• [d414624dce] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
• [7ac458f802] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
• [7c7e95a3bd] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
• [2d2f4f6d1a] - (SEMVER-MINOR) ffi: enable module by default (Matteo Collina) #65475
• [657415c6df] - (SEMVER-MINOR) lib: implement node:bench (James M Snell) #65606
• [ebcfec2f0c] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606
• [e1913630c3] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434
• [8e9151c9f2] - (SEMVER-MINOR) src: let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352
• [889854f18b] - (SEMVER-MINOR) src,lib: implement experimental DTLS API (James M Snell) #63182
• [5198142c59] - (SEMVER-MINOR) vfs: integrate with CJS and ESM module loaders (Matteo Collina) #63653
• [5af9d72e7f] - (SEMVER-MINOR) worker: add support for Web Workers (Aviv Keller) #64894

• [59dcad3f44] - (SEMVER-MINOR) benchmark: implement node:bench version of bench tools (James M Snell) #65606
• [6bdb6dd8fa] - benchmark: fix max-regressions detection in compare.js (James M Snell) #65587
• [49d40091ba] - benchmark: add --analyze option to benchmark/scatter.js (James M Snell) #65594
• [bd40a9a19a] - benchmark: add crypto class benchmarks (Filip Skokan) #65518
• [6bff2238f5] - buffer: pad aligned allocations by a multiple of 8 (Lazizbek Ergashev) #65605
• [37d12946dd] - buffer: prevent abort on indexOf with lone surrogate needle (Rafael Gonzaga) #65430
• [02f8eb3b2d] - build: add --shared-perfetto flag (Antoine du Hamel) #65614
• [fe7032ec41] - build: enable V8 gdb/lldb plugin support (Chengzhong Wu) #65786
• [109f2caf80] - build: allow linking shared dependencies in the GN build (Shelley Vohr) #65797
• [55213fd8a8] - build: enable the V8 sandbox in shared-cage builds (Shelley Vohr) #62237
• [120929a1b3] - build: add --shared-highway configure flag (Antoine du Hamel) #65686
• [c99af0942b] - build: add --shared-abseil configure flag (Antoine du Hamel) #65682
• [431c2bf0eb] - build: define V8_CONTIGUOUS_COMPRESSED_RO_SPACE for shared cage (Shelley Vohr) #65464
• [b6b5764c6e] - build: remove obsolete configure flags (Chengzhong Wu) #65456
• [a623ee29d9] - build,src: make --use-largepages a no-op (Joyee Cheung) #65389
• [2f494cb7aa] - crypto: fix multi-prime RSA JWKs (Filip Skokan) #65649
• [501d8ac815] - crypto: cache valid ECDH key pairs (Filip Skokan) #65615
• [3fd905ea8f] - crypto: add strict mode to --force-fips (Filip Skokan) #65645
• [54b3cdb805] - crypto: add FIPS indicator diagnostics channel (Filip Skokan) #65645
• [3e6e931fc9] - crypto: fix public PKCS8 export error (한국) #65609
• [d414624dce] - (SEMVER-MINOR) crypto: add a generic MAC API (Filip Skokan) #65553
• [eef579047c] - crypto: validate JWK usages before key_ops (Filip Skokan) #65550
• [9a9b137a24] - crypto: fix private SPKI export error (Filip Skokan) #65550
• [9941fb5dab] - crypto: fix RSA-PSS oversized salt handling (Filip Skokan) #65550
• [09b431596a] - crypto: correct CCM decryption FIPS error message (kyungrae) #65450
• [e6b34e6f7a] - crypto: harden X509Certificate state (Filip Skokan) #65518
• [a884b6ccbc] - crypto: optimize key slot caching (Filip Skokan) #65518
• [fb512086d3] - crypto: add null checks for OPENSSL_INIT_new() (Nora Dossche) #63457
• [656504ffc0] - crypto: prevent Hmac.digest() from returning uninitialized memory (Matteo Collina) #65112
• [15e7884732] - crypto: avoid throwing CryptoKey brand checks (Filip Skokan) #65503
• [3302bec74a] - crypto: avoid throwing KeyObject brand checks (Filip Skokan) #65503
• [7ac458f802] - (SEMVER-MINOR) crypto: discover ciphers from OpenSSL providers (Filip Skokan) #65484
• [7c7e95a3bd] - (SEMVER-MINOR) crypto: discover hashes from OpenSSL providers (Filip Skokan) #65484
• [0539e90110] - deps: update googletest to 283c17563fe7a1111cd7f581aa5d541e8baeff2f (Node.js GitHub Bot) #65833
• [e34af820da] - deps: update simdjson to 4.6.11 (Node.js GitHub Bot) #65834
• [5fb7ffebc2] - deps: update zlib to 1.3.2.1-motley-285e94b (Node.js GitHub Bot) #65835
• [05cdf1db62] - deps: V8: backport 1a0089053443 (Jakob Linke) #65764
• [8910f7914a] - deps: V8: backport c9c0abfa51f0 (Jakob Linke) #65764
• [e7fd388424] - deps: V8: backport ebd15783b7ba (Marja Hölttä) #65764
• [82715158b8] - deps: V8: backport f3d4d458fe59 (Olivier Flückiger) #65702
• [7003159885] - diagnostics_channel: lazily create tracing context (Romain Lanz) #65513
• [a97def782f] - doc: clarify node:bench significance policy (James M Snell) #65631
• [c74091647d] - doc: clarify isolation modes for node:bench (James M Snell) #65631
• [3ef81a676c] - doc: clarify measurement integrity details of node:bench (James M Snell) #65631
• [6b565d7b2c] - doc: clarify security triage dispositions and permission boundaries (Rafael Gonzaga) #65436
• [724981287c] - (SEMVER-MINOR) doc: move histogram.burnRate to correct location in doc (James M Snell) #65434
• [f8b627c09b] - doc: fix default limit of maxHeadersCount (Aryn H) #65472
• [aa3d94fc1d] - doc: fix return types for sync methods (Chiang Fong Lee) #58575
• [fe9f452ddd] - doc: document REPL DEP0185 throws and uncaught-exception behavior (Adrián Estrada) #64993
• [6b84ee66fa] - errors: validate constructor name (Christian Aurich) #65607
• [ed1b629901] - events: fix weak listener retention overwrite (Aryan) #64024
• [7b4c17f723] - ffi: throw on missing memory helper arguments (Soul Lee) #65500
• [cf78d4260e] - ffi: include SharedArrayBuffer in error message (Donghoon Kang) #65735
• [2d2f4f6d1a] - (SEMVER-MINOR) ffi: enable module by default (Matteo Collina) #65475
• [bdcb6def4e] - ffi: validate DynamicLibrary getter receivers (Trivikram Kamat) #65415
• [5d24a8fe37] - fs: copy directory trees for fs.cp() on the thread pool (Shelley Vohr) #65488
• [40bdf32d91] - fs: give directories created by cpSync the source directory's mode (Shelley Vohr) #65488
• [6ac1bc040f] - fs: write files in one thread pool round trip (Shelley Vohr) #65489
• [b4b89c08c1] - fs: handle recursive watch setup races (Filip Skokan) #65699
• [54a1311d9e] - fs: apply nocase to literal glob exclude patterns (Yusuke Hayashi) #64817
• [2130460831] - fs: improve performance of recursive directory read (Aviv Keller) #65524
• [ab7f4c88b7] - fs: do not descend into symlinks for ** unless following symlinks (RafaelGSS) #65435
• [e990324e7a] - fs: watch directories, not files, in recursive fs.watch fallback (Shelley Vohr) #65486
• [b6db21972a] - fs: preserve directory timestamps in cp (Abhinandan Kumar) #65540
• [d418ca140e] - fs: fix recursive watch error handling (Filip Skokan) #65635
• [ea372bf9c9] - fs: cancel in-flight stat on abort (Mert Can Altin) #63142
• [458664073e] - fs: fix rmSync error messages for non-ASCII paths (Yeaseen) #61233
• [34b38235c3] - fs: add maxDepth option to glob (Alexander Lichter) #64003
• [e3cc0d9313] - http: fast-forward teardown of unread messages (Matteo Collina) #65732
• [f9175a212c] - http: coalesce chunked writes during auto-corking (GetThatCookie) #64987
• [b4a7cd3efb] - http2: fix write deadlock exposed by larger window sizes (Tim Perry) #65440
• [b7e97f6cfd] - http2: error for incomplete reads on RST, auto-drain, deprecate aborted (Tim Perry) #63249
• [d62989dbdf] - http2: fix async context loss when trailers carry END_STREAM (Orgad Shaneh) #63814
• [8aba314f87] - https: limit proxy CONNECT response headers (Matteo Collina) #64545
• [bea74e1cb5] - lib: put node:bench behind an --experimental-bench flag (James M Snell) #65920
• [2835523960] - lib: fixup node:bench handling of --require option (James M Snell) #65631
• [aae83d87a4] - lib: improve diagnostic message support (James M Snell) #65631
• [ba7baed423] - lib: have runFile honor permissions and accept URL/Buffer paths (James M Snell) #65631
• [55103db988] - lib: add runFile api to node:bench (James M Snell) #65631
• [0a4c50eb76] - lib: add context.diagnostic api to node:bench (James M Snell) #65631
• [476e25e864] - lib: add bench:plan event to node:bench (James M Snell) #65631
• [67cf0e556f] - lib: clarify mean in node:bench docs (James M Snell) #65631
• [f85f72ad42] - lib: improve node:bench stream handling (James M Snell) #65631
• [b32b09f56b] - lib: add runId, fileRunId, entryFile, namePath to node:bench (James M Snell) #65631
• [4b9b53f958] - (SEMVER-MINOR) lib: add node:bench explicit createRunner (James M Snell) #65606
• [d9f18171f0] - (SEMVER-MINOR) lib: complete the implementation of node:bench and cli (James M Snell) #65606
• [c39e20e9ca] - (SEMVER-MINOR) lib: implement bench/reporters (James M Snell) #65606
• [657415c6df] - (SEMVER-MINOR) lib: implement node:bench (James M Snell) #65606
• [46863a7f9c] - lib: use Float16Array from primordials (Antoine du Hamel) #65702
• [cbd0948138] - lib: defer source map payload decoding until first use (Shelley Vohr) #65490
• [1ddb1c8934] - lib: optimize async context frame activation (Tim Perry) #65519
• [02f6feef7e] - lib: use validateArray for array arguments (JunHwan Choi) #65344
• [962795ab8c] - lib: apply minor dtls cleanups (James M Snell) #63539
• [c07b2ab8a9] - lib,benchmark: address multiple review issues (James M Snell) #65631
• [54a5e25f72] - module: derive builtinModules from enabled builtin set (Jungwon Sohn) #65418
• [c93a90cf12] - net: fix BlockList.fromJSON for IPv4-mapped IPv6 rules (Daijiro Wachi) #64125
• [506d23b76f] - net: recognize bare IPv6 loopback addresses in isLoopback (Daijiro Wachi) #63619
• [81cd6d7b78] - net: improve dtls cert verification (James M Snell) #64314
• [51d094e26b] - node-api: make object property arrays const (Yilong Li) #65621
• [875c7ecee2] - node-api: enter env context for async callbacks (Shelley Vohr) #65406
• [ebcfec2f0c] - (SEMVER-MINOR) perf_hooks: implement Histogram meanCI API (James M Snell) #65606
• [09b333bcc5] - perf_hooks: add missing resource timing attributes (greenhead) #65017
• [e1913630c3] - (SEMVER-MINOR) perf_hooks: add CBOR export/import for histogram exchange (James M Snell) #65434
• [67a78317dd] - permission: do not enforce fs and addons in audit mode (Issac) #65659
• [19e69e5f72] - permission: support URL and Uint8Array as has()/drop() reference (Seungmin Nam) #65492
• [168af4d8d7] - permission: block FileHandle fsync and fdatasync (Rafael Gonzaga) #65431
• [855fff682f] - quic: stop guarding ngtcp2_recv_stop_sending callback field (René) #65688
• [d30df2a3e1] - quic: reuse TLS pause machinery to drop event deferral & improve 0RTT (Tim Perry) #65522
• [fce1b6a482] - quic: remove unused fin flag from blob reader wakeup (trivenay) #65315
• [c721aabfb7] - quic: apply multiple fixes to flow control signaling (James M Snell) #65309
• [2c552cd32c] - quic: release stream arenas before cleanup (Trivikram Kamat) #65410
• [487662717b] - sea: mount bundled assets as a virtual file system (Matteo Collina) #65675
• [0ec15a2a54] - sea: keep ELF segments on separate pages in --build-sea output (Shelley Vohr) #65564
• [1627fd6561] - sqlite: re-validate database state after reading options (Trevor Burnham) #65595
• [18c3867d19] - sqlite: run backup completion in callback scope (Filip Skokan) #65666
• [a77d738683] - sqlite: copy changeset before applying it (Matteo Collina) #65286
• [b5f0558c84] - sqlite: reject closing a session from a callback (Trevor Burnham) #65454
• [5f95032859] - sqlite: keep sessions alive across SQLite callbacks (Trevor Burnham) #65465
• [2ce0e2eb10] - sqlite: throw on disposal of an in-use session (Guilherme Araújo) #65449
• [f66ed89136] - src: fix use-after-free in CleanupHookThunkRun (Caleb Everett) #65630
• [14613fdc3e] - (SEMVER-MINOR) src: fixup histogram and options linting issues (James M Snell) #65606
• [6db3f662cf] - src: fix startup snapshot reproducibility of InternalFieldInfo (Chengzhong Wu) #65684
• [8e9151c9f2] - (SEMVER-MINOR) src: let embedders supply a builtin code cache without a snapshot (Shelley Vohr) #65352
• [760337aa5b] - src: fix live lock between environments with blocked requests (Ilyas Shabi) #65520
• [f2a588c385] - src: apply IsolateSettings when using a snapshot (Shelley Vohr) #65407
• [2fd50ae915] - src: add re-entrancy guard to TriggerUncaughtException (Temuulen Undrakhbayar) #64327
• [e260fd146c] - src: reuse cached strings in CompileSerializeMain (agape1225) #65453
• [0650dca863] - src: add missing vector include (Filip Skokan) #65622
• [6e9d44d1fe] - src: disable V8 external memory reasonable size check (Paul Bouchon) #65589
• [9c46e56303] - src: report libuv error when openAsBlob cannot stat (Paul Bouchon) #65517
• [a0aaff6b07] - src: list scripts when --run has no command (James Ross) #64606
• [469590c155] - src: fixup manual new/delete usages (James M Snell) #65348
• [5902acf031] - src: make the options structs smaller with packed bits (James M Snell) #65145
• [0c24639a5a] - (SEMVER-MINOR) src, lib: add stats to dtls (James M Snell) #63182
• [652fbc286e] - (SEMVER-MINOR) src,lib: add dtls interop tests (James M Snell) #63182
• [889854f18b] - (SEMVER-MINOR) src,lib: implement experimental DTLS API (James M Snell) #63182
• [76538d519c] - stream: use webidl validation semantics for args (James M Snell) #65658
• [649a4aba93] - stream: ensure that stateful transforms preserve this (James M Snell) #65658
• [23220992c0] - stream: fix nested async flushing with infinite sources (James M Snell) #65658
• [3ad1338139] - stream: ensure from() observes returned rejecting promise correctly (James M Snell) #65658
• [cafdee6369] - stream: apply source normalization once at call time (James M Snell) #65658
• [edb83cb620] - stream: make consumer signals on longer alter source precedence (James M Snell) #65658
• [56bdd765df] - stream: make pipeTo source normalization independent of Writer (James M Snell) #65658
• [037c07af2b] - stream: pre-aborted pipeTo now applies dest failure handling (James M Snell) #65658
• [7308492d48] - stream: ensure pre-existing writes drain before EOF and end() waits (James M Snell) #65658
• [756773477b] - stream: ensure async dispoal after endSync awaits for drain (James M Snell) #65658
• [042b951312] - stream: ensure factory signals remain active through closing (James M Snell) #65658
• [2dc09ca9ca] - stream: canWrite and ondrain now reflect physical capacity (James M Snell) #65658
• [9192fbb6dd] - stream: skip unobserved 'readable' emission at EOF (Matteo Collina) #65749
• [dc25a61e7a] - stream: avoid per-chunk promises in webstream adapters (Matteo Collina) #65548
• [82ae196af6] - stream: address stream/iter review feedback (James M Snell) #65652
• [3b37b48592] - stream: replace object sentinel with symbol (James M Snell) #65652
• [b6424b6612] - stream: ensure pipeToSync requires synchronous close (James M Snell) #65652
• [830fc81acf] - stream: cancel active stream/iter pulls (James M Snell) #65652
• [30606908de] - stream: fix merge settlement tagging and falsy error tracking (James M Snell) #65652
• [7319198755] - stream: ensure full-close semantics when closed (James M Snell) #65652
• [bf5acb783f] - stream: defend against re-entrancy in writev (James M Snell) #65652
• [b01594f93a] - stream: ensure stability of stored metadata (James M Snell) #65652
• [7bfd81ab09] - stream: fixup writer to terminate on consumer return/throw (James M Snell) #65652
• [dc2483c38d] - stream: ensure iterator cleanup on done, reject, etc (James M Snell) #65652
• [f6fac6f7f0] - stream: fixup cancelation handling in pull() (James M Snell) #65652
• [dfe0617e71] - stream: fix early drain after Utf8Stream reopen (Matteo Collina) #65633
• [900fae0a24] - test: split test-bench-cli to try deflaking it (James M Snell) #65919
• [31f4bd73b2] - test: make node:bench test samples survive a coarse clock (Shelley Vohr) #65780
• [e0fa1893c3] - test: do not dump core in external memory limit test (Shelley Vohr) #65780
• [00ad283b8d] - test: zero-fill buffers before the string length limit check (Christian Aurich) #65755
• [70763fcc46] - test: expand test coverage of node:bench (James M Snell) #65631
• [5a38e6b115] - (SEMVER-MINOR) test: fix node:bench test timing (James M Snell) #65606
• [536ae0e24b] - (SEMVER-MINOR) test: improve node:bench test coverage (James M Snell) #65606
• [eec66d529c] - (SEMVER-MINOR) test: update bench tests to not fail on no-crypto (James M Snell) #65606
• [ce7b349de5] - test: bump WPT webidl and interfaces (Filip Skokan) #65679
• [ec96f8dc23] - test: update WPT for url to c23755a144 (Node.js GitHub Bot) #65651
• [ebe2ac248b] - test: fix recursive fs.watch error fixture (Filip Skokan) #65683
• [a19912ee8f] - test: update streams WPT (Jeong SeokChan) #65638
• [14b5dfc63d] - test: remove console.log call in node_run_list (Antoine du Hamel) #65572
• [3f67df139c] - test: expect node:ffi to be enabled by default (Matteo Collina) #65636
• [b9ee2e67bf] - (SEMVER-MINOR) test: use native builder for legacy SEA tests (Filip Skokan) #65553
• [53a29d0894] - test: use common spawnSync helpers in more tests (greenhead) #65552
• [5c680a50f4] - test: add coverage for removeEventListener boolean capture (Lazizbek Ergashev) #65245
• [6f99474912] - test: deflake fastutf8stream destroy and reopen tests (Christian Aurich) #65554
• [2342b2bf30] - test: cover Readable.from() sync iterator errors (jakecastelli) #65515
• [1e455a4ffe] - test: support inspecting WPTs in child processes (Filip Skokan) #65510
• [1f7cab588e] - test: document WPT runner workflows (Filip Skokan) #65510
• [d39a902cec] - test: simplify test-worker-heap-profile.js (Donghoon Kang) #65372
• [90d1b863f7] - test: keep WPT backend checks alive (Filip Skokan) #65320
• [be60c34b52] - (SEMVER-MINOR) test: enable multi-global WPTs (Filip Skokan) #64894
• [d04cfcda8e] - (SEMVER-MINOR) test: add opt-in process WPT runner (Filip Skokan) #64894
• [715c21f805] - (SEMVER-MINOR) test: accomodate multi-global tests in WPT{Runner,TestSpec,Report} (Filip Skokan) #64894
• [9aa8489a01] - test: fix lint in dtls tests (Matteo Collina) #64902
• [6a3d8a6d9f] - tls: read the peer certificate chain without consuming it (Tony Gies) #65602
• [2e519f8fef] - tls,quic: commonize TLS cert handling between tls, dtls & quic (Tim Perry) #64711
• [2266c14051] - tools: add GHA workflow to test vendored Perfetto (Antoine du Hamel) #65614
• [19779f121f] - tools: fix the list of globals in ESLint config files (Antoine du Hamel) #65281
• [b57db8dfd3] - typings: add types for performance binding (Jungwon Sohn) #65574
• [371e2260f4] - typings: add encodeIntoResults to EncodingBinding (greenhead) #65350
• [417cdd8a77] - typings: add typing for permission binding (Seungmin Nam) #65385
• [a82cc7097f] - url: align URLPatternInit dictionary conversion with WebIDL (Piyush Yadav) #65498
• [0e8f7b96b0] - util: canonicalize namespaced tags in inspect() (René) #63257
• [acd2bb10ce] - v8: add setHeapProfileNearHeapLimit (Ilyas Shabi) #64676
• [d0535b1041] - vfs: load native addons from a mounted file system (Philipp Dunkel) #65680
• [ea6f70ba41] - vfs: fix rename over non-empty directory (Christian Aurich) #65613
• [b4f6b3798a] - vfs: add ZipProvider (Philipp Dunkel) #64915
• [5198142c59] - (SEMVER-MINOR) vfs: integrate with CJS and ESM module loaders (Matteo Collina) #63653
• [38192126e2] - worker: start worker threads from the built-in snapshot (Shelley Vohr) #65336
• [56144ea80a] - worker: add ref/unref to web workers (Aviv Keller) #65507
• [7231c13b8a] - (SEMVER-MINOR) worker: add wpt tests for Web Workers (Aviv Keller) #64894
• [5af9d72e7f] - (SEMVER-MINOR) worker: add support for Web Workers (Aviv Keller) #64894
• [069a1b1200] - zlib: avoid waiting for paused ZIP iterators (Trivikram Kamat) #65278

📦 Download Binaries from https://openobserve.ai/downloads

• fix: write slo_status through the read-write DB client in the SLO ingest pass (#14192) by @hengfeiyang in https://github.com/openobserve/openobserve/pull/14453
• fix(metrics): give a settled-empty Explorer card one bounded recheck by @bjp232004 in https://github.com/openobserve/openobserve/pull/14466
• fix: Fix/refresh cache dropdown visibility 14488 v1.0.0 by @bjp232004 in https://github.com/openobserve/openobserve/pull/14520
• fix: Fix/alert count chart query from in literal 14514 v1.0.0 by @bjp232004 in https://github.com/openobserve/openobserve/pull/14528

Full Changelog: https://github.com/openobserve/openobserve/compare/v1.0.0...v1.0.1

• test(heal): cover MRF manifest CAS legacy transition by @houseme in https://github.com/rustfs/rustfs/pull/7443
• fix(ci): enable release branch checks and repair test imports by @overtrue in https://github.com/rustfs/rustfs/pull/7441
• test(scanner): structure heal release evidence lanes by @houseme in https://github.com/rustfs/rustfs/pull/7442
• fix(scanner): require segment producer identities by @houseme in https://github.com/rustfs/rustfs/pull/7444
• fix(scanner): expose recovery intent identity by @houseme in https://github.com/rustfs/rustfs/pull/7445
• test(scanner): summarize failed heal perf reports by @houseme in https://github.com/rustfs/rustfs/pull/7446
• fix(common): retain unmatched MRF repair proofs by @houseme in https://github.com/rustfs/rustfs/pull/7447
• fix(ci): route replication read plan through boundary by @cxymds in https://github.com/rustfs/rustfs/pull/7448
• test(scanner): cover flat-bucket quantum fairness by @houseme in https://github.com/rustfs/rustfs/pull/7449
• fix(heal): reuse same admission request id by @houseme in https://github.com/rustfs/rustfs/pull/7451
• test(scanner): require perf summary evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7453
• test(scanner): bind release evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7452
• fix(scanner): tag dirty usage producer identities by @houseme in https://github.com/rustfs/rustfs/pull/7454
• test(scanner): gate release evidence bundles by @houseme in https://github.com/rustfs/rustfs/pull/7457
• test(scanner): require hard evidence ABBA manifest by @houseme in https://github.com/rustfs/rustfs/pull/7459
• feat(heal): add MRF committed snapshot writer by @houseme in https://github.com/rustfs/rustfs/pull/7458
• test(heal): cover EC8+4 restart shard rebuild by @houseme in https://github.com/rustfs/rustfs/pull/7461
• test(scanner): echo measured release evidence in ABBA fake adapter by @houseme in https://github.com/rustfs/rustfs/pull/7460
• test(scanner): require complete ABBA summary matrix by @houseme in https://github.com/rustfs/rustfs/pull/7462
• heal: replay committed MRF checkpoints durably by @houseme in https://github.com/rustfs/rustfs/pull/7465
• test(scanner): bind hard evidence bundle provenance by @houseme in https://github.com/rustfs/rustfs/pull/7467
• test(heal): cover bucket object repair receipts by @houseme in https://github.com/rustfs/rustfs/pull/7468
• test(scanner): add EC8+4 heal restart evidence by @houseme in https://github.com/rustfs/rustfs/pull/7469
• heal: verify replacement pool metadata repair by @houseme in https://github.com/rustfs/rustfs/pull/7471
• heal: verify admin recreate pool metadata by @houseme in https://github.com/rustfs/rustfs/pull/7474
• test(heal): preserve EC84 restart semantics by @houseme in https://github.com/rustfs/rustfs/pull/7478
• test(heal): write EC84 distributed restart oracle by @houseme in https://github.com/rustfs/rustfs/pull/7481
• fix(heal): harden MRF replay boundaries by @houseme in https://github.com/rustfs/rustfs/pull/7483
• test(ecstore): bind MRF manifest CAS dirsync recovery by @houseme in https://github.com/rustfs/rustfs/pull/7482
• test(scanner): derive evidence runner profile from registry by @houseme in https://github.com/rustfs/rustfs/pull/7484
• test(scanner): require mixed-version evidence roles by @houseme in https://github.com/rustfs/rustfs/pull/7485
• fix(heal): publish committed MRF runtime checkpoints by @houseme in https://github.com/rustfs/rustfs/pull/7490
• test(scanner): bind profile artifacts in release evidence by @houseme in https://github.com/rustfs/rustfs/pull/7487
• test(scanner): harden measured ABBA evidence claims by @houseme in https://github.com/rustfs/rustfs/pull/7491
• fix(e2e): group scanner heal evidence payload by @houseme in https://github.com/rustfs/rustfs/pull/7494
• test(scanner): require MRF replay bundle fields by @houseme in https://github.com/rustfs/rustfs/pull/7486
• test(scanner): profile EC84 evidence case runs by @houseme in https://github.com/rustfs/rustfs/pull/7495
• test(scanner): reject empty release evidence artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7496
• test(scanner): require G14 same-window field coverage by @houseme in https://github.com/rustfs/rustfs/pull/7489
• test(scanner): require two-hour measured ABBA windows by @houseme in https://github.com/rustfs/rustfs/pull/7493
• test(heal): cover MRF idle checkpoint cleanup by @houseme in https://github.com/rustfs/rustfs/pull/7497
• fix(e2e): ignore untracked files in build identity by @houseme in https://github.com/rustfs/rustfs/pull/7498
• test(scanner): require MRF disk-full evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7499
• test(scanner): bind release JSON artifact provenance by @houseme in https://github.com/rustfs/rustfs/pull/7500
• test(heal): cover MRF rollback mirror filtering by @houseme in https://github.com/rustfs/rustfs/pull/7501
• test(scanner): require segment activation evidence by @houseme in https://github.com/rustfs/rustfs/pull/7504
• test(scanner): require MRF crash matrix cases by @houseme in https://github.com/rustfs/rustfs/pull/7505
• test(scanner): require release bundle domain evidence by @houseme in https://github.com/rustfs/rustfs/pull/7502
• test(scanner): require MRF retention GC evidence by @houseme in https://github.com/rustfs/rustfs/pull/7506
• test(scanner): require MRF cleanup GC soak evidence by @houseme in https://github.com/rustfs/rustfs/pull/7507
• test(heal): cover MRF disk-full commit anchors by @houseme in https://github.com/rustfs/rustfs/pull/7509
• test(e2e): report port allocator bind errors by @houseme in https://github.com/rustfs/rustfs/pull/7510
• fix(sse): resolve 1.0.0 SSE/KMS blockers and P1 findings by @reatang in https://github.com/rustfs/rustfs/pull/7511
• test(storage): cover MRF cleanup delete ENOSPC anchor by @houseme in https://github.com/rustfs/rustfs/pull/7513
• test(scanner): require heal retry stats evidence by @houseme in https://github.com/rustfs/rustfs/pull/7514
• test(scanner): add release bundle dry-run fixture by @houseme in https://github.com/rustfs/rustfs/pull/7515
• fix(scanner): confirm recovery intent accept readback by @houseme in https://github.com/rustfs/rustfs/pull/7516
• test(scanner): require MRF cleanup delete ENOSPC evidence by @houseme in https://github.com/rustfs/rustfs/pull/7518
• test(scanner): require bounded retry window evidence by @houseme in https://github.com/rustfs/rustfs/pull/7517
• test(e2e): emit scanner heal G09 upgrade evidence by @houseme in https://github.com/rustfs/rustfs/pull/7519
• test(heal): persist MRF rollback mirror boundary by @houseme in https://github.com/rustfs/rustfs/pull/7520
• test(scanner): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7522
• feat(scanner): implement V2 evidence preflights by @houseme in https://github.com/rustfs/rustfs/pull/7523
• test(scanner): assemble release evidence bundles by @houseme in https://github.com/rustfs/rustfs/pull/7526
• test(scanner): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7524
• fix(scanner): replay recovery intents while disabled by @houseme in https://github.com/rustfs/rustfs/pull/7521
• test(scanner): preflight G09 evidence disk space by @houseme in https://github.com/rustfs/rustfs/pull/7527
• fix(scanner): respect cargo target dir in G09 runner by @houseme in https://github.com/rustfs/rustfs/pull/7528
• test(e2e): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7525
• test(scanner): emit G09 release bundle gate evidence by @houseme in https://github.com/rustfs/rustfs/pull/7530
• fix(scanner): reject invalid G09 runner test selection by @houseme in https://github.com/rustfs/rustfs/pull/7531
• fix(scanner): keep G09 source binary path clean by @houseme in https://github.com/rustfs/rustfs/pull/7532
• test(heal): cover MRF replay proof cleanup by @houseme in https://github.com/rustfs/rustfs/pull/7534
• feat(scanner): carry segment activation preflight evidence by @houseme in https://github.com/rustfs/rustfs/pull/7535
• feat(scanner): surface cold segment reuse oracle by @houseme in https://github.com/rustfs/rustfs/pull/7536
• test(scanner): require hard evidence artifact payloads by @houseme in https://github.com/rustfs/rustfs/pull/7537
• feat(scanner): bind producer evidence to dirty generations by @houseme in https://github.com/rustfs/rustfs/pull/7538
• feat(scanner): persist segment invalidation proof metadata by @houseme in https://github.com/rustfs/rustfs/pull/7539
• test(scanner): wait for EC8+4 heal control readiness by @houseme in https://github.com/rustfs/rustfs/pull/7540
• test(scanner): list full P4 release evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7542
• test(scanner): add W16 release evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7543
• fix: address release acceptance regressions by @overtrue in https://github.com/rustfs/rustfs/pull/7541
• feat(scanner): admit durable segment proof replay by @houseme in https://github.com/rustfs/rustfs/pull/7544
• test(scanner): bind MRF release artifacts to evidence kinds by @houseme in https://github.com/rustfs/rustfs/pull/7545
• feat(scanner): enable segment reuse activation gate by @houseme in https://github.com/rustfs/rustfs/pull/7546
• test(scanner): run scoped fallback cases on dedicated stack by @houseme in https://github.com/rustfs/rustfs/pull/7550
• test(scanner): roll out distributed e2e selection by @houseme in https://github.com/rustfs/rustfs/pull/7549
• test(scanner): add W13 MRF evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7547
• ci(test): enable local KMS for s3 compatibility tests by @houseme in https://github.com/rustfs/rustfs/pull/7553
• fix(scanner): bind segment proof to typed dirty suffix by @houseme in https://github.com/rustfs/rustfs/pull/7564
• fix(scanner): validate scoped ACK clear receipts by @houseme in https://github.com/rustfs/rustfs/pull/7563
• fix(scanner): bind cold scoped cache reuse by @houseme in https://github.com/rustfs/rustfs/pull/7565
• fix(s3): preserve delete marker read error headers by @cxymds in https://github.com/rustfs/rustfs/pull/7558
• chore(release): sync configurable nightly build workflow from main by @majinghe in https://github.com/rustfs/rustfs/pull/7567
• docs(obs): correct metric export interval and explain alert timing by @cxymds in https://github.com/rustfs/rustfs/pull/7571
• fix(heal): persist scoped admin admission handoff by @houseme in https://github.com/rustfs/rustfs/pull/7569
• fix(scanner): mark committed replication and tier mutations by @houseme in https://github.com/rustfs/rustfs/pull/7568
• fix(ecstore): recover expansion buckets and resume retirement by @overtrue in https://github.com/rustfs/rustfs/pull/7574
• fix(ci): align S3 KMS fixtures and default key expectations by @cxymds in https://github.com/rustfs/rustfs/pull/7573
• fix(heal): prune retained root terminal receipts by @houseme in https://github.com/rustfs/rustfs/pull/7576
• fix(storage): preserve retryable publication guard errors by @cxymds in https://github.com/rustfs/rustfs/pull/7561
• fix(health): report storage quorum in node readiness by @cxymds in https://github.com/rustfs/rustfs/pull/7566
• fix: preserve scanner backlog during pool retirement by @overtrue in https://github.com/rustfs/rustfs/pull/7555
• test(scanner): bind profile artifact provenance by @houseme in https://github.com/rustfs/rustfs/pull/7577
• fix(scanner): persist dirty producer journal by @houseme in https://github.com/rustfs/rustfs/pull/7580
• test: add scanner heal scheduler pressure evidence by @houseme in https://github.com/rustfs/rustfs/pull/7584
• test: add scanner heal G14 multiset evidence by @houseme in https://github.com/rustfs/rustfs/pull/7583
• fix(nightly): push assets with plain git on release — the build fleet has no gh CLI by @majinghe in https://github.com/rustfs/rustfs/pull/7586
• fix(scanner): stabilize retired backlog survivor commits by @houseme in https://github.com/rustfs/rustfs/pull/7585
• fix(metrics): prevent duplicate drive reporting across nodes by @cxymds in https://github.com/rustfs/rustfs/pull/7582
• fix(ecstore): avoid Windows batch-delete cleanup sharing conflicts by @cxymds in https://github.com/rustfs/rustfs/pull/7579
• feat(ilm): inspect legacy transition version state by @cxymds in https://github.com/rustfs/rustfs/pull/7581
• test(scanner): add release evidence ingestion gates by @houseme in https://github.com/rustfs/rustfs/pull/7588
• fix: reuse admin error boundary for legacy tier reconciliation by @overtrue in https://github.com/rustfs/rustfs/pull/7587
• fix(test): stabilize release CI heal fixtures by @houseme in https://github.com/rustfs/rustfs/pull/7589
• feat(nightly): publish packages as assets of the rolling 'nightly' release by @majinghe in https://github.com/rustfs/rustfs/pull/7592
• test(scanner): add release bundle evidence descriptors by @houseme in https://github.com/rustfs/rustfs/pull/7595
• feat(ilm): backfill proven legacy transition state by @cxymds in https://github.com/rustfs/rustfs/pull/7591
• test(ecstore): remove redundant transition clone by @houseme in https://github.com/rustfs/rustfs/pull/7597
• fix(scanner): seed current backlog members before committing by @cxymds in https://github.com/rustfs/rustfs/pull/7594
• test(scanner): bind raw profile artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7598
• fix(heal): surface first failed object in status by @houseme in https://github.com/rustfs/rustfs/pull/7599
• test(heal): cover retry budget across attempts by @houseme in https://github.com/rustfs/rustfs/pull/7600
• test(scanner): harden durable producer evidence gate by @houseme in https://github.com/rustfs/rustfs/pull/7601
• test(scanner): harden scoped ack evidence proof by @houseme in https://github.com/rustfs/rustfs/pull/7602
• test(scanner): bind status outcome raw provenance by @houseme in https://github.com/rustfs/rustfs/pull/7603
• fix(heal): retry fully recoverable batch failures by @houseme in https://github.com/rustfs/rustfs/pull/7604
• fix(scanner): avoid movement debt for stale remote lease by @houseme in https://github.com/rustfs/rustfs/pull/7605
• chore(deps): refresh workspace dependencies by @houseme in https://github.com/rustfs/rustfs/pull/7606
• test(scanner): bind G14 case artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7611
• fix(ecstore): retry contended decommission cancel target locks by @cxymds in https://github.com/rustfs/rustfs/pull/7612
• test: align transition fixtures and KMS context expectations by @overtrue in https://github.com/rustfs/rustfs/pull/7610
• test(scanner): stabilize W13 release gate evidence by @houseme in https://github.com/rustfs/rustfs/pull/7613
• fix(scanner): bound native backlog fixture resources by @houseme in https://github.com/rustfs/rustfs/pull/7609
• fix(ci): align release E2E gate and repair regression tests by @overtrue in https://github.com/rustfs/rustfs/pull/7607
• fix(scanner): harden heal release gates by @houseme in https://github.com/rustfs/rustfs/pull/7614
• test(scanner): reject synthetic heal evidence inputs by @houseme in https://github.com/rustfs/rustfs/pull/7617
• test(scanner): collect status outcome raw evidence by @houseme in https://github.com/rustfs/rustfs/pull/7618
• fix(scanner): bind scoped ack confirmation to generation by @houseme in https://github.com/rustfs/rustfs/pull/7619
• test: report tier reference proof setup failures without hanging by @overtrue in https://github.com/rustfs/rustfs/pull/7608
• test(scanner): plan Linux evidence validation by @houseme in https://github.com/rustfs/rustfs/pull/7620
• test(e2e): select G14 replacement drive by evidence by @houseme in https://github.com/rustfs/rustfs/pull/7622
• test(scanner): report Linux evidence plan status by @houseme in https://github.com/rustfs/rustfs/pull/7624
• test(scanner): add G14 multi-pool background heal evidence by @houseme in https://github.com/rustfs/rustfs/pull/7628
• test(scanner): verify deferred multipool outage evidence by @houseme in https://github.com/rustfs/rustfs/pull/7629
• fix(ecstore): allow metadata snapshots at read quorum by @houseme in https://github.com/rustfs/rustfs/pull/7627
• chore(deps): refresh release dependencies by @houseme in https://github.com/rustfs/rustfs/pull/7632
• fix(ecstore): use pool lock quorum for set writes by @houseme in https://github.com/rustfs/rustfs/pull/7630
• test(e2e): keep G14 multi-set restart graceful by @houseme in https://github.com/rustfs/rustfs/pull/7633
• test(e2e): record deferred G14 outage writes by @houseme in https://github.com/rustfs/rustfs/pull/7637
• test(scanner): bound G14 multi-pool evidence size by @houseme in https://github.com/rustfs/rustfs/pull/7640
• fix(scanner): find nextest junit fallback for evidence cases by @houseme in https://github.com/rustfs/rustfs/pull/7643
• fix(ilm): preserve cleanup ownership on tiered overwrites by @cxymds in https://github.com/rustfs/rustfs/pull/7639
• test(ilm): restore noncurrent compensation tests to serial CI by @cxymds in https://github.com/rustfs/rustfs/pull/7645
• fix(heal): preserve null-version tags and encoded object paths by @cxymds in https://github.com/rustfs/rustfs/pull/7644
• fix(e2e): record EC8+4 drive restart set size by @houseme in https://github.com/rustfs/rustfs/pull/7648
• test(e2e): target multi-set outage heal candidate by @houseme in https://github.com/rustfs/rustfs/pull/7653
• fix(heal): reuse API error boundary for decoding failures by @cxymds in https://github.com/rustfs/rustfs/pull/7647
• fix(scanner): wait for ABBA telemetry window by @houseme in https://github.com/rustfs/rustfs/pull/7660
• Revert "feat(ci): add fault-tolerance degradation suite to the functional chain" by @majinghe in https://github.com/rustfs/rustfs/pull/7666
• fix(ecstore): preserve multi-pool version histories by @cxymds in https://github.com/rustfs/rustfs/pull/7658
• fix(heal): recover stale peer state after restart by @cxymds in https://github.com/rustfs/rustfs/pull/7665
• fix(heal): select writable recovery intent owner by @cxymds in https://github.com/rustfs/rustfs/pull/7668
• feat(ci): add fault-tolerance degradation suite to the functional chain by @majinghe in https://github.com/rustfs/rustfs/pull/7669
• fix(get): reject pre-header read quorum failures by @cxymds in https://github.com/rustfs/rustfs/pull/7670
• ci: stop defaulting suite dispatches to a pinned release by @majinghe in https://github.com/rustfs/rustfs/pull/7681
• ci: manage backlog issues by signal instead of per-run filing by @majinghe in https://github.com/rustfs/rustfs/pull/7680
• fix(storage): alias legacy meta bucket over internode rpc by @houseme in https://github.com/rustfs/rustfs/pull/7685
• test(ecstore): stabilize cancelled rename test by @cxymds in https://github.com/rustfs/rustfs/pull/7684
• test(scanner): report Linux descriptor drift ledger by @houseme in https://github.com/rustfs/rustfs/pull/7692
• test(heal): retry recovery readback SlowDownRead by @houseme in https://github.com/rustfs/rustfs/pull/7695
• fix(pool): default the node-endpoints fallback to the 4-node fleet by @majinghe in https://github.com/rustfs/rustfs/pull/7696
• fix(scanner): require ABBA collector credentials by @houseme in https://github.com/rustfs/rustfs/pull/7700
• test(heal): label G14 recovery read failures by @houseme in https://github.com/rustfs/rustfs/pull/7701
• fix(heal): preserve settings in token status by @cxymds in https://github.com/rustfs/rustfs/pull/7691
• ci: green runs for case failures; red only for harness breakdowns by @majinghe in https://github.com/rustfs/rustfs/pull/7698
• test(heal): retry G14 deferred outage put by @houseme in https://github.com/rustfs/rustfs/pull/7703
• test(heal): retry G14 outage put probes by @houseme in https://github.com/rustfs/rustfs/pull/7704
• test(heal): remove unused G14 put helper by @houseme in https://github.com/rustfs/rustfs/pull/7705
• fix(tables): authorize reserved metadata reads by @GatewayJ in https://github.com/rustfs/rustfs/pull/7672
• ci: harden report steps after first full new-semantics run by @majinghe in https://github.com/rustfs/rustfs/pull/7708
• ci: tolerate ANSI reset escapes in security verdicts; fix tier product counts by @majinghe in https://github.com/rustfs/rustfs/pull/7712
• fix(heal): reject overlapping admin heal owners by @cxymds in https://github.com/rustfs/rustfs/pull/7723
• fix(heal): reject invalid admin selectors before admission by @cxymds in https://github.com/rustfs/rustfs/pull/7724
• fix(heal): pass endpoints to overlap receipt test by @houseme in https://github.com/rustfs/rustfs/pull/7738
• fix(heal): verify inline shard bitrot during deep scans by @cxymds in https://github.com/rustfs/rustfs/pull/7731
• fix(heal): persist and retry partial-write repairs by @cxymds in https://github.com/rustfs/rustfs/pull/7729
• fix(scanner): prove dirty ACK after confirmed root write by @houseme in https://github.com/rustfs/rustfs/pull/7732
• fix(heal): rebuild truncated xl.meta from healthy quorum by @cxymds in https://github.com/rustfs/rustfs/pull/7730
• fix(heal): prove completed historical version cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/7736
• fix(tables): retain dropped warehouse protection by @GatewayJ in https://github.com/rustfs/rustfs/pull/7675
• fix(ecstore): gate shard integrity and preserve legacy recovery by @cxymds in https://github.com/rustfs/rustfs/pull/7741
• fix(heal): retire stale delete markers after bucket recreation by @cxymds in https://github.com/rustfs/rustfs/pull/7743
• fix(heal): preserve historical null version identity by @cxymds in https://github.com/rustfs/rustfs/pull/7749
• fix(s3): preserve version identities on suspended reads by @cxymds in https://github.com/rustfs/rustfs/pull/7751
• fix(rebalance): retry contended runtime metadata access by @cxymds in https://github.com/rustfs/rustfs/pull/7752
• fix(heal): bind bucket recovery to its original incarnation by @cxymds in https://github.com/rustfs/rustfs/pull/7744
• fix(s3): classify copy source part read failures by @houseme in https://github.com/rustfs/rustfs/pull/7746
• fix(tier): classify invalid remote credentials by @houseme in https://github.com/rustfs/rustfs/pull/7753
• test(ecstore): serialize tier cleanup owner matrix by @houseme in https://github.com/rustfs/rustfs/pull/7765
• fix(scanner): run bootstrap usage rebuild promptly by @houseme in https://github.com/rustfs/rustfs/pull/7758
• fix(tier): preserve cleanup scheduling for overwrites by @houseme in https://github.com/rustfs/rustfs/pull/7766
• fix(release): backport main fixes and stabilize tier cleanup tests by @overtrue in https://github.com/rustfs/rustfs/pull/7793
• fix(ci): restore release test compilation and e2e membership by @cxymds in https://github.com/rustfs/rustfs/pull/7799
• fix(s3): return stored content language on local GET by @cxymds in https://github.com/rustfs/rustfs/pull/7755
• fix(s3): return resolved object tagging version identities by @cxymds in https://github.com/rustfs/rustfs/pull/7757
• fix(tables): bound warehouse index recovery by @GatewayJ in https://github.com/rustfs/rustfs/pull/7677
• fix(upgrade): probe legacy IAM namespace before migration by @cxymds in https://github.com/rustfs/rustfs/pull/7816
• fix(release): backport IAM migration startup fixes and recent main fixes by @overtrue in https://github.com/rustfs/rustfs/pull/7825
• fix(auth): reject unsigned x-amz headers on header-signed SigV4 requests (release) by @overtrue in https://github.com/rustfs/rustfs/pull/7813
• fix(s3): preserve missing version errors on object reads by @cxymds in https://github.com/rustfs/rustfs/pull/7800
• fix(heal): bind admin traversal to bucket incarnation by @cxymds in https://github.com/rustfs/rustfs/pull/7802
• fix(ecstore): capture failed object lock acquisitions by @cxymds in https://github.com/rustfs/rustfs/pull/7803
• fix(heal): retain terminal outcomes across restart by @cxymds in https://github.com/rustfs/rustfs/pull/7805
• fix(heal): recover replacement ownership across VM restarts by @cxymds in https://github.com/rustfs/rustfs/pull/7810
• fix(tables): isolate protected S3 listings by @GatewayJ in https://github.com/rustfs/rustfs/pull/7676
• fix(ci): restore Linux E2E selection and split offline enrollment by @cxymds in https://github.com/rustfs/rustfs/pull/7843
• fix(heal): assign stable identities to scanner repair requests by @cxymds in https://github.com/rustfs/rustfs/pull/7823
• fix(heal): backport pool metadata scope to release by @cxymds in https://github.com/rustfs/rustfs/pull/7846
• fix(heal): persist pool/set outcomes and recovery scope by @cxymds in https://github.com/rustfs/rustfs/pull/7839
• fix(ecstore): scope recursive walks to object prefixes by @cxymds in https://github.com/rustfs/rustfs/pull/7850
• fix(heal): scope nested walks and reject admin read-repair by @cxymds in https://github.com/rustfs/rustfs/pull/7851
• test: cover overlapped multipart staging copy by @houseme in https://github.com/rustfs/rustfs/pull/7865
• fix(release): repair acceptance checks and prepare 1.0.0 by @overtrue in https://github.com/rustfs/rustfs/pull/7866
• test(scanner): stabilize W13 release evidence gates by @houseme in https://github.com/rustfs/rustfs/pull/7870
• ci: add the S3 Tables (Iceberg REST Catalog) functional suite workflow by @majinghe in https://github.com/rustfs/rustfs/pull/7873
• test(ecstore): tolerate slow read-repair diagnostics CI by @cxymds in https://github.com/rustfs/rustfs/pull/7892
• fix(heal): report verified normal shard repairs by @cxymds in https://github.com/rustfs/rustfs/pull/7890
• fix(ecstore): hide pending purge entries from listings by @houseme in https://github.com/rustfs/rustfs/pull/7895
• test(ecstore): scope pending purge listing regression by @houseme in https://github.com/rustfs/rustfs/pull/7897
• feat(obs): expose scanner usage freshness metrics by @houseme in https://github.com/rustfs/rustfs/pull/7896
• fix(ecstore): backport delete quorum rollback to release by @overtrue in https://github.com/rustfs/rustfs/pull/7902
• ci: rotate the shared functional-tests concurrency group to -v2 by @majinghe in https://github.com/rustfs/rustfs/pull/7900
• fix(s3): render null write version IDs consistently by @GatewayJ in https://github.com/rustfs/rustfs/pull/7904
• fix(heal): quarantine corrupt root recovery records by @cxymds in https://github.com/rustfs/rustfs/pull/7905
• fix(heal): fence canonical repair receipts by @cxymds in https://github.com/rustfs/rustfs/pull/7909
• fix(heal): persist replacement intent on remote survivor by @GatewayJ in https://github.com/rustfs/rustfs/pull/7912
• chore(release): merge main into release by @overtrue in https://github.com/rustfs/rustfs/pull/7913
• fix(list): reconcile split overwrite metadata by @GatewayJ in https://github.com/rustfs/rustfs/pull/7910
• fix(heal): persist explicit delete-marker purges by @cxymds in https://github.com/rustfs/rustfs/pull/7908
• ci(table): pass --outcome to the backlog issue manager by @majinghe in https://github.com/rustfs/rustfs/pull/7914
• fix(list): reconcile encoded directory objects by @GatewayJ in https://github.com/rustfs/rustfs/pull/7915
• fix(ci): restore release checks after marker purge changes by @overtrue in https://github.com/rustfs/rustfs/pull/7918
• fix(rpc): recover tier reloads after peer capability revocation by @overtrue in https://github.com/rustfs/rustfs/pull/7920
• test(ecstore): drain expiry workers before restart by @cxymds in https://github.com/rustfs/rustfs/pull/7923
• test: report tier cleanup recovery progress on timeout by @overtrue in https://github.com/rustfs/rustfs/pull/7922
• fix(heal): resume replacement generation after target restart by @cxymds in https://github.com/rustfs/rustfs/pull/7926
• ci(release): use sm-standard-4 for Linux builds by @overtrue in https://github.com/rustfs/rustfs/pull/7925

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-rc.6...1.0.0

• fix: evict the cached credentials when a user is deleted by @kah-ja in https://github.com/zincsearch/zincsearch/pull/1015
• feat: add Show Password Icon/I18n to Login and Change Password (frontend/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1016
• chore: update CI and .goreleaser.yml for Go 1.27.x (.github/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1018
• feat: add change password and i18n support for head to web UI (frontend/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1017

• @kah-ja made their first contribution in https://github.com/zincsearch/zincsearch/pull/1015

Full Changelog: https://github.com/zincsearch/zincsearch/compare/v1.0.0-beta2...v1.0.0-beta3

• fix: evict the cached credentials when a user is deleted by @kah-ja in https://github.com/zincsearch/zincsearch/pull/1015
• feat: add Show Password Icon/I18n to Login and Change Password (frontend/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1016
• chore: update CI and .goreleaser.yml for Go 1.27.x (.github/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1018
• feat: add change password and i18n support for head to web UI (frontend/) by @vcaesar in https://github.com/zincsearch/zincsearch/pull/1017

• @kah-ja made their first contribution in https://github.com/zincsearch/zincsearch/pull/1015

Full Changelog: https://github.com/zincsearch/zincsearch/compare/v1.0.0-beta2...v1.0.0-beta3

Release note is coming soon...

• test(heal): cover MRF manifest CAS legacy transition by @houseme in https://github.com/rustfs/rustfs/pull/7443
• fix(ci): enable release branch checks and repair test imports by @overtrue in https://github.com/rustfs/rustfs/pull/7441
• test(scanner): structure heal release evidence lanes by @houseme in https://github.com/rustfs/rustfs/pull/7442
• fix(scanner): require segment producer identities by @houseme in https://github.com/rustfs/rustfs/pull/7444
• fix(scanner): expose recovery intent identity by @houseme in https://github.com/rustfs/rustfs/pull/7445
• test(scanner): summarize failed heal perf reports by @houseme in https://github.com/rustfs/rustfs/pull/7446
• fix(common): retain unmatched MRF repair proofs by @houseme in https://github.com/rustfs/rustfs/pull/7447
• fix(ci): route replication read plan through boundary by @cxymds in https://github.com/rustfs/rustfs/pull/7448
• test(scanner): cover flat-bucket quantum fairness by @houseme in https://github.com/rustfs/rustfs/pull/7449
• fix(heal): reuse same admission request id by @houseme in https://github.com/rustfs/rustfs/pull/7451
• test(scanner): require perf summary evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7453
• test(scanner): bind release evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7452
• fix(scanner): tag dirty usage producer identities by @houseme in https://github.com/rustfs/rustfs/pull/7454
• test(scanner): gate release evidence bundles by @houseme in https://github.com/rustfs/rustfs/pull/7457
• test(scanner): require hard evidence ABBA manifest by @houseme in https://github.com/rustfs/rustfs/pull/7459
• feat(heal): add MRF committed snapshot writer by @houseme in https://github.com/rustfs/rustfs/pull/7458
• test(heal): cover EC8+4 restart shard rebuild by @houseme in https://github.com/rustfs/rustfs/pull/7461
• test(scanner): echo measured release evidence in ABBA fake adapter by @houseme in https://github.com/rustfs/rustfs/pull/7460
• test(scanner): require complete ABBA summary matrix by @houseme in https://github.com/rustfs/rustfs/pull/7462
• heal: replay committed MRF checkpoints durably by @houseme in https://github.com/rustfs/rustfs/pull/7465
• test(scanner): bind hard evidence bundle provenance by @houseme in https://github.com/rustfs/rustfs/pull/7467
• test(heal): cover bucket object repair receipts by @houseme in https://github.com/rustfs/rustfs/pull/7468
• test(scanner): add EC8+4 heal restart evidence by @houseme in https://github.com/rustfs/rustfs/pull/7469
• heal: verify replacement pool metadata repair by @houseme in https://github.com/rustfs/rustfs/pull/7471
• heal: verify admin recreate pool metadata by @houseme in https://github.com/rustfs/rustfs/pull/7474
• test(heal): preserve EC84 restart semantics by @houseme in https://github.com/rustfs/rustfs/pull/7478
• test(heal): write EC84 distributed restart oracle by @houseme in https://github.com/rustfs/rustfs/pull/7481
• fix(heal): harden MRF replay boundaries by @houseme in https://github.com/rustfs/rustfs/pull/7483
• test(ecstore): bind MRF manifest CAS dirsync recovery by @houseme in https://github.com/rustfs/rustfs/pull/7482
• test(scanner): derive evidence runner profile from registry by @houseme in https://github.com/rustfs/rustfs/pull/7484
• test(scanner): require mixed-version evidence roles by @houseme in https://github.com/rustfs/rustfs/pull/7485
• fix(heal): publish committed MRF runtime checkpoints by @houseme in https://github.com/rustfs/rustfs/pull/7490
• test(scanner): bind profile artifacts in release evidence by @houseme in https://github.com/rustfs/rustfs/pull/7487
• test(scanner): harden measured ABBA evidence claims by @houseme in https://github.com/rustfs/rustfs/pull/7491
• fix(e2e): group scanner heal evidence payload by @houseme in https://github.com/rustfs/rustfs/pull/7494
• test(scanner): require MRF replay bundle fields by @houseme in https://github.com/rustfs/rustfs/pull/7486
• test(scanner): profile EC84 evidence case runs by @houseme in https://github.com/rustfs/rustfs/pull/7495
• test(scanner): reject empty release evidence artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7496
• test(scanner): require G14 same-window field coverage by @houseme in https://github.com/rustfs/rustfs/pull/7489
• test(scanner): require two-hour measured ABBA windows by @houseme in https://github.com/rustfs/rustfs/pull/7493
• test(heal): cover MRF idle checkpoint cleanup by @houseme in https://github.com/rustfs/rustfs/pull/7497
• fix(e2e): ignore untracked files in build identity by @houseme in https://github.com/rustfs/rustfs/pull/7498
• test(scanner): require MRF disk-full evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7499
• test(scanner): bind release JSON artifact provenance by @houseme in https://github.com/rustfs/rustfs/pull/7500
• test(heal): cover MRF rollback mirror filtering by @houseme in https://github.com/rustfs/rustfs/pull/7501
• test(scanner): require segment activation evidence by @houseme in https://github.com/rustfs/rustfs/pull/7504
• test(scanner): require MRF crash matrix cases by @houseme in https://github.com/rustfs/rustfs/pull/7505
• test(scanner): require release bundle domain evidence by @houseme in https://github.com/rustfs/rustfs/pull/7502
• test(scanner): require MRF retention GC evidence by @houseme in https://github.com/rustfs/rustfs/pull/7506
• test(scanner): require MRF cleanup GC soak evidence by @houseme in https://github.com/rustfs/rustfs/pull/7507
• test(heal): cover MRF disk-full commit anchors by @houseme in https://github.com/rustfs/rustfs/pull/7509
• test(e2e): report port allocator bind errors by @houseme in https://github.com/rustfs/rustfs/pull/7510
• fix(sse): resolve 1.0.0 SSE/KMS blockers and P1 findings by @reatang in https://github.com/rustfs/rustfs/pull/7511
• test(storage): cover MRF cleanup delete ENOSPC anchor by @houseme in https://github.com/rustfs/rustfs/pull/7513
• test(scanner): require heal retry stats evidence by @houseme in https://github.com/rustfs/rustfs/pull/7514
• test(scanner): add release bundle dry-run fixture by @houseme in https://github.com/rustfs/rustfs/pull/7515
• fix(scanner): confirm recovery intent accept readback by @houseme in https://github.com/rustfs/rustfs/pull/7516
• test(scanner): require MRF cleanup delete ENOSPC evidence by @houseme in https://github.com/rustfs/rustfs/pull/7518
• test(scanner): require bounded retry window evidence by @houseme in https://github.com/rustfs/rustfs/pull/7517
• test(e2e): emit scanner heal G09 upgrade evidence by @houseme in https://github.com/rustfs/rustfs/pull/7519
• test(heal): persist MRF rollback mirror boundary by @houseme in https://github.com/rustfs/rustfs/pull/7520
• test(scanner): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7522
• feat(scanner): implement V2 evidence preflights by @houseme in https://github.com/rustfs/rustfs/pull/7523
• test(scanner): assemble release evidence bundles by @houseme in https://github.com/rustfs/rustfs/pull/7526
• test(scanner): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7524
• fix(scanner): replay recovery intents while disabled by @houseme in https://github.com/rustfs/rustfs/pull/7521
• test(scanner): preflight G09 evidence disk space by @houseme in https://github.com/rustfs/rustfs/pull/7527
• fix(scanner): respect cargo target dir in G09 runner by @houseme in https://github.com/rustfs/rustfs/pull/7528
• test(e2e): add G09 upgrade evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7525
• test(scanner): emit G09 release bundle gate evidence by @houseme in https://github.com/rustfs/rustfs/pull/7530
• fix(scanner): reject invalid G09 runner test selection by @houseme in https://github.com/rustfs/rustfs/pull/7531
• fix(scanner): keep G09 source binary path clean by @houseme in https://github.com/rustfs/rustfs/pull/7532
• test(heal): cover MRF replay proof cleanup by @houseme in https://github.com/rustfs/rustfs/pull/7534
• feat(scanner): carry segment activation preflight evidence by @houseme in https://github.com/rustfs/rustfs/pull/7535
• feat(scanner): surface cold segment reuse oracle by @houseme in https://github.com/rustfs/rustfs/pull/7536
• test(scanner): require hard evidence artifact payloads by @houseme in https://github.com/rustfs/rustfs/pull/7537
• feat(scanner): bind producer evidence to dirty generations by @houseme in https://github.com/rustfs/rustfs/pull/7538
• feat(scanner): persist segment invalidation proof metadata by @houseme in https://github.com/rustfs/rustfs/pull/7539
• test(scanner): wait for EC8+4 heal control readiness by @houseme in https://github.com/rustfs/rustfs/pull/7540
• test(scanner): list full P4 release evidence fields by @houseme in https://github.com/rustfs/rustfs/pull/7542
• test(scanner): add W16 release evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7543
• fix: address release acceptance regressions by @overtrue in https://github.com/rustfs/rustfs/pull/7541
• feat(scanner): admit durable segment proof replay by @houseme in https://github.com/rustfs/rustfs/pull/7544
• test(scanner): bind MRF release artifacts to evidence kinds by @houseme in https://github.com/rustfs/rustfs/pull/7545
• feat(scanner): enable segment reuse activation gate by @houseme in https://github.com/rustfs/rustfs/pull/7546
• test(scanner): run scoped fallback cases on dedicated stack by @houseme in https://github.com/rustfs/rustfs/pull/7550
• test(scanner): roll out distributed e2e selection by @houseme in https://github.com/rustfs/rustfs/pull/7549
• test(scanner): add W13 MRF evidence runner by @houseme in https://github.com/rustfs/rustfs/pull/7547
• ci(test): enable local KMS for s3 compatibility tests by @houseme in https://github.com/rustfs/rustfs/pull/7553
• fix(scanner): bind segment proof to typed dirty suffix by @houseme in https://github.com/rustfs/rustfs/pull/7564
• fix(scanner): validate scoped ACK clear receipts by @houseme in https://github.com/rustfs/rustfs/pull/7563
• fix(scanner): bind cold scoped cache reuse by @houseme in https://github.com/rustfs/rustfs/pull/7565
• fix(s3): preserve delete marker read error headers by @cxymds in https://github.com/rustfs/rustfs/pull/7558
• chore(release): sync configurable nightly build workflow from main by @majinghe in https://github.com/rustfs/rustfs/pull/7567
• docs(obs): correct metric export interval and explain alert timing by @cxymds in https://github.com/rustfs/rustfs/pull/7571
• fix(heal): persist scoped admin admission handoff by @houseme in https://github.com/rustfs/rustfs/pull/7569
• fix(scanner): mark committed replication and tier mutations by @houseme in https://github.com/rustfs/rustfs/pull/7568
• fix(ecstore): recover expansion buckets and resume retirement by @overtrue in https://github.com/rustfs/rustfs/pull/7574
• fix(ci): align S3 KMS fixtures and default key expectations by @cxymds in https://github.com/rustfs/rustfs/pull/7573
• fix(heal): prune retained root terminal receipts by @houseme in https://github.com/rustfs/rustfs/pull/7576
• fix(storage): preserve retryable publication guard errors by @cxymds in https://github.com/rustfs/rustfs/pull/7561
• fix(health): report storage quorum in node readiness by @cxymds in https://github.com/rustfs/rustfs/pull/7566
• fix: preserve scanner backlog during pool retirement by @overtrue in https://github.com/rustfs/rustfs/pull/7555
• test(scanner): bind profile artifact provenance by @houseme in https://github.com/rustfs/rustfs/pull/7577
• fix(scanner): persist dirty producer journal by @houseme in https://github.com/rustfs/rustfs/pull/7580
• test: add scanner heal scheduler pressure evidence by @houseme in https://github.com/rustfs/rustfs/pull/7584
• test: add scanner heal G14 multiset evidence by @houseme in https://github.com/rustfs/rustfs/pull/7583
• fix(nightly): push assets with plain git on release — the build fleet has no gh CLI by @majinghe in https://github.com/rustfs/rustfs/pull/7586
• fix(scanner): stabilize retired backlog survivor commits by @houseme in https://github.com/rustfs/rustfs/pull/7585
• fix(metrics): prevent duplicate drive reporting across nodes by @cxymds in https://github.com/rustfs/rustfs/pull/7582
• fix(ecstore): avoid Windows batch-delete cleanup sharing conflicts by @cxymds in https://github.com/rustfs/rustfs/pull/7579
• feat(ilm): inspect legacy transition version state by @cxymds in https://github.com/rustfs/rustfs/pull/7581
• test(scanner): add release evidence ingestion gates by @houseme in https://github.com/rustfs/rustfs/pull/7588
• fix: reuse admin error boundary for legacy tier reconciliation by @overtrue in https://github.com/rustfs/rustfs/pull/7587
• fix(test): stabilize release CI heal fixtures by @houseme in https://github.com/rustfs/rustfs/pull/7589
• feat(nightly): publish packages as assets of the rolling 'nightly' release by @majinghe in https://github.com/rustfs/rustfs/pull/7592
• test(scanner): add release bundle evidence descriptors by @houseme in https://github.com/rustfs/rustfs/pull/7595
• feat(ilm): backfill proven legacy transition state by @cxymds in https://github.com/rustfs/rustfs/pull/7591
• test(ecstore): remove redundant transition clone by @houseme in https://github.com/rustfs/rustfs/pull/7597
• fix(scanner): seed current backlog members before committing by @cxymds in https://github.com/rustfs/rustfs/pull/7594
• test(scanner): bind raw profile artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7598
• fix(heal): surface first failed object in status by @houseme in https://github.com/rustfs/rustfs/pull/7599
• test(heal): cover retry budget across attempts by @houseme in https://github.com/rustfs/rustfs/pull/7600
• test(scanner): harden durable producer evidence gate by @houseme in https://github.com/rustfs/rustfs/pull/7601
• test(scanner): harden scoped ack evidence proof by @houseme in https://github.com/rustfs/rustfs/pull/7602
• test(scanner): bind status outcome raw provenance by @houseme in https://github.com/rustfs/rustfs/pull/7603
• fix(heal): retry fully recoverable batch failures by @houseme in https://github.com/rustfs/rustfs/pull/7604
• fix(scanner): avoid movement debt for stale remote lease by @houseme in https://github.com/rustfs/rustfs/pull/7605
• chore(deps): refresh workspace dependencies by @houseme in https://github.com/rustfs/rustfs/pull/7606
• test(scanner): bind G14 case artifacts by @houseme in https://github.com/rustfs/rustfs/pull/7611
• fix(ecstore): retry contended decommission cancel target locks by @cxymds in https://github.com/rustfs/rustfs/pull/7612
• test: align transition fixtures and KMS context expectations by @overtrue in https://github.com/rustfs/rustfs/pull/7610
• test(scanner): stabilize W13 release gate evidence by @houseme in https://github.com/rustfs/rustfs/pull/7613
• fix(scanner): bound native backlog fixture resources by @houseme in https://github.com/rustfs/rustfs/pull/7609
• fix(ci): align release E2E gate and repair regression tests by @overtrue in https://github.com/rustfs/rustfs/pull/7607
• fix(scanner): harden heal release gates by @houseme in https://github.com/rustfs/rustfs/pull/7614
• test(scanner): reject synthetic heal evidence inputs by @houseme in https://github.com/rustfs/rustfs/pull/7617
• test(scanner): collect status outcome raw evidence by @houseme in https://github.com/rustfs/rustfs/pull/7618
• fix(scanner): bind scoped ack confirmation to generation by @houseme in https://github.com/rustfs/rustfs/pull/7619
• test: report tier reference proof setup failures without hanging by @overtrue in https://github.com/rustfs/rustfs/pull/7608
• test(scanner): plan Linux evidence validation by @houseme in https://github.com/rustfs/rustfs/pull/7620
• test(e2e): select G14 replacement drive by evidence by @houseme in https://github.com/rustfs/rustfs/pull/7622
• test(scanner): report Linux evidence plan status by @houseme in https://github.com/rustfs/rustfs/pull/7624
• test(scanner): add G14 multi-pool background heal evidence by @houseme in https://github.com/rustfs/rustfs/pull/7628
• test(scanner): verify deferred multipool outage evidence by @houseme in https://github.com/rustfs/rustfs/pull/7629
• fix(ecstore): allow metadata snapshots at read quorum by @houseme in https://github.com/rustfs/rustfs/pull/7627
• chore(deps): refresh release dependencies by @houseme in https://github.com/rustfs/rustfs/pull/7632
• fix(ecstore): use pool lock quorum for set writes by @houseme in https://github.com/rustfs/rustfs/pull/7630
• test(e2e): keep G14 multi-set restart graceful by @houseme in https://github.com/rustfs/rustfs/pull/7633
• test(e2e): record deferred G14 outage writes by @houseme in https://github.com/rustfs/rustfs/pull/7637
• test(scanner): bound G14 multi-pool evidence size by @houseme in https://github.com/rustfs/rustfs/pull/7640
• fix(scanner): find nextest junit fallback for evidence cases by @houseme in https://github.com/rustfs/rustfs/pull/7643
• fix(ilm): preserve cleanup ownership on tiered overwrites by @cxymds in https://github.com/rustfs/rustfs/pull/7639
• test(ilm): restore noncurrent compensation tests to serial CI by @cxymds in https://github.com/rustfs/rustfs/pull/7645
• fix(heal): preserve null-version tags and encoded object paths by @cxymds in https://github.com/rustfs/rustfs/pull/7644
• fix(e2e): record EC8+4 drive restart set size by @houseme in https://github.com/rustfs/rustfs/pull/7648
• test(e2e): target multi-set outage heal candidate by @houseme in https://github.com/rustfs/rustfs/pull/7653
• fix(heal): reuse API error boundary for decoding failures by @cxymds in https://github.com/rustfs/rustfs/pull/7647
• fix(scanner): wait for ABBA telemetry window by @houseme in https://github.com/rustfs/rustfs/pull/7660
• Revert "feat(ci): add fault-tolerance degradation suite to the functional chain" by @majinghe in https://github.com/rustfs/rustfs/pull/7666
• fix(ecstore): preserve multi-pool version histories by @cxymds in https://github.com/rustfs/rustfs/pull/7658
• fix(heal): recover stale peer state after restart by @cxymds in https://github.com/rustfs/rustfs/pull/7665
• fix(heal): select writable recovery intent owner by @cxymds in https://github.com/rustfs/rustfs/pull/7668
• feat(ci): add fault-tolerance degradation suite to the functional chain by @majinghe in https://github.com/rustfs/rustfs/pull/7669
• fix(get): reject pre-header read quorum failures by @cxymds in https://github.com/rustfs/rustfs/pull/7670
• ci: stop defaulting suite dispatches to a pinned release by @majinghe in https://github.com/rustfs/rustfs/pull/7681
• ci: manage backlog issues by signal instead of per-run filing by @majinghe in https://github.com/rustfs/rustfs/pull/7680
• fix(storage): alias legacy meta bucket over internode rpc by @houseme in https://github.com/rustfs/rustfs/pull/7685
• test(ecstore): stabilize cancelled rename test by @cxymds in https://github.com/rustfs/rustfs/pull/7684
• test(scanner): report Linux descriptor drift ledger by @houseme in https://github.com/rustfs/rustfs/pull/7692
• test(heal): retry recovery readback SlowDownRead by @houseme in https://github.com/rustfs/rustfs/pull/7695
• fix(pool): default the node-endpoints fallback to the 4-node fleet by @majinghe in https://github.com/rustfs/rustfs/pull/7696
• fix(scanner): require ABBA collector credentials by @houseme in https://github.com/rustfs/rustfs/pull/7700
• test(heal): label G14 recovery read failures by @houseme in https://github.com/rustfs/rustfs/pull/7701
• fix(heal): preserve settings in token status by @cxymds in https://github.com/rustfs/rustfs/pull/7691
• ci: green runs for case failures; red only for harness breakdowns by @majinghe in https://github.com/rustfs/rustfs/pull/7698
• test(heal): retry G14 deferred outage put by @houseme in https://github.com/rustfs/rustfs/pull/7703
• test(heal): retry G14 outage put probes by @houseme in https://github.com/rustfs/rustfs/pull/7704
• test(heal): remove unused G14 put helper by @houseme in https://github.com/rustfs/rustfs/pull/7705
• fix(tables): authorize reserved metadata reads by @GatewayJ in https://github.com/rustfs/rustfs/pull/7672
• ci: harden report steps after first full new-semantics run by @majinghe in https://github.com/rustfs/rustfs/pull/7708
• ci: tolerate ANSI reset escapes in security verdicts; fix tier product counts by @majinghe in https://github.com/rustfs/rustfs/pull/7712
• fix(heal): reject overlapping admin heal owners by @cxymds in https://github.com/rustfs/rustfs/pull/7723
• fix(heal): reject invalid admin selectors before admission by @cxymds in https://github.com/rustfs/rustfs/pull/7724
• fix(heal): pass endpoints to overlap receipt test by @houseme in https://github.com/rustfs/rustfs/pull/7738
• fix(heal): verify inline shard bitrot during deep scans by @cxymds in https://github.com/rustfs/rustfs/pull/7731
• fix(heal): persist and retry partial-write repairs by @cxymds in https://github.com/rustfs/rustfs/pull/7729
• fix(scanner): prove dirty ACK after confirmed root write by @houseme in https://github.com/rustfs/rustfs/pull/7732
• fix(heal): rebuild truncated xl.meta from healthy quorum by @cxymds in https://github.com/rustfs/rustfs/pull/7730
• fix(heal): prove completed historical version cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/7736
• fix(tables): retain dropped warehouse protection by @GatewayJ in https://github.com/rustfs/rustfs/pull/7675
• fix(ecstore): gate shard integrity and preserve legacy recovery by @cxymds in https://github.com/rustfs/rustfs/pull/7741
• fix(heal): retire stale delete markers after bucket recreation by @cxymds in https://github.com/rustfs/rustfs/pull/7743
• fix(heal): preserve historical null version identity by @cxymds in https://github.com/rustfs/rustfs/pull/7749
• fix(s3): preserve version identities on suspended reads by @cxymds in https://github.com/rustfs/rustfs/pull/7751
• fix(rebalance): retry contended runtime metadata access by @cxymds in https://github.com/rustfs/rustfs/pull/7752
• fix(heal): bind bucket recovery to its original incarnation by @cxymds in https://github.com/rustfs/rustfs/pull/7744
• fix(s3): classify copy source part read failures by @houseme in https://github.com/rustfs/rustfs/pull/7746
• fix(tier): classify invalid remote credentials by @houseme in https://github.com/rustfs/rustfs/pull/7753
• test(ecstore): serialize tier cleanup owner matrix by @houseme in https://github.com/rustfs/rustfs/pull/7765
• fix(scanner): run bootstrap usage rebuild promptly by @houseme in https://github.com/rustfs/rustfs/pull/7758
• fix(tier): preserve cleanup scheduling for overwrites by @houseme in https://github.com/rustfs/rustfs/pull/7766
• fix(release): backport main fixes and stabilize tier cleanup tests by @overtrue in https://github.com/rustfs/rustfs/pull/7793
• fix(ci): restore release test compilation and e2e membership by @cxymds in https://github.com/rustfs/rustfs/pull/7799
• fix(s3): return stored content language on local GET by @cxymds in https://github.com/rustfs/rustfs/pull/7755
• fix(s3): return resolved object tagging version identities by @cxymds in https://github.com/rustfs/rustfs/pull/7757
• fix(tables): bound warehouse index recovery by @GatewayJ in https://github.com/rustfs/rustfs/pull/7677
• fix(upgrade): probe legacy IAM namespace before migration by @cxymds in https://github.com/rustfs/rustfs/pull/7816
• fix(release): backport IAM migration startup fixes and recent main fixes by @overtrue in https://github.com/rustfs/rustfs/pull/7825
• fix(auth): reject unsigned x-amz headers on header-signed SigV4 requests (release) by @overtrue in https://github.com/rustfs/rustfs/pull/7813
• fix(s3): preserve missing version errors on object reads by @cxymds in https://github.com/rustfs/rustfs/pull/7800
• fix(heal): bind admin traversal to bucket incarnation by @cxymds in https://github.com/rustfs/rustfs/pull/7802
• fix(ecstore): capture failed object lock acquisitions by @cxymds in https://github.com/rustfs/rustfs/pull/7803
• fix(heal): retain terminal outcomes across restart by @cxymds in https://github.com/rustfs/rustfs/pull/7805
• fix(heal): recover replacement ownership across VM restarts by @cxymds in https://github.com/rustfs/rustfs/pull/7810
• fix(tables): isolate protected S3 listings by @GatewayJ in https://github.com/rustfs/rustfs/pull/7676
• fix(ci): restore Linux E2E selection and split offline enrollment by @cxymds in https://github.com/rustfs/rustfs/pull/7843
• fix(heal): assign stable identities to scanner repair requests by @cxymds in https://github.com/rustfs/rustfs/pull/7823
• fix(heal): backport pool metadata scope to release by @cxymds in https://github.com/rustfs/rustfs/pull/7846
• fix(heal): persist pool/set outcomes and recovery scope by @cxymds in https://github.com/rustfs/rustfs/pull/7839
• fix(ecstore): scope recursive walks to object prefixes by @cxymds in https://github.com/rustfs/rustfs/pull/7850
• fix(heal): scope nested walks and reject admin read-repair by @cxymds in https://github.com/rustfs/rustfs/pull/7851
• test: cover overlapped multipart staging copy by @houseme in https://github.com/rustfs/rustfs/pull/7865
• fix(release): repair acceptance checks and prepare 1.0.0 by @overtrue in https://github.com/rustfs/rustfs/pull/7866
• test(scanner): stabilize W13 release evidence gates by @houseme in https://github.com/rustfs/rustfs/pull/7870
• ci: add the S3 Tables (Iceberg REST Catalog) functional suite workflow by @majinghe in https://github.com/rustfs/rustfs/pull/7873
• test(ecstore): tolerate slow read-repair diagnostics CI by @cxymds in https://github.com/rustfs/rustfs/pull/7892
• fix(heal): report verified normal shard repairs by @cxymds in https://github.com/rustfs/rustfs/pull/7890
• fix(ecstore): hide pending purge entries from listings by @houseme in https://github.com/rustfs/rustfs/pull/7895
• test(ecstore): scope pending purge listing regression by @houseme in https://github.com/rustfs/rustfs/pull/7897
• feat(obs): expose scanner usage freshness metrics by @houseme in https://github.com/rustfs/rustfs/pull/7896
• fix(ecstore): backport delete quorum rollback to release by @overtrue in https://github.com/rustfs/rustfs/pull/7902
• ci: rotate the shared functional-tests concurrency group to -v2 by @majinghe in https://github.com/rustfs/rustfs/pull/7900
• fix(s3): render null write version IDs consistently by @GatewayJ in https://github.com/rustfs/rustfs/pull/7904
• fix(heal): quarantine corrupt root recovery records by @cxymds in https://github.com/rustfs/rustfs/pull/7905
• fix(heal): fence canonical repair receipts by @cxymds in https://github.com/rustfs/rustfs/pull/7909
• fix(heal): persist replacement intent on remote survivor by @GatewayJ in https://github.com/rustfs/rustfs/pull/7912
• chore(release): merge main into release by @overtrue in https://github.com/rustfs/rustfs/pull/7913
• fix(list): reconcile split overwrite metadata by @GatewayJ in https://github.com/rustfs/rustfs/pull/7910
• fix(heal): persist explicit delete-marker purges by @cxymds in https://github.com/rustfs/rustfs/pull/7908
• ci(table): pass --outcome to the backlog issue manager by @majinghe in https://github.com/rustfs/rustfs/pull/7914
• fix(list): reconcile encoded directory objects by @GatewayJ in https://github.com/rustfs/rustfs/pull/7915
• fix(ci): restore release checks after marker purge changes by @overtrue in https://github.com/rustfs/rustfs/pull/7918
• fix(rpc): recover tier reloads after peer capability revocation by @overtrue in https://github.com/rustfs/rustfs/pull/7920
• test(ecstore): drain expiry workers before restart by @cxymds in https://github.com/rustfs/rustfs/pull/7923
• test: report tier cleanup recovery progress on timeout by @overtrue in https://github.com/rustfs/rustfs/pull/7922
• fix(heal): resume replacement generation after target restart by @cxymds in https://github.com/rustfs/rustfs/pull/7926
• ci(release): use sm-standard-4 for Linux builds by @overtrue in https://github.com/rustfs/rustfs/pull/7925

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-rc.6...1.0.0-preview.4