diff --git a/CHANGELOG.md b/CHANGELOG.md
index 5949b1b5f6..47fea5a92d 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,31 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.31.2] - 2026-10-27
+
+### Fixed
+- fix(ci): set git identity before snapshot tests (#2714) (c20c6269)
+- fix(security): remediate zod and fast-uri audit findings (#2708) (826c17ce)
+- fix(cli): resolve Windows commands from explicit PATH entries (#2705) (7f92b5ab)
+- fix(import): pass CDK asset zip paths as subprocess arguments (#2661) (b02f72ee)
+- fix(security): remediate npm audit findings (#2660) (480ef024)
+- fix(ci): bump commit pin of workflow metrics (#2527) (dd6304ee)
+
+### Other Changes
+- refactor(ci): split v0 release workflow and lock CDK version to alpha (#2710) (8af92655)
+- ci: bump the github-actions group with 2 updates (#2684) (7c6b1a6d)
+- chore(deps): bump the aws-sdk group with 18 updates (#2685) (2cc71dcb)
+- chore(deps-dev): bump @secretlint/secretlint-rule-preset-recommend (#2691) (92f16deb)
+- chore(deps): bump dotenv from 17.4.0 to 18.0.8 (#2692) (d0f81f2d)
+- chore(deps-dev): bump @modelcontextprotocol/sdk from 1.30.0 to 1.32.1 (#2693) (8e39db6f)
+- chore(deps): bump react and @types/react (#2694) (77ca1174)
+- chore(deps): bump @opentelemetry/resources from 2.10.0 to 2.12.0 (#2689) (d670e279)
+- chore(ci): remove Slack PR review notifications (#2669) (7625b077)
+- chore(ci): update v0 release workflow to publish under legacy tag (#2659) (a0f870e3)
+- chore(canary): run refactor e2e canary only on v1 (#2648) (7b908c88)
+- chore(canary): pin e2e canary to v0 (#2645) (d525f951)
+- ci: port refactor canary to main (#2519) (bd0e7fac)
+
 ## [0.31.1] - 2026-10-01
 
 ### Fixed
diff --git a/package.json b/package.json
index 07eb35af9c..d230deb59a 100644
--- a/package.json
+++ b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "@aws/agentcore",
-  "version": "0.31.1",
+  "version": "0.31.2",
   "description": "CLI for Amazon Bedrock AgentCore",
   "license": "Apache-2.0",
   "repository": {
diff --git a/schemas/agentcore.schema.v1.json b/schemas/agentcore.schema.v1.json
index 860e07f444..22185ffdc3 100644
--- a/schemas/agentcore.schema.v1.json
+++ b/schemas/agentcore.schema.v1.json
@@ -1729,6 +1729,7 @@
                             "uri": {
                               "type": "string",
                               "minLength": 1,
+                              "format": "starts_with",
                               "pattern": "^s3:\\/\\/.*"
                             },
                             "bucketOwnerAccountId": {
@@ -2658,6 +2659,7 @@
                       "uri": {
                         "type": "string",
                         "minLength": 1,
+                        "format": "starts_with",
                         "pattern": "^s3:\\/\\/.*"
                       },
                       "bucketOwnerAccountId": {
diff --git a/src/assets/__tests__/__snapshots__/assets.snapshot.test.ts.snap b/src/assets/__tests__/__snapshots__/assets.snapshot.test.ts.snap
index 4446b1e966..344bf98f24 100644
--- a/src/assets/__tests__/__snapshots__/assets.snapshot.test.ts.snap
+++ b/src/assets/__tests__/__snapshots__/assets.snapshot.test.ts.snap
@@ -711,7 +711,7 @@ exports[`Assets Directory Snapshots > CDK assets > cdk/cdk/package.json should m
     "typescript": "~5.9.3"
   },
   "dependencies": {
-    "@aws/agentcore-cdk": "0.1.0-alpha.54",
+    "@aws/agentcore-cdk": "0.1.0-alpha.55",
     "aws-cdk-lib": "~2.261.0",
     "constructs": "~10.7.0"
   }
diff --git a/src/assets/cdk/package.json b/src/assets/cdk/package.json
index e6d1c9917f..a96d9e653d 100644
--- a/src/assets/cdk/package.json
+++ b/src/assets/cdk/package.json
@@ -23,7 +23,7 @@
     "typescript": "~5.9.3"
   },
   "dependencies": {
-    "@aws/agentcore-cdk": "0.1.0-alpha.54",
+    "@aws/agentcore-cdk": "0.1.0-alpha.55",
     "aws-cdk-lib": "~2.261.0",
     "constructs": "~10.7.0"
   }