fix(deps): update dependency software.amazon.awscdk:aws-cdk-lib to v2.72.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
software.amazon.awscdk:aws-cdk-lib	2.67.0 -> 2.72.1

---

Release Notes

aws/aws-cdk

v2.72.1

---

Alpha modules (2.72.1-alpha.0)

v2.72.0

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• cdk-lib: The return type of aws-cdk-lib.aws_ec2.SecurityGroup.determineRuleScope was changed from a tuple ([SecurityGroupBase, string]) to a struct with the same values, because tuple types are not supported over the jsii interoperability layer, but jsii@v1 was incorrectly allowing this to be represented as the JSON primitive type. This made the API unusable in non-JS languages. The type of the metadata property of aws-cdk-lib.aws_s3_deployment.BucketDeploymentProps was changed from an index-only struct to an inline map, because jsii@v1 silently ignored the index signature (which is otherwise un-supported), resulting in an empty object in non-JS/TS languages. As a consequence, the values of that map can no longer be undefined (as jsii does not currently support nullable elements in collections).

Features

• apprunner-alpha: support autoDeploymentsEnabled flag for Service (#​24612) (cf5a9c4), closes #​24529
• cfnspec: cloudformation spec v117.0.0 (#​24779) (1b94ea6)
• cfnspec: cloudformation spec v117.0.0 (#​24841) (84630e9)
• cloudfront-origins: allow custom originPath for apigateway.RestApi constructs (#​24023) (bc3db02)
• core: template validation after synthesis (#​23951) (20aeb0f)
• dynamodb: adds deletion protection for tables (#​24581) (6e400a9), closes #​24540
• ecs: support pseudo terminal allocation in container definition (#​24790) (3c0756a)
• efs: implement IResourceWithPolicy (#​24453) (5771d79), closes #​15805
• kms: Adds support for hmac and sm2 key spec (#​23866) (f2f3c21), closes #​23727
• s3: add allowedActionPatterns parameter to grantWrite (#​24211) (5b5c36f), closes #​24074
• s3-deployment: added Source.dataYaml helper function (#​24579) (d969ddf), closes #​24554
• added AllViewerExceptHostHeader as new OriginRequest policy (#​24562) (8dbca12), closes #​24552

Bug Fixes

• bootstrap: ECR repository produces Security Hub finding [ECR.3] because of missing lifecycle policy (#​24735) (cdfa970)
• cli: cdk deploy output hook failure reason if cloudformation failed by hook (#​24444) (9d4b66a)
• cli: pathMetadata and assetMetadata defaults cannot be configured in cdk.json (#​24533) (45bc57a), closes #​3573
• dynamodb: add missing iam permissions to custom resource for deleting dynamodb replica table (#​24682) (f35b70b), closes #​22069
• ec2: tokenised subnet.subnetId filtered by the SubnetIdSubnetFilter returns an empty array (#​24625) (d0912ca), closes #​24427
• ec2: VPC Flow Log record fields are not available (#​24812) (65fb7a6), closes #​24807
• ecs: cpu in container definition may be less than total cpu allocated to the container (#​24647) (dc064be), closes #​24629
• lambda-nodejs: pnpm no longer supports nodejs14.x (#​24821) (b1c9ab2)
• logs-destinations: missing dependency to Permission Policy created by LambdaDestination (#​24823) (72b3a95), closes #​21941 /github.com/aws/aws-cdk/pull/22100#issue-1377109110
• logs-destinations: missing dependency to Policy created by KinesisDestination (#​24811) (3c98d1e), closes #​21827 /github.com/aws/aws-cdk/issues/21827#issuecomment-1382128416
• s3-deployment: physical id not set during failure scenario (#​24428) (be4be99), closes #​22670
• stepfunctions-tasks: updated EMR service role to use AmazonEMRServicePolicy_v2 (under feature flag) (#​23985) (f3fd183), closes #​23915

Miscellaneous Chores

• cdk-lib: migrate to [email protected] / [email protected] (#​24425) (6d581d7)

---

Alpha modules (2.72.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• servicecatalogappregistry: This commit involves share replacement during the deployment of ApplicationAssociator due to share construct id update. After this change, frequent share replacements due to structural change in Application construct should be avoided. Application.shareApplication starts to require construct id (first argument) and share name (added in ShareOption) as input.
• ivs: Renamed ChannelProps.name to ChannelProps.channelName
• Renamed PlaybackKeyPairProps.name to PlaybackKeyPairProps.playbackKeyPairName
• Channel now generates a physical name if one is not provided
• PlaybackKeyPair now generates a physical name if one is not provided

Bug Fixes

• integ-runner: update workflow doesn't support resource replacement (#​24720) (07d3aa7)
• ivs: Not a standard physical name pattern (#​24706) (7d17fe3)
• servicecatalogappregistry: RAM Share is replaced on every change to Application (#​24760) (8977d0d)

v2.71.0

Features

• core: template validation after synthesis (#​23951) (91d6509)

Bug Fixes

• lambda-nodejs: pnpm no longer supports nodejs14.x (#​24821) (a8e9370)

---

Alpha modules (2.71.0-alpha.0)

v2.70.0

Features

• cfnspec: cloudformation spec v116.0.0 (#​24662) (e8158af)
• cloudwatch: added defaultInterval prop to cw-dashboard (#​24707) (d4717cf)
• ec2: CFN-init support for systemd (#​24683) (f3fe8e1)
• ec2: SSM sessions (#​24673) (9744a82)
• ecr: add option to auto delete images upon ECR repository removal (#​24572) (7de5b00), closes #​15932 #​12618 #​15932
• elasticloadbalancing: classic load balancer supports ec2 instances (#​24353) (25b6edd), closes #​23500
• servicecatalogappregistry-alpha: Introduce flag to control application sharing and association behavior for cross-account stacks (#​24408) (2167289), closes aws-cdk/aws-servicecatalogappregistry/lib/aspects/stack-associator.ts#L91-L95

Bug Fixes

• bootstrap: remove Security Hub finding KMS.2 (#​24588) (274c3d5), closes /docs.aws.amazon.com/securityhub/latest/userguide/kms-controls.html#kms-2
• cli: no change deployment prints "hotswap deployment skipped" without hotswap flag (#​24602) (79151fd)
• cli: user agent is reported as undefined/undefined (#​24663) (3e8d8d8)
• eks: fail to update cluster by disabling logging props (#​24688) (767cf93)
• sfn: stop replacing JsonPath.DISCARD with null (#​24717) (413b643), closes #​24593
• toolkit: RWLock.acquireRead is not re-entrant (#​24702) (3b7431b)
• WAFv2: add patch to revert struct names (#​24651) (dfa09d1), closes /github.com/aws/aws-cdk/commit/affe040c8443be074822254d1e75a28b264cd801#diff-827a2fd012e049c7ccedffa0360c12e7d967a173f36b8150de73ef6adc42ee4cL175-L357

---

Alpha modules (2.70.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
  Since the application RAM share name is calculated by the application construct, where one method is added. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.

Features

• servicecatalogappregistry: add attribute groups to an application (#​24672) (7baffa2)

v2.69.0

Features

• custom-resources: AwsCustomResource copy physicalResourceId from request when omit it in onUpdate (#​24194) (21ad7a7), closes #​23843
• docdb: added ability to enable performance insights (#​24039) (c897f44), closes #​24036
• ecr-assets: Support cache-from and cache-to flags (#​24024) (4e02566)
• eks: support for Kubernetes version 1.25 (#​24484) (70fd3e9), closes #​24282
• rds: add support for minor versions of PostgreSQL: 14.7, 13.10, 12.14, and 11.19 (#​24539) (15cb919)
• rds: PostgreSQL engine version 15.2 (#​24463) (59d795b), closes #​24462

Bug Fixes

• custom-resource: custom resources fail with data containing multi-byte utf8 chars (#​24501) (9bd5078), closes #​24491
• ecr-assets: prefix cache arguments correctly (#​24524) (d451b30)
• pipelines: Ubuntu 5 images will be slow, move to Ubuntu 6 (#​24544) (1f62c43)
• sfn: can't override toStateJson() from other languages (#​24593) (e955d18), closes #​14639

---

Alpha modules (2.69.0-alpha.0)

Features

• kinesisanalytics-flink: VPC support for Flink applications (#​24442) (7c7ad6d), closes 40aws-cdk/aws-lambda/lib/function.ts#L170 #​21104

v2.68.0

Bug Fixes

• apprunner-alpha: env vars and secrets can't solely be added via .add*() methods (#​24346) (45195b6), closes #​24345
• cli: cannot cdk import resources with multiple identifiers (#​24439) (a70ff1a), closes #​20895
• core: Fix dotnet version check to allow .NET 7.0 (#​24467) (a4856e9), closes #​24466
• lambda-nodejs: esbuild preCompilation tsconfig precedence is wrong (#​23871) (790a709)
• lambda-nodejs: Required auto prefix of handler with index. breaks custom non-index handler settings used by layers (#​24406) (d7a1c34), closes #​24403
• rds: add clusterResourceIdentifier property to database cluster (#​23605) (6bda4e5)

---

Alpha modules (2.68.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• servicecatalogappregistry: This commit contains destructive changes to the RAM Share.
  Since the application RAM share name is calculated by the application construct, where one property is removed. Integration test detects a breaking change where RAM share will be created. Integration test snapshot is updated to cater this destructive change.

Features

• msk: add Kafka version 3.3.2 (#​24440) (1b2014e), closes #​24432
• redshift: column compression encodings and comments can now be customised (#​24177) (1ca3e00), closes #​24165 #​23597 #​22506
• redshift: columns require an id attribute (under feature flag) (#​24272) (9a07ab0), closes #​24234

Bug Fixes

• servicecatalogappregistry: allow disabling automatic CfnOutput (#​24483) (3db1a0d), closes #​23779
• servicecatalogappregistry: Associate an application with attribute group (#​24378) (d1264c1)

---

Configuration

📅 Schedule: Branch creation - "every weekend" in timezone Europe/Prague, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[sonarcloud]

Kudos, SonarCloud Quality Gate passed!   

0 Bugs
0 Vulnerabilities
0 Security Hotspots
0 Code Smells

No Coverage information
No Duplication information