2.12.3 (2026-09-02)

Bug Fixes

• deps: bump fastify from 5.8.5 to 5.12.1 (082d8d1)

2.12.2 (2026-09-01)

Bug Fixes

• address review comment on #889 (71930c5)
• Running in Lambda has inherent 6mb request size limit (#677) (6cc0c1d)

2.12.1 (2026-09-01)

Bug Fixes

• env: use named Ajv export instead of default workaround (c81d403)

2.12.0 (2026-08-04)

Bug Fixes

• remote-cache: address path traversal and validate CDN URL scheme (0963658)
• return correct x-artifact-tag header in HEAD route and restore test assertions (5686f1a)

Features

• support separate read URL to use a CDN (#557) (e6b535f)

2.11.7 (2026-08-03)

Bug Fixes

• storage: propagate Azure download failures instead of hanging the request (57a5502)

2.11.6 (2026-08-03)

Bug Fixes

• routes: drop route-level error log before rethrow to avoid double logging (c06af34)
• storage: address review feedback (preserve tag message, document 403 trade-off) (2a72a91)
• storage: surface backend failures as 5xx instead of masking as cache miss (1b1581e), closes #815

2.11.5 (2026-07-21)

Bug Fixes

• override shell-quote (e03a32b)

2.11.4 (2026-07-21)

Bug Fixes

• storage: use POSIX separators for artifact keys (1e5fa6f), closes #800

2.11.3 (2026-07-21)

Bug Fixes

• azure-blob-storage: await block blob upload so signed .tag writes persist (66289c1), closes #831 #791 #656 #815

2.11.2 (2026-06-15)

Bug Fixes

• deps: bump fast-xml-parser override to >=5.7.0 (GHSA-fj3w-jwp8-x2g3, GHSA-8gc5-j5rx-235r, GHSA-jp2q-39xq-3w4g, GHSA-gh4j-gqv2-49f6) (e5fed7b)
• deps: cap uuid override to v11 for CJS compatibility (966e6ec)
• deps: override fast-uri to >=3.1.2 (GHSA-v39h-62p7-jpjc, GHSA-q3j6-qgpj-74h6) (4a4e232)
• deps: override picomatch to >=2.3.2 (GHSA-3v7f-55p6-f55p) (fda644c)
• deps: override uuid to >=11.1.1 (GHSA-w5hq-g745-h8pq) (50687a6)