| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: versitygw-cli | Distribution: openSUSE:Factory:zSystems |
| Version: 1.10.0 | Vendor: openSUSE |
| Release: 1.1 | Build date: Thu Oct 29 06:37:38 2026 |
| Group: Unspecified | Build host: reproducible |
| Size: 77777144 | Source RPM: versitygw-1.10.0-1.1.src.rpm |
| Packager: https://bugs.opensuse.org | |
| Url: https://github.com/versity/versitygw | |
| Summary: Binary for versitygw, usable to connect to remote instances | |
This package only installs the versitygw binary to be able to connect to remote VersityGW instances.
Apache-2.0
* Thu Oct 29 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.10.0:
* Notice
- VersityGW Security Update: Go crypto/x509 Certificate Distrust
This release updates VersityGW’s Go toolchain to include Go’s
fix for CVE-2026-111943 (Go issue 82345). The fix blocks
certificate chains containing compromised eMudhra
intermediate certificates.
VersityGW uses Go’s certificate verification when connecting
to TLS-protected services, including S3-compatible storage,
IAM/OIDC providers, Vault, LDAP, and webhooks. Before the
fix, a network attacker able to intercept or redirect one of
these connections could potentially use a certificate issued
through an affected intermediate to impersonate the service.
After the update, Go rejects those chains, and connections to
endpoints still presenting them may fail until their
certificates are replaced.
This fix applies to binaries rebuilt with a patched Go
toolchain. Go 1.26.10 and Go 1.27.3 contain the fix; use a
later patched release if available. Existing VersityGW
binaries must be rebuilt and redeployed. Connections
configured to skip certificate verification do not receive
this protection. These release artifacts are built with Go
1.27.3.
Action: Upgrade to this VersityGW release and redeploy. If
you operate a TLS endpoint that VersityGW connects to,
confirm its certificate chain does not use a distrusted
intermediate.
* Changelog
- 2bece2f chore(deps): bump the dev-dependencies group with 38
updates
- 626ec9a chore(deps): bump the dev-dependencies group with 8
updates
- 9503489 docs(helm): note tpl caveats for extraObjects
- 1f7e6dd feat(helm): add extraObjects for additional manifests
- a987fb2 feat: run functional tests on FreeBSD in CI
- 1207dd1 fix(posix): make the listing skip-directory list
configurable
- c07ffdc fix(webui): send the LocationConstraint when creating
a bucket outside us-east-1
- 7662573 fix: accept HTTP dates for LastModifiedTime in
DeleteObjects
- 9debca3 fix: echo the client ETag in InvalidPart errors and
stop duplicating request ID headers
- a7b91dd fix: honor encoding-type=url in ListObjects and
ListObjectsV2
- 416acd3 fix: keep object keys literal under fiber v3.6 path
normalization
- 5d5ece2 fix: keep the version id and delete marker in s3
backend GetObjectAttributes
- e63998f fix: log the client IP from a trusted proxy header
- e92ad0b fix: map quota and no-space errors when creating the
multipart upload directory
- 7edbd62 fix: only look up the parts count when ObjectParts is
requested
- 4a9748b fix: prevent OOM kills of FreeBSD functional tests in
CI
- a664004 fix: race between object uploads and deletes on
shared parent directories
- 5616f38 fix: reject posix object keys that resolve into the
.sgwtmp staging directory
- 3715b38 fix: return NoSuchUpload for malformed upload IDs
ahead of access and request checks
- f88fe63 fix: return the parts count in GetObjectAttributes
for multipart objects
- 112e50c fix: serialize concurrent CompleteMultipartUpload
claims under the publish lock
- b4f02dc fix: set the gateway region on the standalone admin
server
- f513678 fix: skip excluded directories and reserve their keys
- 81e287f fix: update staticcheck CI with Go 1.27.2 support
* Wed Oct 14 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.9.0:
* fix: store posix object keys with Windows-invalid characters
under encoded names on Windows
* test: more skips removals, more rest/go error checking code
cleanup
* fix: reject an empty start-after and continuation-token in
ListObjects (V1)
* docs(netutil): correct the comment on handing sniffed bytes to
the handshake
* fix: answer plaintext HTTP sent to a TLS listener with a 400
* fix: set the CreateBucket location constraint from the S3
backend region
* fix: match S3 for conditional deletes of missing keys, delete
markers and versions
* fix: honor the per-object ETag and Size conditions in
DeleteObjects
* fix: return NextMarker in ListObjects only when a delimiter is
set
* fix: reject the start-after query in ListObjects (V1)
* fix: include the empty `TagKey` in `InvalidTag` errors and
match S3 tag validation
* fix: echo the full Authorization header in Unsupported
Authorization Type errors
* fix: unblock govulncheck and staticcheck CI after Go 1.27.2
release
* feat: add opt-in --fsync to flush new objects before
acknowledging them
* test: upload a non-empty part in the InvalidPart error fields
test
* fix: combine bucket policy with ACL so a policy no longer locks
the owner out
* fix: scope CompleteMultipartUpload retries to the completed
upload
* test: some skips removals, cleanup, possible log deletion fix
* rdma: drop the personal name from copyright notices
* rdma: drop Inc. from our copyright notices
* rdma: correct the license header on newly authored RC files
* fix: echo only the request continuation token in ListObjectsV2
* fix: report the upload, part and ETag in InvalidPart for a
malformed part ETag
* test: parallel logging improvements, teardown improvements,
README, env updates
* fix: enforce destination If-Match/If-None-Match on CopyObject
* fix: reject a ListBuckets bucket-region other than the gateway
region
* fix: validate and apply the ListBuckets bucket-region query
* test: use the upload's own key as key-marker in the truncation
test
* fix: compute IsTruncated from the absolute index in
ListMultipartUploads
* fix: reject ListMultipartUploads requests that also carry
uploadId
* fix: store bucket default retention on each object at write
time and support Object Lock fields in browser POST
* feat: validate SSE-C headers and reject SSE-C in posix and
azure
* fix: drop upload-id-marker without key-marker in
ListMultipartUploads
* fix: report the last upload in ListMultipartUploads next
markers on a single page
* fix: accept upload-id-marker together with key-marker in
ListMultipartUploads
* fix: return MalformedXML for a DeleteObjects request without
objects
* fix: return InvalidURI for a malformed escape in the request
path
* fix: reload standalone IAM and private-channel mTLS certs on
SIGHUP
* feat: expose POSIX I/O buffer size to scoutfs options
* fix: keep O_DIRECT active for object uploads and reads
* fix: stop object annotation, rename and torrent requests from
reaching plain object handlers
* feat: add helm chart hooks for SPIRE support
* fix: report the delete time as the last modified time of delete
markers in posix
* fix: keep the last modified time of promoted object versions in
posix
* fix: list only the objects not deleted in DeleteObjects quiet
mode
* fix: stop sidecar attributes leaking into new and promoted
object versions
* fix: prevent path traversal via multipart upload IDs and
DeleteObjects keys
* feat: add directio option for scoutfs backend
* fix: return InvalidAccessKeyId for unknown access keys in
single, Vault and IPA IAM
* fix: return AccessDenied for filesystem permission errors on
posix writes
* fix: require an integrity check for uploads with Object Lock
parameters and authorize every action of anonymous requests
* fix: update the example systemd configs with latest options
* fix: harden RC device initialization
* fix: allow vgwrdma explicit RC GID selection
* fix: return Marker when the request omits it
* cuobjclient: select GID index 0 on InfiniBand ports in the host
client
* rdma: address the RC peer by LID on InfiniBand link layers
* rdma: add --rc-device to pick the RC data plane's verbs device
by name
* rdma: dispatch poll_cq/post_send/post_recv through the object's
own context
* fix: snapshot the replaced object before storing metadata in
posix `CompleteMultipartUpload`
* fix: authorize multi-action requests per action across bucket
and identity policies
* fix: require `s3:PutObjectTagging` for tagged browser-based
`POST` object uploads
* fix: reject DeleteObjects requests with more than 1000 keys
* fix: place the null version by its recorded position in posix
versioning
* fix: authorize browser-based `POST` object uploads against the
object ARN
* fix: enforce object lock on browser-based `POST` object uploads
* fix: keep the object on DeleteObject with a versionId in a
never-versioned bucket
* fix: align signing region mismatch errors with s3 regional
endpoints
* fix: strip `aws-chunked` when the request declares no payload
type
* fix: match S3's `Content-Encoding` error details for
aws-chunked with `UNSIGNED-PAYLOAD`
* fix(s3api): strip `aws-chunked` only for streaming uploads
* fix: strip `aws-chunked` from stored `Content-Encoding`
* feat: add webui concurrent uploads with progress tracking
* fix: handle the null version id correctly in posix versioning
* fix: apply bucket CORS right before auth middleware
* fix: hide webui user management when server in single-user mode
* fix: remove legacy rdma header descriptors
* fix: use content-legnth for PutObject and UploadPart allocation
sizes
* fix: reject a PutObject whose body ends before Content-Length
* fix: return InvalidArgument for an empty website configuration
* fix: stop posix rewriting the current version on a copy to
itself
* fix: stop posix copying data from a delete marker
* fix: stop posix mixing up keys that differ only by a trailing
slash
* fix: stop posix publish lock serializing the same key across
buckets
* feat: add versioning support for directory objects in posix
* fix: clear stale delete-marker metadata on reupload
* feat: admin API path prefix, Helm WebUI prefixes and separate
IAM storage
* fix: treat root-level non-directory entries as non-existing
buckets in posix
* fix: omit ObjectLockConfiguration Rule when there is no default
retention
* fix: replace fixed sleep with readiness polling in azurite CI
* fix: staticcheck on cuObject stubs
* change cors check order ; test
* fix: add explicit RDMA build constraints
* test: location constraint exception fix
* Merge pull request #2389 from
dualfroz/fix-illegal-location-constraint
* feat: add utils command to convert preexisting posix datasets
* feat: add per-provider OIDC discovery URL override
* test: website redirect test, multipart upload util cleanup,
install updates
* fix: avoid nil-pointer panic in mtime
* webui: show upload progress in the Explorer
* test: mc hotfix
* fix: map azure `AuthorizationPermissionMismatch` to
`AccessDenied`
* fix: object verson mtime
* fix: make conditional publish lock modes explicit
* posix: add AbsolutePaths option for embedding without chdir
* fix: port the cuObjServer wrapper to libcuobjserver 2.0.0
* fix: reject empty `versionId` query parameter in object actions
* fix: track how the request body ended before closing the
connection
* fix: return `BucketAlreadyExists` for existing dirs without acl
meta attr
* fix: restore IPA KRA compatibility and fix JWK parse panic
* feat: add s3:if-match and s3:if-none-match policy condition
keys
* rdma: acquire session admission credit atomically
* rdma: gate session admission on audit publication backlog
* rdma: cap the session-less publication backlog
* rdma: keep sinks outside the publication lock and self-close
metrics
* rdma: synchronize publication acceptance with the drain
boundary
* rdma: never run operational sinks on callback threads
* rdma: size publications to session capacity and preserve
committed PUT facts
* rdma: track terminal events held off by an active reservation
* rdma: bound publication backpressure and close the reservation
window
* rdma: keep reaper callbacks off sink threads
* rdma: reserve session publication before completion calls
* rdma: make the teardown callback the single RC publication
owner
* rdma: harden RC outcome publication ownership and record
fidelity
* rdma: close publication gaps for RC pre-session failures
* rdma: publish RC transfer outcomes into the gateway operational
services
* rdma: add terminal notification callback to the RC server ABI
* fix: close connections with unread chunked bodies
* fix: deprecations in JWK and IPA RSA handling
* feat: add storage class to put object flows input
* fix: make ListMultipartUploads ordering deterministic and
stabilize test timing
* tests: build the integration SDK config without the host's AWS
setup
* s3api: report the bound addresses from the listen hook
* feat: add OIDC endpoint relaxations for private/isolated
networks
* rdma: expose live RC sessions on the admin server
* rdma: add a point-in-time session snapshot to the RC C ABI
* rdma: carry the session id in the reaped session record
* rdma: pin session strings passed to the RC cgo ABI
* rdma: resolve the inline-only verbs calls from the provider ops
table
* rdma: name the deviceless init failures in the RC server
* rdma: add a log callback ABI to the RC data plane
* rdma: expose the RC data plane resource limits as gateway flags
* rdma: install the gateway shutdown wrapper at function entry
* Sat Sep 19 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.8.0:
* fix: include common prefixes in ListObjectsV2 key count
* rdma: gate the RC data plane behind a dedicated flag
* rdma: keep RC route XML fidelity
* rdma: authenticate RC routes through the terminal error path
* rdma: test RC route errors through the production server
* rdma: map RC transport errors to protocol codes
* rdma: serialize RC route errors at the route boundary
* fix: s3proxy sends bodyless CreateBucket when the configuration
is empty
* feat: accept principal ARNs in bucket policies under standalone
IAM
* fix: use constant-time comparisons for SigV4 signatures
* feat: support admin/access logs on standard streams
* fix: use dir permissions option for temporary directories
* feat: add standalone iam service to systemd config setup
* test: separate download and install for linux/apt config
* feat: add the hipobj-rc-v2 control routes to the vgwrdma
gateway
* fix: drain unread request bodies before closing the connection
* fix: infer UserName from the calling access key in the
access-key APIs
* fix: support proxy
* fix: role last-used tracking, and record S3 requests in
last-used metadata
* fix: authorize every key in a DeleteObjects batch after a
bucket-policy deny
* fix: harden posix conditional publish locking
* chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9
* test: allow versitygw command customization, website testing,
s3 config fix
* chore: add rdma/librcserver.a to .gitignore
* chore(deps): bump the dev-dependencies group with 23 updates
* chore(deps): bump actions/checkout from 6 to 7
* chore(deps): bump actions/setup-go from 6 to 7
* rdma: add the Go binding for the RC session server
* rdma: add the RC session server C ABI
* fix: make --chuid/--chgid usable with the standalone IAM
service
* feat: govern GetBucketVersioning with the regular access checks
* rdma: port the hipObject v2 RC session core
* auth: add GetUserAccountFresh to bypass the IAM cache
* fix: add integeration tests
* fix: apply default Content-Type in POSTObject
* feat: allow supplying an external IAM service implementation to
embedgw
* fix: build failure from conflicting merges
* feat: add configurable file permissions for new objects
* feat(azure): carry Azure blob marker in continuation token for
pagination
* feat(azure): server-side copy with download+reupload fallback
* feat: add IAM OIDC provider tagging actions
* feat: add IAM role tagging actions
* feat: add IAM user tagging actions
* feat: add standalone IAM support in WebGUI
* chore(deps): bump the dev-dependencies group across 1 directory
with 20 updates
* fix(posix): return empty config for GetBucketVersioning when
unconfigured
* feat: add Helm chart support for the standalone IAM service
* feat: version the private IAM protocol between gateway and
standalone service
* feat: integrate standalone IAM service with S3 gateway for
identity-based policy enforcement
* feat: add live GitHub OIDC end-to-end test for
AssumeRoleWithWebIdentity
* chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8
* feat: add STS web identity federation, IAM policy Condition
support, and access control enforcement
* feat: add IAM OIDC provider CRUD
* feat: add IAM role inline policy CRUD
* feat: add IAM Role CRUD
* feat: add IAM user inline policy CRUD
* feat: add IAM user access key management
* feat: add AWS-compatible standalone IAM service
* fix: newer gofmt for s3api
* cumiddleware: cover RC token boundary and legacy-precedence
cases
* cumiddleware: reject unsupported RC token schemes with 501
* chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7
* Bugfix: url-encoded chars on the website listener
* test: install script improvements
* chore(deps): bump the dev-dependencies group with 27 updates
* fix(posix): make conditional PUT evaluation and publication
atomic per key
* chore(deps): bump the dev-dependencies group with 19 updates
* chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6
* test: parallel docker testing, some misc cleanup/fixes
* fix: add license header to rdma files
* Check versioning on init
* feat: add new vgwrdma service for cuObject compatible server
* chore(deps): bump github/codeql-action from 4 to 4.37.4
* chore(deps): bump the dev-dependencies group with 21 updates
* feat: add optional data-integrity ETag mode for posix/scoutfs
* feat: add best-effort O_DIRECT support for posix put/get-object
put-part
* test: website - initial tests
* fix: honor mpMaxParts across partNumber validation
* chore(deps): bump the dev-dependencies group with 22 updates
* test: bucket setup/resetting cleanup, go virtual path handling,
s3api profile setup
* chore(deps): bump the dev-dependencies group with 9 updates
* chore(deps): bump actions/setup-go from 6 to 7
* test: bucket resetting code cleanup
* feat: add helm chart admin and webui ingress support
* Wed Jul 15 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.7.0:
* fix: omit null version id for suspended buckets
* fix: prevent nil pointer panic in s3proxy ListMultipartUploads
and ListParts
* chore(deps): bump the dev-dependencies group with 15 updates
* test: ListParts query tests
* chore(deps): bump the dev-dependencies group across 1 directory
with 21 updates
* test: go generateCommand executable, different platform tests,
install scripts
* fix: update Fiber to `v3.4.0`
* Remove go report card
* feat: add chart sidecar and versioning directory support
* fix: copy-source parsing mismatch that could bypass path
validation
* fix: LDAP access key filter injection
* fix: update example config with recent options
* feat: add configurable default ETag for files without metadata
* test(azure): widen multipart test parts above min size; tighten
isQuotedEtag
* test: go executable, base install script
* make azure multipart part etags quoted and consistent
* fix azure etag quote bytes
* fix azure multipart etag quoting
* fix: add section for goreleaser deb/rpm
* chore(deps): bump the dev-dependencies group with 14 updates
* Sun Jun 28 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.6.0:
* fix: prevent connection errors in space/quotas error paths
* feat: add options extensions to embed config
* test: README updates, speed up some file integrity checks
* chore(deps): bump actions/checkout from 6 to 7
* feat: add windows functional test coverage and fix some windows
behavior
* feat: Add 'topologySpreadConstraints'
* test: ListObjectVersions query tests
* chore(deps): bump the dev-dependencies group across 1 directory
with 12 updates
* fix: validate object lock default retention upper limits
* fix: support asterisk read preconditions
* fix: reject empty Content-MD5 on PUT operations
* feat(helm): Make it possible to specify deployment strategy
* feat: migrate Fiber to v3.3.0
* test: jailing, logging, executable cleanups
* feat: support x-amz-website-redirect-location
* feat: improve static website hosting support
* Add website integration tests and remove NotImplemented stubs
* Add WebsiteConfiguration types, validation, and S3 error codes
* fix: prevent index-out-of-range panic in s3proxy
GetBucketOwnershipControls
* test: jailing work (base)
* fix: prevent nil pointer panic in webhook sendLog
* chore(deps): bump the dev-dependencies group with 24 updates
* fix: prevent panic in ParseCopySource on empty input
* s3api: add WithOnListen option for server readiness
notification
* chore(deps): bump the dev-dependencies group with 23 updates
* Tue Jun 02 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.5.0:
* fix: connection early termination resulting in internal error
* fix: enforce required SignedHeaders validation for SigV4
requests
* fix: replace misleading webui CORS error toast with generic
network error message
* fix: expose x-amz-storage-class in CORS response headers
* test: ListMultipartUpload query tests, related cleanup
* fix: normalize object keys during bucket policy evaluation
* feat: extract gateway runtime into embeddable package
* fix: fix empty ownership control rules panic
* chore: update go package dependencies
* fix: reject invalid PostObject keys
* fix: honor explicit public bucket policy deny
* feat: global error refactoring
* test: ListObjects util code reorg, return value/multipart fixes
* chore(deps): bump
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
* test: HeadObject query tests, more util code changes
* fix: decode URL hash in webui before parsing bucket/prefix
* fix: ignore implicit directories for Get/HeadObject
* chore(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2
* chore(deps): bump the dev-dependencies group with 9 updates
* test: util code cleanup
* fix: forward slash url encoded used as bucket/key separator
* fix: store object multipart upload metadata compressed
* test: DeleteObjects payload testing
* feat: add bucket metrics tag when request specifies a bucket
* fix: reject SigV2 requests
* feat: replace webui client-side name filter with server-side
prefix filter
* test: dockerfile, run script updates, README updates
* chore: fix sidecar flag in runtests to correctly pass test
option
* test: add test tags
* chore(deps): bump the dev-dependencies group with 19 updates
* fix: skip integration tests not compatible in sidecar
* feat: support sha512, md5, xxhash3, xxhash64, xxhash128 data
integrity checksums
* feat: add custom route and middleware options
* fix: remove unsigned chunk reader caching
* fix: apply CORS middleware to admin CreateBucket route
* fix: scoutfs multipart alignment check for last part
* test: GetObject - add query tests, go/bats improved
header/object reply handling
* feat: add new ErrNoSpaceLeftOnDevice API error for ENOSPC
errors
* chore(deps): bump the dev-dependencies group with 7 updates
* fix: check PutObjectTagging/LegalHold/Retention permissions on
PutObject,CopyObject and CreateMultipartUpload
* chore(deps): bump github.com/Azure/go-ntlmssp from 0.1.0 to
0.1.1
* test: initial bats test tagging system, shellcheck fix
* Thu Apr 23 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.4.1:
* test: add github actions functional tests for posix sidecar
option
* fix: add explicit sidecar metadata cleanup on object/bucket
deletion
* test: disable downloads of mc from minio site
* test: disable mc client tests from test matrix
* fix: docker entrypoint move VGW_ARGS before backend subcommand
* feat: history back/forward actions on explorer and modals
* feat: add server-side pagination for webui object explorer
* feat: add --socket-perm option for UNIX socket file permissions
* feat: in webui add bucket favorites and direct-navigation to
explorer
* chore(deps): bump the dev-dependencies group with 21 updates
* fix: correct 206 Partial Content response status for ranged
GetObject and HeadObject
* fix: in webui use AWS SigV4-compliant URI encoding for path and
query params
* feat: add presigned URL generation in webui
* fix: make CompleteMultipartUpload idempotent and add
part-number support to GetObject/HeadObject
* fix: fix azure multipart upload objects masking
* chore: fix spellings and unused function args
* test: ListObjectsV2 query updates, file updates, bash cleanup
* fix: use encodeS3Key in webui instead of encodeURIComponent in
createFolder
* fix: close temp file before rename in sidecar StoreAttribute
* fix: add gcs compatibility flag to fix s3proxy GCS SigV4
signature mismatch
* feat: add cli option to generate shell auto completion
* fix: add Host header to HTTP test requests for fasthttp v1.70.0
compatibility
* chore(deps): bump the dev-dependencies group with 9 updates
* fix: correct HeadObject restore status for offline objects in
scoutfs
* fix for multipart upload when using sidecar meta
* test: ListObjectsV1 updates, file code changes, multipart
updates
* fix: move versionId validation to backend
* chore(deps): bump the dev-dependencies group with 11 updates
* fix: fix webui port validation to allow unix socket paths
* Sat Apr 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- drop the broken completion subpackages
* Sat Apr 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- split out the binary into a CLI subpackage and adjust the
completion packages accordingly
* Sat Apr 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- adjust upstream's systemd unit file
- use /var/lib/versitygw/ as WorkingDirectory
- use user versitygw
- user group versitygw
* Fri Apr 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.4.0:
* fix: retry link on ENOENT caused by racing DeleteObject
* fix: remove POST object multipart boundary prefix trimming
* test: fix response code
* feat: implement x-amz-source-expected-bucket-owner for
CopyObject and UploadPartCopy
* fix: change ErrMissingDateHeader http status code to 403
* fix: add x-amz-bucket-region to ListObjects(V2) response
headers.
* feat: implement integration tests for browser-based POST object
* feat: add browser-based POST object upload support
* fix: enforce 5gb copy source object size threshold.
* feat: support response header overrides in HeadObject
* chore(deps): bump the dev-dependencies group with 17 updates
* chore(deps): bump sigstore/cosign-installer from 4.1.0 to 4.1.1
* test: ListObjects encoding-type tests
* fix: serialize concurrent CompleteMultipartUpload calls via
rename
* test: remove eval, go command generation overhaul
* fix: abort scoutfs multipart uploads on error after successful
moveblocks
* fix: cleanup file descriptor leaks with chown fails
* chore(deps): bump the dev-dependencies group with 5 updates
* test: test_common.sh updates, bucket/file creation updates,
hardcode fixes
* fix: cleanup tempfiles when error prevents calling link
* feat: add option to disable copy-file-range for multipart
uploads
* feat: implement quicker backend/posix walk algorithm
* Update stage constants for ongoing requests
* Do not expose directories that can't be buckets
* Always write complete files in sidecar meta provider
* test: listobjects delimiter/prefix test, skips removal, go
query improvement
* chore(deps): bump the dev-dependencies group with 22 updates
* chore(deps): bump docker/login-action from 3 to 4
* chore(deps): bump docker/setup-buildx-action from 3 to 4
* chore: remove the unnecessary AmazonS3.xsd from s3response.
* chart/README.md hostPath usage warning
* test: ListBuckets - bucket region, more default param tests
* fix: fix admin cli update user --project-id retrieval
* feat: add persistence.hostPath to Helm chart
* fix: allow list buckets to use default aws region us-east-1
* fix: allow Helm chart users to use their own, existing PVC
* chore: run go modernize tool
* fix: webui move explorer styling to theme.css
* fix: webui location of tailwind.js asset
* feat: option to host webui on s3 port
* feat: s3proxy default to credential chain with optional
anonymous access
* feat: add option to change webui path prefix
* feat: remove /api/gateways webserver endpoint
* chore(deps): bump docker/metadata-action from 5 to 6
* chore(deps): bump the dev-dependencies group with 25 updates
* chore(deps): bump actions/checkout from 4 to 6
* chore(deps): bump docker/build-push-action from 6 to 7
* chore(deps): bump sigstore/cosign-installer from 4.0.0 to 4.1.0
* chore(deps): bump docker/setup-qemu-action from 3 to 4
* feat: noop plugin for gateway load testing
* chore: add helm lint to pr tests
* fix(chart): use docker login for helm and cosign
* feat: add unix domain socket listener support to port option
* fix(chart): fix cosign-installer tag
* fix(chart): fix multidoc separator when 2 routes are enabled
* fix(chart): replace buggy chart-releaser action
* fix: add request headers and metadata headers limit
* fix: update deprecated StandardOutput/StandardError type
* feat(chart): enable persistence by default, discuss more in
README
* feat: add cosign signing to chart OCI artifact
* chore: consistent comments
* feat(chart): add HTTPRoute configuration
* fix: change the way object metadata is stored in posix
* feat: add Helm chart for versitygw
* fix: webui pass correct arguments to request() in
putBucketPolicy
* fix: bracket IPv6 addresses in auto-detected webui gateway URLs
* test: update functions, transfer/remove some utils files
* fix: azure modernize part number loop check
* fix: azure close download body in CopyObject to prevent
resource leak
* fix: azure ListBuckets pagination to use client-side
continuation tokens
* fix: azure PresignedAuth_UploadPart test failure
* Wed Mar 04 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.3.1:
* chore: enable windows test build and release binaries
* test: CORS response header tests
* fix: fixes webserver network type
* chore: add .DS_Store to .gitignore
* Tue Mar 03 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.3.0:
* chore(deps): bump actions/download-artifact from 7 to 8
* chore(deps): bump actions/upload-artifact from 6 to 7
* chore(deps): bump the dev-dependencies group with 4 updates
* feat: revert ignore object ACL behavior
* feat: add tagging support for directory objects in posix
* fix: add missing tests to group-tests map
* chore: fix typos and error return wrapping types in posix
* fix: store part checksums at destination path in UploadPartCopy
* fix: improve WalkVersions() ancestor-directory guard for prefix
filtering
* feat: configuration option to disable ACLs
* Fix versitygw#1864 to not return parent keys for
ListObjectVersions with prefix
* feat: optimize multipart upload checksum calculation.
* fix: store final checksum on CompleteMultipartUpload
* feat: add concurrency limiter to scoutfs
* feat: update go version to 1.25.0 and golang.org/x/net to
0.51.0
* feat: adds checksums for directory objects in posix
* test: README, some test updates
* chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.11 to
2.52.12
* test: remove obsolete recording code
* fix: fixes PutBucketCors CORSRules validation
* chore(deps): bump the dev-dependencies group with 21 updates
* chore(deps): bump goreleaser/goreleaser-action from 6 to 7
* fix: make webui sidebar responsive on mobile
* feat: add option to disable s3proxy client data integrity
checks
* feat: add cli options to specify webui gateway/admin listing
* feat: adds `Location`, `x-amz-bucket-arn` response headers in
CreateBucket
* test: REST CORS - initial tests
* fix: correct private canned ACL behavior on bucket creation
* feat: add multi-address listener for s3/admin/webui
* fix: fixes object default Content-Type
* feat: add posix concurrency-limiter
* feat: adds fiber max connections and in-flight requests limiter
* chore: fix warning in system.yml github workflow
* chore: update readme for testing overview
* chore(deps): bump github.com/clipperhouse/uax29/v2
* chore: cleanup go.mod with go mod tidy
* fix: adds application/xml Content-Type to error responses
* fix: replace `debuglogger.Logf("Internal Error, %v", err)` with
`debuglogger.InternalError(err)`
* test: not-implemented type test, first template usage
* feat: allow anonymous access for s3proxy backend
* feat: replace aws-sdk-go-v2 s3 manager with transfermanager
* chore(deps): bump the dev-dependencies group with 7 updates
* feat: add favicon to all pages in webui
* fix: fixes DeleteObject if-match quoted comparison
* fix: CopyObject with URL-encoded special chars
* chore(deps): bump actions/download-artifact from 4 to 7
* chore(deps): bump actions/upload-artifact from 4 to 6
* chore: update README.md to highlight new web gui feature
* Tue Feb 10 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- Update to version 1.2.0:
* Add "lexical" sort to walker.go
* Base import of cutdown version of io/fs/walk.go from golang as
walker.go
* Reload TLS certificates on SIGHUP
* Revert of 34da183 and 8e18b43 for backend/walk.go
* chore(deps): bump actions/checkout from 4 to 6
* chore(deps): bump docker/build-push-action from 5 to 6
* chore(deps): bump github.com/clipperhouse/uax29/v2
* chore(deps): bump the dev-dependencies group with 2 updates
* chore(deps): bump the dev-dependencies group with 6 updates
* chore(deps): bump the dev-dependencies group with 7 updates
* chore: add advanced codeql workflow for repo customizations
* chore: add codeql ignore for embedded 3rd party js assets
* chore: add dependabot updates for github actions
* feat: add web-based UI for S3 object management and admin
operations
* feat: adds delimiter support in ListMultipartUploads
* feat: makes root creds usable for admin subcommand with lower
precendence
* fix: admin server debug always enabled when --admin-port option
enabled
* fix: correct spelling for debuglogger.InternalError() (#1784)
* fix: fixes delete markers access for some actions
* fix: fixes list-limiters parsing and validation
* fix: fixes non-existing object deletion with versionId
* fix: fixes some write operations blocking in read-only mode
* fix: fixes the SignedStreamingPayloadTrailer_success test
failure
* fix: pin github.com/nats-io/nkeys version to v0.4.12
* fix: put object on windows when parent directories dont already
exists
* fix: remove duplicate cors headers from options router
* fix: removes object metadata loading from posix ListParts
* fix: return not implemented in object actions, if acl header is
present
* fix: reverts the nats-io/nkeys package version to v0.4.12
* fix: webui md5 missing error when enabling directory object
lock
* Fri Jan 30 2026 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- update to 1.1.0:
* 7a4dd59 chore(deps): bump github.com/valyala/fasthttp
* 8d16bff chore(deps): bump the dev-dependencies group with 2
updates
* 6198bf4 chore(deps): bump the dev-dependencies group with 20
updates
* 0124398 chore(deps): bump the dev-dependencies group with 6
updates
* d446102 feat: add option for default global cors allow origin
headers
* f467b89 feat: adds Location in CompleteMultipartUpload response
* 8073994 feat: adds integration tests for
STREAMING-AWS4-HMAC-SHA256-PAYLOAD requests
* cc54aad feat: adds integration tests for
STREAMING-AWS4-HMAC-SHA256-PAYLOAD-TRAILER requests
* 2561ef9 feat: implements admin CreateBucket endpoint/cli
command
* 5aa2a82 fix: Makes precondition headers insensitive to whether
the value is quoted
* c2c2306 fix: adds an error route for ?versions subresource with
key
* 12e1308 fix: adds versionId in put/get/delete object tagging
actions response.
* 9eaaeed fix: bunch of fixes in signed streaming requests
* 657b9ac fix: changes AuthorizationHeaderMalformed error status
to 400
* edac345 fix: cleanup sidecar metadata empty dirs
* 7a26aec fix: fix the concurrency issue in integration tests
bucket name generation
* d015842 fix: fixes CreateBucket LocationConstraint validation
* a75aa9b fix: fixes if-none-match precondition header logic in
object write operations
* cf99b3e fix: fixes invalid/expired
x-amz-object-lock-retain-until-date errors
* 2a7e76a fix: fixes missing bucket object lock config error
* c91e5dc fix: fixes the InvalidRetentionPeriod error code and
message
* 39ee175 fix: fixes the PutBucketPolicy response status
* 981a34e fix: fixes x-amz-if-match-size parsing
* b78d21c fix: optimize sidecar empty-dir checks
* 9f6bf18 fix: removes Expect from sigv4 ignored headers list
* 06a4512 fix: removes the NoSuchTagSet error in GetObjecTagging
* 61308d2 fix: return NoSuchKey if a precondition header is
present and object doesn't exist in PutObject,
CompleteMultipartUpload
* 8e0eec0 fix: return null in GetBucketLocation for us-east-1
* 06f4f0a fix: skips object lock check in DeleteObject without
versionId.
* 0cab42d xattr: use different namespace prefixes for FreeBSD vs
other platforms
* Fri Dec 19 2025 Johannes Kastl <opensuse_buildservice@ojkastl.de>
- new package versitygw: a high-performance S3 translation service
/usr/bin/versitygw
Generated by rpm2html 1.8.1
Fabrice Bellet, Sun Nov 1 23:49:33 2026