<a id="aws-cloudwatch-metrics-connector-changelog"></a>

# Changelog for Amazon CloudWatch Metrics Sink Connector for Confluent Platform

## Version 2.0.18

* CC-44614: Updated `io.netty:netty-handler` to 4.1.137.Final to fix CVE-2026-75595 and CVE-2026-75596
* Removed sensitive data (metric and dimension values, and unrecognized record `type` values) from connector log and exception messages

## Version 2.0.17

* CC-43162: Updated `io.netty` to 4.1.136.Final to fix CVE-2026-55831, CVE-2026-55833, CVE-2026-56745, CVE-2026-56746, CVE-2026-56819, CVE-2026-59898, CVE-2026-59899, CVE-2026-59900, CVE-2026-59901, and CVE-2026-59921

## Version 2.0.16

* CC-42654: Updated `com.fasterxml.jackson.core:jackson-databind` to 2.22.1 to fix CVE-2026-54515

## Version 2.0.15

* CC-41923: Updated `io.netty:netty-handler` to 4.1.135.Final to address multiple CVEs
* CC-41924: Updated `io.netty:netty-codec-http2` to 4.1.135.Final to address multiple CVEs
* CC-42125: Updated `io.netty:netty-codec-http` to 4.1.135.Final to fix CVE-2026-50020
* CC-42319: Updated `com.fasterxml.jackson.core:jackson-databind` to 2.22.0 to address multiple CVEs

## Version 2.0.14

* CC-41157: Bumped `io.netty:netty-codec-http` to `4.1.133.Final`.
* CC-41258: Bumped `io.netty:netty-codec-http2` to `4.1.133.Final`.
* CC-41259: Bumped `io.netty:netty-codec` to `4.1.133.Final`.

## Version 2.0.13

* CC-40261: Bumped `io.netty:netty-codec-http2` to 4.1.132.Final to fix CVE-2026-33871

## Version 2.0.12

* CC-40262: Bumped `io.netty:netty-codec-http` to 4.1.132.Final to fix CVE-2026-33870

## Version 2.0.11

* CC-39541: Bumped `com.fasterxml.jackson.core:jackson-core` to 2.21.1 to address GHSA-72hv-8253-57qq

## Version 2.0.10

* Bumped connect-plugins version to fix CVE-2024-29371

## Version 2.0.9

* CC-38608: Bumped `org.bitbucket.b_c:jose4j` to 0.9.6

## Version 2.0.8

* Updated org.bitbucket.b_c:jose4j version to `0.9.5` to resolve the critical vulnerability [CC - 36687] discovered in `kafka-connect-aws-cloudwatch-metrics:2.0.7`.

## Version 2.0.7

* Updated netty codec version to `io.netty:netty-codec-http:4.1.125.Final` to resolve the critical vulnerability [CVE - 11512] discovered in `kafka-connect-aws-cloudwatch-metrics:2.0.6`.

## Version 2.0.6

* Updated netty codec version to `io.netty:netty-codec-http:4.1.125.Final` to resolve the critical vulnerability [CVE - 9070] discovered in `kafka-connect-aws-cloudwatch-metrics:2.0.5`.
* Update template to 0.304.0

## Version 2.0.5

* Updated `netty-codec-http2` version to `4.1.124.Final`.
* Updated `CODEOWNERS` file.

## Version 2.0.4

* CC-33763: Removed usage of non-public and deprecated APIs

## Version 2.0.3

* No changes

## Version 2.0.2

* CC-32373, CC-32057 Upgrade netty-handler and netty-common to 4.1.118.Final for fixing CVE-2025-25193
* Merge Conflict Resolution (from 1.3.x to 2.0.x)
* CC-30604: Bump aws-java-sdk-core to fix CVE-2024-21634

## Version 2.0.1

* CC-30346: Bumped org.bitbucket.b_c:jose4j to 0.9.5
* CC-30347: Bumped com.google.guava:guava to 32.1.1-jre
* CC-30346: Bumped com.google.protobuf:protobuf-java to 3.25.5
* CC-30344: Bumped org.json:json to 20231013

## Version 2.0.0

* CC-21105: Upgraded to use AWS SDK for Java 2.x