0.24.1

Test

• storage: cover info/collections timestamp after collection delete (#2713) (11e1ba9f)

Chore

• deps:
  • update deps with critical and high vulnerability findings (#2728) (7f3b7347)
  • bump the prod-deps group across 1 directory with 15 updates (#2725) (2924e883)
  • bump cryptography in / (#2720) (4068bffc)
  • bump pyasn1 (#2726) (34f6addb)
  • bump pyasn1 in /tools/payload-reconciler (#2724) (8e2e7d27)
  • bump pyasn1 from 0.6.4 to 0.6.5 in /tools/tokenserver (#2723) (d0ff218d)
  • bump the actions-deps group with 7 updates (#2721) (a17aeb58)
  • bump authlib in /tools/tokenserver/loadtests (#2708) (66a0e941)
  • bump msgpack in /tools/tokenserver/loadtests (#2700) (b2c49d5d)
  • bump opentelemetry-api in /tools/spanner (#2689) (7f002cf6)
  • bump opentelemetry-api (#2686) (3820b10e)
  • bump brotli in /tools/tokenserver/loadtests (#2688) (8e5f3710)
  • bump certifi in /tools/tokenserver/loadtests (#2692) (418789b7)
  • bump certifi (#2693) (1bfc65c1)
  • bump certifi from 2026.5.20 to 2026.10.18 (#2691) (7e28269e)
  • update for RUSTSEC-2026-{0385,0391,0398,0403,0410} (#2690) (b9570b3f)
• deps-dev:
  • bump black from 26.5.1 to 26.10.1 (#2712) (a8e2f648)
  • bump virtualenv from 21.14.9 to 21.14.13 (#2711) (e06052a2)
  • bump filelock from 3.29.1 to 4.2.1 (#2710) (593d4abc)
  • bump black in /tools/integration_tests (#2709) (2c0d5018)
  • bump black (#2697) (7e51b2f0)
  • bump black in /tools/syncstorage-loadtest (#2685) (cbccee70)
  • bump black in /tools/payload-reconciler (#2687) (eb4d2f7e)
• docker: add OCI source label to the syncstorage-rs image (#2701) (bb7f0396)

Bug Fixes

• stop a failed begin from being reported as a rollback error (#2698) (0d7dfed8)
• deps:
  • bump utoipa-swagger-ui to 10.0.2 for RUSTSEC-2026-0429 (#2722) (5eb7a7f3)
  • bump libz-sys to 1.1.31 for RUSTSEC-2026-0418 (#2716) (b374e898)
• postgres: count payload size in bytes, not characters (#2705) (52d60639)
• syncserver: use one format for invalid DSN test panics (#2703) (b656d621)
• syncstorage-mysql: update only the re-appended BSO in a batch (#2729) (19b9db93)
• tokenserver:
  • reject client states too long for the db (#2727) (b646f8a3)
  • accept integer-like JWK fields from env vars (#2702) (c38b4bcc)
  • tag tokens without an origin as purge_script (#2704) (66fbc1d1)

Doc

• fix sentry project slug and stale sentry docs (#2717) (190adea1)
• drop references to the removed sync-test and sync-jobs charts (#2683) (fd4e22e5)