v1.6.1

Use unique temporary upload names to prevent concurrent same-key writes from interfering with each other. Keep existing objects after failed replacement streams and remove only the owned data listener. Scope unit tests to sources rather than generated dist duplicates. Bump storage-local to 0.2.1. Validation: full check, 27 tests (1 external S3 test skipped), production audit without known vulnerabilities.

v1.6.0 - Secure example server

Highlights

• Hardened example server with safe storage path resolution
• Added upload, download, delete and health endpoints
• Added upload limits, filename sanitization, rate limiting and async filesystem operations
• Added integration and path traversal security tests
• Replaced legacy deployment workflow with GitHub Actions Node 18/20/22 CI
• Refreshed README, example documentation and security policy
• Removed obsolete CircleCI/coveralls and built-in module dependencies

Validation

• npm run check passed locally
• GitHub Actions passed on Node 18, 20 and 22
• 202 tests passing

This release does not claim npm publication; npm authentication is not configured on the publishing machine.