From 6eaf0d4e9d08231036b77ee67f5e516b94d6bd1b Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Fri, 6 Feb 2026 12:55:21 -0800
Subject: [PATCH 1/8] chore(.net): pin mpl to latest

---
 CHANGELOG.md                                              | 1 +
 DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index a16e5f976c..9cdd991614 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -16,6 +16,7 @@ This release is available in the following languages:
 - move go out of pull/push/daily into its own ([#2005](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2005)) ([1b961b5](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/1b961b585e1b2491424b078add248bf7f319f2a3))
 - **net:** Add plaintext to encrypted table migration example ([#1976](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1976)) ([814acbf](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/814acbf2ad5d4e0826617b6764b32b16574332ab))
 - remove test against latest mpl version ([#2008](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2008)) ([728158e](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/728158e1b0ef83ae41d475bca56419f05928015b))
+- **net**: pin to mpl version 1.11.2
 - **rust:** add plaintext to encrypted table migration examples ([#1977](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1977)) ([5286619](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/52866190608fcec6bff17adcc01bfd6f04367464))
 - **rust:** fips feature ([#1980](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/1980)) ([516fd3d](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/516fd3d1e63e2e96b3c8f6feb6f1e85411ab810d))
 - **rust:** improved blocking ([#2030](https://github.com/aws/aws-database-encryption-sdk-dynamodb/issues/2030)) ([162c86c](https://github.com/aws/aws-database-encryption-sdk-dynamodb/commit/162c86c9117bd3048949fa77ab878eee4b6197ff))
diff --git a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
index 335a2584b5..97639652e0 100644
--- a/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
+++ b/DynamoDbEncryption/runtimes/net/DynamoDbEncryption.csproj
@@ -61,7 +61,7 @@
     <!-- See https://learn.microsoft.com/en-us/nuget/concepts/package-versioning?tabs=semver20sort#version-ranges   -->
     <PackageReference Include="AWSSDK.Core" Version="[3.7.*, 4.0)" />
     <PackageReference Include="AWSSDK.DynamoDBv2" Version="[3.7.*, 4.0)" />
-    <ProjectReference Include="../../../submodules/MaterialProviders/AwsCryptographicMaterialProviders/runtimes/net/MPL.csproj"/>
+    <PackageReference Include="AWS.Cryptography.MaterialProviders" Version="[1.11.2]" />
     <!--
       System.Collections.Immutable can be removed once dafny.msbuild is updated with
       https://github.com/dafny-lang/dafny.msbuild/pull/10 and versioned

From 7b35dfbeec36935549ffca4340f8e5bd93d220de Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 10:32:00 -0800
Subject: [PATCH 2/8] try this out

---
 submodules/MaterialProviders | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/submodules/MaterialProviders b/submodules/MaterialProviders
index 734c1a31fc..7d126df3c5 160000
--- a/submodules/MaterialProviders
+++ b/submodules/MaterialProviders
@@ -1 +1 @@
-Subproject commit 734c1a31fc4521dc0653433565d5d6171e61d1ac
+Subproject commit 7d126df3c577ba2f8bebcf6ffe4d0474b3e32089

From ab84310f8d7143c9c7029b1ef9fd86c8bf2c00f5 Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 10:53:52 -0800
Subject: [PATCH 3/8] use 3.13 for not-grep

---
 .github/workflows/ci_static_analysis.yml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index b587fcd7e3..0d4bf390b6 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -12,5 +12,10 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
+      - name: Setup Python for running tests
+        uses: actions/setup-python@v6
+        with:
+          python-version: 3.13 
+          architecture: x64
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0

From a25a61694ebb06bae5124a5b51850b78529715ef Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 12:55:34 -0800
Subject: [PATCH 4/8] run setuptools

---
 .github/workflows/ci_static_analysis.yml | 11 +++++++----
 1 file changed, 7 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index 0d4bf390b6..0b3300f4e0 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -12,10 +12,13 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
-      - name: Setup Python for running tests
-        uses: actions/setup-python@v6
+      - name: Setup Python and install setuptools
+        uses: actions/setup-python@v4
         with:
-          python-version: 3.13 
-          architecture: x64
+          python-version: '3.11'
+      - name: Install setuptools dependency
+        run: |
+          python -m pip install --upgrade pip
+          python -m pip install setuptools
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0

From bf5051de9920a026d3d9be59f052ab4e2a0bb6d2 Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 13:00:23 -0800
Subject: [PATCH 5/8] m

---
 .github/workflows/ci_static_analysis.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index 0b3300f4e0..c2122ab469 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -12,13 +12,13 @@ jobs:
     runs-on: ubuntu-22.04
     steps:
       - uses: actions/checkout@v5
-      - name: Setup Python and install setuptools
+      - name: Setup Python
         uses: actions/setup-python@v4
         with:
           python-version: '3.11'
       - name: Install setuptools dependency
         run: |
           python -m pip install --upgrade pip
-          python -m pip install setuptools
+          python -m pip update setuptools
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0

From 6df87443e882b787c2dffbcdcad454a4f80e8a03 Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 13:03:42 -0800
Subject: [PATCH 6/8] m

---
 .github/workflows/ci_static_analysis.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index c2122ab469..20c2716acd 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -19,6 +19,6 @@ jobs:
       - name: Install setuptools dependency
         run: |
           python -m pip install --upgrade pip
-          python -m pip update setuptools
+          python -m pip install --upgrade setuptools
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0

From e563958b27c8245a01dc76ae29c9e9a4136134d8 Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 13:31:33 -0800
Subject: [PATCH 7/8] m

---
 .github/workflows/ci_static_analysis.yml | 6 ++----
 1 file changed, 2 insertions(+), 4 deletions(-)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index 20c2716acd..384ea8c9ef 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -10,12 +10,10 @@ on:
 jobs:
   not-grep:
     runs-on: ubuntu-22.04
+    container:
+      image: python:3.11
     steps:
       - uses: actions/checkout@v5
-      - name: Setup Python
-        uses: actions/setup-python@v4
-        with:
-          python-version: '3.11'
       - name: Install setuptools dependency
         run: |
           python -m pip install --upgrade pip

From 2fd88249f845cd7f35108e77c4743c1f84a4c549 Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Mon, 9 Feb 2026 13:46:01 -0800
Subject: [PATCH 8/8] m

---
 .github/workflows/ci_static_analysis.yml | 4 +---
 1 file changed, 1 insertion(+), 3 deletions(-)

diff --git a/.github/workflows/ci_static_analysis.yml b/.github/workflows/ci_static_analysis.yml
index 384ea8c9ef..ede7b4b9a9 100644
--- a/.github/workflows/ci_static_analysis.yml
+++ b/.github/workflows/ci_static_analysis.yml
@@ -10,13 +10,11 @@ on:
 jobs:
   not-grep:
     runs-on: ubuntu-22.04
-    container:
-      image: python:3.11
     steps:
       - uses: actions/checkout@v5
       - name: Install setuptools dependency
         run: |
           python -m pip install --upgrade pip
-          python -m pip install --upgrade setuptools
+          python -m pip install setuptools==81.0.0
       - name: not-grep
         uses: mattsb42-meta/not-grep@1.0.0