chore(deps): update dependency aws-cdk-lib to v2.204.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.200.1 -> 2.204.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.204.0

Compare Source

Features

• apigatewayv2: add stage variables support for HTTP and WebSocket API (#​34548) (965e055)
• cloudwatch: add id and visible properties for CloudWatch Metric (#​34870) (879afd6), closes #​19876
• report feature flags into Cloud Assembly (#​34884) (f70e46c), closes #​34798
• region-info: add support for region eusc-de (#​34860)

Bug Fixes

• ecr-assets: incorrect handling of nested excludes in .dockerignore (#​34810) (8328c79), closes #​13636 #​13636
• "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 (#​34880) (741b0a7), closes aws/aws-cdk#34798

---

Alpha modules (2.204.0-alpha.0)

Features

• lambda-python-alpha: support uv (#​33880) (ac6f136), closes #​31238 #​32413

v2.203.1

Compare Source

Bug Fixes

• "Invalid Assembly Manifest" when used with CLI 2.1017.0 and 2.1018.0 (#​34880) (32ee050), closes aws/aws-cdk#34798

---

Alpha modules (2.203.1-alpha.0)

v2.203.0

Compare Source

v2.202.0

Compare Source

Features

• lambda: support for schema registry for kafka (#​34746) (c6ea664)
• update L1 CloudFormation resource definitions (#​34730) (47a3ee3)
• cdk-pipeline: add url and sns topic for manual approval in cdk pipeline (re-create PR since original is auto-closed) (#​34654) (39f1636), closes #​32809 #​12273 #​34227
• eks: support eks with k8s 1.33 (#​34602) (fc46733), closes #​34520 /github.com/aws/aws-cdk/pull/33339#issuecomment-2643498256
• kms: implement .grant methods for Alias.fromAliasName (under feature flag) (#​34237) (8e19dd6), closes #​22697
• opensearch: add logic to only log specific field when less verbosity is needed for opensearch access policy custom resource (#​34701) (856e3b1), closes #​29093
• exclude lambda.Version and apigateway.Deployment from refactoring (#​34710) (dd14a17)

Bug Fixes

• core: splitting tree.json produces a lot of files (#​34718) (650134f), closes #​34478 #​34627
• pipelines: use display name for Asset actions when publishAssetsInParallel is false (#​34049) (754ad50), closes #​34042 #​33844
• route53: warn when ttl is provided with alias target in RecordSet (#​34526) (993d2fd)
• test-app: fix spelling error (#​34762) (1885062)

---

Alpha modules (2.202.0-alpha.0)

Features

• amplify: add compute role support for Amplify branches (#​34708) (817a21a)
• amplify-alpha: support custom response headers in monorepo structures (#​31771) (aea1372), closes #​31758

v2.201.0

Compare Source

Features

• opensearch: update default TLS security policy to TLS 1.2 for OpenSearch domains (#​34660) (3cc2dc2), closes #​34658
• update L1 CloudFormation resource definitions (#​34659) (ef02724)
• update L1 CloudFormation resource definitions (#​34687) (025c82e)
• appconfig: support customer managed key for hosted configuration (#​34256) (484719e)
• codepipeline-actions: native Amazon EC2 deployment support (#​33604) (9d39db7), closes #​33584 /docs.aws.amazon.com/codepipeline/latest/userguide/action-reference-EC2Deploy.html#action-reference-EC2
• core: support adding additional cache key to cdk context values (#​31586) (8848134), closes #​26982
• core: throw typed Errors (#​34587) (4e63b1a), closes #​32569
• eks: added support for bootstrapSelfManagedAddons (#​33597) (cedc1b0), closes #​30792
• rds: DatabaseInstanceFromSnapshot support clusterSnapshotIdentifier (#​33982) (48d30b6), closes #​33889
• rds: support auto-pause configuration for Aurora Serverless v2 (#​34173) (2c55c28), closes #​32280 #​32563
• stepfunctions: add support for Jsonata expressions to Map.ItemSelector (#​34625) (dc30faa), closes #​34538 /github.com/aws/aws-cdk/blob/ed08f3f0b8ecd79a2fa5e804acc73a9ff23eab80/packages/aws-cdk-lib/aws-stepfunctions/lib/states/map-base.ts#L60-L77
• synthetics: playwright 2.0 runtime (#​34609) (1418204)
• synthetics: safe canary update (#​34608) (89c5350)

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#​34691) (5c8f50c), closes #​34690 #​34690 #​33384
• apigateway: correct JsonSchema.additionalItems property type (#​33879) (464d521), closes #​33878 #​33878
• cloudfront: use wildcard when grant some cloudfront permission (#​33802) (452a5e1), closes #​33249
• lambda: disable aws-lambda:useCdkManagedLogGroup feature flag when not set (#​34613) (d696688), closes #​34612 #​34612
• logs: exposed metric from the metric filter will now include the dimension map (#​34648) (892b013), closes #​34643
• opensearch: opensearchservice: existing integ test is failing (#​34680) (be21625), closes 1#L59
• typo in jsdoc of noncurrentVersionTransitions property (#​34620) (ed08f3f)

---

Alpha modules (2.201.0-alpha.0)

Features

• amplify: add skew protection feature for Amplify branches (#​34656) (8808998)
• bedrock: adding bedrock l2 construct features (#​34065) (a028927)
• ec2: add interface VPC endpoint for DSQL (#​34487) (3e53c2c)
• ec2: support Firehose IDeliveryStream as flow log destination (#​34596) (cdfe6e7), closes #​33883 #​33757
• ec2: volume initialization rate for EBS volume (#​34570) (527d483)

Reverts

• ec2: support Firehose IDeliveryStream as flow log destination (#​34665) (b77bd0e), closes aws/aws-cdk#34596

v2.200.2

Compare Source

Bug Fixes

• export errors to make it available in region-info/lib/fact.ts (#​34691) (4a75032), closes #​34690 #​34690 #​33384

---

Alpha modules (2.200.2-alpha.0)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: package-lock.json

npm warn Unknown env config "store". This will stop working in the next major version of npm.
npm error code ERESOLVE
npm error ERESOLVE unable to resolve dependency tree
npm error
npm error While resolving: @hello.nrfcloud.com/[email protected]
npm error Found: @aws-lambda-powertools/[email protected]
npm error node_modules/@aws-lambda-powertools/metrics
npm error   @aws-lambda-powertools/metrics@"2.21.0" from the root project
npm error
npm error Could not resolve dependency:
npm error peer @aws-lambda-powertools/metrics@"^2.23.0" from @hello.nrfcloud.com/[email protected]
npm error node_modules/@hello.nrfcloud.com/lambda-helpers
npm error   @hello.nrfcloud.com/lambda-helpers@"3.3.20" from the root project
npm error
npm error Fix the upstream dependency conflict, or retry
npm error this command with --force or --legacy-peer-deps
npm error to accept an incorrect (and potentially broken) dependency resolution.
npm error
npm error
npm error For a full report see:
npm error /runner/cache/others/npm/_logs/2025-07-14T12_11_22_849Z-eresolve-report.txt
npm error A complete log of this run can be found in: /runner/cache/others/npm/_logs/2025-07-14T12_11_22_849Z-debug-0.log