema to
resolve peer dependency conflict (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36953">#36953</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/f194236b086eaf49996e809f616919ee117c7ba1">f194236</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36939">#36939</a></li>
<li><strong>aws-cdk-lib:</strong> upgrade version of <code>ajv</code>
that triggers CVE scanners (<a
href="https://redirect.github.com/aws/aws-cdk/issues/37022">#37022</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/45662bad301cbaf67f3d13590c25adfab118bdf1">45662ba</a>)</li>
<li><strong>ec2:</strong> add VPC endpoint naming conventions for some
isolated regions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36794">#36794</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/5a7fca5f91b11d572cbc25bf3b0efae1ee70cacd">5a7fca5</a>)</li>
<li><strong>rds:</strong> mark deprecated versions and add new engine
versions (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36937">#36937</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/6e061d0df410556ffb45eed770436cfe7d0ad3e1">6e061d0</a>)</li>
</ul>
<hr />
<h2>Alpha modules (2.239.0-alpha.0)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<p>redshift-alpha: update default node type from <code>DC2_LARGE</code>
to <code>RA3_LARGE</code></p>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> add
<code>fromCodeAsset</code> method to create runtime artifact with local
code assets (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36472">#36472</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c5a87e6682a3668de849d4c7a0913fdee3eb170c">c5a87e6</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36473">#36473</a></li>
<li><strong>bedrock-agentcore-alpha:</strong> added new target type (api
gateway) in agentcore gateway target. (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36841">#36841</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/0842754ec56412a9b22f2e92f5aea7c86129ec52">0842754</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36817">#36817</a></li>
<li><strong>mixins-preview:</strong> add ECS ClusterSettingsMixin (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36796">#36796</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/b8ab5be8f2e0733433a55dd48b26e7f56f6e0393">b8ab5be</a>)</li>
<li><strong>mixins-preview:</strong> add s3 bucket mixin for
publicAccessBlock (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36905">#36905</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/feed4b2690bd481e464dd3ececa4cba0997a03db">feed4b2</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md">aws-cdk-lib's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<p>All notable changes to this project will be documented in this file.
See <a
href="https://github.com/conventional-changelog/standard-version">standard-version</a>
for commit guidelines.</p>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.239.0-alpha.0...v2.240.0-alpha.0">2.240.0-alpha.0</a>
(2026-02-23)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.238.0-alpha.0...v2.239.0-alpha.0">2.239.0-alpha.0</a>
(2026-02-19)</h2>
<h3>⚠ BREAKING CHANGES</h3>
<p>redshift-alpha: update default node type from <code>DC2_LARGE</code>
to <code>RA3_LARGE</code></p>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> add
<code>fromCodeAsset</code> method to create runtime artifact with local
code assets (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36472">#36472</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/c5a87e6682a3668de849d4c7a0913fdee3eb170c">c5a87e6</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36473">#36473</a></li>
<li><strong>bedrock-agentcore-alpha:</strong> added new target type (api
gateway) in agentcore gateway target. (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36841">#36841</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/0842754ec56412a9b22f2e92f5aea7c86129ec52">0842754</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36817">#36817</a></li>
<li><strong>mixins-preview:</strong> add ECS ClusterSettingsMixin (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36796">#36796</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/b8ab5be8f2e0733433a55dd48b26e7f56f6e0393">b8ab5be</a>)</li>
<li><strong>mixins-preview:</strong> add s3 bucket mixin for
publicAccessBlock (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36905">#36905</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/feed4b2690bd481e464dd3ececa4cba0997a03db">feed4b2</a>)</li>
<li><strong>mixins-preview:</strong> send Vended Logs to pre-created
DeliveryDestination using <code>toDestination()</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36896">#36896</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/48f1fe6aa86473a25ffdcf53cfecb5e1169b54db">48f1fe6</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>redshift-alpha:</strong> update default node type from
<code>DC2_LARGE</code> to <code>RA3_LARGE</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36516">#36516</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/ea19e5cde2e64d5cdcdfa3af41764542e77e221c">ea19e5c</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36416">#36416</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.237.1-alpha.0...v2.238.0-alpha.0">2.238.0-alpha.0</a>
(2026-02-09)</h2>
<h3>Features</h3>
<ul>
<li><strong>eks-v2-alpha:</strong> add support for
bootstrapSelfManagedAddons (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36740">#36740</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/1ffe38dc950a096cb5e1c1ee20f2c49899dc0a23">1ffe38d</a>)</li>
<li><strong>eks-v2-alpha:</strong> add support for EKS hybrid nodes (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36749">#36749</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/48ace56d82537630fc339cb41962473a97375aea">48ace56</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li><strong>eks-v2-alpha:</strong> ensure kubectl provider and handler
functions use the same vpc configuration (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36735">#36735</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/4e02f0896069105dae83c46f19f1b346a546ad57">4e02f08</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/34878">#34878</a>
<a
href="https://redirect.github.com/aws/aws-cdk/issues/34877">#34877</a></li>
<li><strong>ivs-alpha:</strong> add region constraints to integration
tests (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36851">#36851</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/d55fec42357410b8263b814b931daf5dccc5c5e3">d55fec4</a>)</li>
<li><strong>mixins-preview:</strong> apply mixins in order (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36847">#36847</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/726060c0ea9f57de4c6e13c1f50c330e4fc2608e">726060c</a>)</li>
<li><strong>mixins-preview:</strong> apply mixins in order in
<code>MixinApplicator</code> (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36877">#36877</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/09db1c99710c9f8e91774e767de93fff1a0d2650">09db1c9</a>),
closes <a
href="https://redirect.github.com/aws/aws-cdk/issues/36847">#36847</a></li>
</ul>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.237.0-alpha.0...v2.237.1-alpha.0">2.237.1-alpha.0</a>
(2026-02-03)</h2>
<h2><a
href="https://github.com/aws/aws-cdk/compare/v2.236.0-alpha.0...v2.237.0-alpha.0">2.237.0-alpha.0</a>
(2026-02-02)</h2>
<h3>Features</h3>
<ul>
<li><strong>bedrock-agentcore-alpha:</strong> add support for custom
claims and scopes to runtime/gateway authorizers (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36810">#36810</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/a3abcd010648e83bed273dff8f581291b5b3c902">a3abcd0</a>)</li>
<li><strong>eks-v2-alpha:</strong> pass additional helm chart values to
aws-load-balancer-controller (<a
href="https://redirect.github.com/aws/aws-cdk/issues/36754">#36754</a>)
(<a
href="https://github.com/aws/aws-cdk/commit/cf61814ac58448ddd70682e45c07dd8ca58c4fd1">cf61814</a>),
closes <a
href="https://github.com/aws//github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml/issues/L199">/github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/aws/aws-cdk/commit/e3ec6dffefce2257acc2192b4b38049fd867d051"><code>e3ec6df</code></a>
chore: update analytics metadata blueprints</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e48ea41cc049264cb3d64ac99b8250202de96c29"><code>e48ea41</code></a>
chore: bump minimatch to ^10.2.1 to resolve ReDoS vulnerability
(GHSA-3ppc-4f...</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/17b2d93f1f1aa422729e344649d43eb92e3999de"><code>17b2d93</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/37039">#37039</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a7de51c33497b0c4db26c344da19e72eeb9327a7"><code>a7de51c</code></a>
feat(eks-v2): graduate to stable 🚀 (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/36950">#36950</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/a8914c2210b05928d3a5022b86c1dfe48fc052c6"><code>a8914c2</code></a>
Merge branch 'main' into merge-back/2.239.0</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/62d40f85388bfb78ad7997b75c094b5dfd52347d"><code>62d40f8</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/37034">#37034</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e458da3e24f6a974ba370b92165040fbcc245238"><code>e458da3</code></a>
Merge branch 'v2-release' into pr-37033</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/e906f86468464a6a706b38ee364f0335bfe0034f"><code>e906f86</code></a>
chore(release): 2.239.0</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/bc65c09fc43279ada39c9213e03f4e7fed103be8"><code>bc65c09</code></a>
feat: update L1 CloudFormation resource definitions (<a
href="https://github.com/aws/aws-cdk/tree/HEAD/packages/aws-cdk-lib/issues/37031">#37031</a>)</li>
<li><a
href="https://github.com/aws/aws-cdk/commit/96714e6d2edade5bbee6336518821177d604ec1b"><code>96714e6</code></a>
Merge branch 'v2-release' into bump/2.239.0</li>
<li>Additional commits viewable in <a
href="https://github.com/aws/aws-cdk/commits/v2.240.0/packages/aws-cdk-lib">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/localstack/localstack-docker-debug/network/alerts).

</details>

Author: github-actions[bot]

scenarios/3-urls-with-localhost/cdk/package-lock.json

@@ -20,7 +20,7 @@
     "typescript": "~5.1.3"
   },
   "dependencies": {
-    "aws-cdk-lib": "2.189.1",
+    "aws-cdk-lib": "2.240.0",
     "constructs": "^10.0.0",
     "source-map-support": "^0.5.21"
   }