From 42c261ef88582ee54281e60f343913606f546f6c Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 19 Nov 2025 02:48:04 +0000
Subject: [PATCH 1/2] Bump software.amazon.awscdk:aws-cdk-lib

Bumps [software.amazon.awscdk:aws-cdk-lib](https://github.com/aws/aws-cdk) from 2.190.0 to 2.221.0.
- [Release notes](https://github.com/aws/aws-cdk/releases)
- [Changelog](https://github.com/aws/aws-cdk/blob/main/CHANGELOG.v2.alpha.md)
- [Commits](https://github.com/aws/aws-cdk/compare/v2.190.0...v2.221.0)

---
updated-dependencies:
- dependency-name: software.amazon.awscdk:aws-cdk-lib
  dependency-version: 2.221.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 labs/unicorn-store/infrastructure/cdk/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/labs/unicorn-store/infrastructure/cdk/pom.xml b/labs/unicorn-store/infrastructure/cdk/pom.xml
index fe51b769..56690da8 100644
--- a/labs/unicorn-store/infrastructure/cdk/pom.xml
+++ b/labs/unicorn-store/infrastructure/cdk/pom.xml
@@ -10,7 +10,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-        <cdk.version>2.190.0</cdk.version>
+        <cdk.version>2.225.0</cdk.version>
         <junit.version>5.13.1</junit.version>
     </properties>
 

From e01a8ff67ff4043ab94e93e31d6a43bb79eda97c Mon Sep 17 00:00:00 2001
From: Mark Curtis <curtisms@amazon.com>
Date: Wed, 19 Nov 2025 07:23:42 -0500
Subject: [PATCH 2/2] Adding suppression for AwsSolutions-L1 CDK-NAG check as
 the workshop hasn't been upgraded to Java 25 yet - will be removed when
 version upgrade is complete

---
 .../cdk/src/main/java/com/unicorn/UnicornStoreApp.java         | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/labs/unicorn-store/infrastructure/cdk/src/main/java/com/unicorn/UnicornStoreApp.java b/labs/unicorn-store/infrastructure/cdk/src/main/java/com/unicorn/UnicornStoreApp.java
index fe38c4cd..4504691b 100644
--- a/labs/unicorn-store/infrastructure/cdk/src/main/java/com/unicorn/UnicornStoreApp.java
+++ b/labs/unicorn-store/infrastructure/cdk/src/main/java/com/unicorn/UnicornStoreApp.java
@@ -59,7 +59,8 @@ public static void main(final String[] args) {
                 new NagPackSuppression.Builder().id("AwsSolutions-APIG3").reason("Workshop API Gateways do not need AWS WAF assigned").build(),
                 new NagPackSuppression.Builder().id("AwsSolutions-EC23").reason("Not needed").build(),
                 new NagPackSuppression.Builder().id("AwsSolutions-RDS13").reason("Workshop Database does not need backups").build(),
-                new NagPackSuppression.Builder().id("CdkNagValidationFailure").reason("Suppress warnings see: https://github.com/cdklabs/cdk-nag/issues/817").build()
+                new NagPackSuppression.Builder().id("CdkNagValidationFailure").reason("Suppress warnings see: https://github.com/cdklabs/cdk-nag/issues/817").build(),
+                new NagPackSuppression.Builder().id("AwsSolutions-L1").reason("Workshop not upgraded to Java 25 yet").build()
         );
 
         NagSuppressions.addStackSuppressions(infrastructureStack, suppression);