chore(deps): update dependency aws-cdk-lib to v2.167.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
aws-cdk-lib (source)	2.165.0 -> 2.167.0

---

Release Notes

aws/aws-cdk (aws-cdk-lib)

v2.167.0

Compare Source

Features

• cli: upgrade aws-sdk to sdkv3 (#​31702) (5bc0662), closes #​25870 #​26292 #​20956 #​24744 #​27265
• elasticloadbalancingv2: enable zonal shift for network load balancer (#​31990) (497abdc), closes #​31983
• kms: support KEY_AGREEMENT for keyUsage (#​30993) (2323877), closes #​30989
• lambda: add Python 3.13 runtime (#​32054) (e0ebcfe)
• lambda: add supportsSnapStart config to dotnet8 and python 3.12 (#​32112) (53f4713)
• lambda: support for customer managed encryption (CMCMK) (#​32072) (2f16415)
• update L1 CloudFormation resource definitions (#​32090) (6303b72)
• rds: support minor engine versions for oracle (#​32058) (3d72b63)
• rds: support minor versions for RDS for SQL Server (#​32055) (8c80bf8)
• service-catalog: allow Product Stack to override analytics reporting and stack descriptions (#​31985) (d8ad02a), closes #​31924

Bug Fixes

• ecr: allow creating repository uri to use tokens like cfn params (#​32053) (5648199), closes #​31860

---

Alpha modules (2.167.0-alpha.0)

Features

• ivs: support recording configuration for channel (#​31899) (8a3734d), closes #​31780
• redshift: relocating a cluster (#​31993) (b763d86)

Bug Fixes

• scheduler-targets-alpha: add dlq policy to execution role instead of queue policy (#​32032) (b953b2a), closes #​31785

v2.166.0

Compare Source

Features

• cli: automatically roll back stacks if necessary (#​31920) (2f9fb1e), closes #​30546
• kinesis: support resource policy for a data stream (#​31909) (18fbd6d), closes #​28814
• rds: configure autoMinorVersionUpgrade for a database cluster (#​31962) (0fb6106)
• route53: support HTTPS, SSHFP, SVCB, and TLSA DNS resource record (#​31955) (afc2b0d), closes /docs.aws.amazon.com/ja_jp/AWSCloudFormation/latest/UserGuide/aws-resource-route53-recordset.html#cfn-route53
• synthetics: add artifactS3Encryption property to the Canary Construct. (#​30197) (1f39cb9), closes #​30190
• update L1 CloudFormation resource definitions (#​32007) (be6a964)

Bug Fixes

• deploy-time stack tags cause synthesis to fail (#​32041) (18c19fd), closes #​32040
• aws_route53: cannot use CfnParameter.valueAsNumber for L2 RecordSet weight (#​31823) (14561ac), closes #​31810
• cli: asset uploads fail if Object Lock is enabled on access bucket (#​31937) (ab1e91d)
• dynamoDB: make TableV2 taggable (#​31867) (796c6d1), closes #​30631
• opensearch: add I4G to list of OpenSearch nodes not requiring EBS volumes (#​31948) (73378f2)

---

Alpha modules (2.166.0-alpha.0)

⚠ BREAKING CHANGES TO EXPERIMENTAL FEATURES

• scheduler-targets-alpha: Schedule Target will reuse role if target is re-used across schedules. This change triggered replacement of existing roles for Schedule as logical ID of the roles are changed.

Features

• glue-alpha: add job run queuing to Glue job (#​31830) (5fca268), closes #​31826

Bug Fixes

• scheduler-targets-alpha: create a role per target instead of singleton schedule target role (#​31895) (aee1b30), closes #​31785

---

Configuration

📅 Schedule: Branch creation - "before 6am,every weekend" in timezone Europe/Oslo, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Branch automerge failure

This PR was configured for branch automerge. However, this is not possible, so it has been raised as a PR instead.

---

• Branch has one or more failed status checks