3.0.3 (2026-10-29)

Bug Fixes

• bound artifact upload lifetime and join local cleanup (d02087d)
• gcs: stop GCS reads that close early and keep tags on promote (416a152)
• gcs: write the legacy tag sidecar for older server versions (dd7be7d)
• merge the updated GCS change and fix the review findings (9d2d126)
• publish GCS artifact bodies and signature tags atomically (a0ab19c), closes #949

3.0.2 (2026-10-29)

Bug Fixes

• docker: pin the Node.js base image by digest (9c02b11), closes #952

3.0.1 (2026-10-29)

Bug Fixes

• s3: abort GetObject request and destroy response body on client disconnect (ea39f99), closes #948
• storage: release download sockets and fix abort tests (2cccc3b)

3.0.0 (2026-10-29)

chore

• require Node.js 22 or later (4f3c5f6)

BREAKING CHANGES

• The package does not support Node.js 20. Use Node.js 22 or later.

2.14.5 (2026-10-29)

Bug Fixes

• ci: align CodeQL action versions (625b73e)

2.14.4 (2026-10-23)

Bug Fixes

• deps: bump fastify from 5.12.5 to 5.12.6 (bd3da0e)

2.14.3 (2026-10-07)

Bug Fixes

• remote-cache: log cache misses without the error object (747c9d0)
• remote-cache: log missing artifact tags without the error object (caed3c9)

2.14.2 (2026-10-02)

Bug Fixes

• deps: bump fastify from 5.12.1 to 5.12.5 (35d7e93)

2.14.1 (2026-09-17)

Bug Fixes

• remote-cache: abort the Azure block upload when the write stream is destroyed (9b7de13)
• remote-cache: abort the S3 multipart upload when the write stream is destroyed (094391a)
• remote-cache: close the connection when an upload fails before the body ends (5cccf24)
• remote-cache: do not abort a completed S3 upload on destroy (429926a)
• remote-cache: fail the write stream when the storage upload fails (411d6bc)
• remote-cache: ignore a negative content-length in the body-limit fast path (0a015d9)
• remote-cache: publish streamed artifacts atomically via a temporary key (784c65d)
• remote-cache: stream artifact uploads to storage instead of buffering full body in memory (c4a422f), closes #679

2.14.0 (2026-09-17)

Bug Fixes

• jwt-auth: ignore empty items in the required scopes and roles (6745c16)
• jwt-auth: read scopes, roles and teams with one claim parser (7fbea56)

Features

• jwt-auth: support check on roles claim and support alternative scope claim name (7af9743), closes #619