Chris LuandClaude Opus 5.5 ce292a4e5e s3: require Admin to put or delete a bucket's lifecycle configuration (#12327) ...

PUT and DELETE ?lifecycle were authorized as Write, so an identity granted
only object writes on a bucket could add expiration rules or remove the ones
the bucket administrator set. They now need Admin on the bucket, like the
encryption, public access block and ownership controls writes. Identities
authorized by IAM policies are unaffected: they are still checked against
s3:PutLifecycleConfiguration.

Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-02 01:26:16 -08:00

..

admin

admin: measure volume server usage like its capacity (#12306)

2026-11-01 12:59:21 -08:00

cluster

vector: weed-vector registers to master; s3 discovers it there (#12146)

2026-10-28 00:58:31 -07:00

command

s3vectors: encrypt the objects of a vector bucket declared AES256 (#12324)

2026-11-01 23:57:40 -08:00

credential

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

ec

ec.balance: spread concurrent shard moves over target nodes (#12283)

2026-10-31 15:05:32 -07:00

filer

filer: scope a prefix JWT to the directory a zip extract writes under (#12305)

2026-11-01 18:36:31 -08:00

filer_client

fix: resolve gRPC DNS resolution issues in Kubernetes #8384 (#8387)

2026-02-19 15:46:02 -08:00

glog

go fmt

2026-04-10 17:31:14 -07:00

iam

iam/oidc: drop single-use web-identity tokens and the jti replay cache (#12065)

2026-10-25 12:04:59 -07:00

iamapi

iam: optionally require an iam: grant for self-service access-key actions (#11937)

2026-10-21 20:06:30 -07:00

images

image: add an optional public image processing gateway (#11593)

2026-10-05 19:49:02 +08:00

kms

kms/azure: fix encrypt/decrypt round trip for Azure Key Vault (#11692)

2026-10-10 23:40:19 +08:00

mount

mount: refuse to attach opens to a draining file handle (#12219)

2026-10-29 16:06:57 -07:00

mq

mq/kafka: wait for a filer to register instead of panicking on an empty list (#12019)

2026-10-24 07:09:43 -07:00

notification

filer,pb,mount: keep per-chunk cipher keys out of logs (#12085)

2026-10-26 11:52:56 -07:00

operation

volume: read a manifest chunk from another replica when one fails (#12313)

2026-11-01 16:31:22 -08:00

pb

vector: keep ListVectors pages and segments flat as an index grows; read only keys in GetVectors (#12300)

2026-11-01 11:57:44 -08:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

admin: explain detection cooldowns and skipped scans (#12185)

2026-10-28 22:55:36 -07:00

query

filer: fail the request, not the process, when chunks cannot be resolved (#11685)

2026-10-10 23:39:29 +08:00

remote_storage

remote: reuse one guarded remote storage client per configuration (#12189)

2026-10-29 00:57:37 -07:00

replication

filer.backup: keep local sink writes inside the sink directory (#12310)

2026-11-01 18:33:07 -08:00

s3api

s3: require Admin to put or delete a bucket's lifecycle configuration (#12327)

2026-11-02 01:26:16 -08:00

security

s3vectors: vend write credentials to index data only to the vector engine and Lance worker (#12316)

2026-11-01 18:49:01 -08:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

filer: scope a prefix JWT to the directory a zip extract writes under (#12305)

2026-11-01 18:36:31 -08:00

sftpd

sftp: fail rm and rmdir of a missing path, and mkdir of an existing one (#12168)

2026-10-28 08:11:21 -07:00

shell

shell: dial volume servers on their registered gRPC port in volume.scrub, ec.scrub, volume.server.state (#12315)

2026-11-01 18:50:48 -08:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

fix: clone protobuf snapshots without copying internal locks (#11968)

2026-10-22 18:38:33 -07:00

storage

volume: don't let an unreachable tier backend hold up volume server startup (#12312)

2026-11-01 18:35:37 -08:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

master: deleting a read-only volume no longer drifts the active count (#12285)

2026-10-31 13:28:32 -07:00

util

filer.backup: keep local sink writes inside the sink directory (#12310)

2026-11-01 18:33:07 -08:00

wdclient

s3: drop retired volume servers from the gateway location cache (#12281)

2026-10-31 15:05:00 -07:00

worker

iceberg maintenance: cache a remote-only file before reading it (#12191)

2026-10-29 11:13:23 -07:00

Makefile

Move SQL engine and PostgreSQL server to their own binaries (#8417)

2026-02-23 16:27:08 -08:00

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00