fix(deps): update dependency software.amazon.cryptography:aws-cryptographic-material-providers to v1.7.0

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
software.amazon.cryptography:aws-cryptographic-material-providers	1.0.2 -> 1.7.0

---

Release Notes

aws/aws-cryptographic-material-providers-library (software.amazon.cryptography:aws-cryptographic-material-providers)

v1.7.0

Features

• HierarchyKeyring; CMC: Shared cache across Hierarchy Keyrings (#​747) (d4709e9)

v1.6.0

Bug Fixes

• add ECDH error message for Rust (#​574) (473a34a)
• DDB-Model: DDB Supports 100 actions per Transaction (#​692) (8a67843)
• GetCurrentTimeStamp returns ISO8601 format (#​575) (c07a51f)
• maintain order in test vectors for languages with parallel tests (#​641) (8c8a38f)
• Remove 4.4 DDB and KMS patches, abstract test to work on later Dafny versions (#​611) (d51d648)
• Remove uses of :| (#​618) (f12fe5b)
• test vector help text (#​657) (0fedaf1)
• post-release: Change back to 1.5.1-SNAPSHOT (09cd9a4)

Features

• bump dafny verification and code gen to dafny 4.8.0 (#​520) (e16539e)

1.5.1 (2024-07-08)

Fixes

• SDK-Java: Generic SDK Error to Opaque & Back (#​466) (f832ad1)

v1.5.1

Fixes

• SDK-Java: Generic SDK Error to Opaque & Back (#​466) (f832ad1)

v1.5.0

Features

• MPL: Add Raw ECDH and AWS KMS ECDH Keyrings (#​419) (0946a7e)

v1.4.0

Features

• Keystore: Introduce additional KMSConfiguration options (#​316) (f3a0a52)

The Hierarchical Keyring's Keystore now supports four (4) KMSConfigurations:

• kmsKeyArn
• kmsMRKeyArn
• discovery
• mrDiscovery

See our JavaDocs for details
on how these options effect the relationship between
a Keystore and KMS.

Maintenance

• .NET : Bump dependency BouncyCastle.Cryptography from 2.2.1 to 2.3.1. (#​329)
• .NET : Bump dependency AWSSDK.Core from 3.7.300.2 to 3.7.304.2. (#​329)
• Java : Move InternalResult into StandardLibrary(Internal) (#​325)

v1.3.0

Bug Fixes

• dafny: Local Service Constructors MUST return concrete (64f72c1)
• Improvements to the Java Release process (#​162) (d92c06a)
• Increase try-block scope when calling MPL components (#​267) (7661bf4)

Features

• Multi-Region Key Logic in the Keystore (#​285) (d924395)
• .NET : Enforce User input Constraints at Type Conversion (#​281) (04102d7)
• Update error message to include expected values when no Encrypted Data Keys found to match (#​275) (da95f9a)

1.2.0 (2024-01-08)

Features

* add command line parser (#​131)

Bug Fixes

* resolve awssdk:core dependency in TestVectors build.gradle.kts (#​177)
* add more tests to ComputeSetToOrderedSequence (#​111)
* Empty string defers to SDK default region (#​127)
* update mpl .csproj to use project references (#​134)
* newest polymorph for newest shims. Catch all exceptions. DDB only (#​135)
* update README for repo rename update (#​147)
* rerun latest polymorph. (#​128)
* typo lead to two verification, no format (#​130)
* Improve compatibility with Dafny 4.4 (#​129)

Maintenance

* A variety of fixes to the libraries CI and testing

1.0.2 (2023-10-18)

Bug Fixes

* CmpError must return custom error message (#​118) (86abacc)
* Deafult entryPruningTailSize (#​93) (0344e9f)
* Fix brittle concurrent test (#​105) (#​60) (c043162)
* fix typo in encryption materials validation (cd6b0aa), closes #​84
* fix typo in encryption materials validation (89a234c)
* Forward the underlying error (#​90) (bc21551)

1.0.1 2023-07-26

Fix

• Fixes a runtime check in VersionKey Key Store API that no longer checks for the CipherText length
  on the output of a KMS ReEncrypt API call.

1.0.0 2023-07-21

Features

• Introduces Thread Safe Cryptographic Materials Caches (CMCs):
  • Storm Tracking Cache
    Safe for use in a multi threaded environment,
    tries to prevent redundant or overly parallel backend calls.
    See Spec changes for details.
  • Multi Threaded Cache
    Safe for use in a multi threaded environment,
    but no extra functionality

BREAKING CHANGES

• CMCs:
  • Original Cryptographic Materials Cache has been renamed to Single Threaded Cache
  • CreateCryptographicMaterialsCacheInput now ONLY accepts CacheType,
    which determines which, if any, of the three implemented CMCs will be returned.
  • The DefaultCache is StormTrackingCache
• CreateAwsKmsHierarchicalKeyringInput:
  • no longer has a maxCacheSize field
  • now has an optional cache field for a CacheType
• Hierarchical Keyring's Key Store:
  • The Hierarchical Keyring's Key Store's Data Structure has changed.
    As such, entries persisted in the Key Store with prior versions of this library are NOT compatibale.
    Instead, we recommend Creating a new DynamoDB Table for this version of the Key Store.
  • The Key Store's CreateKeyInput now takes:
    • An Optional String branchKeyIdentifier
    • An Optional EncryptionContext encryptionContext
      • This encryptionContext will be added to the Encryption Context sent to KMS prefixed with aws-crypto-ec:
  • Creating a Key now also calls KMS:ReEncrypt
  • CreateKeyStore no longer creates a GSI
  • The Encryption Context used with KMS' GenerateDataKeyWithoutPlaintext no longer include's the discarded GSI's status.
  • More details about the Key Store's changes are avaible in our Specification:
    • 2023-07-12 Update Key Store
    • KeyStore Specification

Maintenance

• A variety of fixes to the libraries CI and testing

Fix

• Fixes Required Encryption Context CMM and UpdateUsageMetadata names in smithy model

1.0.0-preview-3 2023-06-22

Fix

• Fixes PutCacheEntry
  • PutCacheEntry will now update an entry.
    This simplifies using the cache in concurrent situations.
    Rather than having the caller implement some retry logic
    the cache will now update the entry.
• Fixes pom.xml to include runtime version of BouncyCastle and removes bundling of BC in the jar.

1.0.0-preview-2 2023-06-19

Fix

• Fixes build file to correctly generate pom file with correct dependencies during release.

1.0.0-preview-1 2023-06-07

Features

• Initial release of the AWS Cryptographic Material Providers Library.
  This release is considered a developer preview
  and is not intended for production use cases.

v1.2.0

Features

* add command line parser (#​131)

Bug Fixes

* resolve awssdk:core dependency in TestVectors build.gradle.kts (#​177)
* add more tests to ComputeSetToOrderedSequence (#​111)
* Empty string defers to SDK default region (#​127)
* update mpl .csproj to use project references (#​134)
* newest polymorph for newest shims. Catch all exceptions. DDB only (#​135)
* update README for repo rename update (#​147)
* rerun latest polymorph. (#​128)
* typo lead to two verification, no format (#​130)
* Improve compatibility with Dafny 4.4 (#​129)

Maintenance

* A variety of fixes to the libraries CI and testing

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 77.55%. Comparing base (22c994b) to head (892e7fe).
Report is 8 commits behind head on main.

Additional details and impacted files

@@            Coverage Diff            @@
##               main     #867   +/-   ##
=========================================
  Coverage     77.55%   77.55%           
  Complexity      966      966           
=========================================
  Files            97       97           
  Lines          4531     4531           
  Branches        422      422           
=========================================
  Hits           3514     3514           
  Misses          835      835           
  Partials        182      182           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[opensearch-trigger-bot]

The backport to 2.x failed:

The process '/usr/bin/git' failed with exit code 128

To backport manually, run these commands in your terminal:

# Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/flow-framework/backport-2.x 2.x
# Navigate to the new working tree
pushd ../.worktrees/flow-framework/backport-2.x
# Create a new branch
git switch --create backport/backport-867-to-2.x
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 973999bf3b055df41029663083ef901f778ac363
# Push it to GitHub
git push --set-upstream origin backport/backport-867-to-2.x
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/flow-framework/backport-2.x

Then, create a pull request where the base branch is 2.x and the compare/head branch is backport/backport-867-to-2.x.