Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 10, 2025

Updated Akka.Cluster.Sharding from 1.5.49 to 1.5.53.

Release notes

Sourced from Akka.Cluster.Sharding's releases.

1.5.53

1.5.53 October 9th, 2025

Akka.NET v1.5.53 is a security patch containing important fixes for TLS/SSL hostname validation and improved error diagnostics for certificate authentication issues.

Security Fixes:

  • Fix TLS hostname validation bug and add configurable validation - Fixes a critical bug where TLS clients validated against their own certificate DNS name instead of the remote server address, particularly affecting mutual TLS scenarios. This release also adds a new validate-certificate-hostname configuration option to akka.remote.dot-netty.tcp (defaults to false for backward compatibility) and introduces type-safe validation APIs through the new TlsValidationCallbacks factory class.

Improvements:

1 contributor since release 1.5.52

COMMITS LOC+ LOC- AUTHOR
2 1060 77 Aaron Stannard

To see the full set of changes in Akka.NET v1.5.53, click here

1.5.52 October 6th, 2025

SECURITY PATCH

Akka.NET v1.5.52 is a security patch containing crucial fixes for enforcing certificate-based authentication using mTLS enforcement. Please see https://getakka.net/articles/remoting/security.html for details on how this works.

Other fixes:

1 contributors since release 1.5.51

COMMITS LOC+ LOC- AUTHOR
3 1193 149 Aaron Stannard

To see the full set of changes in Akka.NET v1.5.52, click here

1.5.51 October 1st, 2025

Akka.NET v1.5.51 is a minor patch containing a remoting bug fix and add required codes to support persistence health check.

... (truncated)

1.5.52

1.5.52 October 6th, 2025

SECURITY PATCH

Akka.NET v1.5.52 is a security patch containing crucial fixes for enforcing certificate-based authentication using mTLS enforcement. Please see https://getakka.net/articles/remoting/security.html for details on how this works.

Other fixes:

1 contributors since release 1.5.51

COMMITS LOC+ LOC- AUTHOR
3 1193 149 Aaron Stannard

To see the full set of changes in Akka.NET v1.5.52, click here

Changes:

  • b4fbd5ffd00688e250126e0e004b95e2678532b0 added v1.5.52 release notes (#​7883)
  • 5f8e39da189c1044aa0d9a5422c1421ea47603d0 ShardedDaemonSets: randomize starting worker index (#​7857) (#​7874)
  • 1a5a82bc5ce463f5a94cba7c943b28dd2b0a1fd9 feat(remote): implement mutual TLS authentication support (#​7851) (#​7855) [ #​538 ]
  • 5994efc01eec66ec53b6bcd9a4fa2efb16b19043 Fix: Validate SSL certificate private key access at server startup (#​7847) (#​7848) [ #​538 ]

This list of changes was auto generated.

1.5.51

1.5.51 October 1st, 2025

Akka.NET v1.5.51 is a minor patch containing a remoting bug fix and add required codes to support persistence health check.

2 contributors since release 1.5.50

COMMITS LOC+ LOC- AUTHOR
1 609 31 Aaron Stannard
1 139 5 Gregorius Soedharmo

To see the full set of changes in Akka.NET v1.5.51, click here

Changes:

  • 68dbe754043544ffe1242fb36826224e46b658a2 Update RELEASE_NOTES.md for 1.5.51 release (#​7844)
  • ba5e5f89774102cb0f321e5a75138057e5a1fd44 Akka.Persistence HealthChecks (#​7842)
  • 1ec6f9edfcb92da1c65f2ba67f2234c1e6274a8d Fix TLS handshake error handling (#​7839)

This list of changes was auto generated.

1.5.50

1.5.50 September 22nd, 2025

Akka.NET v1.5.50 is a minor patch containing a bug fix.

1 contributor since release 1.5.49

COMMITS LOC+ LOC- AUTHOR
1 187 1 Gregorius Soedharmo

To see the full set of changes in Akka.NET v1.5.50, click here

Changes:

  • 94124ba01b0c635b3908d2cdb789c3d0ac7e5ca9 Update RELEASE_NOTES.md for 1.5.50 release (#​7837)
  • f595a8442cf6852752dced6e74d45826264a4bb3 Propagate error from DotNetty TLS handshake failure to Akka.Remote (#​7824)

This list of changes was auto generated.

Commits viewable in compare view.

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---
updated-dependencies:
- dependency-name: Akka.Cluster.Sharding
  dependency-version: 1.5.53
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added .NET Pull requests that update .net code dependencies Pull requests that update a dependency file labels Oct 10, 2025
@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file .NET Pull requests that update .net code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant