v0.0.12

What's Changed

• Let a service choose the request id by @fujiwara in #123
• Explain every AccessDenied to the observer by @fujiwara in #126
• Document how to expose and read the cache stats by @fujiwara in #125

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• Add virtual-hosted-style addressing alongside path style by @fujiwara in #121

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• Run the compose ceph backend on the tentacle release image by @fujiwara in #117
• Run the s3-tests workflow against the compose ceph service by @fujiwara in #119
• Add the bucket-inspection reads by @fujiwara in #120

Full Changelog: v0.0.9...v0.0.10

v0.0.9

What's Changed

• Record the S3 operation name on Op by @fujiwara in #115

Full Changelog: v0.0.8...v0.0.9

v0.0.8

What's Changed

• Reduce docs/s3-tests.md to the ongoing operation of the suite by @fujiwara in #105
• Add curl and aws4 signers to the SigV4 cross-check by @fujiwara in #107
• Reject requests carrying unsigned x-amz-* headers by @fujiwara in #108
• Read request headers through a signature-aware accessor by @fujiwara in #109
• Split Op's object attributes into Request and Response by @fujiwara in #110
• Recover a panicking request at the boundary by @fujiwara in #111
• Drop Go 1.25, build and test on 1.26 and 1.27 by @fujiwara in #112
• Name the header literals whose two ends must agree by @fujiwara in #113
• Forward trailer checksum algorithms to https backends only by @fujiwara in #114

Full Changelog: v0.0.7...v0.0.8

v0.0.7

What's Changed

• Trim comments that restate the code by @fujiwara in #96
• Restructure documentation by audience by @fujiwara in #98
• Fuzz the aws-chunked decoder; refuse truncated streams by @fujiwara in #99
• Fuzz SigV4 verification in both directions by @fujiwara in #100
• Fuzz browser-based POST upload verification by @fujiwara in #101
• Explore the fuzz targets nightly by @fujiwara in #102
• Cross-check SigV4 verification against botocore by @fujiwara in #103
• Document the measured SigV4 canonicalization landscape by @fujiwara in #104

Full Changelog: v0.0.6...v0.0.7

v0.0.6

What's Changed

• Add performance benchmark harness (bench/) by @fujiwara in #91
• Add a bandwidth-limit hook for per-stream traffic shaping by @fujiwara in #93
• bench: measure the bandwidth-limit hook by @fujiwara in #95

Full Changelog: v0.0.5...v0.0.6

v0.0.5

What's Changed

• Add ceph/s3-tests compatibility harness and report by @fujiwara in #81
• Fix the s3rp bugs found by the s3-tests run by @fujiwara in #83
• Add a manually-triggered s3-tests workflow by @fujiwara in #84
• Add a MicroCeph setup script for testing against a current Ceph by @fujiwara in #85
• Add analysis instructions for s3-tests results by @fujiwara in #86
• Implement GetObjectAttributes and partNumber object reads by @fujiwara in #87
• Teach triage.py the verified failure classifications by @fujiwara in #88
• Update mise-action to v4 by @fujiwara in #89
• Make the triage report action-oriented by @fujiwara in #90

Full Changelog: v0.0.4...v0.0.5

v0.0.4

What's Changed

• Hide backend identity in responses (region, owner) and report real bucket creation dates by @fujiwara in #68
• Support cross-tenant access grants in bucket policies by @fujiwara in #70
• Make policy principals always tenant-qualified by @fujiwara in #71
• Add source-IP conditions to bucket policy evaluation by @fujiwara in #72
• Require the bucket name to parse a bucket policy by @fujiwara in #73
• Move CORS rule validation into the cors package by @fujiwara in #74
• Move definition validation into the store package by @fujiwara in #75
• Extract the service-building guide into docs/building-a-service.md by @fujiwara in #76
• Allow digit-leading tenant and user names by @fujiwara in #77
• Expose the access key id on RequestInfo by @fujiwara in #78
• Stop proxying bucket-configuration writes by @fujiwara in #79
• Pass the presented session token to the store lookup by @fujiwara in #80

Full Changelog: v0.0.3...v0.0.4

v0.0.3

What's Changed

• Bound the backend client cache with an LRU and make cache sizes adjustable by @fujiwara in #50
• Pass opaque store metadata through to the hooks on Op by @fujiwara in #52
• Remove the sqlite store implementation by @fujiwara in #53
• Add optional signing-region pinning to the verifier by @fujiwara in #54
• Let a service contribute s3.Options to backend clients by @fujiwara in #55
• Make the policy surface syntax a parse-time Dialect by @fujiwara in #56
• Support browser-based POST uploads (SigV4 POST policy) by @fujiwara in #57
• Pass SSE-S3/SSE-KMS through to the backend, refuse SSE-C loudly by @fujiwara in #58
• Document the production boundaries: lifecycle, quota, pre-auth cost by @fujiwara in #59
• Expose cache statistics for sizing the client and signer caches by @fujiwara in #60
• Accept temporary credentials (session tokens) by @fujiwara in #61
• Harden the aws-chunked decoder against three review findings by @fujiwara in #62
• Give the client canonical error messages, not the backend's by @fujiwara in #63
• Fix two stale comments, drop six that restate the code by @fujiwara in #64
• Move the gateway tests into s3gw by @fujiwara in #65
• Measure coverage in CI by @fujiwara in #66
• Test checksum and s3xml directly by @fujiwara in #67

Full Changelog: v0.0.2...v0.0.3