v12.2.0

Build Changes

• Update twoliter to v0.16.0 (#793)

Orchestrator Changes

Kubernetes

• Update kubernetes-1.35 package with official sources (#792)

• Update to latest versions of kubernetes packages (#784)

v12.1.0

OS Changes

• Add audit-rules subpackage to libaudit and journald-audit subpackage to systemd (#781)
• Add rocm-container-toolkit package for AMD GPU support (#778)
• Override SBOM generation for Rust packages (#787)

Third Party Package Updates

• Update cni-plugins to v1.9.0 (#774)
• Update rocm-k8s-device-plugin to v1.31.0.9 (#788)

Build Changes

• Update twoliter to v0.15.1 (#779)

Orchestrator Changes

Kubernetes

• Add multi-user.target drop-in for kubelet restarts across all versions (#773)
• Add kubernetes-1.35 package with beta source and ecr-credential-provider-1.35 package with official source (#777)
• Add latest instance types to eni-max-pods mapping (#776, #782)

Documentation

• Remove OCI consideration from BUILDING.md (#615)

v12.0.1

OS Changes

Third Party Package Updates

• Revert updates to libnvidia-container, nvidia-container-toolkit, and nvidia-k8s-device-plugin (#775)

v12.0.0

OS Changes

• Disable concurrent layer fetch by default in containerd-2.1 (#764)
• Add latest instance types to eni-max-pods mapping (#763)
• Update host-ctr go dependencies (#758)
• Update ordering for drivers target to load before settings are applied (#749)

Third Party Package Updates

• Update amazon-ssm-agent(#768)
• Update core system utilities: bash, chrony, coreutils, iproute, strace, and open-vm-tools (#765)
• Update multiple core libraries: libnftnl, nftables, libpcre, libglib, libelf, libdevmapper, and libncurses (#767)
• Update rdma-core and enable PCI support in hwloc (#725)
• Update soci-snapshotter (#759)
• Update to latest versions of ecr-credential-provider and kubernetes packages (#758)
• Update libnvidia-container, nvidia-container-toolkit, and nvidia-k8s-device-plugin (#758)

Build Changes

• Update twoliter to v0.14.0 (#765)
• Update bottlerocket-sdk to v0.66.0 (#769)

Orchestrator Changes

Kubernetes

• Drop kubernetes-1.28 and ecr-credential-provider-1.28 packages (#761)

v11.1.0

OS Changes

• Provide libdrm and rocm-k8s-device-plugin packages for AMD GPU detection (#748)
• Add latest instance types to eni-max-pods mapping (#752)

v11.0.1

Orchestrator Changes

Kubernetes

• Return enableDebuggingHandlers to default behaviour (#747)

v11.0.0

OS Changes

• Add image signing verification for ECR images signed by AWS Signer (#722)
• Add an apiclient command to lockdown the datastore to prevent further changes (#727)
• Provide rottweiler, a unified storage encryption helper (#717)
• Add support for encrypted storage (#721)
• Fix whippet defaults and wildcard replacements (#720)
• Add apiclient support to exclude settings prefixes and canonicalize output (#716)
• Add apiclient network configure subcommand (#714)
• Ensure that bootconfig keys are written in a consistent order (#735)
• Enhance bloodhound CIS compliance checks (#665, #738)
• Decouple the network stack initialization from the DATA partition (#638)
• Add EBS volumes support for ephemeral storage (#395) - Thanks @jesseanttila-cai
• Build systemd-257 with cryptsetup support (#691)
• Update host-ctr go dependencies (#723)
• Build libcryptsetup and libdevmapper with udev support (#706)
• Support kdump for zboot kernels on aarch64 (#707)

Third Party Package Updates

• Add hwloc package (#672)
• Update systemd-252 to v252.39 (#700)
• Update systemd-257 to v257.9 (#691)
• Drop socat package (#742)
• Update libexpat (#695)
• Add libudev package (#706)
• Update kexec-tools (#707)
• Add docker-cli-29, docker-engine-29 packages (#711, #743, #745)
• Update aws-otel-collector, aws-signing-helper (#715)
• Update containerd-1.7, containerd-2.0, containerd-2.1 (#724)

Build Changes

• Add changelog validation improvements (#699)
• Update bottlerocket-settings-models to v0.17.0 (#689)
• Update twoliter from v0.12.0 to v0.13.0 (#736)

Orchestrator Changes

Kubernetes

• Update DNS IP generation to support IPv6 (#734)
• Update to latest versions of ecr-credential-provider and kubernetes packages (#715)
• Add enableDebuggingHandlers, imageMinimumGCAge, maxParallelImagePulls, ImageMaximumGCAge and CPU manager settings (#689)

ECS

• Default to containerd's transfer service for docker-engine-29 (#730)

v10.9.3

Orchestrator Changes

Kubernetes

• Patch ecr-credential-provider to support AWS EUSC (#729)

v10.9.2

OS Changes

• Patch runc to set the correct mode for tmpfs mounts (#731)

v10.9.1

OS Changes

• Update runc to v1.2.8 (#708)