Skip to content

chore(deps): bump the aws group across 1 directory with 9 updates - #25868

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/aws-1a7ffe9a21
Closed

chore(deps): bump the aws group across 1 directory with 9 updates#25868
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/cargo/aws-1a7ffe9a21

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026

Copy link
Copy Markdown
Contributor

Bumps the aws group with 6 updates in the / directory:

Package From To
aws-credential-types 1.2.14 1.3.0
aws-sdk-kms 1.99.0 1.104.0
aws-sdk-secretsmanager 1.99.0 1.103.0
aws-types 1.3.14 1.5.0
aws-sigv4 1.4.2 1.5.1
aws-smithy-runtime 1.10.3 1.12.1

Updates aws-credential-types from 1.2.14 to 1.3.0

Commits

Updates aws-sdk-kms from 1.99.0 to 1.104.0

Commits

Updates aws-sdk-secretsmanager from 1.99.0 to 1.103.0

Commits

Updates aws-types from 1.3.14 to 1.5.0

Commits

Updates aws-sigv4 from 1.4.2 to 1.5.1

Commits

Updates aws-smithy-async from 1.2.14 to 1.3.0

Commits

Updates aws-smithy-runtime from 1.10.3 to 1.12.1

Commits

Updates aws-smithy-runtime-api from 1.11.6 to 1.14.0

Commits

Updates aws-smithy-types from 1.4.6 to 1.6.1

Commits

@dependabot dependabot Bot added domain: deps Anything related to Vector's dependencies no-changelog Changes in this PR do not need user-facing explanations in the release changelog labels Jul 16, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 16, 2026 13:54
@dependabot dependabot Bot added domain: deps Anything related to Vector's dependencies no-changelog Changes in this PR do not need user-facing explanations in the release changelog labels Jul 16, 2026
@ghost

ghost commented Jul 16, 2026

Copy link
Copy Markdown

Pipelines  Tests

⚠️ Warnings

🚦 2 Pipeline jobs failed

Test Suite | Check that the 3rd-party license file is up to date   View in Datadog   GitHub Actions

See error Current 'LICENSE-3rdparty.csv' is not up to date. Records for packages 'aws-smithy-runtime-api-macros' and 'aws-smithy-schema' are missing or changed.

Test Suite | Test Suite   View in Datadog   GitHub Actions

ℹ️ Info

No other issues found (see more)

🧪 All tests passed
❄️ No new flaky tests detected

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 1c33450 | Docs | Datadog PR Page | Give us feedback!

@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch from 2801dd1 to 74323f2 Compare July 16, 2026 17:21

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 74323f2872

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.lock
]

[[package]]
name = "aws-smithy-runtime-api-macros"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Commit regenerated license inventory

When this Cargo.lock change adds new crates such as aws-smithy-runtime-api-macros and aws-smithy-schema, the generated LICENSE-3rdparty.csv is left unchanged and has no rows for those component names. In CI for any PR that changes Cargo.lock, the changes filter marks dependencies and the Test Suite runs make check-licenses (.github/workflows/changes.yml:216-220, .github/workflows/test.yml:97-110), so this dependency bump will fail until make build-licenses is run and the updated inventory is committed.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch 3 times, most recently from 7922c8a to 742d147 Compare July 17, 2026 17:19

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 742d1474fd

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.lock
[[package]]
name = "aws-sigv4"
version = "1.4.2"
version = "1.5.1"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Enable http0 compatibility for aws-sigv4

When this lockfile selects aws-sigv4 1.5.1, Vector still builds the crate with default features disabled and only sign-http in Cargo.toml. In 1.5.1 the SigningInstructions::apply_to_request_http0x helper is gated by the http0-compat feature, while src/aws/mod.rs:318 still calls it on Vector's http 0.2 requests. Any build enabling aws-core (for example the AWS sinks/sources or OpenSearch signing) will fail to compile unless the feature is added or the call is migrated.

Useful? React with 👍 / 👎.

@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch 6 times, most recently from 3c5cebd to 110dfa1 Compare July 24, 2026 21:39
@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch 7 times, most recently from b8fe6d9 to 1c33450 Compare August 3, 2026 14:22
@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch 4 times, most recently from ca0d25d to 5813941 Compare August 6, 2026 13:42
Bumps the aws group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [aws-credential-types](https://github.com/smithy-lang/smithy-rs) | `1.2.14` | `1.3.0` |
| [aws-sdk-kms](https://github.com/awslabs/aws-sdk-rust) | `1.99.0` | `1.104.0` |
| [aws-sdk-secretsmanager](https://github.com/awslabs/aws-sdk-rust) | `1.99.0` | `1.103.0` |
| [aws-types](https://github.com/smithy-lang/smithy-rs) | `1.3.14` | `1.5.0` |
| [aws-sigv4](https://github.com/smithy-lang/smithy-rs) | `1.4.2` | `1.5.1` |
| [aws-smithy-runtime](https://github.com/smithy-lang/smithy-rs) | `1.10.3` | `1.12.1` |



Updates `aws-credential-types` from 1.2.14 to 1.3.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-sdk-kms` from 1.99.0 to 1.104.0
- [Release notes](https://github.com/awslabs/aws-sdk-rust/releases)
- [Commits](https://github.com/awslabs/aws-sdk-rust/commits)

Updates `aws-sdk-secretsmanager` from 1.99.0 to 1.103.0
- [Release notes](https://github.com/awslabs/aws-sdk-rust/releases)
- [Commits](https://github.com/awslabs/aws-sdk-rust/commits)

Updates `aws-types` from 1.3.14 to 1.5.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-sigv4` from 1.4.2 to 1.5.1
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-smithy-async` from 1.2.14 to 1.3.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-smithy-runtime` from 1.10.3 to 1.12.1
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-smithy-runtime-api` from 1.11.6 to 1.14.0
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

Updates `aws-smithy-types` from 1.4.6 to 1.6.1
- [Release notes](https://github.com/smithy-lang/smithy-rs/releases)
- [Changelog](https://github.com/smithy-lang/smithy-rs/blob/main/CHANGELOG.md)
- [Commits](https://github.com/smithy-lang/smithy-rs/commits)

---
updated-dependencies:
- dependency-name: aws-credential-types
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-sdk-kms
  dependency-version: 1.104.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-sdk-secretsmanager
  dependency-version: 1.103.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-sigv4
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-smithy-async
  dependency-version: 1.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-smithy-runtime
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-smithy-runtime-api
  dependency-version: 1.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-smithy-types
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
- dependency-name: aws-types
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: aws
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/cargo/aws-1a7ffe9a21 branch from 5813941 to 6700139 Compare August 6, 2026 15:01

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 6700139dcc

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread Cargo.lock
[[package]]
name = "aws-smithy-runtime"
version = "1.10.3"
version = "1.12.1"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2 Badge Pin the access-key assume-role load timeout

When users configure auth.access_key with assume_role, credentials_cache() still falls through to _ => IdentityCache::lazy().build() in src/aws/auth.rs, unlike the Role and Default modes that explicitly keep Vector's 5s DEFAULT_LOAD_TIMEOUT. This aws-smithy-runtime bump changes the lazy identity-cache default to the SDK-derived timeout, so an unreachable STS/credential path in that auth mode can now wait much longer and there is no load_timeout_secs knob to restore the old behavior. Please build the same explicit cache for access-key assume-role as well.

Useful? React with 👍 / 👎.

@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/cargo/aws-1a7ffe9a21 branch August 7, 2026 14:11
@github-actions github-actions Bot locked and limited conversation to collaborators Aug 7, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

domain: deps Anything related to Vector's dependencies no-changelog Changes in this PR do not need user-facing explanations in the release changelog

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants