AWS m2: Add AWS Transform for mainframe 5.274.0 release notes incl. OAuth hardening
Summary
Adds the 5.274.0 release notes section for AWS Transform for mainframe Runtime and Transformation Engines, covering zOS/AS400 improvements (COBOL, CICS, Blusam, Easytrieve, Redis, IMS, JCL, RPG) and a Security item noting hardened OAuth resource server scope-to-role mapping and enforced client_id validation to prevent low-privileged tokens from obtaining elevated roles.
Security assessment
The added Security bullet explicitly describes fixing a privilege-escalation weakness in the OAuth resource server: scope-to-role mapping was hardened and client_id validation enforced so low-privileged tokens can no longer be granted elevated roles. This is a concrete authorization/authentication fix, not merely general guidance.
Evidence
* Hardened the OAuth resource server's scope-to-role mapping and enforced client_id validation, preventing low-privileged tokens from being granted elevated roles
Diff
diff --git a/m2/latest/userguide/ba-release-notes.md b/m2/latest/userguide/ba-release-notes.md index cd8afd26b..54e70a3d5 100644 --- a//m2/latest/userguide/ba-release-notes.md +++ b//m2/latest/userguide/ba-release-notes.md @@ -7 +7 @@ -Release notes 5.194.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.125.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.75.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.1.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesAWS Transform for mainframe Transformation Engines & Runtime for GS21Release notes 4.10.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 4.9.0Runtime release 4.9.0AWS Transform for mainframe Transformation Engine 4.9.0Release notes 4.8.0Runtime release 4.8.0AWS Transform for mainframe Transformation Engine 4.8.0Release notes 4.7.0Runtime release 4.7.0AWS Transform for mainframeTransformation Engine 4.7.0Release notes 4.6.0Runtime release 4.6.0AWS Transform for mainframe Transformation Engine 4.6.0Release notes 4.5.0Runtime release 4.5.0AWS Transform for mainframe Transformation Engine 4.5.0Release notes 4.4.0Runtime release 4.4.0AWS Transform for mainframe Transformation Engine 4.4.0Release notes 4.3.0Runtime release 4.3.0Modernization tools release 4.3.0Release notes 4.2.0Runtime release 4.2.0Modernization tools release 4.2.0Release notes 4.1.0Runtime release 4.1.0Modernization tools release 4.1.0Release notes 4.0.0Runtime release 4.0.0Modernization tools release 4.0.0Release notes 3.10.0Runtime release 3.10.0Modernization tools release 3.10.0Release notes 3.9.0Runtime release 3.9.0Modernization tools release 3.9.0Release notes 3.8.0Runtime release 3.8.0Modernization tools release 3.8.0Release notes 3.7.0Runtime release 3.7.0Modernization tools release 3.7.0Release notes 3.6.0Runtime release 3.6.0Modernization tools release 3.6.0Release notes 3.5.0Runtime release 3.5.0Modernization tools release 3.5.0 +Release notes 5.274.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.194.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.125.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.75.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 5.1.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesAWS Transform for mainframe Transformation Engines & Runtime for GS21Release notes 4.10.0AWS Transform for mainframe RuntimeAWS Transform for mainframe Transformation EnginesRelease notes 4.9.0Runtime release 4.9.0AWS Transform for mainframe Transformation Engine 4.9.0Release notes 4.8.0Runtime release 4.8.0AWS Transform for mainframe Transformation Engine 4.8.0Release notes 4.7.0Runtime release 4.7.0AWS Transform for mainframeTransformation Engine 4.7.0Release notes 4.6.0Runtime release 4.6.0AWS Transform for mainframe Transformation Engine 4.6.0Release notes 4.5.0Runtime release 4.5.0AWS Transform for mainframe Transformation Engine 4.5.0Release notes 4.4.0Runtime release 4.4.0AWS Transform for mainframe Transformation Engine 4.4.0Release notes 4.3.0Runtime release 4.3.0Modernization tools release 4.3.0Release notes 4.2.0Runtime release 4.2.0Modernization tools release 4.2.0Release notes 4.1.0Runtime release 4.1.0Modernization tools release 4.1.0Release notes 4.0.0Runtime release 4.0.0Modernization tools release 4.0.0Release notes 3.10.0Runtime release 3.10.0Modernization tools release 3.10.0Release notes 3.9.0Runtime release 3.9.0Modernization tools release 3.9.0Release notes 3.8.0Runtime release 3.8.0Modernization tools release 3.8.0Release notes 3.7.0Runtime release 3.7.0Modernization tools release 3.7.0Release notes 3.6.0Runtime release 3.6.0Modernization tools release 3.6.0Release notes 3.5.0Runtime release 3.5.0Modernization tools release 3.5.0 @@ -22,0 +23,263 @@ For release notes predating this document, contact AWS Transform for mainframe d +## Release notes 5.274.0 + +Released on: September 14, 2026 + +This release of AWS Transform for mainframe Runtime and Transformation Engines focuses on data-access performance, expanded Easytrieve support, and broader AS/400 coverage. + +This version of the AWS Transform for mainframe Runtime has been tested with the following stack: + +**Component** | **Version tested** +---|--- +Java | Java 21 +Presentation layer | Node JS 24.11.1 +Npm 11.6.2 +Angular 21 +Service layer | Spring Boot 4.0.6 +Spring Core 7.0.6 +Spring Session 3.5.2 +Spring statemachine 4.0.0 +Persistence layer | PostgreSQL engine 15.10 +Oracle 21c +Report | Jasper 7 +Application server | Apache Tomcat 11.0.15 + +## AWS Transform for mainframe Runtime + +### zOS + +###### Improvements + + * COBOL + + * Improved UNSTRING to preserve whitespace-like trailing bytes in alphanumeric receivers + + * Aligned level-88 condition evaluation with legacy semantics by comparing on the raw bytes + + * Improved support for JUSTIFIED RIGHT alignment on MOVE operations from Group item to elementary fields + + * Improved support for data structure initialization for INITIALIZE REPLACING statement and NUMERIC-EDITED fields + + * Hardened ILBOABN0 abend-code decoding for CALL USING arguments shorter than four bytes, including halfword abend codes + + * CICS + + * Added support for invoking remote-name programs in CICS LINK/XCTL, resolved to the local runtime + + * Blusam + + * Added configurable in-memory record-lock cleanup via `bluesam.locks.locksCleanupIntervalMillis` (disabled by default) to limit memory growth during long-running processing + + * Improved support for legacy file names when loading large-KSDS files + + * Added removeIndexesOnClose option to bound Redis index-cache growth. + + * Improved data loading for KSDS and large-KSDS datasets through BAC. + + * Added optional external DDL management (`bluesam.externalDdlManagement`, disabled by default), letting tables be created outside Blusam + + * Improved Redis lock-state lifecycle management. + + * Added a configurable Redis cache-clear strategy (`bluesam.redis.clearStrategy`, default DEFAULT) with pattern-based (REDISSON) and batched-scan (REDISSON_BATCHED) modes for large datasets, with a configurable batch size (`bluesam.redis.batchClearSize`, default 1000) for the batched-scan mode + + * Added READ_INVALID_KEY handling for large-KSDS reads. + + * Improved relative-key generation for RRDS files when the key is a range reference + + * Added a compact pattern syntax for the metadata warm-up file list (`bluesam.metadataWarmUpFileList`), using a pipe separator with comma-separated prefixes + + * Extended the dataset Clear operation to release object identifiers along with the data. + + * Improved open/close performance by eliminating redundant Redis calls. + + * Easytrieve + + * Improved PCB binding when DL/I databases are accessed outside JOB INPUT + + * Improved handling of the VSAM KSDS primary-key offset when the relative key position is greater than zero + + * Added support for VSAM AIX files in batch/JCL context + + * Improved support for masked (MASK) fields with floating-character formatting and arithmetic operations + + * Improved support for masked packed-type variables + + * Redis + + * Added Blusam Redisson connection tuning for timeout, retry attempts, and retry interval. + + * Improved Redis connection configuration to apply the username parameter properly on authenticated connections. + + * Added support for direct Redis caching of records, with TTL and single or batch operations, as a database-free alternative for transient data. + + * IMS - DBD + + * Improved DL/I GU multi-SSA path-call handling for secondary-index (PROCSEQ) root resolution with unqualified child segments + + * Improved support for GN/GNP navigation through a PROCSEQ PCB, honoring the secondary-index processing sequence across root boundaries + + * IMS - CBLTDLI + + * Improved JHDB sequential-read performance with an optional node-cache retention property (`jhdb.optim.cacheRetention`, disabled by default) that reduces database round-trips across GN loops + + * SQL + + * Improved lambda-function handling for SQL BASED host variables in PL/I + + * Added support for the LAST_DAY function on the PostgreSQL database engine + + * Enhanced SQL generation to handle additional UNION ALL and EXCEPT clauses + + * JCL + + * Added support for the IEBPTPCH utility. + + * Added automatic subfolder creation on flat-file access. + + * JCL - SORT + + * Improved support for INREC/OUTREC with hexadecimal conversion. + + * Improved support for OUTFIL FNAMES with short (1–2 character) DD names + + * Enhanced the trigger-script endpoint with standard-output file printing and improved batch-script output-file production + + * JCL - ICEGENER + + * Added support for JCL submission via the internal reader (INTRDR) + + * Improved support for ADV byte computing in catalog record size + + * JCL - DSNUTILB + + * Added support for RUNSTATS TABLESPACE + + * Improved support for LOAD RESUME YES on large tables to avoid OOM + + * JCL - DSNTEP + + * Added support for queries split across multiple files. + + * Improved support for REPRO to report RC=12 and error U4020 for a missing input dataset, matching z/OS behavior. + + * JCL - IDCAMS + + * Improved support for ALTER NEWNAME with single quotes. + + * Improved DELETE to first determine whether the file is a VSAM dataset. + + * JCL – Misc + + * Improved support for the job-kill endpoint to correctly report the KILLED status for stopped jobs + + * Propagated HTTP request context to groovy script worker threads + + * Security + + * Hardened the OAuth resource server's scope-to-role mapping and enforced client_id validation, preventing low-privileged tokens from being granted elevated roles + + + + +### AS400 + +###### Improvements + + * File access + + * Added support for Extend open mode. + + * CL + + * Improved support for CLRPFM command to handle a library-qualified FILE parameter. + + * Improved support for ALCOBJ command to raise CPF1002 on an object-allocation timeout. + + * RPG + + * Improved handling of a standalone DIM array declared without an explicit S marker in the definition-type columns. + + * Improved RESET support in NOMAIN RPG service programs. + + * Restored 1-based indexing for the substring function. + + * CHKOBJ – Added support for printer files. + + * Screen – Improved support for the OVRDTA and OVRATR keywords at record level and added support for the SFLCSRRRN file keyword. + + * User space – Improved QUSCRTUS (Create User Space) support for the Domain and Transfer Size parameters. + + + + +## AWS Transform for mainframe Transformation Engines