chore(deps): Bump aws-cdk-lib from 2.235.0 to 2.238.0 in /cdk in the cdk-deps group

[dependabot]

Bumps the cdk-deps group in /cdk with 1 update: aws-cdk-lib.

Updates aws-cdk-lib from 2.235.0 to 2.238.0

Release notes

Sourced from aws-cdk-lib's releases.

v2.238.0

⚠ BREAKING CHANGES

• bedrock-agentcore: Interface extensions require new property implementations
• aws-bedrock-agentcore-alpha:
• • IGateway now requires gatewayRef getter
• • IGatewayTarget now requires gatewayTargetRef getter
• • IMemory now requires memoryRef getter
• • IBedrockAgentRuntime now requires runtimeRef getter
• • IRuntimeEndpoint now requires runtimeEndpointRef getter
• • IBrowserCustom now requires browserCustomRef getter
• • ICodeInterpreterCustom now requires codeInterpreterCustomRef getter

Features

• update L1 CloudFormation resource definitions (#36834) (5143fdf)
• core: allow indentation suppression in nested stacks (#35122) (d629b15), closes #32798 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/stack.ts#L207 /github.com/aws/aws-cdk/blob/main/packages/aws-cdk-lib/core/lib/nested-stack.ts#L25C18-L25C34
• ec2: support Firehose IDeliveryStreamRef as flow log destination (#36278) (cd73498), closes #33883 #34596 #33757
• eks: add removal policy for all constructs (#35835) (875d9b8)
• eks: add support for EC2, HYBRID_LINUX, and HYPERPOD_LINUX access entry types (#36350) (cc059c6), closes #34394
• glue: typed partition projection (#35660) (cb1658f), closes #35428

Bug Fixes

• core: intrinsic cfn function tokens are not detected as such in java (#36843) (3f29f11)
• events: restore Match.anyOf support for raw strings (#36908) (6804c7c), closes #36902 #36602 #36602
• iam: undeprecate openIdConnectProviderArn and openIdConnectProviderIssuer in IOidcProvider (#36859) (cbf0b03)

Miscellaneous Chores

• bedrock-agentcore: reference interface (#36803) (87f1087)

---

Alpha modules (2.238.0-alpha.0)

Features

• eks-v2-alpha: add support for bootstrapSelfManagedAddons (#36740) (1ffe38d)
• eks-v2-alpha: add support for EKS hybrid nodes (#36749) (48ace56)

Bug Fixes

• eks-v2-alpha: ensure kubectl provider and handler functions use the same vpc configuration (#36735) (4e02f08), closes #34878 #34877
• ivs-alpha: add region constraints to integration tests (#36851) (d55fec4)
• mixins-preview: apply mixins in order (#36847) (726060c)
• mixins-preview: apply mixins in order in MixinApplicator (#36877) (09db1c9), closes #36847

v2.237.1

Bug Fixes

... (truncated)

Changelog

Sourced from aws-cdk-lib's changelog.

Changelog

All notable changes to this project will be documented in this file. See standard-version for commit guidelines.

2.238.0-alpha.0 (2026-02-09)

Features

• eks-v2-alpha: add support for bootstrapSelfManagedAddons (#36740) (1ffe38d)
• eks-v2-alpha: add support for EKS hybrid nodes (#36749) (48ace56)

Bug Fixes

• eks-v2-alpha: ensure kubectl provider and handler functions use the same vpc configuration (#36735) (4e02f08), closes #34878 #34877
• ivs-alpha: add region constraints to integration tests (#36851) (d55fec4)
• mixins-preview: apply mixins in order (#36847) (726060c)
• mixins-preview: apply mixins in order in MixinApplicator (#36877) (09db1c9), closes #36847

2.237.1-alpha.0 (2026-02-03)

2.237.0-alpha.0 (2026-02-02)

Features

• bedrock-agentcore-alpha: add support for custom claims and scopes to runtime/gateway authorizers (#36810) (a3abcd0)
• eks-v2-alpha: pass additional helm chart values to aws-load-balancer-controller (#36754) (cf61814), closes /github.com/kubernetes-sigs/aws-load-balancer-controller/blob/main/helm/aws-load-balancer-controller/values.yaml#L199
• mixins-preview: align Mixins API with latest RFC proposal (#36825) (82c2fdb)
• mixins-preview: handle destination bucket with KMS keys (#36776) (950401f)

Bug Fixes

• bedrock-agentcore-alpha: construct ID collision when multiple schemas are set (#36565) (9ebfb62), closes #36559

2.236.0-alpha.0 (2026-01-23)

Features

• bedrock-agentcore-alpha: added episodic memory strategy (#36591) (21dcfc6)
• bedrock-agentcore-alpha: added gateway interceptors (#36604) (ba8aa48)
• bedrock-agentcore-alpha: make physical name properties optional for AgentCore resources (#36354) (5137d81), closes #36341
• mixins-preview: expose BucketPolicyStatementsMixin publicly (#36771) (458156d)
• sagemaker: add containerStartupHealthCheckTimeoutInSeconds support for EndpointConfig (#35626) (47d707a), closes #35566

Bug Fixes

... (truncated)

Commits

• 67f09c0 chore(release): 2.238.0 (#36922)
• cb0c99e chore: update analytics metadata blueprints
• 281b68d chore(release): 2.238.0
• 5143fdf feat: update L1 CloudFormation resource definitions (#36834)
• 6804c7c fix(events): restore Match.anyOf support for raw strings (#36908)
• 9ccb548 chore: prevent hoisting of bundled dependencies (#36903)
• 95a1eef chore(bedrock-alpha): add Claude Opus 4.6 (#36898)
• cd73498 feat(ec2): support Firehose IDeliveryStreamRef as flow log destination (#36...
• 875d9b8 feat(eks): add removal policy for all constructs (#35835)
• 1ffe38d feat(eks-v2-alpha): add support for bootstrapSelfManagedAddons (#36740)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions