Updated Jackson-databind version to 2.13.4.2 to address CVE-2022-42003.
Updated Jackson-databind version to 2.13.4.1.
Updated Jackson version to 2.13.4 to address CVE-2022-42004. This is a transitive dependency of the driver and the SigV4 plugin does not use Jackson directly.
Updated Jackson version to 2.13.2
- Fixed a bug with region case sensitivity to match the SigV4 spec
- Updated the driver dependency to 4.13.0, including overriding transitive Jackson dependencies to ensure currency
- Removed the Maven license plugin in favor of manual management
Updated to AWS 2 SDK.
Updated the plugin to fix newlines used in the SigV4 signature on Windows. This resolves Issue #12.
Changed the plugin to use a DateTimeFormatter
to ensure precisely 3 digits of millisecond precision for the SigV4
timestamp. A change between JDK8 and JDK11 caused the output of java.time.Instant.toString()
to change from 3 to 6
digits, which results in a signature mismatch.
No changes to code, but we are re-publishing the 4.0.0 release compiled with Java 8 to fix Issue #5. We had to use a new version number because Maven releases are considered immutable, and we cannot replace the existing 4.0.0 artifact.
Initial Release