Skip to content

Add Microsoft's speech-sdk-spm to egress allowlist - #336

Open
tomotakatakahashi wants to merge 1 commit into
dependabot:mainfrom
tomotakatakahashi:allowlist-microsoft-speech-sdk
Open

tomotakatakahashi wants to merge 1 commit into
dependabot:mainfrom
tomotakatakahashi:allowlist-microsoft-speech-sdk

Conversation

@tomotakatakahashi

@tomotakatakahashi tomotakatakahashi commented Oct 23, 2026 •

Copy link
Copy Markdown

What are you trying to accomplish?

My product depends on Microsoft's speech-sdk-spm.

        .package(url: "https://github.com/microsoft/speech-sdk-spm", from: "1.53.0"),

When I run dependabot for my product, I get 403 errors:

error: failed downloading 'https://csspeechstorage.blob.core.windows.net/drop/1.53.0/MicrosoftCognitiveServicesSpeech-EmbeddedXCFramework-1.53.0.zip' which is required by binary target 'MicrosoftCognitiveServicesSpeechEmbedded-iOS': badResponseStatusCode(403)
error: failed downloading 'https://csspeechstorage.blob.core.windows.net/drop/1.53.0/MicrosoftCognitiveServicesSpeech-XCFramework-1.53.0.zip' which is required by binary target 'MicrosoftCognitiveServicesSpeech-iOS': badResponseStatusCode(403)
error: failed downloading 'https://csspeechstorage.blob.core.windows.net/drop/1.53.0/MicrosoftCognitiveServicesSpeech-MacOSXCFramework-1.53.0.zip' which is required by binary target 'MicrosoftCognitiveServicesSpeech-macOS': badResponseStatusCode(403)
error: fatalError

This PR should fix the 403 errors.

I couldn't find any related existing GitHub issues.

Anything you want to highlight for special attention from reviewers?

  • I used an AI agent to create this PR, so I'm not very confident about this PR.
  • I'm not 100% sure if Microsoft owns the host csspeechstorage.blob.core.windows.net. I suppose so because the speech-sdk-spm repository refers to it.
  • The Smoke CI jobs are failing, but it seems unrelated to this PR's changes.

How will you know you've accomplished your goal?

I will know it if the dependabot job succeeds without the 403 errors.

Checklist

  • I have run the complete test suite to ensure all tests and linters pass.
    • DOCKER_DEFAULT_PLATFORM=linux/amd64 ./script/test echo $? -> 0
  • I have thoroughly tested my code changes to ensure they work as expected, including adding additional tests for new functionality.
    • I added URLs to the unit tests and ran ./script/test, but I haven't tested this end-to-end manually (e.g., with curl through the proxy).
  • I have written clear and descriptive commit messages.
  • I have provided a detailed description of the changes in the pull request, including the problem it addresses, how it fixes the problem, and any relevant details about the implementation.
  • I have ensured that the code is well-documented and easy to understand.

@tomotakatakahashi
tomotakatakahashi force-pushed the allowlist-microsoft-speech-sdk branch from 9d42258 to 381cc4b Compare October 23, 2026 23:45
@tomotakatakahashi tomotakatakahashi changed the title Add Microsoft's Swift speech sdk to allowlist Add Microsoft's speech-sdk-spm to egress allowlist Oct 23, 2026
@tomotakatakahashi
tomotakatakahashi force-pushed the allowlist-microsoft-speech-sdk branch from 381cc4b to 3645242 Compare October 24, 2026 04:05
@tomotakatakahashi
tomotakatakahashi force-pushed the allowlist-microsoft-speech-sdk branch from 3645242 to cf2cc63 Compare October 24, 2026 23:08
@tomotakatakahashi
tomotakatakahashi marked this pull request as ready for review October 24, 2026 23:29
@tomotakatakahashi
tomotakatakahashi requested a review from a team as a code owner October 24, 2026 23:29
@github-actions github-actions Bot added the allowlist Changes the default egress allowlist label Oct 31, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

allowlist Changes the default egress allowlist

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant