aws/aws-msk-iam-auth v2.3.8 on GitHub

What's changed in 2.3.8

Fix signing-region resolution for cluster names containing an AWS region id: the region is now anchored to the endpoint DNS suffix instead of matched as an unanchored substring (#245)
Upgrade the AWS SDK BOM from 2.44.12 to 2.51.2
Update jackson-databind to 2.22.1, resolving CVE-2026-54512, CVE-2026-54513, CVE-2026-54514 and CVE-2026-54515
Switch the synchronous HTTP client from apache-client to apache5-client, replacing Apache HttpClient 4.x with 5.x and removing commons-logging from the dependency tree
Constrain httpclient5 to 5.6.4, resolving CVE-2026-64607 and CVE-2026-71290
Exclude the unused netty-nio-client asynchronous HTTP client, which this library never instantiates, reducing the uber jar from roughly 14.4 MB to 10.2 MB and removing all 36 CVEs reported against Netty 4.1.133.Final across its ten modules
Update slf4j-api to 1.7.36
Raise the kafka-clients compile floor from 2.8.1 to 3.9.2
Upgrade the OWASP dependency-check plugin from 7.1.0.1 to 13.0.0. Releases 9.0.0 and later use the NVD API in place of the retired NVD data feeds, which the previous version could no longer reach

<dependency>
    <groupId>software.amazon.msk</groupId>
    <artifactId>aws-msk-iam-auth</artifactId>
    <version>2.3.8</version>
</dependency>

The attached aws-msk-iam-auth-2.3.8-all.jar is the self-contained uber jar for use on the Kafka client classpath.