Release 9.5.0

What's Changed

• CLDSRV-917: allow writing objects directly to a cold location by @francoisferrand in #6264
• CLDSRV-992: Match server access log entries instead of asserting an exact count by @anurag4DSB in #6275
• CLDSRV-992: Wait for the file data daemon before the S3 API by @anurag4DSB in #6277
• Ignore the request checksum when creating a delete marker by @maeldonn in #6267
• Allow partialFilterExpression in backbeat index add payload by @maeldonn in #6274
• CLDSRV-956: accept RestoreObject during the direct-to-cold archive window by @francoisferrand in #6291
• Server side encryption migrations should not be reported as an object… by @SylvainSenechal in #6292
• improvement(CLDSRV-995): remove obsolete memory backend Dockerfile by @francoisferrand in #6296
• CLDSRV-961 Tests for lifecycle listings over PHD master keys by @nicolas2bert in #6250
• CLDSRV-1003: stop overriding the review allowed-tools with an empty list by @leif-scality in #6300
• CLDSRV-961 Fix lifecycle listings stuck on PHD master keys by @nicolas2bert in #6310
• Set mongodb.shardCollections from MONGODB_SHARD_COLLECTIONS by @delthas in #6312
• CLDSRV-1002: format the whole codebase with prettier by @DarkIsDude in #6297
• INTEGRATION [PR#6297 > development/9.5] CLDSRV-1002: format the whole codebase with prettier by @bert-e in #6309
• Run on Node 24 by @francoisferrand in #6307
• Install arsenal and scubaclient from the npm registry instead of git by @francoisferrand in #6308
• Report scal-replica for replicas without the isReplica flag by @maeldonn in #6290
• Integrate Pull Replication's clean read into cloudserver by @SylvainSenechal in #6295
• CLDSRV-909: Reject CopyObject when source exceeds 5 GiB (backport) by @tcarmet in #6233
• Count non-localized versions when deleting a bucket by @SylvainSenechal in #6313
• CLDSRV-1015: Drop runtime dependency on @scality/cloudserverclient by @francoisferrand in #6314
• CLDSRV-1009: keep object metadata when restoring from cold storage by @francoisferrand in #6315
• CLDSRV-999: Drop unused and deprecated dependencies, refresh docs/test deps by @francoisferrand in #6317
• Take all restored object metadata from the archived object by @francoisferrand in #6319
• CLDSRV-1012: Fix CI development/7.10 by @BourgoisMickael in #6321
• Remove Orbit remote management by @francoisferrand in #6320
• CLDSRV-1012: Backport KMS error and socket leak on DataWrapper by @BourgoisMickael in #6322
• CLDSRV-1017: apply each key's own authorization verdict in multiObjectDelete by @DarkIsDude in #6323
• Fix OTEL traces missing MongoDB/Redis spans by @delthas in #6326
• Do not delete data on a CRR location when backbeat updates metadata by @SylvainSenechal in #6328
• CLDSRV-1022: remaining CVEs and dependency bumps by @francoisferrand in #6327
• impr(CLDSRV-1024): Fix mismatched min rate limit check by @tmacro in #6325
• CLDSRV-1012: Bump arsenal for DataWrapper leak by @BourgoisMickael in #6316
• Accept GLACIER/DEEP_ARCHIVE as cold locations, advertise the Veeam archive tier by @francoisferrand in #6329

Full Changelog: 9.4.3...9.5.0