Skip to content

Bump AWSSDK.S3 and Dapr.Client#2547

Merged
lakshmimsft merged 1 commit intoedgefrom
dependabot/nuget/samples/aws/edge/all-a0e71c53c6
Apr 20, 2026
Merged

Bump AWSSDK.S3 and Dapr.Client#2547
lakshmimsft merged 1 commit intoedgefrom
dependabot/nuget/samples/aws/edge/all-a0e71c53c6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Updated AWSSDK.S3 from 4.0.20.3 to 4.0.21.2.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Dapr.Client from 1.17.7 to 1.17.9.

Release notes

Sourced from Dapr.Client's releases.

1.17.9

What's Changed

The CNCF gave Dapr access to GitHub Enterprise and with it, a bunch of LLM tokens, so I took the opportunity this week to give several of the different models an experimental spin and evaluate how well each one worked for different ideas I wanted to add to this project. Several of these PRs took several iterations to get right, but each is backed by unit and integration tests and I've personally reviewed every line of code that was merged into the SDK. I intend to keep experimenting with these capabilities and to keep contributing my own PRs, but I think LLMs represent an opportunity to augment software engineers' creativity and skill and look forward to iterating on new functionality in the SDK at a faster clip as a result.

Workflow Analyzer/Codefix Improvements:

Example Projects:

Improving Testing:

Infrastructure Changes:

New Contributors

Thank you to the new SDK contributors! I appreciate you taking the time to not only call out issues, but also submit a PR to improve this project!

Full Changelog: dapr/dotnet-sdk@v1.17.8...v1.17.9

1.17.8

What's Changed

More Test Validation

Full Changelog: dapr/dotnet-sdk@v1.17.7...v1.17.8

Commits viewable in compare view.

@dependabot dependabot Bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Apr 20, 2026
@dependabot dependabot Bot requested a review from a team as a code owner April 20, 2026 00:46
@dependabot dependabot Bot added the .NET Pull requests that update .net code label Apr 20, 2026
@dependabot dependabot Bot requested review from a team as code owners April 20, 2026 00:46
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 20, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 2 package(s) with unknown licenses.
See the Details below.

License Issues

samples/aws/aws.csproj

PackageVersionLicenseIssue Type
AWSSDK.S34.0.21.2NullUnknown License

samples/dapr/ui/ui.csproj

PackageVersionLicenseIssue Type
Dapr.Client1.17.9NullUnknown License

OpenSSF Scorecard

PackageVersionScoreDetails
nuget/AWSSDK.S3 4.0.21.2 UnknownUnknown
nuget/Dapr.Client 1.17.9 🟢 4.8
Details
CheckScoreReason
Maintained🟢 1030 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Dangerous-Workflow🟢 10no dangerous workflow patterns detected
Code-Review⚠️ 1Found 5/27 approved changesets -- score normalized to 1
CII-Best-Practices⚠️ 0no effort to earn an OpenSSF best practices badge detected
Token-Permissions⚠️ 0detected GitHub workflow tokens with excessive permissions
Binary-Artifacts🟢 10no binaries found in the repo
Fuzzing⚠️ 0project is not fuzzed
License🟢 10license file detected
Pinned-Dependencies⚠️ 0dependency not pinned by hash detected -- score normalized to 0
Signed-Releases⚠️ -1no releases found
Branch-Protection⚠️ -1internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
Security-Policy⚠️ 0security policy file not detected
Packaging🟢 10packaging workflow detected
SAST⚠️ 0SAST tool is not run on all commits -- score normalized to 0

Scanned Files

  • samples/aws/aws.csproj
  • samples/dapr/ui/ui.csproj

@lakshmimsft
Copy link
Copy Markdown
Contributor

@dependabot rebase

Bumps AWSSDK.S3 from 4.0.20.3 to 4.0.21.2
Bumps Dapr.Client from 1.17.7 to 1.17.9

---
updated-dependencies:
- dependency-name: AWSSDK.S3
  dependency-version: 4.0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: Dapr.Client
  dependency-version: 1.17.9
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the all group with 2 updates Bump AWSSDK.S3 and Dapr.Client Apr 20, 2026
@dependabot dependabot Bot force-pushed the dependabot/nuget/samples/aws/edge/all-a0e71c53c6 branch from c013192 to e22cf29 Compare April 20, 2026 23:16
@lakshmimsft lakshmimsft merged commit c3da46e into edge Apr 20, 2026
12 checks passed
@lakshmimsft lakshmimsft deleted the dependabot/nuget/samples/aws/edge/all-a0e71c53c6 branch April 20, 2026 23:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant