Skip to content

feat(deps): upgrade aws-cdk-lib#1538

Merged
aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk
May 21, 2026
Merged

feat(deps): upgrade aws-cdk-lib#1538
aws-cdk-automation merged 2 commits into
mainfrom
github-actions/upgrade-aws-cdk-lib_aws-cdk

Conversation

@aws-cdk-automation
Copy link
Copy Markdown
Collaborator

Upgrades project dependencies. See details in workflow run.


Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow

Upgrades project dependencies. See details in [workflow run].

[Workflow Run]: https://github.com/aws/aws-cdk-cli/actions/runs/26198928248

------

*Automatically created by projen via the "upgrade-aws-cdk-lib_aws-cdk" workflow*

Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
@github-actions github-actions Bot added the p2 label May 21, 2026
@aws-cdk-automation aws-cdk-automation requested a review from a team May 21, 2026 00:57
@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented May 21, 2026

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

PackageVersionScoreDetails
npm/aws-cdk-lib 2.256.1 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed
npm/@aws-cdk/cloud-assembly-api 2.2.4 UnknownUnknown
npm/@aws-cdk/cloud-assembly-schema 53.27.0 UnknownUnknown
npm/aws-cdk-lib 2.256.1 🟢 5.9
Details
CheckScoreReason
Code-Review🟢 10all changesets reviewed
Maintained🟢 1030 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Packaging⚠️ -1packaging workflow not detected
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Dangerous-Workflow⚠️ 0dangerous workflow patterns detected
Pinned-Dependencies⚠️ -1internal error: internal error: invalid Dockerfile
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
License🟢 10license file detected
Branch-Protection🟢 8branch protection is not maximal on development and all release branches
Signed-Releases🟢 85 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy🟢 10security policy file detected
Binary-Artifacts⚠️ 0binaries present in source code
SAST🟢 9SAST tool detected but not run on all commits
Fuzzing🟢 10project is fuzzed

Scanned Files

  • packages/aws-cdk/package.json
  • yarn.lock

@aws-cdk-automation aws-cdk-automation added this pull request to the merge queue May 21, 2026
Merged via the queue into main with commit 9197aee May 21, 2026
41 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants