⚠ BREAKING CHANGES
- ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:
aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.
Features
- update L1 CloudFormation resource definitions (#37410) (bd2c318)
- apigatewayv2: add role support for lambda authorizers (#35706) (2fb2f16), closes #35696
- batch: skip unregister job definition on update (#36011) (2fb2240)
- elasticloadbalancingv2: jwt verification for application load balancer (#36099) (aacd28a), closes #36096
Bug Fixes
- bump brace-expansion from 5.0.3 to 5.0.5 to address CVE-2026-33750 (#37379) (69cf4c9)
- prevent prototype pollution in 2 APIs (#37453) (1016537)
- aws-cdk-lib: condensed stack trace hides namespaced package name (#37413) (cb8e7fb)