What's Changed

• fix(forwarder): update API key page link to /organization-settings/api-keys by @hkrddog in #1164
• fix(deps): vuln ujson (minor → 5.13.0) [aws/logs_monitoring] by @gh-worker-campaigns-3e9aa4[bot] in #1167
• Update version from 5.4.5 to 5.4.6 by @hkrddog in #1170

New Contributors

• @hkrddog made their first contribution in #1164

Full Changelog: aws-dd-forwarder-5.4.5...aws-dd-forwarder-5.4.6

What's Changed

• Fixing a minor vulnerability, see PR
• Fixing a bug with the Forwarder sometimes not tagging Lambda functions properly if it failed to acquired lock over the S3 cache, see PR

Details

• fix(deps): vuln minor: js-yaml · patch: brace-expansion, minimatch [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1155
• [CLOUDS-8294] fix(forwarder): fallback on stale tags if lock not acquired by @RaphaelAllier in #1158
• Update version from 5.4.4 to 5.4.5 by @klivan in #1159

Full Changelog: aws-dd-forwarder-5.4.4...aws-dd-forwarder-5.4.5

What's Changed

• fix(deps): bump idna from 3.7 to 3.15 to address CVE-2026-45409 by @Gustavo-Jodar in #1153
• Update version from 5.4.3 to 5.4.4 by @klivan in #1154

New Contributors

• @Gustavo-Jodar made their first contribution in #1153

Full Changelog: aws-dd-forwarder-5.4.3...aws-dd-forwarder-5.4.4

What's Changed

• feat(forwarder): add SKIP_REGIONS env var for layer publishing by @klivan in #1139
• fix(forwader): catch response errors on key verification by @ndakkoune in #1141
• Update version from 5.4.2 to 5.4.3 by @klivan in #1142

Full Changelog: aws-dd-forwarder-5.4.2...aws-dd-forwarder-5.4.3

What's Changed

• fix(logs): store failed log events on intake errors by @patbos in #1131
• fixup! fix: store failed log events on intake errors (#1131) by @ndakkoune in #1137
• Update version from 5.4.1 to 5.4.2 by @klivan in #1138

New Contributors

• @patbos made their first contribution in #1131

Full Changelog: aws-dd-forwarder-5.4.1...aws-dd-forwarder-5.4.2

What's Changed

• Remove --grants from S3 cp command in release script by @klivan in #1092
• chore(deps): prettier (minor → 3.8.1) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1098
• chore(deps): sinon (major → 21.0.3) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1097
• chore(deps): minor: sinon · patch: prettier [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1113
• fix(deps): vuln lodash (minor → 4.18.1) [azure] by @gh-worker-campaigns-3e9aa4[bot] in #1121
• [AWSINTS] chore(CVEs): bump libraries by @RaphaelAllier in #1125
• Update version from 5.4.0 to 5.4.1 by @klivan in #1127

Fixing Vulnerabilities

Fixing reported CVEs on the Forwarder:

CVE-2026-44432 / CVE-2026-44431 : Fixed by pinning urllib3 to the fixed version 2.7.0
CVE-2026-44660 : Fixed by pinning ujson to the fixed version 5.12.1

New Contributors

• @gh-worker-campaigns-3e9aa4[bot] made their first contribution in #1098

Full Changelog: aws-dd-forwarder-5.4.0...aws-dd-forwarder-5.4.1

What's Changed

• fix(logs forwarder -waf ): serialize WAF message to JSON string allowing exclusion/inclusion matching by @ge0Aja in #1070
• VULN UPGRADE: patch: lodash, prettier [azure] by @campaigner-prod[bot] in #1074
• chore(aws): Change ownership for context things by @ViBiOh in #1077
• chore: Polish the language to recommend Lambda Extension over forwarder by @lym953 in #911
• perf(forwarder): compile multiline regex patterns once at module level by @LorisFriedel in #1078
• perf(forwarder): parse event message JSON once in split() by @LorisFriedel in #1080
• perf(forwarder): reuse boto3 S3 client across SQS batch records by @LorisFriedel in #1079
• perf(forwarder): create scrubber, matcher, and batcher once in init by @LorisFriedel in #1081
• docs(forwarder): add key retrieval strategies by @ndakkoune in #1085
• Clarify JSON array ingestion behavior for S3 log files by @estherk15 in #1086
• [AWS] fix(CVE): pin versions of packages to resolve CVEs by @RaphaelAllier in #1090
• Update version from 5.3.0 to 5.4.0 by @klivan in #1091

New Contributors

• @campaigner-prod[bot] made their first contribution in #1074
• @lym953 made their first contribution in #911

Full Changelog: aws-dd-forwarder-5.3.0...aws-dd-forwarder-5.4.0

What's Changed

• Check if docker or container system are running by @klivan in #1058
• [AWSX] fix(logs forwarder): Scrub logs once by @ge0Aja in #1060
• [AWSX] feat(forwarder): allow restricting access to s3:GetObject in template by @RaphaelAllier in #1062
• Add support for S3 Object Created events distributed using Eventbridge by @blockmar in #1052
• feat(forwarder): add SQS support as event source for S3 notifications by @LorisFriedel in #1064
• feat(forwarder): add SQS support as DLQ backend for failed events by @LorisFriedel in #1063
• Update version from 5.2.2 to 5.3.0 by @dylanburati in #1069

New Contributors

• @blockmar made their first contribution in #1052
• @dylanburati made their first contribution in #1069

Full Changelog: aws-dd-forwarder-5.2.2...aws-dd-forwarder-5.3.0

What's Changed

• [AWSCORE-688] Add version fetching to forwarder release script by @dhan0779 in #1053
• [AWS] feat(forwarder): update requirements by @RaphaelAllier in #1055
• Update version from 5.2.1 to 5.2.2 by @klivan in #1057

New Contributors

• @dhan0779 made their first contribution in #1053

Full Changelog: aws-dd-forwarder-5.2.1...aws-dd-forwarder-5.2.2

What's Changed

• [AWSX] fix(logs forwarder): Override service tag from StepFunction tags by @ge0Aja in #1049
• Patch 1 by @ge0Aja in #1050
• [AWSX] feat(logs forwarder): Prepare patch version 5.2.1 by @ge0Aja in #1051

Full Changelog: aws-dd-forwarder-5.2.0...aws-dd-forwarder-5.2.1