4.0.0-java -- 2026-04-29

⚠ BREAKING CHANGES

• java: The embedded legacy DynamoDB Encryption Client (DDBEC) now uses AWS SDK for Java 2.x and no longer supports AWS SDK for Java 1.x (#2048).

  Who is affected: Java customers migrating from legacy DDBEC who use the com.amazonaws.services.dynamodbv2.datamodeling namespace. If your code calls DDBEC APIs from com.amazonaws.services.dynamodbv2.datamodeling, you must migrate to the equivalent APIs under com.amazonaws.services.dynamodbv2.datamodeling.sdkv2.

  Who is not affected: Customers not using the com.amazonaws.services.dynamodbv2.datamodeling namespace. The rest of DB-ESDK is unchanged.

Features -- Java

• java: add DDBEC with SDK v2 and remove DDBEC with SDK V1 (#2048) (035dbe3)

Fixes -- All Languages

• use UUIDs and cleanup in beacon styles example to avoid stale item collisions (#2125) (773c1ff)

Fixes -- Java

• java: drop hkdf offset method (#2011) (b8f29f9)

Maintenance -- All Languages

• dafny: bump MPL and update mutable map (#1974) (e9ea870)
• dafny: bump smithy dafny (#1971) (85309a0)

Maintenance -- Java

• java: Allow local testing (#1947) (bf5a106)
• java: Attempt to reduce flaky CI (#2220) (987aec6)
• java: attempt to reduce flaky CI failures (#2203) (b4d88f1)
• java: bring back test against released MPL version (#2226) (a340b34)
• java: fix GetEncryptedDataKeyDescription java Example (#1973) (ba8fcb7)
• java: retry failed workflow (#2229) (2668d68)
• java: shut down local DDB in test (#2176) (fa1e151)

3.9.1 -- 2026-02-13

This release is available in the following languages:

• .NET

Fixes

• java: drop hkdf offset method (#2011) (b8f29f9)

Maintenance

• java: fix GetEncryptedDataKeyDescription java Example (#1973) (ba8fcb7)
• move go out of pull/push/daily into its own (#2005) (1b961b5)
• net: Add plaintext to encrypted table migration example (#1976) (814acbf)
• remove test against latest mpl version (#2008) (728158e)
• net: pin to mpl version 1.11.2
• rust: add plaintext to encrypted table migration examples (#1977) (5286619)
• rust: fips feature (#1980) (516fd3d)
• rust: improved blocking (#2030) (162c86c)

3.9.0 -- 2025-06-25

This release is available in the following languages:

• Java

Maintenance

• dafny: Add ExecuteStatement test (#1932) (66a19ab)
• dafny: Add Update and delete test (#1942) (3bd48ba)
• dafny: change nat to uint64 in many places (#1852) (ec22b7d)
• dafny: further performance enhancements (#1834) (ea94693)
• dafny: improve performance (#1900) (ccf61d6)
• dafny: improve performance of searchable encryption (#1931) (8b71004)
• dafny: reduce use of BigInteger (#1872) (eb7679a)
• dafny: test ExecuteTransaction and BatchExecuteStatement (#1941) (69c37c6)
• deps: Bump MPL version to 1.11.0 (#1945) (efdd373)
• further performance improvements (#1826) (3194054)
• improve performance (#1622) (8ca2883)
• update README for missing info (#1939) (354f4f6)

3.8.1 -- 2025-04-02

This release is available in the following languages:

• Java

Fixes

• return plaintext items in UnprocessedItems in BatchWriteIttem (#1642) (7c7c8a1)

Maintenance

• add Rust generated test vectors (#1638) (a285eac)
• bump mpl and smithy-dafny (#1762) (8179af4)
• dafny: let FileIO deal in uint8 rather than bv8 (#1746) (428a013)
• deps: bump actions/setup-java from 3 to 4 in /.github/workflows (#1367) (f04bc40)
• deps: bump actions/setup-java from 3 to 4 in /.github/workflows (#1654) (ddb69e1)
• deps: bump org.junit.jupiter:junit-jupiter-api (#1656) (d988c6e)
• deps: bump org.junit.jupiter:junit-jupiter-engine (#1650) (4f18689)
• deps: bump software.amazon.awssdk:bom (#1643) (4c41746)
• deps: bump software.amazon.awssdk:bom (#1644) (84e2c56)
• deps: bump software.amazon.awssdk:core (#1645) (dec98d6)
• GHA: Run Java CI testing for MPL Latest Release (#1605) (2eb36b3)
• java: allow local testing v3.8.0 (#1628) (119a42b)
• java: update versions of lombok and aws-sdk-ddb (#1646) (099014e)
• re-enable Dafny for MacOS (#1738) (6f729c3)
• Remove Dafny warnings (#1742) (4a9d617)
• rust: enable wrapped client test vectors (#1648) (20fee58)

3.8.0 -- 2025-02-05

This release is available in the following languages:

• Java

Features

• SharedCache: Shared Cache for Searchable Encryption (#1476) (46076f8)
• bump to dafny 4.9.0 and mpl 1.9.0 (#1627)

Fixes

• ensure algorithmSuite is properly copied in getTableConfig for E… (#1474) (ff3acac)
• Java: Improve Collection of Errors string (#1478) (562b3ef)
• SearchableEncryption: disable shared cached (#1507) (ffc67be)
• SearchableEncryption: respect CMC contract (#1434) (b9333fb)
• support new input validation (#1518) (12bbfbf)
• Upgrade .net DDB SDK (8aeed4e)

Maintenance

• make const policy an extern (#1587) (be3b96e)
• mpl: Bump to 1.9.0 (#1621) (04a8eb2)
• release Rust 1.0.0 (#1612) (3392200)
• remove unsafe from interceptor (#1620) (f6ef3f4)
• TestVectors: Reuse single KeyVectors client across TestVectors (#1577) (dabcaf1)
• update for async support (#1560) (700f939)
• add dependabot for rust (#1481) (67f3d2e)
• Add ECDH examples (#1461) (cc937b4)
• add Rust release directory (#1479) (97dde01)
• add rust support (#1376) (98ddfe9)
• always use dotnet 6 for format checking. (#1403) (2b85507)
• bump macos from 12 to 13 in CI (#1472) (1abb2dd)
• Bump to MPL HEAD, Smithy-Dafny HEAD (#1299) (b2674a9)
• change exported names, update docs (#1524) (640b4d7)
• CI: make smithy fidd check smarter (#1381) (bb399bf)
• CI: mpl head step for rust (#1583) (98724d3)
• create Rust release runbook (#1488) (e51f340)
• enable local testing (#1380) (36f48b0)
• examples: Shared cache across Hierarchical Keyrings (#1410) (21f7fe1)
• GHA: Add pr-ci-all-required to pull.yaml; use ubuntu-22.04 instead of ubuntu-latest in CI (#1579) (c231473)
• gha: fix workflows triggered by dafny-interop.yml (#1598) (0cb009d)
• gha: use ubuntu-22.04 (#1594) (5e24233)
• Java: bump conversion library (#1423) (8931e27)
• new mpl (#1530) (fe03425)
• README: point to release examples (#1525) (a4ca2f9)
• Rust-docs: Update README (#1520) (96dd848)
• rust: add comments to release scripts (7b45929)
• slight updates to properly publish as a crate (#1480) (aa9175b)
• update for complete copyright notices (#1489) (c0ec84d)
• update Github alias (dc6ca47)
• update Github alias (ff4500a)
• update MPL (#1519) (b0a97e0)

3.7.0 -- 2024-09-17

3.7.0 (2024-09-17)

Features

• bump to dafny 4.8.0 and mpl 1.6.0 (#1356) (fedc0ad)

Fixes

• remove usage of :| (#1320) (eeb3f51)

Maintenance

• add check only keyword action (#1327) (5d777d6)
• add ddb local to dafny interop test vectors (#1316) (6128a39)
• allow local testing (#1311) (e758e97)
• remove /// from smithy files (#1349) (303a8bd)
• remove assert to fix verification (#1360) (8849c1e)

3.6.2 -- 2024-08-22

3.6.2 (2024-08-22)

Fixes

• revert change in error type (#1304) (33d7ee4)

Maintenance

• ...the nightly build. Again. (#1297) (b7a91c9)
• add timing output to test vectors (#1298) (30dfaa8)
• Enable local testing (#1278) (7093266)
• fix ci mpl head gha (#1306) (c572d6a)
• fix dafny interop build steps (#1293) (c6ce809)
• fix nightly (#1300) (a445eff)
• GHA: add backwards interop dafny tests (#1279) (1e6be80)
• GHA: another gha fix (#1292) (df64b30)
• GHA: fix dafny_interop_java (#1283) (5a1c921)
• GHA: fix test vector dafny interop (#1291) (fdefaff)
• GHA: update nightlies for interop and interop action (#1287) (8bec538)

3.6.1 -- 2024-08-13

3.6.1 (2024-08-12)

Fixes

• allow multi-tenant queries with allow_plaintext (#1240) (1487d7e)
• TestVectors: define StartUpObject in csproj (#1231) (2f97bf3)
• update error message (#1270) (7157e4d)

Maintenance

• Add examples to examine contents of query error list (#1251) (b5705ee)
• CI: add smithy diff checker GHA (#1226) (86406f5)
• deps: bump actions/setup-dotnet from 3 to 4 in /.github/workflows (#1191) (c3b736e)
• deps: bump aws-actions/configure-aws-credentials (#1190) (becbd0a)
• deps: bump com.amazonaws:aws-java-sdk-dynamodb (#1230) (3aa25d0)
• deps: bump dafny-lang/setup-dafny-action in /.github/workflows (#1200) (5284f0b)
• deps: bump software.amazon.awssdk:bom (#1227) (abd1727)
• deps: bump software.amazon.awssdk:bom (#1229) (bf3e1c3)
• deps: bump software.amazon.awssdk:core (#1228) (9c67729)
• do not add beacons when FORCE_PLAINTEXT_WRITE is used. (#1232) (23c8a18)
• include bad item keys in query errors (#1244) (07bba8b)
• update version to snapshot (#1225) (c817b5b)

3.6.0 -- 2024-07-24

3.6.0 (2024-07-23)

Features

• allow indirect attribute names with MultiKeyStore (#1208) (4ab97bc)

Maintenance

• bump dafny verification version to 4.7 (#1181) (e7801ec)
• CI/CD: use latest conventional-changelog-conventionalcommits (#1195) (510227e)
• Fix nightly build (aside from verification) (#1029) (862420e)
• GHA: add action for testing against MPL HEAD (#1187) (b2f70ca)
• GHA: fix daily ci (#1194) (a1427e0)
• MPL: Bump MPL to 1.5.1 (#1201) (808a5b4)
• Sonatype Migration to User Tokens (#1216) (a3b4ef9)
• Try to update existing issues (31c6b98)
• Try to update existing issues (4471295)
• update project.properties to be SNAPSHOT (#1087) (6f2825e)

3.5.0 -- 2024-05-03

3.5.0 (2024-05-30)

Features

• DynamoDbEncryption: Add GetEncryptedDataKeyDescription operation (#856) (8f8471a)
• Bump MPL to 1.4 (#1067) (51bbab5). This provides three new KMSConfiguration options when constructing a KeyStore (see https://docs.aws.amazon.com/encryption-sdk/latest/developer-guide/use-hierarchical-keyring.html). To KmsKeyArn are added KmsMRKeyArn, Discovery and MrDiscovery.

Maintenance

• improve verification (#1020) (cbde4ef)
• simplify structured encryption (#866) (a70a569)
• allow Legacy to use subclass of DynamoDBEncryptor (#1073) (135acd9)
• Java-Release: update release commands and use SNAPSHOT builds (#995) (ac9b79e)
• reformat and enforce formatting (#1035) (8a76a9d)
• verify with Dafny 4.6 (#1072) (9db6e78)