From 64da7d7ab429d9290ed78ff3b0721fea3cbedeab Mon Sep 17 00:00:00 2001
From: Jose Corella <jocorell@amazon.com>
Date: Fri, 17 Apr 2026 16:17:23 -0700
Subject: [PATCH] chore: preflight 3.3.1 release

---
 CHANGELOG.rst                         | 8 ++++++++
 src/aws_encryption_sdk/identifiers.py | 2 +-
 2 files changed, 9 insertions(+), 1 deletion(-)

diff --git a/CHANGELOG.rst b/CHANGELOG.rst
index 609b58c73..4638750ed 100644
--- a/CHANGELOG.rst
+++ b/CHANGELOG.rst
@@ -2,6 +2,14 @@
 Changelog
 *********
 
+3.3.1 -- 2026-04-20
+===================
+
+Fixes
+-----------
+* fix: validate encryption materials from cmm are compatible with key commitment policy
+  `#796 <https://github.com/aws/aws-encryption-sdk-python/pull/796>`_
+
 3.3.0 -- 2024-05-20
 ===================
 
diff --git a/src/aws_encryption_sdk/identifiers.py b/src/aws_encryption_sdk/identifiers.py
index a06030889..65526743f 100644
--- a/src/aws_encryption_sdk/identifiers.py
+++ b/src/aws_encryption_sdk/identifiers.py
@@ -17,7 +17,7 @@
     # We only actually need these imports when running the mypy checks
     pass
 
-__version__ = "3.3.0"
+__version__ = "3.3.1"
 USER_AGENT_SUFFIX = "AwsEncryptionSdkPython/{}".format(__version__)