Bump AWS SDK for Rust (#1620)

Also bumps some other trivially bumpable deps.

Fixes RUSTSEC-2025-0009

Author: aaronmondal

Cargo.lock

@@ -56,19 +56,19 @@ mimalloc = "0.1.43"
 parking_lot = "0.12.3"
 rustls-pemfile = { version = "2.2.0", default-features = false }
 scopeguard = { version = "1.2.0", default-features = false }
-serde_json5 = "0.1.0"
+serde_json5 = "0.2.1"
 tokio = { version = "1.43.0", features = ["fs", "rt-multi-thread", "signal", "io-util"], default-features = false }
 tokio-rustls = { version = "0.26.1", default-features = false, features = [
   "ring",
 ] }
 tonic = { version = "0.12.3", features = ["transport", "tls"], default-features = false }
 tower = { version = "0.5.2", default-features = false }
 tracing = { version = "0.1.41", default-features = false }
-opentelemetry_sdk = { version = "0.27.1", default-features = false }
+opentelemetry_sdk = { version = "0.28.0", default-features = false }
 tracing-subscriber = { version = "0.3.19", default-features = false }
-opentelemetry = { version = "0.27.1", default-features = false }
+opentelemetry = { version = "0.28.0", default-features = false }
 prometheus = { version = "0.13.4", default-features = false }
-opentelemetry-prometheus = "0.27.0"
+opentelemetry-prometheus = "0.28.0"
 serde_json = "1.0.139"
 
 [workspace.cargo-features-manager.keep]

Cargo.toml

@@ -7,7 +7,7 @@ edition = "2021"
 byte-unit = { version = "5.1.6", default-features = false, features = ["byte"] }
 humantime = "2.1.0"
 serde = { version = "1.0.218", default-features = false, features = ["derive"] }
-serde_json5 = "0.1.0"
+serde_json5 = "0.2.1"
 shellexpand = { version = "3.1.0", default-features = false, features = ["base-0"] }
 
 [dev-dependencies]

nativelink-config/Cargo.toml

@@ -6,15 +6,15 @@ rust-version = "1.79.0"
 
 [dependencies]
 nativelink-metric = { path = "../nativelink-metric" }
-opentelemetry = { version = "0.27.1", features = ["metrics", "trace"], default-features = false }
+opentelemetry = { version = "0.28.0", features = ["metrics", "trace"], default-features = false }
 parking_lot = "0.12.3"
 serde = { version = "1.0.218", default-features = false }
 tracing = { version = "0.1.41", default-features = false }
 tracing-subscriber = { version = "0.3.19", default-features = false }
 
 [dev-dependencies]
 nativelink-error = { path = "../nativelink-error" }
-opentelemetry_sdk = { version = "0.27.1", default-features = false }
-opentelemetry-prometheus = "0.27.0"
+opentelemetry_sdk = { version = "0.28.0", default-features = false }
+opentelemetry-prometheus = "0.28.0"
 prometheus = { version = "0.13.4", default-features = false }
 serde_json = { version = "1.0.139", default-features = false }

nativelink-metric-collector/Cargo.toml

@@ -179,7 +179,7 @@ fn test_prometheus_exporter() {
 nativelink_custom_handler_num_counter 6
 nativelink_foo_custom_handler_num_counter 4
 nativelink_pub_u64 1
-target_info{service_name="unknown_service",telemetry_sdk_language="rust",telemetry_sdk_name="opentelemetry",telemetry_sdk_version="0.27.1"} 1
+target_info{service_name="unknown_service",telemetry_sdk_language="rust",telemetry_sdk_name="opentelemetry",telemetry_sdk_version="0.28.0"} 1
 "#.trim()).lines().map(|v| v.unwrap()).collect();
 
     // We need to sort because the output order is non-deterministic.

nativelink-metric-collector/tests/metric_collector_test.rs

@@ -19,7 +19,7 @@ bytes = { version = "1.10.0", default-features = false }
 prost = { version = "0.13.5", default-features = false }
 uuid = { version = "1.14.0", default-features = false, features = ["v4", "serde"] }
 futures = { version = "0.3.31", default-features = false }
-lru = { version = "0.12.5", default-features = false }
+lru = { version = "0.13.0", default-features = false }
 mock_instant = "0.5.2"
 parking_lot = "0.12.3"
 rand = { version = "0.9.0", default-features = false, features = ["thread_rng"] }

nativelink-scheduler/Cargo.toml

@@ -17,7 +17,7 @@ http-body = "1.0.1"
 http-body-util = "0.1.2"
 hyper = { version = "1.6.0" }
 rand = { version = "0.9.0", default-features = false, features = ["thread_rng"] }
-serde_json5 = "0.1.0"
+serde_json5 = "0.2.1"
 parking_lot = "0.12.3"
 prost = { version = "0.13.5", default-features = false }
 tokio = { version = "1.43.0", features = ["fs", "rt-multi-thread", "signal", "io-util"], default-features = false }

nativelink-service/Cargo.toml

@@ -46,6 +46,7 @@ rust_library(
         "@crates//:aws-config",
         "@crates//:aws-sdk-s3",
         "@crates//:aws-smithy-runtime",
+        "@crates//:aws-smithy-types",
         "@crates//:bincode",
         "@crates//:blake3",
         "@crates//:byteorder",

nativelink-store/BUILD.bazel

@@ -11,17 +11,18 @@ nativelink-proto = { path = "../nativelink-proto" }
 nativelink-metric = { path = "../nativelink-metric" }
 async-lock = { version = "3.4.0", features = ["std"], default-features = false }
 async-trait = "0.1.86"
-aws-config = { version = "1.5.16", default-features = false, features = [
+aws-config = { version = "1.5.18", default-features = false, features = [
   "rustls",
 ] }
 # TODO(aaronmondal): The latest version pulls in crc64fast-nvme which contains
 #                    nonhermetic bindgen deps that break Bazel sandboxes.
 # See: https://github.com/awesomized/crc64fast-nvme/issues/5
 #      https://github.com/awslabs/aws-sdk-rust/issues/1240#issuecomment-2597294295
-aws-sdk-s3 = { version = "=1.68.0", features = [
+aws-sdk-s3 = { version = "=1.78.0", features = [
   "rt-tokio",
 ], default-features = false }
-aws-smithy-runtime = { version = "1.7.8" }
+aws-smithy-runtime = { version = "=1.7.8" }
+aws-smithy-types = "=1.2.13"
 bincode = "1.3.3"
 blake3 = { version = "1.6.0", default-features = false }
 byteorder = { version = "1.5.0", default-features = false }
@@ -41,7 +42,7 @@ fred = { version = "10.0.4", default-features = false, features = [
   "sentinel-auth",
   "subscriber-client",
 ] }
-patricia_tree = { version = "0.8.0", default-features = false }
+patricia_tree = { version = "0.9.0", default-features = false }
 futures = { version = "0.3.31", default-features = false }
 hex = { version = "0.4.3", default-features = false }
 http-body = "1.0.1"
@@ -69,14 +70,14 @@ memory-stats = "1.2.0"
 mock_instant = "0.5.2"
 sha2 = { version = "0.10.8", default-features = false }
 http = { version = "1.2.0", default-features = false }
-aws-smithy-types = "1.2.13"
-aws-smithy-runtime = { version = "1.7.8", features = [
+aws-smithy-types = "=1.2.13"
+aws-smithy-runtime = { version = "=1.7.8", features = [
   "test-util",
 ], default-features = false }
-aws-sdk-s3 = { version = "=1.68.0", features = [
+aws-sdk-s3 = { version = "=1.78.0", features = [
   "rt-tokio",
 ], default-features = false }
-aws-smithy-runtime-api = "1.7.3"
+aws-smithy-runtime-api = "=1.7.3"
 rand = { version = "0.9.0", default-features = false, features = ["thread_rng", "small_rng"] }
 serde_json = "1.0.139"
 fred = { version = "10.0.4", default-features = false, features = ["mocks"] }

nativelink-store/Cargo.toml

@@ -31,6 +31,7 @@ use aws_sdk_s3::primitives::{ByteStream, SdkBody};
 use aws_sdk_s3::types::builders::{CompletedMultipartUploadBuilder, CompletedPartBuilder};
 use aws_sdk_s3::Client;
 use aws_smithy_runtime::client::http::hyper_014::HyperClientBuilder;
+use aws_smithy_types::checksum_config::{RequestChecksumCalculation, ResponseChecksumValidation};
 use bytes::Bytes;
 use futures::future::FusedFuture;
 use futures::stream::{unfold, FuturesUnordered};
@@ -272,6 +273,10 @@ where
                 HyperClientBuilder::new().build(TlsConnector::new(spec, jitter_fn.clone()));
             let credential_provider = credentials::default_provider().await;
             let mut config_builder = aws_config::defaults(BehaviorVersion::v2024_03_28())
+                // TODO(aaronmondal): Flip these to the default "WhenSupported".
+                //                    See: https://github.com/awslabs/aws-sdk-rust/releases/tag/release-2025-01-15
+                .request_checksum_calculation(RequestChecksumCalculation::WhenRequired)
+                .response_checksum_validation(ResponseChecksumValidation::WhenRequired)
                 .credentials_provider(credential_provider)
                 .app_name(AppName::new("nativelink").expect("valid app name"))
                 .timeout_config(