build(deps): bump aws.sdk.v2.version from 2.49.6 to 2.51.0 - #19932
Conversation
Bumps `aws.sdk.v2.version` from 2.49.6 to 2.51.0. Updates `software.amazon.awssdk:s3` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:s3-transfer-manager` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:sts` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:apache-client` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:auth` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:regions` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:ec2` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:aws-core` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:sdk-core` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:netty-nio-client` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:aws-crt-client` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:bom` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:retries-spi` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:retries` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:kinesis` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:http-client-spi` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:utils` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:rds` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:glue` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:kms` from 2.49.6 to 2.51.0 Updates `software.amazon.awssdk:bundle` from 2.49.6 to 2.51.0 --- updated-dependencies: - dependency-name: software.amazon.awssdk:s3 dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:s3-transfer-manager dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:sts dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:apache-client dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:auth dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:regions dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:ec2 dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:aws-core dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:sdk-core dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:netty-nio-client dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:aws-crt-client dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:bom dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:retries-spi dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:retries dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:kinesis dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:http-client-spi dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:utils dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:rds dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:glue dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:kms dependency-version: 2.51.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: software.amazon.awssdk:bundle dependency-version: 2.51.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
FrankChen021
left a comment
There was a problem hiding this comment.
Reviewed exact head 55d8c7b against upstream master 8855072. The diff is limited to the centralized aws.sdk.v2.version update from 2.49.6 to 2.51.0 and matching licenses.yaml metadata, including AWS CRT 0.48.2. The affected existing Druid code paths are cloud/aws-common plus the S3, Kinesis, EC2, RDS, and related extension integrations and tests. The complete PR pipeline is green: static checks, strict compilation, packaging, Java 25 unit/integration tests, distribution validation, Docker tests, CodeQL, and web checks. I reviewed the AWS SDK 2.50.0-2.51.0 release notes and versioning policy; they describe endpoint/S3 fixes and additive service changes, and I found no unresolved compatibility concern for Druid usage. Druid source, user configuration, wire/serialization and persistence formats, and extension/plugin behavior are unchanged by this version-only update; existing AWS SDK types remain the consumed surface. The AWS SDK advisory GHSA-443w-3rq3-5m5h affects versions 2.18.33-2.41.29 and is fixed before this upgrade. Evidence: https://github.com/aws/aws-sdk-java-v2/releases/tag/2.50.0 https://github.com/aws/aws-sdk-java-v2/releases/tag/2.50.1 https://github.com/aws/aws-sdk-java-v2/releases/tag/2.50.2 https://github.com/aws/aws-sdk-java-v2/releases/tag/2.51.0 https://github.com/aws/aws-sdk-java-v2/blob/master/VERSIONING.md GHSA-443w-3rq3-5m5h #19932. This review was performed by Codex GPT-5.6-Sol model.
Bumps
aws.sdk.v2.versionfrom 2.49.6 to 2.51.0.Updates
software.amazon.awssdk:s3from 2.49.6 to 2.51.0Updates
software.amazon.awssdk:s3-transfer-managerfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:stsfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:apache-clientfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:authfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:regionsfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:ec2from 2.49.6 to 2.51.0Updates
software.amazon.awssdk:aws-corefrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:sdk-corefrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:netty-nio-clientfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:aws-crt-clientfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:bomfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:retries-spifrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:retriesfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:kinesisfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:http-client-spifrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:utilsfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:rdsfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:gluefrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:kmsfrom 2.49.6 to 2.51.0Updates
software.amazon.awssdk:bundlefrom 2.49.6 to 2.51.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)