Skip to content

build(deps): bump aws.sdk.v2.version from 2.55.5 to 2.55.6 - #20545

Open
dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/aws.sdk.v2.version-2.55.6
Open

dependabot[bot] wants to merge 2 commits into
masterfrom
dependabot/maven/aws.sdk.v2.version-2.55.6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps aws.sdk.v2.version from 2.55.5 to 2.55.6.
Updates software.amazon.awssdk:s3 from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:s3-transfer-manager from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:sts from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:apache-client from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:auth from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:regions from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:ec2 from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:aws-core from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:sdk-core from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:netty-nio-client from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:aws-crt-client from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:bom from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:retries-spi from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:retries from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:kinesis from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:http-client-spi from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:utils from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:rds from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:glue from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:kms from 2.55.5 to 2.55.6

Updates software.amazon.awssdk:bundle from 2.55.5 to 2.55.6

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 10, 2026
Bumps `aws.sdk.v2.version` from 2.55.5 to 2.55.6.

Updates `software.amazon.awssdk:s3` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:s3-transfer-manager` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:sts` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:apache-client` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:auth` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:regions` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:ec2` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:aws-core` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:sdk-core` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:netty-nio-client` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:aws-crt-client` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:bom` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:retries-spi` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:retries` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:kinesis` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:http-client-spi` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:utils` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:rds` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:glue` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:kms` from 2.55.5 to 2.55.6

Updates `software.amazon.awssdk:bundle` from 2.55.5 to 2.55.6

---
updated-dependencies:
- dependency-name: software.amazon.awssdk:apache-client
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:auth
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:aws-core
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:aws-crt-client
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:bom
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:bundle
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:ec2
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:glue
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:http-client-spi
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:kinesis
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:kms
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:netty-nio-client
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:rds
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:regions
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:retries
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:retries-spi
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:s3
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:s3-transfer-manager
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sdk-core
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:sts
  dependency-version: 2.55.6
  dependency-type: direct:development
  update-type: version-update:semver-patch
- dependency-name: software.amazon.awssdk:utils
  dependency-version: 2.55.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title build(deps): bump aws.sdk.v2.version from 2.55.4 to 2.55.6 build(deps): bump aws.sdk.v2.version from 2.55.5 to 2.55.6 Oct 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/aws.sdk.v2.version-2.55.6 branch from 6baab22 to 57094e5 Compare October 10, 2026 02:11

@FrankChen021 FrankChen021 left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an automated review by Codex GPT-5.6 Luna(Max).

Compatibility analysis

Dependency: AWS SDK for Java v2, managed by aws.sdk.v2.version, upgraded from 2.55.5 to 2.55.6. The complete direct published release path reviewed in ROUND_1 is 2.55.5 -> 2.55.6, with no intervening published release. The carried-forward ROUND_1 verdict is SAFE. API/ABI, runtime, configuration, serialization/wire, persistence, and clients are SAFE: the patch-level target preserves the Druid-consumed AWS SDK contracts and does not change Druid APIs, options, wire formats, or persisted data. Transitive dependencies are SAFE under the resolved AWS SDK v2 set and its existing dependency-management constraints. Licenses are SAFE after the bounded licenses.yaml repair added the 11 missing 2.55.6 target-artifact entries while preserving the existing AWS SDK Apache 2.0 metadata. Extension/plugin SPI behavior is SAFE: no Druid extension registration, plugin contract, or SPI implementation changed. No CONCERN, INCOMPATIBLE, or UNRESOLVED Druid-relevant evidence was found in the inherited ROUND_1 review.

Druid impact

The dependency version change is in the root pom.xml; the bounded CI metadata repair is in licenses.yaml. The managed AWS SDK modules are consumed by Druid AWS integrations, including the S3 extension's S3, STS, and transfer clients and related dependency-managed modules. No tracked production or test source changed, so there is no source-level behavior change; the practical effect is dependency resolution at AWS SDK 2.55.6 plus complete license metadata for the resolved artifacts.

Validation

  • Reused the persisted ROUND_1 release evidence and all nine-category SAFE findings; no compatibility research was repeated in this CI-only round.
  • Inspected the complete PR diff, base/head commits, affected POM and license metadata, AWS SDK dependency consumers, and the isolated worktree.
  • Dependency resolution and bounded license validation passed after the 11-entry licenses.yaml repair; git diff --check passed.
  • No tracked production/test source changed and no additional local source test was required; exact-head GitHub CI supplied the full validation.
  • The earlier PR-caused packaging failure was resolved by the license metadata repair. The later external HttpEmitterEventCollectorTest timeout was diagnosed from the failed job log and resolved by the targeted rerun.

CI gate

Exact current head: dba1e975004b94e274d73039d74ed86787419a53. The PR is OPEN, non-draft, MERGEABLE, and CLEAN. The authoritative complete statusCheckRollup is SUCCESS: workflow 38020130276, attempt 2, has 27/27 CheckRuns completed with SUCCESS and 0 StatusContexts reported (0 successful). Every reported item succeeded. The targeted rerun of job 114127509008 succeeded after the external HttpEmitterEventCollectorTest timeout; no failed, active, skipped, neutral, or unknown result remains.

Automation actions

The automation changed licenses.yaml to add the 11 missing AWS SDK 2.55.6 license entries, pushed commit dba1e975004b94e274d73039d74ed86787419a53, and performed the eligible targeted rerun of workflow 38020130276 attempt 2, job 114127509008. No tracked production or test source was changed, no further repair or rerun is needed, and this approval body is prepared for the coordinator's reserved approval action. No merge was performed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Area - Dependencies dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant