Skip to content

v2.4.0

Latest

Choose a tag to compare

@source-release-bot source-release-bot released this 05 Oct 23:08
c7dff42

2.4.0 (2026-10-05)

Features

  • sts: answer GetCallerIdentity with multistore 0.8.0 (#248) (0659a7b)
  • sts: exchange opaque API keys at /.sts by hash lookup (#235) (e9d2485)
  • sts: let platform IdP tokens act as accounts that trust them (#237) (14efd33)
  • sts: serve the FullAccess and ReadOnly roles (#236) (aa0abb3)

Bug Fixes

  • cache-control: review fixes for #227 (#250) (7bce43f)
  • cors: let browsers cache preflights for two hours (#251) (cd9218e)
  • deps: bump h2 to 0.4.18 for RUSTSEC-2026-0258 (#214) (52d9eb2)
  • deps: bump rustls to 0.23.45 for RUSTSEC-2026-0285 (#238) (188842b)
  • keep Cloudflare credentials out of build and install environments (#211) (e4ebade)