Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 27, 2025

Updated Akka.Cluster.Sharding from 1.5.54 to 1.5.55.

Release notes

Sourced from Akka.Cluster.Sharding's releases.

1.5.55

1.5.55 October 26th, 2025

Akka.NET v1.5.55 is a patch release containing important stability and security improvements for Akka.Remote.

Akka.Remote Stability Improvements:

Akka.Remote Security Improvements:

  • Custom certificate validation with single execution path - fixes mTLS asymmetry bug - Fixes issue #​7914 by introducing programmatic certificate validation helpers through the new CertificateValidation factory class. This release adds 7 new validation helper methods including ValidateChain(), ValidateHostname(), PinnedCertificate(), ValidateSubject(), ValidateIssuer(), Combine(), and ChainPlusThen(). The update also fixes an mTLS asymmetry bug where server-side hostname validation was not being applied consistently with client-side validation, all while maintaining full backward compatibility with existing HOCON-based validation.

  • Fix DotNettySslSetup being ignored when HOCON has valid SSL config - Fixes issue #​7917 where programmatic DotNettySslSetup settings were incorrectly being overridden by HOCON configuration. Programmatic configuration now correctly takes precedence over HOCON defaults as intended.

1 contributor since release 1.5.54

COMMITS LOC+ LOC- AUTHOR
3 1605 289 Aaron Stannard

Changes:

  • 2492bdb1f238d5cc902b5d5a7600941bf0837ba9 Prepare v1.5.55 release (#​7926)
  • 2dc1c579f638ff87022cc8a95d36f68793a1c1c0 Akka.Remote: harden EndpointWriter against serialization failures (#​7923) (#​7925) [ #​7922 ]
  • 98c25d1c3690c218a007049d9bc43d2ac9e605b4 feat(remote): custom certificate validation with single execution path - fixes mTLS asymmetry bug (#​7915) (#​7921) [ #​7914 ]
  • 1e8d6068cf2a94c19fbf3d951547cf460ef3e8f1 Fix DotNettySslSetup being ignored when HOCON has valid SSL config (#​7918) (#​7919) [ #​7917 ]
  • 77ba03c0353bd813c6022a1a7713fab38c4d5d4a Prepare v1.5.54 release (#​7913)

This list of changes was auto generated.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Akka.Cluster.Sharding
  dependency-version: 1.5.55
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Oct 27, 2025
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 28, 2025

Superseded by #349.

@dependabot dependabot bot closed this Oct 28, 2025
@dependabot dependabot bot deleted the dependabot/nuget/src/Akka.Cluster.Sharding-1.5.55 branch October 28, 2025 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

2 participants