aec7ddac46
deps: integrate Console repairs and the released SILO libraries
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 21:33:40 +08:00
6921f8c186
fix: return current bucket inventory from account info
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 21:01:01 +08:00
25d928c9df
test: pin failed-overwrite compatibility fixture to 12+4
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:48:39 +08:00
ee3e7ea716
test: keep deferred read diagnostic helpers with their build tag
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:40:40 +08:00
2a04d5f485
fix: retain maintenance read compatibility with write safety fixes
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:39:31 +08:00
9449e6a4a8
test: preserve reads across late commits and rollback
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 18:23:14 +08:00
9c4bb39571
fix: preserve versioning context when verifying recovery
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 16:05:28 +08:00
86ce8d6012
test: cover versioned and encrypted multi-pool recovery
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 16:03:13 +08:00
b15aa97c94
test: follow recovery regression lint conventions
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:59:45 +08:00
f54c04846e
fix: recover inconsistent multi-pool copies before acknowledging PUT
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:56:28 +08:00
6fdea3b8d9
test: reject recovery ACK when another pool still wins reads
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:55:10 +08:00
380fcbfe47
test: require safe refusal when pool recovery cannot be confirmed
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:49:29 +08:00
a02fa9644c
test: pin multi-pool overwrite recovery after a minority commit
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 15:48:33 +08:00
652a1c09d3
fix: protect unfinished commits from abandoned data cleanup
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:23:20 +08:00
c86df14f4d
test: pin abandoned cleanup races with commit and undo
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:22:27 +08:00
03875d61e3
fix: reuse validated latest state without rescanning version history
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 13:02:23 +08:00
1865985aa1
fix: separate rollback ownership from readable metadata identity
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:41:54 +08:00
076a13f9d2
test: preserve reads after partial no-op metadata updates
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:40:00 +08:00
9a4e089f56
fix: reuse unanimous latest metadata for healthy version histories
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:33:49 +08:00
9255f443a6
test: guard healthy history reads and same-version divergence
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:31:10 +08:00
ea7c794a94
fix: preserve version state across late rollback and nested mutations
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:22:47 +08:00
16c21428d9
test: pin metadata rollback and nested mutation lifetime regressions
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 12:07:50 +08:00
7e83f9950a
merge: restore built-in IAM policies after Reset
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 11:02:53 +08:00
1e3ab56b06
iam: restore native policy immediately after resetting overrides
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 03:32:53 +08:00
5ad1f344b7
fix: keep admitted mutation RPCs alive until their result arrives
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 01:12:58 +08:00
8a4097309f
fix: preserve shared-version metadata during overwrite rollback
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 01:11:27 +08:00
0501a198e3
fix: reject COPY-to-self from unresolved object generations
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 01:11:27 +08:00
d2eb0ade91
fix: assign PUT generations while holding the commit lock
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 01:08:36 +08:00
5c074efd1d
test: preserve external shards in generation conflict fixtures
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 01:03:14 +08:00
03fe5e9c21
test: isolate endpoint locality fixtures from public DNS
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 00:50:41 +08:00
0b1c21cb4b
fix: retain unresolved generations during fast reads and healing
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 00:48:16 +08:00
b55495aef0
fix: preserve remote rollback options and reject stale read quorums
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 00:37:21 +08:00
d8b77e5f3b
test: require read-quorum errors for split listing generations
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 00:24:28 +08:00
cd1f6cec3c
fix: drain canceled storage commits before releasing object locks
...
Wait for admitted data and metadata mutations, preserve overwrite backups during rollback, and reject rollback of a different generation. Report conflicting or unreadable pool metadata as read-quorum failures instead of exposing stale copies. Add barrier-driven local/RPC and multi-pool regressions for cancellation, self-copy, rollback and old-value reads.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-25 00:19:42 +08:00
4f17a23e33
test: isolate release acceptance fixtures across backends
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 22:39:29 +08:00
be44ff2669
build: update silo-pkg to v3.15.0
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 22:17:20 +08:00
d16f5ed9c8
fix(ilm): keep tier data when expiry only adds a delete marker ( #253 )
...
Preserve transitioned version data when lifecycle expiration only creates a delete marker, and apply suspended-versioning semantics consistently.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 17:46:10 +08:00
6d890fc860
Merge pull request #255 : preserve FULL_OBJECT checksum type in replication
...
Forward FULL_OBJECT checksum type for multipart CRC replication so the target validates the whole-object checksum correctly. Restore the existing single-PUT replication path for server-side copies retaining these checksums.
Fixes #254
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 17:39:38 +08:00
aafe4f8886
fix(pools): preserve authoritative copies across failed deletes ( #257 )
...
Preserve the latest logical object when cleanup of another pool fails, report each bulk error with its original replication identity, and support retries after partial physical deletion. Reuse existing tier-aware reconciliation to avoid premature remote-object collection.
Includes the original contribution and signed-off maintainer fixes.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 16:04:09 +08:00
a2073d2514
fix(pools): preserve shared tier references during failed deletes
...
Reuse deleteObjectReconciled for tiered bulk entries and unversioned single deletes. Its reference-aware cleanup avoids scheduling remote contents for garbage collection while another copy still needs them, including restored copies. Keep the normal local-data bulk path unchanged.
Extend existing tier GC regressions to bulk and unversioned deletes and include them in the multi-pool race CI step.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 15:47:51 +08:00
3c82748e14
fix(pools): retain authoritative copies until bulk cleanup succeeds
...
Resolve each addressed version under the shared write lock, keep bulk I/O parallel within cleanup and authoritative-deletion stages, and preserve replication response identity on errors. Treat reliable absence as successful physical cleanup on retries without accepting it for marker or replication-state writes.
Cover execution-time faults, partial cleanup recovery, mixed authoritative pools, response identity, null marker ordering, metadata uncertainty, cancellation, and concurrent PUT. Run the delete consistency regressions under race in CI.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 15:36:07 +08:00
1e94c5a30d
Merge remote-tracking branch 'origin/main' into codex/pr257-delete-safety
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 15:13:21 +08:00
000e653038
ci: use runner Python for repository card checks
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 12:42:50 +08:00
945dc16060
Update SFTP and Go dependencies with object-operation regression coverage
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-24 11:50:39 +08:00
a30270d9ba
fix(pools): put a delete marker into a pool that can take it
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-23 22:29:49 +03:00
1841fce4c4
fix(pools): keep the latest copy when a delete fails in one pool
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-23 21:28:46 +03:00
f2b8d4b9cb
fix(replication): forward FULL_OBJECT checksum type for multipart replicas
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-23 17:52:58 +03:00
8ed5c90dcd
fix(ilm): keep tier data when expiry only adds a delete marker
...
Signed-off-by: Denis Babchuk <babchukdenis@icloud.com >
2026-10-23 17:36:21 +03:00
789a2327ba
docs: replace the single-node report with the maintained migration entry point
...
Keep the original PR #228 report at a fixed commit link with contributor credit. Direct operators to the bilingual migration guide and its recovery requirements, and record the merged contribution.
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-23 19:27:20 +08:00
e3e0c6215d
Merge remote-tracking branch 'origin/main'
...
Signed-off-by: Feng Ruohang <rh@vonng.com >
2026-10-23 19:16:00 +08:00
Feng Ruohang