Merge branch 'main' into pipelines-fleet-certificate

Author: leonmk-aws

.github/workflows/security-guardian.yml

@@ -1,6 +1,6 @@
 name: Security Guardian
 on:
-  pull_request_target: {}
+  pull_request: {}
 
 jobs:
   log-skip:
@@ -19,6 +19,7 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v6
         with:
+          ref: ${{ github.event.pull_request.head.sha }}
           fetch-depth: 0  
 
       - name: Install cfn-guard
@@ -47,8 +48,8 @@ jobs:
           echo "${{ github.event.pull_request.head.sha }}" > ./test-results/pr_sha
       
       - name: Upload Security Guardian XML Reports
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v5
         if: always()
         with:
           name: security-guardian-reports
-          path: test-results/
+          path: test-results/

.github/workflows/security-report.yml

@@ -10,11 +10,10 @@ jobs:
     permissions:
       checks: write
       pull-requests: write
-      id-token: write
       actions: read
     steps:
       - name: Download artifacts
-        uses: actions/download-artifact@v5
+        uses: actions/download-artifact@v6
         with:
           name: security-guardian-reports
           path: test-results/
@@ -45,6 +44,7 @@ jobs:
           group_suite: true
           include_skipped: false
           check_title_template: '{{TEST_NAME}}'
+          include_empty_in_summary: false
 
       - name: Publish Security Test Results for resolved templates
         uses: mikepenz/action-junit-report@v6
@@ -63,3 +63,4 @@ jobs:
           group_suite: true
           include_skipped: false
           check_title_template: '{{TEST_NAME}}'
+          include_empty_in_summary: false

.github/workflows/spec-update.yml

@@ -58,9 +58,9 @@ jobs:
       # Build @aws-cdk/spec2cdk and run L1 gen script to generate base files for new modules
       - name: Build @aws-cdk/spec2cdk
         run: lerna run build --stream --no-progress --skip-nx-cache --scope @aws-cdk/spec2cdk
-      - name: Generate L1s
-        working-directory: packages/aws-cdk-lib
+      - name: Generate code
         run: yarn gen
+        run: lerna run gen --stream --no-progress --skip-nx-cache --scope aws-cdk-lib --scope @aws-cdk/mixins-preview
 
       # Next, create and upload the changes as a patch file. This will later be downloaded to create a pull request
       # Creating a pull request requires write permissions and it's best to keep write privileges isolated.

CHANGELOG.v2.alpha.md

@@ -2,6 +2,8 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.232.1-alpha.0](https://github.com/aws/aws-cdk/compare/v2.232.0-alpha.0...v2.232.1-alpha.0) (2025-12-05)
+
 ## [2.232.0-alpha.0](https://github.com/aws/aws-cdk/compare/v2.231.0-alpha.0...v2.232.0-alpha.0) (2025-12-04)
 
 

CHANGELOG.v2.md

@@ -2,6 +2,13 @@
 
 All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.
 
+## [2.232.1](https://github.com/aws/aws-cdk/compare/v2.232.0...v2.232.1) (2025-12-05)
+
+
+### Bug Fixes
+
+* **core:** TypeScript properties missing for types which extend internal interfaces ([#36313](https://github.com/aws/aws-cdk/issues/36313)) ([3e7e17c](https://github.com/aws/aws-cdk/commit/3e7e17c0def24567610a541e39195596f5d83387)), closes [#36310](https://github.com/aws/aws-cdk/issues/36310)
+
 ## [2.232.0](https://github.com/aws/aws-cdk/compare/v2.231.0...v2.232.0) (2025-12-04)
 
 

packages/@aws-cdk-testing/framework-integ/test/aws-lambda-nodejs/test/whitespace path/tsconfig.json

@@ -25,7 +25,7 @@
     "strict": true,
     "strictNullChecks": true,
     "strictPropertyInitialization": true,
-    "stripInternal": true,
+    "stripInternal": false,
     "target": "ES2022",
     "composite": true,
     "tsBuildInfoFile": "tsconfig.tsbuildinfo"

packages/@aws-cdk-testing/framework-integ/test/aws-lambda-nodejs/tsconfig.json

@@ -24,7 +24,7 @@
     "strict": true,
     "strictNullChecks": true,
     "strictPropertyInitialization": true,
-    "stripInternal": true,
+    "stripInternal": false,
     "target": "ES2022",
     "composite": true,
     "tsBuildInfoFile": "tsconfig.tsbuildinfo"

packages/@aws-cdk/app-staging-synthesizer-alpha/tsconfig.json

@@ -22,7 +22,7 @@
     "strict": true,
     "strictNullChecks": true,
     "strictPropertyInitialization": true,
-    "stripInternal": true,
+    "stripInternal": false,
     "target": "es2022",
     "esModuleInterop": false,
     "isolatedModules": true,

packages/@aws-cdk/aws-amplify-alpha/tsconfig.json

@@ -22,7 +22,7 @@
     "strict": true,
     "strictNullChecks": true,
     "strictPropertyInitialization": true,
-    "stripInternal": true,
+    "stripInternal": false,
     "target": "es2022",
     "composite": true,
     "tsBuildInfoFile": "tsconfig.tsbuildinfo",

packages/@aws-cdk/aws-applicationsignals-alpha/tsconfig.json

@@ -24,7 +24,7 @@
     "strict": true,
     "strictNullChecks": true,
     "strictPropertyInitialization": true,
-    "stripInternal": true,
+    "stripInternal": false,
     "target": "es2022",
     "composite": false,
     "tsBuildInfoFile": "tsconfig.tsbuildinfo"