We now support using the search personalization feature on federated search requests.

Like page/hitPerPage or limit/offset, the personalization option must be specified in the federation attribute to work properly. Otherwise, an error will be returned reminding you to move the attribute in federation.

By @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6414

• We now better support the tokenizer-related settings
• We improved the quality of the new settings indexer to enhance the engine's performance when changing the locales, the dictionary, synonyms, stop words, separator, and non-separator tokens.
• This makes the new settings indexer feature-complete, meaning that, unless you set the MEILI_EXPERIMENTAL_NO_EDITION_2024_FOR_SETTINGS environment variable to true, all settings tasks can now be handled by the new settings indexer, bringing a better scaling behavior, much faster cancellation, and a more precise progress view.

By @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6409

We expose more Prometheus metrics to improve observability, specifically to show more metrics on document throughput and ease debugging.

By @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6430

• Putting attributeRank/ wordPosition before words in the rankingRules list will no longer remove hits from the response, by @pjdurden in https://github.com/meilisearch/meilisearch/pull/6437
• Meilisearch will no longer ignore the searchCutoffMs in some conditions when embedding documents, by @dureuill in https://github.com/meilisearch/meilisearch/pull/6447
• Meilisearch will no longer fail to proxy a search request with a filter containing a ' during remote federated search or useNetwork: true search requests, by @dureuill in https://github.com/meilisearch/meilisearch/pull/6445

• CI: Prevent shell injection in GitHub Actions release workflows by @curquiza in https://github.com/meilisearch/meilisearch/pull/6420

Refactor the search pipeline to mutualize the code. The new implementation will always perform a federated search under the hood, and then the output will be transformed into the expected route's output.

Noticeable changes from the user perspective:

• Some error messages have been modified
• Small breaking change: a few error codes change, such as MultiSearch<Error> <--> Search<Error>

• Make it easier and less error-prone to declare a type that is used as a body parameter on a Meilisearch endpoint, by @dureuill in https://github.com/meilisearch/meilisearch/pull/6429
• Remove the now unused vectorStoreBackend setting from the settings, by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6399
• Replace custom hf-hub git dependency by the official one by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6442
• Update Python SDK test CI by @Strift in https://github.com/meilisearch/meilisearch/pull/6439
• Refactor the code to use the MustStopProcessing type everywhere by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6423

• @pjdurden made their first contribution in https://github.com/meilisearch/meilisearch/pull/6437

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.46.1...v1.47.0

• S3

  • s3: export per-bucket quota and read-only state metrics by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9923
  • s3: validate copy source path segments by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9929
  • [s3] validate indirect filer path inputs by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9931
  • [s3]: preserve multipart copy checksums by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9948
  • s3: give account-less identities a distinct owner instead of admin by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9962
  • s3: give STS sessions a distinct owner account instead of admin by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9963
  • s3tables: scope management authorization to the caller's identity by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9961
  • s3: register account-less identities' synthesized account so ACL/owner ids resolve by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9971

• Misc

  • fix(tests): 32-bit build of EC e2e tests, type-check linux/386 in CI by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9922
  • ci: run weed tests on linux/386 by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9924
  • fix(util): ignore comment only sql input by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9933

• Shell

  • shell: volume.tier.move can move volumes between data centers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9925
  • shell: stop ec.encode/ec.rebuild from destroying live EC shards (no crash needed) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9939

• Admin Server

  • admin: configure maintenance tasks via admin.toml by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9926
  • admin: native at-a-glance trend sparklines on the dashboard by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9957
  • admin: fold dashboard sparklines into the existing cards (de-dup) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9964
  • admin: add connected Mount Clients page and dashboard section by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9968

• Volume Server

  • feat(storage): sweep leftover empty EC .dat stubs on volume server startup by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9927
  • fix(storage): never let an empty .dat delete healthy distributed EC shards by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9930
  • fix(ec): crash-safe ecx-journal fold and shard rebuild (fsync before publish, no short-read-as-success) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9938
  • fix(ec): never delete recoverable EC shards on startup/reconcile (the non-empty-.dat sibling of the stub bug) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9941
  • [volume] preserve volume data mtime across tier moves by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9947
  • fix(replication): verify-before-destroy in VolumeCopy, check.disk, and over-replication trim by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9943
  • fix(vacuum): crash-safe compaction commit with a durable .cpc marker, fsync-before-rename, and a reload fence by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9944
  • fix(tiering): never delete a shared remote object while replicas still reference it by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9942
  • fix(ec): make ec.decode write-path crash-safe and atomic by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9949
  • fix(ec): persist EC source readonly mark and skip writable replicas on orphan cleanup by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9950
  • [volume] preserve compression state during replication by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9946
  • fix(ec): don't fabricate a stub .vif when mounting an EC volume by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9951
  • fix(ec): group orphan-source completeness by encode generation (topology encode_ts_ns) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9952
  • fix(ec): fence stale-worker EC shard cleanup by encode generation by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9953
  • fix(storage): delete/unmount every copy of a duplicate volume id by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9954
  • fix(ec): remove shared EC index only when no shard remains node-wide by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9955
  • fix(ec): recover EC shards with the volume's own ratio, not the build default by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9958
  • refactor(ec_balance): make the balance planner per-volume ratio-capable by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9960

• Metrics

  • metrics: overhaul Grafana dashboard for full metric coverage by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9956
  • metrics: guard time()-based dashboard panels against unset gauges by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9965
  • metrics: add per-bucket S3 panels and volume slot utilization to dashboard by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9969
  • filer: keep metadata-subscription send gauge fresh on idle heartbeat by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9966

• Helm Charts

  • [helm]: configure JWT expiration by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9940

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.33...4.34

• Fix for vulnerability where callers could see content meant for other callers if the origin returns an HTTP 1xx response #2137

See the release notes at https://prestodb.io/docs/current/release/release-0.298.html

• fix(backup): reject incremental backups whose read_ts has regressed by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9707
• chore(deps): Upgrade go 1.26.4; add a openvex for false positive CVE report by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9735
• chore: remove unused buildvars.ComposeBuildDir Var by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9704
• chore(ci): disable scheduled jepsen test runs by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9729
• docs(changelog): backfill v25.3.1-v25.3.4 and v24.1.6-v24.1.9 entries by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9705

Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.4...v25.3.5

• fix(backup): reject incremental backups whose read_ts has regressed by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9707
• chore(deps): Upgrade go 1.26.4; add a openvex for false positive CVE report by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9735
• chore: remove unused buildvars.ComposeBuildDir Var by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9704
• chore(ci): disable scheduled jepsen test runs by @matthewmcneely in https://github.com/dgraph-io/dgraph/pull/9729
• docs(changelog): backfill v25.3.1-v25.3.4 and v24.1.6-v24.1.9 entries by @mlwelles in https://github.com/dgraph-io/dgraph/pull/9705

Full Changelog: https://github.com/dgraph-io/dgraph/compare/v25.3.4...v25.3.5

• Enable body filter codec encoding customization via CodecCustomizer #4151
• Adds StripContextPath filter #4089

• RewriteFunction nullability in Spring Boot 4 #4061
• AbstractProxyExchange takes into account MediaType parameters #3948

• docs(server-webflux): updating gateway actuator documentation as per … #4163
• Fix typos in DiscoveryLocatorProperties documentation, make terms consistent, remove already implemented TODO #4123
• Spring Cloud Gateway docs contain wrong configuration properties #4103
• Spring Cloud Docs has wrong references in "How It Works" section for Server MVC #4098
• [doc] Fix broken link to GatewayFilter #4073
• Documentation mismatch: Route configuration path incorrect for Spring Cloud Gateway Server WebFlux #4047
• Docs: Fix broken GitHub links in Server WebMvc "How It Works" docs #3928
• CONTRIBUTING references CLA, but this appears to have been replaced with DCO #3884
• Document TLS/SSL Configuration for Spring Cloud MVC Gateway #3654
• Better docs about naming convention in PredicateDefinition: Path receives pattern key and it works? #3523

Thank you to all the contributors who worked on this release:

@03hjain, @AahilRafiq, @RenanMarques, @Yuri-Costa09, @dependabot[bot], @garvit-joshi, @jerolba, @qnnn, and @ryanjbaxter

• MVC ProxyExchange does not provide observability of URI template #3458
• Add support for empty path prefixes #3201

• docs: add ReadBody route predicate factory documentation #4138

Thank you to all the contributors who worked on this release:

@dependabot[bot], @mhalbritter, @pachat-pacifique, and @ryanjbaxter

• S3 API

  • fix(s3api): accept HTTP-date conditionals by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9863
  • fix(s3api): drop ancestor directory markers from prefixed ListObjectVersions by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9885
  • fix(s3api): clear stale object lock years by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9890
  • fix(s3api): normalize checksum trailer header names by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9905
  • fix(s3api): reject empty v4 signed header names by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9910

• Remote Cache

  • fix(remote): correct content and permissions when syncing/caching remote objects by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9879

• Filer Sync and Backup

  • Don't mangle filer paths with the OS separator on Windows by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9878
  • fix(filer.sync): guard batched events against nil EventNotification by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9877
  • fix(filer.backup): skip replay events whose source chunk was superseded or deleted by @kisow in https://github.com/seaweedfs/seaweedfs/pull/9886
  • fix(filer.sync): scope filesystem key sanitization to the local sink by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9894
  • fix(filer.sync): replicate a rename as an atomic move, not a no-op update by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9895

• Admin Server and Worker

  • feat(admin): export full cluster volume list as JSON by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9876
  • admin: pre-gzip embedded static assets, add cache headers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9918

• Misc

  • fix(util): return full uint64 randomness by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9864
  • fix(http): accept no content delete responses by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9893
  • ci: route Docker Hub pulls through a mirror to cut registry timeouts by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9904
  • ci(s3tables): stop Lakekeeper flaking on Docker Hub pull timeouts by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9920

• Rust Volume Server

  • fix(seaweed-volume): stop EC shard deletion from phantom .dat on restart by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9874

• Shell

  • fix(shell): move files into existing destination directories by @7y-9 in https://github.com/seaweedfs/seaweedfs/pull/9887
  • Make shell command ec.scrub return shard details upon scrub failures in LOCAL mode. by @plisandro in https://github.com/seaweedfs/seaweedfs/pull/9913
  • volume.scrub and ec.scrub shell commands: make the display of scrub details optional. by @plisandro in https://github.com/seaweedfs/seaweedfs/pull/9911

• Filer

  • fix(mongodb): merge URI auth fields with username/password override by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9889
  • feat(filer): object size distribution metric and dashboard panels by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9902
  • Fix filer metadata-replay OOM under mount reconnect storms by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9901
  • Share decoded metadata-log entries across subscriber replays by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9903
  • Share metadata-log replays per chunk instead of per file by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9906
  • Bound the metadata-log flush queue by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9907
  • add elastic8 filer store for Elasticsearch 8 by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9916
  • log_buffer: stop dumping the whole log entry on callback errors by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9919
  • Cut per-subscriber replay decode and widen replay concurrency by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9917

• Volume Server

  • batch drain delta heartbeat messages by @giftz in https://github.com/seaweedfs/seaweedfs/pull/9914
  • fix(ec): don't mix EC shards from different encode runs by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/9880

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.32...4.33

• feat(table-catalog): add object-backed catalog store by @marshawcoco in https://github.com/rustfs/rustfs/pull/3206
• feat(scanner): add partial scan resume hints by @marshawcoco in https://github.com/rustfs/rustfs/pull/3207
• chore: add missing-shard first-scene diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/3213
• perf(erasure): remove UUID from clone + increase encode inflight budget by @overtrue in https://github.com/rustfs/rustfs/pull/3212
• chore: add delete-objects lock batch diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/3218
• refactor(ecstore): migrate mutable globals into ECStore struct fields by @overtrue in https://github.com/rustfs/rustfs/pull/3214
• fix(signer): address post-merge review comments by @overtrue in https://github.com/rustfs/rustfs/pull/3216
• refactor(ecstore): migrate config globals into ECStore struct fields by @overtrue in https://github.com/rustfs/rustfs/pull/3219
• fix(server): normalize empty request content length by @GatewayJ in https://github.com/rustfs/rustfs/pull/3215
• feat(table-catalog): add REST catalog route surface by @marshawcoco in https://github.com/rustfs/rustfs/pull/3211
• feat(scanner): add versioned scan checkpoints by @marshawcoco in https://github.com/rustfs/rustfs/pull/3220
• fix(ecstore): skip hidden metadata in walk limit by @overtrue in https://github.com/rustfs/rustfs/pull/3224
• refactor(ecstore): add accessor methods for service globals by @overtrue in https://github.com/rustfs/rustfs/pull/3226
• fix(bucket-encryption): populate default KMS key for SSE-KMS without key ID by @overtrue in https://github.com/rustfs/rustfs/pull/3225
• fix(allocator): restore validated jemalloc target gating by @houseme in https://github.com/rustfs/rustfs/pull/3236
• feat(table-catalog): wire REST catalog MVP handlers by @marshawcoco in https://github.com/rustfs/rustfs/pull/3227
• feat(scanner): expose checkpoint and source work status by @marshawcoco in https://github.com/rustfs/rustfs/pull/3230
• feat(scanner): track scan cycle source work by @marshawcoco in https://github.com/rustfs/rustfs/pull/3240
• refactor(ecstore): add server configuration accessors by @overtrue in https://github.com/rustfs/rustfs/pull/3238
• feat(table-catalog): wire REST commit handler by @marshawcoco in https://github.com/rustfs/rustfs/pull/3239
• fix(admin): format policy JSON and improve error messages in service … by @GatewayJ in https://github.com/rustfs/rustfs/pull/3242
• fix: clean old data dirs on object overwrite by @GatewayJ in https://github.com/rustfs/rustfs/pull/3244
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/3250
• docs(docker): clarify bind mount permission setup by @cxymds in https://github.com/rustfs/rustfs/pull/3248
• fix(docker): align TLS compose healthchecks by @cxymds in https://github.com/rustfs/rustfs/pull/3246
• fix(replication): normalize local site endpoint port by @cxymds in https://github.com/rustfs/rustfs/pull/3249
• fix(ecstore): invalidate wiped disk id cache by @cxymds in https://github.com/rustfs/rustfs/pull/3251
• docs: add architecture migration guardrails by @overtrue in https://github.com/rustfs/rustfs/pull/3253
• feat(scanner): expose scan partial source status by @marshawcoco in https://github.com/rustfs/rustfs/pull/3247
• test: bypass proxy for embedded readiness probe by @overtrue in https://github.com/rustfs/rustfs/pull/3254
• fix(tier): recover by @mbartsch in https://github.com/rustfs/rustfs/pull/3182
• ci: stabilize architecture layer guard by @overtrue in https://github.com/rustfs/rustfs/pull/3255
• docs: add startup timeline baseline by @overtrue in https://github.com/rustfs/rustfs/pull/3256
• docs: add admin route action snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/3258
• docs: inventory ecstore config consumers by @overtrue in https://github.com/rustfs/rustfs/pull/3259
• feat(table-catalog): tighten REST load/register compatibility by @marshawcoco in https://github.com/rustfs/rustfs/pull/3245
• docs: complete config helper inventory by @overtrue in https://github.com/rustfs/rustfs/pull/3261
• docs: update security advisory lessons by @overtrue in https://github.com/rustfs/rustfs/pull/3262
• fix(ci): install ripgrep for script checks by @overtrue in https://github.com/rustfs/rustfs/pull/3260
• fix(replication): repair site replication setup by @reatang in https://github.com/rustfs/rustfs/pull/3252
• fix(ecstore): add disk validation diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/3265
• fix(lifecycle): harden scanner ILM expiry accounting by @marshawcoco in https://github.com/rustfs/rustfs/pull/3257
• ci: add architecture migration rule checks by @overtrue in https://github.com/rustfs/rustfs/pull/3264
• test: add admin route matrix guard by @overtrue in https://github.com/rustfs/rustfs/pull/3268
• feat: add security governance contract types by @overtrue in https://github.com/rustfs/rustfs/pull/3270
• feat(table-catalog): add metadata maintenance cleanup by @marshawcoco in https://github.com/rustfs/rustfs/pull/3266
• fix(ecstore): gate rustix fs diagnostics on windows by @houseme in https://github.com/rustfs/rustfs/pull/3267
• fix: return 503 on lock contention instead of 500 by @overtrue in https://github.com/rustfs/rustfs/pull/3274
• feat: add security governance policy contracts by @overtrue in https://github.com/rustfs/rustfs/pull/3271
• feat(table-catalog): add recovery diagnostics by @marshawcoco in https://github.com/rustfs/rustfs/pull/3275
• fix(scanner): publish partial usage for compacted scans by @marshawcoco in https://github.com/rustfs/rustfs/pull/3277
• fix(ecstore): avoid offline disks on admin timeout by @cxymds in https://github.com/rustfs/rustfs/pull/3263
• perf(ecstore): improve erasure write diagnostics and single-block performance by @houseme in https://github.com/rustfs/rustfs/pull/3280
• feat(helm): add option to disable log PVCs and mounts by @rudxde in https://github.com/rustfs/rustfs/pull/3189
• fix(ecstore): harden rebalance data movement by @cxymds in https://github.com/rustfs/rustfs/pull/3234
• feat(rio): rio_v2 is compatible with minio for storing data. by @reatang in https://github.com/rustfs/rustfs/pull/3115
• feat(replication): expose scanner repair outcomes by @marshawcoco in https://github.com/rustfs/rustfs/pull/3278
• fix(scanner): ignore missing rebalance metadata by @cxymds in https://github.com/rustfs/rustfs/pull/3282
• feat(table-catalog): refine table catalog permissions by @marshawcoco in https://github.com/rustfs/rustfs/pull/3283
• refactor(zip): simplify archive extraction path by @houseme in https://github.com/rustfs/rustfs/pull/3290
• build: upgrade Rust baseline to 1.96.0 by @houseme in https://github.com/rustfs/rustfs/pull/3291
• feat: add admin route policy inventory by @overtrue in https://github.com/rustfs/rustfs/pull/3286
• feat(table-catalog): support standard REST create commit by @marshawcoco in https://github.com/rustfs/rustfs/pull/3287
• feat(heal): expose scanner heal admission outcomes by @marshawcoco in https://github.com/rustfs/rustfs/pull/3292
• feat: add KMS action taxonomy by @overtrue in https://github.com/rustfs/rustfs/pull/3294
• feat(table-catalog): internalize catalog backing paths by @marshawcoco in https://github.com/rustfs/rustfs/pull/3295
• feat(kms): migrate KMS handlers to dedicated actions by @overtrue in https://github.com/rustfs/rustfs/pull/3298
• fix(config): accept Kafka SASL keys in legacy admin by @cxymds in https://github.com/rustfs/rustfs/pull/3300
• feat(heal): add scanner-aware bitrot controls by @marshawcoco in https://github.com/rustfs/rustfs/pull/3297
• Refactor(CLI): avoid unnecessary unreachable! macro in CLI parsing by @Tirka in https://github.com/rustfs/rustfs/pull/3288
• feat(helm): add priorityClassName attribute by @jperville in https://github.com/rustfs/rustfs/pull/3301
• feat(table-catalog): add metadata maintenance control plane by @marshawcoco in https://github.com/rustfs/rustfs/pull/3302
• feat(kms): add KMS config redaction safeguards by @overtrue in https://github.com/rustfs/rustfs/pull/3303
• docs: inventory background services by @overtrue in https://github.com/rustfs/rustfs/pull/3311
• test: guard table catalog ingress unknown fields by @overtrue in https://github.com/rustfs/rustfs/pull/3308
• feat(storage-api): add contract crate by @overtrue in https://github.com/rustfs/rustfs/pull/3310
• docs: define background controller contract by @overtrue in https://github.com/rustfs/rustfs/pull/3312
• feat(storage-api): add error code contract by @overtrue in https://github.com/rustfs/rustfs/pull/3313
• security: redact IAM and target debug secrets by @overtrue in https://github.com/rustfs/rustfs/pull/3306
• feat(table-catalog): add credential response boundary by @marshawcoco in https://github.com/rustfs/rustfs/pull/3305
• docs: decide config model boundary by @overtrue in https://github.com/rustfs/rustfs/pull/3307
• feat(scanner): add adaptive pacing controls by @marshawcoco in https://github.com/rustfs/rustfs/pull/3315
• feat(table-catalog): add REST catalog alias by @marshawcoco in https://github.com/rustfs/rustfs/pull/3316
• docs: inventory KMS development defaults by @overtrue in https://github.com/rustfs/rustfs/pull/3304
• chore(release): prepare 1.0.0-beta.8 by @houseme in https://github.com/rustfs/rustfs/pull/3317
• build(ci): update macOS runner and bump regex/uuid by @houseme in https://github.com/rustfs/rustfs/pull/3318
• feat(storage-api): add bucket DTO contract by @overtrue in https://github.com/rustfs/rustfs/pull/3314
• feat(scanner): expose pacing pressure status by @marshawcoco in https://github.com/rustfs/rustfs/pull/3319
• feat(table-catalog): add product API surface by @marshawcoco in https://github.com/rustfs/rustfs/pull/3320

• @mbartsch made their first contribution in https://github.com/rustfs/rustfs/pull/3182
• @Tirka made their first contribution in https://github.com/rustfs/rustfs/pull/3288
• @jperville made their first contribution in https://github.com/rustfs/rustfs/pull/3301

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.7...1.0.0-beta.8