Bumps software.amazon.awscdk:aws-cdk-lib from 2.155.0 to 2.253.0.

Sourced from software.amazon.awscdk:aws-cdk-lib's releases.

v2.253.0

Features

• update L1 CloudFormation resource definitions (#37753) (a661c2d)
• apigatewayv2-integrations: auto-include EventBusName in HttpEventBridgeIntegration default parameter mapping (#36780) (9734bb4), closes #36775
• core: add Fn::GetStackOutput for cross-region references (#37724) (ffae861)
• core: integrate construct annotations into validation report (#37712) (438bd0b)
• synthetics: add Playwright 5.1 and 6.0 runtimes (#37665) (c1afb43)
• emr instance fleet priority allocation (#35731) (db1188a), closes #35710 /github.com/aws/aws-cdk/blob/3ec6d06c7c58e4f14b3fb114d7c35dc6d01794d9/packages/aws-cdk-lib/aws-stepfunctions-tasks/lib/emr/private/cluster-utils.ts#L91

Bug Fixes

• cloudfront: skip cachePolicyName length validation for unresolved tokens (#37751) (3b96e97), closes #23567 #34102
• cloudwatch: remove false positive warning for CDK tokens in MathExpression (#36882) (c29dc17), closes #34977
• codebuild: correct S3 log encryption boolean inversion (#37761) (4031918)
• ecs: enabling the circuitBreaker is not recommended loudly enough (#37755) (a52af7d)
• eks: add dependency from HelmChart custom resource to s3 chartAsset IAM policy (#37731) (99d0a5b), closes #19880

---

Alpha modules (2.253.0-alpha.0)

Features

• bedrock-agentcore-alpha: add OnlineEvaluationConfig and Evaluator L2 constructs (#37615) (c13de04), closes #37614
• glue-alpha: add extraPythonFiles support to PythonShellJob (#37130) (c9c6f9c), closes #34448

Bug Fixes

• bedrock-agentcore-alpha: self-managed memory strategy validation throws on unresolved tokens (#37691) (7956537), closes #37197

v2.252.0

Features

• core: Validations class now supports addWarning, addError, and acknowledge (#37668) (5e8083c), closes aws/aws-cdk-rfcs#899
• core: add Box API for deferred values with accurate stack traces (#37604) (d592a96)

Bug Fixes

• aws-cdk-lib: cannot be used as a bundledDependency (#37726) (6ba0598), closes #37717
• s3: resolve S3 notification removal race condition (#37708) (dc5be98), closes #37667

---

Alpha modules (2.252.0-alpha.0)

v2.251.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup attribute removed.

... (truncated)

Sourced from software.amazon.awscdk:aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.266.0-alpha.0 (2026-08-19)

⚠ BREAKING CHANGES

• glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
• glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
• glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
• glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
• glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
• glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

• glue-alpha: add warning for maxRetries when job run queuing is enabled (#38575) (09ae11e)
• glue-alpha: model SecurityConfiguration encryption as factory subtypes (#38586) (e37e7a6)
• glue-alpha: new hasEncryptedData property (#38511) (c977e36)
• glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#38576) (5f3b1b6)
• glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#38587) (fd01268)

Bug Fixes

• glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#38593) (35aefaf)
• glue-alpha: omit comments from struct type strings (#38008) (5f16a86), closes #26935
• mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#38582) (74d922c), closes #38581

2.265.0-alpha.0 (2026-08-13)

⚠ BREAKING CHANGES

• glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
• glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

• glue-alpha: default Flex jobs to Glue 5.0 (#38543) (36d4976)
• glue-alpha: removal policy is RETAIN for Database by default (#38535) (9669928)
• glue-alpha: warn on plaintext secrets (#38538) (10bf0b5)

Bug Fixes

• glue-alpha: warn when S3Table grants cover a shared bucket (#38542) (d81d2d6)

... (truncated)

• a6eb4e1 chore(release): 2.253.0 (#37770)
• 10d65f9 chore: trigger build
• 55a4299 chore: update analytics metadata blueprints
• e9c0b5a chore(release): 2.253.0
• a52af7d fix(ecs): enabling the circuitBreaker is not recommended loudly enough (#37755)
• a661c2d feat: update L1 CloudFormation resource definitions (#37753)
• c29dc17 fix(cloudwatch): remove false positive warning for CDK tokens in MathExpressi...
• dedf99b chore: replace Lazy with IBox (#37739)
• 4031918 fix(codebuild): correct S3 log encryption boolean inversion (#37761)
• 99d0a5b fix(eks): add dependency from HelmChart custom resource to s3 chartAsset IAM ...
• Additional commits viewable in compare view