Sourced from software.amazon.awscdk:aws-cdk-lib's releases.

v2.237.1

Bug Fixes

• core: intrinsic cfn function tokens are not detected as such in java (#36843) (89cd54f)

---

Alpha modules (2.237.1-alpha.0)

v2.237.0

⚠ BREAKING CHANGES

• iam: Receivers of IEncryptedResource objects now have fewer guarantees about the shape of the object. If you still require an IResource, change the type to IEncryptedResource & IResource and/or add a type guard check using Resource.isResource(). Implementations of IEncryptedResource no longer need to implement IResource but must continue to implement IEnvironmentAware. Since IResource extends IEnvironmentAware, there is no change for implementors. Calls to GrantableResources.isEncryptedResource() now require an IEnvironmentAware argument instead of IConstruct.

Features

• eks: add OidcProviderNative using L1 and deprecate OpenIdConnectProvider custom resource (#36589) (09383cb)
• eks: add support overwriteServiceAccount prop in service account construct (#36751) (3aa38f6)
• kms: make trustAccountIdentities optional in KeyGrants (#36786) (06676ac)
• lambda: add observability support for kafka event source mappings (#36808) (dd8b419)
• update L1 CloudFormation resource definitions (#36799) (7ecd0a9)
• opensearchservice: support OI2 instance type with local NVMe storage (#36700) (034baf3), closes #36698

Bug Fixes

• iam: IEncryptedResource extends IEnvironmentAware instead of IResource (#36787) (90ad834)

---

Alpha modules (2.237.0-alpha.0)

Features

• bedrock-agentcore-alpha: add support for custom claims and scopes to runtime/gateway authorizers (#36810) (a3abcd0)
• eks-v2-alpha: pass additional helm chart values to aws-load-balancer-controller (#36754) (cf61814), closes /github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199
• mixins-preview: align Mixins API with latest RFC proposal (#36825) (82c2fdb)
• mixins-preview: handle destination bucket with KMS keys (#36776) (950401f)

Bug Fixes

• bedrock-agentcore-alpha: construct ID collision when multiple schemas are set (#36565) (9ebfb62), closes #36559

v2.236.0

Features

• update L1 CloudFormation resource definitions (#36721) (7a4a443)
• ecs: add capacityOptionType (Spot support) to ManagedInstancesCapacityProvider L2 construct (#36497) (e8ad85b), closes #35648
• ecs: add built-in Linear and Canary deployments (#35981) (67ac5e7), closes #35986 #35987
• logs: add support for deletion protection configuration (#36583) (c4d1389), closes #36554 #36554

Bug Fixes

... (truncated)

Sourced from software.amazon.awscdk:aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.237.1-alpha.0 (2026-02-03)

2.237.0-alpha.0 (2026-02-02)

Features

• bedrock-agentcore-alpha: add support for custom claims and scopes to runtime/gateway authorizers (#36810) (a3abcd0)
• eks-v2-alpha: pass additional helm chart values to aws-load-balancer-controller (#36754) (cf61814), closes /github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199
• mixins-preview: align Mixins API with latest RFC proposal (#36825) (82c2fdb)
• mixins-preview: handle destination bucket with KMS keys (#36776) (950401f)

Bug Fixes

• bedrock-agentcore-alpha: construct ID collision when multiple schemas are set (#36565) (9ebfb62), closes #36559

2.236.0-alpha.0 (2026-01-23)

Features

• bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
• bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
• bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
• mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
• sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

• eks-v2-alpha: ensure kubectl provider access entry is depended upon by downstream resources (#36734) (e104f45), closes #34898 #34897

2.235.1-alpha.0 (2026-01-19)

2.235.0-alpha.0 (2026-01-15)

⚠ BREAKING CHANGES

• bedrock-agentcore-alpha: The User Pool Client will be replaced and new Resource Server and Domain resources will be added for existing Gateway stacks using the default Cognito authorizer.

Checklist

• My code adheres to the CONTRIBUTING GUIDE and DESIGN GUIDELINES

Bug Fixes

... (truncated)

• 2bef5e5 chore(release): 2.237.1 (#36845)
• 7ea330a chore: fix CHANGELOG heading
• 5fe02f8 chore(release): 2.237.1
• 89cd54f fix(core): intrinsic cfn function tokens are not detected as such in java (#3...
• c774582 chore(release): 2.237.0 (#36831)
• d7e62c7 update CHANGELOG
• b019939 chore: update analytics metadata blueprints
• 43ee898 chore(release): 2.237.0
• a3abcd0 feat(bedrock-agentcore-alpha): add support for custom claims and scopes to ru...
• f8e3863 chore: update Contributors File (#36829)
• Additional commits viewable in compare view

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)