v1.1.1

• Storage and Reliability

  • feat(cache): protect active downloads with durable reader leases and fenced deletion
  • feat(cache): validate storage representation before issuing download URLs
  • feat(storage): persist logical payload sizes via shared storage inventory
  • feat(cache): add capacity-based LRU eviction
  • feat(cleanup): reconcile physical storage orphaned outside the deletion outbox
  • fix(cache): serialize partsReadCloser reads against lease-loss closes
  • feat(storage): fsync filesystem uploads before commit
  • fix(storage): sweep orphaned .upload-* temporary files daily

• Protocol and Compatibility

  • feat(config): support GHES token issuer via ACTIONS_TOKEN_ISSUER
  • feat(httpapi): support protobuf Twirp CacheService requests and responses
  • fix(cache): match cache keys case-sensitively across SQL dialects
  • feat: add PostgreSQL and MySQL TLS configuration

• Security and API Hardening

  • fix(config): reject out-of-range cleanup retention values at startup
  • fix(httpapi): cap Twirp CacheService request body sizes
  • fix(httpapi): guard blocklist commit against invalid uploads and unbounded XML
  • fix(http): bound server and fallback proxy timeouts
  • fix: compare management API keys in constant time
  • fix(httpapi): hide internal error details from client responses
  • fix: return 503 when token verifier initialization fails
  • fix: prevent management pagination offset overflow
  • fix(config): warn at startup when the download URL signing secret is unset

• Database and Shutdown Reliability

  • fix(db): replace oversized upload unique index with tuple hash
  • feat(db): serialize schema migration across instances
  • fix: avoid false merge timeout during shutdown
  • fix(server): drain background database users before closing the database
  • fix: restore default signal handling during shutdown

• Observability

  • feat(observability): log download, materialization, and storage deletion failures
  • feat(metrics): expose Prometheus metrics surface

• Performance

  • fix(httpapi): batch management cache entry deletion
  • perf(storage): reuse pooled buffer for filesystem uploads