CHANGELOG.md

@@ -1,5 +1,14 @@
 ## Changelog
 
+## 1.0.1
+* [#627](https://github.com/awslabs/amazon-kinesis-producer/pull/627) Upgrade dependency versions to fix vulnerabilities
+  * Upgrade curl to 8.12.0
+  * Upgrade openssl to 3.4.0
+  * Upgrade zlib to 1.3.1
+  * Upgrade schema-registry-serde to 1.1.23
+* [#623](https://github.com/awslabs/amazon-kinesis-producer/pull/623) Update SampleProducer.java with guidance on calling flushSync()
+* [#619](https://github.com/awslabs/amazon-kinesis-producer/pull/619) Update README.md with guidance on recommended upgrade
+
 ## 1.0.0
 * [#614](https://github.com/awslabs/amazon-kinesis-producer/pull/614) Upgrade to AWS SDK for Java 2.x
   * Upgrade protobuf-java to 4.29.0

README.md

@@ -1,5 +1,13 @@
 # Kinesis Producer Library
 
+>[!Important]
+> ### Amazon Kinesis Producer Library (KPL) 0.x will reach end-of-support on January 30, 2026
+> Amazon Kinesis Producer Library (KPL) 0.x will reach end-of-support on January 30, 2026. Accordingly, the version will enter maintenance mode on April 17, 2025. During maintenance mode, AWS will provide updates only for critical bug fixes and security issues. Major versions in maintenance mode will not receive updates for new features or feature enhancements. If you’re using KPL 0.x, we recommend migrating to the latest version. When migrating from KPL 0.x to 1.x, you can upgrade your current KPL application without any change in your data processing logic. For details about the end-of-support notice and required actions, see the following links:
+> 
+> * [AWS Blog: Announcing end-of-support for Amazon Kinesis Client Library 1.x and Amazon Kinesis Producer Library 0.x effective January 30, 2026](https://aws.amazon.com/blogs/big-data/announcing-end-of-support-for-amazon-kinesis-client-library-1-x-and-amazon-kinesis-producer-library-0-x-effective-january-30-2026/)
+> * [Kinesis documentation: KPL version lifecycle policy](https://docs.aws.amazon.com/streams/latest/dev/kpl-version-lifecycle-policy.html)
+> * [Kinesis documentation: Migrate from KPL 0.x to KPL 1.x](https://docs.aws.amazon.com/streams/latest/dev/kpl-migration-1x.html)
+
 ## Introduction
 
 The Amazon Kinesis Producer Library (KPL) performs many tasks common to creating efficient and reliable producers for [Amazon Kinesis][amazon-kinesis]. By using the KPL, customers do not need to develop the same logic every time they create a new application for data ingestion.
@@ -64,6 +72,15 @@ This is a restatement of the [notice published](https://docs.aws.amazon.com/stre
 
 ## Release Notes
 
+## 1.0.1
+* [#627](https://github.com/awslabs/amazon-kinesis-producer/pull/627) Upgrade dependency versions to fix vulnerabilities
+  * Upgrade curl to 8.12.0
+  * Upgrade openssl to 3.4.0
+  * Upgrade zlib to 1.3.1
+  * Upgrade schema-registry-serde to 1.1.23
+* [#623](https://github.com/awslabs/amazon-kinesis-producer/pull/623) Update SampleProducer.java with guidance on calling flushSync()
+* [#619](https://github.com/awslabs/amazon-kinesis-producer/pull/619) Update README.md with guidance on recommended upgrade
+
 ## 1.0.0
 Check [this AWS Kinesis Data Streams Developer Guide](https://docs.aws.amazon.com/streams/latest/dev/kpl-migration-1x.html) to migrate to KPL 1.0.0 from previous KPL verions.
 * [#614](https://github.com/awslabs/amazon-kinesis-producer/pull/614) Upgrade to AWS SDK for Java 2.x
@@ -291,4 +308,4 @@ There are two options. You can either pack the binaries into the jar like we did
 
 #### Pointing the Java wrapper at a Custom Binary
 
-The `KinesisProducerConfiguration` class provides an option `setNativeExecutable(String val)`. You can use this to provide a path to the `kinesis_producer[.exe]` executable you have built. You have to use backslashes to delimit paths on Windows if giving a string literal.
+The `KinesisProducerConfiguration` class provides an option `setNativeExecutable(String val)`. You can use this to provide a path to the `kinesis_producer[.exe]` executable you have built. You have to use backslashes to delimit paths on Windows if giving a string literal.

aws/kinesis/core/kinesis_producer.cc

@@ -45,7 +45,7 @@ struct EndpointConfiguration {
           sts_endpoint_(sts_endpoint) {}
 };
 
-const constexpr char* kVersion = "1.0.0N";
+const constexpr char* kVersion = "1.0.1N";
 const std::unordered_map< std::string, EndpointConfiguration > kRegionEndpointOverride = {
   { "cn-north-1", { "kinesis.cn-north-1.amazonaws.com.cn", "monitoring.cn-north-1.amazonaws.com.cn" } },
   { "cn-northwest-1", { "kinesis.cn-northwest-1.amazonaws.com.cn", "monitoring.cn-northwest-1.amazonaws.com.cn" } }

java/amazon-kinesis-producer-sample/pom.xml

@@ -3,7 +3,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>software.amazon.kinesis</groupId>
     <artifactId>amazon-kinesis-producer-sample</artifactId>
-    <version>1.0.0</version>
+    <version>1.0.1</version>
     <build>
         <sourceDirectory>src</sourceDirectory>
         <plugins>
@@ -54,7 +54,7 @@
         <dependency>
             <groupId>software.amazon.kinesis</groupId>
             <artifactId>amazon-kinesis-producer</artifactId>
-            <version>1.0.0</version>
+            <version>1.0.1</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>

java/amazon-kinesis-producer/pom.xml

@@ -3,7 +3,7 @@
     <modelVersion>4.0.0</modelVersion>
     <groupId>software.amazon.kinesis</groupId>
     <artifactId>amazon-kinesis-producer</artifactId>
-    <version>1.0.0</version>
+    <version>1.0.1</version>
     <name>Amazon Kinesis Producer Library</name>
 
     <scm>

java/amazon-kinesis-producer/src/main/java/software/amazon/kinesis/producer/GlueSchemaRegistrySerializerInstance.java

@@ -11,7 +11,7 @@
 public final class GlueSchemaRegistrySerializerInstance {
 
     private volatile GlueSchemaRegistrySerializer instance = null;
-    private static final String USER_AGENT_APP_NAME = "kpl-1.0.0";
+    private static final String USER_AGENT_APP_NAME = "kpl-1.0.1";
 
     /**
      * Instantiate GlueSchemaRegistrySerializer using the KinesisProducerConfiguration.