Server

What's Changed

• test(ecstore): cover managed sse range reads by @marshawcoco in https://github.com/rustfs/rustfs/pull/2962
• ci: force Node24 in Nix workflows with pinned actions by @houseme in https://github.com/rustfs/rustfs/pull/2966
• bucket policy notify & pba by @GatewayJ in https://github.com/rustfs/rustfs/pull/2968
• fix(sftp): preserve OPEN-time client attrs as object metadata by @simon-escapecode in https://github.com/rustfs/rustfs/pull/2913
• ci(build): pin macOS x86 release runner by @overtrue in https://github.com/rustfs/rustfs/pull/2971
• fix(admin): surface access key policy errors by @marshawcoco in https://github.com/rustfs/rustfs/pull/2970
• fix: handle Windows paths in pre-commit tests by @marshawcoco in https://github.com/rustfs/rustfs/pull/2974
• ci(build): honor console asset download fallback by @overtrue in https://github.com/rustfs/rustfs/pull/2980
• docs: fix some dead links by @yihong0618 in https://github.com/rustfs/rustfs/pull/2975
• fix(security): harden proxy auth and default credentials by @overtrue in https://github.com/rustfs/rustfs/pull/2981
• fix: stabilize rebalance start and listing by @weisd in https://github.com/rustfs/rustfs/pull/2961
• fix(runtime): finalize issue 2941 profiling cleanup by @houseme in https://github.com/rustfs/rustfs/pull/2983
• fix(policy): align action-family validation and defaults by @GatewayJ in https://github.com/rustfs/rustfs/pull/2984
• test(policy): validate default policies by @overtrue in https://github.com/rustfs/rustfs/pull/2985
• ci(nix): avoid requesting review from PR author by @overtrue in https://github.com/rustfs/rustfs/pull/2987
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2986
• fix(notify): accept case-insensitive filter rule names by @marshawcoco in https://github.com/rustfs/rustfs/pull/2990
• docs: update security advisory skill lessons by @overtrue in https://github.com/rustfs/rustfs/pull/2991
• fix(ecstore): list_object_v2 error when scanning multipart folder by @Littlew0od in https://github.com/rustfs/rustfs/pull/2946
• fix: harden lifecycle transition compensation and regression coverage by @houseme in https://github.com/rustfs/rustfs/pull/2995
• fix: keep scanner walk timeouts from offlining drives by @weisd in https://github.com/rustfs/rustfs/pull/2996
• fix(ecstore): guard transition worker max by @overtrue in https://github.com/rustfs/rustfs/pull/3003
• perf: avoid blocking hop for owned disk writes by @overtrue in https://github.com/rustfs/rustfs/pull/3004
• fix: make help color not right by @yihong0618 in https://github.com/rustfs/rustfs/pull/3005
• fix(notify): parse IPv6 hosts without ports by @marshawcoco in https://github.com/rustfs/rustfs/pull/3000
• chore: update dependencies by @houseme in https://github.com/rustfs/rustfs/pull/2890
• fix(ecstore): stop listing after reaching result limit by @overtrue in https://github.com/rustfs/rustfs/pull/3001
• feat(internode): add transport observability by @marshawcoco in https://github.com/rustfs/rustfs/pull/3007
• perf(filemeta): rename_data metadata optimization by @houseme in https://github.com/rustfs/rustfs/pull/3011
• feat(obs): expose key S3 usecase spans at info by @houseme in https://github.com/rustfs/rustfs/pull/3013
• refactor(s3): consolidate semantic boundaries and remove s3-common by @houseme in https://github.com/rustfs/rustfs/pull/3012
• chore(ci): pin RustFS setup-protoc release by @overtrue in https://github.com/rustfs/rustfs/pull/3016
• fix(heal): ignore missing response subscribers by @overtrue in https://github.com/rustfs/rustfs/pull/3015
• perf(ecstore): remove owned write sync regression by @overtrue in https://github.com/rustfs/rustfs/pull/3018
• feat(ecstore): add internode transport boundary and TCP baseline runner by @marshawcoco in https://github.com/rustfs/rustfs/pull/3010
• fix(utils): handle IPv6 zones and hex ranges by @overtrue in https://github.com/rustfs/rustfs/pull/3019
• fix(obs): remove stale replication metric TODOs by @overtrue in https://github.com/rustfs/rustfs/pull/3024
• fix(ecstore): remove stale disk TODOs by @overtrue in https://github.com/rustfs/rustfs/pull/3022
• fix(ecstore): remove stale bucket metadata parse TODO by @overtrue in https://github.com/rustfs/rustfs/pull/3021
• fix(utils): map common Linux filesystem magic values by @overtrue in https://github.com/rustfs/rustfs/pull/3023
• fix(obs): add proxied PUT replication metrics by @overtrue in https://github.com/rustfs/rustfs/pull/3020
• feat(internode): harden p0 transport boundary and baseline tooling by @marshawcoco in https://github.com/rustfs/rustfs/pull/3017
• refactor(ecstore): decouple transport construction from RemoteDisk by @marshawcoco in https://github.com/rustfs/rustfs/pull/3027
• refactor: converge storage io hot paths by @houseme in https://github.com/rustfs/rustfs/pull/3029
• chore(release): prepare 1.0.0-beta.4 by @houseme in https://github.com/rustfs/rustfs/pull/3032
• chore(deps): refresh workspace deps and linux fs_type gating by @houseme in https://github.com/rustfs/rustfs/pull/3030

New Contributors

• @Littlew0od made their first contribution in https://github.com/rustfs/rustfs/pull/2946

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.3...1.0.0-beta.4

What's Changed

• fix(object-lock): materialize default retention metadata by @GatewayJ in https://github.com/rustfs/rustfs/pull/2824
• test(s3): promote passing copy metadata case by @overtrue in https://github.com/rustfs/rustfs/pull/2832
• fix: 2827 lifecycle days next midnight by @cxymds in https://github.com/rustfs/rustfs/pull/2833
• fix(security): document unsafe and TLS overrides by @overtrue in https://github.com/rustfs/rustfs/pull/2835
• feat: add features option to build script by @giter in https://github.com/rustfs/rustfs/pull/2834
• test(build): cover build script feature flags by @overtrue in https://github.com/rustfs/rustfs/pull/2837
• test(helm): cover standalone scale-to-zero rendering by @overtrue in https://github.com/rustfs/rustfs/pull/2831
• test(lifecycle): cover ILM process time aliases by @overtrue in https://github.com/rustfs/rustfs/pull/2839
• test(object-lock): cover default retention delete marker by @GatewayJ in https://github.com/rustfs/rustfs/pull/2836
• fix(replication): handle version ID format mismatch with AWS S3 by @ajax-bakun-n in https://github.com/rustfs/rustfs/pull/2829
• test(replication): cover ETag comparison edge cases by @overtrue in https://github.com/rustfs/rustfs/pull/2840
• fix(build): quote build script features argument by @overtrue in https://github.com/rustfs/rustfs/pull/2841
• fix(admin): normalize empty admin POST content length by @cxymds in https://github.com/rustfs/rustfs/pull/2843
• feat(rustfs): add ftps/webdav defaults to info output by @houseme in https://github.com/rustfs/rustfs/pull/2845
• bump workspace versions and replace cfg-if in crypto by @houseme in https://github.com/rustfs/rustfs/pull/2851
• fix(ecstore): remove startup order sensitivity by @cxymds in https://github.com/rustfs/rustfs/pull/2850
• test(admin): cover POST content length compat layer by @overtrue in https://github.com/rustfs/rustfs/pull/2844
• feat(targets): complete redis mysql postgres target wiring by @houseme in https://github.com/rustfs/rustfs/pull/2842
• fix(ecstore): repair decommission pool quorum by @cxymds in https://github.com/rustfs/rustfs/pull/2847
• docs(io-metrics): fix misleading metrics links by @marshawcoco in https://github.com/rustfs/rustfs/pull/2849
• fix(targets): probe webhook health by host port by @houseme in https://github.com/rustfs/rustfs/pull/2854
• docs(security): refresh advisory lesson states by @overtrue in https://github.com/rustfs/rustfs/pull/2859
• test(targets): cover Redis env config loading by @overtrue in https://github.com/rustfs/rustfs/pull/2857
• test(s3): promote lifecycle expiration header tests by @overtrue in https://github.com/rustfs/rustfs/pull/2858
• docs(security): make advisory skill lesson first by @overtrue in https://github.com/rustfs/rustfs/pull/2860
• feat: enrich admin pools list response by @cxymds in https://github.com/rustfs/rustfs/pull/2853
• fix(ecstore): reset drive health between store init format retries by @weisd in https://github.com/rustfs/rustfs/pull/2848
• test(ecstore): cover store init health reset delegation by @overtrue in https://github.com/rustfs/rustfs/pull/2865
• test(admin): cover pool used-size saturation by @overtrue in https://github.com/rustfs/rustfs/pull/2863
• docs: ban rust-refactor-helper skill by @overtrue in https://github.com/rustfs/rustfs/pull/2869
• test(admin): cover pools list response serialization by @overtrue in https://github.com/rustfs/rustfs/pull/2862
• fix(iam): keep error state on initial load failure by @marshawcoco in https://github.com/rustfs/rustfs/pull/2846
• fix(ecstore): harden runtime read-path quorum handling by @houseme in https://github.com/rustfs/rustfs/pull/2872
• test(ecstore): cover system path failure classifier by @overtrue in https://github.com/rustfs/rustfs/pull/2874
• test(ecstore): cover offline capacity snapshots by @overtrue in https://github.com/rustfs/rustfs/pull/2880
• feat(targets): add AMQP support for notify and audit by @houseme in https://github.com/rustfs/rustfs/pull/2879
• fix(targets): handle postgres dsn redaction scheme case by @overtrue in https://github.com/rustfs/rustfs/pull/2886
• test(ecstore): cover empty runtime listing candidates by @overtrue in https://github.com/rustfs/rustfs/pull/2889
• docs(targets): sync AGENTS.md and test doc comments with code by @JaySon-Huang in https://github.com/rustfs/rustfs/pull/2881
• fix(server): handle public health before s3 host parsing by @marshawcoco in https://github.com/rustfs/rustfs/pull/2866
• fix: empty-body requests without content length by @SamuraJey in https://github.com/rustfs/rustfs/pull/2888
• fix(sse): Temporarily refactored the SSE design for ECStore by @reatang in https://github.com/rustfs/rustfs/pull/2813
• feat: enhance WebDAV support with features and directory operations (#2856) by @houseme in https://github.com/rustfs/rustfs/pull/2892
• feat(sftp): add SFTPv3 protocol support by @simon-escapecode in https://github.com/rustfs/rustfs/pull/2875
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2894
• test(sftp): cover init negotiation and platform gating by @overtrue in https://github.com/rustfs/rustfs/pull/2896
• test(sftp): cover init session activity stamp by @overtrue in https://github.com/rustfs/rustfs/pull/2898
• keep sftp e2e tests buildable by @houseme in https://github.com/rustfs/rustfs/pull/2897
• feat(targets): add check_mysql_server_available probe function by @JaySon-Huang in https://github.com/rustfs/rustfs/pull/2884
• test(s3): promote passing SSE multipart cases by @overtrue in https://github.com/rustfs/rustfs/pull/2900
• optimize(obs):zero and expire removed replication bandwidth series by @LeonWang0735 in https://github.com/rustfs/rustfs/pull/2901
• fix(targets): handle MySQL DSN scheme case by @overtrue in https://github.com/rustfs/rustfs/pull/2903
• test(obs): cover replication bandwidth tombstones by @overtrue in https://github.com/rustfs/rustfs/pull/2906
• test(targets): cover MySQL probe validation by @overtrue in https://github.com/rustfs/rustfs/pull/2907
• fix(sftp): classify backend errors by type by @marshawcoco in https://github.com/rustfs/rustfs/pull/2909
• fix(protocols): encode storage client request URIs by @marshawcoco in https://github.com/rustfs/rustfs/pull/2911
• test(e2e): gate protocol runner by requested features by @marshawcoco in https://github.com/rustfs/rustfs/pull/2912
• fix(notify): match filters against decoded event keys by @marshawcoco in https://github.com/rustfs/rustfs/pull/2921
• fix(ecstore): fail listing on stalled reader by @marshawcoco in https://github.com/rustfs/rustfs/pull/2920
• fix(storage): sync transition tier config across peers by @cxymds in https://github.com/rustfs/rustfs/pull/2918
• fix(ecstore): preserve list marker set index by @marshawcoco in https://github.com/rustfs/rustfs/pull/2919
• fix(protocols): add hot reload for WebDAV FTPS and SFTP by @houseme in https://github.com/rustfs/rustfs/pull/2922
• test(protocols): cover TLS reload fingerprint ordering by @overtrue in https://github.com/rustfs/rustfs/pull/2927
• iam: handle sts claim policy names by @GatewayJ in https://github.com/rustfs/rustfs/pull/2902
• test(iam): cover mixed STS claim policy names by @overtrue in https://github.com/rustfs/rustfs/pull/2932
• test(protocols): cover SFTP host key reload failure by @overtrue in https://github.com/rustfs/rustfs/pull/2928
• fix(sftp): preserve open attrs metadata by @marshawcoco in https://github.com/rustfs/rustfs/pull/2929
• test(notify): cover encoded key target union by @overtrue in https://github.com/rustfs/rustfs/pull/2934
• fix: make HeadObject consistent after write completion by @houseme in https://github.com/rustfs/rustfs/pull/2936
• fix(tls): ignore Kubernetes secret projection dirs by @marshawcoco in https://github.com/rustfs/rustfs/pull/2938
• fix(server): fail fast when configured TLS parsing fails by @houseme in https://github.com/rustfs/rustfs/pull/2939
• fix(ecstore): surface prefix listing storage errors by @weisd in https://github.com/rustfs/rustfs/pull/2940
• fix(storage): keep storage info RPC map encoded by @weisd in https://github.com/rustfs/rustfs/pull/2942
• fix(sftp): avoid metadata on multipart copy by @overtrue in https://github.com/rustfs/rustfs/pull/2935
• fix(ecstore): fail listing on walk_dir producer errors by @marshawcoco in https://github.com/rustfs/rustfs/pull/2937
• fix: preserve pagination when max keys exceed limit by @weisd in https://github.com/rustfs/rustfs/pull/2943
• fix(ecstore): map missing metadata to not found by @cxymds in https://github.com/rustfs/rustfs/pull/2944
• Fix #2775 recursive list handling in LocalDisk::scan_dir() by @SamuraJey in https://github.com/rustfs/rustfs/pull/2923
• fix(ecstore): propagate walk listing errors by @marshawcoco in https://github.com/rustfs/rustfs/pull/2949
• fix(notify): keep live listen events active when disabled by @marshawcoco in https://github.com/rustfs/rustfs/pull/2952
• test(ecstore): cover walk listing error success paths by @overtrue in https://github.com/rustfs/rustfs/pull/2954
• chore(release): prepare 1.0.0-beta.3 by @houseme in https://github.com/rustfs/rustfs/pull/2957
• refactor(targets): unify queue/connectivity handling and coverage by @houseme in https://github.com/rustfs/rustfs/pull/2953
• fix(ecstore): use hex sha256 for delete objects by @marshawcoco in https://github.com/rustfs/rustfs/pull/2958
• test(notify): cover prefix suffix event dispatch by @marshawcoco in https://github.com/rustfs/rustfs/pull/2960

New Contributors

• @ajax-bakun-n made their first contribution in https://github.com/rustfs/rustfs/pull/2829
• @SamuraJey made their first contribution in https://github.com/rustfs/rustfs/pull/2888

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.2...1.0.0-beta.3

What's Changed

• fix: docker image build and helm chart publish error caused by versio… by @majinghe in https://github.com/rustfs/rustfs/pull/2731
• fix(admin): harden site-replication identity handling and local verification for issue 2723 by @houseme in https://github.com/rustfs/rustfs/pull/2730
• feat: helm publish manual trigger support by @majinghe in https://github.com/rustfs/rustfs/pull/2732
• test(webdav): cover decoded path parsing by @overtrue in https://github.com/rustfs/rustfs/pull/2729
• feat: helm chart version update by @majinghe in https://github.com/rustfs/rustfs/pull/2738
• docs: simplify pull request template by @overtrue in https://github.com/rustfs/rustfs/pull/2744
• fix(ci): keep Helm chart versions valid for non-beta releases by @overtrue in https://github.com/rustfs/rustfs/pull/2749
• test(admin): cover site replication absolute URI endpoint by @overtrue in https://github.com/rustfs/rustfs/pull/2745
• test(ci): cover Helm chart version mapping by @overtrue in https://github.com/rustfs/rustfs/pull/2751
• fix(filemeta): harden and optimize metacache path by @GatewayJ in https://github.com/rustfs/rustfs/pull/2724
• test(ci): cover Helm Recreate strategy rendering by @overtrue in https://github.com/rustfs/rustfs/pull/2752
• test(filemeta): cover shared cache reuse by @overtrue in https://github.com/rustfs/rustfs/pull/2754
• test(filemeta): cover no-wait refresh coalescing by @overtrue in https://github.com/rustfs/rustfs/pull/2755
• test(admin): cover site replication scheme normalization by @overtrue in https://github.com/rustfs/rustfs/pull/2757
• test(filemeta): cover future cache timestamp refresh by @overtrue in https://github.com/rustfs/rustfs/pull/2762
• test(admin): cover peer identity scheme dedupe by @overtrue in https://github.com/rustfs/rustfs/pull/2764
• fix: handle empty multipart list-parts by @overtrue in https://github.com/rustfs/rustfs/pull/2765
• test(admin): cover site identity merge gaps by @overtrue in https://github.com/rustfs/rustfs/pull/2767
• test(ecstore): cover ranged decode and harden offset bounds by @RamakrishnaChilaka in https://github.com/rustfs/rustfs/pull/2758
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2777
• fix(security): harden CORS and license handling by @overtrue in https://github.com/rustfs/rustfs/pull/2774
• Harden admin and RPC security checks by @overtrue in https://github.com/rustfs/rustfs/pull/2773
• fix: address security review follow-ups by @overtrue in https://github.com/rustfs/rustfs/pull/2781
• Ensure CreationDate is always present in ListBuckets response by @joeyshi12 in https://github.com/rustfs/rustfs/pull/2783
• build(deps): bump the dependencies group with 4 updates by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/2785
• test(license): cover public key validation by @overtrue in https://github.com/rustfs/rustfs/pull/2793
• test(admin): cover legacy profile auth guards by @overtrue in https://github.com/rustfs/rustfs/pull/2799
• test: cover license verifier success path by @overtrue in https://github.com/rustfs/rustfs/pull/2798
• fix: Fix formatting issue in ARCHITECTURE.md by @JaySon-Huang in https://github.com/rustfs/rustfs/pull/2787
• fix(rpc): use map-encoded msgpack for all internode RPC responses by @kharkevich in https://github.com/rustfs/rustfs/pull/2771
• fix(server): avoid logging default credential values by @marshawcoco in https://github.com/rustfs/rustfs/pull/2800
• docs: add security advisory lessons skill by @overtrue in https://github.com/rustfs/rustfs/pull/2801
• fix(admin): allow site replication removal with offline peers by @cxymds in https://github.com/rustfs/rustfs/pull/2739
• test: cover RPC secret trimming fallback by @overtrue in https://github.com/rustfs/rustfs/pull/2796
• fix(s3): advertise byte ranges on head object by @overtrue in https://github.com/rustfs/rustfs/pull/2802
• fix(notify): validate bucket notification filter rules by @houseme in https://github.com/rustfs/rustfs/pull/2806
• fix(lock): make slow-path waiter accounting cancellation-safe by @houseme in https://github.com/rustfs/rustfs/pull/2805
• fix(getobject): prevent large-download memory buffering by @houseme in https://github.com/rustfs/rustfs/pull/2809
• test(lock): cover shared waiter abort cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/2811
• fix(admin): clear removed site resync status by @overtrue in https://github.com/rustfs/rustfs/pull/2803
• build(deps): bump the dependencies group with 3 updates by @houseme in https://github.com/rustfs/rustfs/pull/2812
• fix(notify): improve webhook target diagnostics for env setup by @houseme in https://github.com/rustfs/rustfs/pull/2810
• test(admin): cover orphan resync status cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/2816
• test(getobject): cover buffer threshold edge cases by @overtrue in https://github.com/rustfs/rustfs/pull/2817
• fix(auth): authorize DeleteObjects per key by @GatewayJ in https://github.com/rustfs/rustfs/pull/2814
• refactor: unify credential env constants and deploy env usage by @houseme in https://github.com/rustfs/rustfs/pull/2821
• test(credentials): avoid printing default secret by @marshawcoco in https://github.com/rustfs/rustfs/pull/2820
• fix: preserve data on self metadata copy by @overtrue in https://github.com/rustfs/rustfs/pull/2819
• feat(helm-chart): support scale to 0 in standalone mode by @dcelasun in https://github.com/rustfs/rustfs/pull/2797
• security: same-origin console CORS, fail-closed helm creds, deny.toml, sample-config hardening by @skandragon in https://github.com/rustfs/rustfs/pull/2769
• fix(rpc): add issue 2815 regression and docker validation by @houseme in https://github.com/rustfs/rustfs/pull/2828
• fix(policy): avoid logging generated access keys by @marshawcoco in https://github.com/rustfs/rustfs/pull/2826
• fix: reload bucket metadata after lifecycle updates by @cxymds in https://github.com/rustfs/rustfs/pull/2822

⚠️ Breaking Changes

Console CORS default

RUSTFS_CONSOLE_CORS_ALLOWED_ORIGINS

*

RUSTFS_CONSOLE_CORS_ALLOWED_ORIGINS=*

New Contributors

• @joeyshi12 made their first contribution in https://github.com/rustfs/rustfs/pull/2783
• @JaySon-Huang made their first contribution in https://github.com/rustfs/rustfs/pull/2787
• @dcelasun made their first contribution in https://github.com/rustfs/rustfs/pull/2797
• @skandragon made their first contribution in https://github.com/rustfs/rustfs/pull/2769

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.1...1.0.0-beta.2

What's Changed

• feat(obs): improve metrics coverage and dashboard performance by @houseme in https://github.com/rustfs/rustfs/pull/2682
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2683
• test(utils): cover disk-check env alias precedence by @overtrue in https://github.com/rustfs/rustfs/pull/2684
• fix(admin): map IAM not found errors to 404 by @GatewayJ in https://github.com/rustfs/rustfs/pull/2685
• feat: add console-managed audit and notify module switches by @houseme in https://github.com/rustfs/rustfs/pull/2690
• perf(memory): add reclaim signals and cache controls by @houseme in https://github.com/rustfs/rustfs/pull/2689
• test(server): cover default module switch source by @overtrue in https://github.com/rustfs/rustfs/pull/2697
• build(deps): bump the dependencies group with 2 updates by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/2694
• fix(replication): fan out single-bucket rules to all targets by @weisd in https://github.com/rustfs/rustfs/pull/2701
• fix(iam): propagate cache miss load failures by @GatewayJ in https://github.com/rustfs/rustfs/pull/2692
• fix(replication): prevent target state loss across buckets by @weisd in https://github.com/rustfs/rustfs/pull/2704
• fix(ilm): harden signer failures and guard remote tier delete storms by @houseme in https://github.com/rustfs/rustfs/pull/2706
• fix: honor bucket-scoped ListBucket policies with s3:prefix by @overtrue in https://github.com/rustfs/rustfs/pull/2707
• fix(ecstore): log walk failures in IAM listing path by @GatewayJ in https://github.com/rustfs/rustfs/pull/2705
• build(deps): bump the dependencies group with 2 updates by @houseme in https://github.com/rustfs/rustfs/pull/2709
• fix(iam): preserve portable IAM storage and derived auth by @weisd in https://github.com/rustfs/rustfs/pull/2713
• fix(storage): avoid faulting local drives on transient timeouts by @weisd in https://github.com/rustfs/rustfs/pull/2714
• fix(lifecycle): prevent eager date-expiry deletion on config update by @houseme in https://github.com/rustfs/rustfs/pull/2708
• fix(policy): allow AssumeRole in system policies by @cxymds in https://github.com/rustfs/rustfs/pull/2718
• fix(obs): disable profiling export by default and fix Helm env name by @houseme in https://github.com/rustfs/rustfs/pull/2719
• fix(webdav): decode URL-encoded filenames in path parsing by @giter in https://github.com/rustfs/rustfs/pull/2722
• fix(policy): preserve gateway ListBucket resources by @overtrue in https://github.com/rustfs/rustfs/pull/2710
• test(signer): cover header fallback helpers by @overtrue in https://github.com/rustfs/rustfs/pull/2711
• fix(window): Compatible with Windows Path by @reatang in https://github.com/rustfs/rustfs/pull/2691
• fix(helm): only render rollingUpdate when strategy type is RollingUpdate by @rafaelperoco in https://github.com/rustfs/rustfs/pull/2728
• chore: update version from alpha to beta by @majinghe in https://github.com/rustfs/rustfs/pull/2720
• test(get): reject range with part number by @RamakrishnaChilaka in https://github.com/rustfs/rustfs/pull/2725

New Contributors

• @giter made their first contribution in https://github.com/rustfs/rustfs/pull/2722
• @rafaelperoco made their first contribution in https://github.com/rustfs/rustfs/pull/2728

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.99...v1.0.0-beta.1

What's Changed

• fix(admin): enforce owner check for service account update by @GatewayJ in https://github.com/rustfs/rustfs/pull/2646
• refactor(logging): unify request-id propagation and fallback metrics by @houseme in https://github.com/rustfs/rustfs/pull/2652
• refactor(targets): unify endpoint source/merge logic and bump rustfs-kafka-async to v1.2.0 by @houseme in https://github.com/rustfs/rustfs/pull/2654
• build(deps): bump the dependencies group with 6 updates by @houseme in https://github.com/rustfs/rustfs/pull/2659
• test(admin): cover list service account authorization by @overtrue in https://github.com/rustfs/rustfs/pull/2650
• feat(obs): support OTLP headers and timeout overrides for HTTP exporters by @houseme in https://github.com/rustfs/rustfs/pull/2661
• fix(admin): harden health readiness and add health response controls by @houseme in https://github.com/rustfs/rustfs/pull/2662
• fix(console): block disabled health probes from SPA fallback by @overtrue in https://github.com/rustfs/rustfs/pull/2665
• fix(oidc): add federated logout flow by @cxymds in https://github.com/rustfs/rustfs/pull/2667
• feat(policy): implement BinaryEquals condition evaluation by @RamakrishnaChilaka in https://github.com/rustfs/rustfs/pull/2626
• feat(rustfs): gate audit/notify by global env switches by @houseme in https://github.com/rustfs/rustfs/pull/2669
• fix(audit): remove unwrap from target shutdown path by @marshawcoco in https://github.com/rustfs/rustfs/pull/2668
• feat(obs): improve telemetry stack, replication metrics, and Grafana alignment by @houseme in https://github.com/rustfs/rustfs/pull/2672
• fix(metrics): keep S3 op counts when chains are disabled by @overtrue in https://github.com/rustfs/rustfs/pull/2675
• feat(trusted-proxies): add switchable simple and legacy modes by @houseme in https://github.com/rustfs/rustfs/pull/2674
• fix: avoid sending HEAD bodies over TLS HTTP/2 by @reatang in https://github.com/rustfs/rustfs/pull/2648
• fix(admin): harden STS and KMS authorization checks by @marshawcoco in https://github.com/rustfs/rustfs/pull/2653
• fix(site-replication): sync IAM and bucket replication by @cxymds in https://github.com/rustfs/rustfs/pull/2671
• build(deps): bump the dependencies group with 7 updates by @houseme in https://github.com/rustfs/rustfs/pull/2676
• test(ecstore): cover non-zero offset shard span reads by @overtrue in https://github.com/rustfs/rustfs/pull/2677
• feat(ecstore): enforce local disk topology guardrails and expose device ids by @houseme in https://github.com/rustfs/rustfs/pull/2679
• fix(ecstore): log missing local paths during physical disk independence checks by @houseme in https://github.com/rustfs/rustfs/pull/2680

New Contributors

• @RamakrishnaChilaka made their first contribution in https://github.com/rustfs/rustfs/pull/2626

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.98...1.0.0-alpha.99

What's Changed

• fix(s3): return 304 Not Modified instead of dropping the connection by @sciyoshi in https://github.com/rustfs/rustfs/pull/2627
• refactor: update binary field types and conversions in RPC and protofiles by @reatang in https://github.com/rustfs/rustfs/pull/2619
• fix(security): redact target debug logs and remove eval-based bench hook by @houseme in https://github.com/rustfs/rustfs/pull/2637
• fix(lock): prevent stale distributed object locks by @weisd in https://github.com/rustfs/rustfs/pull/2633
• fix: prevent object lock retention race by @weisd in https://github.com/rustfs/rustfs/pull/2634
• test(targets): cover target config redaction by @overtrue in https://github.com/rustfs/rustfs/pull/2638
• fix(storage): list prefix children behind marker objects by @weisd in https://github.com/rustfs/rustfs/pull/2643
• fix(admin): authorize cross-user ListServiceAccount with ListServiceAccount by @loverustfs in https://github.com/rustfs/rustfs/pull/2640

New Contributors

• @sciyoshi made their first contribution in https://github.com/rustfs/rustfs/pull/2627

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.97...1.0.0-alpha.98

What's Changed

• fix(lifecycle): correct delete replication fanout by @cxymds in https://github.com/rustfs/rustfs/pull/2609
• feat(targets): add NATS and Pulsar target support by @houseme in https://github.com/rustfs/rustfs/pull/2618
• fix(madmin): restore server_info msgpack compatibility across mixed nodes by @houseme in https://github.com/rustfs/rustfs/pull/2621
• test: cover NATS and Pulsar config validation by @overtrue in https://github.com/rustfs/rustfs/pull/2623
• fix: some expect error by @likewu in https://github.com/rustfs/rustfs/pull/2622
• feat: add OTHER_AUDIENCES config by @ateijelo in https://github.com/rustfs/rustfs/pull/2605
• feat(storage): wire capacity/object perf tuning and add batch benchmark runners by @houseme in https://github.com/rustfs/rustfs/pull/2628
• feat: add support for external/existing certificate issuer by @majinghe in https://github.com/rustfs/rustfs/pull/2631
• fix(scanner): avoid stalls after abandoned child listings by @weisd in https://github.com/rustfs/rustfs/pull/2632

New Contributors

• @ateijelo made their first contribution in https://github.com/rustfs/rustfs/pull/2605

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.96...1.0.0-alpha.97

What's Changed

• fix(replication): clean targets when deleting config by @overtrue in https://github.com/rustfs/rustfs/pull/2599
• test(s3): promote passing compatibility cases by @overtrue in https://github.com/rustfs/rustfs/pull/2600
• test: cover S3 error XML body compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/2606

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.95...1.0.0-alpha.96

What's Changed

• chore(lint): clippy rules large_futures by @Tunglies in https://github.com/rustfs/rustfs/pull/2555
• test(ecstore): cover fresh tmp cleanup path by @overtrue in https://github.com/rustfs/rustfs/pull/2562
• add kms environment variables support in helm chart by @majinghe in https://github.com/rustfs/rustfs/pull/2552
• fix: update base image to fix security issue caused by alpine by @majinghe in https://github.com/rustfs/rustfs/pull/2563
• lint: clippy rules or_fun_call by @Tunglies in https://github.com/rustfs/rustfs/pull/2561
• fix(storage): harden offline drive fail-fast paths by @houseme in https://github.com/rustfs/rustfs/pull/2564
• fix: update mtls configuration for standalone and distributed mode by @majinghe in https://github.com/rustfs/rustfs/pull/2565
• feat(lifecycle): improve ILM compatibility and scanner runtime config by @houseme in https://github.com/rustfs/rustfs/pull/2534
• fix(helm): disable kms default by @majinghe in https://github.com/rustfs/rustfs/pull/2566
• Centralize lifecycle state updates and fix systemd running status by @houseme in https://github.com/rustfs/rustfs/pull/2567
• fix(admin): align accountinfo policy with IAM prepare_auth for OIDC console by @GatewayJ in https://github.com/rustfs/rustfs/pull/2568
• fix(storage): avoid startup UUID disk lookup misses by @weisd in https://github.com/rustfs/rustfs/pull/2576
• chore: move mcp crate to standalone repository by @houseme in https://github.com/rustfs/rustfs/pull/2578
• test(utils): cover scanner env alias mapping by @overtrue in https://github.com/rustfs/rustfs/pull/2574
• fix(iam): decouple IAM config encryption from root secret rotation by @LeonWang0735 in https://github.com/rustfs/rustfs/pull/2558
• fix(cache): wire trusted-proxy cache and remove stale cache traces by @houseme in https://github.com/rustfs/rustfs/pull/2581
• refactor(metrics): separate console stream from exports by @houseme in https://github.com/rustfs/rustfs/pull/2583
• fix(admin): restore access key listing and guard boot-time uptime by @GatewayJ in https://github.com/rustfs/rustfs/pull/2580
• refactor(obs): migrate metrics runtime/schema and tighten migration guards by @houseme in https://github.com/rustfs/rustfs/pull/2584
• docs: update agent contribution guidelines by @overtrue in https://github.com/rustfs/rustfs/pull/2585
• test(s3): reclassify passing compatibility cases by @overtrue in https://github.com/rustfs/rustfs/pull/2586
• test(scanner): avoid flaky noncurrent version counting by @GatewayJ in https://github.com/rustfs/rustfs/pull/2589
• fix(oidc): prefer username for session identity by @GatewayJ in https://github.com/rustfs/rustfs/pull/2588
• fix(sse). Resolving Nonce Overwriting Issues in Multi-Package Scenarios by @reatang in https://github.com/rustfs/rustfs/pull/2582
• fix(s3): ignore empty conditional ETag headers by @overtrue in https://github.com/rustfs/rustfs/pull/2592
• refactor(metrics): unify process sampling and split network IO by @houseme in https://github.com/rustfs/rustfs/pull/2590
• fix(scanner): stabilize data usage cache persistence under slow metadata I/O by @houseme in https://github.com/rustfs/rustfs/pull/2594
• fix: handle raw URI paths in SigV4 by @overtrue in https://github.com/rustfs/rustfs/pull/2593
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2597
• fix(admin): accept trailing slash listen notification paths by @overtrue in https://github.com/rustfs/rustfs/pull/2595
• fix(s3): improve GitLab registry compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/2596
• test(s3): cover signed equals object reads by @overtrue in https://github.com/rustfs/rustfs/pull/2598

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.94...1.0.0-alpha.95

What's Changed

• refactor(storage): trim thin s3 forwarding layers by @overtrue in https://github.com/rustfs/rustfs/pull/2474
• fix(server): warn on default credentials with console enabled by @marshawcoco in https://github.com/rustfs/rustfs/pull/2448
• refactor(storage): inline list response params by @overtrue in https://github.com/rustfs/rustfs/pull/2476
• refactor(storage): inline extract put-object branch by @overtrue in https://github.com/rustfs/rustfs/pull/2482
• refactor(storage): drop ecfs test-only helper by @overtrue in https://github.com/rustfs/rustfs/pull/2484
• test(utils): make retry timer assertions deterministic by @marshawcoco in https://github.com/rustfs/rustfs/pull/2468
• test(bucket): cover inline list response params by @overtrue in https://github.com/rustfs/rustfs/pull/2483
• refactor(storage): inline object metadata read entrypoints by @overtrue in https://github.com/rustfs/rustfs/pull/2485
• refactor(storage): inline object tagging entrypoints by @overtrue in https://github.com/rustfs/rustfs/pull/2486
• refactor(storage): inline object lock metadata writes by @overtrue in https://github.com/rustfs/rustfs/pull/2489
• fix(deploy): use standard rustfs log directory by @jlon in https://github.com/rustfs/rustfs/pull/2491
• fix(storage): fix critical bug in range calculation by @zeapo in https://github.com/rustfs/rustfs/pull/2493
• fix(get): validate fast path body before response commit by @houseme in https://github.com/rustfs/rustfs/pull/2495
• fix(obs): respect error log level for http warnings by @jlon in https://github.com/rustfs/rustfs/pull/2492
• fix(storage): align archive content-encoding with S3 semantics by @houseme in https://github.com/rustfs/rustfs/pull/2496
• refactor(storage): inline object lock config entrypoints by @overtrue in https://github.com/rustfs/rustfs/pull/2494
• fix(deploy): auto-create rustfs log directory by @overtrue in https://github.com/rustfs/rustfs/pull/2500
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/2498
• build(deps): bump the dependencies group with 3 updates by @houseme in https://github.com/rustfs/rustfs/pull/2503
• refactor(storage): inline acl entrypoints by @overtrue in https://github.com/rustfs/rustfs/pull/2501
• test(get): cover fast path pre-commit errors by @overtrue in https://github.com/rustfs/rustfs/pull/2502
• fix(get): remove GET chunk fast path by @overtrue in https://github.com/rustfs/rustfs/pull/2507
• fix(admin): enforce event and audit target auth by @houseme in https://github.com/rustfs/rustfs/pull/2508
• build(deps): bump the dependencies group with 2 updates by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/2513
• docs: add ARCHITECTURE.md for project-wide code navigation by @overtrue in https://github.com/rustfs/rustfs/pull/2519
• fix: remove dead replace() call in gen_secret_key (credentials.rs) by @kuishou68 in https://github.com/rustfs/rustfs/pull/2515
• refactor(utils): decouple config deps and move sys helpers by @houseme in https://github.com/rustfs/rustfs/pull/2520
• test(get): cover reader-backed output context by @overtrue in https://github.com/rustfs/rustfs/pull/2516
• docs: Minor formatting clean up in README.md by @lbeckman314 in https://github.com/rustfs/rustfs/pull/2523
• test(credentials): cover URL-safe secret keys by @overtrue in https://github.com/rustfs/rustfs/pull/2524
• fix(io-metrics): remove dead GET chunk fast path metrics by @overtrue in https://github.com/rustfs/rustfs/pull/2531
• revert: restore PutObjReader and remove PUT zero-copy chunk path (#2351 phase 2) by @overtrue in https://github.com/rustfs/rustfs/pull/2532
• revert: remove BlockReadable trait and chunk-based I/O from rio, ecstore, disk layers by @overtrue in https://github.com/rustfs/rustfs/pull/2533
• fix: revert #2351 readers.rs behavioral changes (phase 6) by @overtrue in https://github.com/rustfs/rustfs/pull/2536
• fix: revert standalone #2351 artifacts (phase 5) by @overtrue in https://github.com/rustfs/rustfs/pull/2535
• fix: restore bitrot stream and checksum metadata by @overtrue in https://github.com/rustfs/rustfs/pull/2542
• feat(oidc): add roles_claim and jwt:roles policy support by @GatewayJ in https://github.com/rustfs/rustfs/pull/2509
• revert: remove #2351 chunk I/O and object-io crate (phase 7) by @overtrue in https://github.com/rustfs/rustfs/pull/2543
• fix(admin): allow clearing group policy by @cxymds in https://github.com/rustfs/rustfs/pull/2527
• cleanup: remove orphaned chunk fast-path submodule files by @overtrue in https://github.com/rustfs/rustfs/pull/2545
• build(deps): bump the dependencies group with 7 updates by @houseme in https://github.com/rustfs/rustfs/pull/2546
• fix(admin): replicate empty site groups by @cxymds in https://github.com/rustfs/rustfs/pull/2528
• fix(ecstore): cleanup stale put object temp data by @weisd in https://github.com/rustfs/rustfs/pull/2529
• fix: add different annotations for different pvc by @majinghe in https://github.com/rustfs/rustfs/pull/2547
• fix(ci): enable merge_group trigger for GitHub Merge Queue by @overtrue in https://github.com/rustfs/rustfs/pull/2549
• fix(ci): report CLA check for GitHub Merge Queue by @overtrue in https://github.com/rustfs/rustfs/pull/2551
• fix(scanner): preserve totals for compacted folder scans by @weisd in https://github.com/rustfs/rustfs/pull/2530
• test: cover stored-size range handling by @overtrue in https://github.com/rustfs/rustfs/pull/2544
• chore(lint): clippy rules needless_collect by @Tunglies in https://github.com/rustfs/rustfs/pull/2522
• feat(helm): add generic service and ingress annotation support by @Strangerxxx in https://github.com/rustfs/rustfs/pull/2541
• chore(lint): clippy rules redundant_clone by @Tunglies in https://github.com/rustfs/rustfs/pull/2554
• test(filemeta): flush xl meta test fixture before reopen by @weisd in https://github.com/rustfs/rustfs/pull/2557

New Contributors

• @jlon made their first contribution in https://github.com/rustfs/rustfs/pull/2491
• @zeapo made their first contribution in https://github.com/rustfs/rustfs/pull/2493
• @kuishou68 made their first contribution in https://github.com/rustfs/rustfs/pull/2515
• @lbeckman314 made their first contribution in https://github.com/rustfs/rustfs/pull/2523
• @Tunglies made their first contribution in https://github.com/rustfs/rustfs/pull/2522
• @Strangerxxx made their first contribution in https://github.com/rustfs/rustfs/pull/2541

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.93...1.0.0-alpha.94

What's Changed

• fix(get-object): harden GET fast path against mid-stream regressions by @houseme in https://github.com/rustfs/rustfs/pull/2472

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.92...1.0.0-alpha.93

What's Changed

• ci: force Node.js 24 for JS setup actions by @overtrue in https://github.com/rustfs/rustfs/pull/2424
• ci: normalize tagged release package filenames by @overtrue in https://github.com/rustfs/rustfs/pull/2425
• fix(capacity): harden scope registry, scan symlink guard, and test temp dir cleanup by @houseme in https://github.com/rustfs/rustfs/pull/2432
• build(deps): bump the dependencies group with 4 updates by @houseme in https://github.com/rustfs/rustfs/pull/2435
• refactor(nix): modify git author info by @houseme in https://github.com/rustfs/rustfs/pull/2437
• fix(capacity): ignore future write buckets by @overtrue in https://github.com/rustfs/rustfs/pull/2440
• refactor(app): simplify object usecase plumbing by @overtrue in https://github.com/rustfs/rustfs/pull/2438
• test(capacity): cover poisoned scope registry recovery by @overtrue in https://github.com/rustfs/rustfs/pull/2441
• fix(iam): return policy JSON object from info_policy (#2395) by @GatewayJ in https://github.com/rustfs/rustfs/pull/2436
• docs: Update RustFS console access URL to port 9001 by @wanxger in https://github.com/rustfs/rustfs/pull/2442
• refactor(app): reuse list parts parsing by @overtrue in https://github.com/rustfs/rustfs/pull/2446
• refactor(app): reuse object tagging validation by @overtrue in https://github.com/rustfs/rustfs/pull/2445
• refactor(app): reuse multipart uploads helpers by @overtrue in https://github.com/rustfs/rustfs/pull/2447
• refactor(app): reuse bucket listing helpers by @overtrue in https://github.com/rustfs/rustfs/pull/2449
• refactor(storage): remove unused s3 api facades by @overtrue in https://github.com/rustfs/rustfs/pull/2450
• refactor(app): inline multipart transition helper by @overtrue in https://github.com/rustfs/rustfs/pull/2451
• refactor(app): inline bucket encryption output by @overtrue in https://github.com/rustfs/rustfs/pull/2452
• refactor(app): inline bucket replication output by @overtrue in https://github.com/rustfs/rustfs/pull/2454
• refactor(app): reuse put object request context by @overtrue in https://github.com/rustfs/rustfs/pull/2456
• refactor(app): inline bucket tagging outputs by @overtrue in https://github.com/rustfs/rustfs/pull/2455
• refactor(app): inline trivial s3 api outputs by @overtrue in https://github.com/rustfs/rustfs/pull/2460
• fix(filemeta): accept nil legacy pool metadata by @weisd in https://github.com/rustfs/rustfs/pull/2459
• test(filemeta): cover legacy nil UUID metadata by @overtrue in https://github.com/rustfs/rustfs/pull/2464
• refactor(app): inline object request context types by @overtrue in https://github.com/rustfs/rustfs/pull/2462
• refactor(app): inline remaining tagging outputs by @overtrue in https://github.com/rustfs/rustfs/pull/2461
• docs(readme): fix inconsistent startup instructions by @marshawcoco in https://github.com/rustfs/rustfs/pull/2465
• fix(ecstore): avoid duplicate keys in ListObjectsV2 by @weisd in https://github.com/rustfs/rustfs/pull/2467

New Contributors

• @wanxger made their first contribution in https://github.com/rustfs/rustfs/pull/2442
• @marshawcoco made their first contribution in https://github.com/rustfs/rustfs/pull/2465

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.91...1.0.0-alpha.92

What's Changed

• fix(ecstore): preserve transition object metadata by @cxymds in https://github.com/rustfs/rustfs/pull/2263
• fix(ecstore): honor lifecycle tag filters by @cxymds in https://github.com/rustfs/rustfs/pull/2264
• refactor(auth): Improve UI access token login issue by @heihutu in https://github.com/rustfs/rustfs/pull/2277
• feat(s3): advance parity coverage by @weisd in https://github.com/rustfs/rustfs/pull/2278
• fix(object): always unregister deadlock-tracked get requests by @overtrue in https://github.com/rustfs/rustfs/pull/2275
• fix(disk): Fix Usage Report Capacity Calculation by @houseme in https://github.com/rustfs/rustfs/pull/2274
• fix(checksum): align multipart CRC64NVME with full object by @weisd in https://github.com/rustfs/rustfs/pull/2286
• feat(obs): integrate dial9-tokio-telemetry for runtime tracing by @houseme in https://github.com/rustfs/rustfs/pull/2285
• fix(tier): sweep transitioned copies from delete handlers by @weisd in https://github.com/rustfs/rustfs/pull/2287
• ci(build): enable tokio_unstable flag in Build RustFS job by @houseme in https://github.com/rustfs/rustfs/pull/2289
• feat(object-lock): complete legal hold enforcement by @weisd in https://github.com/rustfs/rustfs/pull/2293
• feat(ecstore): implement decommission and rebalance by @overtrue in https://github.com/rustfs/rustfs/pull/2281
• fix(object-lock): recover remaining s3 tests by @weisd in https://github.com/rustfs/rustfs/pull/2294
• feat(s3): reject write-offset-bytes requests compatibly by @weisd in https://github.com/rustfs/rustfs/pull/2295
• add ec environment variables in helm chart by @majinghe in https://github.com/rustfs/rustfs/pull/2290
• build(deps): bump the dependencies group with 6 updates by @houseme in https://github.com/rustfs/rustfs/pull/2303
• fix(filemeta): support legacy xl.meta compatibility by @weisd in https://github.com/rustfs/rustfs/pull/2304
• feat(admin): add MinIO-compatible admin aliases by @overtrue in https://github.com/rustfs/rustfs/pull/2307
• feat(admin): align heal compatibility routes by @overtrue in https://github.com/rustfs/rustfs/pull/2311
• test(storage): cover write-offset rejection by @overtrue in https://github.com/rustfs/rustfs/pull/2316
• test(s3): complete snowball auto-extract coverage by @overtrue in https://github.com/rustfs/rustfs/pull/2313
• refactor(capacity): optimize capacity management module by @houseme in https://github.com/rustfs/rustfs/pull/2325
• feat(iam,admin): prepared IAM auth, ExistingObjectTag, admin permission checks by @GatewayJ in https://github.com/rustfs/rustfs/pull/2315
• test(s3): complete snowball auto-extract compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/2324
• test(object-lock): cover validation gaps by @overtrue in https://github.com/rustfs/rustfs/pull/2318
• test(admin): cover compatible alias routes by @overtrue in https://github.com/rustfs/rustfs/pull/2328
• fix(admin): route root heal start through heal_format by @overtrue in https://github.com/rustfs/rustfs/pull/2323
• test(filemeta): cover legacy delete marker fallback by @overtrue in https://github.com/rustfs/rustfs/pull/2322
• test(storage): cover write-offset pre-auth rejection by @overtrue in https://github.com/rustfs/rustfs/pull/2319
• test(s3): cover anonymous write-offset rejection by @overtrue in https://github.com/rustfs/rustfs/pull/2320
• test(admin): cover alias parsing edge cases by @overtrue in https://github.com/rustfs/rustfs/pull/2326
• fix: address correctness, safety, and concurrency issues by @houseme in https://github.com/rustfs/rustfs/pull/2327
• perf(capacity): tune default capacity settings, sync docs, and fix refresh/metrics correctness by @houseme in https://github.com/rustfs/rustfs/pull/2336
• build(deps): bump rustc-hash from 2.1.1 to 2.1.2 in the dependencies group by @dependabot[bot] in https://github.com/rustfs/rustfs/pull/2339
• fix: populate tagging notification principalId and object metadata by @houseme in https://github.com/rustfs/rustfs/pull/2342
• test(admin): cover heal alias routes by @overtrue in https://github.com/rustfs/rustfs/pull/2329
• test(ecstore): cover inline bitrot offset reads by @overtrue in https://github.com/rustfs/rustfs/pull/2337
• test(ecstore): cover read offset overflow by @overtrue in https://github.com/rustfs/rustfs/pull/2341
• test(admin): cover tier, bucket metadata, and kms aliases by @overtrue in https://github.com/rustfs/rustfs/pull/2334
• docs(agents): enforce constant reuse rules by @overtrue in https://github.com/rustfs/rustfs/pull/2348
• fix: change the condition for httproute by @majinghe in https://github.com/rustfs/rustfs/pull/2345
• feat(s3): support metadata extensions for bucket listings by @weisd in https://github.com/rustfs/rustfs/pull/2344
• feat: add extra env support for helm chart by @majinghe in https://github.com/rustfs/rustfs/pull/2340
• docs: add x-cmd and nix installation options by @lunrenyi in https://github.com/rustfs/rustfs/pull/2306
• feat(admin): complete site replication support by @weisd in https://github.com/rustfs/rustfs/pull/2346
• fix(lock): split distributed read and write quorum by @weisd in https://github.com/rustfs/rustfs/pull/2355
• fix(admin): reconcile site replication peer identity by @cxymds in https://github.com/rustfs/rustfs/pull/2356
• test(object): cover zero-copy selection heuristics by @overtrue in https://github.com/rustfs/rustfs/pull/2338
• test(admin): cover empty kms key aliases by @overtrue in https://github.com/rustfs/rustfs/pull/2331
• test(filemeta): cover legacy delete marker decoding by @overtrue in https://github.com/rustfs/rustfs/pull/2333
• ci: integrate CLA bot checks by @overtrue in https://github.com/rustfs/rustfs/pull/2367
• ci: use GitHub App tokens for CLA bot by @overtrue in https://github.com/rustfs/rustfs/pull/2368
• Modify CLA workflow permissions and cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/2369
• docs: update AGENTS pre-commit policy by @overtrue in https://github.com/rustfs/rustfs/pull/2370
• fix(admin): percent-decode group name in DELETE /v3/group/{group} by @GatewayJ in https://github.com/rustfs/rustfs/pull/2358
• ci: bump cla-bot to v0.0.6 by @overtrue in https://github.com/rustfs/rustfs/pull/2375
• ci: bump cla-bot to v0.0.6 by @overtrue in https://github.com/rustfs/rustfs/pull/2377
• test: cover delete-group percent decoding by @overtrue in https://github.com/rustfs/rustfs/pull/2373
• fix: bump s3s for presigned checksum handling by @weisd in https://github.com/rustfs/rustfs/pull/2379
• fix(rio): preserve reader capabilities and crypto safety by @weisd in https://github.com/rustfs/rustfs/pull/2363
• ci: update CLA workflow for corrected comments by @overtrue in https://github.com/rustfs/rustfs/pull/2384
• fix(notify): emit delete webhooks for prefix deletes and align replication headers by @andybrown668 in https://github.com/rustfs/rustfs/pull/2383
• fix(build): enable tokio_unstable in build script by @xxkeming in https://github.com/rustfs/rustfs/pull/2376
• feat(iam): retry OIDC discovery with issuer URL slash variants by @GatewayJ in https://github.com/rustfs/rustfs/pull/2360
• fix(oidc): support case-insensitive claim name matching by @yelog in https://github.com/rustfs/rustfs/pull/2362
• perf(ecstore): batch delete object lock acquisition by @weisd in https://github.com/rustfs/rustfs/pull/2374
• docs: remind agents to clean build artifacts by @overtrue in https://github.com/rustfs/rustfs/pull/2387
• refactor(server): unify TLS loading, optimize HTTP transport, add hot reload by @houseme in https://github.com/rustfs/rustfs/pull/2388
• ci: bump cla-bot to v0.0.9 by @overtrue in https://github.com/rustfs/rustfs/pull/2389
• fix(auth): reject ambiguous case-insensitive claim matches by @overtrue in https://github.com/rustfs/rustfs/pull/2386
• feat(admin): add audit target APIs and harden target source handling by @houseme in https://github.com/rustfs/rustfs/pull/2350
• refactor(tracing): unify request-context propagation and fix tracing chain breaks by @houseme in https://github.com/rustfs/rustfs/pull/2394
• test(admin): cover audit target validation gaps by @overtrue in https://github.com/rustfs/rustfs/pull/2390
• fix(metrics): use Prometheus-compatible metric names (#2312) by @ankohuu in https://github.com/rustfs/rustfs/pull/2317
• test(metrics): cover Prometheus descriptor names by @overtrue in https://github.com/rustfs/rustfs/pull/2405
• build(deps): bump the dependencies group with 14 updates by @houseme in https://github.com/rustfs/rustfs/pull/2407
• test(server): cover request context layer propagation by @overtrue in https://github.com/rustfs/rustfs/pull/2398
• fix: limit pyroscope profiling to supported Unix targets by @ankohuu in https://github.com/rustfs/rustfs/pull/2399
• feat(storage): add direct chunk GET fast path by @houseme in https://github.com/rustfs/rustfs/pull/2351
• fix: skip missing groups in policy_db_get instead of aborting by @kharkevich in https://github.com/rustfs/rustfs/pull/2393
• fix: enforce multipart authorization checks by @overtrue in https://github.com/rustfs/rustfs/pull/2411
• fix(iam): keep service account JWT expiry consistent by @weisd in https://github.com/rustfs/rustfs/pull/2410
• fix: move ec configuration from configmap to extraEnv by @majinghe in https://github.com/rustfs/rustfs/pull/2408
• feat: add support for pvc customized annotations by @majinghe in https://github.com/rustfs/rustfs/pull/2412
• fix(scanner): continue scans after traversal errors by @weisd in https://github.com/rustfs/rustfs/pull/2414
• feat(mqtt): migrate client and harden TLS config by @houseme in https://github.com/rustfs/rustfs/pull/2413
• fix(download): preserve archive download integrity by @houseme in https://github.com/rustfs/rustfs/pull/2415
• chore: update s3s to 010ae03 by @weisd in https://github.com/rustfs/rustfs/pull/2418
• feat(ecstore): add stale multipart upload cleanup by @weisd in https://github.com/rustfs/rustfs/pull/2416
• feat(kms): add vault transit engine by @reatang in https://github.com/rustfs/rustfs/pull/2372
• feat: add timing and metrics for query execution phases by @houseme in https://github.com/rustfs/rustfs/pull/2419
• fixed: Update service status to Ready by @houseme in https://github.com/rustfs/rustfs/pull/2423
• refactor(storage): remove object cache plumbing by @houseme in https://github.com/rustfs/rustfs/pull/2422
• Fix remaining review follow-ups for #2361 by @overtrue in https://github.com/rustfs/rustfs/pull/2421

New Contributors

• @lunrenyi made their first contribution in https://github.com/rustfs/rustfs/pull/2306
• @andybrown668 made their first contribution in https://github.com/rustfs/rustfs/pull/2383
• @xxkeming made their first contribution in https://github.com/rustfs/rustfs/pull/2376
• @yelog made their first contribution in https://github.com/rustfs/rustfs/pull/2362
• @ankohuu made their first contribution in https://github.com/rustfs/rustfs/pull/2317
• @kharkevich made their first contribution in https://github.com/rustfs/rustfs/pull/2393

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-alpha.90...1.0.0-alpha.91