Amazon SSM Agent፦ ሁሉም ስሪቶች እና የቆዩ ስሪቶች

- Normalize scheme-less Ssm.Endpoint before baking it into SDK LoadOptions

- Bump golang.org/x/sys from v0.47.0 to v0.48.0
- Bump golang.org/x/net from v0.57.0 to v0.60.0
- Upgrade Go version to 1.26.10

- Bug fixes for aws-sdk-go-v2
- Upgrade Go version to 1.26.9

- Bump github.com/gorilla/websocket from v1.4.2 to v1.5.3
- Bump golang.org/x/crypto from v0.53.0 to v0.56.0
- Bump golang.org/x/net from v0.56.0 to v0.57.0
- Bump golang.org/x/sys from v0.46.0 to v0.47.0
- Upgrade GoLang version from 1.25 to 1.26
- Mint control-channel token after dial to fix AZ-fault token expiry
- Resume patch documents interrupted by an external shutdown
- Use systemctl for systemd in aws: configureDocker on Amazon Linux
- Update greengrass component version to 1.3.5

- Add bounds check for HeaderLength in AgentMessage Deserialize
- Bump github.com/go-git/go-git/v5 to v5.19.2
- Bump golang.org/x/sync to v0.21.0
- Detect Azure Linux and potential future unregistered Linux platforms
- Fix Windows session command parsing by removing shlex
- Fix shell injection in Windows domainjoin plugin parameters
- Prevent control channel deadlock on ProcessorBufferFull
- Revert migration from aws-sdk-go v1 to aws-sdk-go-v2 change
- Update the logic for loading RegistrationInfo
- Upgrade Go version to 1.25.13

- Add ECS/EKS credential endpoints and loopback to port-forward denylist
- Canonicalize IP addresses before port-forwarding denylist check
- Pass the ActiveDirectory domain password via stdin using -y /dev/stdin instead of the -w flag
- Fix false StuckAtInProgress timeout for associations with rate >= 2h
- Fix non-interactive session big file transfer issues
- Prevent ssm-user race condition with flock-based serialization
- Send AWSEC2Instance as source type when registered with provider EC2
- Validate process name in orphan worker detection

- Add multicloud support enabling SSM Agent registration with Azure cloud providers
- Add support for the upcoming public key in the agent code

- Bump golang.org/x/crypto from v0.51.0 to v0.52.0
- Bump golang.org/x/net from v0.54.0 to v0.55.0
- Enforce directory boundary in BuildSafePath
- Fix visibility issue with Bottlerocket OS in document output
- Update go-git from v5.17.1 to v5.19.1

- Bump golang.org/x/net from v0.48.0 to v0.53.0
- Quit if sysprep failed and log its current state
- Remove attached legacy cloudwatch plugin packages
- Upgrade Go version to 1.25.10
- Use BuildSafePath wherever it is applicable

- Add SSM Distributor support for Bottlerocket OS
- Implement flush credentials command in ssm-cli
- Log ec2messages access denied as debug instead of error to reduce log noise
- Make credential refresher refresh cache quickly in case of credential flush
- Make Greengrass component registration resilient with retry

- Add EnforceWorkspaceRootOwnership configuration to support disable hardening of agent workspace
- Add reboot comment to Windows shutdown command for SSM Agent traceability
- Update privilege access check to verify ownership and permissions of document state files

- Add read-only version check prior to install and uninstall in case of occupied package manager locks
- Add ANSI processing for CloudWatch and S3 log
- Upgrade go-git to v5.17.0 and cloudflare/circl to v1.6.3 to fix CVE-2026-1229

- Disable Go 1.25 container-aware GOMAXPROCS to prevent holding cgroup file descriptors open
- Upgrade Go version to 1.25.8

- Add EU sovereign cloud S3 endpoint for DownloadContent plugin
- Add configurable credential rotation max backoff interval

- Migrate from twinj/uuid to google/uuid library
- Allow newer agent versions to be installed when deploying on Greengrass
- Harden function to remove non-admin run command documents in execution path
- Fix macOS credential refresher test issue due to missing Debugf from serialport skip file
- Enhance testability of custom certificate usage in debug SSM Agent builds
- Decouple serial port from startup and add credential refresher serialport logging
- Add GlobalEnhancedTelemetryEnabled config to README
- Add cloudwatch logs endpoint configuration to optional config for agent
- Update Greengrass component version

- Allow custom hibernation max interval configuration
- Refactor hibernation to fix ping leak and correct interval behavior
- Remove dependency on s3:GetObject for aws:configurePackage plugin
- Fix issue where ssm-setup-cli fails to detect whether agent is running or stopped in non-English locales
- Fix comparison operator issue in aws:domainJoin script when executed in Ubuntu dash
- Fix IPV6 address for IMDS in documentation and deny rule
- Add hasHardenedACL check to avoid costly recursive hardening of the data directory on reboot
- Update golang.org/x/crypto from v0.32.0 to v0.36.0
- Update golang.org/x/net from v0.34.0 to v0.37.0
- Update golang.org/x/sys from v0.29.0 to v0.31.0
- Update golang.org/x/oauth2 from v0.24.0 to v0.28.0
- Upgrade GoLang version from v1.22 to v1.23
- Update Argot config and ensure client uses DisableHTTPDowngrade
- Add unit tests in multiple modules

- Revert "Update configurePackage to use fixed download method"
- Revert "Use a single syscall for route table for health check IP"