Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42575727358 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

https://fluentbit.io/announcements/v5.2.0/

• workflows: bump github/codeql-action/upload-sarif from 4.38.3 to 4.39.0 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12607
• workflows: bump reviewdog/action-actionlint from 1.80.1 to 1.80.4 by @dependabot[bot] in https://github.com/fluent/fluent-bit/pull/12619
• motd: update banner to v5.2 by @edsiper in https://github.com/fluent/fluent-bit/pull/12627
• release: prepare master for v5.2.0 development by @edsiper in https://github.com/fluent/fluent-bit/pull/12625
• workflows: prepare release routing for v5.2 by @edsiper in https://github.com/fluent/fluent-bit/pull/12626
• workflows: verify and set release PR base branches by @edsiper in https://github.com/fluent/fluent-bit/pull/12629
• lib: upgrade bundled jemalloc to 5.4.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12493
• lib: upgrade LuaJIT and fix CMake wrapper compatibility by @edsiper in https://github.com/fluent/fluent-bit/pull/12503
• lib: fix jemalloc header detection on older compilers by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12634
• lib: cfl: upgrade to v1.1.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12630
• lib: ctraces: upgrade to v0.8.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12637
• lib: cmetrics: upgrade to v2.3.1 by @edsiper in https://github.com/fluent/fluent-bit/pull/12641
• in_tail: mitigate access violation on windows by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12642
• processor_fts: add Fluent Typed Scripting processor by @edsiper in https://github.com/fluent/fluent-bit/pull/12589
• wasm: add experimental browser runtime and SDK by @edsiper in https://github.com/fluent/fluent-bit/pull/12429
• upstream: network: mitigate tcp dns timeouts by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12644
• wasm: enable Fluent Typed Scripting in browser artifacts by @edsiper in https://github.com/fluent/fluent-bit/pull/12645
• tests: integration: cover processor worker isolation after FTS by @edsiper in https://github.com/fluent/fluent-bit/pull/12511
• processor_sql: preserve resource and scope groups when filtering logs by @edsiper in https://github.com/fluent/fluent-bit/pull/12506
• processor: fuse compatible body content modifier chains by @edsiper in https://github.com/fluent/fluent-bit/pull/12505
• lib: Import fluent/onigmo change by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12669
• workflows: enable unit tests for 5.1 pull requests by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12674
• in_opentelemetry: process eligible logs in HTTP workers by @edsiper in https://github.com/fluent/fluent-bit/pull/12673
• lib: chunkio: upgrade to v1.5.5 by @edsiper in https://github.com/fluent/fluent-bit/pull/12699
• lib: yyjson: upgrade to v0.13.0 by @edsiper in https://github.com/fluent/fluent-bit/pull/12698
• lib: restore jemalloc 5.3.0 memory baseline by @edsiper in https://github.com/fluent/fluent-bit/pull/12701
• ci: fix macOS shutdown, test fixtures, and browser teardown by @edsiper in https://github.com/fluent/fluent-bit/pull/12702
• build: parallelize library builds and reuse core objects by @edsiper in https://github.com/fluent/fluent-bit/pull/12706
• processor_journald_otel: handle journald as otel processed logs by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12387
• in_forward: Added a small protection to secure Forward with a preflight scanner by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12686
• tests: parallelize six runtime suites by @edsiper in https://github.com/fluent/fluent-bit/pull/12707
• build: libyaml: find libyaml without pkg-config by @edsiper in https://github.com/fluent/fluent-bit/pull/12708
• build: upgrade SQLite to 3.54.1 and parallelize compilation by @edsiper in https://github.com/fluent/fluent-bit/pull/12716
• build: correct generated dependency include paths by @edsiper in https://github.com/fluent/fluent-bit/pull/12719
• wasm: filter_wasm: pack value len pair for returned format of wasm by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12518
• out_opentelemetry: respect dropped count metadata boundaries by @edsiper in https://github.com/fluent/fluent-bit/pull/12507
• http_server: suppress HEAD bodies and preserve HTTP/2 trailers by @edsiper in https://github.com/fluent/fluent-bit/pull/12727
• processor_fts: add reusable typed policy packs by @edsiper in https://github.com/fluent/fluent-bit/pull/12731
• processor_fts: add JSON field decoding and log body unpacking by @edsiper in https://github.com/fluent/fluent-bit/pull/12732
• out_forward: preserve log groups with dynamic tags by @edsiper in https://github.com/fluent/fluent-bit/pull/12728
• out_vivo_exporter: fix telemetry loss and add compressed OTLP JSON by @edsiper in https://github.com/fluent/fluent-bit/pull/12418
• processor_fts: add LuaLS definitions and JSON API export by @edsiper in https://github.com/fluent/fluent-bit/pull/12733
• bin: generate YAML configuration from CLI options by @edsiper in https://github.com/fluent/fluent-bit/pull/12353
• wasm: add local pipeline drain and reduce browser run latency by @edsiper in https://github.com/fluent/fluent-bit/pull/12730
• workflows: publish validated experimental browser SDK releases by @edsiper in https://github.com/fluent/fluent-bit/pull/12717
• fix(in_statsd): add missing break in STATSD_TYPE_TIMER case by @AruneshDwivedi in https://github.com/fluent/fluent-bit/pull/12494
• out_stackdriver: mitigate oob on stack driver by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12743
• out_chronicle: fix chronicle initialization leaks by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12736
• http_server: keep cached metrics when a push overlaps a read by @locker95 in https://github.com/fluent/fluent-bit/pull/12684
• aws: Mitigate the AWS credential URI bypass by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12620
• in_syslog: mitigate potential overflow on payloads by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12584
• tests: fix HTTP JSON stream runtime assertions by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12582
• packaging: distros: almalinux: rockeylinux: centos: update requested packages by @sxd in https://github.com/fluent/fluent-bit/pull/12711
• oauth2_jwt: in_http: in_opentelemetry: Implement configurable OAuth2 jwks buffer size and its limit by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12694
• regex: mitigate regex unlimited stacks by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12734
• filter_rewrite_tag: fix emitter lifecycle and record preservation by @edsiper in https://github.com/fluent/fluent-bit/pull/12668
• out_file: Mitigated the File output cardinality gap by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12676
• out_file: out_nats: Sanitize malicious tags by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12587
• upstream: out_s3: out_azure_blob: out_gcs: out_stackdriver: mitigate unexpectedly using plaintext payload on https scheme by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12622
• in_forward: in_syslog: in_unix_socket: harden unix input sockets by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12703
• socket: config: input: engine: Fix channel descriptor initialization and cleanup for descriptors by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12720
• http_client: out_opentelemetry: mitigate unbounded http ng requests by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12665
• in_prometheus_textfile: append multiple contexts of prometheus texts payloads by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12576
• out_kafka: avro: revise kafka schema validation by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12738
• http_server: mitigate fragmented HTTP/1 header reparsing with configurable limits by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12718
• in_node_exporter_metrics: add scrape_on_start option by @stondo in https://github.com/fluent/fluent-bit/pull/12638
• tls: propagate verify_hostname settings on tls context by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12635
• tests: integeration: config_format: address newer python failures and windows failures on integration tests by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12677
• utils: plugins: Implemented the path-shadowing mitigation for shadowed relative files by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12682
• output: engine: output_throttle: Implement throttle operations for output plugins by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12393
• output: mitigate heavy loaded case by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12484
• http_server: in_opentelemetry: plug decompress explosion possibilities by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12568
• filter_rewrite_tag: add opt-in input processor batching and supporting fixes by @edsiper in https://github.com/fluent/fluent-bit/pull/12697
• http_server: mitigate automatic inflation bypass by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12581
• out_azure_blob, out_azure_kusto: fix buffered memory safety by @edsiper in https://github.com/fluent/fluent-bit/pull/12748
• in_opentelemetry: bound OTLP decoding allocations by @cosmo0920 in https://github.com/fluent/fluent-bit/pull/12705
• workflows: allow package reads in master integration tests by @edsiper in https://github.com/fluent/fluent-bit/pull/12749
• pipe, engine, processor_fts, tests: fix 5.2 release blockers by @edsiper in https://github.com/fluent/fluent-bit/pull/12750
• oauth2_jwt: enforce JWKS connection and response deadlines by @edsiper in https://github.com/fluent/fluent-bit/pull/12752
• filter_record_modifier: drop batches when all fields are removed by @edsiper in https://github.com/fluent/fluent-bit/pull/12753
• filter_modify: reject rules with excess arguments by @edsiper in https://github.com/fluent/fluent-bit/pull/12754
• documentation: fts: fix timestamp missing policy example by @edsiper in https://github.com/fluent/fluent-bit/pull/12756
• filter_lua: isolate protected callback errors to the failing record by @edsiper in https://github.com/fluent/fluent-bit/pull/12755
• input: fix collector crashes and 5.2 release regressions by @edsiper in https://github.com/fluent/fluent-bit/pull/12758

• @AruneshDwivedi made their first contribution in https://github.com/fluent/fluent-bit/pull/12494
• @locker95 made their first contribution in https://github.com/fluent/fluent-bit/pull/12684

Full Changelog: https://github.com/fluent/fluent-bit/compare/v5.1.5...v5.2.0

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42546763161 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

• fix(s3tables,s3vectors): bind DeleteNamespace and the vector bucket cleanup to the authorized records by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12331
• filer: allow renaming into a sibling that shares the name prefix by @fazpu in https://github.com/seaweedfs/seaweedfs/pull/12337
• compression: compress JSON uploads, and match file types by extension by @patwhite in https://github.com/seaweedfs/seaweedfs/pull/12339
• filer: reuse IsEqualOrUnder for the rename subdirectory check by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12338
• s3vectors: support TagResource, UntagResource and ListTagsForResource by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12335
• volume: replicas keep the primary's compression and metadata by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12350
• admin: manage S3 vector buckets by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12334
• admin: configurable file browser upload size limit by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12348
• build(deps): bump go.etcd.io/etcd/client/pkg/v3 from 3.7.1 to 3.7.3 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12344
• build(deps): bump actions/setup-python from 5 to 7 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12345
• build(deps): bump google.golang.org/api from 0.297.0 to 0.310.0 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12343
• build(deps): bump github.com/aws/aws-sdk-go-v2/service/sts from 1.51.1 to 1.51.6 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12346
• build(deps): bump github.com/peterh/liner from 1.2.2 to 1.2.3 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12341
• build(deps): bump actions/setup-go from 5 to 7 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12347
• s3vectors: support tag conditions in vector bucket policies by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12351
• build(deps): bump cloud.google.com/go/kms from 1.35.0 to 1.36.1 by @dependabot[bot] in https://github.com/seaweedfs/seaweedfs/pull/12342
• operation: pad the marginal gzip test past Go 1.26's stored block by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12352
• filer: say jwt.filer_signing.key gates only the IAM gRPC service by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12353
• fix(s3api): reject an invalid storage class before uploading the body by @omninguyen in https://github.com/seaweedfs/seaweedfs/pull/12354
• s3api: known-answer fixture generator for SSE-S3 and filer-encrypted chunks by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12355
• test/s3vectors: a hardened cluster with TLS volume servers, read JWTs and encrypted chunks by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12356
• admin: summarize the EC delete_count accounting warning per refresh by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12359
• admin: scope plugin job and activity fetches to the selected job type by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12360
• fix(fsck): inspect references to deleted volumes by @Neo1228 in https://github.com/seaweedfs/seaweedfs/pull/12357
• shell: keep fs.mergeVolumes and fs.distributeChunks from reverting entries written while they run by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12362
• fix(storage): update deletion metrics in SortedFileNeedleMap.Delete (#12363) by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12364
• rust volume: count sorted-map files and deletes the way Go does by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12365
• filer.sync: skip a rewritten source version regardless of its mtime order by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12366
• filer.sync: stop chunk retries with the same supersession check the skip uses by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12367
• rust volume: exit cleanly on SIGTERM, and make the harness notice when a server does not by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12370
• rust volume: run each gRPC TLS handshake on its own task by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12372
• filer UI, admin: upload a folder by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12371
• weed-vector: gRPC TLS to the masters and for the gateway by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12368
• admin: fail an in-flight detection when its worker disconnects by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12376
• weed-vector: check master certificates against the server allowlists, read -config_dir by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12374
• topology: refresh EC file and delete counts from heartbeats by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12378
• admin: let a buffered detection completion win over the stream closing by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12379
• test/s3vectors: wait for the S3 port before handing out the cluster by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12383
• weed-worker: find jwt.filer_signing.key where the Go worker does, and let the chart deliver it by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12373
• volume: a read plan waits for a vacuum commit instead of answering 404 by @pingqiu in https://github.com/seaweedfs/seaweedfs/pull/12375
• s3api: per-bucket Block Public Access (BlockPublicAcls, IgnorePublicAcls) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12381
• remote.uncache, remote.meta.sync, remote.cache: keep local writes that land while they run by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12382
• admin: count executor slots per job type and stop lanes waiting on capacity they cannot free by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12384
• admin: credit an unitemized slot to a pending job only after a later heartbeat by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12385
• master: tell a warming-up Assign or LookupVolume client when warm-up ends by @pingqiu in https://github.com/seaweedfs/seaweedfs/pull/12386
• filer: clear a dead test replica's reachability record before closing it by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12387
• seaweed-vector: record seaweed-worker-core's toml dependency in Cargo.lock by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12388
• s3: keep service account keys when a pushed identity replaces its parent by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12394
• plugin worker: stop forwarding the stream's admin token to job RPCs by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12391
• fix(s3tables): validate policy conditions and fail safe on unusable ones by @omninguyen in https://github.com/seaweedfs/seaweedfs/pull/12389
• volume: count EC intervals served by reconstruction by @pingqiu in https://github.com/seaweedfs/seaweedfs/pull/12392
• grafana: chart EC reconstruction and other unplotted metrics by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12406
• ec: rebuild a needle when other shards are corrupt over its range by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12401
• fix(s3): accept fresh admin tokens when context carries stale authorization (#12390) by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12397
• s3: reject POST Object header fields with control characters by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12400
• s3: expose ReadAcp/WriteAcp in shell and admin UI, log ACL-upload denials by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12396
• volume: report EC file and delete counts in incremental shard messages by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12404
• admin/plugin: fail a dispatch its restarted worker no longer lists by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12402
• admin: regenerate the plugin pages' templ output from weed/admin by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12405
• seaweed-vector: dev plan for ANN search over S3 Vectors indexes by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12408
• seaweed-vector: build a vector index from the CLI and measure it in the perf suite (ANN phase 0) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12411
• seaweed-vector: probe policy for indexed queries (ANN phase 1) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12412
• weed-worker: build the vector index of S3 Vectors tables past a row threshold (ANN phase 2) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12413
• weed-worker: keep a vector index covering as its table grows (ANN phase 3) by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12414
• s3vectors test: skip a query lease tag released between list and HEAD by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12409
• seaweed-volume: run the preallocating max-volume test on a fake disk by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12423
• seaweed-volume: stage optional EC sidecar copies before replacing by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12403
• ec.rebuild: repair shards that fail a checksum scrub in complete volumes by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12410
• volume: redial a master that just dropped a registered stream after a second by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12420
• volume: bound each FetchAndWriteNeedle replica write by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12415
• s3api: answer success when a failed completion already committed by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12416
• volume: bound each replica forward so a silent peer cannot hold a write by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12417
• filer.remote.sync: stop a touched file from being restamped forever by @impuls42 in https://github.com/seaweedfs/seaweedfs/pull/12419
• weed/shell: resolve collection from topology when ec.decode is given only volumeId by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12424
• admin: make the cluster lock's fairness window configurable by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12426
• weed/command: skip remote bucket delete when bucket is unmounted (#12418) by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12425
• weed/server: verify data shards against bitrot sidecar before ec decode (#12422) by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12427
• filer: hide write controls in the UI on the read-only port by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12429
• admin: re-send the master vacuum disable every poll so it survives leader changes by @kpei in https://github.com/seaweedfs/seaweedfs/pull/12430
• s3api: apply copy bucket-default SSE after the ACL re-auth by @stefan-wisbric in https://github.com/seaweedfs/seaweedfs/pull/12436
• s3: commit the delete marker in the owner's finalize transaction by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12432
• s3: require their own actions to change a bucket's CORS or versioning by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12433
• s3api: speed up recursive listing of branched directory trees by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12438
• master: export Hashicorp raft metrics through the go-metrics global raft uses by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12448
• fix(s3tables): route REST RenameTable and refuse unrouted S3 Tables requests by @omninguyen in https://github.com/seaweedfs/seaweedfs/pull/12446
• volume: a delete cancels writes of its needle still in flight by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12445
• filer.remote.sync: bounded filer lookups, one chunk cache per process by @jsas in https://github.com/seaweedfs/seaweedfs/pull/12441
• filer.remote.sync: bound the stamp and offset writes, startup offset fixes, stamp a copy by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12447
• volume: stop serving EC reads from quarantined shards by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12450
• s3 lifecycle: walker deletes carry the listed identity and must target the latest version by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12452
• filer: release metadata log chunks a failed append leaves unreferenced by @MorezMartin in https://github.com/seaweedfs/seaweedfs/pull/12455
• s3api: mint a versioned PUT's id at commit, after the lock wait and the upload by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12454
• filer: no lazy remote fetch inside a store transaction by @jsas in https://github.com/seaweedfs/seaweedfs/pull/12439
• filer: a full remote-deletion tombstone table keeps the lazy fetch off by @jsas in https://github.com/seaweedfs/seaweedfs/pull/12440
• filer.meta.backup: stream from the start of an unfinished walk by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12458
• filer.remote.gateway: keep the remote object while a version under a delete marker is locked by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12459
• filer: fold small chunks into manifests 256 at a time by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12462
• master: stop the resumed single-master leader from checking quorum every 1 ms by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12463
• grafana: chart the remote-deletion tombstone gauges by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12444
• mount: keep retrying writeback chunk uploads through a volume outage by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12465
• admin: show disk usage on the dashboard instead of the data size by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12466
• S3 Vectors: the gateway resolves the table it sends to weed-vector by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12468
• S3 Vectors: weed-vector reads tables from the filers and volume servers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12469
• s3tables, iceberg: one catalog record per table location by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12473
• filer.remote.sync: skip pre-mount mount-table versions, decide the unmount before admitting later events by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12472
• S3 Vectors: weed-vector, weed-worker and the CLI write tables to the filers and volume servers by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12470
• volume: check a needle's CRC the first time a range of it is read by @jrcichra in https://github.com/seaweedfs/seaweedfs/pull/12467
• fix(iceberg): keep a losing table create from deleting the winner's metadata by @omninguyen in https://github.com/seaweedfs/seaweedfs/pull/12474
• ec_balance: drain a server holding far more shards than its siblings by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12477
• filer.remote.sync: -allMounts writes back every mounted directory from one process by @jatorre in https://github.com/seaweedfs/seaweedfs/pull/12476
• ec_balance: make the per-rack cap on global moves a worker setting by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12478
• s3tables, iceberg: give tables created without a location their own directory by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12475
• Retry transient failures in star history generation by @chrislusf with @Copilot in https://github.com/seaweedfs/seaweedfs/pull/12479
• volume.fsck: batch and deduplicate filer entry deletions by @Tyagiquamar in https://github.com/seaweedfs/seaweedfs/pull/12480
• s3: don't report a version delete as done when the filer lookup failed by @mansur-akhmadi in https://github.com/seaweedfs/seaweedfs/pull/12482
• S3 Vectors: refuse an SSE-S3 index when the engine has no key for it by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12484
• S3 Vectors: weed-vector drops the ignored --namespace and --filer-signing-key by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12485
• S3 Vectors: help text for weed-vector, weed-vector-cli and weed-worker by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12486
• Volume encryption follows the filer: weed s3, weed-vector, weed-worker, weed-vector-cli by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12487
• helm: say what the Lance worker needs from security.toml by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12489
• shell: include collection names when topology statistics are unavailable by @pingqiu in https://github.com/seaweedfs/seaweedfs/pull/12490
• shell: test collection.list keeps live statistics next to offline names by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12492
• master: keep a re-registered filer in the lock ring when its old stream ends by @chrislusf in https://github.com/seaweedfs/seaweedfs/pull/12494

• @fazpu made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/12337
• @Neo1228 made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/12357
• @kpei made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/12430
• @stefan-wisbric made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/12436
• @mansur-akhmadi made their first contribution in https://github.com/seaweedfs/seaweedfs/pull/12482

Full Changelog: https://github.com/seaweedfs/seaweedfs/compare/4.52...4.53

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42444933244 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42431835660 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42400769149 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42396466902 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42376091253 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.

Experimental browser SDK from master. Optimized and ASan browser validation passed. Validation: https://github.com/fluent/fluent-bit/actions/runs/42338462392 Download the archive, verify its checksum, and deploy the complete SDK on your application origin. HTTPS and COOP/COEP are required. This is not a production support promise.