v0.36.0

0.36.0 (2026-10-31)

⚠ BREAKING CHANGES

• runtime: the shims read no contract, and the python314 image ships no fastjsonschema (ADR-0304)

Features

• contract: funcd defines each contract rule once (ADR-0301) (d66ebc3)
• gateway: every call to a worker runs one chain of invokePlugins (ADR-0302) (d66ebc3)
• gateway: funcd checks every call against its contract, and the shims stop checking (ADR-0303) (d66ebc3)
• runtime: the shims read no contract, and the python314 image ships no fastjsonschema (ADR-0304) (3a54c9f)

Bug Fixes

• deps: pin funcd-python v0.18.1, so warm Python calls no longer wait about 40 ms (#1341) (5f21f5d)

v0.35.0

0.35.0 (2026-10-29)

⚠ BREAKING CHANGES

• eventing: the event store's directory and config key are named eventstore (ADR-0300)

Features

• eventing: the event store's directory and config key are named eventstore (ADR-0300) (fef70f2)

v0.34.0

0.34.0 (2026-10-29)

⚠ BREAKING CHANGES

• runtime: a worker's root filesystem is read-only, its /tmp counts in its memory, and a Lake engine writes into a scratch of fixed size; lake.catalogMaxSize defaults to 256MiB (ADR-0294)

Features

• platform: a start on a full data filesystem waits for space instead of exiting (ADR-0297) (7b45172)
• runtime: a worker's root filesystem is read-only, its /tmp counts in its memory, and a Lake engine writes into a scratch of fixed size; lake.catalogMaxSize defaults to 256MiB (ADR-0294) (7b45172)
• storage: workload writes stop at a free-space floor of the data filesystem, storage.minFreeSize (ADR-0296) (7b45172)
• volume: a volume's quota limits its inodes in proportion to its size (ADR-0295) (7b45172)

Bug Fixes

• iam: a writer role writes only the data kinds its actions name (7b45172)
• volumes: loop devices read and write their image with direct I/O (7b45172)
• volumes: the volume image keeps the blocks preallocated for it (7b45172)

v0.33.0

0.33.0 (2026-10-28)

⚠ BREAKING CHANGES

• storage: a store caps what it holds in spec.quota, and the per-item caps move into it (ADR-0292)
• function: a Function's workers get CPU and memory limits, and an unsized solo Function gets 1 CPU and 512Mi (ADR-0291)

Features

• function: a Function's workers get CPU and memory limits, and an unsized solo Function gets 1 CPU and 512Mi (ADR-0291) (a6fa161)
• lake: a Lake's catalog lives in a platform catalog store that only its engine reaches (ADR-0293) (a6fa161)
• storage: a store caps what it holds in spec.quota, and the per-item caps move into it (ADR-0292) (a6fa161)

v0.32.0

0.32.0 (2026-10-27)

Features

• s3gateway: a namespace held for its data refuses writes through the S3 gateway (ADR-0290, amended) (17ed221)

v0.31.0

0.31.0 (2026-10-27)

Features

• dataplane: a namespace held for its data refuses calls until its owner's release (ADR-0290) (ef03630)

v0.30.1

0.30.1 (2026-10-25)

Bug Fixes

• backup: warn of rpoRisk while a call to the backup target waits (#1294) (bccade5)
• ci: the lanes' simulated host loss removes crun's state under /run (#1296) (7fb7c74)

v0.30.0

0.30.0 (2026-10-25)

⚠ BREAKING CHANGES

• funcdctl: backup plan prints an example and edits no file (ADR-0286)

Features

• backup: a platform restore finds the Backups its schedules made after the restored point (ADR-0287) (9fac108)
• funcdctl: backup plan prints an example and edits no file (ADR-0286) (9fac108)
• lake: a Lake retries a failed catalog save until one succeeds (ADR-0289) (9fac108)
• storage: a boot reclaim quarantines the data no object names instead of deleting it (ADR-0288) (9fac108)

v0.29.0

0.29.0 (2026-10-24)

Features

• blob: a file blob Put returns once its object is on disk, and a read refuses one that lost its bytes (ADR-0278) (#1258) (25dc0e3)
• lake: a Lake answers a commit once its catalog save covers it (ADR-0279) (#1263) (87acfb7)

Bug Fixes

• artifact: a pulled artifact reaches the disk before its cache dir is marked pulled (647381d)
• artifact: the cached platforms of an artifact survive a power loss (647381d)
• containerd: the CNI conflist survives a power loss after funcd's first start (d9a78a5)
• install: funcd install writes its systemd unit durably (d9a78a5)
• lake: a Lake stop lets the clients of the queries it cancelled read their interrupt error (ADR-0273) (#1265) (1aac5f6)
• provision: funcd install writes each runtime binary durably (647381d)
• s3gateway: the node master secret survives a power loss after it is written or restored (647381d)

v0.28.0

0.28.0 (2026-10-24)

⚠ BREAKING CHANGES

• api: a Bucket prefix's owner names its kind (ADR-0275) (#1237)

Features

• api: a Bucket prefix's owner names its kind (ADR-0275) (#1237) (5606318)
• lake: a Lake shows when its catalog saves fail (ADR-0276) (#1238) (bf26ced)
• runtime: a containerd worker gets one stop grace, set in funcdconfig.yaml (ADR-0277) (#1239) (f3c7dfb)