chore: npm-check-updates && yarn upgrade

Ran npm-check-updates and yarn upgrade to keep the `yarn.lock` file up-to-date.

package.json

@@ -20,18 +20,18 @@
     "@types/prettier": "2.6.0",
     "@yarnpkg/lockfile": "^1.1.0",
     "aws-sdk-js-codemod": "^0.28.2",
-    "cdk-generate-synthetic-examples": "^0.2.1",
+    "cdk-generate-synthetic-examples": "^0.2.4",
     "conventional-changelog-cli": "^2.2.2",
     "fs-extra": "^9.1.0",
     "graceful-fs": "^4.2.11",
     "jest-junit": "^13.2.0",
     "jsii-diff": "1.98.0",
     "jsii-pacmak": "1.98.0",
     "jsii-reflect": "1.98.0",
-    "lerna": "^8.1.2",
+    "lerna": "^8.1.3",
     "nx": "^18.3.4",
     "patch-package": "^6.5.1",
-    "semver": "^7.6.0",
+    "semver": "^7.6.2",
     "standard-version": "^9.5.0",
     "ts-jest": "^29.1.2",
     "ts-node": "^10.9.2",

packages/@aws-cdk-testing/cli-integ/package.json

@@ -39,7 +39,7 @@
   },
   "dependencies": {
     "@octokit/rest": "^18.12.0",
-    "aws-sdk": "^2.1610.0",
+    "aws-sdk": "^2.1620.0",
     "axios": "^1.6.8",
     "fs-extra": "^9.1.0",
     "glob": "^7.2.3",
@@ -48,9 +48,9 @@
     "make-runnable": "^1.4.1",
     "npm": "^8.19.4",
     "p-queue": "^6.6.2",
-    "semver": "^7.6.0",
+    "semver": "^7.6.2",
     "sinon": "^9.2.4",
-    "ts-mock-imports": "^1.3.8",
+    "ts-mock-imports": "^1.3.15",
     "yaml": "1.10.2",
     "yargs": "^17.7.2"
   },

packages/@aws-cdk-testing/framework-integ/package.json

@@ -42,10 +42,10 @@
     "@aws-cdk/lambda-layer-kubectl-v24": "^2.0.242",
     "@aws-cdk/lambda-layer-kubectl-v29": "^2.0.0",
     "aws-cdk-lib": "0.0.0",
-    "aws-sdk": "^2.1610.0",
+    "aws-sdk": "^2.1620.0",
     "aws-sdk-mock": "5.6.0",
-    "cdk8s": "2.68.65",
-    "cdk8s-plus-27": "2.9.1",
+    "cdk8s": "2.68.69",
+    "cdk8s-plus-27": "2.9.3",
     "constructs": "^10.0.0"
   },
   "repository": {

packages/@aws-cdk/cloud-assembly-schema/package.json

@@ -110,7 +110,7 @@
   "stability": "stable",
   "dependencies": {
     "jsonschema": "^1.4.1",
-    "semver": "^7.6.0"
+    "semver": "^7.6.2"
   },
   "awscdkio": {
     "announce": false

packages/@aws-cdk/custom-resource-handlers/package.json

@@ -55,8 +55,8 @@
     "sinon": "^9.2.4",
     "nock": "^13.5.4",
     "fs-extra": "^11.2.0",
-    "esbuild": "^0.20.2",
-    "aws-sdk": "^2.1610.0"
+    "esbuild": "^0.21.2",
+    "aws-sdk": "^2.1620.0"
   },
   "dependencies": {
     "@aws-cdk/asset-node-proxy-agent-v6": "^2.0.3",

packages/@aws-cdk/cx-api/FEATURE_FLAGS.md

@@ -68,7 +68,8 @@ Flags come in three types:
 | [@aws-cdk/aws-codepipeline:defaultPipelineTypeToV2](#aws-cdkaws-codepipelinedefaultpipelinetypetov2) | Enables Pipeline to set the default pipeline type to V2. | 2.133.0 | (default) |
 | [@aws-cdk/aws-kms:reduceCrossAccountRegionPolicyScope](#aws-cdkaws-kmsreducecrossaccountregionpolicyscope) | When enabled, IAM Policy created from KMS key grant will reduce the resource scope to this key only. | 2.134.0 | (fix) |
 | [@aws-cdk/aws-eks:nodegroupNameAttribute](#aws-cdkaws-eksnodegroupnameattribute) | When enabled, nodegroupName attribute of the provisioned EKS NodeGroup will not have the cluster name prefix. | 2.139.0 | (fix) |
-| [@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume) | When enabled, the default volume type of the EBS volume will be GP3 | V2NEXT | (default) |
+| [@aws-cdk/aws-ec2:ebsDefaultGp3Volume](#aws-cdkaws-ec2ebsdefaultgp3volume) | When enabled, the default volume type of the EBS volume will be GP3 | 2.140.0 | (default) |
+| [@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope) | Remove the root account principal from PipelineAssetsFileRole trust policy | 2.141.0 | (default) |
 
 <!-- END table -->
 
@@ -171,6 +172,7 @@ are migrating a v1 CDK project to v2, explicitly set any of these flags which do
 | [@aws-cdk/aws-apigateway:usagePlanKeyOrderInsensitiveId](#aws-cdkaws-apigatewayusageplankeyorderinsensitiveid) | Allow adding/removing multiple UsagePlanKeys independently | (fix) | 1.98.0 | `false` | `true` |
 | [@aws-cdk/aws-lambda:recognizeVersionProps](#aws-cdkaws-lambdarecognizeversionprops) | Enable this feature flag to opt in to the updated logical id calculation for Lambda Version created using the  `fn.currentVersion`. | (fix) | 1.106.0 | `false` | `true` |
 | [@aws-cdk/aws-cloudfront:defaultSecurityPolicyTLSv1.2\_2021](#aws-cdkaws-cloudfrontdefaultsecuritypolicytlsv12_2021) | Enable this feature flag to have cloudfront distributions use the security policy TLSv1.2_2021 by default. | (fix) | 1.117.0 | `false` | `true` |
+| [@aws-cdk/pipelines:reduceAssetRoleTrustScope](#aws-cdkpipelinesreduceassetroletrustscope) | Remove the root account principal from PipelineAssetsFileRole trust policy | (default) |  | `false` | `true` |
 
 <!-- END diff -->
 
@@ -185,7 +187,8 @@ Here is an example of a `cdk.json` file that restores v1 behavior for these flag
     "@aws-cdk/aws-rds:lowercaseDbIdentifier": false,
     "@aws-cdk/aws-apigateway:usagePlanKeyOrderInsensitiveId": false,
     "@aws-cdk/aws-lambda:recognizeVersionProps": false,
-    "@aws-cdk/aws-cloudfront:defaultSecurityPolicyTLSv1.2_2021": false
+    "@aws-cdk/aws-cloudfront:defaultSecurityPolicyTLSv1.2_2021": false,
+    "@aws-cdk/pipelines:reduceAssetRoleTrustScope": false
   }
 }
 ```
@@ -1293,9 +1296,25 @@ When this featuer flag is enabled, the default volume type of the EBS volume wil
 | Since | Default | Recommended |
 | ----- | ----- | ----- |
 | (not in v1) |  |  |
-| V2NEXT | `false` | `true` |
+| 2.140.0 | `false` | `true` |
 
 **Compatibility with old behavior:** Pass `volumeType: EbsDeviceVolumeType.GENERAL_PURPOSE_SSD` to `Volume` construct to restore the previous behavior.
 
 
+### @aws-cdk/pipelines:reduceAssetRoleTrustScope
+
+*Remove the root account principal from PipelineAssetsFileRole trust policy* (default)
+
+When this feature flag is enabled, the root account principal will not be added to the trust policy of asset role.
+When this feature flag is disabled, it will keep the root account principal in the trust policy.
+
+
+| Since | Default | Recommended |
+| ----- | ----- | ----- |
+| (not in v1) |  |  |
+| 2.141.0 | `true` | `true` |
+
+**Compatibility with old behavior:** Disable the feature flag to add the root account principal back
+
+
 <!-- END details -->

packages/@aws-cdk/cx-api/package.json

@@ -79,7 +79,7 @@
     "organization": true
   },
   "dependencies": {
-    "semver": "^7.6.0"
+    "semver": "^7.6.2"
   },
   "peerDependencies": {
     "@aws-cdk/cloud-assembly-schema": "0.0.0"

packages/@aws-cdk/integ-runner/THIRD_PARTY_LICENSES

@@ -643,26 +643,6 @@ licenses; we recommend you read them, as their terms may differ from the
 terms above.
 
 
-----------------
-
-** [email protected] - https://www.npmjs.com/package/lru-cache/v/6.0.0 | ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
 ----------------
 
 ** [email protected] - https://www.npmjs.com/package/normalize-path/v/3.0.0 | MIT
@@ -770,7 +750,7 @@ SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
 
 ----------------
 
-** [email protected].0 - https://www.npmjs.com/package/semver/v/7.6.0 | ISC
+** [email protected].2 - https://www.npmjs.com/package/semver/v/7.6.2 | ISC
 The ISC License
 
 Copyright (c) Isaac Z. Schlueter and Contributors
@@ -1163,26 +1143,6 @@ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
 THIS SOFTWARE.
 
 
-----------------
-
-** [email protected] - https://www.npmjs.com/package/yallist/v/4.0.0 | ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
 ----------------
 
 ** [email protected] - https://www.npmjs.com/package/yargs-parser/v/20.2.9 | ISC

packages/aws-cdk-lib/package.json

@@ -129,7 +129,7 @@
     "jsonschema": "^1.4.1",
     "minimatch": "^3.1.2",
     "punycode": "^2.3.1",
-    "semver": "^7.6.0",
+    "semver": "^7.6.2",
     "table": "^6.8.2",
     "yaml": "1.10.2",
     "mime-types": "^2.1.35"
@@ -162,26 +162,26 @@
     "@smithy/util-stream": "^2.2.0",
     "@types/aws-lambda": "^8.10.137",
     "@types/jest": "^29.5.12",
-    "@types/lodash": "^4.17.0",
+    "@types/lodash": "^4.17.1",
     "@types/punycode": "^2.1.4",
     "@types/mime-types": "^2.1.4",
     "@aws-cdk/lazify": "0.0.0",
-    "aws-sdk": "^2.1610.0",
+    "aws-sdk": "^2.1620.0",
     "aws-sdk-client-mock": "^3.1.0",
     "aws-sdk-client-mock-jest": "^3.1.0",
     "aws-sdk-mock": "5.8.0",
-    "cdk8s": "2.68.65",
+    "cdk8s": "2.68.69",
     "constructs": "^10.0.0",
     "delay": "5.0.0",
-    "esbuild": "^0.20.2",
+    "esbuild": "^0.21.2",
     "fast-check": "^3.18.0",
     "jest": "^29.7.0",
     "jest-each": "^29.7.0",
     "lambda-tester": "^4.0.1",
     "lodash": "^4.17.21",
     "nock": "^13.5.4",
     "sinon": "^9.2.4",
-    "ts-mock-imports": "^1.3.8",
+    "ts-mock-imports": "^1.3.15",
     "ts-node": "^10.9.2",
     "typescript": "~5.4.5",
     "typescript-json-schema": "^0.63.0"

packages/aws-cdk/THIRD_PARTY_LICENSES

@@ -286,7 +286,7 @@ THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES WITH RE
 
 ----------------
 
-** aws-sdk@2.1610.0 - https://www.npmjs.com/package/aws-sdk/v/2.1610.0 | Apache-2.0
+** aws-sdk@2.1620.0 - https://www.npmjs.com/package/aws-sdk/v/2.1620.0 | Apache-2.0
 AWS SDK for JavaScript
 Copyright 2012-2017 Amazon.com, Inc. or its affiliates. All Rights Reserved.
 
@@ -484,7 +484,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------
 
-** cdk-from-cfn@0.159.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.159.0 | MIT OR Apache-2.0
+** cdk-from-cfn@0.161.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.161.0 | MIT OR Apache-2.0
 
 ----------------
 
@@ -2108,26 +2108,6 @@ licenses; we recommend you read them, as their terms may differ from the
 terms above.
 
 
-----------------
-
-** [email protected] - https://www.npmjs.com/package/lru-cache/v/6.0.0 | ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
 ----------------
 
 ** [email protected] - https://www.npmjs.com/package/lru-cache/v/7.18.3 | ISC
@@ -2933,7 +2913,7 @@ Copyright (c) 2010-2022 Mathias Bynens <https://mathiasbynens.be/>
 
 ----------------
 
-** [email protected].0 - https://www.npmjs.com/package/semver/v/7.6.0 | ISC
+** [email protected].2 - https://www.npmjs.com/package/semver/v/7.6.2 | ISC
 The ISC License
 
 Copyright (c) Isaac Z. Schlueter and Contributors
@@ -3516,26 +3496,6 @@ TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF
 THIS SOFTWARE.
 
 
-----------------
-
-** [email protected] - https://www.npmjs.com/package/yallist/v/4.0.0 | ISC
-The ISC License
-
-Copyright (c) Isaac Z. Schlueter and Contributors
-
-Permission to use, copy, modify, and/or distribute this software for any
-purpose with or without fee is hereby granted, provided that the above
-copyright notice and this permission notice appear in all copies.
-
-THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
-WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
-MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
-ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
-WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
-ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF OR
-IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-
-
 ----------------
 
 ** [email protected] - https://www.npmjs.com/package/yaml/v/1.10.2 | ISC

packages/aws-cdk/lib/init-templates/app/typescript/package.json

@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",
-    "@types/node": "20.12.7",
+    "@types/node": "20.12.12",
     "jest": "^29.7.0",
     "ts-jest": "^29.1.2",
     "aws-cdk": "%cdk-version%",

packages/aws-cdk/lib/init-templates/lib/typescript/package.json

@@ -10,7 +10,7 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",
-    "@types/node": "20.12.7",
+    "@types/node": "20.12.12",
     "aws-cdk-lib": "%cdk-version%",
     "constructs": "%constructs-version%",
     "jest": "^29.7.0",

packages/aws-cdk/lib/init-templates/sample-app/typescript/package.json

@@ -12,7 +12,7 @@
   },
   "devDependencies": {
     "@types/jest": "^29.5.12",
-    "@types/node": "20.12.7",
+    "@types/node": "20.12.12",
     "jest": "^29.7.0",
     "ts-jest": "^29.1.2",
     "aws-cdk": "%cdk-version%",

packages/aws-cdk/package.json

@@ -92,7 +92,7 @@
     "nock": "^13.5.4",
     "sinon": "^9.2.4",
     "ts-jest": "^29.1.2",
-    "ts-mock-imports": "^1.3.8",
+    "ts-mock-imports": "^1.3.15",
     "xml-js": "^1.6.11"
   },
   "dependencies": {
@@ -102,10 +102,10 @@
     "@aws-cdk/region-info": "0.0.0",
     "@jsii/check-node": "1.98.0",
     "archiver": "^5.3.2",
-    "aws-sdk": "^2.1610.0",
+    "aws-sdk": "^2.1620.0",
     "camelcase": "^6.3.0",
     "cdk-assets": "0.0.0",
-    "cdk-from-cfn": "^0.159.0",
+    "cdk-from-cfn": "^0.161.0",
     "chalk": "^4",
     "chokidar": "^3.6.0",
     "decamelize": "^5.0.1",
@@ -115,7 +115,7 @@
     "minimatch": "^9.0.4",
     "promptly": "^3.2.0",
     "proxy-agent": "^6.4.0",
-    "semver": "^7.6.0",
+    "semver": "^7.6.2",
     "source-map-support": "^0.5.21",
     "strip-ansi": "^6.0.1",
     "table": "^6.8.2",

packages/cdk-assets/package.json

@@ -46,7 +46,7 @@
     "@aws-cdk/cloud-assembly-schema": "0.0.0",
     "@aws-cdk/cx-api": "0.0.0",
     "archiver": "^5.3.2",
-    "aws-sdk": "^2.1610.0",
+    "aws-sdk": "^2.1620.0",
     "glob": "^7.2.3",
     "mime": "^2.6.0",
     "yargs": "^16.2.0"