build(deps): update js-other

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@aws-cdk/toolkit-lib (source)	1.38.3 → 1.39.0
@aws-sdk/client-cloudwatch-logs (source)	3.1112.0 → 3.1115.0
@aws-sdk/client-lambda (source)	3.1112.0 → 3.1115.0
@aws-sdk/client-sts (source)	3.1112.0 → 3.1115.0
aws-cdk-lib (source)	2.265.0 → 2.266.0
vitest (source)	4.1.10 → 4.1.11

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cdk-cli (@​aws-cdk/toolkit-lib)

v1.39.0

Compare Source

1.39.0 (2026-08-19)

Features

• cli: add "errors-only" progress mode that only prints errors (#​1800) (a4c0282)
• cli: support notification-arns in cdk import (#​1740) (f8e7da1), closes aws/aws-cdk#23548

Bug Fixes

• bucket URL is incorrect for local S3 emulators (#​1625) (927a6cc)
• toolkit-lib: asset publisher cache ignores environment on cache hit (#​1839) (88f6ad1), closes #​1838
• toolkit-lib: downstream stack selection uses wrong key for nested stacks (#​1835) (a80074a), closes #​1834
• toolkit-lib: drift numResourcesUnchecked ignores UNKNOWN-status resources (#​1837) (4374bc6), closes #​1836
• toolkit-lib: drop the deep clone used to remove one metadata key (#​1826) (a826ad8), closes #​1823 #​1824
• toolkit-lib: fail gc on ECR tagging permission errors (#​1828) (8e19558), closes #​347
• toolkit-lib: hotswap deployments fail with TypeError when a nested stack output joins a List<> parameter (#​1842) (bee9159), closes #​1829
• toolkit-lib: hotswap silently drops empty-string Lambda Description (#​1831) (da4c982), closes #​1830
• toolkit-lib: NoStack masks the real error when a new stack fails to deploy (#​1845) (a9a23b4), closes #​1802 #​1803 #​1802
• toolkit-lib: stale REVIEW_IN_PROGRESS read fails a running deployment (#​1848) (9321643), closes #​1802 #​1803

aws/aws-sdk-js-v3 (@​aws-sdk/client-cloudwatch-logs)

v3.1115.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

v3.1114.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

v3.1113.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-cloudwatch-logs

aws/aws-sdk-js-v3 (@​aws-sdk/client-lambda)

v3.1115.0

Compare Source

Features

• client-lambda: Adds support for full JSON resource-based policies, enabling customers to create, retrieve, update, and delete function resource policies as complete JSON documents. (72573a2)

v3.1114.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-lambda

v3.1113.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-lambda

aws/aws-sdk-js-v3 (@​aws-sdk/client-sts)

v3.1115.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1114.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

v3.1113.0

Compare Source

Note: Version bump only for package @​aws-sdk/client-sts

aws/aws-cdk (aws-cdk-lib)

v2.266.0

Compare Source

Features

• adding controlPlaneScalingConfig to Cluster (#​36863) (94e5c1a)
• update L1 CloudFormation resource definitions (#​38578) (ccd2633)

Bug Fixes

• ec2: add DependsOn VPCGatewayAttachment to IPv6 default route (#​37893) (ab272bc), closes #​37853
• sns-subscriptions: use regionalized service principal for opt-in region SQS subscriptions (#​38339) (67a7eb1), closes #​32526

---

Alpha modules (2.266.0-alpha.0)

⚠ BREAKING CHANGES

• glue-alpha: DataQualityRulesetProps.rulesetDqdl: string is replaced by
  dqdl: Dqdl. Build it with Dqdl.fromString('Rules = [ ... ]').
• glue-alpha: s3Encryption, cloudWatchEncryption, and jobBookmarksEncryption are no longer object literals. Use S3Encryption.s3Managed() / S3Encryption.kms(key?), CloudWatchEncryption.kms(key?), and JobBookmarksEncryption.clientSideKms(key?). The CloudWatchEncryptionMode and JobBookmarksEncryptionMode enums are removed (their mode is now implicit); S3EncryptionMode is retained.
• glue-alpha: this is a corrective breaking change. Apps that leaned on the bug, and did things like InputFormat x = OutputFormat.AVRO; will get a compilation error in other jsii languages. The intended usage, on the other hand, was broken before and works now.
• glue-alpha: workerType and numberOfWorkers are no longer top-level job props. For Spark jobs, pass them together via workerConfiguration: { workerType, numberOfWorkers }. PythonShellJob no longer accepts them (it is sized by maxCapacity). RayJob no longer accepts workerType (it is fixed to Z.2X).
• glue-alpha: SparkJobProps.enableMetrics removed, which will cause a compilation error for any app using it. But there is no behavior change, since this is a dead prop.
• glue-alpha: a differing/tokenized has_encrypted_data supplied via parameters now throws.

Features

• glue-alpha: add warning for maxRetries when job run queuing is enabled (#​38575) (09ae11e)
• glue-alpha: model SecurityConfiguration encryption as factory subtypes (#​38586) (e37e7a6)
• glue-alpha: new hasEncryptedData property (#​38511) (c977e36)
• glue-alpha: pair workerType and numberOfWorkers into a required workerConfiguration (#​38576) (5f3b1b6)
• glue-alpha: wrap DataQualityRuleset DQDL in a typed value object (#​38587) (fd01268)

Bug Fixes

• glue-alpha: correct OutputFormat.AVRO/ORC type and tidy GA-hygiene items (#​38593) (35aefaf)
• glue-alpha: omit comments from struct type strings (#​38008) (5f16a86), closes #​26935
• mediapackagev2-alpha: add GetChannel grant on MediaPackageV2 (#​38582) (74d922c), closes #​38581

vitest-dev/vitest (vitest)

v4.1.11

Compare Source

   🐞 Bug Fixes

• Revive global concurrency limit for test lifecycle [backport to v4]  -  by @​sheremet-va and @​hi-ogawa in #​10992 (5146d)
• browser:
  • Encode iframeId in tester iframe URL [backport to v4]  -  by @​sheremet-va, Pduhard and Claude Opus 4.8 in #​10955 (10b2c)
  • Trigger playwright/chromium gc on lower disk availability [backport to v4]  -  by @​hi-ogawa, Hiroshi Ogawa and OpenCode in #​10951 (9851d)
• mocker:
  • Restrict redirect mocks to the fs allowlist [backport to v4]  -  by @​sheremet-va in #​10974 (fe5a1)

    View changes on GitHub

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.