chore(deps): update npm-deps

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
@types/node (source)	24.12.0 → 24.12.2
aws-cdk (source)	2.1116.0 → 2.1117.0
aws-cdk-lib (source)	2.246.0 → 2.248.0
jsii (source)	5.9.35 → 5.9.36
jsii-rosetta (source)	5.9.38 → 5.9.39

---

Release Notes

aws/aws-cdk-cli (aws-cdk)

v2.1117.0

Compare Source

2.1117.0 (2026-04-03)

Features

• deps: upgrade aws-cdk-lib (#​1304) (03daeb6)

aws/aws-cdk (aws-cdk-lib)

v2.248.0

Compare Source

Bug Fixes

• eks: downgrade isolated subnet validation from error to warning (#​37500) (470856c), closes #​37491

---

Alpha modules (2.248.0-alpha.0)

v2.247.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-bedrockagentcore: AWS::BedrockAgentCore::OnlineEvaluationConfig: ExecutionStatus attribute removed.
aws-appstream: AWS::AppStream::ImageBuilder: Name property is now immutable.
aws-eks: AWS::EKS::Capability: EKS_CAPABILITY_ACK_S3_LOGS vended log type removed.

Features

• update L1 CloudFormation resource definitions (#​37410) (bd2c318)
• apigatewayv2: add role support for lambda authorizers (#​35706) (2fb2f16), closes #​35696
• batch: skip unregister job definition on update (#​36011) (2fb2240)
• elasticloadbalancingv2: jwt verification for application load balancer (#​36099) (aacd28a), closes #​36096

Bug Fixes

• bump brace-expansion from 5.0.3 to 5.0.5 to address CVE-2026-33750 (#​37379) (69cf4c9)
• prevent prototype pollution in 2 APIs (#​37453) (1016537)
• aws-cdk-lib: condensed stack trace hides namespaced package name (#​37413) (cb8e7fb)

---

Alpha modules (2.247.0-alpha.0)

Features

• mediapackagev2-alpha: new L2 construct (#​37279) (7debfb9)

aws/jsii-compiler (jsii)

v5.9.36

Compare Source

What's Changed

• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​2616
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​2617
• fix: warnings.js file generates cyclic dependencies by @​rix0rrr in #​2618
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​2619
• fix: deprecation warnings source file too large by @​rix0rrr in #​2620

Full Changelog: aws/jsii-compiler@v5.9.35...v5.9.36

aws/jsii-rosetta (jsii-rosetta)

v5.9.39

Compare Source

What's Changed

• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​3612
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​3613
• chore(deps): upgrade jsii & typescript by @​aws-cdk-automation in #​3614
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​3615
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​3616
• chore(deps): upgrade dependencies by @​aws-cdk-automation in #​3617

Full Changelog: aws/jsii-rosetta@v5.9.38...v5.9.39

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.