Chris LuandChris Lu f849b7c823 s3: validate per-part checksums in CompleteMultipartUpload ...

Parse the Checksum* elements of each completed part and enforce what AWS
does for uploads created with x-amz-checksum-algorithm: every part must
carry a checksum in the complete request (InvalidRequest when missing,
BadDigest when it differs from the stored part checksum), and an
x-amz-checksum-type header must match the upload resolved checksum type
(BadDigest). Add the issue-11401 reproduction as a regression test.

2026-09-20 01:15:11 -07:00

..

admin

volume: validate copy/tail source addresses before dialing (#11390)

2026-09-18 12:55:47 -07:00

cluster

filer: keep a moved key on its prior owner while the ring settles (#11108)

2026-09-02 19:40:53 -07:00

command

s3: drop implicit reader cache budget that throttled S3 GETs (#11384)

2026-09-18 01:02:32 -07:00

credential

s3: gate internal LifecycleDelete gRPC behind admin Bearer auth (#11291)

2026-09-13 13:07:10 -07:00

ec

shell: parse every collection filter the same way (#10955)

2026-08-25 18:03:52 -07:00

filer

s3: drop implicit reader cache budget that throttled S3 GETs (#11384)

2026-09-18 01:02:32 -07:00

filer_client

…

glog

…

iam

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

iamapi

iam: authorize IAM management actions as IAM actions (#10593)

2026-08-05 17:08:21 -07:00

images

Add codespell support with configuration and typo fixes (#10393)

2026-07-22 14:38:06 -07:00

kms

kms: cache decrypted data keys so cache_enabled/cache_ttl take effect (#10173)

2026-06-30 21:23:53 -07:00

mount

[Mount] Cache Chunk Manifest Resolution for Repeated File Opens (#11266)

2026-09-12 20:06:25 -07:00

mq

filer: authorize the chunk proxy and the root listing like the rest of the filer port (#11152)

2026-09-04 16:39:36 -07:00

notification

security: add BearerPrefix constant for Authorization headers (#10101)

2026-06-24 19:36:42 -07:00

operation

volume: validate copy/tail source addresses before dialing (#11390)

2026-09-18 12:55:47 -07:00

pb

volume: validate copy/tail source addresses before dialing (#11390)

2026-09-18 12:55:47 -07:00

placement

placement: let callers reject candidates placement cannot judge (#10581)

2026-08-05 00:18:22 -07:00

plugin/worker

shell: reset noLock in the admin script dispatcher too (#11059)

2026-08-31 23:14:37 -07:00

query

s3: invalidate stale reader cache locations on chunk read failure (#10156)

2026-06-30 13:27:49 -07:00

remote_storage

Cloud/remote storage & tiering: configurable multipart upload/download concurrency (#11319)

2026-09-14 22:09:08 -07:00

replication

s3 sink: report the source read error the SDK hides (#11277)

2026-09-11 19:44:30 -07:00

s3api

s3: validate per-part checksums in CompleteMultipartUpload

2026-09-20 01:15:11 -07:00

security

s3: tighten STS session token handling (#11383)

2026-09-17 23:50:16 -07:00

sequence

[nfs] Add NFS (#9067)

2026-04-14 20:48:24 -07:00

server

volume: validate copy/tail source addresses before dialing (#11390)

2026-09-18 12:55:47 -07:00

sftpd

sftp: reject an empty password (#11095)

2026-09-02 11:33:25 -07:00

shell

volume: validate copy/tail source addresses before dialing (#11390)

2026-09-18 12:55:47 -07:00

static

adjust logo

2026-04-23 10:05:51 -07:00

stats

s3api: don't delete chunks when CreateEntry outcome is ambiguous (#11376)

2026-09-17 19:58:49 -07:00

storage

fix(volume): stop ScanVolumeFileFrom at a header it cannot advance past (#11398)

2026-09-19 22:26:56 -07:00

telemetry

telemetry: keep only clusters that store at least 10 GiB (#11138)

2026-09-03 12:36:00 -07:00

topology

fix(volume): return an error instead of 201 when a write lands on no volume (#11397)

2026-09-19 19:03:21 -07:00

util

filer: preserve accepted metadata log records on shutdown (#11359)

2026-09-16 12:23:59 -07:00

wdclient

volume: avoid read-only replica write targets (#11195)

2026-09-07 09:23:56 -07:00

worker

s3: gate internal LifecycleDelete gRPC behind admin Bearer auth (#11291)

2026-09-13 13:07:10 -07:00

Makefile

…

weed.go

shell: exit non-zero when a piped command fails (#11117)

2026-09-02 22:12:51 -07:00