Changes since whinlatter-2026.17.0

Recipe Updates

• python3-s3transfer: upgrade 0.16.0 -> 0.16.1
• amazon-ssm-agent: upgrade 3.3.4177.0 -> 3.3.4268.0
• aws-sdk-cpp: upgrade 1.11.791 -> 1.11.793
• python3-boto3: upgrade 1.42.90 -> 1.42.92

Note

⚠️ The aws-iot-device-sdk-cpp-v2 static CRT fix (#15582) backport is pending in PR #15633.
⚠️ Whinlatter (Yocto 5.3) reaches EOL May 2026. This may be one of the final releases.

Changes since scarthgap-2026.17.0

Recipe Updates

• python3-s3transfer: upgrade 0.16.0 -> 0.16.1
• amazon-ssm-agent: upgrade 3.3.4177.0 -> 3.3.4268.0
• aws-sdk-cpp: upgrade 1.11.791 -> 1.11.793
• python3-boto3: upgrade 1.42.90 -> 1.42.92
• corretto-8-bin: upgrade 8.482.08.1 -> 8.492.09.1
• corretto-25-bin: upgrade 25.0.2.10.1 -> 25.0.3.9.1

Note

⚠️ The aws-iot-device-sdk-cpp-v2 static CRT fix (#15582) backport is pending in PR #15632.

Changes since master-2026.17.0

Security Fix

• aws-iot-device-sdk-cpp-v2: Revert static CRT embedding that caused runtime crashes when linking multiple IoT service libraries (#15582, PR #15628)

CI Improvements

• ci: fix COMPATIBLE_MACHINE filtering for all architectures (#15547)
• ci: remove kirkstone references — Yocto 4.0 LTS EOL
• README: document release tags as recommended pinning method (#15476)
• aws-greengrass-component-sdk: remove stale v1.0.1 recipe and patches

Changes since whinlatter-2026.16.0

Recipe Updates

• aws-sdk-cpp: 1.11.790 → 1.11.793
• python3-botocore: 1.42.89 → 1.42.92
• python3-boto3: 1.42.89 → 1.42.92
• aws-cli-v2: 2.34.30 → 2.34.33
• aws-cli: 1.44.79 → 1.44.82
• aws-crt-python: 0.32.0 → 0.32.1
• aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
• python3-s3transfer: 0.16.0 → 0.16.1
• amazon-ssm-agent: 3.3.4177.0 → 3.3.4268.0
• corretto-{8,11,17,21,25}-bin: version upgrades

Infrastructure

• ci: use REVIEWER_TOKEN instead of deprecated BOT2_CREDENTIAL

Changes since scarthgap-2026.16.0

Recipe Updates

• aws-sdk-cpp: 1.11.790 → 1.11.793
• aws-cli-v2: 2.34.30 → 2.34.33
• aws-cli: 1.44.79 → 1.44.82
• aws-crt-python: 0.32.0 → 0.32.1
• aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
• python3-s3transfer: 0.16.0 → 0.16.1
• corretto-{8,11,17,21,25}-bin: version upgrades

Infrastructure

• ci: use REVIEWER_TOKEN instead of deprecated BOT2_CREDENTIAL

Changes since master-2026.16.0

Recipe Updates

• aws-sdk-cpp: 1.11.793 → 1.11.796
• python3-botocore: 1.42.92 → 1.42.95
• python3-boto3: 1.42.92 → 1.42.95
• aws-cli-v2: 2.34.33 → 2.34.36
• aws-cli: 1.44.82 → 1.44.85
• python3-s3transfer: 0.16.0 → 0.16.1
• amazon-ssm-agent: 3.3.4177.0 → 3.3.4268.0
• aws-greengrass-component-sdk: 1.0.1 → 1.0.2
• corretto-8-bin: 8.482.08.1 → 8.492.09.1
• corretto-11-bin: 11.0.30.7.1 → 11.0.31.11.1
• corretto-17-bin: 17.0.18.9.1 → 17.0.19.10.1
• corretto-21-bin: 21.0.10.7.1 → 21.0.11.10.1
• corretto-25-bin: 25.0.2.10.1 → 25.0.3.9.1

Bug Fixes

• greengrass-common: fix invalid variable assignment (community contribution by @lxz0503)
• aws-greengrass-component-sdk: rename recipe to match version 1.0.1

Infrastructure & CI

• ci: fix COMPATIBLE_MACHINE filtering for all architectures (#15547)
• ci: auto-approve exits gracefully when version-upgrade label missing
• ci: pr-cve-check optimized to only scan changed recipes (static allow list)
• ci: migrate cve-check to sbom-cve-check for PR and nightly workflows
• ci: remove kirkstone and other EOL branches from workflows
• README: document release tags as recommended pinning method (#15476)
• aws-greengrass-component-sdk: add samples PACKAGECONFIG flag
• Remove greengrass helloworld recipes (replaced by SDK samples)

Changes since whinlatter-2026.15.0

Recipe Updates

• aws-sdk-cpp: 1.11.790 → 1.11.793
• python3-botocore: 1.42.89 → 1.42.92
• python3-boto3: 1.42.89 → 1.42.92
• aws-cli-v2: 2.34.30 → 2.34.33
• aws-cli: 1.44.79 → 1.44.82
• aws-crt-python: 0.32.0 → 0.32.1
• aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
• corretto-8-bin: 8.482.08.1 → 8.492.09.1
• corretto-11-bin: 11.0.30.7.1 → 11.0.31.11.1
• corretto-17-bin: 17.0.18.9.1 → 17.0.19.10.1
• corretto-21-bin: 21.0.10.7.1 → 21.0.11.10.1
• corretto-25-bin: 25.0.2.10.1 → 25.0.3.9.1

Infrastructure

• ci: use REVIEWER_TOKEN instead of deprecated BOT2_CREDENTIAL

Changes since scarthgap-2026.15.0

Recipe Updates

• aws-sdk-cpp: 1.11.790 → 1.11.793
• aws-cli-v2: 2.34.30 → 2.34.33
• aws-cli: 1.44.79 → 1.44.82
• aws-crt-python: 0.32.0 → 0.32.1
• aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
• corretto-8-bin: 8.482.08.1 → 8.492.09.1
• corretto-11-bin: 11.0.30.7.1 → 11.0.31.11.1
• corretto-17-bin: 17.0.18.9.1 → 17.0.19.10.1
• corretto-21-bin: 21.0.10.7.1 → 21.0.11.10.1
• corretto-25-bin: 25.0.2.10.1 → 25.0.3.9.1

Infrastructure

• ci: use REVIEWER_TOKEN instead of deprecated BOT2_CREDENTIAL

Changes since master-2026.15.0

Recipe Updates

• aws-sdk-cpp: 1.11.790 → 1.11.794
• python3-botocore: 1.42.89 → 1.42.93
• python3-boto3: 1.42.89 → 1.42.93
• aws-cli-v2: 2.34.30 → 2.34.34
• aws-cli: 1.44.79 → 1.44.83
• aws-crt-python: 0.32.0 → 0.32.1
• aws-iot-device-sdk-python-v2: 1.28.2 → 1.29.0
• corretto-8-bin: 8.482.08.1 → 8.492.09.1
• corretto-11-bin: 11.0.30.7.1 → 11.0.31.11.1
• corretto-17-bin: 17.0.18.9.1 → 17.0.19.10.1
• corretto-21-bin: 21.0.10.7.1 → 21.0.11.10.1
• corretto-25-bin: 25.0.2.10.1 → 25.0.3.9.1

Bug Fixes

• greengrass-common: fix invalid variable assignment in greengrass-common.inc (community contribution by @lxz0503)
• aws-greengrass-component-sdk: rename recipe filename to match version 1.0.1

Infrastructure & CI

• ci: pr-cve-check optimized to only scan changed recipes (static allow list)
• ci: migrate cve-check to sbom-cve-check for both PR and nightly workflows
• aws-greengrass-component-sdk: add samples PACKAGECONFIG flag
• Remove greengrass helloworld recipes (replaced by SDK samples)
• ci: remove kirkstone and other EOL branches from workflows

Release whinlatter-2026.15.0 (Yocto 5.3)

Recipe Upgrades

• aws-lc: 1.71.0 → 1.72.0
• amazon-ssm-agent: 3.3.4121.0 → 3.3.4177.0
• aws-iot-fleetwise-edge: 1.3.2 → 1.3.3
• firecracker-bin: 1.15.0 → 1.15.1
• jailer-bin: 1.15.0 → 1.15.1

CI

• Switched bitbake-setup URIs from git:// to https://