build(deps): update js-other

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-cdk/toolkit-lib (source)	1.40.0 → 1.40.1
@aws-sdk/client-cloudwatch-logs (source)	3.1124.0 → 3.1127.0
@aws-sdk/client-lambda (source)	3.1124.0 → 3.1127.0
@aws-sdk/client-sts (source)	3.1124.0 → 3.1127.0
aws-cdk-lib (source)	2.267.0 → 2.268.0
eslint (source)	10.9.1 → 10.10.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cdk-cli (@​aws-cdk/toolkit-lib)

v1.40.1

Compare Source

1.40.1 (2026-09-04)

Bug Fixes

• fatal failures hide the underlying error cause (#​1939) (5b77563)

aws/aws-sdk-js-v3 (@​aws-sdk/client-cloudwatch-logs)

v3.1127.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

v3.1126.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

v3.1125.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

aws/aws-sdk-js-v3 (@​aws-sdk/client-lambda)

v3.1127.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-lambda

v3.1126.0

Compare Source

3.1126.0(2026-09-03)

Documentation Changes

• client-sfn: Updates Step Functions API documentation around CloudTrail, Execution name reuse and sort order of ListExecutions API (8dda8b4b)
• client-elastic-load-balancing-v2: This release adds support for sending TCP resets for Gateway Load Balancer when a flow's idle timeout expires, or when a target becomes unhealthy or is deregistered. This adds updates the CLI documentation. (a16f1659)

New Features

• client-socialmessaging: Adding support for WhatsApp Flows with endpoints. (3a3a6205)
• client-transfer: AWS Transfer Family SFTP Connectors now support specifying an ordered list of AWS Secrets Manager version stages for secret retrieval. This enables seamless credential rotation workflows where external partners may take time to update their systems with new credentials. (e4bf3ecc)
• client-transcribe: Amazon Transcribe now supports specifying up to 29 PII entity types in the ContentRedaction configuration of a StartTranscriptionJob request, allowing all supported entity types to be redacted in a single batch transcription job. (5fb0b9a5)
• client-connect: This release enables TagOnCreate for Rule resource on CreateRule API. It also introduces a new field called PreEvaluationFilters to Rule resource, thereby impacting all Create, Update, Describe and Search APIs for Rules (18bb14bc)
• client-ecs: Adds a critical parameter to the Amazon ECS managed daemon APIs that controls whether a daemon task failure drains the container instance. Non-critical daemon failures no longer drain the instance or block instance registration. (2e6a07d5)
• client-evs: Amazon EVS now allows users to set, update, and retrieve values for parameters that apply across all EVS Environments in their account at a regional level, such as the VCF License portability core count. (803b694c)
• client-drs: AWS Elastic Disaster Recovery now includes source server architecture in SourceProperties to identify x86 and ARM64 systems. (20f19e0e)
• client-bedrock-agentcore: Adds log group name prefix trace source selection, custom or source log group result destinations, and metrics namespace customization (823b2d33)
• client-bedrock-agentcore-control: AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization. (2f826477)
• client-eks: Deprecate EncryptionConfig resources field. Amazon EKS encrypts all Kubernetes API data with envelope encryption by default for clusters running Kubernetes version 1.28 or higher, so this field no longer affects which resources are encrypted. (c66ca41b)
• client-guardduty: Adding support for Sequence Activities in GuardDuty Findings (5c12a0eb)
• lib-transfer-manager: add download directory functionality (#​8274) (6e591ee8)

---

For list of updated packages, view updated-packages.md in assets-3.1126.0.zip

v3.1125.0

Compare Source

3.1125.0(2026-09-02)

New Features

• client-ec2: This release adds support to retain interruptible Capacity Reservations in an active state when all capacity is reclaimed. (336c7896)
• client-sagemaker-featurestore-runtime: Amazon SageMaker Feature Store now supports the UpdateRecord API, enabling partial updates to individual feature values in an existing Online Store record without rewriting the entire record. This reduces write payloads and latency for high-frequency feature-level writes . (71920960)
• client-sagemaker: Amazon SageMaker Feature Store now supports the Standard V2 online store type, which enables feature-level writes to feature groups. You can select Standard V2 when creating a feature group, and update the storage type of an existing feature group via UpdateFeatureGroup. (5287db7f)
• client-odb: Adds the ListFlexComponents API for listing the flex components available for a given DB system shape. (551174bf)
• client-mgn: AWS Transform for migrations adds a second network migration option - apply your source security posture to existing VPCs. Upload a source network file with firewall rules, tag the in-scope VPCs, and AWS Transform matches source subnets to them by CIDR and generates the security groups. (822144b2)
• client-mwaa: Enabled customers to clear optional S3 paths (plugins, requirements, and startup script) for their Amazon MWAA environments by accepting empty strings for the associated fields in UpdateEnvironment requests. (9fa2e0c1)
• client-bedrock-agentcore: Batch evaluation now supports up to 10 CloudWatch log groups per CloudWatchLogsSource (cebd3179)
• client-medialive: AWS Elemental MediaLive now supports AB forensic video watermarking (d48e9e15)
• client-appintegrations: This release adds a force parameter to DeleteApplication and a ConflictException to UpdateApplication, letting customers delete applications with existing associations in one call and get a clear error when an update conflicts with the application's current state. (62b7304c)

Bug Fixes

• cloudfront-signer: preserve plus in query strings when signing URLs (#​8283) (dd76a0dd)

---

For list of updated packages, view updated-packages.md in assets-3.1125.0.zip

aws/aws-sdk-js-v3 (@​aws-sdk/client-sts)

v3.1127.0

Compare Source

3.1127.0(2026-09-04)

New Features

• client-mediatailor: Elemental MediaTailor now supports two new Monetization Functions lifecycle hooks, Post Ads Response and Pre Manifest Insertion, and a VAST Request function type that calls a VAST or VMAP ad server. This release also adds Yield Optimization with demand from Amazon Publisher Services. (c238a693)
• client-service-quotas: Service Quotas adds the AdjustableAtLevel property to QuotaContext, indicating whether a quota is adjustable at the account or resource level. (f56bdf2c)
• client-bedrock: New AWS REVIEW mode as supported data retention mode for Bedrock models (cbd9ea9a)
• client-ec2: Adds support for ValidateSecurityGroupQuotasForInterface, an API that specifically authorized AWS services use to validate security group rule quotas before creating an elastic network interface. (f51c3b3e)

---

For list of updated packages, view updated-packages.md in assets-3.1127.0.zip

v3.1126.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1125.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

aws/aws-cdk (aws-cdk-lib)

v2.268.0

Compare Source

⚠ BREAKING CHANGES

L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-athena: AWS::Athena::Session removed.
• aws-bcmdataexports: AWS::BCMDataExports::Table removed.
• aws-bedrock: AWS::Bedrock::DefaultPromptRouter and AWS::Bedrock::ModelInvocationJob removed.
• aws-bedrockagentcore: AWS::BedrockAgentCore::Browser, AWS::BedrockAgentCore::CodeInterpreter, and AWS::BedrockAgentCore::TokenVault removed; AWS::BedrockAgentCore::PaymentConnector ConnectorType and AWS::BedrockAgentCore::PaymentCredentialProvider CredentialProviderVendor are now immutable; AWS::BedrockAgentCore::CapacityProvider OperatingSystem allowed values in the LaunchParameters type reduced from [LINUX_X86_64, LINUX_ARM64, MAC_ARM64, WINDOWS_X86_64] to [LINUX_X86_64, LINUX_ARM64].
• aws-certificatemanager: AWS::CertificateManager::Certificate Id attribute removed.
• aws-chime: on both AWS::Chime::AppInstance and AWS::Chime::AppInstanceBot, the CreatedTimestamp and LastUpdatedTimestamp attribute types changed from number to string.
• aws-cloudformation: AWS::CloudFormation::ResourceScan removed.
• aws-codeartifact: AWS::CodeArtifact::Package removed.
• aws-codebuild: AWS::CodeBuild::Sandbox removed; AWS::CodeBuild::SourceCredential Id attribute removed.
• aws-dax: AWS::DAX::ParameterGroup Id attribute removed; Description property is now immutable.
• aws-dms: Id attribute removed from AWS::DMS::Endpoint, AWS::DMS::EventSubscription, and AWS::DMS::ReplicationSubnetGroup; AWS::DMS::ReplicationTask MigrationType property is now immutable.
• aws-docdb: Id attribute removed from AWS::DocDB::DBClusterParameterGroup and AWS::DocDB::DBSubnetGroup.
• aws-dynamodb: AWS::DynamoDB::Export removed.
• aws-elasticache: AWS::ElastiCache::ReservedCacheNode removed.
• aws-emr: AWS::EMR::NotebookExecution removed.
• aws-events: AWS::Events::Replay removed.
• aws-fis: AWS::FIS::SafetyLever removed.
• aws-glue:
  • Id attribute removed from AWS::Glue::Classifier, AWS::Glue::Connection, AWS::Glue::CustomEntityType, AWS::Glue::DataQualityRuleset, AWS::Glue::MLTransform, AWS::Glue::SecurityConfiguration, AWS::Glue::TableOptimizer, and AWS::Glue::Workflow.
  • AWS::Glue::Connection: complex-property types AuthenticationConfigurationInput and OAuth2PropertiesInput renamed to AuthenticationConfiguration and OAuth2Properties respectively.
  • AWS::Glue::DataQualityRuleset: Name, TargetTable.DatabaseName, and TargetTable.TableName properties are now required; Name property is now immutable; Tags property type changed from json to map<string>.
  • AWS::Glue::CustomEntityType: Name property is now immutable; Tags property is no longer recognised as resource tags.
  • AWS::Glue::MLTransform: TransformEncryption property is now immutable.
• aws-greengrassv2: AWS::GreengrassV2::Component and AWS::GreengrassV2::CoreDevice removed.
• aws-identitystore: AWS::IdentityStore::AllGroupMemberships removed.
• aws-imagebuilder: AWS::ImageBuilder::AllImageBuildVersions, AWS::ImageBuilder::AllWorkflowBuildVersions, AWS::ImageBuilder::WorkflowExecution, and AWS::ImageBuilder::WorkflowStepExecution removed.
• aws-medialive: AWS::MediaLive::Offering removed.
• aws-mediaconvert: AWS::MediaConvert::Preset Id attribute removed.
• aws-mediapackage: AWS::MediaPackage::HarvestJob removed.
• aws-memorydb: AWS::MemoryDB::MultiRegionParameterGroup and AWS::MemoryDB::ReservedNode removed.
• aws-omics: AWS::Omics::Reference removed.
• aws-osis: AWS::OSIS::PipelineBlueprint removed.
• aws-personalize: AWS::Personalize::DataDeletionJob and AWS::Personalize::Recipe removed.
• aws-redshiftserverless: AWS::RedshiftServerless::RecoveryPoint removed.
• aws-route53: AWS::Route53::RecordSet GeoProximityLocation property removed, along with its supporting GeoProximityLocation and Coordinates complex-property types; Id attribute removed.
• aws-sagemaker: AWS::SageMaker::ModelCardExportJob, AWS::SageMaker::MonitoringScheduleAlert, and AWS::SageMaker::TransformJob removed.
• aws-ses: AWS::SES::ReceiptRuleSet Id attribute removed.
• aws-signer: AWS::Signer::SigningJob removed.
• aws-ssm: AWS::SSM::Session removed; AWS::SSM::Association InstanceId property is now immutable.
• aws-sso: AWS::SSO::ApplicationProvider removed.
• aws-stepfunctions: AWS::StepFunctions::MapRun removed.
• aws-transcribe: AWS::Transcribe::MedicalTranscriptionJob removed.
• aws-vpclattice: AWS::VpcLattice::ServiceNetwork SharingConfig property is now immutable.

Features

• update L1 CloudFormation resource definitions (#​38732) (53fdc99)
• codebuild: add Node.js 24 Lambda build image constants (#​38471) (41ca888), closes #​38172 #​34197
• ec2: support CpuOptions on LaunchTemplate (#​38193) (b0f7d9c), closes #​38187
• medialive: new AWS Elemental MediaLive L2 Construct with integration on MediaConnect L2 alpha (#​38563) (730b2ee)
• update L1 CloudFormation resource definitions (#​38645) (e238f54)
• update L1 CloudFormation resource definitions (#​38693) (51234fd)
• s3-deployment: run the deployment handler on arm64 (Graviton) (#​37174) (c2df7a3), closes #​29996

Bug Fixes

• core: ignored external symlinks throw validation error (#​38679) (8fd1ef6)
• core: templates are not checked for circular dependencies (#​38712) (688b0c1)
• core: upgrade CloudFormation validation to latest version (#​38668) (d5df2ee)
• eks-v2: generate and export L1 constructs from aws-eks-v2 (#​37640) (ecdafa9), closes #​37563 #​37350 #​37350
• s3-deployment: replace deprecated addDependency in integ test (#​38684) (43c4921)

---

Alpha modules (2.268.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: DataQualityTargetTable's constructor is removed — use DataQualityTargetTable.fromTable(database, table) or fromTableName(database, tableName); IDatabase now extends IDatabaseRef.
• glue-alpha: DataQualityRulesetProps.clientToken is removed; use the CfnDataQualityRuleset L1 for request-level idempotency.
• glue-alpha: S3Table.clientSideEncryptionKey is now kms.IKeyRef instead of kms.IKey.
• glue-alpha: DataQualityRulesetProps.rulesetName is now required. AWS::Glue::DataQualityRuleset made Name a required property, so the name can no longer be left for CloudFormation to generate.

Features

• glue-alpha: reference-typed DataQualityTargetTable and remove clientToken (#​38730) (c8fafbd)

Code Refactoring

• glue-alpha: use kms.IKeyRef for KMS key inputs where possible (#​38725) (604ac23)

eslint/eslint (eslint)

v10.10.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.