What's Changed ci: fix aarch64/amd64 musl rust builds on ubuntu-24.04 by @chrislusf in #12070 webdav: copy a file onto a collection URL without losing the collection by @jayhemnani9910 in #12068 s3: group ListMultipartUploads by delimiter into CommonPrefixes by @jayhemnani9910 in #12069 filer: support nanosecond timestamps for conditional delete (#11339) by @Tyagiquamar in #12071 iceberg: fix CREA…
What's Changed s3api: stop echoing stored tags and internal attributes on GET/HEAD by @chrislusf in #12053 admin: keep read-only sessions out of the filer /etc tree by @chrislusf in #12057 s3tables: scope the anonymous identity's grant on the table catalogs by @chrislusf in #12056 master: shorten the first-write hold after a fresh topology id by @chrislusf in #12059 filer, volume: ignore Range whe…
What's Changed filer: do not stall startup waiting out the leader-settle window by @chrislusf in #11972 volume: drop stale index entries that resolve to a different needle by @chrislusf in #11948 s3 lifecycle: route version-file writes to current-version expiration by @chrislusf in #11956 s3: end a catalog-vended session with the access key it was vended for by @jatorre in #11945 fuse integration:…
iam/oidc: reject reused jti claims with a bounded replay cache (#11936) * iam/oidc: reject reused jti claims with a bounded replay cache * iam/sts: pass jti replay settings through convertToOIDCConfig * iam/oidc: keep consumed jtis and stop the cleanup worker across re-init Re-initializing a provider reset the JTI store, so an already-used token could be presented again after a config refresh; the…
What's Changed filer: clean up manifest resolve error propagation and add webdav tes… by @giftz in #11297 rust-volume: fix Windows build of find_needle_from_ecx by @chrislusf in #11298 test/ec: pin rack in seedAndSpread volume.grow to stop silent no-ops by @chrislusf in #11299 admin: bind worker gRPC listener to -ip instead of wildcard by @chrislusf in #11300 build(deps): bump github/codeql-action…
What's Changed release: wait for Go proxy propagation by @chrislusf in #11219 [Mount] Add ChunkGroup seeking tests and fix boundary handling by @ssshr-66 in #11223 fix(mount): bound reader cache memory across open files by @chrislusf in #11220 iam: preserve native Admin when IAM policies are attached (#11226) by @chrislusf in #11232 fix(s3api): evaluate aws:SourceIp from the direct TCP peer, not f…
What's Changed release: judge downstream releases by their run, excluding runner-queue time by @chrislusf in #11057 master: scope the startup capacity shed to a truly empty topology by @chrislusf in #11058 volume: open volume files with O_NOATIME by @chrislusf in #11055 shell: reset noLock in the admin script dispatcher too by @chrislusf in #11059 master: keep periodic volume growth to the data ce…
What's Changed helm: install chart CI against an image tag that exists by @chrislusf in #10877 Ship the Rust maintenance worker with the release by @chrislusf in #10879 Build the Rust worker against the protoc that ships with the build by @chrislusf in #10881 install.sh: install the Rust maintenance worker by @chrislusf in #10882 admin: add visual iam policy editor by @mat813 in #10878 build(deps)…
What's Changed admin: keep the copy confirmation in front of the access key modal by @chrislusf in #10856 admin: regenerate the gzipped static mirror by @chrislusf in #10859 iceberg: stop compaction from corrupting dictionary-encoded columns by @chrislusf in #10857 S3: optionally serve remote-mounted objects from remote when the local read fails by @Koalk in #10837 volume: cut idle memory at high…
What's Changed S3 s3: stop unrouted bucket subresources from being answered with a listing by @chrislusf in #10814 S3: stamp the gateway's own uid/gid on PutObject and copy entries by @chrislusf in #10844 s3: place multipart part chunks by the destination object's storage rule by @chrislusf in #10845 s3: allow-unordered is a listing parameter, not an unimplemented subresource by @chrislusf in #108…
What's Changed Master and topology Heartbeat protocol, volume registration, and a long series of allocation/copy removals on the master's hot paths. topology: digest the volumes a master believes each node holds (#10619) heartbeat: carry a volume digest and verify it (#10627) heartbeat: send only the volumes that changed (#10640) heartbeat: keep the master current through collection churn (#10657)…
What's Changed S3 S3: fold large chunk lists into manifest chunks on the direct write path by @chrislusf in #10383 S3: track manifest blob ownership through multipart completion by @chrislusf in #10386 s3: stop listing prefixes whose objects are all delete-marked by @chrislusf in #10419 s3: chunk uploads at the filer's maxMB by @chrislusf in #10439 s3: require a bucket-policy action to write a buc…
What's Changed S3 s3: enforce role trust policy on direct OIDC bearer authentication by @chrislusf in #10302 s3: accept raw semicolons in query strings by @chrislusf in #10305 s3: return NoSuchKey/NoSuchBucket for a missing CopyObject source by @chrislusf in #10332 s3: invalid tagging on CopyObject returns InvalidTag, not InvalidCopySource by @chrislusf in #10362 Fix PutObjectAcl writing back to t…
What's Changed Seaweed Volume (Rust) async, buffered writes in VolumeEcShardsCopy (#10237) fix orphan purge against the rust volume server (#10289) Volume (Go) keep tier-uploaded volume reporting to master after volume.tier.upload (#10259) clear remote flag when tiering a volume back to local (#10262) reload a remote-tiered volume without re-entering the data lock (#10266) parallelize under-replic…
What's Changed Erasure Coding & Scrub The largest theme — Rust volume-server scrub parity plus EC correctness. EC scrub #10130 Fix scrubbing of deleted needles on EC volumes #10144 EC LOCAL needle walk (split from FULL) #10147 suppress deleted-needle size mismatch in EC LOCAL scrub #10149 EC FULL scrub — distributed local+remote needle walk #10152 correct EC FULL scrub for deleted needles, shard-l…
What's Changed CI / Build & Performance Add performance CI (profiling, throughput, S3 read/write) by @chrislusf in #10105 Perf CI: benchmark the Rust volume server and report memory usage by @chrislusf in #10111 docker release: per-platform builds on native runners, drop mode=max cache by @chrislusf in #10109 Volume Server (Rust) fix (Volume [Rust]): stream copy_file and volume_incremental_copy in…
What's Changed S3 / S3 API s3api: sort repeated SigV4 query values — @7y-9 (#10031) s3api: reject malformed Range offsets — @guankai (#10034) s3api: preserve requested AES256 copy encryption — @7y-9 (#10049) s3api: preserve equals signs in tag values — @guankai (#10058) s3api: apply static config file updates on reload — @chrislusf (#10096) s3: keep a file promoted to a directory retrievable as an…
What's Changed FUSE fix(command): preserve fuse option after writers by @7y-9 in #9972 test: add FUSE database load/durability/perf benchmark by @chrislusf in #9980 mount: tolerance-window write pattern detection for concurrent writeback by @chrislusf in #9984 fix(mount): keep a deferred local create from vanishing when its dir is rebuilt by @chrislusf in #9991 fix(mount): pin rebuild entries by t…
What's Changed S3 s3: export per-bucket quota and read-only state metrics by @chrislusf in #9923 s3: validate copy source path segments by @chrislusf in #9929 [s3] validate indirect filer path inputs by @chrislusf in #9931 [s3]: preserve multipart copy checksums by @chrislusf in #9948 s3: give account-less identities a distinct owner instead of admin by @chrislusf in #9962 s3: give STS sessions a…
What's Changed S3 API fix(s3api): accept HTTP-date conditionals by @7y-9 in #9863 fix(s3api): drop ancestor directory markers from prefixed ListObjectVersions by @chrislusf in #9885 fix(s3api): clear stale object lock years by @7y-9 in #9890 fix(s3api): normalize checksum trailer header names by @7y-9 in #9905 fix(s3api): reject empty v4 signed header names by @7y-9 in #9910 Remote Cache fix(remot…
What's Changed Misc fix(http): check delete request errors before auth by @7y-9 in #9784 chore(weed/storage/needle): prune unused test functions by @alrs in #9812 [test] update docker image for s3test by @kmlebedev in #9811 security: hot-reload JWT signing keys on SIGHUP by @chrislusf in #9826 ip.bind: bind outbound connections to the configured address by @chrislusf in #9834 s3: actually bind out…
What's Changed S3 s3: short-circuit filer failover on ErrNotFound by @chrislusf in #9748 s3: return NoSuchVersion (not NoSuchKey) for a missing versionId by @chrislusf in #9749 s3: commit a versioned PutObject and its latest pointer in one transaction by @chrislusf in #9756 s3: reject reserved bucket name "filemeta" by @chrislusf in #9760 fix(s3api): Fix multipart upload ETag compatibility with Ha…
What's Changed S3 s3,iceberg: reject .. in URL path vars by @chrislusf in #9687 fix(s3tables/iceberg): make metadata spec-compliant and accept real-world manifest names by @qzhello in #9703 fix: validate s3 ownership controls rule by @7y-9 in #9684 fix(s3): honor MetadataDirective=REPLACE for system metadata on CopyObject by @qzhello in #9721 fix(s3): allow anonymous unsigned-streaming PutObject b…
What's Changed Admin Server and Worker EC placement: shared replica-placement resolver, snapshot + Place core, capacity fixes, tiering by @chrislusf in #9621 EC encode: place shards via ecbalancer.Place + configurable replica placement by @chrislusf in #9623 Delete the EC placement package now that encode/repair use ecbalancer.Place by @chrislusf in #9624 EC detection: build placement snapshot onc…
What's Changed S3 API fix(s3/audit): populate requester for GET/HEAD/IAM operations by @chrislusf in #9581 fix(s3): sync IAM policies to advanced IAM Manager policy engine by @Mmx233 in #9577 fix(s3): keep server-side copy data in the bucket collection by @chrislusf in #9607 fix(s3): list empty directories as directory markers by @chrislusf in #9615 fix(s3api/list): cancel ListEntries stream in ha…