Commit Graph

  • 6b92a86617 chore: update repository cards 2026-11-13 codex/repository-cards github-actions[bot] 2026-11-13 05:00:15 +00:00
  • d66020003c docs(readme): update current release to SILO 20261112 and Console 2.7.2 main Feng Ruohang 2026-11-12 14:20:56 +08:00
  • cb14340ddb chore: update repository cards 2026-11-12 github-actions[bot] 2026-11-12 04:40:48 +00:00
  • 44e848fedf ci(release): unset synthetic RELEASE_TAG for Helm check in test-release RELEASE.2026-11-12T00-00-00Z Feng Ruohang 2026-11-12 11:28:52 +08:00
  • 52371b906c build(deps): bump embedded Console to v2.7.2 for 20261112 release Feng Ruohang 2026-11-12 11:20:36 +08:00
  • 43122f76f1 docs(release): sync post-RC behavior changes, issue refs, and upgrade notes Feng Ruohang 2026-11-12 10:18:54 +08:00
  • c83dbe0eaa ci(release): run DCO check on main pushes and verify Helm tag match Feng Ruohang 2026-11-12 10:18:54 +08:00
  • 72a6047bf2 build(deps): restore go-systemd v22.6.0 replace for NetBSD Feng Ruohang 2026-11-12 10:18:54 +08:00
  • 939cb26001 test(s3): verify corrupted compressed encrypted ranges fail Feng Ruohang 2026-11-12 10:18:54 +08:00
  • ea37a7e8b0 fix(s3): enforce tag count and object lock permissions on proxy reads Feng Ruohang 2026-11-12 10:18:54 +08:00
  • 265c31b714 test(auth): cover STS tag counts before and after read permission Feng Ruohang 2026-11-12 08:18:14 +08:00
  • 2ed720a7fb fix(crypto): return client errors for malformed KMS contexts Feng Ruohang 2026-11-12 07:49:47 +08:00
  • c39605d4f8 fix(auth): require tag read permission for object tag counts Feng Ruohang 2026-11-12 07:49:47 +08:00
  • 7c0a99284f fix(read): handle indexed ranges within the first encrypted block Feng Ruohang 2026-11-12 07:49:47 +08:00
  • 34ba7cc1ff Prepare SILO 20261112 release candidate Feng Ruohang 2026-11-12 03:06:15 +08:00
  • bae0ba0b75 docs(changelog): sync unreleased decommission, tagging and replication notes Feng Ruohang 2026-11-11 15:49:35 +08:00
  • cd3e46a2b7 fix(copy): preserve compression index on pooled copy rewrites Feng Ruohang 2026-11-11 15:49:35 +08:00
  • ef6efd3120 fix(site-replication): snapshot state before bucket healing and peer hooks Feng Ruohang 2026-11-11 15:43:41 +08:00
  • 4a9bdb5407 fix(batch): reject invalid UTF-8 before KMS context rotation Feng Ruohang 2026-11-11 14:44:50 +08:00
  • 2f228284f3 fix(replication): collect site status without holding topology locks Feng Ruohang 2026-11-11 14:43:42 +08:00
  • e36ea51d9c fix(copy): preserve authoritative content when pools are moving Feng Ruohang 2026-11-11 14:39:30 +08:00
  • 3ce07a943b test(copy): cover KMS context and moving source pools Feng Ruohang 2026-11-11 12:55:19 +08:00
  • 3c35cebe9e test: format attributes read-error regression Feng Ruohang 2026-11-11 12:50:29 +08:00
  • ae483baca1 docs: record unreleased repair and compatibility boundaries Feng Ruohang 2026-11-11 12:50:29 +08:00
  • 99fb47fbb9 fix(batch): align variable preflight with policy evaluation Feng Ruohang 2026-11-11 12:46:36 +08:00
  • 467ce760ed fix(batch): restore KMS context from persisted rotation options Feng Ruohang 2026-11-11 12:33:19 +08:00
  • b5d97e3e1f fix(restore): ignore derived data-dir flag in revision identity Feng Ruohang 2026-11-11 12:32:11 +08:00
  • a8824b341f fix(copy): plan historical version placement before transforms Feng Ruohang 2026-11-11 12:29:28 +08:00
  • f746d07076 fix(auth): authorize attributes and archive reads with stored tags Feng Ruohang 2026-11-11 12:24:21 +08:00
  • 745fbf0437 fix(site-replication): release heal read lock before hooks Feng Ruohang 2026-11-11 12:14:17 +08:00
  • 8587e061bb fix(decom): tolerate offline drives within erasure quorum Feng Ruohang 2026-11-11 13:39:38 +08:00
  • 293ab78b4c fix(auth): authorize tagging replicas without rejecting replication lag Feng Ruohang 2026-11-11 13:39:19 +08:00
  • 888d71ebe1 chore: update repository cards 2026-11-11 github-actions[bot] 2026-11-11 04:40:08 +00:00
  • 67a90dfef4 fix(auth): authorize every tagging proxy destination Feng Ruohang 2026-11-11 11:47:56 +08:00
  • 62b8784428 fix: satisfy integrated server verifiers Feng Ruohang 2026-11-11 11:40:24 +08:00
  • 5dc4bd6a1d Fix pool migration cleanup and physical progress Feng Ruohang 2026-11-11 11:24:06 +08:00
  • cf486df661 Fix Object Lock replica reconciliation boundaries Feng Ruohang 2026-11-11 11:17:12 +08:00
  • 1d714834c5 fix(iam): normalize service policies and preserve imported state Feng Ruohang 2026-11-11 11:01:50 +08:00
  • 14ecb222e7 fix(auth): secure proxied tagging and streaming trailers Feng Ruohang 2026-11-11 11:13:26 +08:00
  • e51bff35a3 Merge service-account replication fix into main Feng Ruohang 2026-11-11 00:12:08 +08:00
  • 20b3bfb6e7 Merge verified prerelease fixes into main Feng Ruohang 2026-11-11 00:08:25 +08:00
  • 322cd8d2c1 fix(decom): count lifecycle removals as scan progress Feng Ruohang 2026-11-11 00:08:07 +08:00
  • c3340ec7f5 fix(auth): scope unread tag candidates to effective policies Feng Ruohang 2026-11-10 23:22:57 +08:00
  • 7c91dc17b2 Merge remote-tracking branch 'origin/main' Feng Ruohang 2026-11-10 23:31:32 +08:00
  • 2f93e0c6b3 Merge pull request #294 from botdeniska/fix/tag-auth-server-error Feng Ruohang 2026-11-10 23:30:24 +08:00
  • 65acda0114 fix(auth): scope unread tag candidates to effective policies Feng Ruohang 2026-11-10 23:22:57 +08:00
  • c6949a38c2 fix(api): keep GetObjectAttributes server errors and check s3:ListBucket on the bucket Denis Babchuk 2026-11-07 11:43:31 +03:00
  • 80dd3e3ce1 test(api): cover GetObjectAttributes errors with and without s3:ListBucket Denis Babchuk 2026-11-07 11:43:31 +03:00
  • 89028732ab fix(auth): keep the server error when a read allowed by object tags cannot read the tags Denis Babchuk 2026-11-07 11:43:30 +03:00
  • 55bd906d30 test(auth): cover reads allowed by s3:ExistingObjectTag when the object cannot be read Denis Babchuk 2026-11-07 11:43:29 +03:00
  • 296c9710b1 fix(security): close release blockers Feng Ruohang 2026-11-10 21:51:47 +08:00
  • f3b42b0eb8 Merge pull request #335 from botdeniska/fix/decom-keys-below-a-key Feng Ruohang 2026-11-10 21:30:18 +08:00
  • da8d8a54b1 fix(iam): replicate a service account as the record that is stored Feng Ruohang 2026-11-10 13:46:57 +08:00
  • 2b62df876a docs(contributors): cite the real CVE-2026-39414 follow-up commit Feng Ruohang 2026-11-10 17:24:28 +08:00
  • 518915d241 docs(contributors): credit upstream advisory researchers and fix a commit link Feng Ruohang 2026-11-10 16:57:15 +08:00
  • ce5d191077 fix(decom): repeat the walk of a bucket while it removes source versions Denis Babchuk 2026-11-09 16:55:38 +03:00
  • b404f78764 test(decom): cover keys below a key that the walk does not see Denis Babchuk 2026-11-09 16:20:15 +03:00
  • d138996983 docs(helm): fix NOTES connection commands and document 20261109 upgrade gates Feng Ruohang 2026-11-10 11:00:05 +08:00
  • d52ba0290a docs: align release, TLS, healthcheck, and contributor docs with 20261109 Feng Ruohang 2026-11-10 11:00:05 +08:00
  • 8f3657dc52 Merge pull request #333 from pgsty/claude/cross-bucket-path-traversal-delete-5e1fc2 Feng Ruohang 2026-11-10 14:39:36 +08:00
  • 7efdedd5ba Merge pull request #329 from pgsty/deps/console-2.7.0 Feng Ruohang 2026-11-10 14:30:02 +08:00
  • a18293d0c3 fix(pools): keep rejected names out of a single-pool bulk delete claude/cross-bucket-path-traversal-delete-5e1fc2 Feng Ruohang 2026-11-10 09:01:26 +08:00
  • 032ac49061 Merge pull request #332 from pgsty/claude/multi-pool-ilm-version-dup-210154 Feng Ruohang 2026-11-10 14:14:32 +08:00
  • 244de7ecc1 Merge pull request #331 from pgsty/claude/svcacct-inline-policy-bug-961eaa Feng Ruohang 2026-11-10 14:12:36 +08:00
  • 254efa6f15 chore: update repository cards 2026-11-10 github-actions[bot] 2026-11-10 05:55:09 +00:00
  • 63650a31a1 fix(iam): keep a service account's inline policy on an edit that names none Feng Ruohang 2026-11-10 09:42:43 +08:00
  • 36c8d1683a fix(ilm): count a version under old and healed headers as one revision claude/multi-pool-ilm-version-dup-210154 Feng Ruohang 2026-11-10 13:45:37 +08:00
  • c11bfda8f4 fix(iam): keep a service account's inline policy on an edit that names none claude/svcacct-inline-policy-bug-961eaa Feng Ruohang 2026-11-10 09:42:43 +08:00
  • 6a65b43076 docs(helm): fix NOTES connection commands and document 20261109 upgrade gates Feng Ruohang 2026-11-10 11:00:05 +08:00
  • 3269d2214e docs: align release, TLS, healthcheck, and contributor docs with 20261109 Feng Ruohang 2026-11-10 11:00:05 +08:00
  • b3e69bca2f fix(pools): keep rejected names out of a single-pool bulk delete Feng Ruohang 2026-11-10 09:01:26 +08:00
  • d998292387 Merge pull request #330 from pgsty/codex/release-20261109-closeout RELEASE.2026-11-09T00-00-00Z Feng Ruohang 2026-11-10 00:09:45 +08:00
  • 6ef3a52fc3 Enforce Object Lock during S3 bulk version deletion codex/release-20261109-closeout Feng Ruohang 2026-11-09 23:53:43 +08:00
  • e21b1c3a71 docs(healthcheck): say what ready does not wait for Feng Ruohang 2026-11-09 22:07:59 +08:00
  • 86dc6ee2e2 fix(restore): return from a failed restore without waiting for its cleanup Feng Ruohang 2026-11-09 22:07:59 +08:00
  • 0a238589a4 ci: gate releases on the new Object Lock delete tests Feng Ruohang 2026-11-09 21:26:02 +08:00
  • 1f731549e4 docs: prepare SILO 20261109 Feng Ruohang 2026-11-09 21:05:22 +08:00
  • 368c52f4dc build(deps): embed the published Console v2.7.0 Feng Ruohang 2026-11-09 21:02:16 +08:00
  • f0a4d76ef8 Merge #328: Console 2.7, mcli 20261109 and silo-pkg 3.16 Feng Ruohang 2026-11-09 21:00:20 +08:00
  • 2c06b28dbb deps: pin SILO Console 2.7.0 deps/console-2.7.0 Feng Ruohang 2026-11-09 20:49:43 +08:00
  • aa2d79daf2 fix(object-lock): check a directory object's lock before a bulk delete Feng Ruohang 2026-11-09 19:13:21 +08:00
  • 7e9ee6befc fix(replication): keep Object Lock on a replicated delete Feng Ruohang 2026-11-09 19:13:21 +08:00
  • 47275042f6 chore(helm): deploy SILO and mcli 20261109 by default Feng Ruohang 2026-11-09 19:03:32 +08:00
  • d66b3889cd ci: give the native restore race tests room to finish Feng Ruohang 2026-11-09 19:03:32 +08:00
  • 099b7ddf37 fix(replication): handle absent pool in worker metrics codex/silo-deps-20261109 Feng Ruohang 2026-11-09 18:10:19 +08:00
  • c054569b9f Update SILO to Console 2.7 and maintained dependency fixes Feng Ruohang 2026-11-09 17:24:59 +08:00
  • fb7a1ed0d7 chore: refresh repository cards for 2026-11-09 Feng Ruohang 2026-11-09 13:53:05 +08:00
  • 1f579afeed Merge origin/main: conditional multipart initiation (#292) Feng Ruohang 2026-11-09 13:39:10 +08:00
  • af3064f2b5 test(pools): cover initiate locking and completion conditions Feng Ruohang 2026-11-09 13:16:12 +08:00
  • 9d2be5daaa chore(batch): keep the policy snapshot out of msgp generation Feng Ruohang 2026-11-08 11:38:59 +08:00
  • 1f3377862b Merge pull request #292 from botdeniska/fix/initiate-precondition-pools Feng Ruohang 2026-11-09 13:34:09 +08:00
  • b14dc454fb Merge origin/main: one trust store for both server images, mcli notices (#295) Feng Ruohang 2026-11-09 09:47:04 +08:00
  • 16738c2301 build(docker): ship mcli's legal files and keep base digests current Feng Ruohang 2026-11-09 09:33:29 +08:00
  • 53a8f7583f fix(docker): make the distroless image trust the same roots as the classic image Feng Ruohang 2026-11-09 09:33:29 +08:00
  • bb31c26183 fix: close IAM loading and batch recovery review gaps Feng Ruohang 2026-11-08 18:52:50 +08:00
  • 07ce95dfda fix(iam): protect stale creates and cache loads Feng Ruohang 2026-11-08 14:19:44 +08:00
  • 7eed95bc8e fix(iam): drop a stale cached identity when its edit is refused Feng Ruohang 2026-11-08 14:18:41 +08:00
  • 70914759e5 fix(iam): edit users and service accounts on the stored record, not a cached copy Feng Ruohang 2026-11-08 13:56:04 +08:00
  • a0de92fcbe fix(iam): refresh LDAP groups on the stored credential, not a stale snapshot Feng Ruohang 2026-11-08 12:00:20 +08:00
  • af0afd2321 test(batch): pin the parity of the tiered purge transition helper Feng Ruohang 2026-11-08 11:39:03 +08:00