fix(deps): update dependency aws-cdk-lib to v2.265.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.264.0 → 2.265.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.265.0

Compare Source

Features

• bedrock-agentcore: add StreamDeliveryResources support to Memory L2 Construct (#​37527) (817c50b)
• cloudwatch: support AT_LEAST expression for composite alarm rules (#​37693) (974e43b), closes #​37692 #​36100
• docdb: add managed password support (#​35711) (fcf54bf)
• ec2: add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#​37900) (000f532), closes #​37883
• ec2: add volume initialization rate to ebs props for launchtemplate (#​36451) (da4281e), closes #​36374
• kinesisfirehose: add HTTP Endpoint and Datadog destination (#​33657) (4c47171), closes #​20354 #​15502

Bug Fixes

• cloudwatch: make concrete widgets assignable to widget interface (#​37695) (e322035), closes #​37600
• core: cdk validate can hang indefinitely (#​38510) (0a238f3), closes #​38498 #​38425
• secretsmanager: correct SAR rotation app versions for GovCloud (#​38462) (a29b5c0)
• bump brace-expansion to 5.0.9 to address CVE-2026-69152 (#​38520) (8764b7b), closes #​38496 #​38410

---

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
• glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

• glue-alpha: default Flex jobs to Glue 5.0 (#​38543) (36d4976)
• glue-alpha: removal policy is RETAIN for Database by default (#​38535) (9669928)
• glue-alpha: warn on plaintext secrets (#​38538) (10bf0b5)

Bug Fixes

• glue-alpha: warn when S3Table grants cover a shared bucket (#​38542) (d81d2d6)
• mediaconnect-alpha: update validation to allow adding an underscore to name (#​38539) (7c85994)

---

Configuration

📅 Schedule: (in timezone Asia/Tokyo)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[Copilot]

Pull request overview

Note

Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.

Bumps the AWS CDK dependency used by the infra project to a newer patch release.

Changes:

• Update aws-cdk-lib from 2.264.0 to 2.265.0.

Files not reviewed (1)

• infra/package-lock.json: Generated file

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.