@aws-cdk/integ-runner 2.197.22 → 2.197.24

package/lib/workers/extract/index.js

@@ -1345,6 +1345,13 @@ var init_interfaces = __esm({
   }
 });
 
+// ../cloud-assembly-schema/lib/cloud-assembly/validation-report-schema.ts
+var init_validation_report_schema = __esm({
+  "../cloud-assembly-schema/lib/cloud-assembly/validation-report-schema.ts"() {
+    "use strict";
+  }
+});
+
 // ../cloud-assembly-schema/lib/cloud-assembly/index.ts
 var cloud_assembly_exports = {};
 __export(cloud_assembly_exports, {
@@ -1362,6 +1369,7 @@ var init_cloud_assembly = __esm({
     init_artifact_schema();
     init_context_queries();
     init_interfaces();
+    init_validation_report_schema();
   }
 });
 
@@ -4723,7 +4731,7 @@ var require_semver2 = __commonJS({
 // ../cloud-assembly-schema/cli-version.json
 var require_cli_version = __commonJS({
   "../cloud-assembly-schema/cli-version.json"(exports2, module2) {
-    module2.exports = { version: "2.1123.0" };
+    module2.exports = { version: "2.1124.1" };
   }
 });
 
@@ -6756,6 +6764,175 @@ var require_integ_schema = __commonJS({
   }
 });
 
+// ../cloud-assembly-schema/schema/validation-report.schema.json
+var require_validation_report_schema = __commonJS({
+  "../cloud-assembly-schema/schema/validation-report.schema.json"(exports2, module2) {
+    module2.exports = {
+      $ref: "#/definitions/PolicyValidationReportJson",
+      definitions: {
+        PolicyValidationReportJson: {
+          description: "The top-level structure of the policy validation report file.",
+          type: "object",
+          properties: {
+            version: {
+              description: "Protocol version",
+              type: "string"
+            },
+            title: {
+              description: "Report title, if present.",
+              type: "string"
+            },
+            pluginReports: {
+              description: "Reports from all validation plugins that ran during synthesis.",
+              type: "array",
+              items: {
+                $ref: "#/definitions/PluginReportJson"
+              }
+            }
+          },
+          required: ["version", "pluginReports"]
+        },
+        PluginReportJson: {
+          description: "A report from a single validation plugin.",
+          type: "object",
+          properties: {
+            pluginName: {
+              description: "The name of the plugin that produced this report.",
+              type: "string"
+            },
+            pluginVersion: {
+              description: "Version of the plugin that produced this report.",
+              type: "string"
+            },
+            conclusion: {
+              description: "Whether the plugin's validation passed or failed.",
+              $ref: "#/definitions/PolicyValidationReportConclusion"
+            },
+            metadata: {
+              description: "Additional plugin-specific metadata.",
+              type: "object",
+              additionalProperties: {
+                type: "string"
+              }
+            },
+            violations: {
+              description: "Violations found by this plugin.",
+              type: "array",
+              items: {
+                $ref: "#/definitions/PolicyViolationJson"
+              }
+            }
+          },
+          required: ["pluginName", "conclusion", "violations"]
+        },
+        PolicyValidationReportConclusion: {
+          description: "The final conclusion of a validation report.",
+          type: "string",
+          enum: ["success", "failure"]
+        },
+        PolicyViolationJson: {
+          description: "A single policy violation found by a validation plugin.",
+          type: "object",
+          properties: {
+            ruleName: {
+              description: "The name of the rule that was violated.",
+              type: "string"
+            },
+            description: {
+              description: "A description of the violation.",
+              type: "string"
+            },
+            suggestedFix: {
+              description: "How to fix the violation.",
+              type: "string"
+            },
+            severity: {
+              description: "The severity of the violation.",
+              $ref: "#/definitions/PolicyViolationSeverity"
+            },
+            customSeverity: {
+              description: "If the plugin wants to report using a non-standard severity, put it here.",
+              type: "string"
+            },
+            ruleMetadata: {
+              description: "Additional rule-specific metadata.",
+              type: "object",
+              additionalProperties: {
+                type: "string"
+              }
+            },
+            violatingConstructs: {
+              description: "Constructs that violated the rule.",
+              type: "array",
+              items: {
+                $ref: "#/definitions/ViolatingConstructJson"
+              }
+            }
+          },
+          required: ["ruleName", "description", "severity", "violatingConstructs"]
+        },
+        PolicyViolationSeverity: {
+          description: "The severity of a policy violation.",
+          type: "string",
+          enum: ["fatal", "error", "warning", "info", "custom"]
+        },
+        ViolatingConstructJson: {
+          description: "A construct that violated a policy rule.",
+          type: "object",
+          properties: {
+            constructPath: {
+              description: "The construct path as defined in the application.",
+              type: "string"
+            },
+            constructFqn: {
+              description: "The fully qualified name of the construct class (includes the library name).",
+              type: "string"
+            },
+            libraryVersion: {
+              description: "The version of the library that contains this construct.",
+              type: "string"
+            },
+            cloudFormationResource: {
+              description: "If this construct violation regards a CloudFormation resource, a reference to the resource details.",
+              $ref: "#/definitions/CloudFormationResourceJson"
+            },
+            stackTraces: {
+              description: "Stack traces associated with this violation.",
+              type: "array",
+              items: {
+                type: "string"
+              }
+            }
+          },
+          required: ["constructPath"]
+        },
+        CloudFormationResourceJson: {
+          description: "CloudFormation resource details for a violating construct.",
+          type: "object",
+          properties: {
+            templatePath: {
+              description: "The path to the CloudFormation template containing this resource.",
+              type: "string"
+            },
+            logicalId: {
+              description: "The logical ID of the resource in the CloudFormation template.",
+              type: "string"
+            },
+            propertyPaths: {
+              description: "Properties within the construct where the violation was detected.",
+              type: "array",
+              items: {
+                type: "string"
+              }
+            }
+          },
+          required: ["templatePath", "logicalId"]
+        }
+      }
+    };
+  }
+});
+
 // ../cloud-assembly-schema/schema/version.json
 var require_version = __commonJS({
   "../cloud-assembly-schema/schema/version.json"(exports2, module2) {
@@ -6776,7 +6953,7 @@ __export(manifest_exports, {
 function stripEnumErrors(errors) {
   return errors.filter((e32) => typeof e32.schema === "string" || !("enum" in e32.schema));
 }
-var fs, jsonschema, semver, VERSION_MISMATCH, CLI_VERSION, ASSETS_SCHEMA, ASSEMBLY_SCHEMA, INTEG_SCHEMA, SCHEMA_VERSION, Manifest;
+var fs, jsonschema, semver, VERSION_MISMATCH, CLI_VERSION, ASSETS_SCHEMA, ASSEMBLY_SCHEMA, INTEG_SCHEMA, VALIDATION_REPORT_SCHEMA, SCHEMA_VERSION, Manifest;
 var init_manifest = __esm({
   "../cloud-assembly-schema/lib/manifest.ts"() {
     "use strict";
@@ -6789,6 +6966,7 @@ var init_manifest = __esm({
     ASSETS_SCHEMA = require_assets_schema();
     ASSEMBLY_SCHEMA = require_cloud_assembly_schema();
     INTEG_SCHEMA = require_integ_schema();
+    VALIDATION_REPORT_SCHEMA = require_validation_report_schema();
     SCHEMA_VERSION = require_version();
     Manifest = class _Manifest {
       static {
@@ -6849,6 +7027,14 @@ var init_manifest = __esm({
           testCases: manifest.testCases ?? []
         };
       }
+      /**
+       * Load and validate the policy validation report from file.
+       *
+       * @param filePath - path to the validation report file.
+       */
+      static loadValidationReport(filePath) {
+        return _Manifest.loadManifest(filePath, VALIDATION_REPORT_SCHEMA);
+      }
       /**
        * Fetch the current schema version number.
        */
@@ -128188,11 +128374,11 @@ var require_randomUUID = __commonJS({
 var require_dist_cjs40 = __commonJS({
   "../../../node_modules/@smithy/uuid/dist-cjs/index.js"(exports2) {
     "use strict";
-    var randomUUID8 = require_randomUUID();
+    var randomUUID9 = require_randomUUID();
     var decimalToHex6 = Array.from({ length: 256 }, (_2, i32) => i32.toString(16).padStart(2, "0"));
     var v46 = /* @__PURE__ */ __name(() => {
-      if (randomUUID8.randomUUID) {
-        return randomUUID8.randomUUID();
+      if (randomUUID9.randomUUID) {
+        return randomUUID9.randomUUID();
       }
       const rnds = new Uint8Array(16);
       crypto.getRandomValues(rnds);
@@ -415523,11 +415709,6 @@ async function getNestedStackArn(nestedStackLogicalId, listStackResources) {
 function isCdkManagedNestedStack(stackResource) {
   return stackResource.Type === "AWS::CloudFormation::Stack" && stackResource.Metadata && stackResource.Metadata["aws:asset:path"];
 }
-function templateContainsNestedStacks(template) {
-  return Object.values(template?.Resources ?? {}).some(
-    (resource) => resource.Type === "AWS::CloudFormation::Stack"
-  );
-}
 var path23, fs25;
 var init_nested_stack_helpers = __esm({
   "../toolkit-lib/lib/api/cloudformation/nested-stack-helpers.ts"() {
@@ -415544,7 +415725,6 @@ var init_nested_stack_helpers = __esm({
     __name(getNestedStackTemplates, "getNestedStackTemplates");
     __name(getNestedStackArn, "getNestedStackArn");
     __name(isCdkManagedNestedStack, "isCdkManagedNestedStack");
-    __name(templateContainsNestedStacks, "templateContainsNestedStacks");
   }
 });
 
@@ -416433,13 +416613,13 @@ async function waitFor(valueProvider, timeout = 5e3) {
 async function waitForChangeSet(cfn, ioHelper, stackNameOrArn, changeSetNameOrArn, { fetchAll, diagnoser }) {
   const stackDisplayName = stackNameFromArn(stackNameOrArn);
   const changeSetDisplayName = changeSetNameFromArn(changeSetNameOrArn);
-  await ioHelper.defaults.debug((0, import_util30.format)("Waiting for changeset %s on stack %s to finish creating...", changeSetDisplayName, stackDisplayName));
+  await ioHelper.defaults.debug((0, import_node_util2.format)("Waiting for changeset %s on stack %s to finish creating...", changeSetDisplayName, stackDisplayName));
   const ret = await waitFor(async () => {
     const description = await describeChangeSet(cfn, stackNameOrArn, changeSetNameOrArn, {
       fetchAll
     });
     if (description.Status === "CREATE_PENDING" || description.Status === "CREATE_IN_PROGRESS") {
-      await ioHelper.defaults.debug((0, import_util30.format)("Changeset %s on stack %s is still creating", changeSetDisplayName, stackDisplayName));
+      await ioHelper.defaults.debug((0, import_node_util2.format)("Changeset %s on stack %s is still creating", changeSetDisplayName, stackDisplayName));
       return void 0;
     }
     const diag = await diagnoser.diagnoseChangeSet(description);
@@ -416456,7 +416636,7 @@ async function waitForChangeSet(cfn, ioHelper, stackNameOrArn, changeSetNameOrAr
 async function waitForChangeSetGone(cfn, ioHelper, stackNameOrArn, changeSetNameOrArn) {
   const stackDisplayName = stackNameFromArn(stackNameOrArn);
   const changeSetDisplayName = changeSetNameFromArn(changeSetNameOrArn);
-  await ioHelper.defaults.debug((0, import_util30.format)("Waiting for changeset %s on stack %s to finish deleting...", changeSetDisplayName, stackDisplayName));
+  await ioHelper.defaults.debug((0, import_node_util2.format)("Waiting for changeset %s on stack %s to finish deleting...", changeSetDisplayName, stackDisplayName));
   await waitFor(async () => {
     try {
       const description = await cfn.describeChangeSet({
@@ -416480,7 +416660,7 @@ async function createDiffChangeSet(ioHelper, options) {
     const env2 = await options.deployments.envs.accessStackForMutableStackOperations(options.stack);
     return await uploadBodyParameterAndCreateChangeSet(ioHelper, env2, {
       ...options,
-      includeNestedStacks: templateContainsNestedStacks(options.stack.template)
+      includeNestedStacks: true
     });
   } catch (e32) {
     if (options.failOnError) {
@@ -416518,7 +416698,7 @@ async function uploadBodyParameterAndCreateChangeSet(ioHelper, env2, options) {
   );
   const cfn = env2.sdk.cloudFormation();
   const stack = await CloudFormationStack.lookup(cfn, options.stack.stackName, false);
-  const exists = stack.exists && stack.stackStatus.name !== "REVIEW_IN_PROGRESS";
+  const exists = stack.exists && stack.stackStatus.name !== "REVIEW_IN_PROGRESS" && stack.stackStatus.name !== "DELETE_IN_PROGRESS";
   const executionRoleArn = await env2.replacePlaceholders(options.stack.cloudFormationExecutionRoleArn);
   await ioHelper.defaults.info(
     "Hold on while we create a read-only change set to get a diff with accurate replacement information (use --method=template to use a less accurate but faster template-only diff)\n"
@@ -416584,7 +416764,7 @@ async function createChangeSetAndCleanup(ioHelper, options) {
     Tags: toCfnTags(options.stack.tags),
     Capabilities: ["CAPABILITY_IAM", "CAPABILITY_NAMED_IAM", "CAPABILITY_AUTO_EXPAND"]
   });
-  await ioHelper.defaults.debug((0, import_util30.format)("Initiated creation of changeset: %s; waiting for it to finish creating...", changeSet.Id));
+  await ioHelper.defaults.debug((0, import_node_util2.format)("Initiated creation of changeset: %s; waiting for it to finish creating...", changeSet.Id));
   const createdChangeSet = await waitForChangeSet(
     options.cfn,
     ioHelper,
@@ -416601,6 +416781,13 @@ async function createChangeSetAndCleanup(ioHelper, options) {
     changeSet.Id ?? options.changeSetName,
     changeSet.StackId ?? options.stack.stackName
   );
+  if (!options.exists) {
+    await ioHelper.defaults.debug((0, import_node_util2.format)("Deleting empty stack created by diff changeset: %s", changeSet.StackId ?? options.stack.stackName));
+    await options.cfn.deleteStack({
+      StackName: changeSet.StackId ?? options.stack.stackName,
+      ClientRequestToken: (0, import_node_crypto11.randomUUID)()
+    });
+  }
   return createdChangeSet;
 }
 function toCfnTags(tags) {
@@ -416652,28 +416839,29 @@ async function waitForStackDeploy(cfn, ioHelper, stackName) {
 }
 async function stabilizeStack(cfn, ioHelper, stackNameOrArn) {
   const stackDisplayName = stackNameFromArn(stackNameOrArn);
-  await ioHelper.defaults.debug((0, import_util30.format)("Waiting for stack %s to finish creating or updating...", stackDisplayName));
+  await ioHelper.defaults.debug((0, import_node_util2.format)("Waiting for stack %s to finish creating or updating...", stackDisplayName));
   return waitFor(async () => {
     const stack = await CloudFormationStack.lookup(cfn, stackNameOrArn);
     if (!stack.exists) {
-      await ioHelper.defaults.debug((0, import_util30.format)("Stack %s does not exist", stackDisplayName));
+      await ioHelper.defaults.debug((0, import_node_util2.format)("Stack %s does not exist", stackDisplayName));
       return null;
     }
     const status = stack.stackStatus;
     if (status.isInProgress) {
-      await ioHelper.defaults.debug((0, import_util30.format)("Stack %s has an ongoing operation in progress and is not stable (%s)", stackDisplayName, status));
+      await ioHelper.defaults.debug((0, import_node_util2.format)("Stack %s has an ongoing operation in progress and is not stable (%s)", stackDisplayName, status));
       return void 0;
     } else if (status.isReviewInProgress) {
-      await ioHelper.defaults.debug((0, import_util30.format)("Stack %s is in REVIEW_IN_PROGRESS state. Considering this is a stable status (%s)", stackDisplayName, status));
+      await ioHelper.defaults.debug((0, import_node_util2.format)("Stack %s is in REVIEW_IN_PROGRESS state. Considering this is a stable status (%s)", stackDisplayName, status));
     }
     return stack;
   });
 }
-var import_util30, import_cdk_assets_lib2, cxapi2, import_cloud_assembly_api6, import_client_cloudformation4, TemplateParameters, ParameterValues;
+var import_node_crypto11, import_node_util2, import_cdk_assets_lib2, cxapi2, import_cloud_assembly_api6, import_client_cloudformation4, TemplateParameters, ParameterValues;
 var init_cfn_api = __esm({
   "../toolkit-lib/lib/api/deployments/cfn-api.ts"() {
     "use strict";
-    import_util30 = require("util");
+    import_node_crypto11 = require("node:crypto");
+    import_node_util2 = require("node:util");
     import_cdk_assets_lib2 = __toESM(require_lib6());
     cxapi2 = __toESM(require_lib3());
     import_cloud_assembly_api6 = __toESM(require_lib3());
@@ -416794,11 +416982,11 @@ var init_cfn_api = __esm({
 });
 
 // ../toolkit-lib/lib/api/toolkit-info.ts
-var import_util31, chalk5, DEFAULT_TOOLKIT_STACK_NAME, ToolkitInfo, ExistingToolkitInfo, BootstrapStackNotFoundInfo;
+var import_util30, chalk5, DEFAULT_TOOLKIT_STACK_NAME, ToolkitInfo, ExistingToolkitInfo, BootstrapStackNotFoundInfo;
 var init_toolkit_info = __esm({
   "../toolkit-lib/lib/api/toolkit-info.ts"() {
     "use strict";
-    import_util31 = require("util");
+    import_util30 = require("util");
     chalk5 = __toESM(require_source());
     init_bootstrap_props();
     init_toolkit_error();
@@ -416818,7 +417006,7 @@ var init_toolkit_info = __esm({
           const stack = await stabilizeStack(cfn, ioHelper, stackName);
           if (!stack) {
             await ioHelper.defaults.debug(
-              (0, import_util31.format)(
+              (0, import_util30.format)(
                 "The environment %s doesn't have the CDK toolkit stack (%s) installed. Use %s to setup your environment for use with the toolkit.",
                 environment.name,
                 stackName,
@@ -416829,7 +417017,7 @@ var init_toolkit_info = __esm({
           }
           if (stack.stackStatus.isCreationFailure) {
             await ioHelper.defaults.debug(
-              (0, import_util31.format)(
+              (0, import_util30.format)(
                 "The environment %s has a CDK toolkit stack (%s) that failed to create. Use %s to try provisioning it again.",
                 environment.name,
                 stackName,
@@ -421139,14 +421327,14 @@ function settingsFromSynthOptions(synthOpts = {}) {
 function parametersFromSynthOptions(synthOptions) {
   return synthParametersFromSettings(settingsFromSynthOptions(synthOptions ?? {}));
 }
-var import_dispose_polyfill4, os9, path26, import_node_util2, import_cloud_assembly_api9, cxschema9, cxapi4, fs28, import_semver, ExecutionEnvironment;
+var import_dispose_polyfill4, os9, path26, import_node_util3, import_cloud_assembly_api9, cxschema9, cxapi4, fs28, import_semver, ExecutionEnvironment;
 var init_prepare_source = __esm({
   "../toolkit-lib/lib/api/cloud-assembly/private/prepare-source.ts"() {
     "use strict";
     import_dispose_polyfill4 = __toESM(require_dispose_polyfill());
     os9 = __toESM(require("node:os"));
     path26 = __toESM(require("node:path"));
-    import_node_util2 = require("node:util");
+    import_node_util3 = require("node:util");
     import_cloud_assembly_api9 = __toESM(require_lib3());
     cxschema9 = __toESM(require_lib2());
     cxapi4 = __toESM(require_lib8());
@@ -421284,10 +421472,10 @@ var init_prepare_source = __esm({
         const debugFn = /* @__PURE__ */ __name((msg) => this.ioHelper.notify(IO.CDK_ASSEMBLY_I0010.msg(msg)), "debugFn");
         const env2 = this.options.resolveDefaultAppEnv ? await prepareDefaultEnvironment(this.sdkProvider, debugFn) : {};
         env2[cxapi4.OUTDIR_ENV] = this.outdir;
-        await debugFn((0, import_node_util2.format)("outdir:", this.outdir));
+        await debugFn((0, import_node_util3.format)("outdir:", this.outdir));
         env2[cxapi4.CLI_ASM_VERSION_ENV] = cxschema9.Manifest.version();
         env2[cxapi4.CLI_VERSION_ENV] = versionNumber();
-        await debugFn((0, import_node_util2.format)("env:", env2));
+        await debugFn((0, import_node_util3.format)("env:", env2));
         return env2;
       }
       /**
@@ -421352,12 +421540,12 @@ var init_readable_assembly = __esm({
 });
 
 // ../toolkit-lib/lib/api/cloud-assembly/source-builder.ts
-var path27, import_util36, cxapi5, fs30, CloudAssemblySourceBuilder;
+var path27, import_util35, cxapi5, fs30, CloudAssemblySourceBuilder;
 var init_source_builder = __esm({
   "../toolkit-lib/lib/api/cloud-assembly/source-builder.ts"() {
     "use strict";
     path27 = __toESM(require("path"));
-    import_util36 = require("util");
+    import_util35 = require("util");
     cxapi5 = __toESM(require_lib3());
     fs30 = __toESM(require_lib4());
     init_context_store();
@@ -421423,7 +421611,7 @@ var init_source_builder = __esm({
                   ...await contextStore.read(),
                   ...synthParams.context
                 };
-                await services.ioHelper.defaults.debug((0, import_util36.format)("context:", fullContext));
+                await services.ioHelper.defaults.debug((0, import_util35.format)("context:", fullContext));
                 const env2 = noUndefined({
                   // Versioning, outdir, default account and region
                   ...await execution.defaultEnvVars(),
@@ -421562,7 +421750,7 @@ var init_source_builder = __esm({
                   ...await contextStore.read(),
                   ...synthParams.context
                 };
-                await services.ioHelper.defaults.debug((0, import_util36.format)("context:", fullContext));
+                await services.ioHelper.defaults.debug((0, import_util35.format)("context:", fullContext));
                 const env2 = noUndefined({
                   // Need to start with full env of `writeContextToEnv` will not be able to do the size
                   // calculation correctly.
@@ -432416,11 +432604,11 @@ function _diffStrings(oldStr, newStr, context) {
   }
   __name(_findIndent, "_findIndent");
 }
-var import_util47, chalk11, PATH_METADATA_KEY3, structuredPatch, ADDITION2, CONTEXT, UPDATE2, REMOVAL2, IMPORT, Formatter;
+var import_util46, chalk11, PATH_METADATA_KEY3, structuredPatch, ADDITION2, CONTEXT, UPDATE2, REMOVAL2, IMPORT, Formatter;
 var init_format = __esm({
   "../cloudformation-diff/lib/format.ts"() {
     "use strict";
-    import_util47 = require("util");
+    import_util46 = require("util");
     chalk11 = __toESM(require_source());
     init_util6();
     init_diff_template();
@@ -432449,10 +432637,10 @@ var init_format = __esm({
         __name(this, "Formatter");
       }
       print(fmt, ...args) {
-        this.stream.write(chalk11.reset((0, import_util47.format)(fmt, ...args)) + "\n");
+        this.stream.write(chalk11.reset((0, import_util46.format)(fmt, ...args)) + "\n");
       }
       warning(fmt, ...args) {
-        this.stream.write(chalk11.yellow((0, import_util47.format)(fmt, ...args)) + "\n");
+        this.stream.write(chalk11.yellow((0, import_util46.format)(fmt, ...args)) + "\n");
       }
       formatSection(title, entryType, collection, formatter = this.formatDifference.bind(this)) {
         if (collection.differenceCount === 0) {
@@ -434887,7 +435075,7 @@ async function applyHotswapOperation(sdk, ioSpan, hotswapOperation) {
   sdk.appendCustomUserAgent(customUserAgent);
   const resourceText = /* @__PURE__ */ __name((r32) => r32.description ?? `${r32.resourceType} '${r32.physicalName ?? r32.logicalId}'`, "resourceText");
   await ioSpan.notify(IO.CDK_TOOLKIT_I5402.msg(
-    hotswapOperation.change.resources.map((r32) => (0, import_util53.format)(`   ${ICON} %s`, chalk14.bold(resourceText(r32)))).join("\n"),
+    hotswapOperation.change.resources.map((r32) => (0, import_util52.format)(`   ${ICON} %s`, chalk14.bold(resourceText(r32)))).join("\n"),
     hotswapOperation.change
   ));
   try {
@@ -434902,7 +435090,7 @@ async function applyHotswapOperation(sdk, ioSpan, hotswapOperation) {
     throw e32;
   }
   await ioSpan.notify(IO.CDK_TOOLKIT_I5403.msg(
-    hotswapOperation.change.resources.map((r32) => (0, import_util53.format)(`   ${ICON} %s %s`, chalk14.bold(resourceText(r32)), chalk14.green("hotswapped!"))).join("\n"),
+    hotswapOperation.change.resources.map((r32) => (0, import_util52.format)(`   ${ICON} %s %s`, chalk14.bold(resourceText(r32)), chalk14.green("hotswapped!"))).join("\n"),
     hotswapOperation.change
   ));
   sdk.removeCustomUserAgent(customUserAgent);
@@ -434931,9 +435119,9 @@ async function logRejectedChanges(ioSpan, rejectedChanges, hotswapMode) {
   }
   const messages = [""];
   if (hotswapMode === "hotswap-only") {
-    messages.push((0, import_util53.format)("%s %s", chalk14.red("\u26A0\uFE0F"), chalk14.red("The following non-hotswappable changes were found. To reconcile these using CloudFormation, specify --hotswap-fallback")));
+    messages.push((0, import_util52.format)("%s %s", chalk14.red("\u26A0\uFE0F"), chalk14.red("The following non-hotswappable changes were found. To reconcile these using CloudFormation, specify --hotswap-fallback")));
   } else {
-    messages.push((0, import_util53.format)("%s %s", chalk14.red("\u26A0\uFE0F"), chalk14.red("The following non-hotswappable changes were found:")));
+    messages.push((0, import_util52.format)("%s %s", chalk14.red("\u26A0\uFE0F"), chalk14.red("The following non-hotswappable changes were found:")));
   }
   for (const { change } of rejectedChanges) {
     messages.push("    " + nonHotswappableChangeMessage(change));
@@ -434946,7 +435134,7 @@ function nonHotswappableChangeMessage(change) {
   const reason = change.description ?? change.reason;
   switch (subject.type) {
     case "Output":
-      return (0, import_util53.format)(
+      return (0, import_util52.format)(
         "output: %s, reason: %s",
         chalk14.bold(subject.logicalId),
         chalk14.red(reason)
@@ -434957,7 +435145,7 @@ function nonHotswappableChangeMessage(change) {
 }
 function nonHotswappableResourceMessage(subject, reason) {
   if (subject.rejectedProperties?.length) {
-    return (0, import_util53.format)(
+    return (0, import_util52.format)(
       "resource: %s, type: %s, rejected changes: %s, reason: %s",
       chalk14.bold(subject.logicalId),
       chalk14.bold(subject.resourceType),
@@ -434965,18 +435153,18 @@ function nonHotswappableResourceMessage(subject, reason) {
       chalk14.red(reason)
     );
   }
-  return (0, import_util53.format)(
+  return (0, import_util52.format)(
     "resource: %s, type: %s, reason: %s",
     chalk14.bold(subject.logicalId),
     chalk14.bold(subject.resourceType),
     chalk14.red(reason)
   );
 }
-var import_util53, cfn_diff, chalk14, pLimit2, RESOURCE_DETECTORS;
+var import_util52, cfn_diff, chalk14, pLimit2, RESOURCE_DETECTORS;
 var init_hotswap_deployments = __esm({
   "../toolkit-lib/lib/api/hotswap/hotswap-deployments.ts"() {
     "use strict";
-    import_util53 = require("util");
+    import_util52 = require("util");
     cfn_diff = __toESM(require_lib11());
     chalk14 = __toESM(require_source());
     init_payloads();
@@ -435082,7 +435270,7 @@ async function deployStack(options, ioHelper) {
     await ioHelper.defaults.debug(
       `Found existing stack ${deployName} that had previously failed creation. Deleting it before attempting to re-create it.`
     );
-    await cfn.deleteStack({ StackName: cloudFormationStack.stackId, ClientRequestToken: (0, import_node_crypto11.randomUUID)() });
+    await cfn.deleteStack({ StackName: cloudFormationStack.stackId, ClientRequestToken: (0, import_node_crypto12.randomUUID)() });
     const deletedStack = await waitForStackDelete(cfn, ioHelper, cloudFormationStack.stackId);
     if (deletedStack && deletedStack.stackStatus.name !== "DELETE_COMPLETE") {
       throw new DeploymentError(
@@ -435107,7 +435295,7 @@ async function deployStack(options, ioHelper) {
     await ioHelper.defaults.debug(`${deployName}: skipping deployment (use --force to override)`);
     if (deploymentMethod?.method === "hotswap") {
       await ioHelper.defaults.info(
-        (0, import_node_util3.format)(
+        (0, import_node_util4.format)(
           `
  ${ICON} %s
 `,
@@ -435161,7 +435349,7 @@ async function deployStack(options, ioHelper) {
         );
         return hotswapDeploymentResult;
       }
-      await ioHelper.defaults.info((0, import_node_util3.format)(
+      await ioHelper.defaults.info((0, import_node_util4.format)(
         "Could not perform a hotswap deployment, as the stack %s contains non-Asset changes",
         stackArtifact.displayName
       ));
@@ -435169,7 +435357,7 @@ async function deployStack(options, ioHelper) {
       if (!(e32 instanceof CfnEvaluationException)) {
         throw e32;
       }
-      await ioHelper.defaults.info((0, import_node_util3.format)(
+      await ioHelper.defaults.info((0, import_node_util4.format)(
         "Could not perform a hotswap deployment, because the CloudFormation template could not be resolved: %s",
         formatErrorMessage(e32)
       ));
@@ -435214,7 +435402,7 @@ async function destroyStack(options, ioHelper) {
   });
   await monitor.start();
   try {
-    await cfn.deleteStack({ StackName: currentStack.stackId, RoleARN: options.roleArn, ClientRequestToken: (0, import_node_crypto11.randomUUID)() });
+    await cfn.deleteStack({ StackName: currentStack.stackId, RoleARN: options.roleArn, ClientRequestToken: (0, import_node_crypto12.randomUUID)() });
     const destroyedStack = await waitForStackDelete(cfn, ioHelper, currentStack.stackId);
     if (destroyedStack && destroyedStack.stackStatus.name !== "DELETE_COMPLETE") {
       throw new DeploymentError(`Failed to destroy ${deployName}: ${destroyedStack.stackStatus}`, "StackDestroyFailed");
@@ -435305,12 +435493,12 @@ function hasReplacement(cs) {
     return a32 === "ReplaceAndDelete" || a32 === "ReplaceAndRetain" || a32 === "ReplaceAndSnapshot";
   });
 }
-var import_node_crypto11, import_node_util3, chalk15, FullCloudFormationDeployment;
+var import_node_crypto12, import_node_util4, chalk15, FullCloudFormationDeployment;
 var init_deploy_stack = __esm({
   "../toolkit-lib/lib/api/deployments/deploy-stack.ts"() {
     "use strict";
-    import_node_crypto11 = require("node:crypto");
-    import_node_util3 = require("node:util");
+    import_node_crypto12 = require("node:crypto");
+    import_node_util4 = require("node:util");
     chalk15 = __toESM(require_source());
     init_asset_manifest_builder();
     init_asset_publishing();
@@ -435344,7 +435532,7 @@ var init_deploy_stack = __esm({
         this.stackName = options.deployName ?? stackArtifact.stackName;
         this.update = cloudFormationStack.exists && cloudFormationStack.stackStatus.name !== "REVIEW_IN_PROGRESS";
         this.verb = this.update ? "update" : "create";
-        this.uuid = (0, import_node_crypto11.randomUUID)();
+        this.uuid = (0, import_node_crypto12.randomUUID)();
       }
       deploymentMethod;
       options;
@@ -435385,9 +435573,9 @@ var init_deploy_stack = __esm({
         const changeSetDescription = await this.createChangeSet(changeSetName, execute, importExistingResources, revertDrift);
         await this.updateTerminationProtection();
         if (changeSetHasNoChanges(changeSetDescription)) {
-          await this.ioHelper.defaults.debug((0, import_node_util3.format)("No changes are to be performed on %s.", this.stackName));
+          await this.ioHelper.defaults.debug((0, import_node_util4.format)("No changes are to be performed on %s.", this.stackName));
           if (execute) {
-            await this.ioHelper.defaults.debug((0, import_node_util3.format)("Deleting empty change set %s", changeSetDescription.ChangeSetId));
+            await this.ioHelper.defaults.debug((0, import_node_util4.format)("Deleting empty change set %s", changeSetDescription.ChangeSetId));
             await this.cfn.deleteChangeSet({
               StackName: changeSetDescription.StackId ?? this.stackName,
               ChangeSetName: changeSetDescription.ChangeSetId ?? changeSetName
@@ -435412,7 +435600,7 @@ var init_deploy_stack = __esm({
           };
         }
         if (!execute) {
-          await this.ioHelper.defaults.info((0, import_node_util3.format)(
+          await this.ioHelper.defaults.info((0, import_node_util4.format)(
             "Changeset %s created and waiting in review for manual execution (--no-execute)",
             changeSetDescription.ChangeSetId
           ));
@@ -435463,7 +435651,7 @@ var init_deploy_stack = __esm({
       async createChangeSet(changeSetName, willExecute, importExistingResources, revertDrift) {
         await this.cleanupOldChangeset(changeSetName);
         await this.ioHelper.defaults.debug(`Attempting to create ChangeSet with name ${changeSetName} to ${this.verb} stack ${this.stackName}`);
-        await this.ioHelper.defaults.info((0, import_node_util3.format)("%s: creating CloudFormation changeset...", chalk15.bold(this.stackName)));
+        await this.ioHelper.defaults.info((0, import_node_util4.format)("%s: creating CloudFormation changeset...", chalk15.bold(this.stackName)));
         const changeSet = await this.cfn.createChangeSet({
           StackName: this.stackName,
           ChangeSetName: changeSetName,
@@ -435473,20 +435661,17 @@ var init_deploy_stack = __esm({
           ClientToken: `create${this.uuid}`,
           ImportExistingResources: importExistingResources,
           DeploymentMode: revertDrift ? "REVERT_DRIFT" : void 0,
-          // This is necessary to trigger early validation on nested stacks as well
-          // TODO: We currently have a test explicitly checking that this is NOT set to true, but on the other
-          // hand for 'cdk diff' we DO turn it on. Investigate later.
-          // IncludeNestedStacks: true,
+          IncludeNestedStacks: this.options.resourcesToImport || revertDrift ? void 0 : true,
           ...this.commonPrepareOptions()
         });
-        await this.ioHelper.defaults.debug((0, import_node_util3.format)("Initiated creation of changeset: %s; waiting for it to finish creating...", changeSet.Id));
+        await this.ioHelper.defaults.debug((0, import_node_util4.format)("Initiated creation of changeset: %s; waiting for it to finish creating...", changeSet.Id));
         return waitForChangeSet(this.cfn, this.ioHelper, changeSet.StackId ?? this.stackName, changeSet.Id ?? changeSetName, {
           fetchAll: willExecute,
           diagnoser: this.diagnoser
         });
       }
       async executeChangeSet(changeSet) {
-        await this.ioHelper.defaults.debug((0, import_node_util3.format)("Initiating execution of changeset %s on stack %s", changeSet.ChangeSetId, this.stackName));
+        await this.ioHelper.defaults.debug((0, import_node_util4.format)("Initiating execution of changeset %s on stack %s", changeSet.ChangeSetId, this.stackName));
         await this.cfn.executeChangeSet({
           StackName: changeSet.StackId ?? this.stackName,
           ChangeSetName: changeSet.ChangeSetId,
@@ -435494,7 +435679,7 @@ var init_deploy_stack = __esm({
           ...this.commonExecuteOptions()
         });
         await this.ioHelper.defaults.debug(
-          (0, import_node_util3.format)(
+          (0, import_node_util4.format)(
             "Execution of changeset %s on stack %s has started; waiting for the update to complete...",
             changeSet.ChangeSetId,
             this.stackName
@@ -435518,7 +435703,7 @@ var init_deploy_stack = __esm({
         const terminationProtection = this.stackArtifact.terminationProtection ?? false;
         if (!!this.cloudFormationStack.terminationProtection !== terminationProtection) {
           await this.ioHelper.defaults.debug(
-            (0, import_node_util3.format)(
+            (0, import_node_util4.format)(
               "Updating termination protection from %s to %s for stack %s",
               this.cloudFormationStack.terminationProtection,
               terminationProtection,
@@ -435529,11 +435714,11 @@ var init_deploy_stack = __esm({
             StackName: this.stackName,
             EnableTerminationProtection: terminationProtection
           });
-          await this.ioHelper.defaults.debug((0, import_node_util3.format)("Termination protection updated to %s for stack %s", terminationProtection, this.stackName));
+          await this.ioHelper.defaults.debug((0, import_node_util4.format)("Termination protection updated to %s for stack %s", terminationProtection, this.stackName));
         }
       }
       async directDeployment() {
-        await this.ioHelper.defaults.info((0, import_node_util3.format)("%s: %s stack...", chalk15.bold(this.stackName), this.update ? "updating" : "creating"));
+        await this.ioHelper.defaults.info((0, import_node_util4.format)("%s: %s stack...", chalk15.bold(this.stackName), this.update ? "updating" : "creating"));
         const startTime = /* @__PURE__ */ new Date();
         if (this.update) {
           await this.updateTerminationProtection();
@@ -435547,7 +435732,7 @@ var init_deploy_stack = __esm({
             return await this.monitorDeployment(startTime, stack.StackId, void 0);
           } catch (err) {
             if (err.message === "No updates are to be performed.") {
-              await this.ioHelper.defaults.debug((0, import_node_util3.format)("No updates are to be performed for stack %s", this.stackName));
+              await this.ioHelper.defaults.debug((0, import_node_util4.format)("No updates are to be performed for stack %s", this.stackName));
               return {
                 type: "did-deploy-stack",
                 noOp: true,
@@ -435598,7 +435783,7 @@ var init_deploy_stack = __esm({
         } finally {
           await monitor.stop();
         }
-        await this.ioHelper.defaults.debug((0, import_node_util3.format)("Stack %s has completed updating", this.stackName));
+        await this.ioHelper.defaults.debug((0, import_node_util4.format)("Stack %s has completed updating", this.stackName));
         return {
           type: "did-deploy-stack",
           noOp: false,
@@ -435647,11 +435832,11 @@ var init_deploy_stack = __esm({
 function suffixWithErrors2(msg, errors) {
   return errors && errors.length > 0 ? `${msg}: ${errors.join(", ")}` : msg;
 }
-var import_node_crypto12, cdk_assets, chalk16, BOOTSTRAP_STACK_VERSION_FOR_ROLLBACK, Deployments, ParallelSafeAssetProgress;
+var import_node_crypto13, cdk_assets, chalk16, BOOTSTRAP_STACK_VERSION_FOR_ROLLBACK, Deployments, ParallelSafeAssetProgress;
 var init_deployments = __esm({
   "../toolkit-lib/lib/api/deployments/deployments.ts"() {
     "use strict";
-    import_node_crypto12 = require("node:crypto");
+    import_node_crypto13 = require("node:crypto");
     cdk_assets = __toESM(require_lib6());
     chalk16 = __toESM(require_source());
     init_asset_manifest_builder();
@@ -435822,7 +436007,7 @@ var init_deployments = __esm({
         }
         await cfn.deleteChangeSet({ StackName: deployName, ChangeSetName: changeSetName });
         if (cloudFormationStack.stackStatus.name === "REVIEW_IN_PROGRESS") {
-          await cfn.deleteStack({ StackName: deployName, ClientRequestToken: (0, import_node_crypto12.randomUUID)() });
+          await cfn.deleteStack({ StackName: deployName, ClientRequestToken: (0, import_node_crypto13.randomUUID)() });
           await waitForStackDelete(cfn, this.ioHelper, deployName);
         }
       }
@@ -435878,7 +436063,7 @@ var init_deployments = __esm({
               await cfn.rollbackStack({
                 StackName: stackArn,
                 RoleARN: executionRoleArn,
-                ClientRequestToken: (0, import_node_crypto12.randomUUID)(),
+                ClientRequestToken: (0, import_node_crypto13.randomUUID)(),
                 // Enabling this is just the better overall default, the only reason it isn't the upstream default is backwards compatibility
                 RetainExceptOnCreate: true
               });
@@ -435896,7 +436081,7 @@ var init_deployments = __esm({
               await this.ioHelper.defaults.warn(`Continuing rollback of stack ${deployName}${skipDescription}`);
               await cfn.continueUpdateRollback({
                 StackName: stackArn,
-                ClientRequestToken: (0, import_node_crypto12.randomUUID)(),
+                ClientRequestToken: (0, import_node_crypto13.randomUUID)(),
                 RoleARN: executionRoleArn,
                 ResourcesToSkip: resourcesToSkip
               });
@@ -436175,11 +436360,11 @@ function obscureDiff(diff) {
     });
   }
 }
-var import_node_util4, import_cloudformation_diff, chalk17, DiffFormatter;
+var import_node_util5, import_cloudformation_diff, chalk17, DiffFormatter;
 var init_diff_formatter = __esm({
   "../toolkit-lib/lib/api/diff/diff-formatter.ts"() {
     "use strict";
-    import_node_util4 = require("node:util");
+    import_node_util5 = require("node:util");
     import_cloudformation_diff = __toESM(require_lib11());
     chalk17 = __toESM(require_source());
     init_payloads();
@@ -436263,7 +436448,7 @@ var init_diff_formatter = __esm({
         let filteredChangesCount = 0;
         try {
           if (stackName && (!options.quiet || !diff.isEmpty)) {
-            stream.write((0, import_node_util4.format)(`Stack ${chalk17.bold(stackName)}
+            stream.write((0, import_node_util5.format)(`Stack ${chalk17.bold(stackName)}
 `));
           }
           if (!options.quiet && this.isImport) {
@@ -436338,7 +436523,7 @@ var init_diff_formatter = __esm({
         const permissionChangeType = permissionTypeFromDiff(diff);
         const stream = new StringWriteStream();
         if (!options.quiet || permissionChangeType !== "none" /* NONE */) {
-          stream.write((0, import_node_util4.format)(`Stack ${chalk17.bold(stackName)}
+          stream.write((0, import_node_util5.format)(`Stack ${chalk17.bold(stackName)}
 `));
         }
         try {
@@ -436407,11 +436592,11 @@ function removeNonImportResources(stack) {
   delete template.Outputs;
   return template;
 }
-var import_util57, cfnDiff, chalk18, fs32, ResourceImporter;
+var import_util56, cfnDiff, chalk18, fs32, ResourceImporter;
 var init_importer = __esm({
   "../toolkit-lib/lib/api/resource-import/importer.ts"() {
     "use strict";
-    import_util57 = require("util");
+    import_util56 = require("util");
     cfnDiff = __toESM(require_lib11());
     chalk18 = __toESM(require_source());
     fs32 = __toESM(require_lib4());
@@ -436475,12 +436660,12 @@ var init_importer = __esm({
           const descr = this.describeResource(resource.logicalId);
           const idProps = remaining[resource.logicalId];
           if (idProps) {
-            await this.ioHelper.defaults.info((0, import_util57.format)("%s: importing using %s", chalk18.blue(descr), chalk18.blue(fmtdict(idProps))));
+            await this.ioHelper.defaults.info((0, import_util56.format)("%s: importing using %s", chalk18.blue(descr), chalk18.blue(fmtdict(idProps))));
             ret.importResources.push(resource);
             ret.resourceMap[resource.logicalId] = idProps;
             delete remaining[resource.logicalId];
           } else {
-            await this.ioHelper.defaults.info((0, import_util57.format)("%s: skipping", chalk18.blue(descr)));
+            await this.ioHelper.defaults.info((0, import_util56.format)("%s: skipping", chalk18.blue(descr)));
           }
         }
         const unknown = Object.keys(remaining);
@@ -436524,9 +436709,9 @@ var init_importer = __esm({
           });
           assertIsSuccessfulDeployStackResult(result2);
           const message2 = result2.noOp ? " \u2705  %s (no changes)" : " \u2705  %s";
-          await this.ioHelper.defaults.info("\n" + chalk18.green((0, import_util57.format)(message2, this.stack.displayName)));
+          await this.ioHelper.defaults.info("\n" + chalk18.green((0, import_util56.format)(message2, this.stack.displayName)));
         } catch (e32) {
-          await this.ioHelper.notify(IO.CDK_TOOLKIT_E3900.msg((0, import_util57.format)("\n \u274C  %s failed: %s", chalk18.bold(this.stack.displayName), e32), { error: e32 }));
+          await this.ioHelper.notify(IO.CDK_TOOLKIT_E3900.msg((0, import_util56.format)("\n \u274C  %s failed: %s", chalk18.bold(this.stack.displayName), e32), { error: e32 }));
           throw e32;
         }
       }
@@ -436656,7 +436841,7 @@ var init_importer = __esm({
           for (const idProp of idProps) {
             const defaultValue = resourceProps[idProp] ?? "";
             const response = await this.ioHelper.requestResponse(IO.CDK_TOOLKIT_I3110.req(
-              (0, import_util57.format)(promptPattern, chalk18.blue(idProp)),
+              (0, import_util56.format)(promptPattern, chalk18.blue(idProp)),
               {
                 resource: {
                   name: resourceName,
@@ -437587,7 +437772,7 @@ async function cfnDiff2(ioHelper, stacks, deployments, options, sdkProvider, inc
       parameters: methodOptions.parameters ?? {},
       failOnError: !(methodOptions.fallbackToTemplate ?? true),
       importExistingResources: methodOptions.importExistingResources,
-      uuid: (0, import_node_crypto13.randomUUID)(),
+      uuid: (0, import_node_crypto14.randomUUID)(),
       willExecute: false
     }) : void 0;
     if (changeSet) {
@@ -437638,11 +437823,11 @@ function appendObject(obj1, obj2) {
   }
   return obj1;
 }
-var import_node_crypto13, fs34;
+var import_node_crypto14, fs34;
 var init_helpers4 = __esm({
   "../toolkit-lib/lib/actions/diff/private/helpers.ts"() {
     "use strict";
-    import_node_crypto13 = require("node:crypto");
+    import_node_crypto14 = require("node:crypto");
     fs34 = __toESM(require_lib4());
     init_diff();
     init_cfn_api();
@@ -438493,11 +438678,11 @@ var init_io = __esm({
 });
 
 // ../toolkit-lib/lib/api/logs-monitor/logs-monitor.ts
-var import_node_crypto14, util7, chalk22, CloudWatchLogEventMonitor;
+var import_node_crypto15, util7, chalk22, CloudWatchLogEventMonitor;
 var init_logs_monitor2 = __esm({
   "../toolkit-lib/lib/api/logs-monitor/logs-monitor.ts"() {
     "use strict";
-    import_node_crypto14 = require("node:crypto");
+    import_node_crypto15 = require("node:crypto");
     util7 = __toESM(require("node:util"));
     chalk22 = __toESM(require_source());
     init_util();
@@ -438533,7 +438718,7 @@ var init_logs_monitor2 = __esm({
        * resume reading/printing events
        */
       async activate() {
-        this.monitorId = (0, import_node_crypto14.randomUUID)();
+        this.monitorId = (0, import_node_crypto15.randomUUID)();
         await this.ioHelper.notify(IO.CDK_TOOLKIT_I5032.msg("Start monitoring log groups", {
           monitor: this.monitorId,
           logGroupNames: this.logGroupNames()
@@ -439397,11 +439582,11 @@ var init_tags2 = __esm({
 });
 
 // ../toolkit-lib/lib/api/drift/drift-formatter.ts
-var import_node_util5, import_cloudformation_diff3, import_client_cloudformation5, chalk23, DriftFormatter, ADDITION3, CONTEXT2, UPDATE3, REMOVAL3;
+var import_node_util6, import_cloudformation_diff3, import_client_cloudformation5, chalk23, DriftFormatter, ADDITION3, CONTEXT2, UPDATE3, REMOVAL3;
 var init_drift_formatter = __esm({
   "../toolkit-lib/lib/api/drift/drift-formatter.ts"() {
     "use strict";
-    import_node_util5 = require("node:util");
+    import_node_util6 = require("node:util");
     import_cloudformation_diff3 = __toESM(require_lib11());
     import_client_cloudformation5 = __toESM(require_dist_cjs103());
     chalk23 = __toESM(require_source());
@@ -439433,7 +439618,7 @@ var init_drift_formatter = __esm({
       formatStackDrift() {
         const formatterOutput = this.formatStackDriftChanges(buildLogicalToPathMap(this.stack).toPath);
         const actualDrifts = this.resourceDriftResults.filter((d32) => (d32.StackResourceDriftStatus === "MODIFIED" || d32.StackResourceDriftStatus === "DELETED") && d32.ResourceType !== "AWS::CDK::Metadata");
-        const stackHeader = (0, import_node_util5.format)(`Stack ${chalk23.bold(this.stackName)}
+        const stackHeader = (0, import_node_util6.format)(`Stack ${chalk23.bold(this.stackName)}
 `);
         if (actualDrifts.length === 0) {
           const finalResult2 = chalk23.green("No drift detected\n");
@@ -439555,15 +439740,15 @@ ${actualDrifts.length} resource${actualDrifts.length === 1 ? "" : "s"} ${actualD
         return "\n";
       }
       formatTreeDiff(propertyPath, difference2, isLast) {
-        let result2 = (0, import_node_util5.format)(
+        let result2 = (0, import_node_util6.format)(
           " %s\u2500 %s %s\n",
           isLast ? "\u2514" : "\u251C",
           difference2.isAddition ? ADDITION3 : difference2.isRemoval ? REMOVAL3 : UPDATE3,
           propertyPath
         );
         if (difference2.isUpdate) {
-          result2 += (0, import_node_util5.format)("     \u251C\u2500 %s %s\n", REMOVAL3, chalk23.red(difference2.oldValue));
-          result2 += (0, import_node_util5.format)("     \u2514\u2500 %s %s\n", ADDITION3, chalk23.green(difference2.newValue));
+          result2 += (0, import_node_util6.format)("     \u251C\u2500 %s %s\n", REMOVAL3, chalk23.red(difference2.oldValue));
+          result2 += (0, import_node_util6.format)("     \u2514\u2500 %s %s\n", ADDITION3, chalk23.green(difference2.newValue));
         }
         return result2;
       }
@@ -439581,7 +439766,7 @@ async function detectStackDrift(cfn, ioHelper, stackName) {
     StackName: stackName
   });
   await ioHelper.defaults.trace(
-    (0, import_node_util6.format)("Detecting drift with ID %s for stack %s...", driftDetection.StackDriftDetectionId, stackName)
+    (0, import_node_util7.format)("Detecting drift with ID %s for stack %s...", driftDetection.StackDriftDetectionId, stackName)
   );
   const driftStatus = await waitForDriftDetection(cfn, ioHelper, driftDetection.StackDriftDetectionId);
   if (driftStatus?.StackDriftStatus === "UNKNOWN") {
@@ -439631,11 +439816,11 @@ async function waitForDriftDetection(cfn, ioHelper, driftDetectionId) {
     await new Promise((resolve13) => setTimeout(resolve13, timeBetweenApiCalls));
   }
 }
-var import_node_util6;
+var import_node_util7;
 var init_drift2 = __esm({
   "../toolkit-lib/lib/api/drift/drift.ts"() {
     "use strict";
-    import_node_util6 = require("node:util");
+    import_node_util7 = require("node:util");
     init_toolkit_error();
     init_string_manipulation();
     __name(detectStackDrift, "detectStackDrift");
@@ -471154,7 +471339,7 @@ var init_runner_base = __esm({
 
 // lib/workers/common.ts
 function formatAssertionResults(results) {
-  return Object.entries(results).map(([id, result2]) => (0, import_util68.format)("%s%s", id, result2.status === "success" ? ` - ${result2.status}` : `
+  return Object.entries(results).map(([id, result2]) => (0, import_util67.format)("%s%s", id, result2.status === "success" ? ` - ${result2.status}` : `
 ${result2.message}`)).join("\n      ");
 }
 function formatError(error5) {
@@ -471166,11 +471351,11 @@ ${chalk28.gray("Cause: " + formatError(error5.cause))}`;
   }
   return `${name}: ${message2}`;
 }
-var import_util68, chalk28;
+var import_util67, chalk28;
 var init_common14 = __esm({
   "lib/workers/common.ts"() {
     "use strict";
-    import_util68 = require("util");
+    import_util67 = require("util");
     chalk28 = __toESM(require_source());
     init_logger();
     __name(formatAssertionResults, "formatAssertionResults");

package/package.json

@@ -64,13 +64,13 @@
     "ts-jest": "^29.4.9",
     "typescript": "5.9",
     "@aws-cdk/aws-service-spec": "^0.1.180",
-    "@aws-cdk/cdk-assets-lib": "1.4.7",
+    "@aws-cdk/cdk-assets-lib": "1.4.8",
     "@aws-cdk/cloud-assembly-api": "2.2.4",
-    "@aws-cdk/cloud-assembly-schema": ">=53.25.0",
+    "@aws-cdk/cloud-assembly-schema": ">=53.27.0",
     "@aws-cdk/cloudformation-diff": "2.187.1",
-    "@aws-cdk/toolkit-lib": "1.26.0",
+    "@aws-cdk/toolkit-lib": "1.26.2",
     "@aws-sdk/client-cloudformation": "^3",
-    "aws-cdk": "2.1123.0",
+    "aws-cdk": "2.1124.1",
     "chalk": "^4",
     "chokidar": "^4",
     "fs-extra": "^11",
@@ -80,7 +80,7 @@
   },
   "dependencies": {
     "@aws-cdk/aws-service-spec": "0.1.180",
-    "aws-cdk": "2.1123.0"
+    "aws-cdk": "2.1124.1"
   },
   "keywords": [
     "aws",
@@ -102,7 +102,7 @@
   "publishConfig": {
     "access": "public"
   },
-  "version": "2.197.22",
+  "version": "2.197.24",
   "packageManager": "yarn@4.13.0",
   "types": "lib/index.d.ts",
   "//": "~~ Generated by projen. To modify, edit .projenrc.js and run \"yarn projen\"."