Apache OpenDAL reqsign 0.20.7

Apache OpenDAL reqsign 0.20.7

Source release: Apache distribution (source archive, signature, SHA-512, KEYS).

Release vote · Vote result

The signed tag v0.20.7 points to the voted RC commit 6d31aed1acf67506ed8df35775fb321a8be8a984.

Notable changes:

• Add Aliyun STS AssumeRole credential grants.
• Accept caller-provided subject tokens for AWS, Azure, and Google exchanges.
• Add Google service-account impersonation grants and service-account token providers.
• Preserve Google provider-discovered signer identities for IAMCredentials query signing.
• Fix S3 Express session-provider grants and deduplicate concurrent Azure user-delegation key requests.
• Unify async synchronization with AsyncBand and expand Azure and Google live credential-provider tests.

Compatibility note:

Google Credential now has a public signer_email field. Callers using exhaustive struct literals must add signer_email: None or ..Default::default(); exhaustive patterns must include the field or ... Existing constructors and access to service_account and token continue to work.

Crate versions:

• reqsign-core: 3.3.2
• reqsign-command-execute-tokio: 3.0.7
• reqsign-file-read-tokio: 3.0.7
• reqsign-http-send-reqwest: 4.0.7
• reqsign-aliyun-oss: 3.2.0
• reqsign-aws-core: 3.2.0
• reqsign-aws-v4: 3.3.1
• reqsign-aws-v4a: 3.0.6
• reqsign-azure-storage: 3.3.0
• reqsign-google: 3.2.0
• reqsign-huaweicloud-obs: 3.0.7
• reqsign-oracle: 3.0.7
• reqsign-tencent-cos: 3.0.7
• reqsign-volcengine-tos: 3.1.3
• reqsign: 0.20.7

v0.20.6

Apache OpenDAL reqsign 0.20.6 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.6/

Vote and result:

• Vote: #845
• Result: #850

Notable changes:

• Add automatic S3 Express session configuration from directory bucket names.
• Add maximum-allowed S3 Express sessions, IAM signing, and custom CreateSession endpoints.
• Deduplicate concurrent signer credential refreshes through the shared credential cache.
• Add live AWS credential-provider coverage for the supported default provider chain.

Crate versions:

• reqsign: 0.20.6
• reqsign-core: 3.3.1
• reqsign-aliyun-oss: 3.1.5
• reqsign-aws-core: 3.1.1
• reqsign-aws-v4: 3.3.0
• reqsign-aws-v4a: 3.0.5
• reqsign-azure-storage: 3.2.1
• reqsign-command-execute-tokio: 3.0.6
• reqsign-file-read-tokio: 3.0.6
• reqsign-google: 3.1.1
• reqsign-http-send-reqwest: 4.0.6
• reqsign-huaweicloud-obs: 3.0.6
• reqsign-oracle: 3.0.6
• reqsign-tencent-cos: 3.0.6
• reqsign-volcengine-tos: 3.1.2

v0.20.5

Apache OpenDAL Reqsign 0.20.5

Emergency patch release. Final tag for the voted candidate v0.20.5-rc.1.

• Vote: #826
• Result: #827
• Source release: https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.5/

v0.20.5-rc.1

Release candidate for Apache OpenDAL Reqsign 0.20.5

Tag points to commit a8a8d43955b7ea3f231fbaff00db6767c26f5274.

Source release candidate:
https://dist.apache.org/repos/dist/dev/opendal/reqsign-0.20.5/

v0.20.4

Apache OpenDAL reqsign 0.20.4 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.4/

Notable changes:

• Add AWS SigV4a header signing and query presigning through dedicated aws-core and aws-v4a crates.
• Add explicit AWS profile selection across the default credential provider and prefer it over AWS_PROFILE.
• Add presigned URL support for Volcengine TOS.
• Migrate Rust crate releases to crates.io Trusted Publishing with GitHub OIDC.

Crate versions:

• reqsign: 0.20.4
• reqsign-core: 3.2.1
• reqsign-aliyun-oss: 3.1.3
• reqsign-aws-core: 3.0.3
• reqsign-aws-v4: 3.1.0
• reqsign-aws-v4a: 3.0.3
• reqsign-azure-storage: 3.1.2
• reqsign-command-execute-tokio: 3.0.4
• reqsign-file-read-tokio: 3.0.4
• reqsign-google: 3.0.4
• reqsign-http-send-reqwest: 4.0.4
• reqsign-huaweicloud-obs: 3.0.4
• reqsign-oracle: 3.0.4
• reqsign-tencent-cos: 3.0.4
• reqsign-volcengine-tos: 3.1.0

v0.20.3

Apache OpenDAL reqsign 0.20.3 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.3/

Notable changes:

• Preserve the original wire request representation during signing.
• Define credential validity contracts for signing implementations.

Crate versions:

• reqsign: 0.20.3
• reqsign-core: 3.2.0
• reqsign-aliyun-oss: 3.1.2
• reqsign-aws-v4: 3.0.3
• reqsign-azure-storage: 3.1.1
• reqsign-command-execute-tokio: 3.0.3
• reqsign-file-read-tokio: 3.0.3
• reqsign-google: 3.0.3
• reqsign-http-send-reqwest: 4.0.3
• reqsign-huaweicloud-obs: 3.0.3
• reqsign-oracle: 3.0.3
• reqsign-tencent-cos: 3.0.3
• reqsign-volcengine-tos: 3.0.3

v0.20.2

Apache OpenDAL reqsign 0.20.2 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.2/

Notable changes:

• Add Azure Storage credential provider setters for client secret and workload identity providers.
• Validate credentials against the intended signature expiration time.
• Make JWT support in reqsign-core optional.
• Upgrade quick-xml to 0.41 and update selected GitHub Actions dependencies.

Crate versions:

• reqsign: 0.20.2
• reqsign-core: 3.1.0
• reqsign-aliyun-oss: 3.1.1
• reqsign-aws-v4: 3.0.2
• reqsign-azure-storage: 3.1.0
• reqsign-command-execute-tokio: 3.0.2
• reqsign-file-read-tokio: 3.0.2
• reqsign-google: 3.0.2
• reqsign-http-send-reqwest: 4.0.2
• reqsign-huaweicloud-obs: 3.0.2
• reqsign-oracle: 3.0.2
• reqsign-tencent-cos: 3.0.2
• reqsign-volcengine-tos: 3.0.2

v0.20.1

Apache OpenDAL reqsign 0.20.1 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.1/

Notable changes:

• Add Aliyun OSS Signature V2 signing support.
• Support explicit Aliyun OIDC configuration.
• Remove the jsonwebtoken dependency from the workspace.
• Update RustCrypto hash dependencies and selected GitHub Actions dependencies.
• Fix the missing LICENSE file in the published reqsign-volcengine-tos crate.

Crate versions:

• reqsign: 0.20.1
• reqsign-aliyun-oss: 3.1.0
• reqsign-http-send-reqwest: 4.0.1
• other reqsign service/context/core crates: 3.0.1

v0.20.0

Apache OpenDAL Reqsign 0.20.0 is now available.

Notable changes:

1. Migrate core async traits to MaybeSend futures and remove async_trait.
2. Migrate default credential provider APIs across services.
3. Add Volcengine TOS support.
4. Add Google external account credential providers.
5. Expand Aliyun OSS credential providers and signing support.

Full changes:

v0.19.0...v0.20.0

v0.20.0-rc.1

Release candidate for Apache OpenDAL Reqsign 0.20.0