Changelog
All notable changes to this project will be documented in this file.
The format is based on Keep a Changelog, and this project adheres to Semantic Versioning.
[4.0.0] - 2026-05-06
🦀 Breaking Changes
Warning
This breaking change only impacts customers implementing their own custom plugins. Otherwise no changes are required. 4.0 removes aliases from HostSpec and related APIs (PR #1790).
Alias Removal
- Removed aliases from
HostSpec. - Removed
PluginService.fillAliases(); usePluginService.identifyConnection()instead. - Changed
PluginService.setAvailability()signature. - Added
PluginService.setRoutedHostSpec()to record connection routing events and use it for the current connection info.
If you have custom plugins that use fillAliases() or rely on HostSpec aliases, please update them to use identifyConnection() and the new setRoutedHostSpec() method.
🪄 Added
- Added KMS Encryption Plugin for encrypting/decrypting database credentials using AWS KMS (PR #1772, PR #1894).
- Added support for Global Write Forwarding in secondary region (PR #1842).
- Added
verifyInitialConnectionRoleproperty to verify the initial connection role matches the expected role (PR #1811). - Added support for Jackson 3 in Secrets Manager plugin and Okta plugin (PR #1803).
- Added GPG keys verification to release workflow (PR #1816).
- Added OpenSSF scorecard and SLSA provenance (PR #1804).
🐛 Fixed
- Fixed
AuroraStaleDnsHelper.getVerifiedConnection()returningnullwhen the topology contained a writer with cluster DNS, causing connection pools like HikariCP to silently drain to zero (PR #1789, PR #1810). - Fixed
ConfigurationProfileplugin list being missed inServiceUtility.createMinimalServiceContainermethod (Issue #1800, PR #1802). - Fixed EFM monitoring the cluster endpoint instead of the instance endpoint by using
getHostinstead ofgetUrlinidentifyRdsType(PR #1823). - Fixed Blue/Green connect routing issue (PR #1872).
- Fixed stale
PreparedStatementcaching after failover events, which caused permanent failure states in application servers like Open Liberty (PR #1889).
🦀 Changed
- Improved connection tracker by using a double-linked list to store connection weak references, improving performance of removing connections from the tracked connection list when connections close (PR #1856).
- Improved least connections strategy to randomly choose among pools with equal connection counts, evenly distributing traffic (PR #1847).
- Refactored retry logic into a utility class (PR #1857).
- Return
nullwhen no eligible hosts found in host strategy method (PR #1860). - Improved logging and cleaned up message file (PR #1881).
- Security improvements: replaced mutable action tags with SHA, added
SECURITY.mdandCODEOWNERS.md, added SLSA provenance (PR #1804). - Documentation:
- Added Open Liberty support documentation (PR #1891).
- Improved Blue/Green permission guidance (PR #1845).
- Noted reduced switchover downtime on recent Aurora PostgreSQL versions for Blue/Green plugin (PR #1883).
- Updated universally compatible plugins documentation (PR #1890).
- Fixed broken link (PR #1871).