fix(deps): update aws-cdk-lib to 2.221.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.220.0 -> 2.221.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.221.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

• aws-datazone: AWS::DataZone::ProjectProfile: Id property removed.
• aws-logs: AWS::Logs::DeliveryDestination: DeliveryDestinationType attribute removed.
• aws-s3: AWS::S3::AccessGrantsLocation: IamRoleArn property is now required.
• aws-s3: AWS::S3::AccessGrantsLocation: LocationScope property is now required.
• aws-servicecatalog: AWS::ServiceCatalog::TagOptionAssociation: Id attribute removed.

Features

• update L1 CloudFormation resource definitions (#​35816) (82bef28)
• agentcore: add agentcore L2 constructs for 1p tools (#​35577) (3087ffa)
• agentcore: add agentcore runtime L2 construct (#​35623) (c57484a)
• ecr: image tag mutability exclusion filters (#​35246) (f6dd5cf), closes #​35454
• ecs: implement IConnectable interface for ManagedInstancesCapacityProvider (#​35745) (fd5ff76)
• kinesisfirehose: support DeliveryStream record format conversion for S3 Bucket Destination (#​35410) (79bcba2), closes #​15501 /github.com/aws/aws-cdk/issues/15501#issuecomment-3255582302
• update L1 CloudFormation resource definitions (#​35769) (a165905)

Bug Fixes

• ecs-patterns: resolve target group conflict when updating ALB internetFacing or loadBalancerName (under feature flag) (#​35508) (69b9c03), closes #​33253 #​33253 #​33253
• lambda: can't find entry file under ESM module system (#​35797) (7becd79), closes #​21630
• lambda-runtime: change fallback for latest lambda node runtime to node 22.x (#​35764) (10fcb1b)
• opensearchservice: add i8g nodes validation without EBS (#​35668) (9594842), closes #​35666
• s3-deployment: handle empty string in Source.data() (#​35824) (95c8d73), closes #​35809
• stepfunctions-tasks: allow passing apiEndpoint as intrinsic function (under feature flag) (#​32139) (ddfef06), closes #​29925 #​29925 #​30749

---

Alpha modules (2.221.0-alpha.0)

Features

• msk-alpha: support Kafka 4.1 (#​35759) (67539de)

Bug Fixes

• elasticache-alpha: cannot import Redis 7 serverless cache (#​35629) (2bde1a0)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}