1.106.2

• Enhancement - Bump golang.org/x/text and related dependencies #5100
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/feature/ec2/imds from 1.18.33 to 1.18.38 in /ecs-agent #5093
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.35.2 to 1.44.7 in /agent #5094
• Enhancement - Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 #5108
• Enhancement - Update Go version to 1.26.7 #5105
• Enhancement - Add amazon-ecs-agent.gpg and amazon-ssm-agent.gpg to the CodePipeline release artifacts #5101
• Enhancement - IMDS credentials scanner/refresher: Add logging and validations #5091
• Enhancement - Bump github.com/containerd/cgroups/v3 from 3.0.4 to 3.1.3 in /agent #5081
• Enhancement - Bump google.golang.org/grpc from 1.81.1 to 1.82.1 in /ecs-agent and /agent #5085
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.29 to 1.19.32 in /ecs-agent, /agent and /ecs-init #5080
• Bugfix - fix(handlers): raise fault rate limit to 1 rps #5092
• Feature - Nvidia MPS GPU sharing (not yet enabled)
  • Add MPS control-daemon health probe #5095
  • Add per-GPU memory accounting to host resource manager #5090
  • Allow MPS containers to colocate on a shared GPU #5083
  • Mount MPS control binary and pipe dir into the agent container #5086
  • Move MPS pipe directory to /run/mps-ecs #5102

1.106.1

• Enhancement - Add retry for EFS volume creation to handle plugin timeout errors caused by concurrent mount operation #5077
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.32.23 to 1.32.31 in /agent #5064
• Enhancement - Bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /ecs-agent/daemonimages/csidriver #5056
• Enhancement - Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /ecs-agent #5063
• Enhancement - add nos3readcache S3 Files mount option #5062
• Feature - Nvidia MPS GPU sharing (not yet enabled)
  • Add ecs.capability.gpu-sharing-mps capability for NVIDIA MPS GPU sharing #5053
  • Inject NVIDIA MPS env vars and pipe mount into MPS containers #5082
  • Map ACS GPU sharingStrategy onto the internal container model for MPS #5076
  • Gate gpu-sharing-mps on complete per-GPU memory- #5075 #5075
  • Regenerate ACS model for GPU sharingStrategy and validate it #5071
  • Report per-GPU memory at container instance registration for GPU sharing #5061
  • Regenerate ECS SDK with gpuInfo on PlatformDevice #5060

• Feature - Feature - Add FIS-driven DNS refresh add-sources endpoint for network-latency and network-packet-loss faults #5029
• Enhancement - Enhancement: Update SSM Agent version to 3.3.4624.0 for ECS exec #5054
• Enhancement - Backfill host DNS config on isolated platform #5047
• Enhancement - Bump github.com/aws/smithy-go from 1.27.3 to 1.27.4 in /agent #5051
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials in /ecs-agent, /agent and /ecs-init to 1.19.29 #5050
• Enhancement - Bump actions/setup-go from 6 to 7 in /.github/workflows #5049
• Enhancement - Update Go version to 1.25.12 #5048
• Enhancement - Bump github.com/vishvananda/netlink from 1.2.1-beta.2 to 1.3.1 in /ecs-agent, /agent and /ecs-init #5037
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/credentials from 1.19.22 to 1.19.28 in /agent #5038
• Enhancement - Bump github.com/hectane/go-acl from 0.0.0-20190604041725-da78bae5fc95 to 1.0.0 in /agent #5022
• Enhancement - chore(deps): bump github.com/cilium/ebpf from v0.16.0 to v0.22.0 in /agent #5034
• Enhancement - Bump golang.org/x/net from 0.48.0 to 0.55.0 in /ecs-agent/daemonimages/csidriver #5031
• Enhancement - api-2.json: Add CONFIDENTIAL_PARTITION and attestationPolicy to api m… #5033
• Bugfix - Fix flaky TestHostResourceManagerTrickleQueue integration test #5026

1.105.1

• Enhancement - Populate ImageDigest for Service Connect sidecar containers #5006
• Enhancement - Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /agent #5013
• Enhancement - Bump github.com/containerd/containerd from 1.7.32 to 1.7.33 in /ecs-init #5014
• Enhancement - Bump github.com/container-storage-interface/spec from 1.9.0 to 1.12.0 in /agent #5008
• Bugfix - Validate environment file S3 keys so they stay within the task resource directory #5011

• Feature - feat(acs-model): Add LogDriverVolumeConfiguration to ACS Volume shape #5005
• Enhancement - Removed cloudwatch from windows agent capabilities #5002
• Enhancement - Update Go version to 1.25.11 #5003
• Enhancement - Update golang.org/x/net to v0.56.0 #5004
• Enhancement - Add IsolatedDebugPlatform with DNS field backfill #4998
• Enhancement - enhancement: Migrate EBS CSI Driver image to AL2023 #4979
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.32.23 in /agent #4997
• Enhancement - Detect cloud-init failure at startup to prevent silent cluster miscon… #4988
• Enhancement - Add isolated_linux platform for isolated container networking #4991
• Enhancement - Emit failure metrics from IMDS credentials scanner #4995
• Enhancement - Update SSM GPG key for ECS Anywhere installation #4992
• Enhancement - Add Host type and BuildHosts to populate netNS.Hosts #4985
• Bugfix - Fix TestClientProxy to obtain available port dynamically #4999
• Bugfix - Fix flaky TestDPEAndACSConnFailureTrackerTracking nil pointer panic #4993

• Feature - Add support for ECS S3 Files integration #4962
• Feature - Add ECS_PROPAGATE_TASK_MEMORY_LIMIT_CGROUPV2 opt-in config #4986
• Enhancement - rename IMDSCredentialRefresher to IMDSCredentialsRefresher #4969
• Enhancement - inject AWS_REGION and AWS_DEFAULT_REGION into task containers #4946
• Enhancement - Export namespace prefix in IMDS scanner shared library. #4977
• Enhancement - Add TrustedExecutionConfiguration to task payload models #4980
• Enhancement - Add FailureTracker for DiscoverPollEndpoint + ACS/TCS connect workflows #4983
• Enhancement - Bump github.com/gorilla/mux from 1.8.0 to 1.8.1 in /agent #4976
• Enhancement - Bump github.com/containerd/containerd from 1.7.29 to 1.7.32 in /ecs-init #4970
• Enhancement - Bump google.golang.org/grpc from 1.79.3 to 1.81.1 in /ecs-agent #4974
• Enhancement - Bump github.com/containerd/containerd from 1.7.29 to 1.7.32 in /agent #4982
• Enhancement - Bump github.com/opencontainers/image-spec from 1.1.0 to 1.1.1 in /agent #4987

• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/fsx from 1.53.1 to 1.65.10 in /agent #4966
• Enhancement - Add semgrep security scan for command injection #4959
• Enhancement - Bump golang.org/x/tools from 0.39.0 to 0.45.0 in /ecs-agent #4965
• Enhancement - Add integration test for credential refresher #4961
• Enhancement - Bump golang.org/x/tools from 0.42.0 to 0.45.0 in /agent #4873
• Enhancement - Update Go version to 1.25.10 #4960
• Enhancement - Bump go.etcd.io/bbolt from 1.3.9 to 1.4.3 in /ecs-agent #4872
• Enhancement - update credentials-fetcher retry comments/tests #4954
• Enhancement - Enhancement - Add retry mechanism to credentialsfetcher #4948
• Enhancement - Add IMDS credential refresher #4953
• Bugfix - fix flaky tests depending on timers #4955

• Feature - Implement IMDS scanner for task credential retrieval, in the shared library #4945
• Feature - Add config/capability for IMDS-based task credential retrieval (disabled for now) #4938
• Feature - Add IMDS credential scanner interface and capability constant for IMDS-based task credential retrieval #4937
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs from 1.47.3 to 1.65.0 in /agent #4921
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.63.1 to 1.97.3 in /ecs-init #4923
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.2 to 1.97.3 in /agent #4924
• Enhancement - Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.32.0 to 1.43.0 in /agent #4926
• Enhancement - Truncate log values to make agent logs less verbose #4940

• Enhancement - Golang bump: 1.25.9 #4935
• Enhancement - Use env variable to read user input when mounting FSx volumes #4934
• Enhancement - Enhancement - Replace SSM Dualstack endpoint resolution logic with UseDualStackEndpoint #4931
• Enhancement - Emit duration metrics for TACS connect/disconnect #4928
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.10 to 1.7.8 in /agent #4922
• Enhancement - Bump github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream from 1.6.5 to 1.7.8 in /ecs-init #4925
• Enhancement - Track and emit metric for disconnect time from ACS #4920
• Enhancement - engine: skip execution role checks when task desired status is stopped #4918
• Enhancement - Add NeuronDevices type and sysfs-based device discovery #4919
• Bugfix - Fix release workflow branch handling and add GitHub App token #4929
• Bugfix - fix(netlib): Conditionally add IPv6 subnet to IPAM config when IPv6 … #4916

• Enhancement - Update SSM exec agent version to 3.3.4108.0 #4912
• Enhancement - Update Go version to 1.25.8 #4894
• Enhancement - Apply skip-gpg-check to both ecs-init and ssm agent #4901
• Enhancement - Bump google.golang.org/grpc from 1.78.0 to 1.79.3 #4906

1.102.1

• Enhancement - Improve ENI watcher udev logging #4887
• Enhancement - Update go version to 1.25.7, Update unit test coverage logic #4886
• Enhancement - Upgrade prometheus deps #4883
• Enhancement - Use static IP for daemon tasks for Managed Instances, also updates amazon-ecs-cni-plugins #4881
• Bugfix - Fix IMDS client rate limiting to prevent token refresh failures after 401 responses #4870