.Net: Bump AWSSDK.BedrockAgentRuntime and AWSSDK.Core - #14226
.Net: Bump AWSSDK.BedrockAgentRuntime and AWSSDK.Core#14226dependabot[bot] wants to merge 1 commit into
Conversation
Bumps AWSSDK.BedrockAgentRuntime from 4.0.8.5 to 4.0.100.7 Bumps AWSSDK.Core from 4.0.6.1 to 4.0.100.9 --- updated-dependencies: - dependency-name: AWSSDK.Core dependency-version: 4.0.100.9 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: AWSSDK.BedrockAgentRuntime dependency-version: 4.0.100.7 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
dependabot
Bot
added
dependencies
github-actions
Bot
changed the title
There was a problem hiding this comment.
Pull request overview
Note
Copilot could not run the full agentic suite for this review because it was automatically requested on a bot-authored pull request. Request a review from Copilot under Reviewers to retry with the full agentic suite. Improved support for bot-authored pull requests is coming soon.
Updates the centrally managed .NET package versions to use a newer AWS SDK runtime package.
Changes:
- Bumps
AWSSDK.BedrockAgentRuntimefrom4.0.8.5to4.0.100.7.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
| <PackageVersion Include="AWSSDK.BedrockAgent" Version="4.0.8.5" /> | ||
| <PackageVersion Include="AWSSDK.BedrockAgentRuntime" Version="4.0.8.5" /> | ||
| <PackageVersion Include="AWSSDK.BedrockAgentRuntime" Version="4.0.100.7" /> | ||
| <PackageVersion Include="AWSSDK.BedrockRuntime" Version="4.0.14.5" /> | ||
| <PackageVersion Include="AWSSDK.Core" Version="4.0.6.1" /> | ||
| <PackageVersion Include="AWSSDK.Extensions.Bedrock.MEAI" Version="4.0.5.3" /> |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
Automated Code Review
Reviewers: 5 | Confidence: 90%
✓ Correctness
This PR bumps AWSSDK.BedrockAgentRuntime from 4.0.8.5 to 4.0.100.7 while leaving AWSSDK.Core at 4.0.6.1, AWSSDK.BedrockAgent at 4.0.8.5, and AWSSDK.BedrockRuntime at 4.0.14.5. The PR description claims AWSSDK.Core is updated to 4.0.100.9, but the diff does not include that change. The primary version-mismatch concern is already covered by the existing unresolved review comment. No other correctness issues found in the single-line version bump.
✓ Security Reliability
This is a straightforward dependency version bump for AWSSDK.BedrockAgentRuntime from 4.0.8.5 to 4.0.100.7. From a security and reliability perspective, the change itself introduces no injection risks, secrets, resource leaks, or unsafe deserialization. The version misalignment concern (BedrockAgentRuntime at 4.0.100.7 while Core remains at 4.0.6.1 and BedrockAgent at 4.0.8.5) is already captured by the existing unresolved review comment. No additional security or reliability issues were identified.
✓ Test Coverage
This is a Dependabot dependency version bump for AWSSDK.BedrockAgentRuntime from 4.0.8.5 to 4.0.100.7. No code logic changes are made. The project already has unit tests (BedrockAgentChannelTests.cs, BedrockAgentTests.cs) covering the Bedrock agent functionality. From a test coverage perspective, existing tests should validate that the new SDK version doesn't introduce regressions, and no additional tests are required for a dependency-only change.
✓ Failure Modes
This PR bumps AWSSDK.BedrockAgentRuntime from 4.0.8.5 to 4.0.100.7 while leaving AWSSDK.Core at 4.0.6.1 and AWSSDK.BedrockAgent at 4.0.8.5. The primary failure mode concern (version misalignment causing potential binding failures) is already captured by the existing unresolved review comment. No additional silent failure paths or operational failure modes beyond what's already flaged.
✗ Design Approach
The change set appears incomplete rather than fundamentally misdesigned: it updates
AWSSDK.BedrockAgentRuntime, but the repo still centrally pinsAWSSDK.Coreto4.0.6.1, so projects that directly referenceAWSSDK.Corecontinue restoring the old package. That means this PR does not actually implement the Core bump described in its own rationale.
Flagged Issues
-
dotnet/Directory.Packages.propsstill pinsAWSSDK.Coreto4.0.6.1, so directAWSSDK.Coreconsumers such asdotnet/src/Connectors/Connectors.Amazon/Connectors.Amazon.csproj:17-20anddotnet/samples/Concepts/Concepts.csproj:51will not receive the advertised Core upgrade.
Automated review by dependabot[bot]'s agents
|
Flagged issue
Source: automated DevFlow PR review |
|
Looks like these dependencies are no longer updatable, so this is no longer needed. |
Pinned AWSSDK.BedrockAgentRuntime at 4.0.100.7.
Release notes
Sourced from AWSSDK.BedrockAgentRuntime's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated AWSSDK.Core from 4.0.6.1 to 4.0.100.9.
Release notes
Sourced from AWSSDK.Core's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)