.Net: Bump AWSSDK.BedrockRuntime and AWSSDK.Core - #14387
Conversation
Bumps AWSSDK.BedrockRuntime from 4.0.101.1 to 4.0.101.5 Bumps AWSSDK.Core from 4.0.101 to 4.0.102.3 --- updated-dependencies: - dependency-name: AWSSDK.Core dependency-version: 4.0.102.3 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: AWSSDK.BedrockRuntime dependency-version: 4.0.101.5 dependency-type: direct:production update-type: version-update:semver-patch - dependency-name: AWSSDK.Core dependency-version: 4.0.102.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
.NET
github-actions
Bot
changed the title
There was a problem hiding this comment.
🟡 Changes recommended
The PR description doesn’t mention the newly added direct dependency (AWSSDK.Core) in Agents.Bedrock.csproj, which should be confirmed as intentional or clarified.
Once you've addressed the issues Copilot identified, you can request another Copilot review.
Pull request overview
This PR updates the centralized .NET AWS SDK package versions to newer patch releases and introduces an explicit AWSSDK.Core reference for the Bedrock Agent project to align/lock its resolved AWS core dependency.
Changes:
- Bump
AWSSDK.BedrockRuntimeto4.0.101.5andAWSSDK.Coreto4.0.102.3via central package management. - Add an explicit
PackageReferencetoAWSSDK.CoreinAgents.Bedrock.csproj.
File summaries
| File | Description |
|---|---|
| dotnet/src/Agents/Bedrock/Agents.Bedrock.csproj | Adds a direct AWSSDK.Core reference for the Bedrock Agents project. |
| dotnet/Directory.Packages.props | Updates centrally managed versions for AWSSDK.BedrockRuntime and AWSSDK.Core. |
Review details
- Files reviewed: 2/2 changed files
- Comments generated: 1
- Review effort level: Lite
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| <ItemGroup> | ||
| <PackageReference Include="AWSSDK.BedrockAgent" /> | ||
| <PackageReference Include="AWSSDK.BedrockAgentRuntime" /> | ||
| <PackageReference Include="AWSSDK.Core" /> | ||
| <PackageReference Include="System.Memory.Data" /> |
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
There was a problem hiding this comment.
MAF Automated Review — Iteration 1
Result: No findings
Scope: full PR (1 commit(s)): 6d5caceb1fe1
Model: gpt-5.6-sol-fast
Overview
This PR aligns the centrally managed BedrockRuntime and Core versions and makes the Bedrock agent's existing Core API usage an explicit package dependency. The retained AWS package ranges accept the new Core version, while multi-target builds, package checks, and affected unit-test projects provide concrete compatibility guardrails. No publishable risk was established.
Reviewed the supplied pull-request change set across correctness, security/reliability, architecture, and failure behavior.
No publishable findings remained after source verification for this scope.
Pinned AWSSDK.BedrockRuntime at 4.0.101.5.
Release notes
Sourced from AWSSDK.BedrockRuntime's releases.
No release notes found for this version range.
Commits viewable in compare view.
Updated AWSSDK.Core from 4.0.101 to 4.0.102.3.
Release notes
Sourced from AWSSDK.Core's releases.
No release notes found for this version range.
Commits viewable in compare view.
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)