v0.0.13

What's Changed

• DX-3149: agent guidance and CORS diagnostics by @ytkimirti in #10
• CLOUD-4803: fix signedReadUrl live test by @ytkimirti in #16

Full Changelog: v0.0.12...v0.0.13

v0.0.12

What's Changed

• DX-3201: infer uploadHandler state type by @ytkimirti in #13
• DX-3171: send multipart parts four at a time by @ytkimirti in #11
• DX-3172: add a retry option to Bucket by @ytkimirti in #12
• DX-3088: version the upload protocol by @ytkimirti in #8
• DX-3200: clear error for browser upload outside a browser by @ytkimirti in #14

Full Changelog: v0.0.11...v0.0.12

v0.0.11

What's Changed

• DX-2984: add @see lines and caveats to JSDoc by @ytkimirti in #6

Full Changelog: v0.0.10...v0.0.11

v0.0.10

What's Changed

• DX-3114: keep the storage provider out of error messages by @CahidArda in #9

New Contributors

• @CahidArda made their first contribution in #9

Full Changelog: v0.0.9...v0.0.10

v0.0.9

uniquePath keeps IDs and filenames exactly as given (case, spaces, Unicode, slashes) and only adds the random suffix. The upload handler answers a traversing path (../x.png) with 400 invalid_input instead of a 500.

Size options accept binary units: 32MiB = 33,554,432 bytes, 32MB stays 32,000,000. Reads and multipart completion keep the stored Content-Length and ETag; invalid lengths are rejected instead of read as 0.

PR: #4

v0.0.8

Bundled docs updated for 0.0.7's signing changes: URLs are signed by Upstash, links last at most 10 minutes. No code changes.

v0.0.7

Signed URLs (signedReadUrl, signedUploadUrl, upload handler PUT and multipart parts) are now signed by Upstash (/v1/presign), no longer with the bucket's temporary credential, which anyone holding a URL could use on the whole bucket.

URLs last at most 10 minutes: a longer expiresIn is shortened, and the upload default drops from 1h to 10 minutes. Paths with an empty segment (dir/, a//b) are refused for signing.

PR: #7

v0.0.7-canary.20260925204134 presign

Signed URLs come from Upstash (/v1/presign) instead of the temporary credential. Works only on buckets in PRESIGN_ENABLED until it is ALL.

PR: #7

v0.0.6

Bundles Blob docs (docs/) and source (src/) in the npm package for coding agents, and adds an AI agents section to the README.

Switches development and release tooling to pnpm.

PRs: #1, #5

v0.0.6-canary.20260914173111 preserved paths and docs

Combined Agent Bench canary with character-preserving uniquePath, object metadata fixes, and the matching documentation.

SDK changes:

• #4 at 96c81e2
• #1 at c89affe

Bundled docs are pinned to upstash/docs#842 at d106c1f000d1b4f0acfb39c77e2180c281ed41e8. All 24 bundled pages were compared with that commit.

Combined SDK commit: 8c75d0b.

uniquePath preserves characters and adds a random suffix only to the final filename. It rejects unsafe separators, control characters and traversal instead of silently normalizing them. Keep saved keys for existing objects.

Validation: 343 unit tests, typecheck, lint, build and package checks pass locally; documented examples pass against the SDK. Release CI gates npm publication.

Refs https://linear.app/upstash/issue/DX-3033/blob-js-agent-bench-fixes