aws-cdk 2.1142.0 → 2.1143.0

package/README.md

@@ -160,6 +160,14 @@ The `quiet` option can be set in the `cdk.json` file.
 See the [AWS Documentation](https://docs.aws.amazon.com/cdk/latest/guide/apps.html#apps_cloud_assembly) to learn more about cloud assemblies.
 See the [CDK reference documentation](https://docs.aws.amazon.com/cdk/api/latest/docs/cloud-assembly-schema-readme.html) for details on the cloud assembly specification
 
+> [!IMPORTANT]
+> **A Cloud Assembly is a trust boundary. Do not deploy Cloud Assemblies
+> from sources you do not trust.**
+>
+> For example, if you deploy a Cloud Assembly from an external source like
+> `cdk deploy --app /downloaded/file/path/cdk.out`, the CLI runs external
+> code using with your shell environment and AWS credentials.
+
 ### `cdk diagnose`
 
 > [!CAUTION]
@@ -869,7 +877,8 @@ The server can run your app to keep the cloud assembly current (for example, an
 "auto-synth on save" mode offered through your editor). Because that runs your
 project's `app` command with your shell environment and AWS credentials, enable
 it only for projects you trust. This is the same trust model that `cdk synth`
-and `cdk watch` already use.
+and `cdk watch` already use. Deploying an already-synthesized Cloud Assembly
+carries a related trust boundary — see [`cdk synth`](#cdk-synth).
 
 `cdk lsp` is designed to be driven by an editor extension rather than run by hand.
 For the full feature list, the editor-integration protocol, and the programmatic

package/THIRD_PARTY_LICENSES

@@ -5975,7 +5975,7 @@ Apache License
 
 ----------------
 
-** @aws-sdk/credential-providers@3.1130.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.1130.0 | Apache-2.0
+** @aws-sdk/credential-providers@3.1135.0 - https://www.npmjs.com/package/@aws-sdk/credential-providers/v/3.1135.0 | Apache-2.0
 Apache License
                            Version 2.0, January 2004
                         http://www.apache.org/licenses/
@@ -10936,7 +10936,7 @@ THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLI
 
 ----------------
 
-** cdk-from-cfn@0.331.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.331.0 | MIT OR Apache-2.0
+** cdk-from-cfn@0.333.0 - https://www.npmjs.com/package/cdk-from-cfn/v/0.333.0 | MIT OR Apache-2.0
 
 ----------------
 

package/build-info.json

@@ -1,4 +1,4 @@
 {
-  "comment": "Generated at 2026-09-16T19:30:50Z by generate.sh",
-  "commit": "a73eebf"
+  "comment": "Generated at 2026-09-23T15:30:57Z by generate.sh",
+  "commit": "9c6bd0e"
 }

package/lib/cli/cdk-toolkit.d.ts

@@ -320,6 +320,14 @@ export interface DiffOptions {
      * @default 'auto'
      */
     readonly method?: 'auto' | 'change-set' | 'template';
+    /**
+     * Name of the CloudFormation change set to create when computing the diff
+     *
+     * Only used if the method is not 'template'.
+     *
+     * @default 'cdk-diff-change-set-<uuid>'
+     */
+    readonly changeSetName?: string;
     /**
      * Whether or not the change set imports resources that already exist.
      *