CHANGELOG.md

Change Log

All notable changes to this project will be documented in this file. See Conventional Commits for commit guidelines.

5.0.2 (2026-07-23)

Note: Version bump only for package aws-encryption-sdk-javascript

5.0.1 (2026-07-23)

Bug Fixes

• ci: pass branch input into shared-ci for release workflow (#1674) (7237bf2)
• ci: release from the dispatched branch instead of a branch input (#1675) (235d871)
• decrypt-node: single-consumer output stream for framed decrypt (#1670) (77fbd26)
• release: drop --unsafe-perm from publish npm ci (#1682) (4081d91)
• release: Prevent script injection via dist_tag input (#1668) (d2aee46)
• release: publish on Node LTS so npm@latest installs (#1680) (f0f6548)
• release: source test vector values from one file so npm 12 can run scripts (#1683) (a05aa80)
• release: stop passing removed branch input to shared-ci (#1678) (babf30d)
• use environment for release ci (#1667) (6adf90b)
• Using discovery filter while constructing keyring (#1662) (23f3f5b)

5.0.0 (2026-04-23)

Bug Fixes

• add repository fields and enable npm provenance for Sigstore OIDC publishing (0105088)

• ci: fix VERSION_BUMP scoping and remove unused NPM token from publish job (#1653) (6fd56ea)

• ci: force pull in publish step (#1639) (6b74c8c)

• ci: npm otp fix for publish (#1641) (fcaf49f)

• ci: npm token for publish (#1640) (953ae60)

• correct repository URLs from awslabs to aws org for npm provenance (f5699bc)

• mitigate dependency issues — remove deprecated packages (#1654) (d795278)

• Removes the internal added prefix from custom encryption context before creating the branch key material node object (#1650) (9907b1b)

• feat!: Drop IE11 support (#1651) (f11b277), closes #1651

Features

• Adds create and version branch key functionality (#1652) (6fab564), closes #1642

Reverts

• Revert "v5.0.0" (4c6f731)
• Revert "v5.0.0" (e3d58fb)
• Revert "v5.0.0" (0ee917e)

BREAKING CHANGES

• The AWS Encryption SDK for JavaScript no longer supports Internet Explorer 11 (IE11). The msCrypto shim and related IE11 detection code have been removed from the web-crypto-backend module.

Co-authored-by: Lucas McDonald lucmcdon@amazon.com

4.2.2 (2026-03-05)

Bug Fixes

• ci-auth: git release auth (#1638) (04db819)

• ci-debug: log auth username (#1637) (27003a7)

• ci: git auth (#1636) (83d825d)

• ci: release bot credentials (#1635) (4870b2c)

• deps: add missing dependency (#1629) (7329fb7)

• remove usage of Buffer from top-level (#1621) (9556272)

• upgrade bn.js to 4.12.3/5.2.3 (#1631) (ebbd60f)

• feat!: Remove support for NodeJs v16 (ef26b39)

Reverts

• Revert "feat!: Drop IE11 (#1625)" (7d6902e), closes #1625

BREAKING CHANGES

• • no longer tests against nor supports NodeJS 16

4.2.1 (2025-04-10)

Bug Fixes

• add serializationOptions flag for AAD UTF8 sorting (#1581) (b80cad1)

4.2.0 (2025-02-27)

Bug Fixes

• include uuid as a dependency in material-management (#1564) (dee213b)

Features

• integration-node can produce decrypt manifests (#1580) (95f0fa1)

4.1.0 (2025-01-16)

Features

• Adding the hierarchical keyring (#1537) (43dcb16)

4.0.2 (2024-10-21)

Note: Version bump only for package aws-encryption-sdk-javascript

4.0.1 (2024-07-30)

Bug Fixes

• Add CVE-2023-46809 option to integration node (#1424) (84a7034)
• CI: npx_verdaccio (#1190) (1051f19)

4.0.0 (2023-07-17)

• feat!: Remove AWS SDK V2 Dependency (#1180) (1d74248), closes #1180

BREAKING CHANGES

• The AWS Encryption SDK for JavaScript:

• requires the AWS SDK for JavaScript V3's kms-client (if using the KMS Keyring).
• no longer requires the AWS SDK V2
• no longer tests against nor supports NodeJS 12 or 14

3.2.2 (2023-07-05)

Bug Fixes

• CD: CodeBuild MUST USE a supported Node Version (#1183) (e97b9c9)

3.2.1 (2023-07-05)

Note: Version bump only for package aws-encryption-sdk-javascript

3.2.0 (2023-02-23)

Features

• Support AWS SDK v3 (#1043) (33a9e43)
• Support Node v18 (#1041) (5f39e1e)

3.1.1 (2022-03-15)

Bug Fixes

• browser-encrypt can encrypt 0 bytes (#866) (32f7fa2)

3.1.0 (2021-11-10)

Bug Fixes

• Pin karma-credential-loader to 3.38.0 (#795) (fe63723)

Features

• node: support node v16 (#741) (66e63b5)

3.0.3 (2021-09-21)

Bug Fixes

• Revert #7ba9425166ce0adc5feda67415e514f4d5616b87 (#748) (9e7150a), closes #7ba9425166ce0adc5feda67415e514f4d5616b87

3.0.2 (2021-09-08)

Bug Fixes

• Update @types/node to 16.7.9 (#723) (7ba9425)

3.0.1 (2021-09-07)

Bug Fixes

• Update @types/node to 16.7.9 (#723) (7ba9425)

3.0.0 (2021-07-14)

chore

• remove node 10 from CI (64cc85b)
• update dependencies (417db72)

BREAKING CHANGES

• Removing CI coverage for Node 10
• This commit upgrades dependencies to no longer support Node 8 and 10.

2.4.0 (2021-07-13)

Note: Version bump only for package aws-encryption-sdk-javascript

2.3.1 (2021-07-01)

Bug Fixes

• der2raw sLength is s byte length (#634) (46cd178)

2.3.0 (2021-06-16)

Features

• AWS KMS multi-Region Key support (#631) (701f811)

2.2.1 (2021-06-04)

Bug Fixes

• Track version from package.json (#616) (4be2ed4)