Skip to content

Chore(deps): Bump cdk-nag from 2.38.2 to 3.0.2 in /backend/compact-connect - #2009

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/compact-connect/cdk-nag-3.0.2
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/pip/backend/compact-connect/cdk-nag-3.0.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Bumps cdk-nag from 2.38.2 to 3.0.2.

Release notes

Sourced from cdk-nag's releases.

v3.0.2

3.0.2 (2026-08-04)

Bug Fixes

  • isAcknowledged() misses acknowledgments on aws-cdk-lib >=2.262.1 due to prefix casing (#2362) (67ae6d0)

v3.0.1

3.0.1 (2026-06-15)

Bug Fixes

  • walk ancestor tree in isAcknowledged and WriteNagSuppressions (#2349) (9c2d2cb)

v3.0.0

3.0.0 (2026-06-12)

⚠ BREAKING CHANGES

  • cdk nag v3 rewrites the core engine from an IAspect to an IPolicyValidationPlugin. Rule packs now participate in CDK's native policy validation framework instead of emitting annotations during synthesis.

Features

Commits
  • 67ae6d0 fix: isAcknowledged() misses acknowledgments on aws-cdk-lib >=2.262.1 due to ...
  • 876778c chore(deps): upgrade dev dependencies (#2363)
  • 9db6d74 chore(deps): upgrade dev dependencies (#2361)
  • 7357acd chore(deps): upgrade dev dependencies (#2360)
  • 109b7b3 chore(deps): upgrade dev dependencies (#2358)
  • 33a24be chore(deps): upgrade dev dependencies (#2355)
  • ca6d1b5 chore(deps): upgrade dev dependencies (#2354)
  • 5b9ed9a chore(deps): upgrade dev dependencies (#2353)
  • 195b723 chore(deps): upgrade dev dependencies (#2352)
  • 9c2d2cb fix: walk ancestor tree in isAcknowledged and WriteNagSuppressions (#2349)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file python Pull requests that update python code labels Oct 19, 2026
@coderabbitai

coderabbitai Bot commented Oct 19, 2026 •

Copy link
Copy Markdown
Contributor

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: 42b7824a-93c3-4916-bf23-a8a228d6dc45

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/compact-connect/cdk-nag-3.0.2 branch from e6c2167 to 81461ab Compare October 27, 2026 13:15
Bumps [cdk-nag](https://github.com/cdklabs/cdk-nag) from 2.38.2 to 3.0.2.
- [Release notes](https://github.com/cdklabs/cdk-nag/releases)
- [Commits](cdklabs/cdk-nag@v2.38.2...v3.0.2)

---
updated-dependencies:
- dependency-name: cdk-nag
  dependency-version: 3.0.2
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/pip/backend/compact-connect/cdk-nag-3.0.2 branch from 81461ab to 7a61d17 Compare October 30, 2026 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file python Pull requests that update python code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants