Changelog

• a40aae8 Bugfix: url-encoded chars on the website listener
• 6f69a1f Check versioning on init
• ea9c1d6 auth: add GetUserAccountFresh to bypass the IAM cache
• 4e5fb34 chore(deps): bump actions/checkout from 6 to 7
• d88ac4e chore(deps): bump actions/setup-go from 6 to 7
• 77aa23b chore(deps): bump actions/setup-go from 6 to 7
• 1c7e22e chore(deps): bump github/codeql-action from 4 to 4.37.4
• dc2ae0c chore(deps): bump github/codeql-action from 4.37.4 to 4.37.6
• e553d3c chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7
• ec61bc5 chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8
• 41a511e chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9
• ea8233c chore(deps): bump the dev-dependencies group across 1 directory with 20 updates
• c1c5a5f chore(deps): bump the dev-dependencies group with 19 updates
• 3e555fb chore(deps): bump the dev-dependencies group with 21 updates
• 8ac6bd5 chore(deps): bump the dev-dependencies group with 22 updates
• 8112b91 chore(deps): bump the dev-dependencies group with 23 updates
• 67e8d08 chore(deps): bump the dev-dependencies group with 27 updates
• f4a2904 chore(deps): bump the dev-dependencies group with 9 updates
• 87fc1b9 chore: add rdma/librcserver.a to .gitignore
• de042a5 cumiddleware: cover RC token boundary and legacy-precedence cases
• 05487cf cumiddleware: reject unsupported RC token schemes with 501
• c638503 feat(azure): carry Azure blob marker in continuation token for pagination
• a780f34 feat(azure): server-side copy with download+reupload fallback
• c84c5f6 feat: accept principal ARNs in bucket policies under standalone IAM
• e012a6f feat: add AWS-compatible standalone IAM service
• 7b6b816 feat: add Helm chart support for the standalone IAM service
• ec579ca feat: add IAM OIDC provider CRUD
• 4901afe feat: add IAM OIDC provider tagging actions
• cbcc656 feat: add IAM Role CRUD
• c9ce6ab feat: add IAM role inline policy CRUD
• 1bbcd64 feat: add IAM role tagging actions
• 9b352a3 feat: add IAM user access key management
• 3328501 feat: add IAM user inline policy CRUD
• 26a54b3 feat: add IAM user tagging actions
• ab2b816 feat: add STS web identity federation, IAM policy Condition support, and access control enforcement
• 062bf0b feat: add best-effort O_DIRECT support for posix put/get-object put-part
• 45a532e feat: add configurable file permissions for new objects
• 1b8147c feat: add helm chart admin and webui ingress support
• 2e22a42 feat: add live GitHub OIDC end-to-end test for AssumeRoleWithWebIdentity
• 62c6787 feat: add new vgwrdma service for cuObject compatible server
• 29256f0 feat: add optional data-integrity ETag mode for posix/scoutfs
• abb3b27 feat: add standalone IAM support in WebGUI
• c9e26b5 feat: add standalone iam service to systemd config setup
• 535cc9d feat: add the hipobj-rc-v2 control routes to the vgwrdma gateway
• a8c5810 feat: allow supplying an external IAM service implementation to embedgw
• 7dfea7a feat: govern GetBucketVersioning with the regular access checks
• 2147a0c feat: integrate standalone IAM service with S3 gateway for identity-based policy enforcement
• 5f9041f feat: support admin/access logs on standard streams
• a4d4519 feat: version the private IAM protocol between gateway and standalone service
• f7e13d7 fix(posix): make conditional PUT evaluation and publication atomic per key
• b83f5d9 fix(posix): return empty config for GetBucketVersioning when unconfigured
• 0720815 fix: add integeration tests
• f6219c8 fix: add license header to rdma files
• 6121d52 fix: apply default Content-Type in POSTObject
• f567abc fix: authorize every key in a DeleteObjects batch after a bucket-policy deny
• fce9d9b fix: build failure from conflicting merges
• ca8d434 fix: drain unread request bodies before closing the connection
• 9a73e22 fix: harden posix conditional publish locking
• e146646 fix: honor mpMaxParts across partNumber validation
• b9f8b8e fix: include common prefixes in ListObjectsV2 key count
• 9011935 fix: infer UserName from the calling access key in the access-key APIs
• 8779630 fix: make --chuid/--chgid usable with the standalone IAM service
• 4a0e07f fix: newer gofmt for s3api
• afbee5b fix: role last-used tracking, and record S3 requests in last-used metadata
• e05d0df fix: s3proxy sends bodyless CreateBucket when the configuration is empty
• 571df30 fix: support proxy
• c7f8bc0 fix: use constant-time comparisons for SigV4 signatures
• c0ed55c fix: use dir permissions option for temporary directories
• c281008 rdma: add the Go binding for the RC session server
• 64fcfee rdma: add the RC session server C ABI
• 50fc9fe rdma: authenticate RC routes through the terminal error path
• 726d65d rdma: gate the RC data plane behind a dedicated flag
• 1596531 rdma: keep RC route XML fidelity
• 50f4482 rdma: map RC transport errors to protocol codes
• efa0309 rdma: port the hipObject v2 RC session core
• 1a8d4c9 rdma: serialize RC route errors at the route boundary
• 158ccdf rdma: test RC route errors through the production server