OS Changes

• Update bottlerocket-kernel-kit from 9.6.0 to 9.6.2 CHANGELOG (commits) (#4993)

Release Highlights

• Add NVIDIA driver branch selection at boot for NVIDIA variants using the 6.1 and 6.12 kernels (bottlerocket-kernel-kit#566)

OS Changes

• Update bottlerocket-kernel-kit from 9.4.1 to 9.6.0 CHANGELOG (commits) (#4971,#4981)
• Update bottlerocket-core-kit from 17.2.0 to 17.4.0 CHANGELOG (commits) (#4981)

Orchestrator Changes

Kubernetes

• Update Kubernetes 1.31 through 1.36 to their latest EKS Distro releases (bottlerocket-core-kit#1075)
• Update eni-max-pods with new instance types and corrected limits (bottlerocket-core-kit#1085)
• Normalize container paths for NVIDIA user space libraries components (bottlerocket-core-kit#1083)

Build Changes

• Update Twoliter from 0.25.1 to 0.26.0 (#4968)
• Increase reproducibility by using deterministic filesystem UUIDs, partition GUIDs, and build timestamps (twoliter#759)
• Update bottlerocket-sdk from 0.80.0 to 0.81.1 (#4981)

OS Changes

• Update bottlerocket-core-kit from 17.0.0 to 17.2.0 CHANGELOG (commits) (#4959, #4961)
• Update bottlerocket-kernel-kit from 9.2.0 to 9.4.1 CHANGELOG (commits) (#4959, #4960, #4965)
• Default to nvidia.NVreg_CoherentGPUMemoryMode=driver on aws-mantle-1-nvidia and aws-mantle-1-nvidia-fips variants (#4952)

Orchestrator Changes

Kubernetes

• Fix mapping for ids-per-pod in kubelet-config (bottlerocket-core-kit#1060) - Thanks @rosem!

Build Changes

• Update bottlerocket-sdk from 0.79.0 to 0.80.0 (commits) (#4959)
• Update Twoliter from 0.25.0 to 0.25.1 (#4957)

Documentation Changes

• Describe the SBOM shipped in each image (#4958)

Release Highlights

• Add new Kubernetes 1.37 variants (#4935)
  • Add aws-k8s-1.37, aws-k8s-1.37-nvidia, aws-k8s-1.37-fips, aws-k8s-1.37-nvidia-fips, vmware-k8s-1.37, and vmware-k8s-1.37-fips variants
  • All k8s-1.37 variants, including FIPS variants, use kernel-6.18 and containerd-2.3
• Add opt-in NVIDIA GPU DRA support for Kubernetes 1.34-1.37 NVIDIA variants, including FIPS variants (#4926, bottlerocket-core-kit#1035)
• Add NVIDIA driver branch selection at boot for aws-k8s-1.37-nvidia and aws-k8s-1.37-nvidia-fips (#4939, bottlerocket-core-kit#1041, bottlerocket-kernel-kit#536)
• Remove /usr/lib/nvidia/tesla/ compatibility symlinks inside containers on Kubernetes 1.37 NVIDIA variants (#4942, bottlerocket-core-kit#1044)

Security Fixes

• Fix Nitro Enclaves use-after-free on SLOT_ALLOC failure (bottlerocket-kernel-kit#550)
• Backport patches to fix TUN and AH6 bugs in the networking stack (bottlerocket-kernel-kit#559)

OS Changes

• Update bottlerocket-core-kit from 16.3.0 to 17.0.0 CHANGELOG (commits) (bottlerocket-core-kit#1045)
• Update bottlerocket-kernel-kit from 9.1.0 to 9.2.0 CHANGELOG (commits) (bottlerocket-kernel-kit#561)
• Update admin-container from 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945)
• Update control-container from 0.21.5 to 0.21.6 CHANGELOG (commits) (#4945)
• Update bootstrap-container from 0.3.5 to 0.3.6 CHANGELOG (commits) (#4945)
• Boot aws-mantle-1 variants directly from UKIs (#4937, bottlerocket-core-kit#1042)
• Disable host containers by default and disable corgid SBOM uploads for aws-mantle-1 variants (#4937)

Orchestrator Changes

Kubernetes

• Add settings.kubernetes.memory-reservation-policy and settings.kubernetes.memory-throttling-factor (#4922, bottlerocket-core-kit#1029)

Build Changes

• Update Twoliter from 0.24.0 to 0.25.0 (#4944)
• Update bottlerocket-settings-models to v0.29.0 (#4926, #4939)
• Add key for signing UKIs locally (#4936)
• Add UKI mode for generating AWS Secure Boot keys (#4940)

Release Highlights

• logdog now captures systemd-pstore kernel dumps (#4927, bottlerocket-core-kit#1028)
• Superpowered containers now receive all kernel-known capabilities (#4911, bottlerocket-core-kit#987) - Thanks @anirbag

OS Changes

• Update bottlerocket-core-kit from 15.0.0 to 16.3.0 CHANGELOG (commits) (#4911, #4927, #4931, #4908)
• Update bottlerocket-kernel-kit from 7.2.1 to 9.1.0 CHANGELOG (commits) (#4911, #4912, #4919, #4921, #4931)
• Update admin-container from 0.21.4 to 0.21.5 CHANGELOG (commits) (#4917)
• Update control-container from 0.21.4 to 0.21.5 CHANGELOG (commits) (#4917)
• Update bootstrap-container from 0.3.4 to 0.3.5 CHANGELOG (commits) (#4917)
• Drop metrics API from aws-dev variant (#4932)

Build Changes

• Update bottlerocket-sdk from 0.77.0 to 0.79.0 (commits) (#4911, #4931)
• Update Twoliter from 0.20.0 to 0.24.0 (#4900, #4905, #4914, #4918)
• Add commitlint workflow for PR commit messages (#4902)
• Update root.json hash in docs (#4904)

Release Highlights

• Add support for static and transparent hugepages (#4864, bottlerocket-core-kit#952)
• Remove aws-k8s-1.30 variants (#4880)

OS Changes

• Update bottlerocket-core-kit from 14.8.0 to 15.0.0 CHANGELOG (commits) (#4892, #4897)
• Update bottlerocket-kernel-kit from 7.0.1 to 7.2.1 CHANGELOG (commits) (#4892, #4897, #4898)
• Update admin-container from 0.21.3 to 0.21.4 CHANGELOG (commits) (#4893)
• Update control-container from 0.21.3 to 0.21.4 CHANGELOG (commits) (#4893)
• Update bootstrap-container from 0.3.3 to 0.3.4 CHANGELOG (commits) (#4893)

Orchestrator Changes

Kubernetes

• Add settings.kubernetes.container-runtime-endpoint (#4890, bottlerocket-core-kit#968) - Thanks @shvbsle!

Build Changes

• Update bottlerocket-sdk from 0.76.0 to 0.77.0 (commits) (#4897)

Release Highlights

• Add gdrcopy driver to aws-ecs-4-nvidia variant (#4874)
• Add image verification settings and packages to k8s-1.33-k8s-1.36 variants and expand ecs-3 and ecs-4 image verification (#4832)
• Add setting to enable/disable nvidia-device-plugin (#4856, bottlerocket-core-kit#914)
• Normalize NVIDIA library paths to /usr/lib/ (bottlerocket-core-kit#919, bottlerocket-kernel-kit#425, bottlerocket-kernel-kit#473)

OS Changes

• Update bottlerocket-core-kit from 14.5.1 to 14.8.0 CHANGELOG (commits) (#4865, #4873, #4883)
• Update bottlerocket-kernel-kit from 6.0.0 to 7.0.1 CHANGELOG (commits) (#4865, #4875, #4876, #4883, #4886)
• Update admin-container from 0.21.2 to 0.21.3 CHANGELOG (commits) (#4876)
• Update control-container from 0.21.2 to 0.21.3 CHANGELOG (commits) (#4876)
• Update bootstrap-container from 0.3.2 to 0.3.3 CHANGELOG (commits) (#4876)

Build Changes

• Update bottlerocket-sdk from 0.74.0 to 0.76.0 (commits) (#4865)
• Update twoliter from 0.19.0 to 0.20.0 CHANGELOG (commits) (#4847)

Security Fixes

• Patch kernel-6.1, kernel-6.12 and kernel-6.18 to mitigate CVE-2026-31694, CVE-2026-46242 and CVE-2026-53362 (bottlerocket-kernel-kit#481, bottlerocket-kernel-kit#482)

Security Fixes

• Patch containerd-1.7, containerd-2.1, containerd-2.2 to mitigate CVE-2026-50195, CVE-2026-53488, CVE-2026-53492, CVE-2026-53489, and CVE-2026-47262 (bottlerocket-core-kit#93b33327)

OS Changes

• Update bottlerocket-core-kit from 14.4.0 to 14.5.1 CHANGELOG (commits) (bottlerocket-core-kit#5f13b929)
• Update admin-container from 0.21.0 to 0.21.2 CHANGELOG (commits) (#4857)
• Update control-container from 0.21.0 to 0.21.2 CHANGELOG (commits) (#4857)
• Update bootstrap-container from 0.3.0 to 0.3.2 CHANGELOG (commits) (#4857)

Release Highlights

• Enable squashfs support for kernel-6.12 and kernel-6.18 (bottlerocket-kernel-kit#442)

OS Changes

• Update bottlerocket-core-kit from 14.3.0 to 14.4.0 CHANGELOG (commits) (#4848)
• Update bottlerocket-kernel-kit from 5.5.0 to 6.0.0 CHANGELOG (commits) (#4850)

Build Changes

• Update bottlerocket-sdk from 0.73.0 to 0.74.0 (commits) (#4848)

Release Highlights

• Add new Kubernetes 1.36 variants (#4827)
  • Add aws-k8s-1.36, aws-k8s-1.36-nvidia, aws-k8s-1.36-fips, aws-k8s-1.36-nvidia-fips, vmware-k8s-1.36, and vmware-k8s-1.36-fips variants
  • All k8s-1.36 variants will use containerd-2.2
  • All non-FIPS k8s-1.36 variants will use kernel-6.18 while FIPS variants will use kernel-6.12
• New ecs-4 variants are now available as a preview (#4840)
  • Add aws-ecs-4, aws-ecs-4-nvidia variants
  • All ecs-4 variants use kernel-6.18

Security Fixes

• Patch kernel-6.1, kernel-6.12 and kernel-6.18 to mitigate CVE-2026-43284 (bottlerocket-kernel-kit#431, bottlerocket-kernel-kit#432, bottlerocket-kernel-kit#433)

OS Changes

• Update bottlerocket-core-kit from 14.2.0 to 14.3.0 CHANGELOG (commits) (#4827)
• Update bottlerocket-kernel-kit from 5.4.1 to 5.5.0 CHANGELOG (commits) (#4837)
• Update admin-container from 0.20.6 to 0.21.0 CHANGELOG (commits) (#4842)
• Update control-container from 0.20.6 to 0.21.0 CHANGELOG (commits) (#4842)
• Update bootstrap-container from 0.2.16 to 0.3.0 CHANGELOG (commits) (#4842)

Build Changes

• Update twoliter from 0.17.0 to 0.19.0 CHANGELOG (commits) (#4803, #4839)