• Feature - Feature - Add FIS-driven DNS refresh add-sources endpoint for network-latency and network-packet-loss faults #5029
• Enhancement - Enhancement: Update SSM Agent version to 3.3.4624.0 for ECS exec #5054
• Enhancement - Backfill host DNS config on isolated platform #5047
• Enhancement - Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 in /agent #5051
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials in /ecs-agent, /agent and /ecs-init to 1.19.29 #5050
• Enhancement - Bump actions/setup-go from 6 to 7 in /.github/workflows #5049
• Enhancement - Update Go version to 1.25.12 #5048
• Enhancement - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1 in /ecs-agent, /agent and /ecs-init #5037
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to 1.19.28 in /agent #5038
• Enhancement - Bump github.com/hectane/go-acl from 0.0.0-20190604041725-da78bae5fc95 to 1.0.0 in /agent #5022
• Enhancement - chore(deps): bump github.com/cilium/ebpf from v0.16.0 to v0.22.0 in /agent #5034
• Enhancement - Bump golang.org/x/net from 0.48.0 to 0.55.0 in /ecs-agent/daemonimages/csidriver #5031
• Enhancement - api-2.json: Add CONFIDENTIAL_PARTITION and attestationPolicy to api m… #5033
• Bugfix - Fix flaky TestHostResourceManagerTrickleQueue integration test #5026

1.105.1

• Enhancement - Populate ImageDigest for Service Connect sidecar containers #5006
• Enhancement - Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /agent #5013
• Enhancement - Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /ecs-init #5014
• Enhancement - Bump github.com/container-storage-interface/spec from 1.9.0 to 1.12.0 in /agent #5008
• Bugfix - Validate environment file S3 keys so they stay within the task resource directory #5011

• Feature - feat(acs-model): Add LogDriverVolumeConfiguration to ACS Volume shape #5005
• Enhancement - Removed cloudwatch from windows agent capabilities #5002
• Enhancement - Update Go version to 1.25.11 #5003
• Enhancement - Update golang.org/x/net to v0.56.0 #5004
• Enhancement - Add IsolatedDebugPlatform with DNS field backfill #4998
• Enhancement - enhancement: Migrate EBS CSI Driver image to AL2023 #4979
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.32.23 in /agent #4997
• Enhancement - Detect cloud-init failure at startup to prevent silent cluster miscon… #4988
• Enhancement - Add isolated_linux platform for isolated container networking #4991
• Enhancement - Emit failure metrics from IMDS credentials scanner #4995
• Enhancement - Update SSM GPG key for ECS Anywhere installation #4992
• Enhancement - Add Host type and BuildHosts to populate netNS.Hosts #4985
• Bugfix - Fix TestClientProxy to obtain available port dynamically #4999
• Bugfix - Fix flaky TestDPEAndACSConnFailureTrackerTracking nil pointer panic #4993

• Feature - Add support for ECS S3 Files integration #4962
• Feature - Add ECS_PROPAGATE_TASK_MEMORY_LIMIT_CGROUPV2 opt-in config #4986
• Enhancement - rename IMDSCredentialRefresher to IMDSCredentialsRefresher #4969
• Enhancement - inject AWS_REGION and AWS_DEFAULT_REGION into task containers #4946
• Enhancement - Export namespace prefix in IMDS scanner shared library. #4977
• Enhancement - Add TrustedExecutionConfiguration to task payload models #4980
• Enhancement - Add FailureTracker for DiscoverPollEndpoint + ACS/TCS connect workflows #4983
• Enhancement - Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /agent #4976
• Enhancement - Bump github.com/containerd/containerd from 1.7.29 to 1.7.32 in /ecs-init #4970
• Enhancement - Bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /ecs-agent #4974
• Enhancement - Bump github.com/containerd/containerd from 1.7.29 to 1.7.32 in /agent #4982
• Enhancement - Bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /agent #4987

• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/fsx from 1.53.1 to 1.65.10 in /agent #4966
• Enhancement - Add semgrep security scan for command injection #4959
• Enhancement - Bump golang.org/x/tools from 0.39.0 to 0.45.0 in /ecs-agent #4965
• Enhancement - Add integration test for credential refresher #4961
• Enhancement - Bump golang.org/x/tools from 0.42.0 to 0.45.0 in /agent #4873
• Enhancement - Update Go version to 1.25.10 #4960
• Enhancement - Bump go.etcd.io/bbolt from 1.3.9 to 1.4.3 in /ecs-agent #4872
• Enhancement - update credentials-fetcher retry comments/tests #4954
• Enhancement - Enhancement - Add retry mechanism to credentialsfetcher #4948
• Enhancement - Add IMDS credential refresher #4953
• Bugfix - fix flaky tests depending on timers #4955

• Feature - Implement IMDS scanner for task credential retrieval, in the shared library #4945
• Feature - Add config/capability for IMDS-based task credential retrieval (disabled for now) #4938
• Feature - Add IMDS credential scanner interface and capability constant for IMDS-based task credential retrieval #4937
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.47.3 to 1.65.0 in /agent #4921
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.63.1 to 1.97.3 in /ecs-init #4923
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.2 to 1.97.3 in /agent #4924
• Enhancement - Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.32.0 to 1.43.0 in /agent #4926
• Enhancement - Truncate log values to make agent logs less verbose #4940

• Enhancement - Golang bump: 1.25.9 #4935
• Enhancement - Use env variable to read user input when mounting FSx volumes #4934
• Enhancement - Enhancement - Replace SSM Dualstack endpoint resolution logic with UseDualStackEndpoint #4931
• Enhancement - Emit duration metrics for TACS connect/disconnect #4928
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.10 to 1.7.8 in /agent #4922
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.5 to 1.7.8 in /ecs-init #4925
• Enhancement - Track and emit metric for disconnect time from ACS #4920
• Enhancement - engine: skip execution role checks when task desired status is stopped #4918
• Enhancement - Add NeuronDevices type and sysfs-based device discovery #4919
• Bugfix - Fix release workflow branch handling and add GitHub App token #4929
• Bugfix - fix(netlib): Conditionally add IPv6 subnet to IPAM config when IPv6 … #4916

• Enhancement - Update SSM exec agent version to 3.3.4108.0 #4912
• Enhancement - Update Go version to 1.25.8 #4894
• Enhancement - Apply skip-gpg-check to both ecs-init and ssm agent #4901
• Enhancement - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 #4906

1.102.1

• Enhancement - Improve ENI watcher udev logging #4887
• Enhancement - Update go version to 1.25.7, Update unit test coverage logic #4886
• Enhancement - Upgrade prometheus deps #4883
• Enhancement - Use static IP for daemon tasks for Managed Instances, also updates amazon-ecs-cni-plugins #4881
• Bugfix - Fix IMDS client rate limiting to prevent token refresh failures after 401 responses #4870

• Enhancement - Support AZ ID for TMDS #4848
• Enhancement - Improved net utils logging #4861
• Enhancement - FIPS support for Service Connect #4866
• Bugfix - netlib: Add IPv6 support for daemon-bridge network mode on managed Linux platform #4862
• Bugfix - Update golang to 1.24.13 #4869