v1.11.0

1.11.0 (2026-09-04)

Features

• drift: audit the reclaim ledger nightly (3bdd256)
• gc: reclaim a site per site.lifecycle run (260bd75)
• gc: state the retry policy, 12h claim TTL (e40c967)
• server: add X-Artemis-Version header (35a9391)
• site: purge the CDN edge on takedown (4aed372)

Bug Fixes

• auth: require exp on deploy-session jwt (5539cce)
• config: reject NaN sentry sample rate (f35a364)
• deploy: fence a finalized deploy against its permit (575c6bb)
• deploy: fence an upload into a reserved prefix (6c082d9)
• deploy: wire the fence off the valkey handle (0423bc2)
• deps: bump hatchet to v0.91.2 (GO-2026-6309) (aa9ae50)
• drift: print the ledger in drift-report (0359458)
• gc: alert on one reclaimable deploy (e3e69c1)
• gc: defer the terminal cron check-in (d4f203f)
• gc: sweep abandoned pending deploys nightly (c9a4e97)
• handler: drop the inert flush before the purge (25c2a20)
• handler: record errCode on four bodies (abf6f01)
• observability: sample release and reject (4a7bb42)
• pg: back off after a failed publish (d2eba02)
• pg: catch a no-tx index order hazard at build (7159f0a)
• pg: harden the no-tx index hazard scan (0065222)
• pg: leave updated_at alone on a reclaim claim (e434d12)
• pg: read the no-tx directive past a header (0a79573)
• pg: release the claim after a failed publish (3df30de)
• r2: stop on a truncated page without token (362e20c)
• site: purge the edge on every alias write (7e46811)

Reverts

• deploy: drop the per-file upload fence (e11e663)