Skip to content

Commit d2af60f

Browse files
mergify[bot]mergify[bot]
authored
chore(merge-back): 2.245.0 (#37382)
See [CHANGELOG](https://github.com/aws/aws-cdk/blob/merge-back/2.245.0/CHANGELOG.md)
2 parents 2015344 + bf7816f commit d2af60f

File tree

9 files changed

+168
-13
lines changed

9 files changed

+168
-13
lines changed

‎CHANGELOG.v2.alpha.md‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,15 @@
22

33
All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
44

5+
## [2.245.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.244.0-alpha.0...v2.245.0-alpha.0) (2026-03-27)
6+
7+
8+
### Features
9+
10+
* **s3tables-alpha:** add support for partition spec, sort order, and table properties ([#36811](https://github.com/aws/aws-cdk/issues/36811)) ([2696cd1](https://github.com/aws/aws-cdk/commit/2696cd16e8e2edc8d40f1443b9c87eb6171e5d1f))
11+
* **s3tables-alpha:** add metrics configuration support for TableBucket ([#37275](https://github.com/aws/aws-cdk/issues/37275)) ([e8786f5](https://github.com/aws/aws-cdk/commit/e8786f5d782d906971f933a2d6d432309d5384d7))
12+
* **s3tables-alpha:** implement ITaggableV2 on TableBucket and Table L2 constructs ([#37277](https://github.com/aws/aws-cdk/issues/37277)) ([69c8944](https://github.com/aws/aws-cdk/commit/69c8944ea3f4abf0f4218af2fc42c8e862e8cad3)), closes [#33054](https://github.com/aws/aws-cdk/issues/33054)
13+
514
## [2.244.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.243.0-alpha.0...v2.244.0-alpha.0) (2026-03-19)
615

716

‎CHANGELOG.v2.md‎

Lines changed: 25 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2,6 +2,31 @@
22

33
All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
44

5+
## [2.245.0](https://github.com/aws/aws-cdk/compare/v2.244.0...v2.245.0) (2026-03-27)
6+
7+
8+
### Features
9+
10+
* update L1 CloudFormation resource definitions ([#37332](https://github.com/aws/aws-cdk/issues/37332)) ([6cdf84a](https://github.com/aws/aws-cdk/commit/6cdf84aa9a50ef41dae54f14c2bcf4f48d46dbd1))
11+
* **autoscaling:** add instanceLifecyclePolicy support to AutoScalingGroup Property ([#36434](https://github.com/aws/aws-cdk/issues/36434)) ([b72ffcc](https://github.com/aws/aws-cdk/commit/b72ffcc343a7bff1745dfea4d1e8de4a0d6b998e))
12+
* **cloudfront:** use JavaScript runtime 2.0 as the default for CloudFront Functions (under feature flag) ([#35941](https://github.com/aws/aws-cdk/issues/35941)) ([cd0df14](https://github.com/aws/aws-cdk/commit/cd0df148fdb0d48b14d7d161641519942083b879))
13+
* **core:** add source tracing for L1 construct property mutations ([#37285](https://github.com/aws/aws-cdk/issues/37285)) ([f0b6da8](https://github.com/aws/aws-cdk/commit/f0b6da82b49da6611f871b67497db8d5004738a2))
14+
* **ecr-assets:** add support for docker build context ([#36930](https://github.com/aws/aws-cdk/issues/36930)) ([c0849ea](https://github.com/aws/aws-cdk/commit/c0849ea241c8f8707b26f07239aa1078b196bf1c)), closes [#31598](https://github.com/aws/aws-cdk/issues/31598)
15+
* **s3:** add blockedEncryptionTypes field to s3.Bucket ([#37047](https://github.com/aws/aws-cdk/issues/37047)) ([262e8a7](https://github.com/aws/aws-cdk/commit/262e8a76e7f50cefeceff265c7d135f35c0d520f)), closes [#36988](https://github.com/aws/aws-cdk/issues/36988)
16+
* **synthetics:** add enum value for Synthetics Canary NodeJS 3.1 runtime ([#37282](https://github.com/aws/aws-cdk/issues/37282)) ([af1e89c](https://github.com/aws/aws-cdk/commit/af1e89cbf7d9d96f0c23f05fb8bdca0e9d442b7d)), closes [/docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html#CloudWatch_Synthetics_runtimeversion-syn-nodejs-3](https://github.com/aws//docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/CloudWatch_Synthetics_Library_Nodejs.html/issues/CloudWatch_Synthetics_runtimeversion-syn-nodejs-3)
17+
18+
19+
### Bug Fixes
20+
21+
* **aws-cdk-lib:** toolkit is unaware of CDK app errors ([#37294](https://github.com/aws/aws-cdk/issues/37294)) ([093de92](https://github.com/aws/aws-cdk/commit/093de927b4b5d0d0ad5c68580af1c7e7f56e12c6))
22+
* **eks:** throw error when kubectl subnets are isolated ([#37217](https://github.com/aws/aws-cdk/issues/37217)) ([73e5006](https://github.com/aws/aws-cdk/commit/73e50061168fc147d6af5fb60917ef003d385fd2)), closes [#26613](https://github.com/aws/aws-cdk/issues/26613)
23+
* **lambda:** fix typo in addPermission() warning message ([#37365](https://github.com/aws/aws-cdk/issues/37365)) ([fa21e62](https://github.com/aws/aws-cdk/commit/fa21e623484ad1ed191e542e93b16811a8ef08b6))
24+
* **lambda-nodejs:** use direct spawn for local bundling ([#37292](https://github.com/aws/aws-cdk/issues/37292)) ([9bf4263](https://github.com/aws/aws-cdk/commit/9bf4263ea631cae7c0cfff8872ec4fb3a3164cc1))
25+
* **mixin:** use withMixin in Stack to set mixin metadata in its constructs ([#37269](https://github.com/aws/aws-cdk/issues/37269)) ([293ce90](https://github.com/aws/aws-cdk/commit/293ce907d6c01e91e7f78bf9590e05aef4ae89a7)), closes [/github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts#L30](https://github.com/aws//github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/mixins/private/mixin-metadata.ts/issues/L30)
26+
* **rds:** enablePerformanceInsights false is ignored when other performance insight properties are set ([#37287](https://github.com/aws/aws-cdk/issues/37287)) ([b4bca75](https://github.com/aws/aws-cdk/commit/b4bca75d23832576840e6780bf5a62c260761cd7)), closes [#37051](https://github.com/aws/aws-cdk/issues/37051)
27+
* construct errors are rendered in a messy way ([#37290](https://github.com/aws/aws-cdk/issues/37290)) ([5104256](https://github.com/aws/aws-cdk/commit/5104256853a1cede1494ff065e9ce7abbce69e58))
28+
* **spec2cdk:** throw on unrecognized uppercase prefix in event pattern ([#37283](https://github.com/aws/aws-cdk/issues/37283)) ([c68f2f5](https://github.com/aws/aws-cdk/commit/c68f2f5961b24fba3f4a4b769e355b00d91fd6a1))
29+
530
## [2.244.0](https://github.com/aws/aws-cdk/compare/v2.243.0...v2.244.0) (2026-03-19)
631

732

‎packages/aws-cdk-lib/core/lib/analytics-data-source/classes.ts‎

Lines changed: 54 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -4595,7 +4595,8 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
45954595
'region': '*'
45964596
}
45974597
},
4598-
'removalPolicy': 'RemovalPolicy'
4598+
'removalPolicy': 'RemovalPolicy',
4599+
'requestMetricsStatus': 'RequestMetricsStatus'
45994600
},
46004601
'TablePolicy': {
46014602
'table': {
@@ -4642,10 +4643,32 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
46424643
'icebergMetadata': {
46434644
'icebergSchema': {
46444645
'schemaFieldList': {
4646+
'id': '*',
46454647
'name': '*',
46464648
'required': 'boolean',
46474649
'type': '*'
46484650
}
4651+
},
4652+
'icebergPartitionSpec': {
4653+
'fields': {
4654+
'sourceId': '*',
4655+
'transform': '*',
4656+
'name': '*',
4657+
'fieldId': '*'
4658+
},
4659+
'specId': '*'
4660+
},
4661+
'icebergSortOrder': {
4662+
'fields': {
4663+
'sourceId': '*',
4664+
'direction': 'SortDirection',
4665+
'nullOrder': 'NullOrder'
4666+
},
4667+
'orderId': '*'
4668+
},
4669+
'tableProperties': {
4670+
'key': '*',
4671+
'value': '*'
46494672
}
46504673
},
46514674
'snapshotManagement': {
@@ -8252,6 +8275,11 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
82528275
'ssmSessionPermissions': 'boolean',
82538276
'azCapacityDistributionStrategy': 'CapacityDistributionStrategy',
82548277
'deletionProtection': 'DeletionProtection',
8278+
'instanceLifecyclePolicy': {
8279+
'retentionTriggers': {
8280+
'terminateHookAbandon': 'TerminateHookAbandonAction'
8281+
}
8282+
},
82558283
'addSecurityGroup': [
82568284
{
82578285
'securityGroupId': '*',
@@ -13334,7 +13362,12 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
1333413362
'capacityRebalance': 'boolean',
1333513363
'ssmSessionPermissions': 'boolean',
1333613364
'azCapacityDistributionStrategy': 'CapacityDistributionStrategy',
13337-
'deletionProtection': 'DeletionProtection'
13365+
'deletionProtection': 'DeletionProtection',
13366+
'instanceLifecyclePolicy': {
13367+
'retentionTriggers': {
13368+
'terminateHookAbandon': 'TerminateHookAbandonAction'
13369+
}
13370+
}
1333813371
},
1333913372
'capacityProviders': '*',
1334013373
'enableFargateCapacityProviders': [],
@@ -13504,7 +13537,12 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
1350413537
'capacityRebalance': 'boolean',
1350513538
'ssmSessionPermissions': 'boolean',
1350613539
'azCapacityDistributionStrategy': 'CapacityDistributionStrategy',
13507-
'deletionProtection': 'DeletionProtection'
13540+
'deletionProtection': 'DeletionProtection',
13541+
'instanceLifecyclePolicy': {
13542+
'retentionTriggers': {
13543+
'terminateHookAbandon': 'TerminateHookAbandonAction'
13544+
}
13545+
}
1350813546
}
1350913547
],
1351013548
'addAsgCapacityProvider': [
@@ -14364,7 +14402,12 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
1436414402
'capacityRebalance': 'boolean',
1436514403
'ssmSessionPermissions': 'boolean',
1436614404
'azCapacityDistributionStrategy': 'CapacityDistributionStrategy',
14367-
'deletionProtection': 'DeletionProtection'
14405+
'deletionProtection': 'DeletionProtection',
14406+
'instanceLifecyclePolicy': {
14407+
'retentionTriggers': {
14408+
'terminateHookAbandon': 'TerminateHookAbandonAction'
14409+
}
14410+
}
1436814411
}
1436914412
],
1437014413
'addNodegroupCapacity': [
@@ -15479,7 +15522,12 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
1547915522
'capacityRebalance': 'boolean',
1548015523
'ssmSessionPermissions': 'boolean',
1548115524
'azCapacityDistributionStrategy': 'CapacityDistributionStrategy',
15482-
'deletionProtection': 'DeletionProtection'
15525+
'deletionProtection': 'DeletionProtection',
15526+
'instanceLifecyclePolicy': {
15527+
'retentionTriggers': {
15528+
'terminateHookAbandon': 'TerminateHookAbandonAction'
15529+
}
15530+
}
1548315531
}
1548415532
],
1548515533
'addNodegroupCapacity': [
@@ -22219,6 +22267,7 @@ export const AWS_CDK_CONSTRUCTOR_PROPS: { [key: string]: any } = {
2221922267
'region': '*'
2222022268
}
2222122269
},
22270+
'blockedEncryptionTypes': '*',
2222222271
'enforceSSL': 'boolean',
2222322272
'bucketKeyEnabled': 'boolean',
2222422273
'bucketName': '*',

‎packages/aws-cdk-lib/core/lib/analytics-data-source/enums.ts‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -2903,6 +2903,10 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
29032903
"AL2023_ARM_64_NVIDIA",
29042904
"AL2023_ARM_64_STANDARD"
29052905
],
2906+
"NullOrder": [
2907+
"nulls-first",
2908+
"nulls-last"
2909+
],
29062910
"NumericOverflowHandlingAction": [
29072911
"DISABLED",
29082912
"FAIL",
@@ -3454,6 +3458,10 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
34543458
0,
34553459
1
34563460
],
3461+
"RequestMetricsStatus": [
3462+
"Enabled",
3463+
"Disabled"
3464+
],
34573465
"RequireConfirmation": [
34583466
"ENABLED",
34593467
"DISABLED"
@@ -3729,6 +3737,10 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
37293737
"RAW",
37303738
"JSON"
37313739
],
3740+
"SortDirection": [
3741+
"asc",
3742+
"desc"
3743+
],
37323744
"SourceMapMode": [
37333745
"default",
37343746
"external",
@@ -3769,13 +3781,19 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
37693781
],
37703782
"SslPolicy": [
37713783
"ELBSecurityPolicy-TLS13-1-2-2021-06",
3784+
"ELBSecurityPolicy-TLS13-1-2-PQ-2025-09",
37723785
"ELBSecurityPolicy-2016-08",
37733786
"ELBSecurityPolicy-TLS13-1-2-Res-2021-06",
37743787
"ELBSecurityPolicy-TLS13-1-2-Ext1-2021-06",
37753788
"ELBSecurityPolicy-TLS13-1-2-Ext2-2021-06",
37763789
"ELBSecurityPolicy-TLS13-1-0-2021-06",
37773790
"ELBSecurityPolicy-TLS13-1-1-2021-06",
37783791
"ELBSecurityPolicy-TLS13-1-3-2021-06",
3792+
"ELBSecurityPolicy-TLS13-1-3-PQ-2025-09",
3793+
"ELBSecurityPolicy-TLS13-1-2-Res-PQ-2025-09",
3794+
"ELBSecurityPolicy-TLS13-1-2-Ext1-PQ-2025-09",
3795+
"ELBSecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09",
3796+
"ELBSecurityPolicy-TLS13-1-0-PQ-2025-09",
37793797
"ELBSecurityPolicy-TLS13-1-3-FIPS-2023-04",
37803798
"ELBSecurityPolicy-TLS13-1-2-Res-FIPS-2023-04",
37813799
"ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04",
@@ -3784,6 +3802,13 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
37843802
"ELBSecurityPolicy-TLS13-1-2-Ext2-FIPS-2023-04",
37853803
"ELBSecurityPolicy-TLS13-1-1-FIPS-2023-04",
37863804
"ELBSecurityPolicy-TLS13-1-0-FIPS-2023-04",
3805+
"ELBSecurityPolicy-TLS13-1-3-FIPS-PQ-2025-09",
3806+
"ELBSecurityPolicy-TLS13-1-2-FIPS-PQ-2025-09",
3807+
"ELBSecurityPolicy-TLS13-1-2-Res-FIPS-PQ-2025-09",
3808+
"ELBSecurityPolicy-TLS13-1-2-Ext0-FIPS-PQ-2025-09",
3809+
"ELBSecurityPolicy-TLS13-1-2-Ext1-FIPS-PQ-2025-09",
3810+
"ELBSecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09",
3811+
"ELBSecurityPolicy-TLS13-1-0-FIPS-PQ-2025-09",
37873812
"ELBSecurityPolicy-FS-1-2-Res-2020-10",
37883813
"ELBSecurityPolicy-FS-1-2-Res-2019-08",
37893814
"ELBSecurityPolicy-FS-1-2-2019-08",
@@ -4085,6 +4110,10 @@ export const AWS_CDK_ENUMS: { [key: string]: any } = {
40854110
"dedicated",
40864111
"host"
40874112
],
4113+
"TerminateHookAbandonAction": [
4114+
"retain",
4115+
"terminate"
4116+
],
40884117
"TerminationPolicy": [
40894118
"AllocationStrategy",
40904119
"ClosestToNextInstanceHour",

‎packages/aws-cdk-lib/core/lib/analytics-data-source/enums/module-enumlikes.json‎

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -472,6 +472,15 @@
472472
"NEPTUNE_1_4"
473473
]
474474
},
475+
"aws-cdk/packages/@aws-cdk/aws-s3tables-alpha/lib/table.ts": {
476+
"IcebergTransform": [
477+
"IDENTITY",
478+
"YEAR",
479+
"MONTH",
480+
"DAY",
481+
"HOUR"
482+
]
483+
},
475484
"aws-cdk/packages/@aws-cdk/aws-sagemaker-alpha/lib/accelerator-type.ts": {
476485
"AcceleratorType": [
477486
"EIA1_LARGE",
@@ -3555,6 +3564,10 @@
35553564
],
35563565
"ReplicationTimeValue": [
35573566
"FIFTEEN_MINUTES"
3567+
],
3568+
"BlockedEncryptionType": [
3569+
"NONE",
3570+
"SSE_C"
35583571
]
35593572
},
35603573
"aws-cdk/packages/aws-cdk-lib/aws-s3/lib/rule.ts": {
@@ -3671,6 +3684,7 @@
36713684
"SYNTHETICS_NODEJS_PLAYWRIGHT_4_0",
36723685
"SYNTHETICS_NODEJS_PLAYWRIGHT_5_0",
36733686
"SYNTHETICS_NODEJS_3_0",
3687+
"SYNTHETICS_NODEJS_3_1",
36743688
"SYNTHETICS_PYTHON_SELENIUM_1_0",
36753689
"SYNTHETICS_PYTHON_SELENIUM_1_1",
36763690
"SYNTHETICS_PYTHON_SELENIUM_1_2",

‎packages/aws-cdk-lib/core/lib/analytics-data-source/enums/module-enums.json‎

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1112,6 +1112,10 @@
11121112
"Enabled",
11131113
"Disabled"
11141114
],
1115+
"RequestMetricsStatus": [
1116+
"Enabled",
1117+
"Disabled"
1118+
],
11151119
"TableBucketEncryption": [
11161120
"aws:kms",
11171121
"AES256"
@@ -1124,6 +1128,14 @@
11241128
"Status": [
11251129
"enabled",
11261130
"disabled"
1131+
],
1132+
"SortDirection": [
1133+
"asc",
1134+
"desc"
1135+
],
1136+
"NullOrder": [
1137+
"nulls-first",
1138+
"nulls-last"
11271139
]
11281140
},
11291141
"aws-cdk/packages/@aws-cdk/aws-sagemaker-alpha/lib/endpoint.ts": {
@@ -1735,6 +1747,10 @@
17351747
"balanced-only",
17361748
"balanced-best-effort"
17371749
],
1750+
"TerminateHookAbandonAction": [
1751+
"retain",
1752+
"terminate"
1753+
],
17381754
"UpdateType": [
17391755
"None",
17401756
"Replace",
@@ -4718,13 +4734,19 @@
47184734
],
47194735
"SslPolicy": [
47204736
"ELBSecurityPolicy-TLS13-1-2-2021-06",
4737+
"ELBSecurityPolicy-TLS13-1-2-PQ-2025-09",
47214738
"ELBSecurityPolicy-2016-08",
47224739
"ELBSecurityPolicy-TLS13-1-2-Res-2021-06",
47234740
"ELBSecurityPolicy-TLS13-1-2-Ext1-2021-06",
47244741
"ELBSecurityPolicy-TLS13-1-2-Ext2-2021-06",
47254742
"ELBSecurityPolicy-TLS13-1-0-2021-06",
47264743
"ELBSecurityPolicy-TLS13-1-1-2021-06",
47274744
"ELBSecurityPolicy-TLS13-1-3-2021-06",
4745+
"ELBSecurityPolicy-TLS13-1-3-PQ-2025-09",
4746+
"ELBSecurityPolicy-TLS13-1-2-Res-PQ-2025-09",
4747+
"ELBSecurityPolicy-TLS13-1-2-Ext1-PQ-2025-09",
4748+
"ELBSecurityPolicy-TLS13-1-2-Ext2-PQ-2025-09",
4749+
"ELBSecurityPolicy-TLS13-1-0-PQ-2025-09",
47284750
"ELBSecurityPolicy-TLS13-1-3-FIPS-2023-04",
47294751
"ELBSecurityPolicy-TLS13-1-2-Res-FIPS-2023-04",
47304752
"ELBSecurityPolicy-TLS13-1-2-FIPS-2023-04",
@@ -4733,6 +4755,13 @@
47334755
"ELBSecurityPolicy-TLS13-1-2-Ext2-FIPS-2023-04",
47344756
"ELBSecurityPolicy-TLS13-1-1-FIPS-2023-04",
47354757
"ELBSecurityPolicy-TLS13-1-0-FIPS-2023-04",
4758+
"ELBSecurityPolicy-TLS13-1-3-FIPS-PQ-2025-09",
4759+
"ELBSecurityPolicy-TLS13-1-2-FIPS-PQ-2025-09",
4760+
"ELBSecurityPolicy-TLS13-1-2-Res-FIPS-PQ-2025-09",
4761+
"ELBSecurityPolicy-TLS13-1-2-Ext0-FIPS-PQ-2025-09",
4762+
"ELBSecurityPolicy-TLS13-1-2-Ext1-FIPS-PQ-2025-09",
4763+
"ELBSecurityPolicy-TLS13-1-2-Ext2-FIPS-PQ-2025-09",
4764+
"ELBSecurityPolicy-TLS13-1-0-FIPS-PQ-2025-09",
47364765
"ELBSecurityPolicy-FS-1-2-Res-2020-10",
47374766
"ELBSecurityPolicy-FS-1-2-Res-2019-08",
47384767
"ELBSecurityPolicy-FS-1-2-2019-08",

‎packages/aws-cdk-lib/cx-api/FEATURE_FLAGS.md‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -111,8 +111,8 @@ Flags come in three types:
111111
| [@aws-cdk/aws-route53-patterns:useDistribution](#aws-cdkaws-route53-patternsusedistribution) | Use the `Distribution` resource instead of `CloudFrontWebDistribution` | 2.233.0 | new default |
112112
| [@aws-cdk/aws-eks:useNativeOidcProvider](#aws-cdkaws-eksusenativeoidcprovider) | When enabled, EKS V2 clusters will use the native OIDC provider resource AWS::IAM::OIDCProvider instead of creating the OIDCProvider with a custom resource (iam.OpenIDConnectProvider). | 2.237.0 | fix |
113113
| [@aws-cdk/core:automaticL1Traits](#aws-cdkcoreautomaticl1traits) | Automatically use the default L1 traits for L1 constructs` | 2.239.0 | new default |
114-
| [@aws-cdk/aws-cloudfront:defaultFunctionRuntimeV2\_0](#aws-cdkaws-cloudfrontdefaultfunctionruntimev2_0) | Use cloudfront-js-2.0 as the default runtime for CloudFront Functions | V2NEXT | new default |
115-
| [@aws-cdk/aws-elasticloadbalancingv2:usePostQuantumTlsPolicy](#aws-cdkaws-elasticloadbalancingv2usepostquantumtlspolicy) | When enabled, HTTPS/TLS listeners use post-quantum TLS policy by default | V2NEXT | new default |
114+
| [@aws-cdk/aws-cloudfront:defaultFunctionRuntimeV2\_0](#aws-cdkaws-cloudfrontdefaultfunctionruntimev2_0) | Use cloudfront-js-2.0 as the default runtime for CloudFront Functions | 2.245.0 | new default |
115+
| [@aws-cdk/aws-elasticloadbalancingv2:usePostQuantumTlsPolicy](#aws-cdkaws-elasticloadbalancingv2usepostquantumtlspolicy) | When enabled, HTTPS/TLS listeners use post-quantum TLS policy by default | 2.245.0 | new default |
116116

117117
<!-- END table -->
118118

@@ -2376,7 +2376,7 @@ If `keyValueStore` is specified, the runtime will always be cloudfront-js-2.0 re
23762376
| Since | Unset behaves like | Recommended value |
23772377
| ----- | ----- | ----- |
23782378
| (not in v1) | | |
2379-
| V2NEXT | `false` | `true` |
2379+
| 2.245.0 | `false` | `true` |
23802380

23812381
**Compatibility with old behavior:** Set `runtime: FunctionRuntime.JS_1_0` explicitly to use the v1.0 runtime.
23822382

@@ -2403,7 +2403,7 @@ where `RECOMMENDED_TLS` (`ELBSecurityPolicy-TLS13-1-2-2021-06`) is used.
24032403
| Since | Unset behaves like | Recommended value |
24042404
| ----- | ----- | ----- |
24052405
| (not in v1) | | |
2406-
| V2NEXT | `false` | `true` |
2406+
| 2.245.0 | `false` | `true` |
24072407

24082408
**Compatibility with old behavior:** Disable this feature flag to preserve existing behavior where no explicit SSL policy is set.
24092409

‎packages/aws-cdk-lib/cx-api/lib/features.ts‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -1775,7 +1775,7 @@ export const FLAGS: Record<string, FlagInfo> = {
17751775
The runtime can still be configured explicitly using the \`runtime\` property.
17761776
17771777
If \`keyValueStore\` is specified, the runtime will always be cloudfront-js-2.0 regardless of this flag.`,
1778-
introducedIn: { v2: 'V2NEXT' },
1778+
introducedIn: { v2: '2.245.0' },
17791779
recommendedValue: true,
17801780
compatibilityWithOldBehaviorMd: 'Set `runtime: FunctionRuntime.JS_1_0` explicitly to use the v1.0 runtime.',
17811781
},
@@ -1797,7 +1797,7 @@ export const FLAGS: Record<string, FlagInfo> = {
17971797
When disabled (default), no explicit SSL policy is set, preserving the existing CDK behavior
17981798
where \`RECOMMENDED_TLS\` (\`ELBSecurityPolicy-TLS13-1-2-2021-06\`) is used.
17991799
`,
1800-
introducedIn: { v2: 'V2NEXT' },
1800+
introducedIn: { v2: '2.245.0' },
18011801
recommendedValue: true,
18021802
compatibilityWithOldBehaviorMd: 'Disable this feature flag to preserve existing behavior where no explicit SSL policy is set.',
18031803
},

0 commit comments

Comments
 (0)
⚡