Bump AWSSDK.S3 and Dapr.Client

[dependabot]

Updated AWSSDK.S3 from 4.0.100.2 to 4.0.101.6.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Dapr.Client from 1.18.4 to 1.18.5.

Release notes

Sourced from Dapr.Client's releases.

1.18.5

What's Changed

• Promoting Dapr.Actors.Next to 1.18 patch release by @​WhitWaldo in Dapr Actors (Next) SDK dapr/dotnet-sdk#1865
• Added support for actor retry failure policies by @​WhitWaldo in Added support for actor retry failure policies dapr/dotnet-sdk#1872
• Fixing workflow tracing + adding observability integration testing by @​WhitWaldo in Fixing workflow tracing + adding observability integration testing dapr/dotnet-sdk#1870
• Can now pass environment variables into daprd container during integration tests by @​WhitWaldo in Can now pass environment variables into daprd container during integration tests dapr/dotnet-sdk#1871
• No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime by @​WhitWaldo in No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime dapr/dotnet-sdk#1877
• Propagate trace context for gRPC calls by @​mtaghavi2005 in Propagate trace context for gRPC calls dapr/dotnet-sdk#1858

Miscellaneous infrastructure changes:

• Restoring 1.17 to CI testing by @​WhitWaldo in Restoring 1.17 to CI testing dapr/dotnet-sdk#1856
• Auto open issue on ci failure during release by @​cicoyle in auto open issue on ci failure during release dapr/dotnet-sdk#1864

New Contributors

• @​cicoyle made their first contribution in auto open issue on ci failure during release dapr/dotnet-sdk#1864

Full Changelog: dapr/dotnet-sdk@v1.18.4...v1.18.5

Commits viewable in compare view.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

samples/aws/aws.csproj

Package	Version	License	Issue Type
AWSSDK.S3	4.0.101.6	Null	Unknown License

samples/dapr/ui/ui.csproj

Package	Version	License	Issue Type
Dapr.Client	1.18.5	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
actions/docker/login-action	dbcb813823bdd20940b903addbd779551569679f	🟢 8.6	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 9 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: githubv4.Query: Resource not accessible by integration Signed-Releases ⚠️ -1 no releases found Packaging 🟢 10 packaging workflow detected Pinned-Dependencies 🟢 6 dependency not pinned by hash detected -- score normalized to 6 SAST 🟢 10 SAST tool is run on all commits
nuget/AWSSDK.S3	4.0.101.6	Unknown	Unknown
nuget/Dapr.Client	1.18.5	🟢 4.9	Details Check Score Reason Code-Review ⚠️ 2 Found 6/29 approved changesets -- score normalized to 2 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Fuzzing ⚠️ 0 project is not fuzzed Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
npm/@types/react	19.2.18	🟢 6.6	Details Check Score Reason Code-Review 🟢 9 Found 29/30 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 9 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed
npm/@types/react-dom	19.2.4	🟢 6.6	Details Check Score Reason Code-Review 🟢 9 Found 29/30 approved changesets -- score normalized to 9 Maintained 🟢 10 30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10 Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Security-Policy 🟢 10 security policy file detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions License 🟢 9 license file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 8 dependency not pinned by hash detected -- score normalized to 8 Fuzzing ⚠️ 0 project is not fuzzed
npm/@vitejs/plugin-react	6.0.5	🟢 6.9	Details Check Score Reason Code-Review ⚠️ 0 Found 0/26 approved changesets -- score normalized to 0 Maintained 🟢 10 30 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Packaging ⚠️ -1 packaging workflow not detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions 🟢 8 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 9 dependency not pinned by hash detected -- score normalized to 9 License 🟢 10 license file detected Branch-Protection ⚠️ 3 branch protection is not maximal on development and all release branches Signed-Releases ⚠️ -1 no releases found Fuzzing ⚠️ 0 project is not fuzzed Security-Policy 🟢 10 security policy file detected SAST 🟢 10 SAST tool is run on all commits

Scanned Files

• .github/workflows/build.yaml
• samples/aws/aws.csproj
• samples/dapr/ui/ui.csproj
• samples/demo/client/package-lock.json

[lakshmimsft]

@dependabot rebase