v0.18.3

What's Changed

• Updated dependabot file to use uv and remove invalid config by @simonwgill in #332
• Bump the regular-updates group with 5 updates by @dependabot[bot] in #333
• Bump the regular-updates group with 3 updates by @dependabot[bot] in #336
• CLOUD-733: Require fixed versions so dependency tree is correct in downstream by @simonwgill in #338
• Bump the regular-updates group with 2 updates by @dependabot[bot] in #339
• Bump mypy from 1.20.0 to 2.3.1 by @dependabot[bot] in #343
• Bump the regular-updates group with 2 updates by @dependabot[bot] in #341
• Bump ruff from 0.15.10 to 0.16.4 by @dependabot[bot] in #342

Full Changelog: v0.18.2...v0.18.3

v0.18.2

What's Changed

• Update cdk8s imports by @michelesr in #331
• Bump aws-cdk-lib from 2.248.0 to 2.253.0 by @dependabot[bot] in #330

Full Changelog: v0.18.1...v0.18.2

v0.18.1

What's Changed

• CLOUD-1010 Update k8s lambda layer in ca cdk constructs to v36 by @michelesr in #329

Full Changelog: v0.18.0...v0.18.1

v0.18.0

What's Changed

• Pin dependency upper boundaries by @michelesr in #326
• CLOUD-809: chore(aurora clone lambda) update from python 3.10 to 3.14 by @ruthwells in #328. This will impact three lambdas which are part of the AuroraCloneRefresh construct, and one lambda that is part of the ModifyDBClusterPassword construct, so projects using these constructs in a production environment are advised to test the changes in a non-production environment first.

Full Changelog: v0.17.4...v0.18.0

v0.17.4

🔐 Security & CI Improvements

Action Pinning: Pinned all GitHub Actions in .github/workflows/publish.yml and .github/workflows/test.yaml to strict commit SHAs instead of mutable version tags.

👥 Code Ownership

Team Transition: Reassigned repository ownership in CODEOWNERS from @citizensadvice/devops to @citizensadvice/cloud-engineering.

📦 Dependency Updates

Direct Dependency Bump: Updated the aws-cdk-lambda-layer-kubectl-v35 requirement in pyproject.toml from >=2.1.0 to >=2.2.2.

Lockfile Refresh (uv.lock): Updated several package versions to their latest upstream releases. Major highlights include:

• AWS & CDK: aws-cdk-lib (v2.216.0 → v2.248.0), cdk8s (v2.70.15 → v2.70.54), and constructs (v10.4.2 → v10.6.0).
• Linting & Typing: ruff (v0.13.1 → v0.15.10), mypy (v1.18.2 → v1.20.0), and assorted mypy-boto3-* stubs.
• Testing: pytest (v8.4.2 → v9.0.3) and syrupy (v4.9.1 → v5.1.0).
• Additions: Added librt (v0.9.0) to the resolution graph.

v0.17.3

What's Changed

• CLOUD-198 Update k8s client libraries in ca-cdk-constructs to 1.35 by @michelesr in #321

Full Changelog: v0.17.2...v0.17.3

v0.17.2

Full Changelog: v0.17.1...v0.17.2

v0.17.0

What's Changed

• Bump ruff from 0.12.11 to 0.12.12 by @dependabot[bot] in #309
• Bump the regular-updates group across 1 directory with 3 updates by @dependabot[bot] in #312
• Use alls-green to check all tests have passed by @MatthewCane in #308
• Bump ruff from 0.12.12 to 0.13.0 by @dependabot[bot] in #311
• Bump the regular-updates group with 4 updates by @dependabot[bot] in #313
• Migrate to uv package manager by @MatthewCane in #315
• Add Justfile, update README, update tests by @MatthewCane in #316
• Add Python 3.14 to the testing matrix in GitHub Actions workflow by @MatthewCane in #317
• Add cdk8s import just command, exclude cdk8s imports from pre-commit by @MatthewCane in #318
• Use CDK kubectl layer v34 by @MatthewCane in #319

Full Changelog: v0.16.1...v0.17.0

v0.16.1

What's Changed

• Bump ruff from 0.12.8 to 0.12.10 by @dependabot[bot] in #306
• Bump ruff from 0.12.10 to 0.12.11 by @dependabot[bot] in #307
• Bump the regular-updates group across 1 directory with 5 updates by @dependabot[bot] in #293

Full Changelog: v0.16.0...v0.16.1

v0.16.0

WAF:

• Added support for managed_rule_group_configs in managed rule groups.
• Introduced waf_scope parameter for IP and URI restriction rules, allowing specification of CLOUDFRONT or REGIONAL scope.

Python:

• Updated requires-python in pyproject.toml to >=3.10, <3.14.
• Added Python 3.13 to the test matrix in the CI/CD pipeline.

Full Changelog: v.0.15.0...v0.16.0