Merge branch 'main' into appsync-association-depends-schema

.github/workflows/close-stale-prs.yml

@@ -11,7 +11,7 @@ jobs:
       pull-requests: write
     runs-on: ubuntu-latest
     steps:
-      - uses: rix0rrr/close-stale-prs@main
+      - uses: cdklabs/close-stale-prs@main
         with:
           # Required
           # Must be PROJEN_GITHUB_TOKEN because the default GHA GitHub token will not have permissions to

.github/workflows/github-merit-badger.yml

@@ -10,11 +10,11 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: aws-github-ops/github-merit-badger@main
+      - uses: cdklabs/github-merit-badger@main
         id: merit-badger
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           badges: '[beginning-contributor,repeat-contributor,valued-contributor,admired-contributor,star-contributor,distinguished-contributor]'
           thresholds: '[0,3,6,13,25,50]'
           badge-type: 'achievement'
-          ignore-usernames: '[rix0rrr,MrArnoldPalmer,iliapolo,otaviomacedo,madeline-k,kaizencc,comcalvi,TheRealAmazonKendra,vinayak-kukreja,mrgrain,pahud,cgarvis,kellertk,HBobertz,sumupitchayan,SankyRed,udaypant,colifran,khushail,scanlonp,mikewrighton,moelasmar,paulhcsun,awsmjs,evgenyka,GavinZZ,aaythapa,xazhao,ConnorRobertson,ssenchenko,gracelu0,jfuss,SimonCMoore,aws-cdk-automation,dependabot[bot],mergify[bot]]'
+          ignore-usernames: '[rix0rrr,iliapolo,otaviomacedo,kaizencc,comcalvi,TheRealAmazonKendra,vinayak-kukreja,mrgrain,pahud,cgarvis,kellertk,HBobertz,sumupitchayan,SankyRed,udaypant,colifran,khushail,scanlonp,mikewrighton,moelasmar,paulhcsun,awsmjs,evgenyka,GavinZZ,aaythapa,xazhao,ConnorRobertson,ssenchenko,gracelu0,jfuss,SimonCMoore,shikha372,kirtishrinkhala,godwingrs22,aws-cdk-automation,dependabot[bot],mergify[bot]]'

.github/workflows/issue-reprioritization.yml

@@ -11,7 +11,7 @@ jobs:
       repository-projects: write
     runs-on: ubuntu-latest
     steps:
-      - uses: kaizencc/issue-reprioritization-manager@main
+      - uses: cdklabs/issue-reprioritization-manager@main
         id: reprioritization-manager
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/pr-labeler.yml

@@ -24,7 +24,7 @@ jobs:
     permissions:
       pull-requests: write
     steps:
-      - uses: kaizencc/pr-triage-manager@main
+      - uses: cdklabs/pr-triage-manager@main
         with:
           github-token: ${{ secrets.GITHUB_TOKEN }}
 

.github/workflows/pr-linter-exemption-labeler.yml

@@ -12,6 +12,6 @@ jobs:
     if: ${{ (github.event.issue.pull_request) && (github.event.issue.state == 'open') }}
     runs-on: ubuntu-latest
     steps:
-      - uses: TheRealAmazonKendra/pr-linter-exemption-labeler@main
+      - uses: cdklabs/pr-linter-exemption-labeler@main
         with:
           github-token: ${{ secrets.PROJEN_GITHUB_TOKEN }}

.github/workflows/request-cli-integ-test.yml

@@ -19,7 +19,7 @@ jobs:
           persist-credentials: false
       - name: Find changed cli files
         id: changed-cli-files
-        uses: tj-actions/changed-files@90a06d6ba9543371ab4df8eeca0be07ca6054959
+        uses: tj-actions/changed-files@800a2825992141ddde1a8bca8ad394cec34d3188
         with:
           base_sha: ${{ github.event.pull_request.base.sha }}
           files_yaml: |
@@ -46,7 +46,7 @@ jobs:
           git config --global user.email '[email protected]'
           git push --force --atomic https://github.com/${{ github.repository }}.git FETCH_HEAD:test-main-pipeline
       - name: Explain next steps
-        uses: thollander/actions-comment-pull-request@1d3973dc4b8e1399c0620d3f2b1aa5e795465308
+        uses: thollander/actions-comment-pull-request@fabd468d3a1a0b97feee5f6b9e499eab0dd903f6
         with:
           message: |
             :arrow_right: **PR build request submitted to `test-main-pipeline`** :arrow_left:

.mergify.yml

@@ -11,7 +11,7 @@ pull_request_rules:
       label:
         add: [ contribution/core ]
     conditions:
-      - author~=^(rix0rrr|MrArnoldPalmer|iliapolo|otaviomacedo|madeline-k|kaizencc|comcalvi|TheRealAmazonKendra|vinayak-kukreja|mrgrain|pahud|cgarvis|kellertk|HBobertz|sumupitchayan|SankyRed|udaypant|colifran|scanlonp|mikewrighton|moelasmar|paulhcsun|awsmjs|evgenyka|GavinZZ|aaythapa|xazhao|ConnorRobertson|ssenchenko|gracelu0|jfuss|SimonCMoore)$
+      - author~=^(rix0rrr|iliapolo|otaviomacedo|kaizencc|comcalvi|TheRealAmazonKendra|vinayak-kukreja|mrgrain|pahud|cgarvis|kellertk|HBobertz|sumupitchayan|SankyRed|udaypant|colifran|scanlonp|mikewrighton|moelasmar|paulhcsun|awsmjs|evgenyka|GavinZZ|aaythapa|xazhao|ConnorRobertson|ssenchenko|gracelu0|jfuss|SimonCMoore|shikha372|kirtishrinkhala|godwingrs22)$
       - -label~="contribution/core"
   - name: automatic merge
     actions:

CHANGELOG.v2.alpha.md

@@ -2,6 +2,36 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.131.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.130.0-alpha.0...v2.131.0-alpha.0) (2024-03-01)
+
+## [2.130.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.129.0-alpha.0...v2.130.0-alpha.0) (2024-02-23)
+
+## [2.129.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.128.0-alpha.0...v2.129.0-alpha.0) (2024-02-21)
+
+
+### Bug Fixes
+
+* **appconfig:** scope generated alarm role policy to '*' for composite alarm support ([#29171](https://github.com/aws/aws-cdk/issues/29171)) ([c17879d](https://github.com/aws/aws-cdk/commit/c17879dd8dab526695e69c6faf8345292634ba24))
+
+## [2.128.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.127.0-alpha.0...v2.128.0-alpha.0) (2024-02-14)
+
+
+### ⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES
+
+* **app-staging-synthesizer-alpha:** `stagingBucketEncryption` property is now required. For existing apps, specify `BucketEncryption.KMS` to retain existing behavior. For new apps, choose the bucket encryption that makes most sense for your use case. `BucketEncryption.S3_MANAGED` is available and is intended to be the default when this module is stabilized.
+
+### Features
+
+* **app-staging-synthesizer-alpha:** require passing `stagingBucketEncryption` and note that we intend to default to `S3_MANAGED` in the future ([#28978](https://github.com/aws/aws-cdk/issues/28978)) ([fc8b955](https://github.com/aws/aws-cdk/commit/fc8b95528f97704588329abaa33cf45b07273b9e)), closes [#28815](https://github.com/aws/aws-cdk/issues/28815) [#28903](https://github.com/aws/aws-cdk/issues/28903) [/github.com/aws/aws-cdk/pull/28978#issuecomment-1930007176](https://github.com/aws//github.com/aws/aws-cdk/pull/28978/issues/issuecomment-1930007176)
+* **pipes-enrichments:** new EventBridge Pipes enrichments alpha module ([#29063](https://github.com/aws/aws-cdk/issues/29063)) ([5a54ec5](https://github.com/aws/aws-cdk/commit/5a54ec5923eaf580b32184a84caed118945e3f6d))
+* **pipes-targets:** new EventBridge Pipes targets alpha module  ([#29057](https://github.com/aws/aws-cdk/issues/29057)) ([9419f54](https://github.com/aws/aws-cdk/commit/9419f547569ef7ec4c8b9de19498cb10b3d6c30c))
+* **scheduler-targets-alpha:** `SageMakerStartPipelineExecution` Target ([#28927](https://github.com/aws/aws-cdk/issues/28927)) ([db260b0](https://github.com/aws/aws-cdk/commit/db260b091b6328b36cd8a541a5ab55048839daa6)), closes [#27457](https://github.com/aws/aws-cdk/issues/27457)
+
+
+### Bug Fixes
+
+* **appconfig:** deployment recreated on every cdk deployment ([#28782](https://github.com/aws/aws-cdk/issues/28782)) ([a21731c](https://github.com/aws/aws-cdk/commit/a21731c9b1f34525433fbee668ebb2321debf5b8))
+
 ## [2.127.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.126.0-alpha.0...v2.127.0-alpha.0) (2024-02-09)