supabase / storage

86%

master: 87%

LAST BUILD ON BRANCH add_security_md

branch: add_security_md

CHANGE BRANCH

x

Reset

• add_security_md
• admin-features
• admin/reconcile-orphan-objects
• auth/crypto
• bs/tmp
• build/v1.0.1
• build/v1.13.4
• cache-webhook-dynamic-import
• chore-review-actions
• chore/bump-axios-to-190
• chore/bump-fastify-multipart-patch-version
• chore/bump-form-data-404-and-esbuild-0250-versions
• chore/dep-firewall
• chore/improve-folder-structure
• chore/improve-storage-errors
• chore/improvements
• chore/npm-lock-config
• chore/remove-request-info-logs
• chore/remove-unused-min-chunk-transform
• chore/self-serve-hardening
• chore/tests
• chore/update-pino-logflare
• chore/update-tests-fix-coverage
• chore/use-single-s3-client
• ci/automatic-cli-pr
• ci/fix-mirror-images
• ci/openapi-drift-check
• ci/pr-target
• claude/reverent-ramanujan-32755f
• codex/fresh-storage-scan-20261019-1
• codex/s3-content-md5-20261019
• codex/s3-list-parts-marker-20261019
• concurreny
• da/ssl-hostname-verification
• db/propagate-transaction-error-edge-case
• dep/axios-1.6.8
• dependabot/docker/node-26-alpine3.23
• dependabot/npm_and_yarn/agentkeepalive-4.6.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1033.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1038.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1096.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1102.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1107.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1132.0
• dependabot/npm_and_yarn/aws-sdk/client-ecs-3.1146.0
• dependabot/npm_and_yarn/aws-sdk/client-s3vectors-3.1150.0
• dependabot/npm_and_yarn/aws-sdk/s3-request-presigner-3.1024.0
• dependabot/npm_and_yarn/aws-sigv4-sign-2.0.1
• dependabot/npm_and_yarn/conventional-changelog-conventionalcommits-10.4.0
• dependabot/npm_and_yarn/dotenv-17.4.2
• dependabot/npm_and_yarn/fast-json-stringify-7.0.1
• dependabot/npm_and_yarn/fastify-plugin-6.0.0
• dependabot/npm_and_yarn/fastify/multipart-10.1.0
• dependabot/npm_and_yarn/fastify/otel-0.18.1
• dependabot/npm_and_yarn/fastify/otel-0.19.0
• dependabot/npm_and_yarn/fastify/otel-0.21.1
• dependabot/npm_and_yarn/fastify/rate-limit-11.2.0
• dependabot/npm_and_yarn/fastify/swagger-9.9.1
• dependabot/npm_and_yarn/fastify/swagger-ui-5.2.6
• dependabot/npm_and_yarn/fs-xattr-0.4.0
• dependabot/npm_and_yarn/ip-address-10.1.0
• dependabot/npm_and_yarn/jose-6.2.2
• dependabot/npm_and_yarn/jose-6.2.3
• dependabot/npm_and_yarn/js-yaml-5.4.2
• dependabot/npm_and_yarn/lru-cache-11.5.2
• dependabot/npm_and_yarn/multi-268db90371
• dependabot/npm_and_yarn/multi-976627b156
• dependabot/npm_and_yarn/npm_and_yarn-0387bef127
• dependabot/npm_and_yarn/npm_and_yarn-053c9c4054
• dependabot/npm_and_yarn/npm_and_yarn-0e18df5e02
• dependabot/npm_and_yarn/npm_and_yarn-32e07c5719
• dependabot/npm_and_yarn/npm_and_yarn-580a7c2f10
• dependabot/npm_and_yarn/npm_and_yarn-94be095972
• dependabot/npm_and_yarn/npm_and_yarn-c0ae53a29e
• dependabot/npm_and_yarn/npm_and_yarn-dc93c09a8a
• dependabot/npm_and_yarn/npm_and_yarn-dcc3f92f05
• dependabot/npm_and_yarn/npm_and_yarn-f0fe707bb9
• dependabot/npm_and_yarn/npm_and_yarn-fbc8138b31
• dependabot/npm_and_yarn/object-sizeof-2.6.5
• dependabot/npm_and_yarn/opentelemetry/exporter-metrics-otlp-grpc-0.214.0
• dependabot/npm_and_yarn/opentelemetry/instrumentation-aws-sdk-0.76.0
• dependabot/npm_and_yarn/opentelemetry/instrumentation-knex-0.58.0
• dependabot/npm_and_yarn/opentelemetry/instrumentation-pg-0.72.0
• dependabot/npm_and_yarn/opentelemetry/instrumentation-pg-0.76.0
• dependabot/npm_and_yarn/opentelemetry/sdk-metrics-2.6.1
• dependabot/npm_and_yarn/opentelemetry/sdk-node-0.219.0
• dependabot/npm_and_yarn/opentelemetry/sdk-node-0.222.0
• dependabot/npm_and_yarn/opentelemetry/sdk-node-0.223.0
• dependabot/npm_and_yarn/platformatic/control-3.69.0
• dependabot/npm_and_yarn/platformatic/node-3.50.0
• dependabot/npm_and_yarn/platformatic/node-3.57.0
• dependabot/npm_and_yarn/platformatic/wattpm-pprof-capture-3.52.1
• dependabot/npm_and_yarn/platformatic/wattpm-pprof-capture-3.64.0
• dependabot/npm_and_yarn/platformatic/wattpm-pprof-capture-3.73.0
• dependabot/npm_and_yarn/pprof-format-2.3.0
• dependabot/npm_and_yarn/prettier-3.9.10
• dependabot/npm_and_yarn/resolve-tspaths-0.8.23
• dependabot/npm_and_yarn/safe-stable-stringify-2.5.0
• dependabot/npm_and_yarn/smithy/node-http-handler-4.5.2
• dependabot/npm_and_yarn/smithy/node-http-handler-4.6.0
• dependabot/npm_and_yarn/smithy/node-http-handler-4.6.1
• dependabot/npm_and_yarn/tsx-4.21.0
• dependabot/npm_and_yarn/tsx-4.23.15
• dependabot/npm_and_yarn/tus/file-store-2.1.0
• dependabot/npm_and_yarn/tus/server-2.4.5
• dependabot/npm_and_yarn/tus/server-2.4.6
• dependabot/npm_and_yarn/types/busboy-1.5.4
• dependabot/npm_and_yarn/types/node-26.1.1
• dependabot/npm_and_yarn/typescript-7.0.2
• dependabot/npm_and_yarn/vitest-4.1.10
• dependabot/npm_and_yarn/vitest/coverage-v8-4.1.5
• deps/bump-axios
• deps/bump-security-1
• deps/cross-spawn-update
• docker/fix-imgproxy-path
• encapsulate-database-transactions
• etienne/sec-389-buckets-with-trailing-whitespace-cannot-be-deleted-in
• etienne/sec-666-pin-all-github-actions-to-full-commit-sha
• etienne/sec-778
• etienne/storage-766-key-restrictions
• exit-1
• feat/add-queue-health-check-monitor
• feat/add-support-for-sorting-to-list-v2
• feat/add-version-endpoint-to-admin-api
• feat/allow-disabling-s3-protocol
• feat/allow-disabling-specific-events-tenants
• feat/allow-overwrites-when-copy
• feat/buckets-objects-grants-for-postgres
• feat/cgroup-cfs-throttling-metrics
• feat/cpabilities
• feat/custom-metadata
• feat/deprecate-service-and-anon-keys
• feat/docker-compose-example
• feat/feature-flag-freeze-migrations
• feat/gc-duration-buckets
• feat/gc-duration-buckets-test
• feat/gravity
• feat/handle-auth-on-top-level-routes
• feat/iceberg-catalog
• feat/list-objects-v2
• feat/local-vector-db
• feat/mime-magic-byte-validation-639
• feat/multitenant-db-pool-support
• feat/openapi-3-2-0
• feat/post-policy-content-length-range
• feat/pre-signed-url-with-storage-jwt-secret
• feat/prevent-direct-sql-deletes-in-storage-schema
• feat/purge-cache-for-object
• feat/rabalancing-pooling
• feat/remove-dependency-on-pg-extensions
• feat/s3-post-form
• feat/s3-protocol-custom-response-header
• feat/s3-session-token-tenant-id-secret
• feat/signed-upload-url-upsert
• feat/stale-while-revalidate
• feat/standard-upload-limits
• feat/support-x-forwarded-path
• feat/tus-object-id-header
• feat/tus-object-id-response-header-647
• feat/tus-signed-upload-url-support
• feat/tus-stable-v1
• feat/vector-bucket-openapi
• feat/vector-buckets
• feature/server-timings
• fenos/fix/migration-ordinal-clamp
• fenos/fix/unknown-migration-ahead
• fenos/test/object-versioning-acceptance
• ferhat/100mb
• ferhat/abort-controller
• ferhat/absolute-ttl-jitter
• ferhat/acceptance-1
• ferhat/acceptance-2
• ferhat/acceptance-copy-wait
• ferhat/acceptance-dynamic
• ferhat/admin-api-key
• ferhat/admin-handlers-migrations
• ferhat/admin-migration-validation
• ferhat/admin-post-coverage
• ferhat/admin-queue-management
• ferhat/admin-record-migration
• ferhat/admin-regression-tests
• ferhat/any
• ferhat/any-in-tests
• ferhat/archive-order-flake
• ferhat/async-abort
• ferhat/autoreset
• ferhat/aws-bump
• ferhat/aws-chunked
• ferhat/axios-orphan
• ferhat/axios-rest-catalog
• ferhat/axios-tests
• ferhat/backpressure-drain
• ferhat/backup-object
• ferhat/bare-ids
• ferhat/blacksmith
• ferhat/bucket-exist-test-helper
• ferhat/bump-aws
• ferhat/bump-aws-2
• ferhat/bump-biome
• ferhat/bump-target
• ferhat/bump-ts-jest
• ferhat/bump-tus-js-client
• ferhat/bump-watt
• ferhat/busboy-types
• ferhat/cache
• ferhat/cache-crypto-key
• ferhat/cache-fast-path
• ferhat/cache-for-sign
• ferhat/cache-size-calculation
• ferhat/canonical
• ferhat/cap-delete-objects
• ferhat/cap-expires
• ferhat/cdn-axios
• ferhat/cdn-singleton
• ferhat/charset-for-validation
• ferhat/cheaper-cache-metrics
• ferhat/cheaper-counters
• ferhat/cheaper-headers
• ferhat/cheaper-identity
• ferhat/cheaper-time
• ferhat/check-migrations
• ferhat/child-allocation
• ferhat/ci
• ferhat/ci-node-setup
• ferhat/cleanup-multigres
• ferhat/cloneable
• ferhat/cluster
• ferhat/cluster-axios
• ferhat/combine-byte-counters
• ferhat/config-harden
• ferhat/connection-string
• ferhat/cont-profiling
• ferhat/content-encoding
• ferhat/content-type-hook
• ferhat/cooldown
• ferhat/copy-directive
• ferhat/copy-metadata-directive
• ferhat/copy-tls-ticket
• ferhat/coverage-pg
• ferhat/crt
• ferhat/crypto-dep
• ferhat/cut-down-garbage
• ferhat/cut-down-promises
• ferhat/dash-cache
• ferhat/dashboard-top-panels
• ferhat/database-scope-restoration
• ferhat/db-slowdown
• ferhat/decoded-content-length-spoof
• ferhat/deepwiki
• ferhat/delete-bucket-empty-json
• ferhat/delete-per-key
• ferhat/delete-tenant-empty-json
• ferhat/delimiter
• ferhat/delta
• ferhat/deps
• ferhat/disable-pgboss-schedule
• ferhat/distinct-status
• ferhat/drop-fly
• ferhat/drop-head-revert-to-reduce-risk
• ferhat/drop-ip-address
• ferhat/drop-jest
• ferhat/drop-metric-toggle
• ferhat/drop-pool-mode
• ferhat/drop-s3-logger-middleware
• ferhat/drop-stream-buffers
• ferhat/dry-file-backend
• ferhat/dup-instance
• ferhat/ecs
• ferhat/ecs-rate-limit
• ferhat/empty-bucket-perm
• ferhat/empty-bucket-rls
• ferhat/empty-dir
• ferhat/empty-segment-listing
• ferhat/enrich-error
• ferhat/entity-expansion
• ferhat/error-code
• ferhat/errors
• ferhat/event-mutation
• ferhat/extract-pg-commons
• ferhat/fast-uri
• ferhat/fastify
• ferhat/fastify-5
• ferhat/feature-s3-xml
• ferhat/file-backend-last-mod
• ferhat/file-backend-path-traversal
• ferhat/file-cleanup
• ferhat/file-einval
• ferhat/file-null-version
• ferhat/file-single-race
• ferhat/file-test
• ferhat/finite
• ferhat/fix-concurrent-non-upsert
• ferhat/fix-full-profiling
• ferhat/fix-log-unit
• ferhat/fix-req-leak
• ferhat/fix-vector-schema-refs
• ferhat/flaky-abort
• ferhat/fold-search-path
• ferhat/free-by-catalog-id
• ferhat/fs-extra
• ferhat/gateway-cache-control
• ferhat/get-object-docs
• ferhat/glob
• ferhat/harden-coverage
• ferhat/harden-jwk-cache-test
• ferhat/harden-scratch-table-drop
• ferhat/hardening
• ferhat/heap-snapshot
• ferhat/iceberg-cleanup
• ferhat/iceberg-container
• ferhat/iceberg-create-table-compensation
• ferhat/iceberg-leak
• ferhat/iceberg-namespace-metadata
• ferhat/iceberg-service
• ferhat/ignore-biome-git
• ferhat/image-renderer-axios
• ferhat/imgproxy-edge-cases
• ferhat/imgproxy-source-image-bad-request
• ferhat/immutable-release
• ferhat/improve-biome
• ferhat/inflight
• ferhat/invalid-if-modified-since
• ferhat/invalid-svg
• ferhat/invalidate
• ferhat/jest-speedup
• ferhat/json-multipart
• ferhat/jwt-vi
• ferhat/knex
• ferhat/knex-followups
• ferhat/knex-in-place-rebalance
• ferhat/latest-migration
• ferhat/lazy-retry
• ferhat/leftover-sync-hooks
• ferhat/less-alloc-plugins
• ferhat/lf-head-per-key
• ferhat/lf-schema
• ferhat/lifecycle-1
• ferhat/lifecycle-backend-deletions
• ferhat/lifecycle-backend-versions
• ferhat/lifecycle-control-plane
• ferhat/lifecycle-engine-master
• ferhat/lifecycle-planning
• ferhat/limit-2
• ferhat/limits
• ferhat/list-wildcards
• ferhat/lock-delete-count
• ferhat/log-redaction
• ferhat/log-span
• ferhat/logflare-onerror
• ferhat/lru
• ferhat/malformed-xml
• ferhat/md5-multistream
• ferhat/memoize-algs
• ferhat/memoize-scope
• ferhat/metric-identity
• ferhat/migration-65-pre-pg15-compat
• ferhat/migration-admin-handler
• ferhat/migration-backoff-jitter
• ferhat/migration-hardening
• ferhat/mime
• ferhat/mime-followup
• ferhat/more-acceptance
• ferhat/more-imgproxy-errors
• ferhat/more-lint-rules
• ferhat/more-rules
• ferhat/more-vi
• ferhat/move-cleanup
• ferhat/multigres-matrix
• ferhat/multigres-unsafe
• ferhat/multipart-head
• ferhat/mustache
• ferhat/name
• ferhat/no-child-logger-per-request
• ferhat/no-hrtime
• ferhat/no-unnecessary-conds
• ferhat/no-unused-vars
• ferhat/node-26
• ferhat/node-version
• ferhat/none-match-file
• ferhat/on-tenat-config
• ferhat/operation-ergonomics
• ferhat/oriole-after-workaround
• ferhat/oriole-vector
• ferhat/orioledb-tests
• ferhat/otel-headers
• ferhat/otel-tracing-endpoint-case
• ferhat/part-compat
• ferhat/part-size
• ferhat/perf-1
• ferhat/perf-pass
• ferhat/pg13
• ferhat/pgboss-v10-migrate-admin
• ferhat/pgbouncer
• ferhat/pgvector-metric-lru
• ferhat/pin-npm
• ferhat/pipelining
• ferhat/pipethrough
• ferhat/poison
• ferhat/pool-cache
• ferhat/pool-errors
• ferhat/pool-ttl-configurable
• ferhat/port-conflict
• ferhat/postpone-policy-parsing
• ferhat/pprof
• ferhat/pprof-filename
• ferhat/pr-title
• ferhat/precompile-projection
• ferhat/prefix-root
• ferhat/prevent-double-walk
• ferhat/progressive-clear
• ferhat/progressive-migrations
• ferhat/projection-cache
• ferhat/prom-exporter
• ferhat/protobufjs
• ferhat/range-file
• ferhat/rebalance-better
• ferhat/refresh-migration-context
• ferhat/reg1
• ferhat/reg2
• ferhat/reg3
• ferhat/release-action
• ferhat/release-conn-event
• ferhat/render-acceptance
• ferhat/repair-index
• ferhat/req-metadata
• ferhat/request-id
• ferhat/reuse-executor
• ferhat/run-migrations
• ferhat/s3-amend
• ferhat/s3-bound
• ferhat/s3-checksum
• ferhat/s3-delete
• ferhat/s3-delete-objects
• ferhat/s3-get-cond-code
• ferhat/s3-hoisted
• ferhat/s3-multipart
• ferhat/s3-repeated-metadata
• ferhat/s3-upload-part-copy
• ferhat/s3-url-content-parser
• ferhat/scanner-pagination
• ferhat/scope-perf
• ferhat/secure-context-once
• ferhat/security-bumps
• ferhat/shard-stats
• ferhat/shared-s3-tus-lock
• ferhat/shutdown-reply
• ferhat/signatures
• ferhat/sigv4-signing-cache
• ferhat/sigv4-stream
• ferhat/simpler-cache
• ferhat/simplify-memoize
• ferhat/simplify-operation-shape
• ferhat/single-mem-collector
• ferhat/single-use
• ferhat/sizeof
• ferhat/sizing-order
• ferhat/socket-hang
• ferhat/speed-ci
• ferhat/spill
• ferhat/split-database-contract
• ferhat/split-docs-build-deploy
• ferhat/ssl-brackets
• ferhat/stackless-singleton-test-permission
• ferhat/sync-hooks
• ferhat/tenant-config-per-request
• ferhat/tenant-feature
• ferhat/tenant-id
• ferhat/tenant-pool-hit-ratio
• ferhat/tenant-pool-logging
• ferhat/tenant-pool-more-metrics
• ferhat/test-collision
• ferhat/test-flake
• ferhat/test-flakes
• ferhat/text-encoder
• ferhat/timeout-fold-scope
• ferhat/tls-resumption
• ferhat/topk
• ferhat/traceparent
• ferhat/tracing-conditional
• ferhat/tracing-hidden-metric-pipeline
• ferhat/ts-node-dev
• ferhat/tus
• ferhat/tus-abort-lock
• ferhat/tus-db-conn-on-close
• ferhat/tus-dup
• ferhat/tus-idle-timeout
• ferhat/tus-leaks
• ferhat/tus-lease
• ferhat/tus-lease-2
• ferhat/tus-original
• ferhat/tus-part-leak
• ferhat/tus-path-traversal
• ferhat/tus-saturation
• ferhat/tus-signed
• ferhat/tus-version
• ferhat/undici-1
• ferhat/undici-2
• ferhat/undici8
• ferhat/unsatisfied-range
• ferhat/unscoped-health
• ferhat/update-object-metadata
• ferhat/vector-acceptance
• ferhat/vector-bigint
• ferhat/vector-list-pagination
• ferhat/versioning-dark-schema
• ferhat/vitest
• ferhat/vitest-unit
• ferhat/watt-acceptance
• ferhat/x-forward
• ferhat/x-robots-pass
• ferhat/xml
• ferhat/xml-bump
• ferhat/xml-cve
• ferhatelmas/storage-563-precompile-s3-router-similar-to-fastify-find-my-way-5230
• ferhatelmas/storage-564-convert-eager-abort-signal-creation-to-similar-to-9570
• ferhatelmas/storage-565-create-a-json-schema-for-logs-and-use-fast-json-9bd8
• ferhatelmas/storage-566-use-fast-decode-where-applicable-for-decoding-uri-65c3
• files-backend-linux-etag
• fix-migrate
• fix-trigger-update-level
• fix/add-error-callback-for-logs-ingestion
• fix/add-migration-check-on-bucket-create
• fix/add-robots-header
• fix/admin-integer-limits
• fix/admin-tenant-nullable-pool
• fix/allow-10000-parts-for-s3
• fix/allow-10000-parts-for-s3-upload
• fix/allow-connect-via-ip-address
• fix/allow-webp-in-transformation-options
• fix/auth-header-s3
• fix/aws-sdk-stream-buffer
• fix/base-migrations
• fix/base64-on-metadata-headers
• fix/bulk-delete-marker-on-marker
• fix/bump-storage-version
• fix/check-empty-auth-header
• fix/check-for-public-bucket-on-info-request
• fix/check-local-migrations-in-has-migrations
• fix/ci-ubuntu-version
• fix/cleanup-imports
• fix/close-connection-on-pre-body-error
• fix/content-disposition-rfc8187
• fix/content-type-charset
• fix/copy-event
• fix/copy-object-content-type
• fix/copy-object-same-path
• fix/copy-source-url-decode
• fix/correct-operation-for-auth-render-image
• fix/cusrsor-s3-list-v1
• fix/db-install-roles-default-value
• fix/default-max-file-size-s3-post-upload
• fix/default-queue-env
• fix/deps-upgrade-custom-options
• fix/disable-content-type-parsers
• fix/do-not-drop-column-jwks-on-tenants
• fix/do-not-make-head-call-for-zero-byte-uploads
• fix/do-not-select-redundant-column
• fix/doc-export
• fix/dont-allow-buckets-named-public
• fix/endpoint-cache-control
• fix/env-file-backend-name
• fix/error-code-mismatches
• fix/error-log-edge-case
• fix/exclude-empty-headers-s3
• fix/expose-etag-headers-for-s3-multipart-upload
• fix/file-backend-copy-preconditions
• fix/file-backend-ensure-file-enoent
• fix/file-backend-if-modified-since
• fix/file-backend-xattr-leak
• fix/file-byte-range-case
• fix/file-multipart-part-order
• fix/file-size-limit-precision
• fix/filter-namespace-by-bucket
• fix/fix-search-to-return-proper-case
• fix/gracefully-handle-incomplete-multipart-uploads
• fix/grant-to-postgres-with-grant-option
• fix/handle-databse-timeout-errors
• fix/handle-max-clients-error-for-supavisor
• fix/header-validation-always-string
• fix/healthcheck-return-reply
• fix/iceberg-bucket-operation-ids
• fix/iceberg-delete-remote-namespace
• fix/iceberg-list-tables-pagination
• fix/improve-analytics-buckets
• fix/improve-db-errors
• fix/increase-put-vector-body-limit
• fix/info-headers
• fix/int-overflow-in-size-function
• fix/jwk-signing-key-629
• fix/list-user-metadata
• fix/list-v2-response-schema
• fix/log-aborted-connections
• fix/mark-filename-immutable
• fix/merge-tenant-jwks-with-new-jwks-table
• fix/metadata-input-names
• fix/migrate-call
• fix/migration-check
• fix/migration-types-ordering
• fix/migrations-freeze-queued-jobs
• fix/mime-type-parameters
• fix/multipart-quoted-part-etag
• fix/multipart-upload-openapi-docs
• fix/new-api-key-suport
• fix/onSend-hook-execution-time
• fix/openapi-3-1-nullable-schemas
• fix/operation-flag-on-s3-protocol
• fix/optional-queue-params
• fix/orphan-client
• fix/orphan-object-script-fixes
• fix/orphan-objects-delete-date-validation
• fix/otel-hook
• fix/otel-metrics-header-values
• fix/pagination-scanner
• fix/part-upload-remove-pipeline
• fix/pass-config-on-signature
• fix/pass-header-alg-to-importJWK
• fix/percintile-metrics
• fix/pgboss-exactly-once-queue
• fix/pgboss-on-error-callback
• fix/pgboss-queue-init
• fix/pgvector-filter-json-types
• fix/pool-cleanup
• fix/post-tenant-transaction
• fix/prefixes-concurrency-cleanup
• fix/prevent-duplicate-logs
• fix/prevent-path-traversal-outside-of-storage-path
• fix/primary-keys-migration
• fix/proxy-headers-on-protocols
• fix/put-vector-metadata-validation
• fix/queue-connection-handling
• fix/queue-fetching-parallel-batches
• fix/refactor-folders
• fix/remove-default-content-range
• fix/render-vary-accept
• fix/return-bucket-id-on-info
• fix/revert-migrate-script-rename
• fix/rls-check-on-move
• fix/run-migrations-after-tenant-creation
• fix/s3-304-content-length
• fix/s3-304-response-overrides
• fix/s3-bucket-not-empty-code
• fix/s3-chuncked-upload
• fix/s3-complete-upload-typo
• fix/s3-copy-paste-errors
• fix/s3-count-on-list
• fix/s3-credential-cache-notify-fix
• fix/s3-delete-marker-response-metadata
• fix/s3-delete-objects-quiet
• fix/s3-delete-response
• fix/s3-get-object-if-match
• fix/s3-head-object-conditional-headers
• fix/s3-head-zero-byte-content-length
• fix/s3-header-name-length-check
• fix/s3-list-buckets-pagination
• fix/s3-list-buckets-prefix
• fix/s3-list-objects-max-keys-zero
• fix/s3-list-parts-reuploaded-part
• fix/s3-listobjects-v1-nextmarker
• fix/s3-locker-timing-issue
• fix/s3-metadata-header-collisions
• fix/s3-multipart-bucket-key-identity
• fix/s3-object-list-v1-cursor
• fix/s3-object-pagination-with-url-encoding
• fix/s3-post-content-type-list
• fix/s3-range-416-content-range
• fix/s3-signature-length-guard
• fix/s3-signed-header-whitespace
• fix/s3-v1-next-marker-encoding
• fix/s3-vector-client-config
• fix/safely-handle-concurrent-promise-rejection
• fix/scanner-scratch-table-uniqueness
• fix/scope-signed-url-token
• fix/signature-for-strict-clients
• fix/signed-image-format-origin
• fix/signed-urls-schema-type
• fix/sigv4-header-time-window-1568
• fix/single-migration-strategy
• fix/start-single-migrations
• fix/storage-copy-across-buckets
• fix/storage-correctness-oct7
• fix/storage-download-preconditions
• fix/storage-encoding-on-copy
• fix/strip-extra-slash-from-tus-path
• fix/support-orioledb-migrations
• fix/switch-from-jsonwebtoken-tojose
• fix/table-exists-check
• fix/tenant-hook-return-reply
• fix/tenant-vector-zero-limits
• fix/tenant-zero-file-limit
• fix/tests
• fix/traced-upload-cleanup
• fix/tus-file-separator-folder
• fix/tus-filename-version-separator
• fix/tus-lock-abort-settlement
• fix/tus-locker-error-handling
• fix/tus-s3-lock-lease-fencing
• fix/tus-s3-lock-renewal-overlap
• fix/tus-signed-url-validation
• fix/update-img-proxy-env-to-be-consistent-with-prod
• fix/update-to-fastify-v5
• fix/updating-pool-mode-on-put
• fix/upload-part-copy-preconditions
• fix/use-handle-missing-metadata-in-file-adapter
• fix/use-original-encoding-header-if-available
• fix/use-pino-file-when-logflare-is-disabled
• fix/use-queue-in-empty-to-delete-objects
• fix/use-s3-compliant-component-encoding
• fix/validate-header
• fix/validate-s3-headers-before-sending
• fix/vector-index-name-limit
• fix/vector-key-unicode-length-1569
• fix/vector-list-max-results-integer-1571
• fix/x-forwarded-port-local
• fix/x-robots-tag-max-snippet-allow-minus-one
• fix/zero-byte-multipart-limit
• hf/add-jwks-support
• hf/bump-ci-node
• hf/prevent-role-in-presigned-url
• imgproxy/local-path-file-driver
• improvement/adapter-interface
• ip/logs-batch
• ip/release
• ip/release-2
• kiwicopple-patch-1
• km/feat-eks-cluster-discovery
• lenny/acceptance-test-fixes-cdn-cache-auth-check
• lenny/acceptance-test-fixes-retry-hit
• lenny/acceptance-test-increase-delay-for-signed
• lenny/acceptance-test-jwt-timeout
• lenny/acceptance-test-purge-delay
• lenny/add-ability-to-roll-url-signing-key
• lenny/add-admin-endpoint-to-clean-orphan-iceberg-resources
• lenny/add-manual-cache-purge
• lenny/add-open-api-auth-schemes
• lenny/add-optimized-functions-migration
• lenny/add-replace-existing-container-script
• lenny/add-resource-type-to-iceberg-resource-error
• lenny/add-stale-while-revalidating
• lenny/add-swagger-ui-generator
• lenny/add-validation-to-search-by-timestamp
• lenny/additional-error-normalization
• lenny/adjust-acceptance-test-timing
• lenny/adjust-acceptance-tests-flakiness
• lenny/bump-tus-storage-version
• lenny/chunked-upload-size-limit
• lenny/delete-iceberg-resources-with-missing-tenant
• lenny/drop-unused-database-functions
• lenny/exclude-bucket-type-for-old-storage-py-versions
• lenny/exclude-bucket-type-for-old-storage-py-versions-2
• lenny/exclude-soft-deleted-catalogs-from-limits
• lenny/fix-add-empty-bucket-lifecycle-logs
• lenny/fix-cdn-cache-manager-errors
• lenny/fix-database-error-message-context
• lenny/fix-delete-metadata
• lenny/fix-do-not-allow-update-bucket-with-missing-payload
• lenny/fix-docs-page-deploy-again
• lenny/fix-docs-pages-deploy
• lenny/fix-header-validation-errors
• lenny/fix-infra-stop-script
• lenny/fix-list-v1-search
• lenny/fix-open-api-specs
• lenny/fix-orphan-object-scanner
• lenny/fix-referenced-resource-error-message
• lenny/gracefully-handle-failed-s3-part-delete
• lenny/handle-429-errors-more-better
• lenny/handle-trigger-failures
• lenny/iceberg-cleanup-fix
• lenny/jwk-forward-compat
• lenny/jwks-support-standby-key-and-asymmetric-keys
• lenny/lifecycle-log-fixes
• lenny/lifecycle-log-fixes-after-versioning
• lenny/log-fixes-error-codes-and-stacks
• lenny/optimize-cache-control-directive
• lenny/persist-subscription-tier
• lenny/purge-cdn-on-bucket-update
• lenny/revoke-unused-grants
• lenny/s3-route-validation-acceptance-test
• lenny/tus-timeout-fix
• lenny/update-acceptance-tests-for-staging
• lenny/update-tus-to-fix-zero-byte-upload-bug
• lenny/webhook-request-fixes
• logs/add-execution-time
• manangupta/mul-542-add-storage-ci-action-for-multigres-docker-image
• master
• mcollina/undici-http-handler
• metrics/add-agent-metrics
• metrics/add-dynamic-service-name
• migrations/allow-excluding-columns-for-old-migrations
• migrations/optimise-migrations
• migrations/sync-mode
• missing-content-type
• moinitoring/improvement
• monitoring/otel-metrics
• monitoring/stream-monitoring
• monitoring/upload-stream
• multitenant/allow-increase-img-transform-res-per-tenant
• multitenant/migrations-execution
• node24-for-semantic
• observability/delta-metrics
• pcnc/batch-size
• perf/improve-handling-of-request-cancellation
• perf/otel-upgrade-reduce-allocations
• perf/query-cancellation-stricter-timeouts
• perf/search-query-optimized
• pgboss/v10
• process/add-watt-process-runner-support
• queue/revamp
• rebuild/v.1.11.6
• refactor/cgroup-cpu-collector
• refs/pull/444/merge
• release/0.48.0
• release/1.8.2
• release/v1.0.10
• revert/fx-attrs-upgrade
• rollback/trigger-prefixes
• s3-protocol/fix-file-driver
• s3/chunked-upload-signature-verification-fix
• s3/consistent-rls-for-session-token
• s3/delete-objects-array-validation
• s3/get-object-tagging-stup
• s3/omit-next-continuation-token-when-empty
• s3/protocol
• s3/signed-urls
• s3/split-clients
• self-hosted/s3-host-url
• self-hosted/storage-public-url
• shutdown/signals
• storage/accept-forwarded-header-for-signature
• storage/authenticated-query-token
• storage/do-not-validate-mime-type-on-empty-folder
• storage/docker-image-deps
• storage/exclude-network-metric
• storage/fix-get-presigned-urls
• storage/handler-on-error-on-client
• storage/improve-upload-performance
• storage/operation
• storage/optimise-metrics
• storage/otel-tracing
• storage/push-latest
• storage/queue-worker-mode
• storage/use-literals-migraton
• storage/webhooks-max-http-connections
• tenant/env-for-tenant-sensible-info
• tests/improve-acceptance-test-for-remote
• traces/add-more-traces
• traces/custom-spans
• tracing/optional-log-tracing
• tracing/stream-monitoring
• tus/allow-disabling-s3-tags
• tus/dont-cache-metadata
• tus/fix-locker-release
• tus/upgrade-latest
• tyler/STORAGE-258/user-metadata-in-rls
• tyler/STORAGE-292/amend-migrations-to-prevent-crashes
• tyler/chore/pgbouncer-app-name
• tyler/chore/switch-to-rustfs
• tyler/chore/update-pg-applicaition-name
• tyler/feat/add-multigres-to-migrations-idemp-check
• tyler/feat/add-pagination-get-buckets
• tyler/feat/object-versioning
• tyler/feat/object-versioning-wave-1
• tyler/feat/object-versioning-wave-2
• tyler/feat/object-versioning-wave-2a
• tyler/feat/object-versioning-wave-3
• tyler/feat/s3-versioning-compat
• tyler/fix/acceptance-iceberg-teardown
• tyler/fix/coveralls-badge
• tyler/fix/index-collation
• tyler/fix/multigres-direct-connection
• tyler/fix/multipart-function-identity
• tyler/fix/presigned-s3-post-forms
• tyler/fix/s3-default-content-type
• tyler/fix/s3-multipart-response-shape
• tyler/fix/storage-db-lint
• tyler/fix/vector-s3-buckets-empty-env-parsing
• tyler/refactor/make-normalize-columns-table-dependent
• tyler/refactor/pg-app-name
• tyler/s3-versioning/1-bucket-config
• update-wattpm
• upgrade/pg-boss-version
• watt-db-application

Build # 40434648788

Build Type

Pull #1611

github

Committed by web-flow

Commit Message

Merge e96a397b8 into 3a88e1f74

Pull Request Pull Request #1611: docs: Add SECURITY.md

Coverage Stats

7955 of 9776 branches covered (81.37%)

Branch coverage included in aggregate %.

13594 of 15334 relevant lines covered (88.65%)

870.38 hits per line