1.11.1 Java -- 2026-04-27

1.11.1 Java (2026-04-24)

Fixes -- All Languages

• Go: Improve Go performance (#1729) (cc30ecc)
• Updated pytz version range to include 2025 releases (#1644) (1aced27)

Maintenance -- All Languages

• 1.11.1 [skip ci] (#1650) (51db080)
• 5 instead of 25 interop decrypt processes (#1620) (d82696b)
• add managed policy to cfn template (#1758) (81cc558)
• add setup smithy dafny dependencies to net releases (#1791) (734c1a3)
• Add UserAgent string to KMS client (#1716) (09b2cda)
• allow local testing (#1790) (f2a04e7)
• allow local testing for python (#1598) (cbfa209)
• bump CI to macos-14 (#1734) (1413b88)
• bump credentials to 2 hours, for python (#1621) (69991da)
• bump smithy-dafny (#1657) (e2fb76c)
• bump smithy-dafny (#1706) (dc1678a)
• cfn: add trusted policy for optools mpl-python roles (#1602) (436d939)
• CI: ci action to upload performance logs to cloudwatch (#1754) (c5b3ac6)
• CI: fix daily CI and add slack notification to it (#1647) (c546646)
• ci: Install Go/goimports as codegen dependencies (#1713) (7a6fd63)
• CI: reduce flakiness of install_smithy_dafny_codegen_dependencies (#1824) (cd9dec3)
• CI: send slack message on new GHI (#1632) (e80b7ae)
• CI: test DB-ESDK java examples from MPL (#1692) (4e06e37)
• CI: Test Rust on Dafny prerelease in nightly build (#1623) (92070bc)
• CI: update slack notification to include link of GHA run (#1659) (c6e2c20)
• CI: update to not trigger workflow on PR comments (#1640) (c62e8cf)
• clean up submodule URL to remove embedded username (#1757) (df1ec90)
• dafny: add fuzz testing to MPL (#1622) (14fad38)
• dafny: add new SearchAndReplaceWhole and friends (#1680) (74e98c1)
• dafny: add Rust and Go to supported languages (#1492) (87ab402)
• dafny: add search and replace methods (#1649) (c86be0d)
• dafny: append our user agent in KMS client (#1564) (03d03ac)
• dafny: bump setup_dafny (#1712) (2c57523)
• dafny: optimize mutation map for O(1) performance in Go (#1687) (68cd7cb)
• dafny: remove negative test for codebuild runner (#1603) (8b45e40)
• deps: bump actions/download-artifact from 4 to 6 in /.github/workflows (#1747) (2a767e7)
• deps: bump cryptography upperbound to <47 due to CVE-2026-26007 (#1800) (aaf70a5)
• deps: bump slackapi/slack-github-action from 2.1.0 to 2.1.1 in /.github/workflows (#1638) (40b643f)
• deps: bump slackapi/slack-github-action from 2.1.1 to 3.0.1 in /.github/workflows (#1818) (eb856f5)
• deps: update deps across the repo ([#1773](https://github.com/aws/a...

2.0.0-net -- 2026-03-18

This release is available only in the following languages:

DotNet (as v2.0.0)

⚠ BREAKING CHANGES

.net: Add support for AWS SDK V4 and remove support for AWS SDK V3.

feat

.net: - support aws sdk .net v4 (https://github.com/aws/aws-cryptographic-material-providers-library/issues/1807) ([3e685ad](https://github.com/aws/aws-cryptographic-material-providers-library/commit/3e685adba6081b54b3c06becf5fa95aa94311974))

1.11.2 -- 2026-02-23

This release is available in the following languages:

• DotNet
• Python

NOTE

This library is NOT impacted by CVE-2026-26007. This library does not use SECT curves.

Fixes -- DotNet

• dotnet: build from main (#1781) (b2d6075)

Maintenance -- All Languages

• dafny: add fuzz testing to MPL (#1622) (14fad38)
• dafny: add new SearchAndReplaceWhole and friends (#1680) (74e98c1)
• dafny: optimize mutation map for O(1) performance in Go (#1687) (68cd7cb)

Maintenance -- Python

• python: add user agent suffix to kms requests (#1686) (b69aaf2)
• python: exclude generated tests from project distribution (#1627) (505eee0)
• python: tests for OpaqueWithText (#1656) (25e1219)
• python: bump cryptography upperbound to <47 due to CVE-2026-26007 (#1800)

Maintenance -- Go

• go: put back content() in mutable maps extern (#1694) (bb0ec0c)
• go: Release dynamodb Go module 0.2.1 (#1671) (c82e136)
• go: Release dynamodb Go module 0.2.2 (#1698) (76846e1)
• go: Release kms Go module 0.2.1 (#1667) (dd8cdf1)
• go: Release kms Go module 0.2.2 (#1697) (79c0531)
• go: Release kms Go module 0.3.0 (#1746) (1e438f3)
• go: Release mpl Go module 0.2.1 (#1672) (9bc43c0)
• go: Release mpl Go module 0.2.2 (#1704) (5f2aa33)
• go: Release mpl Go module 0.3.0 (#1751) (1ac31b6)
• go: Release primitives Go module 0.2.1 (#1669) (dca265f)
• go: Release primitives Go module 0.2.2 (#1699) (d4c3a20)
• go: Release primitives Go module 0.3.0 (#1748) (541e04a)
• go: Release smithy-dafny-standard-library Go module 0.2.1 (#1666) (fa3f98b)
• go: Release smithy-dafny-standard-library Go module 0.2.2 (#1696) (4312195)
• go: remove create pull request step in go release workflow (#1681) (7eafe88)
• go: test with go 1.23 (#1737) (987ac0f)

Maintenance -- Rust

• rust: bump dafny version for rust to 4.10 (#1725) (f41b3c4)
• rust: clean up kms module (#1752) (6878377)
• rust: fix clippy warning. Bump test dependencies (#1715) (7b8d6ac)
• rust: more compatible blocking (#1780) (3ea1161)
• rust: note unused parameter (#1693) (49759c9)
• rust: prepare for initial Rust crate publication (#1755) (1e28a61)
• rust: provide fips feature flag (#1703) (f6bdd23)
• rust: release 0.2.0 (#1782) (03c999c)
• rust: remove warnings (#1724) (453359a)

Miscellaneous

• Add UserAgent string to KMS client (#1716) (09b2cda)
• deps: update deps across the repo (#1773) (edcc64c)
• update check-files (#1785) (14af920)
• update kms externs correctly (#1717) ([e11ba53](e11ba531f3f12610ded9df7a...

1.11.1 -- 2025-07-30

This release is available in the following languages:

• Python

Maintenance -- All Languages

• dafny: add Rust and Go to supported languages (#1492) (87ab402)
• dafny: append our user agent in KMS client (#1564) (03d03ac)
• dafny: remove negative test for codebuild runner (#1603) (8b45e40)

Maintenance -- Python

• python: Updated pytz version range to include 2025 releases (#1603) (1aced27)

Maintenance -- Go

• go: automate changelog for Go release (#1607) (f9eb8e0)
• go: update go test matrix and clean up setup (#1625) (6baa15c)

Maintenance -- Rust

• rust: update for new version of clippy (#1606) (ec013f6)

Miscellaneous

• 5 instead of 25 interop decrypt processes (#1620) (d82696b)
• allow local testing for python (#1598) (cbfa209)
• bump credentials to 2 hours, for python (#1621) (69991da)
• cfn: add trusted policy for optools mpl-python roles (#1602) (436d939)
• CI: fix daily CI and add slack notification to it (#1647) (c546646)
• CI: send slack message on new GHI (#1632) (e80b7ae)
• CI: Test Rust on Dafny prerelease in nightly build (#1623) (92070bc)
• CI: update to not trigger workflow on PR comments (#1640) (c62e8cf)
• deps: bump slackapi/slack-github-action from 2.1.0 to 2.1.1 in /.github/workflows (#1638) (40b643f)
• Go: Add Go release script and workflow to run it (#1562) (1c563bd)

1.7.6 -- 2025-07-28

1.7.6 (2025-07-23)

This release is available in the following languages:

• .NET

Bug Fixes

dotnet: resolve AWS SDK Dependency to less than v4 (#1629) (60e46cd)

1.11.0 -- 2025-06-17

1.11.0 (2025-06-17)

This release is available in the following languages:

• Java
• Python

Fixes -- All Languages

• dafny: bump Dafny libraries for JSON fix (#1517) (d8679e5)

Maintenance -- All Languages

• dafny: BK fix to extract encryption context for branch key materials (#1523) (95856ac)
• dafny: don't recalculate RSA key on every decrypt (#1448) (f318912)
• dafny: Make HasSubString generic (#1549) (6a1017f)
• dafny: more using uint64 instead of nat (#1490) (571e3c5)
• dafny: store privateKey in RawRSAKeyring because some Java code needs it (#1450) (1c29322)
• dafny: support for memory size constraints (#1481) (8d2c2b5)
• dafny: update UInt and MemoryMath as needed for DB-ESDK (#1488) (49e596b)

Maintenance -- Java

• java: migrate to Nexus Central for Maven publishing (#1553) (7d2fcd3)

Maintenance -- Go

• go: implement missing MutableMap::content() (#1519) (f033b91)
• go: remove print statements from testLotsOfAdding (#1468) (594383c)

Maintenance -- Rust

• rust: remove print statements from testLotsOfAdding (#1469) (9cf1dce)
• rust: update smithy-dafny, use small-int feature (#1437) (515995e)

Miscellaneous

• add MemoryMath to Index.dfy (#1484) (3196e7d)
• add MPL CI to principal of KmsKeyForRobbieOnly (#1528) (527f69d)
• bump smithy-dafny to latest (#1375) (d3e7916)
• CFN for Restricted EC (#1522) (391fa4c)
• CFN for two new roles to prove prefixing/defixing behavior (#1538) (e810e7d)
• CFN KMS GDK for HV-2 (#1464) (cfbaa58)
• CI: Allow local testing (#1371) (fe18948)
• CI: Fix nightly build (mostly) (#1540) (362ffc1)
• CI: Fix nightly build workflow (#1541) (48d69eb)
• Create KMS keys for HV1 & HV2 branch keys (#1419) (2f0696d)
• Create Static Key Store table for storing static branch keys (#1456) (96b8058)
• dafny: add tests for multiple utf8 ec entries (#1424) (131ae58)
• dafny: restore static test branch key id (#1404) (377de79)
• deps: Extend supported pyca version range (#1556) (89f47aa)
• improve performance (#1286) (d808fd8)
• install polymorph dependencies in github workflows (#1514) (eb68525)
• Python: bump pyca to 44.0 (#1555) (4f4cd87)
• resolve rust warning (#1394) (e2fe1a4)
• specify language in commits (#1382) (ccd56cf)

1.10.1 -- 2025-03-27

1.10.1 (2025-03-27)

This release is available in the following languages:

• Java

Maintenance -- All Languages

• dafny: update ddb model (#1357) (8f68a3e)

Maintenance -- Java

• java: harden LocalCMCTests.java (#1365) (c0deb24)

Miscellaneous

• add proper sleep handling in StormTracker for Python and .NET (#1369) (77fd007)
• CI: Allow local testing (#1358) (5ecb410)

1.10.0 -- 2025-03-25

This release is available in the following languages:

• Python

Miscellaneous -- Python

• deps: extend supported version of pytz library (#1333) (6f6876a)

Miscellaneous

• clarify InFlightTTLExceeded exception (#1169) (d1c42a6)
• fix typos in documentation (#1326) (7f59a7e)
• let fileio deal in uint8 instead of bv8 (#1347) (80e28f3)

1.9.0 -- 2025-02-04

This release is available in the following languages:

• Java

Bug Fixes

• CI (d9e2a1e)
• DafnyLibraries.FileIO extern (b150c48)
• ECDH ValidatePublicKey err msg (34a48fc)
• for test vectors, use SetToSequenceSorted (#1034) (21ad206)
• GHW: check-files apply to PR, not to diff b/w HEAD and branch (#1075) (1f53a92)
• improve golang externs (#1133) (b6ee16e)
• Java: Improve Collection of Errors string (#1056) (9e195a1)
• line breaks (21536c7)
• PR comments (798214b)
• PR comments (a21c0b3)
• PR comments (7dd95bc)
• PR comments (eed0d87)
• PR comments (435515e)
• re-enable aes_gcm_192 (#1143) (23650a9)
• region (5930ae4)
• region (e3454b5)
• remove @sensitive from smithy models (#1123) (c939f3a)
• repo rename (#1218) (c2f003c)
• revert pyproject.toml drop (b5dbb5c)
• rust code used for testing must be allowed dead code (#1148) (5997919)
• SetToSequence should be a method, not a function (#1035) (1169bc8)
• smithy-dafny (#1136) (6005777)

Features

• Adds CI (511ed35)
• check in polymorph go generated code (#1137) (d0fefbf)
• Check-in polymorph generated code (bfc7cb9)
• ddb Go externs (1e3737b)
• ddb: Go release v0.0.1 (#1201) (5293bfd)
• ddb: Go release v0.0.3 (#1210) (983f553)
• Go: Go module rename (#1196) (b0876ac)
• kms externs for Go (2d1f6d1)
• kms: Go release v0.0.1 (#1199) (9c80544)
• mpl externs (#1105) (29bc52e)
• mpl: Go release v0.0.1 (#1211) (4508ab8)
• Primitives CI (ce6e942)
• Primitives for Go (8066826)
• primitives: Go release v0.0.1 (#1203) (6bf0bbe)
• StandardLibrary for Go (587b57e)
• StandardLibrary for Go (94b4fd0)
• StandardLibrary for Go (6ce1ce3)
• StdLib: Go v0.0.1 release (#1195) (95e54bf)

1.7.5 -- 2025-01-30

This release is available in the following languages:

• .NET

Fixes

• .NET: CollectionOfErrors; list as string (#1247) (6126ddb)
• H-Keyring: if getCache returns Error not EntryDoesNotExist, raise error (#846) (3413fcb)
• H-Keyring: if putCache throws EntryAlreadyExists, swallow (#856) (d01a182)