2026.04.0

What's Changed

Breaking Changes

• Remove support for ParallelCluster versions <= 3.5.0.

Features

• Add support for managing multiple ParallelCluster versions from a single PCUI deployment.
• Add support for PCUI in us-gov-east-1 region.

Bug Fixes

• Fix an issue to ensure the OS options in the cluster creation wizard reflect the OSes supported by the selected ParallelCluster version.
• Fix an issue to allow the PCUI to offer the full range of selectable instance types in the wizard.
• Improve the CloudFormation error message when the Version parameter is not specified.

Security

• Mitigate the risk of path traversal attacks in the PCUI Lambda.
• Fix an OS command injection vulnerability in SSM SendCommand calls on cluster HeadNode.
• Fix a bug causing access tokens to leak into CloudWatch logs.
• Upgrade requests to version 2.33.1 (from 2.32.0).
• Upgrade cryptography to version 46.0.7 (from 44.0.1).
• Upgrade boto3 to version 1.42.91 (from 1.24.30).
• Upgrade urllib3 to version 2.6.3 (from 1.26.20).
• Upgrade ecdsa to version 0.19.2 (from 0.18.0).
• Upgrade certifi to version 2026.2.25 (from 2024.7.4).
• Upgrade flask-cors to version 6.0.2 (from 4.0.2).
• Upgrade python-jose to version 3.5.0 (from 3.4.0).
• Upgrade next to version 15.5.10 (from 14.2.26).
• Upgrade eslint-config-next to version 15.5.10 (from 14.0.4).
• Upgrade @babel/runtime to version 7.27.0 (from 7.23.5).
• Upgrade brace-expansion to version 1.1.12 (from 1.1.11).

Full Changelog: 2025.04.0...2026.04.0

2025.04.0

What's Changed

Breaking Changes

• Remove default value for PC version. Now the user must specify the PC version to use.

Features

• Add new stack parameter 'AdditionalPoliciesPCAPI' to add custom permissions for the ParallelCluster API Lambda role, on top of the default ones.

Bugfixes

• Fix PCUI deployment in private subnets by making the PCUI template use and return the correct URLs.
• Fix a issue preventing the loading of 200+ jobs in Job status Tab. (see #376).

Security

• Upgrade Python from 3.9 to 3.12.
• Upgrade cross-spawn from 7.0.3 to 7.0.6 to address vulnerability CVE-2024-21538.
• Upgrade requests from 2.31.0 to 2.32.0 to address CVE-2024-35195.
• Upgrade urllib3 from 1.26.18 to 1.26.19 to address CVE-2024-37891.
• Upgrade cryptography from 42.0.4 to 44.0.1 to address CWE-1395.
• Upgrade certifi from 2023.7.22 to 2024.7.4 to address CVE-2024-39689.
• Upgrade jinja2 from 3.1.3 to 3.1.6 to address CVE-2024-56201 and CVE-2024-56326.
• Upgrade serverless_wsgi.py to version 3.0.5.
• Upgrade Werkzeug from 2.3.8 to version 3.0.6 to address CVE-2024-34069, CVE-2024-49766 and CVE-2024-49767.
• Upgrade Axios from 1.6.7 to version 1.8.2 to address CVE-2024-39338.
• Upgrade Next.js from 14.1.1 to version 14.2.25 to address CVE-2024-51479, CVE-2024-46982 and CVE-2025-29927.
• Upgrade idna from 3.4 to version 3.7 to address CVE-2024-3651.
• Upgrade nanoid from 3.3.7 to version 3.3.8 to address CVE-2024-55565.
• Upgrade python-jose from 3.3.0 to version 3.4.0 to address CVE-2022-29217.

Full Changelog: 2024.11.0...2025.04.0

2024.11.0

What's Changed

Bug fixes

• Explicitly set the policy for ECR private repository to prevent policy removal on stack update impacting Lambda function. The policy includes the permissions required by the Lambda function to fetch the code.

Full Changelog: 2024.10.0...2024.11.0

2024.10.0

What's Changed

Changes

• Add support for ParallelCluster 3.11.1.
• Add support for On-Demand Capacity Reservations and Capacity Block in the wizard.
• Add g6, m7 and p5 families to the list of supported instance types in the wizard.
• Add new stack optional parameters to configure custom domain for both PCUI and Cognito.

Bug fixes

• Fix a bug that was breaking the setup of custom domain.

Security

• Upgrade Flask-CORS from 3.0.10 to 4.0.2 to address vulnerability CVE-2024-6221.
• Upgrade lint-staged from 13.0.3 to 15.2.5 to address vulnerability CVE-2024-4068.

Full Changelog: 2024.07.1...2024.10.0

2024.07.1

What's Changed

Changes

• Add support for ParallelCluster 3.10.1.

Bug fixes

• Fix a bug that was breaking the rendering of job accounting info.
• Fix a bug in feature flagging mechanism that was disabling all PC 3.2.0+ features on PC 3.10.0+.

Security

• Upgrade cryptography from 42.0.2 to 42.0.4 and specify JWT decoding algorithms to address vulnerability https://cwe.mitre.org/data/definitions/476.html and https://cwe.mitre.org/data/definitions/327.html.
• Upgrade Node.js from 16.20.2 to 18.20.3 and Next.js from 13.5.1 to 14.1.1 to address vulnerability https://cwe.mitre.org/data/definitions/918.html.
• Constraint ws version to 8.17.1+ to address vulnerability https://cwe.mitre.org/data/definitions/476.html.

Full Changelog: 2024.07.0...2024.07.1

2024.07.0

What's Changed

Features

• Added support for AWS ParallelCluster version 3.10.0.

Full Changelog: 2024.05.0...2024.07.0

2024.05.0

What's Changed

Bug fixes

• Fixed a bug in the frontend blocking the UI when the user opens the Job Status panel.

Full Changelog: 2024.04.0...2024.05.0

2024.04.0

What's Changed

Features

• Add support for ParallelCluster 3.9.1.

Full Changelog: 2024.03.0...2024.04.0

2024.03.0

What's Changed

Features

• Added support for ParallelCluster version 3.9.0
• Added support for Ubuntu22.04 and Red Hat Enterprise Linux 9
• Deprecated Ubuntu18.04

Bugfixes

• Fixed issue causing some clusters to not appear when using many clusters

Full Changelog: 2024.02.0...2024.03.0

2024.02.0

What's Changed

• Updated the Lambda runtime environment to Python v3.9

Full Changelog: 2023.12.0...2024.02.0