Bump AWSSDK.SecurityToken from 3.7.401.78 to 4.0.0 in /src in the awssdk group across 1 directory

[dependabot]

Bumps the awssdk group with 1 update in the /src directory: AWSSDK.SecurityToken.

Updates AWSSDK.SecurityToken from 3.7.401.78 to 4.0.0

Release notes

Sourced from AWSSDK.SecurityToken's releases.

4.0.0.0 (2025-04-28 18:14 UTC)

• BedrockRuntime (4.0.0.0)
  • This release adds native h2 support for the bedrock runtime API, the support is only limited to SDKs that support h2 requests natively.
• CertificateManager (4.0.0.0)
  • Add support for file-based HTTP domain control validation, available through Amazon CloudFront.
• CloudFront (4.0.0.0)
  • Add distribution tenant, connection group, and multi-tenant distribution APIs to the CloudFront SDK.
• DynamoDBv2 (4.0.0.0)
  • Doc only update for GSI descriptions.
  • Update paginators to handle scenarios where the token is a collection (that's null by default in V4)
  • Fixed trim warnings in Object Persistence high level library introduced by PR adding polymorphic support.
• Imagebuilder (4.0.0.0)
  • Add integration with SSM Parameter Store to Image Builder.
• Core 4.0.0.0
  • [Breaking Change] Allow source_profile to be used in conjunction with sso_session. If the profile specified via source_profile has sso_session, and the sso_session section is correctly configured, credentials will be retrieved from sso. The sso credentials will then be used to assume the role specified in the original profile. Previous behavior was that it assumed the role specified in source_profile, which does not follow the assume role profile chaining pattern.
  • Add observability feature IDs to User Agent header
  • fix: User-Agent header is growing when reusing the request object
  • Remove unused internal legacy .NET Framework 3.5 code.
  • Update documentation for the AWSConfigs.InitializeCollections property to specify the correct default value for V4 (and how to restore the V3 behavior)
  • Update SDK to respect Profile property set in the client config when resolving credentials.
  • All services packages updated to require new Core

4.0.0.0-preview.13 (2025-04-09 16:44 UTC)

• BedrockRuntime (4.0.0.0)
  • Add support for Amazon Nova Sonic: Human-like voice conversations for generative AI applications (note: Only available in .NET 8 and later)
• DynamoDBv2 (4.0.0.0)
  • Allow to set DynamoDBEntryConversion per table.
• Core 4.0.0.0
  • Enable error protocol tests and make headers case insensitive in test project
  • Update auth resolver async flow to add user agent details after resolving identity
  • All services packages updated to require new Core

4.0.0.0-preview.12 (2025-04-04 17:58 UTC)

• Kinesis (4.0.0.0)
  • Add the bi-directional streaming operation SubscribeToShard.
• LexRuntimeV2 (4.0.0.0)
  • Add the bi-directional streaming operation StartConversation.
• QBusiness (4.0.0.0)
  • Add the bi-directional streaming operation Chat.
• S3 (4.0.0.0)
  • Update remaining value types to be nullable.
• TranscribeStreaming (4.0.0.0)
  • Initial release of the TranscribeStreaming service package.
• Core 4.0.0.0
  • [Breaking Change] Move IEventStreamEvent to Amazon.Runtime.EventStreams namespace from Amazon.Runtime.EventStreams.Internal
  • [Breaking Change] Renamed IEventStream to IEventOutputStream and IEnumerableEventStream to IEnumerableEventOutputStream
  • Add core support for bi directional HTTP 2 service operations. Support is only available in .NET 8 and later.
  • Changed the default value of SSOAWSCredentialsOptions.SupportsGettingNewToken as false and improved error messaging if required SSO options are missing while generating new credentials.
  • Fix EndpointDiscoveryHandler not to fail when a request contains bearer token credentials.
  • Log a warning when ServiceUrl and RegionEndpoint are set at the same time. The SDK will log whichever of the two is used.

... (truncated)

Commits

• See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[danielmarbach]

no longer required

[dependabot]

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml