chore(deps-dev): bump @guardian/cdk from 61.11.1 to 62.1.2

[dependabot]

Bumps @guardian/cdk from 61.11.1 to 62.1.2.

Release notes

Sourced from @​guardian/cdk's releases.

v62.1.2

Patch Changes

• f1fd01b: The new deployment mechanism (GuEc2AppExperimental) now suspends some additional ASG processes:

  AZRebalance InstanceRefresh ReplaceUnhealthy ScheduledActions HealthCheck

  https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-suspend-resume-processes.html#process-types

  This follows a recommendation from AWS and should make deployments (and rollbacks) more reliable: https://repost.aws/knowledge-center/auto-scaling-group-rolling-updates

v62.1.1

Patch Changes

• d0ad2ec: no-op

  This is a no-op release to test migration to NPM trusted publishing.

v62.0.1

Patch Changes

• 810a08a: Update aws-cdk to ^2.1030.0, aws-cdk-lib to ^2.219.0, constructs to ^10.4.2

v62.0.0

Major Changes

• 12be0e5: Access logging for Application Load Balancers (ALBs) is now enabled by default.

  Application Load Balancer (ALB) access logs describe, in detail, each request processed by a load balancer, including request paths and status codes. They are helpful during incident response and are now enabled by default.

  Previously users of the GuEc2App, GuNodeApp, GuPlayApp , GuPlayWorkerApp and GuEc2AppExperimental patterns could opt-in to this logging via the accessLogging property and configure the S3 prefix.

  This property is now removed and replaced with a new optional boolean property withAccessLogging which defaults to true.

  • When true the ALB will have access logs enabled, configured to write to the account's S3 bucket using a specific prefix for compatibility with the gucdk_access_logs database created in Athena via https://github.com/guardian/aws-account-setup.
  • When false the access_logs.s3.enabled attribute is now explicitly set to false.

  A withAccessLogging property is also added to the GuApplicationLoadBalancer construct, with the same behaviour.

  NOTE: This feature requires a region to be set at the GuStack level, else the following error will be thrown:

  ValidationError: Region is required to enable ELBv2 access logging

  Here's an example of how to set the region:

... (truncated)

Changelog

Sourced from @​guardian/cdk's changelog.

62.1.2

Patch Changes

• f1fd01b: The new deployment mechanism (GuEc2AppExperimental) now suspends some additional ASG processes:

  AZRebalance InstanceRefresh ReplaceUnhealthy ScheduledActions HealthCheck

  https://docs.aws.amazon.com/autoscaling/ec2/userguide/as-suspend-resume-processes.html#process-types

  This follows a recommendation from AWS and should make deployments (and rollbacks) more reliable: https://repost.aws/knowledge-center/auto-scaling-group-rolling-updates

62.1.1

Patch Changes

• d0ad2ec: no-op

  This is a no-op release to test migration to NPM trusted publishing.

62.1.0

Minor Changes

• a335873: Upgrade aws sdk to v3

62.0.1

Patch Changes

• 810a08a: Update aws-cdk to ^2.1030.0, aws-cdk-lib to ^2.219.0, constructs to ^10.4.2

62.0.0

Major Changes

• 12be0e5: Access logging for Application Load Balancers (ALBs) is now enabled by default.

  Application Load Balancer (ALB) access logs describe, in detail, each request processed by a load balancer, including request paths and status codes. They are helpful during incident response and are now enabled by default.

  Previously users of the GuEc2App, GuNodeApp, GuPlayApp , GuPlayWorkerApp and GuEc2AppExperimental patterns could opt-in to this logging via the accessLogging property and configure the S3 prefix.

  This property is now removed and replaced with a new optional boolean property withAccessLogging which defaults to true.

  • When true the ALB will have access logs enabled, configured to write to the account's S3 bucket using a specific prefix for compatibility with the gucdk_access_logs database created in Athena via https://github.com/guardian/aws-account-setup.

... (truncated)

Commits

• b942eb0 Bump package version (#2766)
• f1fd01b fix(experimental-ec2-pattern): suspend more processes during deployment (#2752)
• a986201 Merge pull request #2762 from guardian/dependabot/npm_and_yarn/aws-sdk/creden...
• a92613a chore(deps): bump @​aws-sdk/credential-providers from 3.908.0 to 3.922.0
• a8bc716 Merge pull request #2763 from guardian/dependabot/npm_and_yarn/aws-sdk/client...
• 3fc1687 chore(deps): bump @​aws-sdk/client-ssm from 3.908.0 to 3.922.0
• 7e1e118 Merge pull request #2761 from guardian/dependabot/npm_and_yarn/changesets/cli...
• 470a56c chore(deps): bump @​changesets/cli from 2.29.6 to 2.29.7
• 0c69bc3 Merge pull request #2753 from guardian/dependabot/github_actions/actions/setu...
• 438ad0f chore(deps): bump actions/setup-node from 5 to 6
• Additional commits viewable in compare view

Maintainer changes

This version was pushed to npm by [GitHub Actions](https://www.npmjs.com/~GitHub Actions), a new releaser for @​guardian/cdk since your current version.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Superseded by #217.