• Revert the Speed up the search speed a bit more by @Kerollmops introduced in https://github.com/meilisearch/meilisearch/pull/6542

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.52.2...v1.52.3

• Revert the /tasks/stream and /batches/stream SSE routes by @Kerollmops introduced in https://github.com/meilisearch/meilisearch/pull/6533

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.52.1...v1.52.2

• Make the health route checks blocking by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6583
• Revert some search progress traces by @Kerollmops in https://github.com/meilisearch/meilisearch/pull/6584

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.52.0...v1.52.1

• Sharding for foreign filters by @ManyTheFish in https://github.com/meilisearch/meilisearch/pull/6517

  • The foreign filter now supports sharding by retrieving the documents through the network when evaluating the foreign filters and hydrating the documents.

  • The limit of documents that a foreign filter can retrieve has been increased from 100 to 1000.

• Adds indexSize and usedIndexSize returned by GET /indexes/{index_uid}/stats and in GET /stats by @tpayet in https://github.com/meilisearch/meilisearch/pull/6563

• Fix code security issues in GitHub Actions workflows by @curquiza in https://github.com/meilisearch/meilisearch/pull/6565
• Bump quinn-proto from 0.11.14 to 0.11.16 by @dependabot[bot] in https://github.com/meilisearch/meilisearch/pull/6538

• Bump peter-evans/repository-dispatch from 3.0.0 to 4.0.1 by @dependabot[bot] in https://github.com/meilisearch/meilisearch/pull/6556

Full Changelog: https://github.com/meilisearch/meilisearch/compare/v1.51.0...v1.53.0

Apache Superset is a modern, enterprise-ready business intelligence web application

• Upgrade dependencies for OpenBLAS 0.3.34, OpenCV 4.14.0, FFmpeg 8.1.2, Tesseract 5.5.3
• Compile classes with parameters bumping minimum requirements to Java SE 8 and Android 7.0 (issue bytedeco/javacpp-presets#1739)

• fix(ecstore): start with unresolved Kubernetes peers by @cxymds in https://github.com/rustfs/rustfs/pull/5460
• ci(release): isolate preview releases from latest channels by @overtrue in https://github.com/rustfs/rustfs/pull/5462
• fix(ecstore): quarantine rejected format members by @cxymds in https://github.com/rustfs/rustfs/pull/5463
• test(e2e): accept backpressure unknown terminal status by @houseme in https://github.com/rustfs/rustfs/pull/5464
• refactor(sse): decouple ecstore and harden KMS lifecycle by @reatang in https://github.com/rustfs/rustfs/pull/5435
• fix(obs): label node-local metrics by server by @houseme in https://github.com/rustfs/rustfs/pull/5465
• fix(ci): generate release notes with the correct baseline by @overtrue in https://github.com/rustfs/rustfs/pull/5467
• docs(obs): add Grafana server-label dashboard by @houseme in https://github.com/rustfs/rustfs/pull/5468
• fix(kms): make local backend persistence crash-durable by @overtrue in https://github.com/rustfs/rustfs/pull/5471
• feat(kms): add operation timeout and typed retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5472
• fix(kms): fail closed on missing or corrupt key material by @overtrue in https://github.com/rustfs/rustfs/pull/5475
• fix(kms): report accurate Vault KV2 security contract and disable unsafe rotation by @overtrue in https://github.com/rustfs/rustfs/pull/5474
• docs(kms): document local backend durability and deployment support matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5478
• feat(kms): add master key version to data key envelope contract by @overtrue in https://github.com/rustfs/rustfs/pull/5480
• fix(kms): pass attempt timeout to Vault test clients by @overtrue in https://github.com/rustfs/rustfs/pull/5479
• fix(kms): pass attempt timeout in vault kv2 tests by @overtrue in https://github.com/rustfs/rustfs/pull/5482
• refactor(kms): route Vault clients through a rotatable credential provider by @overtrue in https://github.com/rustfs/rustfs/pull/5481
• feat(kms): retain historical master key versions for Vault KV2 rotation by @overtrue in https://github.com/rustfs/rustfs/pull/5484
• feat: add opt-in hotpath profiling by @houseme in https://github.com/rustfs/rustfs/pull/5488
• feat(kms): add backup manifest and responsibility contract types by @overtrue in https://github.com/rustfs/rustfs/pull/5483
• test(kms): pin rotation contracts across backends and document retention by @overtrue in https://github.com/rustfs/rustfs/pull/5486
• feat(kms): add backend capability discovery by @overtrue in https://github.com/rustfs/rustfs/pull/5485
• feat(kms): AppRole login with background token renewal and fail-closed expiry by @overtrue in https://github.com/rustfs/rustfs/pull/5487
• feat(kms): enforce shared key state machine across backends by @overtrue in https://github.com/rustfs/rustfs/pull/5489
• fix(iam): separate OIDC role and claim policies by @overtrue in https://github.com/rustfs/rustfs/pull/5493
• fix(admin): keep data usage endpoint available by @overtrue in https://github.com/rustfs/rustfs/pull/5494
• feat(kms): route Vault operations through the retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5495
• feat(admin): add KMS key lifecycle endpoints and deletion reference gate by @overtrue in https://github.com/rustfs/rustfs/pull/5496
• feat: add hotpath primitive profiling coverage by @houseme in https://github.com/rustfs/rustfs/pull/5492
• perf(ecstore): deduplicate concurrent lazy bucket-metadata loads by @overtrue in https://github.com/rustfs/rustfs/pull/5498
• feat(kms): record operation metrics in the retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5500
• feat: extend hotpath coverage across crates by @houseme in https://github.com/rustfs/rustfs/pull/5505
• refactor(kms): fold the KmsClient layer into KmsBackend and complete lifecycle overrides by @overtrue in https://github.com/rustfs/rustfs/pull/5501
• test: add formal hotpath ABBA runner by @houseme in https://github.com/rustfs/rustfs/pull/5507
• feat(kms): export local backend key material as sealed backup bundles by @overtrue in https://github.com/rustfs/rustfs/pull/5499
• fix(s3): allow CopyObject COPY request metadata by @houseme in https://github.com/rustfs/rustfs/pull/5514
• fix(kms): drop stale KmsClient trait import in local_export tests by @overtrue in https://github.com/rustfs/rustfs/pull/5519
• docs(kms): add observability dashboard, alert rules and runbook by @overtrue in https://github.com/rustfs/rustfs/pull/5517
• fix(config): fence persisted config updates and reloads by @cxymds in https://github.com/rustfs/rustfs/pull/5512
• docs: make validation proportional to change risk by @overtrue in https://github.com/rustfs/rustfs/pull/5527
• test(s3): cover delete marker list visibility by @overtrue in https://github.com/rustfs/rustfs/pull/5503
• fix(kms): make Vault KV2 lifecycle writes check-and-set by @overtrue in https://github.com/rustfs/rustfs/pull/5518
• fix(kms): CAS Transit metadata writes and bound the metadata cache by @overtrue in https://github.com/rustfs/rustfs/pull/5520
• feat(policy): parse and match KMS key resources with a kms:Decrypt action by @overtrue in https://github.com/rustfs/rustfs/pull/5515
• feat(kms): restore local backend key material from sealed backup bundles by @overtrue in https://github.com/rustfs/rustfs/pull/5522
• test(object-lock): cover unretained version cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/5504
• feat(hotpath): use mimalloc in inner counting allocator by @houseme in https://github.com/rustfs/rustfs/pull/5523
• ci: stop running expensive jobs that cannot inform the result by @overtrue in https://github.com/rustfs/rustfs/pull/5528
• ci: gate expensive jobs on Quick Checks and stop a failed PR run early by @overtrue in https://github.com/rustfs/rustfs/pull/5529
• ci: fit the Rust caches back inside the 10GB quota by @overtrue in https://github.com/rustfs/rustfs/pull/5532
• ci: write the Rust caches from a workflow that is not cancelled by @overtrue in https://github.com/rustfs/rustfs/pull/5536
• fix(storage): harden scanner and recovery edge cases by @houseme in https://github.com/rustfs/rustfs/pull/5521
• ci: bound every job's runtime and stop pasting inputs into shell by @overtrue in https://github.com/rustfs/rustfs/pull/5537
• fix(ecstore): settle lease-deferred data-dir deletes before bucket removal by @overtrue in https://github.com/rustfs/rustfs/pull/5516
• ci: stop the weekly flake.lock bot from running the whole pipeline by @overtrue in https://github.com/rustfs/rustfs/pull/5539
• ci: narrow the io_uring lane and make the sampler attributable by @overtrue in https://github.com/rustfs/rustfs/pull/5540
• docs(kms): record the compliance position and mixed-version constraints by @overtrue in https://github.com/rustfs/rustfs/pull/5541
• ci: drop the docker layer cache and stop installing unused tooling by @overtrue in https://github.com/rustfs/rustfs/pull/5544
• ci: add an opt-in cargo --timings run to decide the sccache question by @overtrue in https://github.com/rustfs/rustfs/pull/5545
• fix(scanner): remove total timeout from heal walks by @overtrue in https://github.com/rustfs/rustfs/pull/5502
• ci: clear the checkout token in every job that does not push by @overtrue in https://github.com/rustfs/rustfs/pull/5547
• fix(sts): align AssumeRole authorization by @GatewayJ in https://github.com/rustfs/rustfs/pull/5281
• ci: drop cla.yml to least privilege by @overtrue in https://github.com/rustfs/rustfs/pull/5548
• feat(kms): wire OperationContext into an audit event contract by @overtrue in https://github.com/rustfs/rustfs/pull/5534
• feat(admin): scope KMS admin authorization to the target key by @overtrue in https://github.com/rustfs/rustfs/pull/5533
• feat(kms): add a synthetic encrypt-decrypt probe worker by @overtrue in https://github.com/rustfs/rustfs/pull/5543
• feat(kms): record real cache hit, miss and eviction metrics by @overtrue in https://github.com/rustfs/rustfs/pull/5531
• feat(sse): enforce per-key KMS authorization on the SSE-KMS data path by @overtrue in https://github.com/rustfs/rustfs/pull/5538
• feat(kms): converge KMS configuration across nodes after a runtime change by @overtrue in https://github.com/rustfs/rustfs/pull/5551
• feat(kms): expose key lifecycle and Vault credential gauges by @overtrue in https://github.com/rustfs/rustfs/pull/5542
• feat(kms): add an AWS KMS backend by @overtrue in https://github.com/rustfs/rustfs/pull/5553
• feat(kms): allow key description and tag updates by @overtrue in https://github.com/rustfs/rustfs/pull/5546
• fix(hotpath): pin mimalloc allocator backend by @houseme in https://github.com/rustfs/rustfs/pull/5550
• Expose replication backlog gauges by @houseme in https://github.com/rustfs/rustfs/pull/5557
• fix(ecstore): harden HotPath profiling boundaries by @houseme in https://github.com/rustfs/rustfs/pull/5555
• fix(oidc): warn on request-header redirect fallback by @GatewayJ in https://github.com/rustfs/rustfs/pull/5561
• test(e2e): classify failed lock nodes as quorum loss by @overtrue in https://github.com/rustfs/rustfs/pull/5513
• ci: stop archiving every dependency's unpacked source in each cache by @overtrue in https://github.com/rustfs/rustfs/pull/5566
• fix(replication): harden backlog observability by @houseme in https://github.com/rustfs/rustfs/pull/5564
• feat(admin): emit KMS management audit events by @overtrue in https://github.com/rustfs/rustfs/pull/5554
• feat(health): drive KMS readiness from the probe status by @overtrue in https://github.com/rustfs/rustfs/pull/5552
• fix(s3select): preserve ScanRange across file partitions by @GatewayJ in https://github.com/rustfs/rustfs/pull/5562
• ci: stop main pushes from starving dispatched Cache Warm runs by @overtrue in https://github.com/rustfs/rustfs/pull/5567
• fix(s3select): honor custom CSV record delimiters by @GatewayJ in https://github.com/rustfs/rustfs/pull/5558
• fix(s3select): parse JSON source paths from SQL AST by @GatewayJ in https://github.com/rustfs/rustfs/pull/5559
• ci: make the cache size report readable from the API by @overtrue in https://github.com/rustfs/rustfs/pull/5568
• ci: raise CARGO_BUILD_JOBS to 3 on main pushes as a measured experiment by @overtrue in https://github.com/rustfs/rustfs/pull/5571
• feat(kms): orchestrate and verify Vault-backed restores by @overtrue in https://github.com/rustfs/rustfs/pull/5549
• ci: let the CARGO_BUILD_JOBS experiment collect samples on demand by @overtrue in https://github.com/rustfs/rustfs/pull/5572
• fix(kms): make the deletion waiting window non-bypassable by @overtrue in https://github.com/rustfs/rustfs/pull/5535
• test(replication): distinguish backlog from failed counters by @houseme in https://github.com/rustfs/rustfs/pull/5570
• perf: harden HotPath closure evidence by @houseme in https://github.com/rustfs/rustfs/pull/5573
• fix(obs): retire replication backlog metric series by @houseme in https://github.com/rustfs/rustfs/pull/5574
• fix(kms): honour the configured metadata cache TTL and metrics switch by @overtrue in https://github.com/rustfs/rustfs/pull/5569
• ci: add nightly GNU build by @overtrue in https://github.com/rustfs/rustfs/pull/5576
• fix(s3select): cancel queries after client disconnect by @GatewayJ in https://github.com/rustfs/rustfs/pull/5560
• docs(agents): require worktree and disk hygiene by @overtrue in https://github.com/rustfs/rustfs/pull/5580
• feat(sse): attach KMS attribution to S3 audit entries by @overtrue in https://github.com/rustfs/rustfs/pull/5577
• fix(kms): refuse to rotate a Vault key whose baseline version was erased by @overtrue in https://github.com/rustfs/rustfs/pull/5578
• feat(admin): expose KMS backup and restore behind explicit guards by @overtrue in https://github.com/rustfs/rustfs/pull/5579
• chore(s3-types): guard the EventName mask bit budget by @overtrue in https://github.com/rustfs/rustfs/pull/5582
• fix(replication): enforce bucket replication switches by @reatang in https://github.com/rustfs/rustfs/pull/5449
• test(perf): strengthen HotPath evidence contracts by @houseme in https://github.com/rustfs/rustfs/pull/5581
• feat(admin): expose KMS key description and tag endpoints by @overtrue in https://github.com/rustfs/rustfs/pull/5575
• test(perf): cover ABBA evidence binding matrix by @houseme in https://github.com/rustfs/rustfs/pull/5585
• fix(s3select): guarantee terminal event delivery by @GatewayJ in https://github.com/rustfs/rustfs/pull/5563
• fix(s3select): support two-byte CSV record delimiters by @GatewayJ in https://github.com/rustfs/rustfs/pull/5565
• Expose target-scoped durable MRF backlog metrics by @houseme in https://github.com/rustfs/rustfs/pull/5584
• docs(kms): correct operator claims that later changes invalidated by @overtrue in https://github.com/rustfs/rustfs/pull/5590
• feat(policy): add built-in KMS role policies and a negative authorization matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5588
• feat(kms): add a disaster-recovery drill harness for KMS backups by @overtrue in https://github.com/rustfs/rustfs/pull/5587
• fix(admin): refuse immediate KMS key deletion through the query string by @overtrue in https://github.com/rustfs/rustfs/pull/5589
• test(kms): cover decryption of pre-rotation envelopes offline by @overtrue in https://github.com/rustfs/rustfs/pull/5591
• feat(kms): accept the AWS backend through KMS configuration by @overtrue in https://github.com/rustfs/rustfs/pull/5592
• docs(kms): correct the claim that rotation is not admin-reachable by @overtrue in https://github.com/rustfs/rustfs/pull/5593
• fix(kms): page key listings so the deletion sweep sees every key by @overtrue in https://github.com/rustfs/rustfs/pull/5595
• docs(kms): correct the static backend's MinIO compatibility claim by @overtrue in https://github.com/rustfs/rustfs/pull/5596
• fix(kms): persist and report the Vault KV2 key rotation timestamp by @overtrue in https://github.com/rustfs/rustfs/pull/5594
• feat(kms): report the configuration references that block a key deletion by @overtrue in https://github.com/rustfs/rustfs/pull/5598
• fix(s3): strip every encryption marker from a copy destination by @overtrue in https://github.com/rustfs/rustfs/pull/5597
• docs(kms): drop claims about an interface that no longer exists by @overtrue in https://github.com/rustfs/rustfs/pull/5602
• docs: state that MinIO-encrypted objects do not migrate by @overtrue in https://github.com/rustfs/rustfs/pull/5600
• refactor(kms): drop the dead duplicate api_types::DeleteKeyRequest by @overtrue in https://github.com/rustfs/rustfs/pull/5601
• fix(replication): harden live delete admission by @cxymds in https://github.com/rustfs/rustfs/pull/5599
• docs(kms): define the bulk object rekey job contract by @overtrue in https://github.com/rustfs/rustfs/pull/5605
• fix(kms): fail closed on Local key records that cannot be interpreted by @overtrue in https://github.com/rustfs/rustfs/pull/5606
• feat(kms): add the data key rewrap primitive by @overtrue in https://github.com/rustfs/rustfs/pull/5607
• feat(admin): apply the requested key listing filters by @overtrue in https://github.com/rustfs/rustfs/pull/5608
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/5611
• fix(scanner): bound corrupt metadata traversal by @marshawcoco in https://github.com/rustfs/rustfs/pull/5609
• fix(authz): restrict recursive force-delete scope by @cxymds in https://github.com/rustfs/rustfs/pull/5610
• fix(lifecycle): count the first transition sample for each tier by @overtrue in https://github.com/rustfs/rustfs/pull/5612
• fix(authz): preserve direct delete usecase callers by @cxymds in https://github.com/rustfs/rustfs/pull/5614
• chore(kms): remove dead key-management types from api_types by @overtrue in https://github.com/rustfs/rustfs/pull/5620
• fix(admin): preflight webhook outbound policy by @overtrue in https://github.com/rustfs/rustfs/pull/5619
• fix(scanner): surface per-tier usage in the data-usage snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5623
• docs(kms): guard outward FIPS wording by @overtrue in https://github.com/rustfs/rustfs/pull/5624
• fix(sse): rewrite data when a same-key copy changes encryption by @overtrue in https://github.com/rustfs/rustfs/pull/5618
• test(kms): pin admin KMS response shapes where they are served by @overtrue in https://github.com/rustfs/rustfs/pull/5626
• docs(kms): record CLI and console admin handoff matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5639
• fix(lifecycle): bind delete replication admission by @cxymds in https://github.com/rustfs/rustfs/pull/5621
• fix(replication): reject unsupported target options by @cxymds in https://github.com/rustfs/rustfs/pull/5622
• fix(authz): gate replication-only PUT headers by @cxymds in https://github.com/rustfs/rustfs/pull/5625
• fix(replication): make sync delivery target-granular by @cxymds in https://github.com/rustfs/rustfs/pull/5630
• test(admin): audit KMS deletion guard outcomes by @overtrue in https://github.com/rustfs/rustfs/pull/5628
• fix(replication): enforce bucket write contract by @cxymds in https://github.com/rustfs/rustfs/pull/5629
• feat(replication): bound DeleteObjects queue admission by @cxymds in https://github.com/rustfs/rustfs/pull/5637
• fix(replication): propagate metadata changes by @cxymds in https://github.com/rustfs/rustfs/pull/5635
• fix(replication): honor target TLS in health checks by @reatang in https://github.com/rustfs/rustfs/pull/5613
• fix(targets): explain webhook outbound allowlist failures by @overtrue in https://github.com/rustfs/rustfs/pull/5616
• test(iam): freeze OIDC federation behavior by @GatewayJ in https://github.com/rustfs/rustfs/pull/5627
• test(e2e): add replication acceptance matrix by @cxymds in https://github.com/rustfs/rustfs/pull/5642
• ci: require MinIO interop reader matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5640
• test(kms): pin AWS timeout and contract divergence by @overtrue in https://github.com/rustfs/rustfs/pull/5636
• fix(kms): cover concurrent Vault KV2 rotation races by @overtrue in https://github.com/rustfs/rustfs/pull/5632
• feat(admin): expose versioned replication capabilities by @cxymds in https://github.com/rustfs/rustfs/pull/5631
• fix(replication): fail closed on destination encryption by @cxymds in https://github.com/rustfs/rustfs/pull/5633
• feat(table-catalog): paginate Iceberg REST listings by @marshawcoco in https://github.com/rustfs/rustfs/pull/5466
• fix(replication): preserve durable MRF delete admission by @cxymds in https://github.com/rustfs/rustfs/pull/5643
• fix(replication): snapshot existing object admission targets by @cxymds in https://github.com/rustfs/rustfs/pull/5634
• fix(kms): version local key records safely by @overtrue in https://github.com/rustfs/rustfs/pull/5638
• test(kms): verify AppRole against live Vault by @overtrue in https://github.com/rustfs/rustfs/pull/5650
• fix(kms): bound persisted format parsing by @overtrue in https://github.com/rustfs/rustfs/pull/5652
• fix(ecstore): make transitioned deletes durable by @cxymds in https://github.com/rustfs/rustfs/pull/5644
• feat(kms): bound backend concurrency and failures by @overtrue in https://github.com/rustfs/rustfs/pull/5651
• test(kms): exercise real Vault Raft failover by @overtrue in https://github.com/rustfs/rustfs/pull/5653
• fix(ci): keep PR e2e smoke lane from timing out by @cxymds in https://github.com/rustfs/rustfs/pull/5649
• feat(obs): add bounded metrics dimensions by @houseme in https://github.com/rustfs/rustfs/pull/5645
• fix(replication): persist force-delete handoff state by @cxymds in https://github.com/rustfs/rustfs/pull/5641
• test(ci): serialize cross-node metadata writes by @overtrue in https://github.com/rustfs/rustfs/pull/5654
• fix(metrics): close dimension review gaps by @houseme in https://github.com/rustfs/rustfs/pull/5656
• chore(deps): refresh hotpath allocator support by @houseme in https://github.com/rustfs/rustfs/pull/5660
• fix(replication): harden MRF replay durability by @cxymds in https://github.com/rustfs/rustfs/pull/5659
• fix(ecstore): allow Windows renames under guarded parents by @marshawcoco in https://github.com/rustfs/rustfs/pull/5663
• fix(s3): stop authorizing DeleteBucketWebsite with a read action by @overtrue in https://github.com/rustfs/rustfs/pull/5665
• fix(replication): fence force-delete journal updates by @cxymds in https://github.com/rustfs/rustfs/pull/5661
• fix(helm): exclude external hosts from mTLS certificate by @ccccpj in https://github.com/rustfs/rustfs/pull/5666
• fix(lock): let waiters hear releases and let acquisition succeed past registered waiters by @themiguelamador in https://github.com/rustfs/rustfs/pull/5670
• fix(replication): retain MRF entries until completion by @cxymds in https://github.com/rustfs/rustfs/pull/5671
• feat(replication): add dormant MRF v2 reader by @cxymds in https://github.com/rustfs/rustfs/pull/5672
• test(replication): add mixed-version MRF acceptance matrix by @cxymds in https://github.com/rustfs/rustfs/pull/5673
• fix(replication): preserve multipart source mtime by @ccccpj in https://github.com/rustfs/rustfs/pull/5669
• fix(kms): repair unopenable ciphertext and cover the Vault backends by @reatang in https://github.com/rustfs/rustfs/pull/5668
• feat(replication): purge delete markers by the target's own version id by @overtrue in https://github.com/rustfs/rustfs/pull/5676
• fix: address rc.1 release blockers by @overtrue in https://github.com/rustfs/rustfs/pull/5648
• perf(ecstore): batch local EC shard preads on GET by @rdiperri-wasabi in https://github.com/rustfs/rustfs/pull/5679
• fix(replication): retain MRF failures during recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5667
• fix(ecstore): address review comments for batch shard pread by @overtrue in https://github.com/rustfs/rustfs/pull/5680
• fix(replication): fence journal snapshots with CAS by @cxymds in https://github.com/rustfs/rustfs/pull/5674
• fix(ecstore): don't exclude pool when has_space_for is indeterminate (#5497) by @overtrue in https://github.com/rustfs/rustfs/pull/5682
• fix(audit): move audit init after IAM bootstrap to fix startup ordering by @overtrue in https://github.com/rustfs/rustfs/pull/5685
• fix(ecstore): skip walkdir total timeout for listing operations by @overtrue in https://github.com/rustfs/rustfs/pull/5684
• fix(ecstore): treat transient network errors as unformatted during bootstrap by @overtrue in https://github.com/rustfs/rustfs/pull/5683
• refactor(table-catalog): modularize catalog implementation by @marshawcoco in https://github.com/rustfs/rustfs/pull/5678
• fix(replication): fence MRF journal updates by @cxymds in https://github.com/rustfs/rustfs/pull/5686
• fix(ecstore): split internal get metadata metrics by @houseme in https://github.com/rustfs/rustfs/pull/5687
• fix(filemeta): preserve FileInfo wire compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/5689
• test(e2e): restore webhook redelivery regression coverage by @overtrue in https://github.com/rustfs/rustfs/pull/5690
• fix(heal): surface stale versions from all disks during heal walk by @overtrue in https://github.com/rustfs/rustfs/pull/5692
• fix(heal): harden resumable set repair failures by @cxymds in https://github.com/rustfs/rustfs/pull/5693
• fix(list): skip delete markers in single-object fast path for ListObjects by @overtrue in https://github.com/rustfs/rustfs/pull/5691
• fix(observability): fallback mimalloc requested memory stats by @houseme in https://github.com/rustfs/rustfs/pull/5695
• fix(replication): harden resync and MRF recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5694
• fix(policy): require unscoped KMS bundle grants by @overtrue in https://github.com/rustfs/rustfs/pull/5697
• fix(replication): restrict metadata replication targets by @overtrue in https://github.com/rustfs/rustfs/pull/5696
• fix(auth): isolate embedded IAM contexts by @overtrue in https://github.com/rustfs/rustfs/pull/5704
• fix(api): bound bucket rate limiter keys by @overtrue in https://github.com/rustfs/rustfs/pull/5706
• fix(s3select): enforce SSE-KMS read authorization by @overtrue in https://github.com/rustfs/rustfs/pull/5698
• fix(auth): enforce object-lock actions for POST uploads by @overtrue in https://github.com/rustfs/rustfs/pull/5701
• fix(ecstore): isolate inline rollback cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/5703
• fix(ecstore): retain namespace read locks for streaming GETs to prevent quota-bypass by @overtrue in https://github.com/rustfs/rustfs/pull/5699
• fix(ci): block PR-controlled execution in performance A/B workflow by @overtrue in https://github.com/rustfs/rustfs/pull/5705
• refactor(time): migrate audit and notify timestamps to jiff by @houseme in https://github.com/rustfs/rustfs/pull/5707
• perf(observability): avoid sampler stat allocations by @houseme in https://github.com/rustfs/rustfs/pull/5708
• fix(compose): set log directory and wait for permission helper by @lqb in https://github.com/rustfs/rustfs/pull/5646
• test(e2e): add P0/P1 regression tests for recurring issue patterns by @overtrue in https://github.com/rustfs/rustfs/pull/5709
• fix(iam): disambiguate OIDC virtual parent IDs by @overtrue in https://github.com/rustfs/rustfs/pull/5700
• perf(observability): avoid cgroup path allocation by @houseme in https://github.com/rustfs/rustfs/pull/5711
• refactor(metrics): migrate scanner report timestamps to jiff by @houseme in https://github.com/rustfs/rustfs/pull/5710
• fix(replication): report FAILED when replication put options cannot be built by @overtrue in https://github.com/rustfs/rustfs/pull/5717
• fix(iam): invalidate peer STS caches on revocation by @overtrue in https://github.com/rustfs/rustfs/pull/5718
• fix(quota): admit writes against a persisted usage baseline while authoritative usage is unavailable by @overtrue in https://github.com/rustfs/rustfs/pull/5722
• fix(replication): make bucket replication rules editable from clients by @reatang in https://github.com/rustfs/rustfs/pull/5715
• fix(ecstore): reclaim synthetic inline-rollback dirs after rename commit by @overtrue in https://github.com/rustfs/rustfs/pull/5724
• fix(filemeta): redact sealed keys and elide inline data in FileInfo Debug by @overtrue in https://github.com/rustfs/rustfs/pull/5725
• fix(heal): bound per-object logging by @anthonymartin in https://github.com/rustfs/rustfs/pull/5719
• fix(targets): surface redacted construction error detail in target failures by @overtrue in https://github.com/rustfs/rustfs/pull/5729
• fix(heal): demote per-object heal logs and cap erasure-set failure warns by @overtrue in https://github.com/rustfs/rustfs/pull/5727
• fix(quota): keep the degraded-baseline fallback off the write path's stack by @overtrue in https://github.com/rustfs/rustfs/pull/5728
• fix(ecstore): make inline-rollback reclamation file-precise to keep #5703's child-key safety by @overtrue in https://github.com/rustfs/rustfs/pull/5732
• fix(s3): degrade multipart listings per upload instead of failing the bucket by @overtrue in https://github.com/rustfs/rustfs/pull/5721
• fix(ecstore): make local disk map initialization replace stale topology by @overtrue in https://github.com/rustfs/rustfs/pull/5734
• test(ecstore): deflake multipart listing tests under plain cargo test by @overtrue in https://github.com/rustfs/rustfs/pull/5730
• refactor(ecstore): unify remaining heal logs to structured event style by @overtrue in https://github.com/rustfs/rustfs/pull/5720
• chore(deps): refresh mimalloc revision by @houseme in https://github.com/rustfs/rustfs/pull/5736
• ci(scripts): add s3s footprint ratchet ahead of s3gate migration by @overtrue in https://github.com/rustfs/rustfs/pull/5739
• fix(auth): restore filtered ListBuckets fallback by @overtrue in https://github.com/rustfs/rustfs/pull/5726
• feat(ci): add DEB/RPM packaging workflow by @majinghe in https://github.com/rustfs/rustfs/pull/5738
• fix: bump s3_error! footprint baseline to 1687 for auth ListBuckets fix by @overtrue in https://github.com/rustfs/rustfs/pull/5747
• fix(auth): route ListBuckets denial through ApiError to hold s3s ratchet by @reatang in https://github.com/rustfs/rustfs/pull/5755
• fix(site-replication): send peer join to MinIO peer/join route with encrypted payload by @reatang in https://github.com/rustfs/rustfs/pull/5748
• fix(madmin): accept MinIO PascalCase SRInfo fields and nil-map nulls by @reatang in https://github.com/rustfs/rustfs/pull/5749
• feat(table-catalog): complete namespace REST contracts by @marshawcoco in https://github.com/rustfs/rustfs/pull/5745
• fix(replication): send source versionId as query param to remote targets by @reatang in https://github.com/rustfs/rustfs/pull/5752
• fix(replication): accept remote target healthCheckDuration nanoseconds by @reatang in https://github.com/rustfs/rustfs/pull/5754
• fix(site-replication): use MinIO-compatible sts-account IAM item type by @reatang in https://github.com/rustfs/rustfs/pull/5750
• fix(table-catalog): route read_bounded_json_body errors through ApiError to hold s3s ratchet by @overtrue in https://github.com/rustfs/rustfs/pull/5759
• fix(replication): schedule replication for CopyObject and snowball extracted objects by @reatang in https://github.com/rustfs/rustfs/pull/5753
• fix(auth): log structured denial reasons for generic AccessDenied responses by @overtrue in https://github.com/rustfs/rustfs/pull/5761
• fix(ecstore): preserve checksums through write transforms by @anthonymartin in https://github.com/rustfs/rustfs/pull/5765
• perf: add RPC auth profiling diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/5775
• obs: mirror log attributes into loki lines by @houseme in https://github.com/rustfs/rustfs/pull/5776
• fix(site-replication): translate policy mapping userType at MinIO wire boundary by @reatang in https://github.com/rustfs/rustfs/pull/5751
• fix(kms): report unreadable keys and bound list-keys page size by @overtrue in https://github.com/rustfs/rustfs/pull/5764
• test(admin): pin the KMS admin route contract as a snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5766
• fix(kms): hold the Local key directory and its files owner-only by @overtrue in https://github.com/rustfs/rustfs/pull/5768
• feat(table-catalog): validate Iceberg metadata graphs by @marshawcoco in https://github.com/rustfs/rustfs/pull/5758
• fix(replication): report remote target latency as Go duration nanoseconds by @reatang in https://github.com/rustfs/rustfs/pull/5771
• test(heal): cover partial rename retry admission by @cxymds in https://github.com/rustfs/rustfs/pull/5772
• fix(auth): align ListBuckets discovery with IAM policies by @GatewayJ in https://github.com/rustfs/rustfs/pull/5746
• fix(logging): bound hot-path span amplification by @anthonymartin in https://github.com/rustfs/rustfs/pull/5763
• feat(kms): report which keys have outlived their rotation period by @overtrue in https://github.com/rustfs/rustfs/pull/5769
• perf(metrics): count internode RPC auth failures by @houseme in https://github.com/rustfs/rustfs/pull/5777
• fix(capacity): back off timed-out scans by @anthonymartin in https://github.com/rustfs/rustfs/pull/5770
• feat(rpc): expose and auto-size replay cache capacity by @houseme in https://github.com/rustfs/rustfs/pull/5781
• fix(scanner): publish bounded observational usage by @anthonymartin in https://github.com/rustfs/rustfs/pull/5742
• fix(ecstore): heal partial ordinary puts by @cxymds in https://github.com/rustfs/rustfs/pull/5783
• fix(ci): ignore strings in s3s footprint ratchet by @cxymds in https://github.com/rustfs/rustfs/pull/5787
• fix(ecstore): bind multipart convergence heal versions by @cxymds in https://github.com/rustfs/rustfs/pull/5786
• fix(ecstore): parse ARN region and id in display order by @reatang in https://github.com/rustfs/rustfs/pull/5790
• fix(ecstore): fence data movement source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5794
• fix(replication): tolerate Go zero-value expiration and ignore latency in remote target requests by @reatang in https://github.com/rustfs/rustfs/pull/5789
• fix(rebalance): commit stats after source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5795
• fix(s3): resume in-flight GET streams after rebalance relocation by @deadspacewii in https://github.com/rustfs/rustfs/pull/5791
• ci: install awscurl for full e2e tests by @cxymds in https://github.com/rustfs/rustfs/pull/5796
• fix(capacity): stop background schedulers on shutdown by @cxymds in https://github.com/rustfs/rustfs/pull/5797
• fix(ecstore): preserve newer writes during data movement by @cxymds in https://github.com/rustfs/rustfs/pull/5798
• fix(ecstore): reject over-NAME_MAX key segments up front; classify irreconcilable parity as corrupt metadata by @overtrue in https://github.com/rustfs/rustfs/pull/5804
• fix(admin): stop logging STS AssumeRole JWT claims by @overtrue in https://github.com/rustfs/rustfs/pull/5802
• fix(replication): madmin reset/diff wire compat and config validation by @reatang in https://github.com/rustfs/rustfs/pull/5799
• ci(e2e): stabilize full-gate tooling by @cxymds in https://github.com/rustfs/rustfs/pull/5805
• perf(ecstore): memoize bucket-incarnation fence validation under lifecycle read-lock coverage by @overtrue in https://github.com/rustfs/rustfs/pull/5782
• perf(storage): skip read-version JSON for bin peers by @houseme in https://github.com/rustfs/rustfs/pull/5808
• fix(s3select): replace deprecated parquet reader by @houseme in https://github.com/rustfs/rustfs/pull/5811
• fix(scanner): retry a superseded usage snapshot in seconds, not a full cycle by @overtrue in https://github.com/rustfs/rustfs/pull/5814
• docs(runtime): document allocator reclaim runtime by @houseme in https://github.com/rustfs/rustfs/pull/5800
• fix(admin): serve the usage a scan measured instead of blanking the whole snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5818
• perf(utils): avoid metadata key lowercase allocation by @houseme in https://github.com/rustfs/rustfs/pull/5823
• perf(ecstore): cache modern erasure codec construction by @houseme in https://github.com/rustfs/rustfs/pull/5824
• fix(ecstore): enforce the NAME_MAX segment budget on the write path too by @overtrue in https://github.com/rustfs/rustfs/pull/5826
• fix(storage): reserve internal encryption prefixes in user metadata by @reatang in https://github.com/rustfs/rustfs/pull/5819
• refactor(kms): close the low-severity follow-ups from the #5668 adversarial re-review by @reatang in https://github.com/rustfs/rustfs/pull/5817
• fix(policy): support version ID condition keys by @cxymds in https://github.com/rustfs/rustfs/pull/5810
• feat(rpc): advertise cross-pool fence capability by @cxymds in https://github.com/rustfs/rustfs/pull/5809
• test(e2e): make scanner snapshot tests deterministic by @cxymds in https://github.com/rustfs/rustfs/pull/5812
• test(ecstore): stabilize free-version enqueue retry by @cxymds in https://github.com/rustfs/rustfs/pull/5813
• test(e2e): align backpressure assertion with recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5815
• test(e2e): wait for authoritative quota usage by @cxymds in https://github.com/rustfs/rustfs/pull/5816
• fix(table-catalog): fix object kind validation by @kinolaev in https://github.com/rustfs/rustfs/pull/5784
• fix(rebalance): drain entry tasks before listing retry by @cxymds in https://github.com/rustfs/rustfs/pull/5820
• fix(rpc): skip batch read-version JSON for msgpack peers by @houseme in https://github.com/rustfs/rustfs/pull/5825
• docs(agents): make the structured-logging rule reachable and enforceable by @overtrue in https://github.com/rustfs/rustfs/pull/5828
• fix(ecstore): purge the stale destination data dir on healing rename_data commits by @terem42 in https://github.com/rustfs/rustfs/pull/5822
• fix(rebalance): defer changed source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5829
• fix(ecstore): raise replay cache auto capacity by @houseme in https://github.com/rustfs/rustfs/pull/5833
• chore(release): bump version to 1.0.0-rc.1 by @overtrue in https://github.com/rustfs/rustfs/pull/5834

• @ccccpj made their first contribution in https://github.com/rustfs/rustfs/pull/5666
• @themiguelamador made their first contribution in https://github.com/rustfs/rustfs/pull/5670
• @rdiperri-wasabi made their first contribution in https://github.com/rustfs/rustfs/pull/5679
• @lqb made their first contribution in https://github.com/rustfs/rustfs/pull/5646
• @anthonymartin made their first contribution in https://github.com/rustfs/rustfs/pull/5719
• @deadspacewii made their first contribution in https://github.com/rustfs/rustfs/pull/5791
• @kinolaev made their first contribution in https://github.com/rustfs/rustfs/pull/5784
• @terem42 made their first contribution in https://github.com/rustfs/rustfs/pull/5822

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.12...1.0.0-rc.1

• fix(ecstore): start with unresolved Kubernetes peers by @cxymds in https://github.com/rustfs/rustfs/pull/5460
• ci(release): isolate preview releases from latest channels by @overtrue in https://github.com/rustfs/rustfs/pull/5462
• fix(ecstore): quarantine rejected format members by @cxymds in https://github.com/rustfs/rustfs/pull/5463
• test(e2e): accept backpressure unknown terminal status by @houseme in https://github.com/rustfs/rustfs/pull/5464
• refactor(sse): decouple ecstore and harden KMS lifecycle by @reatang in https://github.com/rustfs/rustfs/pull/5435
• fix(obs): label node-local metrics by server by @houseme in https://github.com/rustfs/rustfs/pull/5465
• fix(ci): generate release notes with the correct baseline by @overtrue in https://github.com/rustfs/rustfs/pull/5467
• docs(obs): add Grafana server-label dashboard by @houseme in https://github.com/rustfs/rustfs/pull/5468
• fix(kms): make local backend persistence crash-durable by @overtrue in https://github.com/rustfs/rustfs/pull/5471
• feat(kms): add operation timeout and typed retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5472
• fix(kms): fail closed on missing or corrupt key material by @overtrue in https://github.com/rustfs/rustfs/pull/5475
• fix(kms): report accurate Vault KV2 security contract and disable unsafe rotation by @overtrue in https://github.com/rustfs/rustfs/pull/5474
• docs(kms): document local backend durability and deployment support matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5478
• feat(kms): add master key version to data key envelope contract by @overtrue in https://github.com/rustfs/rustfs/pull/5480
• fix(kms): pass attempt timeout to Vault test clients by @overtrue in https://github.com/rustfs/rustfs/pull/5479
• fix(kms): pass attempt timeout in vault kv2 tests by @overtrue in https://github.com/rustfs/rustfs/pull/5482
• refactor(kms): route Vault clients through a rotatable credential provider by @overtrue in https://github.com/rustfs/rustfs/pull/5481
• feat(kms): retain historical master key versions for Vault KV2 rotation by @overtrue in https://github.com/rustfs/rustfs/pull/5484
• feat: add opt-in hotpath profiling by @houseme in https://github.com/rustfs/rustfs/pull/5488
• feat(kms): add backup manifest and responsibility contract types by @overtrue in https://github.com/rustfs/rustfs/pull/5483
• test(kms): pin rotation contracts across backends and document retention by @overtrue in https://github.com/rustfs/rustfs/pull/5486
• feat(kms): add backend capability discovery by @overtrue in https://github.com/rustfs/rustfs/pull/5485
• feat(kms): AppRole login with background token renewal and fail-closed expiry by @overtrue in https://github.com/rustfs/rustfs/pull/5487
• feat(kms): enforce shared key state machine across backends by @overtrue in https://github.com/rustfs/rustfs/pull/5489
• fix(iam): separate OIDC role and claim policies by @overtrue in https://github.com/rustfs/rustfs/pull/5493
• fix(admin): keep data usage endpoint available by @overtrue in https://github.com/rustfs/rustfs/pull/5494
• feat(kms): route Vault operations through the retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5495
• feat(admin): add KMS key lifecycle endpoints and deletion reference gate by @overtrue in https://github.com/rustfs/rustfs/pull/5496
• feat: add hotpath primitive profiling coverage by @houseme in https://github.com/rustfs/rustfs/pull/5492
• perf(ecstore): deduplicate concurrent lazy bucket-metadata loads by @overtrue in https://github.com/rustfs/rustfs/pull/5498
• feat(kms): record operation metrics in the retry policy engine by @overtrue in https://github.com/rustfs/rustfs/pull/5500
• feat: extend hotpath coverage across crates by @houseme in https://github.com/rustfs/rustfs/pull/5505
• refactor(kms): fold the KmsClient layer into KmsBackend and complete lifecycle overrides by @overtrue in https://github.com/rustfs/rustfs/pull/5501
• test: add formal hotpath ABBA runner by @houseme in https://github.com/rustfs/rustfs/pull/5507
• feat(kms): export local backend key material as sealed backup bundles by @overtrue in https://github.com/rustfs/rustfs/pull/5499
• fix(s3): allow CopyObject COPY request metadata by @houseme in https://github.com/rustfs/rustfs/pull/5514
• fix(kms): drop stale KmsClient trait import in local_export tests by @overtrue in https://github.com/rustfs/rustfs/pull/5519
• docs(kms): add observability dashboard, alert rules and runbook by @overtrue in https://github.com/rustfs/rustfs/pull/5517
• fix(config): fence persisted config updates and reloads by @cxymds in https://github.com/rustfs/rustfs/pull/5512
• docs: make validation proportional to change risk by @overtrue in https://github.com/rustfs/rustfs/pull/5527
• test(s3): cover delete marker list visibility by @overtrue in https://github.com/rustfs/rustfs/pull/5503
• fix(kms): make Vault KV2 lifecycle writes check-and-set by @overtrue in https://github.com/rustfs/rustfs/pull/5518
• fix(kms): CAS Transit metadata writes and bound the metadata cache by @overtrue in https://github.com/rustfs/rustfs/pull/5520
• feat(policy): parse and match KMS key resources with a kms:Decrypt action by @overtrue in https://github.com/rustfs/rustfs/pull/5515
• feat(kms): restore local backend key material from sealed backup bundles by @overtrue in https://github.com/rustfs/rustfs/pull/5522
• test(object-lock): cover unretained version cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/5504
• feat(hotpath): use mimalloc in inner counting allocator by @houseme in https://github.com/rustfs/rustfs/pull/5523
• ci: stop running expensive jobs that cannot inform the result by @overtrue in https://github.com/rustfs/rustfs/pull/5528
• ci: gate expensive jobs on Quick Checks and stop a failed PR run early by @overtrue in https://github.com/rustfs/rustfs/pull/5529
• ci: fit the Rust caches back inside the 10GB quota by @overtrue in https://github.com/rustfs/rustfs/pull/5532
• ci: write the Rust caches from a workflow that is not cancelled by @overtrue in https://github.com/rustfs/rustfs/pull/5536
• fix(storage): harden scanner and recovery edge cases by @houseme in https://github.com/rustfs/rustfs/pull/5521
• ci: bound every job's runtime and stop pasting inputs into shell by @overtrue in https://github.com/rustfs/rustfs/pull/5537
• fix(ecstore): settle lease-deferred data-dir deletes before bucket removal by @overtrue in https://github.com/rustfs/rustfs/pull/5516
• ci: stop the weekly flake.lock bot from running the whole pipeline by @overtrue in https://github.com/rustfs/rustfs/pull/5539
• ci: narrow the io_uring lane and make the sampler attributable by @overtrue in https://github.com/rustfs/rustfs/pull/5540
• docs(kms): record the compliance position and mixed-version constraints by @overtrue in https://github.com/rustfs/rustfs/pull/5541
• ci: drop the docker layer cache and stop installing unused tooling by @overtrue in https://github.com/rustfs/rustfs/pull/5544
• ci: add an opt-in cargo --timings run to decide the sccache question by @overtrue in https://github.com/rustfs/rustfs/pull/5545
• fix(scanner): remove total timeout from heal walks by @overtrue in https://github.com/rustfs/rustfs/pull/5502
• ci: clear the checkout token in every job that does not push by @overtrue in https://github.com/rustfs/rustfs/pull/5547
• fix(sts): align AssumeRole authorization by @GatewayJ in https://github.com/rustfs/rustfs/pull/5281
• ci: drop cla.yml to least privilege by @overtrue in https://github.com/rustfs/rustfs/pull/5548
• feat(kms): wire OperationContext into an audit event contract by @overtrue in https://github.com/rustfs/rustfs/pull/5534
• feat(admin): scope KMS admin authorization to the target key by @overtrue in https://github.com/rustfs/rustfs/pull/5533
• feat(kms): add a synthetic encrypt-decrypt probe worker by @overtrue in https://github.com/rustfs/rustfs/pull/5543
• feat(kms): record real cache hit, miss and eviction metrics by @overtrue in https://github.com/rustfs/rustfs/pull/5531
• feat(sse): enforce per-key KMS authorization on the SSE-KMS data path by @overtrue in https://github.com/rustfs/rustfs/pull/5538
• feat(kms): converge KMS configuration across nodes after a runtime change by @overtrue in https://github.com/rustfs/rustfs/pull/5551
• feat(kms): expose key lifecycle and Vault credential gauges by @overtrue in https://github.com/rustfs/rustfs/pull/5542
• feat(kms): add an AWS KMS backend by @overtrue in https://github.com/rustfs/rustfs/pull/5553
• feat(kms): allow key description and tag updates by @overtrue in https://github.com/rustfs/rustfs/pull/5546
• fix(hotpath): pin mimalloc allocator backend by @houseme in https://github.com/rustfs/rustfs/pull/5550
• Expose replication backlog gauges by @houseme in https://github.com/rustfs/rustfs/pull/5557
• fix(ecstore): harden HotPath profiling boundaries by @houseme in https://github.com/rustfs/rustfs/pull/5555
• fix(oidc): warn on request-header redirect fallback by @GatewayJ in https://github.com/rustfs/rustfs/pull/5561
• test(e2e): classify failed lock nodes as quorum loss by @overtrue in https://github.com/rustfs/rustfs/pull/5513
• ci: stop archiving every dependency's unpacked source in each cache by @overtrue in https://github.com/rustfs/rustfs/pull/5566
• fix(replication): harden backlog observability by @houseme in https://github.com/rustfs/rustfs/pull/5564
• feat(admin): emit KMS management audit events by @overtrue in https://github.com/rustfs/rustfs/pull/5554
• feat(health): drive KMS readiness from the probe status by @overtrue in https://github.com/rustfs/rustfs/pull/5552
• fix(s3select): preserve ScanRange across file partitions by @GatewayJ in https://github.com/rustfs/rustfs/pull/5562
• ci: stop main pushes from starving dispatched Cache Warm runs by @overtrue in https://github.com/rustfs/rustfs/pull/5567
• fix(s3select): honor custom CSV record delimiters by @GatewayJ in https://github.com/rustfs/rustfs/pull/5558
• fix(s3select): parse JSON source paths from SQL AST by @GatewayJ in https://github.com/rustfs/rustfs/pull/5559
• ci: make the cache size report readable from the API by @overtrue in https://github.com/rustfs/rustfs/pull/5568
• ci: raise CARGO_BUILD_JOBS to 3 on main pushes as a measured experiment by @overtrue in https://github.com/rustfs/rustfs/pull/5571
• feat(kms): orchestrate and verify Vault-backed restores by @overtrue in https://github.com/rustfs/rustfs/pull/5549
• ci: let the CARGO_BUILD_JOBS experiment collect samples on demand by @overtrue in https://github.com/rustfs/rustfs/pull/5572
• fix(kms): make the deletion waiting window non-bypassable by @overtrue in https://github.com/rustfs/rustfs/pull/5535
• test(replication): distinguish backlog from failed counters by @houseme in https://github.com/rustfs/rustfs/pull/5570
• perf: harden HotPath closure evidence by @houseme in https://github.com/rustfs/rustfs/pull/5573
• fix(obs): retire replication backlog metric series by @houseme in https://github.com/rustfs/rustfs/pull/5574
• fix(kms): honour the configured metadata cache TTL and metrics switch by @overtrue in https://github.com/rustfs/rustfs/pull/5569
• ci: add nightly GNU build by @overtrue in https://github.com/rustfs/rustfs/pull/5576
• fix(s3select): cancel queries after client disconnect by @GatewayJ in https://github.com/rustfs/rustfs/pull/5560
• docs(agents): require worktree and disk hygiene by @overtrue in https://github.com/rustfs/rustfs/pull/5580
• feat(sse): attach KMS attribution to S3 audit entries by @overtrue in https://github.com/rustfs/rustfs/pull/5577
• fix(kms): refuse to rotate a Vault key whose baseline version was erased by @overtrue in https://github.com/rustfs/rustfs/pull/5578
• feat(admin): expose KMS backup and restore behind explicit guards by @overtrue in https://github.com/rustfs/rustfs/pull/5579
• chore(s3-types): guard the EventName mask bit budget by @overtrue in https://github.com/rustfs/rustfs/pull/5582
• fix(replication): enforce bucket replication switches by @reatang in https://github.com/rustfs/rustfs/pull/5449
• test(perf): strengthen HotPath evidence contracts by @houseme in https://github.com/rustfs/rustfs/pull/5581
• feat(admin): expose KMS key description and tag endpoints by @overtrue in https://github.com/rustfs/rustfs/pull/5575
• test(perf): cover ABBA evidence binding matrix by @houseme in https://github.com/rustfs/rustfs/pull/5585
• fix(s3select): guarantee terminal event delivery by @GatewayJ in https://github.com/rustfs/rustfs/pull/5563
• fix(s3select): support two-byte CSV record delimiters by @GatewayJ in https://github.com/rustfs/rustfs/pull/5565
• Expose target-scoped durable MRF backlog metrics by @houseme in https://github.com/rustfs/rustfs/pull/5584
• docs(kms): correct operator claims that later changes invalidated by @overtrue in https://github.com/rustfs/rustfs/pull/5590
• feat(policy): add built-in KMS role policies and a negative authorization matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5588
• feat(kms): add a disaster-recovery drill harness for KMS backups by @overtrue in https://github.com/rustfs/rustfs/pull/5587
• fix(admin): refuse immediate KMS key deletion through the query string by @overtrue in https://github.com/rustfs/rustfs/pull/5589
• test(kms): cover decryption of pre-rotation envelopes offline by @overtrue in https://github.com/rustfs/rustfs/pull/5591
• feat(kms): accept the AWS backend through KMS configuration by @overtrue in https://github.com/rustfs/rustfs/pull/5592
• docs(kms): correct the claim that rotation is not admin-reachable by @overtrue in https://github.com/rustfs/rustfs/pull/5593
• fix(kms): page key listings so the deletion sweep sees every key by @overtrue in https://github.com/rustfs/rustfs/pull/5595
• docs(kms): correct the static backend's MinIO compatibility claim by @overtrue in https://github.com/rustfs/rustfs/pull/5596
• fix(kms): persist and report the Vault KV2 key rotation timestamp by @overtrue in https://github.com/rustfs/rustfs/pull/5594
• feat(kms): report the configuration references that block a key deletion by @overtrue in https://github.com/rustfs/rustfs/pull/5598
• fix(s3): strip every encryption marker from a copy destination by @overtrue in https://github.com/rustfs/rustfs/pull/5597
• docs(kms): drop claims about an interface that no longer exists by @overtrue in https://github.com/rustfs/rustfs/pull/5602
• docs: state that MinIO-encrypted objects do not migrate by @overtrue in https://github.com/rustfs/rustfs/pull/5600
• refactor(kms): drop the dead duplicate api_types::DeleteKeyRequest by @overtrue in https://github.com/rustfs/rustfs/pull/5601
• fix(replication): harden live delete admission by @cxymds in https://github.com/rustfs/rustfs/pull/5599
• docs(kms): define the bulk object rekey job contract by @overtrue in https://github.com/rustfs/rustfs/pull/5605
• fix(kms): fail closed on Local key records that cannot be interpreted by @overtrue in https://github.com/rustfs/rustfs/pull/5606
• feat(kms): add the data key rewrap primitive by @overtrue in https://github.com/rustfs/rustfs/pull/5607
• feat(admin): apply the requested key listing filters by @overtrue in https://github.com/rustfs/rustfs/pull/5608
• chore(deps): update flake.lock by @houseme in https://github.com/rustfs/rustfs/pull/5611
• fix(scanner): bound corrupt metadata traversal by @marshawcoco in https://github.com/rustfs/rustfs/pull/5609
• fix(authz): restrict recursive force-delete scope by @cxymds in https://github.com/rustfs/rustfs/pull/5610
• fix(lifecycle): count the first transition sample for each tier by @overtrue in https://github.com/rustfs/rustfs/pull/5612
• fix(authz): preserve direct delete usecase callers by @cxymds in https://github.com/rustfs/rustfs/pull/5614
• chore(kms): remove dead key-management types from api_types by @overtrue in https://github.com/rustfs/rustfs/pull/5620
• fix(admin): preflight webhook outbound policy by @overtrue in https://github.com/rustfs/rustfs/pull/5619
• fix(scanner): surface per-tier usage in the data-usage snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5623
• docs(kms): guard outward FIPS wording by @overtrue in https://github.com/rustfs/rustfs/pull/5624
• fix(sse): rewrite data when a same-key copy changes encryption by @overtrue in https://github.com/rustfs/rustfs/pull/5618
• test(kms): pin admin KMS response shapes where they are served by @overtrue in https://github.com/rustfs/rustfs/pull/5626
• docs(kms): record CLI and console admin handoff matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5639
• fix(lifecycle): bind delete replication admission by @cxymds in https://github.com/rustfs/rustfs/pull/5621
• fix(replication): reject unsupported target options by @cxymds in https://github.com/rustfs/rustfs/pull/5622
• fix(authz): gate replication-only PUT headers by @cxymds in https://github.com/rustfs/rustfs/pull/5625
• fix(replication): make sync delivery target-granular by @cxymds in https://github.com/rustfs/rustfs/pull/5630
• test(admin): audit KMS deletion guard outcomes by @overtrue in https://github.com/rustfs/rustfs/pull/5628
• fix(replication): enforce bucket write contract by @cxymds in https://github.com/rustfs/rustfs/pull/5629
• feat(replication): bound DeleteObjects queue admission by @cxymds in https://github.com/rustfs/rustfs/pull/5637
• fix(replication): propagate metadata changes by @cxymds in https://github.com/rustfs/rustfs/pull/5635
• fix(replication): honor target TLS in health checks by @reatang in https://github.com/rustfs/rustfs/pull/5613
• fix(targets): explain webhook outbound allowlist failures by @overtrue in https://github.com/rustfs/rustfs/pull/5616
• test(iam): freeze OIDC federation behavior by @GatewayJ in https://github.com/rustfs/rustfs/pull/5627
• test(e2e): add replication acceptance matrix by @cxymds in https://github.com/rustfs/rustfs/pull/5642
• ci: require MinIO interop reader matrix by @overtrue in https://github.com/rustfs/rustfs/pull/5640
• test(kms): pin AWS timeout and contract divergence by @overtrue in https://github.com/rustfs/rustfs/pull/5636
• fix(kms): cover concurrent Vault KV2 rotation races by @overtrue in https://github.com/rustfs/rustfs/pull/5632
• feat(admin): expose versioned replication capabilities by @cxymds in https://github.com/rustfs/rustfs/pull/5631
• fix(replication): fail closed on destination encryption by @cxymds in https://github.com/rustfs/rustfs/pull/5633
• feat(table-catalog): paginate Iceberg REST listings by @marshawcoco in https://github.com/rustfs/rustfs/pull/5466
• fix(replication): preserve durable MRF delete admission by @cxymds in https://github.com/rustfs/rustfs/pull/5643
• fix(replication): snapshot existing object admission targets by @cxymds in https://github.com/rustfs/rustfs/pull/5634
• fix(kms): version local key records safely by @overtrue in https://github.com/rustfs/rustfs/pull/5638
• test(kms): verify AppRole against live Vault by @overtrue in https://github.com/rustfs/rustfs/pull/5650
• fix(kms): bound persisted format parsing by @overtrue in https://github.com/rustfs/rustfs/pull/5652
• fix(ecstore): make transitioned deletes durable by @cxymds in https://github.com/rustfs/rustfs/pull/5644
• feat(kms): bound backend concurrency and failures by @overtrue in https://github.com/rustfs/rustfs/pull/5651
• test(kms): exercise real Vault Raft failover by @overtrue in https://github.com/rustfs/rustfs/pull/5653
• fix(ci): keep PR e2e smoke lane from timing out by @cxymds in https://github.com/rustfs/rustfs/pull/5649
• feat(obs): add bounded metrics dimensions by @houseme in https://github.com/rustfs/rustfs/pull/5645
• fix(replication): persist force-delete handoff state by @cxymds in https://github.com/rustfs/rustfs/pull/5641
• test(ci): serialize cross-node metadata writes by @overtrue in https://github.com/rustfs/rustfs/pull/5654
• fix(metrics): close dimension review gaps by @houseme in https://github.com/rustfs/rustfs/pull/5656
• chore(deps): refresh hotpath allocator support by @houseme in https://github.com/rustfs/rustfs/pull/5660
• fix(replication): harden MRF replay durability by @cxymds in https://github.com/rustfs/rustfs/pull/5659
• fix(ecstore): allow Windows renames under guarded parents by @marshawcoco in https://github.com/rustfs/rustfs/pull/5663
• fix(s3): stop authorizing DeleteBucketWebsite with a read action by @overtrue in https://github.com/rustfs/rustfs/pull/5665
• fix(replication): fence force-delete journal updates by @cxymds in https://github.com/rustfs/rustfs/pull/5661
• fix(helm): exclude external hosts from mTLS certificate by @ccccpj in https://github.com/rustfs/rustfs/pull/5666
• fix(lock): let waiters hear releases and let acquisition succeed past registered waiters by @themiguelamador in https://github.com/rustfs/rustfs/pull/5670
• fix(replication): retain MRF entries until completion by @cxymds in https://github.com/rustfs/rustfs/pull/5671
• feat(replication): add dormant MRF v2 reader by @cxymds in https://github.com/rustfs/rustfs/pull/5672
• test(replication): add mixed-version MRF acceptance matrix by @cxymds in https://github.com/rustfs/rustfs/pull/5673
• fix(replication): preserve multipart source mtime by @ccccpj in https://github.com/rustfs/rustfs/pull/5669
• fix(kms): repair unopenable ciphertext and cover the Vault backends by @reatang in https://github.com/rustfs/rustfs/pull/5668
• feat(replication): purge delete markers by the target's own version id by @overtrue in https://github.com/rustfs/rustfs/pull/5676
• fix: address rc.1 release blockers by @overtrue in https://github.com/rustfs/rustfs/pull/5648
• perf(ecstore): batch local EC shard preads on GET by @rdiperri-wasabi in https://github.com/rustfs/rustfs/pull/5679
• fix(replication): retain MRF failures during recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5667
• fix(ecstore): address review comments for batch shard pread by @overtrue in https://github.com/rustfs/rustfs/pull/5680
• fix(replication): fence journal snapshots with CAS by @cxymds in https://github.com/rustfs/rustfs/pull/5674
• fix(ecstore): don't exclude pool when has_space_for is indeterminate (#5497) by @overtrue in https://github.com/rustfs/rustfs/pull/5682
• fix(audit): move audit init after IAM bootstrap to fix startup ordering by @overtrue in https://github.com/rustfs/rustfs/pull/5685
• fix(ecstore): skip walkdir total timeout for listing operations by @overtrue in https://github.com/rustfs/rustfs/pull/5684
• fix(ecstore): treat transient network errors as unformatted during bootstrap by @overtrue in https://github.com/rustfs/rustfs/pull/5683
• refactor(table-catalog): modularize catalog implementation by @marshawcoco in https://github.com/rustfs/rustfs/pull/5678
• fix(replication): fence MRF journal updates by @cxymds in https://github.com/rustfs/rustfs/pull/5686
• fix(ecstore): split internal get metadata metrics by @houseme in https://github.com/rustfs/rustfs/pull/5687
• fix(filemeta): preserve FileInfo wire compatibility by @overtrue in https://github.com/rustfs/rustfs/pull/5689
• test(e2e): restore webhook redelivery regression coverage by @overtrue in https://github.com/rustfs/rustfs/pull/5690
• fix(heal): surface stale versions from all disks during heal walk by @overtrue in https://github.com/rustfs/rustfs/pull/5692
• fix(heal): harden resumable set repair failures by @cxymds in https://github.com/rustfs/rustfs/pull/5693
• fix(list): skip delete markers in single-object fast path for ListObjects by @overtrue in https://github.com/rustfs/rustfs/pull/5691
• fix(observability): fallback mimalloc requested memory stats by @houseme in https://github.com/rustfs/rustfs/pull/5695
• fix(replication): harden resync and MRF recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5694
• fix(policy): require unscoped KMS bundle grants by @overtrue in https://github.com/rustfs/rustfs/pull/5697
• fix(replication): restrict metadata replication targets by @overtrue in https://github.com/rustfs/rustfs/pull/5696
• fix(auth): isolate embedded IAM contexts by @overtrue in https://github.com/rustfs/rustfs/pull/5704
• fix(api): bound bucket rate limiter keys by @overtrue in https://github.com/rustfs/rustfs/pull/5706
• fix(s3select): enforce SSE-KMS read authorization by @overtrue in https://github.com/rustfs/rustfs/pull/5698
• fix(auth): enforce object-lock actions for POST uploads by @overtrue in https://github.com/rustfs/rustfs/pull/5701
• fix(ecstore): isolate inline rollback cleanup by @overtrue in https://github.com/rustfs/rustfs/pull/5703
• fix(ecstore): retain namespace read locks for streaming GETs to prevent quota-bypass by @overtrue in https://github.com/rustfs/rustfs/pull/5699
• fix(ci): block PR-controlled execution in performance A/B workflow by @overtrue in https://github.com/rustfs/rustfs/pull/5705
• refactor(time): migrate audit and notify timestamps to jiff by @houseme in https://github.com/rustfs/rustfs/pull/5707
• perf(observability): avoid sampler stat allocations by @houseme in https://github.com/rustfs/rustfs/pull/5708
• fix(compose): set log directory and wait for permission helper by @lqb in https://github.com/rustfs/rustfs/pull/5646
• test(e2e): add P0/P1 regression tests for recurring issue patterns by @overtrue in https://github.com/rustfs/rustfs/pull/5709
• fix(iam): disambiguate OIDC virtual parent IDs by @overtrue in https://github.com/rustfs/rustfs/pull/5700
• perf(observability): avoid cgroup path allocation by @houseme in https://github.com/rustfs/rustfs/pull/5711
• refactor(metrics): migrate scanner report timestamps to jiff by @houseme in https://github.com/rustfs/rustfs/pull/5710
• fix(replication): report FAILED when replication put options cannot be built by @overtrue in https://github.com/rustfs/rustfs/pull/5717
• fix(iam): invalidate peer STS caches on revocation by @overtrue in https://github.com/rustfs/rustfs/pull/5718
• fix(quota): admit writes against a persisted usage baseline while authoritative usage is unavailable by @overtrue in https://github.com/rustfs/rustfs/pull/5722
• fix(replication): make bucket replication rules editable from clients by @reatang in https://github.com/rustfs/rustfs/pull/5715
• fix(ecstore): reclaim synthetic inline-rollback dirs after rename commit by @overtrue in https://github.com/rustfs/rustfs/pull/5724
• fix(filemeta): redact sealed keys and elide inline data in FileInfo Debug by @overtrue in https://github.com/rustfs/rustfs/pull/5725
• fix(heal): bound per-object logging by @anthonymartin in https://github.com/rustfs/rustfs/pull/5719
• fix(targets): surface redacted construction error detail in target failures by @overtrue in https://github.com/rustfs/rustfs/pull/5729
• fix(heal): demote per-object heal logs and cap erasure-set failure warns by @overtrue in https://github.com/rustfs/rustfs/pull/5727
• fix(quota): keep the degraded-baseline fallback off the write path's stack by @overtrue in https://github.com/rustfs/rustfs/pull/5728
• fix(ecstore): make inline-rollback reclamation file-precise to keep #5703's child-key safety by @overtrue in https://github.com/rustfs/rustfs/pull/5732
• fix(s3): degrade multipart listings per upload instead of failing the bucket by @overtrue in https://github.com/rustfs/rustfs/pull/5721
• fix(ecstore): make local disk map initialization replace stale topology by @overtrue in https://github.com/rustfs/rustfs/pull/5734
• test(ecstore): deflake multipart listing tests under plain cargo test by @overtrue in https://github.com/rustfs/rustfs/pull/5730
• refactor(ecstore): unify remaining heal logs to structured event style by @overtrue in https://github.com/rustfs/rustfs/pull/5720
• chore(deps): refresh mimalloc revision by @houseme in https://github.com/rustfs/rustfs/pull/5736
• ci(scripts): add s3s footprint ratchet ahead of s3gate migration by @overtrue in https://github.com/rustfs/rustfs/pull/5739
• fix(auth): restore filtered ListBuckets fallback by @overtrue in https://github.com/rustfs/rustfs/pull/5726
• feat(ci): add DEB/RPM packaging workflow by @majinghe in https://github.com/rustfs/rustfs/pull/5738
• fix: bump s3_error! footprint baseline to 1687 for auth ListBuckets fix by @overtrue in https://github.com/rustfs/rustfs/pull/5747
• fix(auth): route ListBuckets denial through ApiError to hold s3s ratchet by @reatang in https://github.com/rustfs/rustfs/pull/5755
• fix(site-replication): send peer join to MinIO peer/join route with encrypted payload by @reatang in https://github.com/rustfs/rustfs/pull/5748
• fix(madmin): accept MinIO PascalCase SRInfo fields and nil-map nulls by @reatang in https://github.com/rustfs/rustfs/pull/5749
• feat(table-catalog): complete namespace REST contracts by @marshawcoco in https://github.com/rustfs/rustfs/pull/5745
• fix(replication): send source versionId as query param to remote targets by @reatang in https://github.com/rustfs/rustfs/pull/5752
• fix(replication): accept remote target healthCheckDuration nanoseconds by @reatang in https://github.com/rustfs/rustfs/pull/5754
• fix(site-replication): use MinIO-compatible sts-account IAM item type by @reatang in https://github.com/rustfs/rustfs/pull/5750
• fix(table-catalog): route read_bounded_json_body errors through ApiError to hold s3s ratchet by @overtrue in https://github.com/rustfs/rustfs/pull/5759
• fix(replication): schedule replication for CopyObject and snowball extracted objects by @reatang in https://github.com/rustfs/rustfs/pull/5753
• fix(auth): log structured denial reasons for generic AccessDenied responses by @overtrue in https://github.com/rustfs/rustfs/pull/5761
• fix(ecstore): preserve checksums through write transforms by @anthonymartin in https://github.com/rustfs/rustfs/pull/5765
• perf: add RPC auth profiling diagnostics by @houseme in https://github.com/rustfs/rustfs/pull/5775
• obs: mirror log attributes into loki lines by @houseme in https://github.com/rustfs/rustfs/pull/5776
• fix(site-replication): translate policy mapping userType at MinIO wire boundary by @reatang in https://github.com/rustfs/rustfs/pull/5751
• fix(kms): report unreadable keys and bound list-keys page size by @overtrue in https://github.com/rustfs/rustfs/pull/5764
• test(admin): pin the KMS admin route contract as a snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5766
• fix(kms): hold the Local key directory and its files owner-only by @overtrue in https://github.com/rustfs/rustfs/pull/5768
• feat(table-catalog): validate Iceberg metadata graphs by @marshawcoco in https://github.com/rustfs/rustfs/pull/5758
• fix(replication): report remote target latency as Go duration nanoseconds by @reatang in https://github.com/rustfs/rustfs/pull/5771
• test(heal): cover partial rename retry admission by @cxymds in https://github.com/rustfs/rustfs/pull/5772
• fix(auth): align ListBuckets discovery with IAM policies by @GatewayJ in https://github.com/rustfs/rustfs/pull/5746
• fix(logging): bound hot-path span amplification by @anthonymartin in https://github.com/rustfs/rustfs/pull/5763
• feat(kms): report which keys have outlived their rotation period by @overtrue in https://github.com/rustfs/rustfs/pull/5769
• perf(metrics): count internode RPC auth failures by @houseme in https://github.com/rustfs/rustfs/pull/5777
• fix(capacity): back off timed-out scans by @anthonymartin in https://github.com/rustfs/rustfs/pull/5770
• feat(rpc): expose and auto-size replay cache capacity by @houseme in https://github.com/rustfs/rustfs/pull/5781
• fix(scanner): publish bounded observational usage by @anthonymartin in https://github.com/rustfs/rustfs/pull/5742
• fix(ecstore): heal partial ordinary puts by @cxymds in https://github.com/rustfs/rustfs/pull/5783
• fix(ci): ignore strings in s3s footprint ratchet by @cxymds in https://github.com/rustfs/rustfs/pull/5787
• fix(ecstore): bind multipart convergence heal versions by @cxymds in https://github.com/rustfs/rustfs/pull/5786
• fix(ecstore): parse ARN region and id in display order by @reatang in https://github.com/rustfs/rustfs/pull/5790
• fix(ecstore): fence data movement source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5794
• fix(replication): tolerate Go zero-value expiration and ignore latency in remote target requests by @reatang in https://github.com/rustfs/rustfs/pull/5789
• fix(rebalance): commit stats after source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5795
• fix(s3): resume in-flight GET streams after rebalance relocation by @deadspacewii in https://github.com/rustfs/rustfs/pull/5791
• ci: install awscurl for full e2e tests by @cxymds in https://github.com/rustfs/rustfs/pull/5796
• fix(capacity): stop background schedulers on shutdown by @cxymds in https://github.com/rustfs/rustfs/pull/5797
• fix(ecstore): preserve newer writes during data movement by @cxymds in https://github.com/rustfs/rustfs/pull/5798
• fix(ecstore): reject over-NAME_MAX key segments up front; classify irreconcilable parity as corrupt metadata by @overtrue in https://github.com/rustfs/rustfs/pull/5804
• fix(admin): stop logging STS AssumeRole JWT claims by @overtrue in https://github.com/rustfs/rustfs/pull/5802
• fix(replication): madmin reset/diff wire compat and config validation by @reatang in https://github.com/rustfs/rustfs/pull/5799
• ci(e2e): stabilize full-gate tooling by @cxymds in https://github.com/rustfs/rustfs/pull/5805
• perf(ecstore): memoize bucket-incarnation fence validation under lifecycle read-lock coverage by @overtrue in https://github.com/rustfs/rustfs/pull/5782
• perf(storage): skip read-version JSON for bin peers by @houseme in https://github.com/rustfs/rustfs/pull/5808
• fix(s3select): replace deprecated parquet reader by @houseme in https://github.com/rustfs/rustfs/pull/5811
• fix(scanner): retry a superseded usage snapshot in seconds, not a full cycle by @overtrue in https://github.com/rustfs/rustfs/pull/5814
• docs(runtime): document allocator reclaim runtime by @houseme in https://github.com/rustfs/rustfs/pull/5800
• fix(admin): serve the usage a scan measured instead of blanking the whole snapshot by @overtrue in https://github.com/rustfs/rustfs/pull/5818
• perf(utils): avoid metadata key lowercase allocation by @houseme in https://github.com/rustfs/rustfs/pull/5823
• perf(ecstore): cache modern erasure codec construction by @houseme in https://github.com/rustfs/rustfs/pull/5824
• fix(ecstore): enforce the NAME_MAX segment budget on the write path too by @overtrue in https://github.com/rustfs/rustfs/pull/5826
• fix(storage): reserve internal encryption prefixes in user metadata by @reatang in https://github.com/rustfs/rustfs/pull/5819
• refactor(kms): close the low-severity follow-ups from the #5668 adversarial re-review by @reatang in https://github.com/rustfs/rustfs/pull/5817
• fix(policy): support version ID condition keys by @cxymds in https://github.com/rustfs/rustfs/pull/5810
• feat(rpc): advertise cross-pool fence capability by @cxymds in https://github.com/rustfs/rustfs/pull/5809
• test(e2e): make scanner snapshot tests deterministic by @cxymds in https://github.com/rustfs/rustfs/pull/5812
• test(ecstore): stabilize free-version enqueue retry by @cxymds in https://github.com/rustfs/rustfs/pull/5813
• test(e2e): align backpressure assertion with recovery by @cxymds in https://github.com/rustfs/rustfs/pull/5815
• test(e2e): wait for authoritative quota usage by @cxymds in https://github.com/rustfs/rustfs/pull/5816
• fix(table-catalog): fix object kind validation by @kinolaev in https://github.com/rustfs/rustfs/pull/5784
• fix(rebalance): drain entry tasks before listing retry by @cxymds in https://github.com/rustfs/rustfs/pull/5820
• fix(rpc): skip batch read-version JSON for msgpack peers by @houseme in https://github.com/rustfs/rustfs/pull/5825
• docs(agents): make the structured-logging rule reachable and enforceable by @overtrue in https://github.com/rustfs/rustfs/pull/5828
• fix(ecstore): purge the stale destination data dir on healing rename_data commits by @terem42 in https://github.com/rustfs/rustfs/pull/5822
• fix(rebalance): defer changed source cleanup by @cxymds in https://github.com/rustfs/rustfs/pull/5829
• fix(ecstore): raise replay cache auto capacity by @houseme in https://github.com/rustfs/rustfs/pull/5833
• chore(release): bump version to 1.0.0-rc.1 by @overtrue in https://github.com/rustfs/rustfs/pull/5834

• @ccccpj made their first contribution in https://github.com/rustfs/rustfs/pull/5666
• @themiguelamador made their first contribution in https://github.com/rustfs/rustfs/pull/5670
• @rdiperri-wasabi made their first contribution in https://github.com/rustfs/rustfs/pull/5679
• @lqb made their first contribution in https://github.com/rustfs/rustfs/pull/5646
• @anthonymartin made their first contribution in https://github.com/rustfs/rustfs/pull/5719
• @deadspacewii made their first contribution in https://github.com/rustfs/rustfs/pull/5791
• @kinolaev made their first contribution in https://github.com/rustfs/rustfs/pull/5784
• @terem42 made their first contribution in https://github.com/rustfs/rustfs/pull/5822

Full Changelog: https://github.com/rustfs/rustfs/compare/1.0.0-beta.12...1.0.0-rc.1-preview.1

Download page What's new highlights

Download page What's new highlights