Cherry-picked changes

Cherry-picked changes

Erasure Coding & Scrub

The largest theme — Rust volume-server scrub parity plus EC correctness.

EC scrub

• #10130 Fix scrubbing of deleted needles on EC volumes
• #10144 EC LOCAL needle walk (split from FULL)
• #10147 suppress deleted-needle size mismatch in EC LOCAL scrub
• #10149 EC FULL scrub — distributed local+remote needle walk
• #10152 correct EC FULL scrub for deleted needles, shard-location cache, parity coverage
• #10154 EC bitrot CHECKSUM scrub on the Rust volume server
• #10172 reject oversized bitrot payload before narrowing to u32
• #10176 expose force_deleted_needles_check in ScrubEcVolume RPC and shell

Volume scrub (Rust parity)

• #10141 correct backwards FULL/LOCAL mode comments in Rust
• #10142 align Rust INDEX scrub to Go's idx.CheckIndexFile
• #10143 walk the on-disk .idx in Volume::scrub
• #10148 don't flag offset-0 logical tombstones

EC storage / read paths

• #10140 honor wide EC ratios in Rust read_ec_shard_config
• #10145 search sibling disk locations when rebuilding missing EC shards + .ecx
• #10187 read chunk-manifest chunks stored on EC volumes (Rust)
• #10217 detect truncated .ecx instead of treating it as clean EOF

Rust volume server (non-scrub)

• #10128 parse master lookup when publicUrl is omitted
• #10139 test coverage for type=replicate fan-out writes
• #10189 compare live compaction_revision instead of stale last_compact_revision
• #10233 pin rustls to aws-lc-rs so TLS gRPC startup doesn't panic

Topology, balancing & placement

• #10161 keep physical disk 0 distinct in SplitByPhysicalDisk
• #10166 report empty disks (per-disk type + capacity in heartbeat)
• #10162 volume.balance: gate on real physical disk usage
• #10167 skip physically near-full disks when placing EC shards
• #10169 share replica-placement logic between shell and worker
• #10171 worker: project the moved volume when gating on disk fullness
• #10174 extract the bytes-aware density metric to a shared package

Master

• #10202 let the growth initiator wait instead of shedding itself
• #10226 repair the lookup index after a vacuum that raced a disconnect

Volume server (Go)

• #10185 drop stale volume-location cache on under-replication
• #10229 bound intra-cluster HTTP so an unresponsive peer can't hang reads/writes

S3 API

• #10156 invalidate stale reader-cache locations on chunk read failure
• #10186 return IncompleteBody instead of 500 for truncated PUT bodies
• #10192 embedded IAM inline policy honors prefix-scoped resources
• #10207 surface transient store errors during multipart resume/copy
• #10213 lazy, bounded, entry-free per-bucket caches
• #10214 paginate ListBuckets and serve from a bucket owner index
• #10224 enforce bucket quota on logical size + read-only state in Admin UI
• #10225 answer directory-path probes like AWS (Flink savepoint restore)
• #10236 FULL_OBJECT checksumming for CRC

Filer

• #10158 use DROP TABLE IF EXISTS in SQL stores
• #10190 avoid ReaderCache WaitGroup reuse race between reads and destroy
• #10196 applyStorageDefaultsToEntry before CreateEntry
• #10203 stream offloaded metadata-log entries to fix concurrent-write OOM
• #10232 default filemeta CREATE TABLE for postgres2/mysql2 when unset
• #10234 default cassandra2 timeout and ydb prefix for env-var configs

Admin UI

• #10150 remove non-functional EC repair button
• #10155 restore cluster volume page CSV export
• #10170 respect filerGroup for cluster discovery
• #10175 fix 'send on closed channel' panic in worker gRPC server
• #10227 browse Iceberg table data

Shell commands

• #10126 avoid duplicate volume.list parent headers
• #10129 collection pattern to delete empty volumes
• #10159 honor explicit fs.mergeVolumes from/to direction
• #10204 add ec.shard.unmount command
• #10219 pass collection in ec.shard.unmount --delete request

Remote storage & sync

• #10151 remote/gcs: tolerate already-deleted object in DeleteFile
• #10184 remote.meta.sync: sync directories and remove remote-deleted files
• #10228 add -delete option to remote.copy.local
• #10177 filer.sync.verify: reclassify chunk-slice-order ETag diffs as CHUNK_REORDER

Kubernetes / Helm

• #10198 add certificates.dnsNames for custom SANs in cert-manager certs
• #10205 filer HTTP + gRPC ingress for the Helm chart
• #10223 Traefik IngressRouteTCP for gRPC with TLS passthrough

KMS

• #10173 cache decrypted data keys so cache_enabled/cache_ttl take effect

Core / networking / util

• #10164 centralize genUploadUrl in UploadOption
• #10212 don't let the activity timeout clobber externally-set conn deadlines

Tests & CI

• #10208 fuse-tests: don't declare mount ready before it is mounted
• #10215 fuse-tests: pass glog flags before the mount subcommand
• #10209 keep mini-allocated ports below the ephemeral floor

• @doma17 made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10155
• @ycjlin made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10228
• @cole-h made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/10236

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.37...4.38

Small patch release with fixes in query engine and hardening in the binary protocol

• fix: correctly handled null position when execute order by using indexes, issue #10807

• Hardening of binary protocol, directly close connection in case of first request miss authentication

orientdb-community-3.2.54.tar.gz orientdb-community-3.2.54.zip

orientdb-tp3-3.2.54.tar.gz orientdb-tp3-3.2.54.zip

agent-3.2.54.jar

• Add Headers.collapseMultiValuedHeaders() by @gavinbunney in https://github.com/Netflix/zuul/pull/2172

Full Changelog: https://github.com/Netflix/zuul/compare/v3.6.19...v3.6.20

https://fluentbit.io/announcements/v5.0.9/

• workflows: bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/11997
• workflows: bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/11996
• workflows: bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/11995
• github: workflows: Use semver and timestamp suffixes to distinguish branches by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12016
• workflows: bump actions/cache/restore from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12011
• workflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12012
• workflows: bump actions/cache/save from 6.0.0 to 6.1.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12013
• release: update to 5.0.9 by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12018
• in_windows_exporter_metrics: Implement user-defined performance counters w/ PDH by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12006
• tests: runtime: Try to address test hang by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12000
• workflows: bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12031
• workflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12030
• in_forward: validate PING is a msgpack array in check_ping by @saddamr3e in https://github.com/fluent/fluent-bit/pull/12034
• filter_kubernetes: Attach k8s metadata for internal logs by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11998
• in_ebpf: Implement openssl trace by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11793
• tests: runtime: Use more concrete matchers for assertions by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12014
• in_tail: Another attempt to plug segv on in tail by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12010
• filter_write_tag: in_emitter: Mitigate data loss on multiline by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12029
• workflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12041
• workflows: bump docker/login-action from 4.2.0 to 4.3.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12040
• workflows: bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12039
• workflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12038
• out_cloudwatch_logs: Plug SEGV on not found error by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/11983
• lib: librdkafka: Upgrade to v2.15.0 by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12028
• in_ebpf: Generate mostly monotonic event id for increasing traceability by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12002
• in_splunk: return Splunk HEC auth status codes by @lecaros in https://github.com/fluent/fluent-bit/pull/12043
• out_forward: align secure forward handshake and chunk ack with protocol spec by @edsiper in https://github.com/fluent/fluent-bit/pull/12037
• out_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV) by @erain in https://github.com/fluent/fluent-bit/pull/12023
• out_stackdriver: fix payload parsing over-reads and null safety by @erain in https://github.com/fluent/fluent-bit/pull/12022
• codeowners: update @jeffluoo to @JeffLuoo by @JeffLuoo in https://github.com/fluent/fluent-bit/pull/11941
• gzip: skip FCOMMENT terminator in streaming decompressor by @saddamr3e in https://github.com/fluent/fluent-bit/pull/11969
• in_forward: fix 100% CPU hang and connection teardown use-after-free by @edsiper in https://github.com/fluent/fluent-bit/pull/12044
• build fixes: out_stackdriver int64_t line var, gzip endian-safe magic check by @edsiper in https://github.com/fluent/fluent-bit/pull/12045

Full Changelog: https://github.com/fluent/fluent-bit/compare/v5.0.8...v5.0.9

• Make http2 graceful shutdown timeouts configurable by @jguerra in https://github.com/Netflix/zuul/pull/2162
• Fix server shutdown hook logic by @jguerra in https://github.com/Netflix/zuul/pull/2163
• Skip filters with a no-op processContentChunk during chunk processing by @gavinbunney in https://github.com/Netflix/zuul/pull/2168
• Avoid allocating an iterator per filter in FilterConstraints.isConstrained by @gavinbunney in https://github.com/Netflix/zuul/pull/2169

Full Changelog: https://github.com/Netflix/zuul/compare/v3.6.18...v3.6.19