v4.0.2

[4.0.2] - 2025-12-09

Changed

• jetty-http package has been reverted to a previous version to support HTTP2 JMeter plugin.
• Improvements to cron-base scheduling with clarification between UTC and local time zones.

Fixed

• Resolved issues related to zipped files when migrating from v3 for v4. Load tests created in v3 should now correctly reference the existing zip test script and be downloadable from the test scenario page.
• Fixed a bug where tags would not be saved when creating or updating a scheduled load test.
• Fixed a bug where non-integer http status code responses would fail to render in the results dashboard.

Security

• Update to address vulnerability in CVE-2025-66418
• Update to address vulnerability in CVE-2025-66471
• Upgrade to the latest Amazon Linux base image SHA256 hash

v4.0.1

[4.0.1] - 2025-11-21

Security

• Pin Amazon Linux base image to SHA256 hash in order to improve integrity, prevent tampering, and improve the reproducibility of builds across environments.

Fixed

• Fix regression where load tests with zipped test scripts will fail to unzip when zipped without a parent directory.

v4.0.0

[v4.0.0] - 2025-11-19

Added

• MCP Server Integration - Added the ability for AI agents to programmatically create, run, and analyze load tests through Amazon Bedrock AgentCore
• Live Data Visualization - Added ability to visualize live test data by region with auto-refresh functionality
• Test Results Comparison - Added the ability to highlight differences between
  test results and deviations from a reference baseline test
• Tags for Test Scenarios - Added the ability to tag test scenarios for easier searching and grouping
• Downloadable Test Results - Added the ability to download test results from the front-end

Changed

• User Interface - A complete frontend rewrite built on React, the Cloudscape design system, and Redux state management

Fixed

• Cron Scheduling Issues - Fixed cron expression parsing and validation
• Infinite Fetching - Fixed infinite fetching of test results

Security

• CloudFront Security Headers - Added security headers policy with CSP, HSTS, Permissions-Policy, and CORP
• Resolved Vulnerabilities - Resolved security vulnerabilities in multiple npm and Python dependencies

v3.4.6

[v3.4.6] - 2025-11-13

Security

• Update to address vulnerability in CVE-2025-6176
• Update to address vulnerability in CVE-2025-58188

v3.4.5

[3.4.5] - 2025-11-03

Security

• Update to address vulnerability in CVE-2025-54988

v3.4.4

[3.4.4] - 2025-10-08

Security

• Update container image to resolve libexpat vulnerability

v3.4.3

[3.4.3] - 2025-09-19

Fixed

• Resolve issue with regional templates failing to deploy

Security

• Update axios to fix CVE-2025-58754
• Update npm dependencies

v3.4.2

[3.4.2] - 2025-09-09

Fixed

• Fixed Dockerfile to remove locust from excluded plugins installation list.

Security

• Update Flask-Cors from 4.0.2 to 6.0.0 to fix CVE-2024-6221, CVE-2024-6839, CVE-2024-6844, CVE-2024-6866
• Update setuptools to 80.9.0 to fix CVE-2025-47273 and CVE-2024-6345
• Update pip to 25.2 to fix CVE-2023-5752
• Update Jetty HTTP/2 to fix CVE-2025-5115

v3.4.1

[3.4.1] - 2025-08-11

Security

• Update libxml2 to fix CVE-2025-49794
• Update libxml2 to fix CVE-2025-49795
• Update libxml2 to fix CVE-2025-49796
• Update java-21-amazon-corretto to fix CVE-2025-30749
• Update java-21-amazon-corretto to fix CVE-2025-50106
• Update java-21-amazon-corretto to fix CVE-2025-50049

Fixed

• Fixed issue pertaining to #244

Added

• Add stable tag feature to get patched version of the solution ecr image.

v3.4.0

[3.4.0] - 2025-07-23

Added

• Added support for K6 framework
• Added support Locust framework
• Added MQTT protocol performance testing through Locust framework

Removed

• ServiceCatalog Application Registry integration

Fixed

• Fixed issues pertaining to #187
• Fixed issue pertaining to #191

Security

• Update form-data to fix CVE-2025-7783