1.1.6

• Update dependencies to address the following security vulnerability
  • CVE-2022-41915
• Add support for explicit access key and secret in sasl.jaas.config

Release 1.1.5

• Update dependencies to address the following security vulnerabilities.
  • CVE-2022-42003
  • CVE-2022-42004
• Add support for multi-classloader environments, such as Apache Flink (#36)

1.1.4

Release 1.1.4

• Update dependencies to address the following CVEs.
  • CVE-2021-37136
  • CVE-2021-37137
  • CVE-2022-24823
  • CVE-2021-43797
  • CVE-2021-38153
  • CVE-2020-36518
• Specifically, build and test against Kafka 2.8.

1.1.3

Release 1.1.3

• Add retries if loading credential fails with client side errors.
• If AWS STS is not accessible for identifying the credential when awsDebugCreds=true, do not fail the connection.
• Update Troubleshooting section in README.

1.1.2

• Update log4j version in test dependencies to address CVE-2021-44832
• Allow users to debug the credentials being used

1.1.1

• Enable support for STS regional endpoints when configured to assume a role (thanks dvuple@)
• Additional logging to log the classes and classloaders for IAMClientCallbackHandler and AWSCredentialsCallback classes.
• README updates to start a section on troubleshooting.
• In the uber jar do not relocate the awsk sdk v2 modules.
• In the uber jar, stop shadowing slf4j-api.

1.1.0

1.1.0 release

1.0.0

1.0.0 release