build(deps): update js-other

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-cdk/toolkit-lib (source)	1.38.2 → 1.38.3
@aws-sdk/client-cloudwatch-logs (source)	3.1111.0 → 3.1112.0
@aws-sdk/client-lambda (source)	3.1111.0 → 3.1112.0
@aws-sdk/client-sts (source)	3.1105.0 → 3.1112.0
aws-cdk-lib (source)	2.263.0 → 2.265.0
eslint (source)	10.8.0 → 10.8.1
globals	17.9.0 → 17.11.0
typescript-eslint (source)	8.66.0 → 8.67.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cdk-cli (@​aws-cdk/toolkit-lib)

v1.38.3

Compare Source

1.38.3 (2026-08-17)

Bug Fixes

• cli: deployments skipped even though changes exist when previous deployment was with hotswap (#​1819) (52c292d)
• toolkit-lib: clean up the diff change set when early validation fails (#​1821) (750d650), closes #​1767
• toolkit-lib: every change-set deployment announces "waiting in review for manual execution (--no-execute)" although the change set is executed (#​1818) (86ee97e), closes #​1815 #​1273

aws/aws-sdk-js-v3 (@​aws-sdk/client-cloudwatch-logs)

v3.1112.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

aws/aws-sdk-js-v3 (@​aws-sdk/client-lambda)

v3.1112.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-lambda

aws/aws-sdk-js-v3 (@​aws-sdk/client-sts)

v3.1112.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1111.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1110.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1109.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1108.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1107.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1106.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

aws/aws-cdk (aws-cdk-lib)

v2.265.0

Compare Source

Features

• bedrock-agentcore: add StreamDeliveryResources support to Memory L2 Construct (#​37527) (817c50b)
• cloudwatch: support AT_LEAST expression for composite alarm rules (#​37693) (974e43b), closes #​37692 #​36100
• docdb: add managed password support (#​35711) (fcf54bf)
• ec2: add ipAddressType and dnsRecordIpType to GatewayVpcEndpoint (#​37900) (000f532), closes #​37883
• ec2: add volume initialization rate to ebs props for launchtemplate (#​36451) (da4281e), closes #​36374
• kinesisfirehose: add HTTP Endpoint and Datadog destination (#​33657) (4c47171), closes #​20354 #​15502

Bug Fixes

• cloudwatch: make concrete widgets assignable to widget interface (#​37695) (e322035), closes #​37600
• core: cdk validate can hang indefinitely (#​38510) (0a238f3), closes #​38498 #​38425
• secretsmanager: correct SAR rotation app versions for GovCloud (#​38462) (a29b5c0)
• bump brace-expansion to 5.0.9 to address CVE-2026-69152 (#​38520) (8764b7b), closes #​38496 #​38410

---

Alpha modules (2.265.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: PySparkFlexEtlJob and ScalaSparkFlexEtlJob now default to GlueVersion.V5_0 instead of V3_0. Set glueVersion explicitly to keep the previous behavior.
• glue-alpha: removal policy of existing Database resources will change to RETAIN.

Features

• glue-alpha: default Flex jobs to Glue 5.0 (#​38543) (36d4976)
• glue-alpha: removal policy is RETAIN for Database by default (#​38535) (9669928)
• glue-alpha: warn on plaintext secrets (#​38538) (10bf0b5)

Bug Fixes

• glue-alpha: warn when S3Table grants cover a shared bucket (#​38542) (d81d2d6)
• mediaconnect-alpha: update validation to allow adding an underscore to name (#​38539) (7c85994)

v2.264.0

Compare Source

⚠ BREAKING CHANGES

• bedrockagentcore: Gateway metric helpers now emit corrected CloudWatch dimensions per-gateway
  metrics use { Operation, Protocol, Resource } (was { Resource }). Alarms/dashboards built on the
  old dimensions must be updated.
• bedrockagentcore: RuntimeBase metric helpers now emit corrected CloudWatch dimensions per-resource metrics use { Operation, Name, Resource } (was { Resource }) and aggregated metrics use { AggregateOperation } (was { Resource: 'All' }). Alarms/dashboards built on the old dimensions must be updated.

Features

• update L1 CloudFormation resource definitions (#​38526) (b5693cb)
• cloudwatch: support alarm mute rules (#​37504) (c3540bb), closes #​37502
• update L1 CloudFormation resource definitions (#​38479) (279340d)

Bug Fixes

• bedrockagentcore: gateway metrics emit correct CloudWatch dimension (#​38487) (5a7d360)
• bedrockagentcore: runtime metrics emit correct CloudWatch dimensions (#​38486) (4e44f24)
• cloudfront: warn when minimumProtocolVersion is set without a certificate (#​37250) (52ec5f7), closes #​35404
• ec2: allow EBS gp3 and io2 volumes up to 64 TiB (#​37049) (10711ba), closes #​37045
• stepfunctions-tasks: call-rest-api CallApiGatewayRestApiEndpoint does not support JsonATA for api_path (#​37738) (9f0afdc), closes #​37728 /github.com/aws/aws-cdk/blob/e207b76cc2503701b3c4e2c87023617b485b2fde/packages/aws-cdk-lib/aws-stepfunctions/lib/private/jsonata.ts#L1

---

Alpha modules (2.264.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: IDatabase.catalogArn and IDatabase.catalogId were removed in factor of a type
  safe ICatalog, which has catalogArn and catalogId. Consumers and implementations were updated
  accordingly.

Features

• glue-alpha: new Catalog L2 (#​38443) (6a8ba8e)
• glue-alpha: strengthen data encryption for S3Table (#​38501) (eb81d5e), closes /docs.aws.amazon.com/securityhub/latest/userguide/s3-controls.html#s3-5

Bug Fixes

• glue-alpha: enable key rotation for security configuration encryption (#​38512) (18560e0)
• mediaconnect-alpha: addOutput options and simplified VPC interface referencing (#​38515) (3c71466), closes #​38517

eslint/eslint (eslint)

v10.8.1

Compare Source

Bug Fixes

• 18eb0a7 fix: prevent ASI hazard in no-unused-labels autofix (#​21173) (dongkyu lee)
• 151ba3f fix: false positives in getter-return and accessor-pairs (#​21163) (Grit)
• 6898df9 fix: ignore meta-property names in id-denylist (#​21166) (Pixel)
• 4d7db66 fix: ignore meta-property names in id-match (#​21167) (Pixel)
• 677214e fix: handle ASI hazards in no-unused-vars removeVar suggestion (#​20935) (kuldeep kumar)

Documentation

• 7d0cbf8 docs: Update README (GitHub Actions Bot)
• 0a05812 docs: add missing backticks to no-duplicate-imports.js (#​21183) (Lee Daeun)
• 678c90b docs: Update README (GitHub Actions Bot)
• 8a10424 docs: Update README (GitHub Actions Bot)
• 69bb948 docs: Update README (GitHub Actions Bot)

Chores

• 0a14800 chore: update github/codeql-action action to v4.37.4 (#​21196) (renovate[bot])
• 05adcb1 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21191) (Lazizbek Ergashev)
• 5611035 test: add error locations info to no-void (#​21185) (Lee Daeun)
• ee47333 ci: bump github/codeql-action from 4 to 4.37.3 (#​21176) (dependabot[bot])
• f131c03 chore: improve ecosystem test failure reporting (#​20937) (crimsonjay0)
• 1f6edde chore: update ecosystem plugins (#​21182) (ESLint Bot)
• d3266fb chore: unpin webpack dependency (#​21172) (Francesco Trotta)
• 65a6519 chore: add allowScripts field to package.json (#​21092) (GiHoon Noh)
• 22e5256 ci: add triage:no label to Dependabot PRs (#​21141) (lumir)
• 55c9038 ci: bump actions/labeler from 6 to 7 (#​21159) (dependabot[bot])
• 7280e78 chore: update dependency prettier to v3.9.6 (#​21162) (renovate[bot])
• eddbad6 test: fix failing ecosystem test for eslint-plugin-unicorn (#​21156) (Francesco Trotta)
• 60a178d chore: update ecosystem plugins (#​21150) (ESLint Bot)
• f9f61dc test: add error locations to no-unreachable (#​21151) (JIYEON)
• d086293 test: add error locations to no-undef (#​21147) (JIYEON)
• cc01b67 test: add error locations to no-useless-catch (#​21144) (devoil)
• 688e75e chore: add missing backticks in JSDoc (#​21143) (Bo Hyun Kim)
• 7c1e175 test: add error locations to require-await (#​21145) (Grit)
• 588a26d test: add error locations to no-extra-label (#​21139) (dongkyu lee)
• 059aa89 test: add error locations to no-useless-concat (#​21140) (dongkyu lee)
• 5a452a8 test: add error locations to no-const-assign (#​21138) (dongkyu lee)

sindresorhus/globals (globals)

v17.11.0

Compare Source

v17.10.0

Compare Source

typescript-eslint/typescript-eslint (typescript-eslint)

v8.67.0

Compare Source

🚀 Features

• typescript-eslint: export basic globs for using tseslint (#​12105)

❤️ Thank You

• Claude Sonnet 5
• Evyatar Daud @​StyleShit
• Josh Goldberg
• Josh Goldberg ✨
• Kirk Waiblinger @​kirkwaiblinger

See GitHub Releases for more information.

You can read about our versioning strategy and releases on our website.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.