# Changelog for Amazon S3 Source Connector for Confluent Platform ## Version 3.1.8 * CC-43891: Bumped `connect-plugins-parent` to `0.9.54` to fix CVE-2026-59902. * Prevented object content and credentials from reaching logs and exceptions. ## Version 3.1.7 * CC-41598: Added validation for JSON to schema-based output formats based on `format.json.schema.enable`. ## Version 3.1.6 * CC-43117: Bump connect-plugins-parent to 0.9.53 to fix jetty CVE-2026-10050 * Fix Parquet source connector crash on timestamp logical-type columns (CC-41773) ## Version 3.1.5 * CC-41448: Bumped `grpc` to `1.82.2` and pinned `opentelemetry` to 1.62.0. ## Version 3.1.4 * CC-43118: Bumped all `io.netty` to 4.1.136.Final to resolve CVE-2026-44891. * CC-43035: Bumped `com.fasterxml.jackson.core:jackson-core` to 2.22.1 to resolve GHSA-r7wm-3cxj-wff9. * CC-42856: Bumped `com.fasterxml.jackson.core:jackson-databind` to 2.22.1 to resolve CVE-2026-54515. ## Version 3.1.3 * CC-41522: Bumped `commons-configuration2` to `2.15.0` (and `commons-io` to `2.17.0`) to fix CVE-2026-45205. * CC-42322: Bumped `jackson-databind` to `2.22.1` to fix CVE-2026-54515. * CC-42323: Bumped `kafka-connect-storage-common` to `11.2.37` to fix CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, and CVE-2026-54515 in shaded `jackson-databind`. * CC-42264: Added `file.creation.time` to the object store source record headers. ## Version 3.1.2 * CC-42178: Pinned `org.jline:jline` to `4.2.1` to fix GHSA-2r2c-cx56-8933 and GHSA-47qp-hqvx-6r3f * CC-42309: Bumped `connect-plugins-parent` to `0.9.50` to resolve jackson-databind CVEs. ## Version 3.1.1 * CC-41872: Bumped `connect-plugins-parent` to `0.9.49` ## Version 3.1.0 * CC-40969: Added file metadata to record headers when `file.metadata.headers.enable` is set to `true`.