2026.08.20260813230114

2026.08.20260813230114

What's Changed

• fix(billing-cost-management): normalize Compute Optimizer timestamps to UTC by @kenduck1 in #4467
• fix(billing-cost-management): omit Granularity when GroupBy is set in ri/sp-performance tool by @wangyuhere in #4479
• fix(dynamodb-mcp-server): validate and escape names in CDK generator by @LeeroyHannigan in #4384
• fix(ecs-mcp-server): add path validation for user-supplied paths by @matthewgoodman13 in #4480
• chore: release/2026.08.20260813230114 by @awslabs-mcp in #4491

New Contributors

• @kenduck1 made their first contribution in #4467

Full Changelog: 2026.08.20260810225031...2026.08.20260813230114

2026.08.20260810225031

2026.08.20260810225031

What's Changed

• chore(deps): update uv: bump gitpython from 3.1.45 to 3.1.54 in /src/ccapi-mcp-server by @dependabot[bot] in #4357
• fix(aws-documentation-mcp-server): re-validate redirect targets agaist domain allowlist by @zjerath in #4450
• chore(aws-documentation-mcp-server): update CODEOWNERS to reflect current maintainers by @zjerath in #4451
• fix(docusaurus): bump websocket-driver to 0.7.5 (CVE-2026-54466) by @scottschreckengaust in #4447
• chore(deps): update npm: bump typescript in /docusaurus by @dependabot[bot] in #4456
• chore(deps): update github-actions: bump pypa/gh-action-pypi-publish from 1.14.1 to 1.14.2 in the github-actions-version-updates group by @dependabot[bot] in #4457
• fix(aws-api-mcp-server): use botocore.xform_name for policy operation name conversion by @anasstahr in #4432
• feat(openapi): migrate openapi-mcp-server to native FastMCP.from_openapi (RFC #4122) by @scottschreckengaust in #4124
• chore(deps): update uv: bump pillow from 12.1.1 to 12.3.0 in /src/aws-healthomics-mcp-server by @dependabot[bot] in #4293
• fix(docusaurus): bump express to 4.22.2 to clear qs DoS GHSA-q8mj-m7cp-5q26 by @scottschreckengaust in #4460
• feat(redshift-mcp-server): add read-only tool annotations (OpenAI plugin requirements) by @muralibalki in #4461
• feat(redshift-mcp-server): add annotations, icon, prompts, support URL (Anthropic MCP directory requirements) by @MD-Mushfiqur123 in #3520
• fix(billing-cost-management): Fix tool parameter in get_recommendation API by @wangyuhere in #4464
• chore(deps): update npm: bump the npm-security-updates group across 1 directory with 5 updates by @dependabot[bot] in #4465
• fix(deps): raise fastmcp floor to >=3.2.0 to exclude a CRITICAL advisory by @scottschreckengaust in #4454
• feat: add icon.svg to license header check patterns by @scottschreckengaust in #4468
• fix(billing-cost-management-mcp-server): correct ECS and Lambda Compute Optimizer field names by @pputra in #4453
• chore(deps): update uv: bump mcp to 1.29.0 across all packages (consolidates 57 Dependabot PRs) by @scottschreckengaust in #4258
• feat(aws-transform-mcp-server)!: remove legacy jobType from create_job by @singhpsp in #4381
• fix(billing-cost-management): migrate import_server to mount for fastmcp 4.x compat by @Comusus in #4469
• feat(billing-cost-management): add AWS Billing credits tool by @frankolas in #4446
• chore: release/2026.08.20260810225031 by @awslabs-mcp in #4475

New Contributors

• @muralibalki made their first contribution in #4461
• @MD-Mushfiqur123 made their first contribution in #3520
• @singhpsp made their first contribution in #4381
• @frankolas made their first contribution in #4446

Full Changelog: 2026.08.20260805092707...2026.08.20260810225031

2026.08.20260805092707

2026.08.20260805092707

What's Changed

• feat(aurora-dsql): add VALIDATE CONSTRAINT ASYNC guidance to DSQL steering by @agarwal-govind in #4300
• chore(deps): update uv: bump pillow from 12.1.1 to 12.3.0 in /src/document-loader-mcp-server by @dependabot[bot] in #4292
• chore(deps): update uv: bump pillow from 12.1.1 to 12.3.0 in /samples/mcp-integration-with-kb by @dependabot[bot] in #4295
• chore(deps): update uv: bump bedrock-agentcore from 1.4.4 to 1.18.1 in /src/amazon-bedrock-agentcore-mcp-server by @dependabot[bot] in #4361
• chore(deps): update npm: bump shell-quote from 1.8.4 to 1.10.0 in /docusaurus by @dependabot[bot] in #4338
• chore(deps): update npm: bump @docusaurus/module-type-aliases in /docusaurus by @dependabot[bot] in #4326
• chore(deps): update npm: bump ws from 7.5.10 to 7.5.13 in /docusaurus by @dependabot[bot] in #4336
• chore(deps): update npm: bump react-dom in /docusaurus by @dependabot[bot] in #4325
• chore(deps): update npm: bump body-parser from 1.20.4 to 1.20.6 in /docusaurus by @dependabot[bot] in #4335
• chore(deps): update uv: bump setuptools from 80.10.2 to 83.0.0 in /src/aws-api-mcp-server by @dependabot[bot] in #4310
• chore(deps): update uv: bump setuptools from 80.10.2 to 83.0.0 in /src/aws-healthomics-mcp-server by @dependabot[bot] in #4309
• chore(deps): update uv: bump setuptools from 80.10.2 to 83.0.0 in /src/dynamodb-mcp-server by @dependabot[bot] in #4306
• chore(deps): update uv: bump pyasn1 from 0.6.2 to 0.6.4 in /src/dynamodb-mcp-server by @dependabot[bot] in #4307
• chore(deps): update uv: bump setuptools from 80.10.2 to 83.0.0 in /src/ecs-mcp-server by @dependabot[bot] in #4305
• chore(deps): update uv: bump pyasn1 from 0.6.3 to 0.6.4 in /src/eks-mcp-server by @dependabot[bot] in #4304
• chore(deps): update uv: bump setuptools from 80.10.2 to 83.0.0 in /src/timestream-for-influxdb-mcp-server by @dependabot[bot] in #4303
• chore(deps): update npm: bump postcss from 8.5.6 to 8.5.25 in /docusaurus by @dependabot[bot] in #4389
• chore(deps): update npm: bump fast-uri from 3.1.0 to 3.1.5 in /docusaurus by @dependabot[bot] in #4390
• chore(deps): update uv: bump pillow from 12.1.1 to 12.3.0 in /samples/mcp-integration-with-nova-canvas by @dependabot[bot] in #4294
• chore(deps): update uv: bump gitpython from 3.1.44 to 3.1.54 in /samples/mcp-integration-with-nova-canvas by @dependabot[bot] in #4358
• chore(deps): throttle Dependabot PR volume while cross-directory grouping is broken (upstream #14286) by @scottschreckengaust in #4371
• chore(deps): update docker images: bump amazonlinux/amazonlinux in /src/amazon-bedrock-agentcore-mcp-server by @dependabot[bot] in #4376
• chore(deps): update github-actions: bump the github-actions-version-updates group across 1 directory with 9 updates by @dependabot[bot] in #4430
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/valkey-mcp-server by @dependabot[bot] in #4398
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/timestream-for-influxdb-mcp-server by @dependabot[bot] in #4399
• chore(deps): update uv: bump cryptography from 46.0.7 to 50.0.0 in /src/oracle-mcp-server by @dependabot[bot] in #4408
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/postgres-mcp-server by @dependabot[bot] in #4407
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/prometheus-mcp-server by @dependabot[bot] in #4406
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/redshift-mcp-server by @dependabot[bot] in #4405
• chore(deps): update uv: bump cryptography from 45.0.7 to 50.0.0 in /src/stepfunctions-tool-mcp-server by @dependabot[bot] in #4400
• chore(deps): update uv: bump cryptography from 49.0.0 to 50.0.0 in /src/roda-mcp-server by @dependabot[bot] in #4404
• chore(deps): update uv: bump cryptography from 46.0.4 to 50.0.0 in /src/s3-tables-mcp-server by @dependabot[bot] in #4403
• chore(deps): update uv: bump cryptography from 46.0.3 to 50.0.0 in /src/sagemaker-ai-mcp-server by @dependabot[bot] in #4402
• chore(deps): update uv: bump cryptography from 48.0.0 to 50.0.0 in /src/security-agent-mcp-server by @dependabot[bot] in #4401
• chore(deps): update uv: bump the uv-security-updates group across 32 directories with 3 updates by @dependabot[bot] in #4433
• fix(aurora-dsql-mcp-server): raise dollar-quote timing threshold to fix flaky CI by @sergioperezcheco in #4373
• chore: Remove former team member from code owners by @anwesham-lab in #4435
• chore(deps): update uv: bump the uv-security-updates group across 31 directories with 3 updates by @dependabot[bot] in #4436
• chore(deps): update uv: bump the uv-security-updates group across 8 directories with 1 update by @dependabot[bot] in #4437
• fix(billing-cost-management-mcp-server): correct Compute Optimizer re… by @pputra in #4439
• fix(docusaurus): align @docusaurus/* to 3.10.2 and fix v4 build regressions by @scottschreckengaust in #4441
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.46.0 by @awslabs-mcp in #4442
• chore(aws-api-mcp-server): prepare 1.5.0 release by @arnewouters in #4444
• chore: release/2026.08.20260805092707 by @awslabs-mcp in #4445

New Contributors

• @agarwal-govind made their first contribution in #4300
• @sergioperezcheco made their first contribution in #4373
• @pputra made their first contribution in #4439

Full Changelog: 2026.08.20260803144303...2026.08.20260805092707

2026.08.20260803144303

2026.08.20260803144303

What's Changed

• chore(deps): update uv: bump gitpython from 3.1.44 to 3.1.54 in /samples/mcp-integration-with-kb by @dependabot[bot] in #4359
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.58 by @awslabs-mcp in #4374
• fix(aws-transform-mcp-server): discover instruction docs inside artifact-store folders by @jabouayash in #4344
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.59 by @awslabs-mcp in #4378
• fix(ecs-mcp-server): accept ISO-8601 string start_time/end_time in calculate_time_window by @valter-silva-au in #3788
• feat(billing-cost-management-mcp-server): add read-only invoice-units and procurement-preferences tools by @nvvijayatwork in #4136
• feat(billing-cost-management-mcp-server): Add multi-region support to the AWS Compute Optimizer Automation MCP tool by @mattkelsey in #4345
• fix(redshift-mcp-server): remove review_cluster false positives by @vsiniavin in #4351
• chore(dynamodb-mcp-server): update CODEOWNERS by @LeeroyHannigan in #4352
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.62 by @awslabs-mcp in #4386
• feat(amazon-mq): replace broker_hostname with broker_id lookup via DescribeBroker API by @BenAtAmazon in #4392
• chore: release/2026.08.20260803144303 by @awslabs-mcp in #4393

New Contributors

• @jabouayash made their first contribution in #4344
• @valter-silva-au made their first contribution in #3788
• @nvvijayatwork made their first contribution in #4136
• @BenAtAmazon made their first contribution in #4392

Full Changelog: 2026.07.20260728181317...2026.08.20260803144303

2026.07.20260728181317

2026.07.20260728181317

What's Changed

• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.54 by @awslabs-mcp in #4329
• feat(healthomics): add workflow_type filter to ListWorkflows tool by @steditt in #4119
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.55 by @awslabs-mcp in #4332
• fix(influxdb): tighten connection configuration handling by @fredjoonpark in #4149
• fix(amazon-bedrock-agentcore-mcp-server): preserve non-ASCII text in browser_evaluate results by @kimnamu in #3995
• fix(amazon-bedrock-agentcore): handle llms.txt fetch failure gracefully by @masamaru0513 in #4140
• feat(codeInterpreter): add list-files tool to MCP by @EA-b13 in #2802
• fix: pin ceiling mcp SDK <2.0.0 for servers using the removed mcp.server.fastmcp module by @scottschreckengaust in #4360
• chore: release/2026.07.20260728181317 by @awslabs-mcp in #4365

New Contributors

• @steditt made their first contribution in #4119
• @kimnamu made their first contribution in #3995
• @EA-b13 made their first contribution in #2802

Full Changelog: 2026.07.20260723053753...2026.07.20260728181317

2026.07.20260723053753

2026.07.20260723053753

What's Changed

• chore: updating code owner for timestream mcp by @fredjoonpark in #4276
• chore(aws-api-mcp-server): add deprecation warning by @arnewouters in #4313
• feat(redshift-mcp-server): add cluster_review diagnostic tool for cluster health assessment by @vsiniavin in #2955
• feat(billing-cost-management-mcp-server): add Compute Optimizer Automation sub-server to BCM MCP by @mattkelsey in #4095
• fix(redshift-mcp-server): correct serverless db name, map SHOW output by column name, drop execution_time_ms by @saeedma8 in #4127
• chore: release/2026.07.20260723053753 by @awslabs-mcp in #4328

New Contributors

• @vsiniavin made their first contribution in #2955
• @mattkelsey made their first contribution in #4095

Full Changelog: 2026.07.20260722140608...2026.07.20260723053753

2026.07.20260722140608

2026.07.20260722140608

What's Changed

• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.47 by @awslabs-mcp in #4128
• feat(docusaurus): add Japanese (ja) locale for the documentation site by @watilde in #4106
• docs(aws-api-mcp): update README.md by @arnewouters in #4129
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.48 by @awslabs-mcp in #4133
• fix(openapi-mcp-server): block external $ref SSRF/LFI in spec parsing by @prajwalendra in #4141
• chore(deps): group Dependabot updates across directories to stop the per-directory PR explosion by @scottschreckengaust in #4267
• fix(redshift-mcp-server): graceful cluster discovery when IAM lacks serverless or provisioned access by @S-gunasekhar in #3518
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.50 by @awslabs-mcp in #4272
• feat: add search_table tool for large table filtering by @alexisareyn in #3642
• fix(aws-iac-mcp-server): validate rules_file_path and harden invisible-char filter by @kdbrogan in #4085
• fix(aws-transform-mcp-server): refuse downloads when write-base is fi… by @eswarjal in #4270
• fix(cloudwatch-applicationsignals): validate enablement guide platform/language inputs by @wangzlei in #4046
• fix(eks-mcp-server): handle null optional fields in get_k8s_events by @edobusy in #4134
• fix(billing-cost-management-mcp-server): raise fastmcp floor to >=3.0.0 by @wangyuhere in #4271
• fix(eks-mcp-server): support EKS CAs without AKI by @jstar0 in #4121
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.51 by @awslabs-mcp in #4278
• chore: update IAM MCP codeowners by @arnewouters in #4284
• chore(deps): update github-actions: bump the github-actions-version-updates group across 1 directory with 18 updates by @dependabot[bot] in #4066
• chore(eks-mcp-server): update CODEOWNERS for eks-mcp-server by @srhsrhsrhsrh in #4290
• chore(codeowners): remove vishaalmehrishi from the list of AWS IaC MC… by @vishaalmehrishi in #4283
• fix(postgres-mcp-server): offload blocking boto3 credential calls in pool refresh by @aryanputta in #3809
• refactor(aws-documentation-mcp-server): drop seo_abstract from search result context by @zjerath in #4298
• fix(iam-mcp-server): partition-independent policy denylist and service-wildcard detection by @tildemit in #4268
• chore(aws-api-mcp-server): upgrade AWS CLI to v1.45.53 by @awslabs-mcp in #4301
• fix(aws-api-mcp-server): Security Policy Bypass via Startup Initialization Failure by @arnewouters in #4315
• chore: release/2026.07.20260722140608 by @awslabs-mcp in #4316

New Contributors

• @watilde made their first contribution in #4106
• @S-gunasekhar made their first contribution in #3518
• @eswarjal made their first contribution in #4270
• @edobusy made their first contribution in #4134
• @jstar0 made their first contribution in #4121
• @aryanputta made their first contribution in #3809
• @tildemit made their first contribution in #4268

Full Changelog: 2026.07.20260713210810...2026.07.20260722140608

2026.07.20260713210810

2026.07.20260713210810

What's Changed

• fix(healthomics): use batchName parameter in StartRunBatch call by @markjschreiber in #4089
• fix: fastmcp package to 3.2.0 by @scottschreckengaust in #4088
• fix(aurora-dsql-mcp-server): strip SQL comments before regex evaluation to prevent bypass by @pkale in #4029
• chore(codeowners): add spencercorwin as codeowner for aurora-dsql-mcp… by @spencercorwin in #4063
• docs(cloudwatch-mcp-server): remove regional availability disclaimers from PromQL tools by @gcacace in #3999
• fix(aurora-dsql): harden read-only mode against session-state mutation by @anwesham-lab in #4092
• fix(iam-mcp-server): make managed-policy denylist case-insensitive by @oshardik in #4101
• feat(billing-cost-management-mcp-server): add list-invoice-summaries tool for real invoice data with FX/local-currency, tax breakdowns, and PO numbers by @malpani in #4093
• chore: add path validation for params_file to block sensitive file reads by @jade710 in #3807
• chore: add do not release flag temporarily by @arnewouters in #4112
• docs: Add AWS MCP migration guide by @meghagoyal04 in #4114
• fix(mssql-mcp-server,oracle-mcp-server): Hardening secret manager access by making it a CLI parameter by @shreyaskshekhar in #3810
• feat(redshift-mcp-server): use SHOW commands for metadata discovery by @saeedma8 in #4109
• fix(openapi-mcp-server): DNS-pin spec fetches to prevent rebinding SSRF by @scottschreckengaust in #4108
• chore: release/2026.07.20260713210810 by @awslabs-mcp in #4126

New Contributors

• @pkale made their first contribution in #4029
• @spencercorwin made their first contribution in #4063
• @malpani made their first contribution in #4093
• @shreyaskshekhar made their first contribution in #3810
• @saeedma8 made their first contribution in #4109

Full Changelog: 2026.07.20260706214220...2026.07.20260713210810

2026.07.20260706214220

2026.07.20260706214220

What's Changed

• fix: roda-mcp update project script by @guyu-ye in #4086
• chore: release/2026.07.20260706214220 by @awslabs-mcp in #4087

Full Changelog: 2026.07.20260706200910...2026.07.20260706214220

2026.07.20260706200910

2026.07.20260706200910

What's Changed

• fix(redshift-mcp-server): serialize the per-cluster:database session by @grayhemp in #4055
• feat(aurora-dsql): add EF Core .NET ORM adapter guidance by @praba2210 in #4060
• fix(eks): treat blank insight_id as list mode in get_eks_insights by @syf2211 in #4072
• feat: add RODA MCP server by @guyu-ye in #4038
• chore: exclude *.drawio from license header check by @scottschreckengaust in #4082
• chore: release/2026.07.20260706200910 by @awslabs-mcp in #4084

New Contributors

• @syf2211 made their first contribution in #4072
• @guyu-ye made their first contribution in #4038

Full Changelog: 2026.07.20260702161703...2026.07.20260706200910