Bump AWSSDK.S3 and Dapr.Client

[dependabot]

Updated AWSSDK.S3 from 4.0.100.2 to 4.0.101.5.

Release notes

Sourced from AWSSDK.S3's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated Dapr.Client from 1.18.4 to 1.18.5.

Release notes

Sourced from Dapr.Client's releases.

1.18.5

What's Changed

• Promoting Dapr.Actors.Next to 1.18 patch release by @​WhitWaldo in Dapr Actors (Next) SDK dapr/dotnet-sdk#1865
• Added support for actor retry failure policies by @​WhitWaldo in Added support for actor retry failure policies dapr/dotnet-sdk#1872
• Fixing workflow tracing + adding observability integration testing by @​WhitWaldo in Fixing workflow tracing + adding observability integration testing dapr/dotnet-sdk#1870
• Can now pass environment variables into daprd container during integration tests by @​WhitWaldo in Can now pass environment variables into daprd container during integration tests dapr/dotnet-sdk#1871
• No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime by @​WhitWaldo in No longer swallows exceptions for anything except NotFound error when retrieving workflow state from runtime dapr/dotnet-sdk#1877
• Propagate trace context for gRPC calls by @​mtaghavi2005 in Propagate trace context for gRPC calls dapr/dotnet-sdk#1858

Miscellaneous infrastructure changes:

• Restoring 1.17 to CI testing by @​WhitWaldo in Restoring 1.17 to CI testing dapr/dotnet-sdk#1856
• Auto open issue on ci failure during release by @​cicoyle in auto open issue on ci failure during release dapr/dotnet-sdk#1864

New Contributors

• @​cicoyle made their first contribution in auto open issue on ci failure during release dapr/dotnet-sdk#1864

Full Changelog: dapr/dotnet-sdk@v1.18.4...v1.18.5

Commits viewable in compare view.

[github-actions]

Dependency Review

The following issues were found:

• ✅ 0 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 2 package(s) with unknown licenses.

See the Details below.

License Issues

samples/aws/aws.csproj

Package	Version	License	Issue Type
AWSSDK.S3	4.0.101.4	Null	Unknown License

samples/dapr/ui/ui.csproj

Package	Version	License	Issue Type
Dapr.Client	1.18.5	Null	Unknown License

OpenSSF Scorecard

Package	Version	Score	Details
nuget/AWSSDK.S3	4.0.101.4	Unknown	Unknown
nuget/Dapr.Client	1.18.5	🟢 4.9	Details Check Score Reason Code-Review ⚠️ 2 Found 6/29 approved changesets -- score normalized to 2 Maintained 🟢 10 30 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Binary-Artifacts 🟢 10 no binaries found in the repo License 🟢 10 license file detected Fuzzing ⚠️ 0 project is not fuzzed Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Signed-Releases ⚠️ -1 no releases found Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 Security-Policy ⚠️ 0 security policy file not detected Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0

Scanned Files

• samples/aws/aws.csproj
• samples/dapr/ui/ui.csproj

[lakshmimsft]

@dependabot rebase

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.