chore: npm-check-updates && yarn upgrade

Ran npm-check-updates and yarn upgrade to keep the `yarn.lock` file up-to-date.

package.json

@@ -15,26 +15,26 @@
     "build-all": "tsc -b"
   },
   "devDependencies": {
-    "@nx/workspace": "^19.8.6",
+    "@nx/workspace": "^19.8.14",
     "@types/node": "18.11.19",
     "@types/prettier": "2.6.0",
     "@yarnpkg/lockfile": "^1.1.0",
     "aws-sdk-js-codemod": "^0.28.2",
-    "cdk-generate-synthetic-examples": "^0.2.17",
+    "cdk-generate-synthetic-examples": "^0.2.18",
     "conventional-changelog-cli": "^2.2.2",
     "fs-extra": "^9.1.0",
     "graceful-fs": "^4.2.11",
     "jest-junit": "^13.2.0",
-    "jsii-diff": "1.104.0",
-    "jsii-pacmak": "1.104.0",
-    "jsii-reflect": "1.104.0",
-    "lerna": "^8.1.8",
-    "nx": "^19.8.6",
+    "jsii-diff": "1.106.0",
+    "jsii-pacmak": "1.106.0",
+    "jsii-reflect": "1.106.0",
+    "lerna": "^8.1.9",
+    "nx": "^19.8.14",
     "semver": "^7.6.3",
     "standard-version": "^9.5.0",
     "ts-jest": "^29.2.5",
     "ts-node": "^10.9.2",
-    "typescript": "~5.5.2"
+    "typescript": "~5.5.4"
   },
   "resolutions": {
     "colors": "1.4.0",

packages/@aws-cdk-testing/cli-integ/package.json

@@ -50,16 +50,16 @@
     "@aws-sdk/client-sso": "3.632.0",
     "@aws-sdk/client-sts": "3.632.0",
     "@aws-sdk/credential-providers": "3.632.0",
-    "@smithy/util-retry": "3.0.8",
-    "@smithy/types": "3.6.0",
-    "axios": "^1.7.7",
+    "@smithy/util-retry": "3.0.11",
+    "@smithy/types": "3.7.2",
+    "axios": "^1.7.9",
     "chalk": "^4",
     "fs-extra": "^9.1.0",
     "glob": "^7.2.3",
     "jest": "^29.7.0",
     "jest-junit": "^14.0.1",
     "make-runnable": "^1.4.1",
-    "mockttp": "^3.15.4",
+    "mockttp": "^3.15.5",
     "npm": "^8.19.4",
     "p-queue": "^6.6.2",
     "semver": "^7.6.3",

packages/@aws-cdk-testing/framework-integ/package.json

@@ -44,7 +44,7 @@
     "@aws-cdk/lambda-layer-kubectl-v30": "^2.0.1",
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.0",
     "aws-cdk-lib": "0.0.0",
-    "cdk8s": "2.69.10",
+    "cdk8s": "2.69.32",
     "cdk8s-plus-27": "2.9.5",
     "constructs": "^10.0.0"
   },

packages/@aws-cdk/aws-custom-resource-sdk-adapter/package.json

@@ -28,7 +28,7 @@
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
     "@aws-sdk/client-s3": "3.632.0",
-    "@smithy/types": "3.6.0",
+    "@smithy/types": "3.7.2",
     "@types/jest": "^29.5.14",
     "jest": "^29.7.0"
   },

packages/@aws-cdk/aws-eks-v2-alpha/package.json

@@ -91,16 +91,16 @@
     "@aws-cdk/lambda-layer-kubectl-v29": "^2.1.0",
     "@aws-cdk/lambda-layer-kubectl-v30": "^2.0.1",
     "@aws-cdk/lambda-layer-kubectl-v31": "^2.0.0",
-    "@types/jest": "^29.5.1",
-    "aws-sdk": "^2.1379.0",
+    "@types/jest": "^29.5.14",
+    "aws-sdk": "^2.1692.0",
     "aws-cdk-lib": "0.0.0",
     "constructs": "^10.0.0",
     "sinon": "^9.2.4",
-    "cdk8s": "2.69.10",
+    "cdk8s": "2.69.32",
     "cdk8s-plus-27": "2.9.5"
   },
   "dependencies": {
-    "semver": "^7.5.1",
+    "semver": "^7.6.3",
     "yaml": "1.10.2"
   },
   "peerDependencies": {

packages/@aws-cdk/cloudformation-diff/package.json

@@ -29,15 +29,15 @@
     "diff": "^5.2.0",
     "fast-deep-equal": "^3.1.3",
     "string-width": "^4.2.3",
-    "table": "^6.8.2"
+    "table": "^6.9.0"
   },
   "devDependencies": {
     "@aws-cdk/cdk-build-tools": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
     "@aws-sdk/client-cloudformation": "3.662.0",
     "@types/jest": "^29.5.14",
     "@types/string-width": "^4.0.1",
-    "fast-check": "^3.22.0",
+    "fast-check": "^3.23.2",
     "jest": "^29.7.0",
     "ts-jest": "^29.2.5"
   },

packages/@aws-cdk/custom-resource-handlers/package.json

@@ -43,17 +43,17 @@
     "@aws-sdk/client-dynamodb": "3.632.0",
     "@aws-sdk/client-eks": "3.632.0",
     "@aws-sdk/client-sts": "3.632.0",
-    "@smithy/node-http-handler": "3.2.5",
-    "@smithy/util-stream": "3.2.1",
+    "@smithy/node-http-handler": "3.3.3",
+    "@smithy/util-stream": "3.3.4",
     "@types/jest": "^29.5.14",
     "aws-sdk-client-mock": "4.1.0",
     "aws-sdk-client-mock-jest": "4.1.0",
-    "@cdklabs/typewriter": "^0.0.3",
+    "@cdklabs/typewriter": "^0.0.5",
     "jest": "^29.7.0",
     "sinon": "^9.2.4",
-    "nock": "^13.5.5",
+    "nock": "^13.5.6",
     "fs-extra": "^11.2.0",
-    "esbuild": "^0.24.0"
+    "esbuild": "^0.24.2"
   },
   "dependencies": {
     "@aws-cdk/asset-node-proxy-agent-v6": "^2.1.0",

packages/@aws-cdk/cx-api/package.json

@@ -87,7 +87,7 @@
   "license": "Apache-2.0",
   "devDependencies": {
     "@aws-cdk/cdk-build-tools": "0.0.0",
-    "@aws-cdk/cloud-assembly-schema": "^39.0.1",
+    "@aws-cdk/cloud-assembly-schema": "^39.1.39",
     "@aws-cdk/pkglint": "0.0.0",
     "@types/jest": "^29.5.14",
     "@types/mock-fs": "^4.13.4",

packages/@aws-cdk/integ-runner/THIRD_PARTY_LICENSES

@@ -567,7 +567,7 @@ OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHE
 
 ----------------
 
-** jsonschema@1.4.1 - https://www.npmjs.com/package/jsonschema/v/1.4.1 | MIT
+** jsonschema@1.5.0 - https://www.npmjs.com/package/jsonschema/v/1.5.0 | MIT
 jsonschema is licensed under MIT license.
 
 Copyright (C) 2012-2015 Tom de Grunt <[email protected]>
@@ -827,7 +827,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------
 
-** table@6.8.2 - https://www.npmjs.com/package/table/v/6.8.2 | BSD-3-Clause
+** table@6.9.0 - https://www.npmjs.com/package/table/v/6.9.0 | BSD-3-Clause
 Copyright (c) 2018, Gajus Kuizinas (http://gajus.com/)
 All rights reserved.
 

packages/@aws-cdk/integ-runner/package.json

@@ -61,7 +61,7 @@
     "aws-cdk-lib": "0.0.0",
     "@aws-cdk/pkglint": "0.0.0",
     "@types/fs-extra": "^9.0.13",
-    "@types/jest": "^29.5.12",
+    "@types/jest": "^29.5.14",
     "@types/mock-fs": "^4.13.4",
     "@types/workerpool": "^6.4.7",
     "@types/yargs": "^15.0.19",
@@ -72,11 +72,11 @@
   },
   "dependencies": {
     "chokidar": "^3.6.0",
-    "@aws-cdk/cloud-assembly-schema": "^39.0.0",
+    "@aws-cdk/cloud-assembly-schema": "^39.1.39",
     "@aws-cdk/cloudformation-diff": "0.0.0",
     "@aws-cdk/cx-api": "0.0.0",
     "@aws-cdk/aws-service-spec": "^0.1.46",
-    "cdk-assets": "3.0.0-rc.111",
+    "cdk-assets": "3.0.0-rc.118",
     "@aws-cdk/cdk-cli-wrapper": "0.0.0",
     "aws-cdk": "0.0.0",
     "chalk": "^4",
@@ -109,4 +109,4 @@
   "publishConfig": {
     "tag": "latest"
   }
-}
+}

packages/@aws-cdk/integ-tests-alpha/package.json

@@ -73,17 +73,17 @@
     "@aws-sdk/client-ec2": "3.632.0",
     "@aws-sdk/client-s3": "3.632.0",
     "@aws-sdk/client-sfn": "3.632.0",
-    "@smithy/types": "3.6.0",
+    "@smithy/types": "3.7.2",
     "@types/fs-extra": "^9.0.13",
     "@types/jest": "^29.5.14",
     "aws-sdk-client-mock": "4.1.0",
     "aws-sdk-client-mock-jest": "4.1.0",
     "jest": "^29.7.0",
-    "nock": "^13.5.5",
+    "nock": "^13.5.6",
     "sinon": "^9.2.4",
     "aws-cdk-lib": "0.0.0",
     "node-fetch": "^2.7.0",
-    "@types/node-fetch": "^2.6.11",
+    "@types/node-fetch": "^2.6.12",
     "constructs": "^10.0.0"
   },
   "dependencies": {},

packages/aws-cdk-lib/cx-api/FEATURE_FLAGS.md

@@ -1576,6 +1576,22 @@ When this feature flag is enabled, a stabilization loop is run to recurse the co
 | 2.172.0 | `true` | `true` |
 
 
+### @aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource
+
+*When enabled, use a new method for DNS Name of user pool domain target without creating a custom resource.* (fix)
+
+When this feature flag is enabled, a new method will be used to get the DNS Name of the user pool domain target. The old method
+creates a custom resource internally, but the new method doesn't need a custom resource.
+
+If the flag is set to false then a custom resource will be created when using `UserPoolDomainTarget`.
+
+
+| Since | Default | Recommended |
+| ----- | ----- | ----- |
+| (not in v1) |  |  |
+| 2.174.0 | `false` | `true` |
+
+
 ### @aws-cdk/aws-ecs:disableEcsImdsBlocking
 
 *When set to true, CDK synth will throw exception if canContainersAccessInstanceRole is false. **IMPORTANT: See [details.](#aws-cdkaws-ecsdisableEcsImdsBlocking)*** (temporary)
@@ -1615,20 +1631,4 @@ It is recommended to follow ECS documentation to block IMDS for your specific pl
 **Compatibility with old behavior:** Set this flag to false in order to continue using old and outdated commands. However, it is **not** recommended.
 
 
-### @aws-cdk/aws-route53-targets:userPoolDomainNameMethodWithoutCustomResource
-
-*When enabled, use a new method for DNS Name of user pool domain target without creating a custom resource.* (fix)
-
-When this feature flag is enabled, a new method will be used to get the DNS Name of the user pool domain target. The old method
-creates a custom resource internally, but the new method doesn't need a custom resource.
-
-If the flag is set to false then a custom resource will be created when using `UserPoolDomainTarget`.
-
-
-| Since | Default | Recommended |
-| ----- | ----- | ----- |
-| (not in v1) |  |  |
-| 2.174.0 | `false` | `true` |
-
-
 <!-- END details -->

packages/aws-cdk-lib/package.json

@@ -119,19 +119,19 @@
     "mime-types"
   ],
   "dependencies": {
-    "@aws-cdk/asset-awscli-v1": "^2.2.208",
+    "@aws-cdk/asset-awscli-v1": "^2.2.218",
     "@aws-cdk/asset-kubectl-v20": "^2.1.3",
     "@aws-cdk/asset-node-proxy-agent-v6": "^2.1.0",
-    "@aws-cdk/cloud-assembly-schema": "^39.0.1",
+    "@aws-cdk/cloud-assembly-schema": "^39.1.39",
     "@balena/dockerignore": "^1.0.2",
     "case": "1.6.3",
     "fs-extra": "^11.2.0",
     "ignore": "^5.3.2",
-    "jsonschema": "^1.4.1",
+    "jsonschema": "^1.5.0",
     "minimatch": "^3.1.2",
     "punycode": "^2.3.1",
     "semver": "^7.6.3",
-    "table": "^6.8.2",
+    "table": "^6.9.0",
     "yaml": "1.10.2",
     "mime-types": "^2.1.35"
   },
@@ -158,31 +158,31 @@
     "@aws-sdk/client-ssm": "3.632.0",
     "@aws-sdk/client-sts": "3.632.0",
     "@aws-sdk/credential-providers": "3.632.0",
-    "@smithy/node-http-handler": "3.2.5",
-    "@smithy/types": "3.6.0",
-    "@smithy/util-stream": "3.2.1",
-    "@types/aws-lambda": "^8.10.145",
+    "@smithy/node-http-handler": "3.3.3",
+    "@smithy/types": "3.7.2",
+    "@smithy/util-stream": "3.3.4",
+    "@types/aws-lambda": "^8.10.147",
     "@types/jest": "^29.5.14",
-    "@types/lodash": "^4.17.12",
+    "@types/lodash": "^4.17.14",
     "@types/punycode": "^2.1.4",
     "@types/mime-types": "^2.1.4",
     "@aws-cdk/lazify": "0.0.0",
     "aws-sdk-client-mock": "4.1.0",
     "aws-sdk-client-mock-jest": "4.1.0",
-    "cdk8s": "2.69.10",
+    "cdk8s": "2.69.32",
     "constructs": "^10.0.0",
     "delay": "5.0.0",
-    "esbuild": "^0.24.0",
-    "fast-check": "^3.22.0",
+    "esbuild": "^0.24.2",
+    "fast-check": "^3.23.2",
     "jest": "^29.7.0",
     "jest-each": "^29.7.0",
     "lambda-tester": "^4.0.1",
     "lodash": "^4.17.21",
-    "nock": "^13.5.5",
+    "nock": "^13.5.6",
     "sinon": "^9.2.4",
     "ts-mock-imports": "^1.3.16",
     "ts-node": "^10.9.2",
-    "typescript": "~5.5.2",
+    "typescript": "~5.5.4",
     "typescript-json-schema": "^0.65.1"
   },
   "peerDependencies": {

packages/aws-cdk-lib/recommended-feature-flags.json

@@ -50,6 +50,8 @@
   "@aws-cdk/aws-ecs:removeDefaultDeploymentAlarm": true,
   "@aws-cdk/custom-resources:logApiResponseDataPropertyTrueDefault": false,
   "@aws-cdk/aws-s3:keepNotificationInImportedBucket": false,
+  "@aws-cdk/aws-ecs:enableImdsBlockingDeprecatedFeature": false,
+  "@aws-cdk/aws-ecs:disableEcsImdsBlocking": true,
   "@aws-cdk/aws-ecs:reduceEc2FargateCloudWatchPermissions": true,
   "@aws-cdk/aws-dynamodb:resourcePolicyPerReplica": true,
   "@aws-cdk/aws-ec2:ec2SumTImeoutEnabled": true,