github aws/aws-advanced-jdbc-wrapper 4.0.0
AWS Advanced JDBC Wrapper - v4.0.0

latest release: 4.0.1
29 days ago

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.

[4.0.0] - 2026-05-06

🦀 Breaking Changes

Warning

This breaking change only impacts customers implementing their own custom plugins. Otherwise no changes are required. 4.0 removes aliases from HostSpec and related APIs (PR #1790).

Alias Removal

  • Removed aliases from HostSpec.
  • Removed PluginService.fillAliases(); use PluginService.identifyConnection() instead.
  • Changed PluginService.setAvailability() signature.
  • Added PluginService.setRoutedHostSpec() to record connection routing events and use it for the current connection info.

If you have custom plugins that use fillAliases() or rely on HostSpec aliases, please update them to use identifyConnection() and the new setRoutedHostSpec() method.

🪄 Added

  • Added KMS Encryption Plugin for encrypting/decrypting database credentials using AWS KMS (PR #1772, PR #1894).
  • Added support for Global Write Forwarding in secondary region (PR #1842).
  • Added verifyInitialConnectionRole property to verify the initial connection role matches the expected role (PR #1811).
  • Added support for Jackson 3 in Secrets Manager plugin and Okta plugin (PR #1803).
  • Added GPG keys verification to release workflow (PR #1816).
  • Added OpenSSF scorecard and SLSA provenance (PR #1804).

🐛 Fixed

  • Fixed AuroraStaleDnsHelper.getVerifiedConnection() returning null when the topology contained a writer with cluster DNS, causing connection pools like HikariCP to silently drain to zero (PR #1789, PR #1810).
  • Fixed ConfigurationProfile plugin list being missed in ServiceUtility.createMinimalServiceContainer method (Issue #1800, PR #1802).
  • Fixed EFM monitoring the cluster endpoint instead of the instance endpoint by using getHost instead of getUrl in identifyRdsType (PR #1823).
  • Fixed Blue/Green connect routing issue (PR #1872).
  • Fixed stale PreparedStatement caching after failover events, which caused permanent failure states in application servers like Open Liberty (PR #1889).

🦀 Changed

  • Improved connection tracker by using a double-linked list to store connection weak references, improving performance of removing connections from the tracked connection list when connections close (PR #1856).
  • Improved least connections strategy to randomly choose among pools with equal connection counts, evenly distributing traffic (PR #1847).
  • Refactored retry logic into a utility class (PR #1857).
  • Return null when no eligible hosts found in host strategy method (PR #1860).
  • Improved logging and cleaned up message file (PR #1881).
  • Security improvements: replaced mutable action tags with SHA, added SECURITY.md and CODEOWNERS.md, added SLSA provenance (PR #1804).
  • Documentation:
    • Added Open Liberty support documentation (PR #1891).
    • Improved Blue/Green permission guidance (PR #1845).
    • Noted reduced switchover downtime on recent Aurora PostgreSQL versions for Blue/Green plugin (PR #1883).
    • Updated universally compatible plugins documentation (PR #1890).
    • Fixed broken link (PR #1871).

Don't miss a new aws-advanced-jdbc-wrapper release

NewReleases is sending notifications on new releases.