Bumps aws-cdk-lib from 2.250.0 to 2.262.0.

Sourced from aws-cdk-lib's releases.

v2.262.0

Features

• ecs: add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689) (ad665c4)
• mediaconnect: l2 construct (#37945) (8e9e001)
• update L1 CloudFormation resource definitions (#38275) (2b1c632)
• apigateway: alb integration (#36247) (20dbdd9), closes #36184
• bedrockagentcore: support service/region in IAM credential provider for gateway targets (#37697) (08a2543), closes #37696
• cloudfront: add Managed-HostHeaderOnly origin request policy (#38236) (0e66e47), closes #38234
• core: templates are validated against a comprehensive default rule set (#38135) (023c5bf)

Bug Fixes

• cross-stack warnings are emitted for nested stacks (#38355) (db98909)
• apigateway: revert alb integration that breaks jsii go packaging (#38305) (18158a4), closes #36247 #36247 #36247 #36247
• aws-cdk-lib: fatal validations don't show plugin name (#38273) (a88d1ba)
• aws-cdk-lib: validation namespaces for annotations are inconsistent (#38256) (75893d9)
• backup: lifecycle and vault lock validations reject tokenized durations (#38264) (0ff20a3), closes #38263 #38246 #37751 #25943 #38246 #37751 #25943
• certificatemanager: use hasOwnProperty in apexDomain to prevent prototype collision (#37195) (ec38947), closes #37193
• cloudfront-origins: validate httpPort and httpsPort range in HttpOrigin (#37872) (8a62b58)
• core: stack-related validation has an empty construct path (#38350) (0af7c34)
• core: stack.node.addDependency gets slower as stacks grow (#38314) (0728618)
• core: synth crashes with EISDIR on a symlink-to-directory when a validation plugin is registered (#38299) (be0fdc4), closes #38295
• elasticloadbalancingv2: improve handling for dropInvalidHeaderFields in case of default or switching from true to false (#36483) (208b9db), closes #36409
• lambda: allow SnapStart for container image functions (#38265) (586dc4f), closes #30898
• lambda: validations reject tokenized provisioned concurrency and async invoke config values (#38246) (4aa7e78), closes #38245 #37197 #36275 #37197
• opensearchservice: allow gp3 ebs throughput up to 2000 MiB/s (#38001) (f0cfc5b), closes #38000 #36074
• spec2cdk: add IVS to event pattern method name prefixes (#38322) (d6d1e8d)
• validation: incorrectly relative paths in Cloud Assemblies (#38352) (3f9422f), closes #38333
• validation: validation reports are not self-contained (#38333) (5d11d70)

Reverts

• lambda: revert SnapStart for container image functions (#38265) (#38281) (3b92863)

---

Alpha modules (2.262.0-alpha.0)

Bug Fixes

• redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

v2.261.0

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-cloudwatch: AWS::CloudWatch::LogAlarm: QueryLanguage property has been removed from the ScheduledQueryConfiguration type.
• aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: Id attribute has been removed and the primary identifier is now LoadBalancerName.

... (truncated)

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.262.0-alpha.0 (2026-07-22)

Bug Fixes

• redshift-alpha: quote identifiers and escape literals containing special characters (#38269) (3cb6844)

2.261.0-alpha.0 (2026-07-02)

Features

• metrics-facade-alpha: generate metrics facades (#37334) (aa9beb0)

2.260.0-alpha.0 (2026-06-16)

2.259.0-alpha.0 (2026-06-11)

2.258.1-alpha.0 (2026-06-08)

2.258.0-alpha.0 (2026-06-04)

Features

• integ-tests-alpha: add option to set the provider log level (#38005) (c634a79)

Bug Fixes

• custom-resource-handlers: deterministic asset hashes for generated lambdas (#37634) (6c3d5bc), closes #34307
• glue-alpha: deprecate Ray Jobs (#38055) (3fa428b)
• glue-alpha: restore notifyDelayAfter to PySpark and Scala Spark ETL jobs (#37815) (05be88a), closes #33839
• integ-tests-alpha: assertion failures print too much unnecessary information (#37974) (bc0de1d)
• mediapackagev2-alpha: cdnAuth on OriginEndpoint now generates the required policy (#38013) (1d56b46)

2.257.0-alpha.0 (2026-05-21)

2.256.1-alpha.0 (2026-05-20)

2.256.0-alpha.0 (2026-05-19)

2.255.0-alpha.0 (2026-05-18)

Features

... (truncated)

• dd8ac9f Merge remote-tracking branch 'origin/v2-release' into bump/2.262.0
• 7e00626 chore(release): 2.262.0
• db98909 fix: cross-stack warnings are emitted for nested stacks (#38355)
• 3f9422f fix(validation): incorrectly relative paths in Cloud Assemblies (#38352)
• 0af7c34 fix(core): stack-related validation has an empty construct path (#38350)
• 5d11d70 fix(validation): validation reports are not self-contained (#38333)
• 813b790 chore(core): upgrade @​aws/cloudformation-validate to 1.5.0-beta and and updat...
• 0728618 fix(core): stack.node.addDependency gets slower as stacks grow (#38314)
• ad665c4 feat(ecs): add support ECS-optimized Amazon Linux 2023 (Neuron) AMI (#34689)
• f0cfc5b fix(opensearchservice): allow gp3 ebs throughput up to 2000 MiB/s (#38001)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.