fix(deps): consume agentcore-cdk alpha.49 by aidandaly24 · Pull Request #2087 · aws/agentcore-cli

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

aidandaly24 · 2026-08-24T18:03:13Z

Description

Updates the CLI-managed @aws/agentcore-cdk dependency from 0.1.0-alpha.48 to the published
0.1.0-alpha.49 release.

The new construct release includes Quick Create payment connector support from
aws/agentcore-l3-cdk-constructs#324, which is required by the CLI flow merged in #2017.

This change updates the vended CDK manifest, dependency reconciliation expectations, prerelease
skew tests, and the asset snapshot. Existing projects are upgraded to alpha.49 by the normal
managed-dependency sync on their next deploy.

Related Issue

N/A. This is the published dependency follow-up for #2017 and
aws/agentcore-l3-cdk-constructs#324.

Documentation PR

N/A. The CLI interface and documentation were included in #2017.

Type of Change

Testing

How have you tested the change?

I ran npm run test:unit and npm run test:integ
I ran npm run typecheck
I ran npm run lint
If I modified src/assets/, I ran npm run test:update-snapshots and committed the updated snapshots

Additional verification:

Focused dependency-management and asset snapshot tests: 158 passed
npm run format:check
Commit hooks: ESLint, Prettier, secretlint, and typecheck passed
The full unit snapshot run reached 6,024 passing tests before 29 unrelated local environment
failures caused by a missing built CLI, sandboxed process/file operations, and exhausted test ports

Checklist

I have read the CONTRIBUTING document
I have added any necessary tests that prove my fix is effective or my feature works
I have updated the documentation accordingly, or no documentation change is required
I have added an appropriate example to the documentation, or no new example is required
My changes generate no new warnings
Any dependent changes have been merged and published

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the
terms of your choice.

agentcore-devx-automation · 2026-08-24T18:05:13Z

Claude Security Review: no high-confidence findings. (run)

github-actions · 2026-08-24T18:05:14Z

Package Tarball

aws-agentcore-0.27.1.tgz

How to install

gh release download pr-2087-tarball --repo aws/agentcore-cli --pattern "*.tgz" --dir /tmp/pr-tarball
npm install -g /tmp/pr-tarball/aws-agentcore-0.27.1.tgz

notgitika

not for this PR but can we find a way to automate this by adding it to our release workflow? it already creates a version bump PR

aidandaly24 · 2026-08-24T18:07:24Z

Yes lets cut an issue for that

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the Prepare Release job that runs it, reformats the template, and refreshes the asset snapshot. The bump now rides into the existing reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag workflow input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

The @aws/agentcore-cdk pin lived as a hand-typed literal in plan.test.ts and sync.test.ts as well as in src/assets/cdk/package.json, so every prerelease bump (e.g. #2087, alpha.48 -> alpha.49) had to edit the same string in all of them. Read the pin from the vended template instead via a shared fixture, and derive the skew-test's 'newer' example from it, so bumping the template no longer touches these tests. The asset snapshot remains the literal guardrail that trips on any unintended pin change.

Adds scripts/sync-vended-cdk.ts, which resolves @aws/agentcore-cdk from an npm dist-tag (or an explicit --to) and rewrites the pin in the vended CDK template, and wires a 'Sync vended CDK version' step into the active release workflow (release-main-and-preview.yml) before its existing snapshot-update step. The bump now rides into the reviewed release PR instead of a separate hand-edited PR per prerelease (see #2087). Tag is configurable via the new cdk_dist_tag input (default: latest); the step is a no-op when the template is already current. Depends on the pin de-duplication in the parent commit: because the dependency-management tests derive the pin from the template, this bump needs no test edits.

fix(deps): consume agentcore-cdk alpha.49
895d3e9

aidandaly24 requested a review from a teamAugust 24, 2026 18:03

github-actionsBot added the size/s PR size: S label Aug 24, 2026

aidandaly24 temporarily deployed to e2e-testing August 24, 2026 18:03 — with GitHub Actions Inactive

github-actionsBot added the agentcore-harness-reviewing AgentCore Harness review in progress label Aug 24, 2026

agentcore-devx-automationBot added the claude-security-reviewing Claude Code /security-review in progress label Aug 24, 2026

github-actionsBot removed the agentcore-harness-reviewing AgentCore Harness review in progress label Aug 24, 2026

agentcore-devx-automationBot removed the claude-security-reviewing Claude Code /security-review in progress label Aug 24, 2026

notgitika approved these changes Aug 24, 2026
View reviewed changes

aidandaly24 merged commit ddb32a2 into aws:mainAug 24, 2026
32 of 35 checks passed

This was referenced Aug 26, 2026
test(deps): derive vended agentcore-cdk pin from the template #2117
Merged
feat(release): auto-bump the vended CDK pin during release prep #2118
Merged