Skip to content

v3.14.3

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 17 Oct 23:29
v3.14.3
e9d585b
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

silo-pkg v3.14.3 speeds up policy evaluation while preserving authorization behavior. This is a source-only release of github.com/pgsty/silo-pkg/v3.

Changes

  • Add exact-lookup and wildcard-prefix fast paths to AdminAction.IsValid and HasResource (#11). Existing wildcard semantics and bucket-scoped admin resource checks are preserved.
  • Add equivalence tests, a fuzz target, and a many-bucket policy benchmark.
  • Independent benchmarks on an Apple M5 Max with Go 1.27.2, using six alternating single-CPU runs, reduced median policy-evaluation time in the many-bucket scenario from 303.2 µs to 54.4 µs (about 82%), with no additional allocations. This is a policy microbenchmark, not an end-to-end S3 throughput claim.

Compatibility

Public APIs, policy formats, authorization decisions, dependencies, and the Go 1.26 library floor are unchanged from v3.14.2. Server builds can adopt this patch while existing mcli and standalone Console releases keep using v3.14.2. Applications must update the dependency and rebuild to receive the optimization; publishing this module does not update installed binaries or the existing Server draft.

require github.com/pgsty/silo-pkg/v3 v3.14.3

Validation

  • Lint and complete race tests on Go 1.27; Go 1.26 compatibility, LDAP integration, and vulnerability checks.
  • A 60-second equivalence fuzz run completed 4,616,957 executions without divergence.
  • Independent comparison of 50,000 policies and 970,020 policy evaluations against v3.14.2 found no differences, including merged policies.
  • SILO authorization regression tests passed. The published mcli 20261018 produced identical results against server builds using the old and new package.

Final-commit CI: Go, LDAP, VulnCheck.

Thanks to Denis Babchuk (@botdeniska) for the focused contribution and regression coverage, and Klaus Post (@klauspost) for the original work.

Changes since v3.14.2

Released commit: e9d585ba1e7a.

Assets 2
Loading