Skip to content

v2.2.0

Choose a tag to compare

@source-release-bot source-release-bot released this 02 Jul 18:04
b7409ab

2.2.0 (2026-07-01)

Features

  • accept multiple audiences for /.sts token exchange (#163) (e911496)
  • analytics: log request duration and client IP (#153) (cad41b1)
  • authorize and enable writes to data connections (#162) (85972e8)
  • make STS max session TTL configurable via env var (#165) (39d15f5)
  • OIDC provider (#132) (5671b64)
  • per-connection backend authentication via OIDC federation (#147) (2f7a12f)
  • worker: aggregate live-globe activity by datacenter (#171) (c0a3169)

Bug Fixes

  • deps: bump quinn-proto to 0.11.15 (RUSTSEC-2026-0185) (#161) (189e348)
  • registry: sync product model with source.coop#284 (drop mirror config, use visibility) (#149) (8ecf9b4)
  • return clear 400 for keyless writes instead of misleading sha256 error (#168) (f1187f5)
  • sigv4: use encoded request path for inbound signature verification (#176) (56a9520)
  • sts: bound the AssumeRoleWithWebIdentity call with a request timeout (#172) (fa463c7)