Update dependency aws-cdk-lib to v2.251.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
aws-cdk-lib (source)	2.250.0 → 2.251.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.251.0

Compare Source

⚠ BREAKING CHANGES

• ** L1 resources are automatically generated from public CloudFormation Resource Schemas. They are built to closely reflect the real state of CloudFormation. Sometimes these updates can contain changes that are incompatible with previous types, but more accurately reflect reality. In this release we have changed:

aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup attribute removed.
aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: PolicyItem type removed.
aws-elasticloadbalancing: AWS::ElasticLoadBalancing::LoadBalancer: SourceSecurityGroup type removed.

Features

• update L1 CloudFormation resource definitions (#​37684) (9e6c2ef)
• lambda: add ruby 4.0 runtime (#​37650) (04d4337)
• update L1 CloudFormation resource definitions (#​37644) (e64f943)
• core: Validations class is the new way to add validation plugins to CDK Apps (#​37611) (95696b4), closes #​37613
• core: graduate policyValidationBeta1 interfaces to policyValidation (#​37613) (8c613cf)
• ecs: support for service connect access log configuration (#​36067) (5ad1c06)
• route53: accelerated recovery for public hosted zone (#​36358) (f1b7b03)
• synthetics: support canary group (#​35689) (20ccd31), closes #​34043

Bug Fixes

• core: Stage.policyValidationBeta1 is mutable (#​37612) (3c1faf1)
• core: construct creation stack traces are implicit (#​37643) (5635c20)
• core: synth output is not valid YAML when using policy validation (#​37597) (927dd60), closes #​25331
• core: token stack traces expensively clutter --debug mode (#​37642) (498c546)
• core: tree metadata does not contain logical ID (#​37630) (284ab23)
• ec2: fixing vpc endpoint for eu-isoe-west-1 region (#​37596) (555c930), closes #​31690
• events-targets: make LogGroupTargetInput extend RuleTargetInput for JSII compatibility (#​37451) (46dbc7a), closes #​36733
• lambda: add Token.isUnresolved checks to provisioned poller config validation (#​37197) (667ed30)
• stepfunctions-tasks: warn when CallAwsServiceCrossRegion endpoint is resolved from state input (#​37646) (9fdf590)

---

Alpha modules (2.251.0-alpha.0)

Features

• bedrock-agentcore-alpha: add L2 constructs for policy and policy engine (#​37238) (1e89e7e)
• bedrock-agentcore-alpha: add observability configuration for Runtime (#​36689) (34b43aa), closes #​36596
• bedrock-agentcore-alpha: support No Authorization for AgentCore Gateway (#​36610) (f20bd8e)
• dsql-alpha: initial L2 construct (#​34599) (be1a458), closes #​34593

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.