Skip to content

chore: bump aws-cdk-lib to ^2.254.0 (fixes Windows Node EINVAL) - #3317

Merged
sarayev merged 7 commits into
mainfrom
chore/bump-aws-cdk-lib-2.254
Sep 1, 2026
Merged

sarayev merged 7 commits into
mainfrom
chore/bump-aws-cdk-lib-2.254

Conversation

@svidgen

@svidgen svidgen commented Aug 29, 2026

Copy link
Copy Markdown
Member

Summary

Raises the aws-cdk-lib peer dependency floor from ^2.234.1 to ^2.254.0 across all packages and refreshes the lockfile (now resolves aws-cdk-lib to 2.267.0).

Why

On Windows with recent Node.js releases, CDK asset fingerprinting crashes with EINVAL because fs.openSync is invoked with the O_SYNC | O_DSYNC flag combination, which Node rejects on that platform. This makes the Windows unit/coverage job fully red while Linux and macOS stay green.

The crash was fixed upstream in aws-cdk and first released in aws-cdk-lib 2.254.0. Bumping the floor to ^2.254.0 pulls in the fix.

What changed

  • Bumped aws-cdk-lib from ^2.234.1 to ^2.254.0 in all 16 packages/*/package.json files (peer/dep/devDep as applicable). No other dependencies changed.
  • Refreshed package-lock.json — aws-cdk-lib now resolves to 2.267.0 (latest within the range), deduped across the workspace.
  • Updated packages/create-amplify/src/default_packages.json so the default aws-cdk-lib pin for new projects matches the lockfile (generated via npm run update:create-amplify-deps).
  • Added a changeset (patch bump for affected published packages).

How tested

  • npm install + npm run build — clean.
  • Ran the unit/integration suites. All CDK-heavy suites pass (in-memory CDK synthesis integration tests, auth-construct, backend-storage, backend-data): 280/280.
  • No CDK-generated construct snapshots/logical IDs changed as a result of the bump, so no snapshot regeneration was needed.
  • check:package-lock, check:package-json, check:api, and prettier all pass.

The only local failures were in platform-core config/telemetry tests that write to a real user-profile path; these fail identically with and without this change in the local sandboxed environment (permission-restricted ~ path) and are unrelated to the CDK bump.

Raise the aws-cdk-lib peer dependency floor from ^2.234.1 to ^2.254.0 across
all packages and refresh the lockfile (resolves to 2.267.0). This picks up the
upstream fix for a crash during asset fingerprinting on Windows with newer
Node.js releases, where fs.openSync was called with O_SYNC|O_DSYNC and failed
with EINVAL. The fix shipped in aws-cdk-lib 2.254.0.
@svidgen
svidgen requested review from a team as code owners August 29, 2026 00:12
@changeset-bot

changeset-bot Bot commented Aug 29, 2026 •

Copy link
Copy Markdown

🦋 Changeset detected

Latest commit: 86211d1

The changes in this PR will be included in the next version bump.

This PR includes changesets to release 15 packages
Name Type
@aws-amplify/backend Patch
@aws-amplify/backend-output-storage Patch
@aws-amplify/backend-notifications Patch
@aws-amplify/backend-function Patch
@aws-amplify/backend-deployer Patch
@aws-amplify/auth-construct Patch
@aws-amplify/backend-storage Patch
@aws-amplify/ai-constructs Patch
@aws-amplify/platform-core Patch
@aws-amplify/plugin-types Patch
@aws-amplify/backend-data Patch
@aws-amplify/backend-auth Patch
@aws-amplify/backend-cli Patch
@aws-amplify/backend-ai Patch
create-amplify Patch

Not sure what this means? Click here to learn what changesets are.

Click here if you're a maintainer who wants to add another changeset to this PR

@sarayev
sarayev merged commit 9db547a into main Sep 1, 2026
208 of 211 checks passed
@sarayev
sarayev deleted the chore/bump-aws-cdk-lib-2.254 branch September 1, 2026 11:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants