v2.252.0

Bug Fixes

• avoid mutating resource name in copyFile (#11602) #11602 (Brandon Duffany)
• CDC: fallback on transient proxy read errors (#11626) (Tyler French)

Commits

• c845a90: shared.bazelrc: unblock config=remote (#11600) (Son Luong Ngoc) #11600
• 3cb2356: [WF] Use the CLI in Workflows if configured (#11576) (Maggie Lou) #11576
• b6b80ef: Report empty address list instead of error. (#11603) (Vadim Berezniker) #11603
• upgrade to v0.60.0 (#11605) #11605 (Son Luong Ngoc)
• ea4c277: Reduce grpc connection pool size with client side LB (#11606) (Vanja Pejovic) #11606
• d71d04f: Move IP Rule fetching, caching, and refreshing logic into in interface in ip_rules_enforcer (#11595) (Iain Macdonald) #11595
• ecc2f9f: Remove IPRulesEnforcer.Check's skipCache parameter (#11609) (Iain Macdonald) #11609
• 6a2effd: Add stable GetAuditLog API with stable cursor pagination (#11321) (Son Luong Ngoc) #11321
• e1053a3: Make the background IP Rule-refreshing goroutine exit on server shutdown (#11611) (Iain Macdonald) #11611
• 2614daf: Remove ipRulesProvider.get's skipRule parameter (#11610) (Iain Macdonald) #11610

v2.251.0

Features

• app: automatically get PR number from client_env (#11572) #11572 (Tyler French)

Bug Fixes

• chunking: skip GetCapabilities for executor uploads (#11559) #11559 (Tyler French)
• return MissingDigest on stream.Recv NotFound (#11569) #11569 (Tyler French)
• avoid mutating resource name in copyFile (#11602) (Brandon Duffany)

Performance Improvements

• CDC: upload local/remote at the same time (#11425) #11425 (Tyler French)

Commits

• 740ec46: Revert "Enable ipv6, nftables, NAT, and nf_raw for Firecracker amd64 guests" (#11554) (Brandon Duffany) #11554
• upgrade to 9.0.1 (#11557) #11557 (Son Luong Ngoc)
• 6b6fe9f: Revert "Fix firecracker disk utilization metric" (#11560) (Brandon Duffany) #11560
• 524d2c6: optimize RunMultiKey in raft sender (#11538) (Lulu Zhang) #11538
• 487dfdb: Run buildfix.sh (#11564) (Iain Macdonald) #11564
• 4c0ac24: Move interfaces.LRU to lru.LRU (#11566) (Iain Macdonald) #11566
• 06e555f: Rename lru.NewLRU() to lru.New() and remove unused MaxSize() method (#11568) (Iain Macdonald) #11568
• 43dced1: Add a thread-safe LRU to lru.go (#11563) (Iain Macdonald) #11563
• d940e5b: Fix log message format for remote receive error (#11575) (Vanja Pejovic) #11575
• 8071c31: Add an expiring LRU to lru.go (#11565) (Iain Macdonald) #11565
• ba3bdb6: Add GitHub Actions URL automatically (#11573) (Keith Smiley) #11573
• 2c28a65: Use joins instead of derived table to get membership info. (#11582) (Vadim Berezniker) #11582
• 2e17afd: Replace the imageExistsCache in podman.go with an lru.LRU (#11581) (Iain Macdonald) #11581
• e4f4548: Create a grpc StatsHandler which exports ingress and egress bytes metrics with cloud provider and region dimensions (#11556) (Vanja Pejovic) #11556
• 3f235a7: Replace the iprules LRU with an lru.LRU (#11579) (Iain Macdonald) #11579
• 8683abe: Add some env var processing tests (#11580) (Keith Smiley) #11580
• 0392090: Make the lru.LRU in remoteauth.go thread-safe and remove the external mutex (#11589) (Iain Macdonald) #11589
• d51a63b: Split IPRulesService into IPRulesEnforcer and IPRulesService (#11555) (Iain Macdonald) #11555
• 5c32c1e: Add traffic stats handler to apps and proxies (#11590) (Vanja Pejovic) #11590
• ea941cb: Replace the apiKeyGroupCacheEntry in authdb.go with an lru.LRU (#11587) (Iain Macdonald) #11587
• 3adca08: Replace tag-to-digest cache fanciness in oci.go with lru.LRU (#11591) (Iain Macdonald) #11591
• d681ba0: Rename the region dimension in traffic stats (#11592) (Vanja Pejovic) #11592
• 536ec94: Add settings theme transition and clean up some styles (#11500) (Brandon Duffany) #11500
• bcff1a1: Fix gRPC server registration order in Cache Proxy (#11593) (Iain Macdonald) #11593
• c049b04: grpc_client support for xds. (#11594) (Vadim Berezniker) #11594
• 3fc9a7c: Replace the ip_rules_enforcer LRU with an lru.LRU (#11596) (Iain Macdonald) #11596
• enable strings modern analyzers (#11558) #11558 (Son Luong Ngoc)
• f938420: Ensure timeouts and retries on FindMissingBlobs (#11588) (Brandon Duffany) #11588
• d952b50: Add debug logging for invalid action protos (#11601) (Brandon Duffany) #11601
• 47465fa: Set BUILDBUDDY_RUN_ID env var (#11584) (Tyler Williams) #11584
• 4e518df: Roll forward "Enable ipv6, nftables, NAT, and nf_raw for Firecracker amd64 guests" (#11585) (Brandon Duffany) #11585
• 39a81f5: [WF] Add a config setting to enable the CLI as the bazel command on remote runners (#11571) (Maggie Lou) #11571

v2.250.0

Bug Fixes

• CDC: let CAS_WRITE permissions write chunked blobs (#11539) #11539 (Tyler French)
• CDC: stop storing chunked manifests in GCS (#11540) #11540 (Tyler French)

Chores

• CDC: add failure monitoring to dashboard (#11541) #11541 (Tyler French)
• executor: use a dynamic timeout for SpliceBlob (#11550) #11550 (Tyler French)

Commits

• 2a5cbac: [CDC perf] parallelize pebble GetMulti (#11537) (Vanja Pejovic) #11537
• 89507bb: On the usage page, round minutes to the nearest whole number instead of displaying out to three decimal places (#11516) (George Li) #11516
• add run-under exec_property to wrap test execution (#11534) #11534 (David Flemström)
• 2b79cd0: Fix goroutine leak in rpcutil.Sender (#11522) (Iain Macdonald) #11522
• f04d40b: [RB] Optimize git operations run by the CLI (#11432) (Maggie Lou) #11432
• 605d546: Revert "fix(CDC): stop storing chunked manifests in GCS" (#11544) (Tyler French) #11544
• 54fd4d1: update docs to show origin on usage metrics (#11447) (Tyler French) #11447
• 44bae83: [RB] Optimize fetching default branch (#11434) (Maggie Lou) #11434
• 6ad440a: Add test for validating changelog tags (#11520) (Maggie Lou) #11520
• add more execution output format options (#11439) #11439 (Brandon Duffany)
• 6ddd289: Expose SCIM groups API under a new path. (#11498) (Vadim Berezniker) #11498
• fix(chunking): don't store manifests in GCS (#11547) #11547 (Tyler French)
• setup mordernize analyzers (#11527) #11527 (Son Luong Ngoc)
• 0f0cf03: [WF] Don't recursively invoke the CLI (#11543) (Maggie Lou) #11543
• 8d75ba0: Add slack notification about new changelog posts (#11546) (Maggie Lou) #11546
• ec6f37a: Enable ipv6, nftables, NAT, and nf_raw for Firecracker amd64 guests (#11542) (Brandon Duffany) #11542
• e5ddccb: Revert "Enable ipv6, nftables, NAT, and nf_raw for Firecracker amd64 guests" (#11554) (Brandon Duffany)
• d382dc2: Revert "Fix firecracker disk utilization metric" (#11560) (Brandon Duffany)

v2.249.0

Chores

• separate executor chunking flag (#11501) #11501 (Tyler French)
• debug missing digests chunking issues (#11504) #11504 (Tyler French)
• separate proxy read chunking flag (#11517) #11517 (Tyler French)
• add groupID to proxy chunk count metrics (#11492) #11492 (Tyler French)

Commits

• 0aaf66b: fix flaky store_test (#11499) (Lulu Zhang) #11499
• 05f0b67: Add a tracing span to chunking.verifyChunks (#11503) (Vanja Pejovic) #11503
• 5e755f1: Add some historical changelog posts (#11494) (Maggie Lou) #11494
• 331cccb: Create historical changelog for bb explain (#11495) (Maggie Lou) #11495
• 71da1dc: Add changelog post for dark mode (#11496) (Maggie Lou) #11496
• c1fe6a4: Revert "add a new index to optimize invocations search query by repo url" (#11506) (Lulu Zhang) #11506
• 2936075: Update jasmine in pnpm for dependabot (#11502) (Zoey Greer) #11502
• e9a6b09: Bump svgo from 3.3.2 to 3.3.3 in /website (#11505) (dependabot[bot]) #11505
• e123df3: Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#11455) (dependabot[bot]) #11455
• be505b7: Bump github.com/docker/cli from 27.5.0+incompatible to 29.2.0+incompatible (#11510) (dependabot[bot]) #11510
• 995c08d: Fix changelog entries and add tags (#11513) (Maggie Lou) #11513
• 3e11608: Optimize chunking.verifyChunks (#11511) (Vanja Pejovic) #11511
• b25d38e: Fix firecracker disk utilization metric (#11389) (Brandon Duffany) #11389
• 5fbb02b: add a percent graph for mac disk usage (#11518) (Lulu Zhang) #11518
• 65d4c77: Add audit logging for user list operations. (#11507) (Vadim Berezniker) #11507
• 84c2622: Fix authors metadata for marketing website (#11519) (Maggie Lou) #11519
• efcfea3: Add changelog (#11485) (Maggie Lou) #11485
• f0d20d3: Log how long spliceBlobWithRetries takes when it fails (#11524) (Vanja Pejovic) #11524
• disable loopclosure and upgrade x/tools (#11526) #11526 (Son Luong Ngoc)
• upgrade to 1.26.1 (#11525) #11525 (Son Luong Ngoc)
• 9d9e4a2: MODULE.bazel.lock: add go1.26.1 (#11528) (Son Luong Ngoc) #11528
• e7046c9: Limit max size of changelog images and videos (#11529) (Maggie Lou) #11529
• c95a67b: "add a new index to optimize invocations search query by repo url - Take 2 (#11532) (Lulu Zhang) #11532
• da2b8e3: fix redis total item graph (#11531) (Lulu Zhang) #11531
• fbffebf: Changelog tweaks (#11533) (Siggi Simonarson) #11533
• 0293e14: Log the number of in-progress executions when cancelling an invocation. (#11535) (Vanja Pejovic) #11535
• fa18014: Make wrapper selector more specific (#11536) (Siggi Simonarson) #11536

v2.248.0

Features

• add a flag to disable API key readback (#11460) #11460 (Brandon Duffany)

Tests

• Cache proxy: simulate network delay in chunk benchmarking (#11478) #11478 (Tyler French)

Chores

• send different forms to different webhooks (#11464) #11464 (Tyler French)
• suppress redis compiler warnings (#11470) #11470 (Tyler French)
• turn off aws ci (#11489) #11489 (Tyler French)
• separate executor chunking flag (#11501) (Tyler French)
• debug missing digests chunking issues (#11504) (Tyler French)

Commits

• 062a1d4: Fix links to docs (#11463) (Keith Smiley) #11463
• f8b0fd2: Add Keith to teams page & blog post (#11466) (Siggi Simonarson) #11466
• 6ea6c94: and (#11468) (Siggi Simonarson) #11468
• 4dc75d6: Move API key lookup db query into a single function. (#11448) (Vadim Berezniker) #11448
• 40417fe: Pass -no_warn_duplicate_libraries on macOS (#11469) (Keith Smiley) #11469
• 63a3dcc: Move more API key read paths to centralized query. (#11452) (Vadim Berezniker) #11452
• 34ee6f0: update dragonboat version so that we can use a more aggresive breaker backoff policy (#11462) (Lulu Zhang) #11462
• 14418f9: [CLI] Fix bug where the exit code for the bazel run executable isn't returned (#11472) (Maggie Lou) #11472
• 668c8e5: [RB] Minor edits to skills file (#11438) (Maggie Lou) #11438
• e8c4592: Upgrade bazel_worker_api (#11474) (Keith Smiley) #11474
• cbbb330: Fix deleted blog post (#11476) (Maggie Lou) #11476
• 46fb90b: Simplify findRebalanceReplicaOp (#11465) (Vanja Pejovic) #11465
• ee88212: Add social image (#11480) (Siggi Simonarson) #11480
• 293636e: Add zone to node descriptor proto (#11477) (Vanja Pejovic) #11477
• fix Bazel 9 workflow bugs, add local runner, scope to //proto/... (#11479) #11479 (Dan Stowell)
• ebda287: Fix a replica rebalance bug introduced by PR #11465 (#11482) (Vanja Pejovic) #11482
• a5b6702: add a new index to optimize invocations search query by repo url (#11475) (Lulu Zhang) #11475
• 8348634: Switch our prod bazelrc endpoints to "plain" subdomain. (#11483) (Vadim Berezniker) #11483
• 5ac95ab: Enforce user API capability limits at API key lookup time. (#11453) (Vadim Berezniker) #11453
• ff0686e: Get rid of user lists schema flag. (#11486) (Vadim Berezniker) #11486
• 06ddb90: Add SCIM Group sync suport. (#11387) (Vadim Berezniker) #11387
• 1c2c22f: Remove dead flag in scim_test. (#11487) (Vadim Berezniker) #11487
• cdc dashboard app/proxy regions (#11488) #11488 (Tyler French)
• 61d8afa: Cleanup bzlmod migration configs in bazelrc (#11491) (Brandon Duffany) #11491
• b22e8bf: Reduce Kythe workflow resource requests (#11490) (Dan Stowell) #11490
• 047c90b: Clean up some orphaned rows when users or user lists are deleted. (#11484) (Vadim Berezniker) #11484
• b8cb13f: Revert "add a new index to optimize invocations search query by repo url" (#11506) (Lulu Zhang)

v2.247.0

Features

• executor: upload output in chunks if enabled (#11328) #11328 (Tyler French)
• enable cdc support via header (#11457) #11457 (Tyler French)

Bug Fixes

• respect USER and dockerUser for OCI executions (#11441) #11441 (Brandon Duffany)

Code Refactoring

• simplify build_event_proxy loop (#11390) #11390 (Brandon Duffany)

Performance Improvements

• SpliceBlob: open the chunk Readers in parallel (#11404) #11404 (Tyler French)
• SpliceBlob: skip already-validated manifests (#11408) #11408 (Tyler French)

Chores

• cache_proxy: add tracing & metrics to chunk write (#11442) #11442 (Tyler French)
• grafana: add chunked write histograms (#11451) #11451 (Tyler French)

Commits

• 962cf56: Update dependencies in preparation for using rules_img and rules_distroless (#11419) (Zoey Greer) #11419
• 241364a: [RB] Add sample agent skills files for Remote Bazel (#11368) (Maggie Lou) #11368
• 1eb7331: [WF] Stream run logs in workflows if using the bb CLI (#11339) (Maggie Lou) #11339
• 5a76dab: Backport XFS guest configs to v5.15 kernel (#11420) (Brandon Duffany) #11420
• dd70c6f: [WF] Enable the remote cache on all bazel builds on remote runners (#11421) (Maggie Lou) #11421
• 1eaaf05: Add more context to errors in remotebazel.go (#11414) (Brandon Duffany) #11414
• 3b8f46f: Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 (#11418) (dependabot[bot]) #11418
• proxy shouldn't store manifests (#11423) #11423 (Tyler French)
• 9894cb4: add a gcs eviction graph for metadata server (#11424) (Lulu Zhang) #11424
• 2823b3d: [RB] Retry attempt to fetch execution at end of run (#11416) (Maggie Lou) #11416
• db36d6e: Tag image fetch metrics with use_oci_fetcher experiment label (#11411) (Dan Stowell) #11411
• 2e598a4: Use kube-resolver to resolve addresses in raft registry (#11422) (Lulu Zhang) #11422
• d6f2830: Fix local metadata server (#11433) (Vanja Pejovic) #11433
• 69caea2: Add last replica ID to GetRangeDebugInfo (#11168) (Vanja Pejovic) #11168
• 2330dfa: Update metrics group ID in BES after auth. (#11435) (Vadim Berezniker) #11435
• b31f3a4: Make one more execution_server dep required (#11417) (Vanja Pejovic) #11417
• 6f25f3d: [WF] Upload binaries in parallel (#11375) (Maggie Lou) #11375
• 642a4c7: Apply casRPCTimeout to the CloseAndRecv() call that writes CAS artifacts in cachetools.go (#11436) (Iain Macdonald) #11436
• 48393f0: Add cgroup EPERM diagnostics (#11429) (Brandon Duffany) #11429
• ab4e737: Remove parameter in newAPIKeyGroupQuery that's always true. (#11445) (Vadim Berezniker) #11445
• ee8388a: Remove executor.affinity_routing_enabled flag (#11443) (Iain Macdonald) #11443
• d00abfc: Fix the desired quorum calculation for the meta range. (#11450) (Vanja Pejovic) #11450
• upgrade to latest version. (#11456) #11456 (Son Luong Ngoc)
• 0b62aba: Update Kythe release to v0.0.78-buildbuddy (#11372) (Dan Stowell) #11372
• fd9cdf3: [oci image fetch dash] make three rows: by isolation, by registry, by experiment (#11459) (Dan Stowell) #11459
• b518315: Add product-focused blog post on running RB with agents (#11412) (Maggie Lou) #11412
• 334b660: Add blog post about how to setup Remote Bazel with agents (#11386) (Maggie Lou) #11386
• fix docker -p (#11427) #11427 (Brandon Duffany)
• b278a53: Fix remote bazel test (#11364) (Maggie Lou) #11364
• a1cffa7: redact user-defined secrets in remote & workflow logs (#11446) (Dan Stowell) #11446
• bddbf6f: [WF] In workflows with run log streaming, child invocation card should reflect executable result (#11461) (Maggie Lou) #11461
• d6329e8: [CLI] Fix bug where the exit code for the bazel run executable isn't returned (#11472) (Maggie Lou)

v2.246.0

Features

• add upload/download by group to metrics (#11393) #11393 (Tyler French)
• add heatmaps for Split/Splice gRPC latency (#11410) #11410 (Tyler French)

Bug Fixes

• dark mode for anonymous mode (#11377) #11377 (Tyler French)

Commits

• d0900c3: Switch everything to the newer Gateway-based LB in dev. (#11392) (Vadim Berezniker) #11392
• adcd555: Add OCI Image Fetches Grafana dashboard (#11371) (Dan Stowell) #11371
• 6728495: use kube-resolver in metadata server (#11394) (Lulu Zhang) #11394
• 0decb71: Requery pod information if the watch fails. (#11396) (Vadim Berezniker) #11396
• e4a0584: Use List instead of Get to retrieve initial pod information. (#11397) (Vadim Berezniker) #11397
• fix compression suggestions (#11399) #11399 (Son Luong Ngoc)
• 3650814: [ocifetcher test] quarantine TestServerBypassRegistry (#11400) (Dan Stowell) #11400
• d0f727d: [networking] Clean up stale veth devices (#11391) (Dan Stowell) #11391
• 809ef39: Inline grpc_server.MaxRecvMsgSizeBytes() in vmexec to shrink goinit (#11401) (Dan Stowell) #11401
• 69db7ed: Update guest API hash to account for squashed comment change (#11403) (Dan Stowell) #11403
• bc5679b: Don't treat Watch termination as an error. (#11407) (Vadim Berezniker) #11407
• 8941c12: [grafana - oci fetch dash] put on-disk ratio first; exclude on-disk images from fetch stats; label panels clearly (#11406) (Dan Stowell) #11406
• 9d079cf: Bump filippo.io/edwards25519 from 1.1.0 to 1.1.1 (#11356) (dependabot[bot]) #11356
• 0bd3fa3: Make the logging a little bit more concise. (#11413) (Vadim Berezniker) #11413
• enable tmpdir by default (#11184) #11184 (Son Luong Ngoc)
• remove flipped quota flag (#11351) #11351 (Tyler French)
• return NotFound if blob stored w/o chunking (#11395) #11395 (Tyler French)
• 0672d47: Check both types of deadline exceeded errors for input fetching (#11370) (Vanja Pejovic) #11370
• 8a3427f: Reset terminal styles after streaming logs in bb remote (#11409) (Brandon Duffany) #11409
• adf8e1f: Fix error message from rexec.MakePlatform (#11415) (Brandon Duffany) #11415

v2.245.0

Features

• chunking: support Split/Splice in bb print (#11363) #11363 (Tyler French)

Bug Fixes

• app: dark mode for the timing trace event tab (#11334) #11334 (Tyler French)
• show unsalted hash in error messages (#11359) #11359 (Tyler French)

Commits

• ab71e0e: run CI buiilds against dev proxy with chunking enabled (#11324) (Tyler French) #11324
• 098aef9: Consolidate chunking_enabled and write intercepting (#11326) (Tyler French) #11326
• 1c2ff7d: Support both section and run number hashes (#11329) (Siggi Simonarson) #11329
• 64cf826: fix musl build with bazel 9 (#11330) (Tyler French) #11330
• eb3aa73: Don't trigger unexpected event alerts for empty usage hashes in redis (#11331) (Brandon Duffany) #11331
• 4e4f6a5: Surface real auth errors when JWT reparsing is disabled (#11318) (Iain Macdonald) #11318
• 5018caa: [WF] Embed bb CLI in executors (#11167) (Maggie Lou) #11167
• f6c3873: [WF] Support configuring bazel command in ci_runner with an experiment (#11336) (Maggie Lou) #11336
• 53e44b1: [dev qa] run most test targets in abseil, rules_python, gazelle (#11338) (Dan Stowell) #11338
• b19555b: Add cache proxy integration tests for ES256-signed JWT auth (#11317) (Iain Macdonald) #11317
• a653400: fix gazelle for build_image.py (#11335) (Tyler French) #11335
• 2c8e85b: Revert "[WF] Embed bb CLI in executors" (#11344) (Maggie Lou) #11344
• f298084: [FC] Fix context cancellation bug when reporting snapshot metadata (#11345) (Maggie Lou) #11345
• 629201d: Delete grpc_client.enable_google_default_credentials flag. (#11343) (Vadim Berezniker) #11343
• 3e040b8: [dev qa] limit remote cache usage (#11333) (Dan Stowell) #11333
• 5856b6e: Rationalize OCI image fetching logging (#11347) (Dan Stowell) #11347
• c60114a: Reapply "[WF] Embed bb CLI in executors" (#11344) (#11346) (Fabian Meumertzheim) #11346
• ff26252: Add CI with chunking against AWS proxies (#11348) (Tyler French) #11348
• 01b2dea: Remove some unecessary deps from the executor image (#11358) (Brandon Duffany) #11358
• 7cd8e34: [TUI] Switch up table rendering (#11340) (Siggi Simonarson) #11340
• 9080422: [remote exec] record metrics on every image pull (#11361) (Dan Stowell) #11361
• b5732d3: Quarantine remote bazel TestCancel (#11367) (Maggie Lou) #11367
• 199e1ed: Add k8s resolver for gRPC. (#11355) (Vadim Berezniker) #11355
• 2869e47: Fix Kythe workflow for Bazel 8+: load proto_lang_toolchain from rules… (#11366) (Dan Stowell) #11366
• 8ad88d6: Add caching to kuberesolver. (#11362) (Vadim Berezniker) #11362
• f5f7650: Add a test for RBE with executors talking to a Cache Proxy (#11342) (Iain Macdonald) #11342
• d2a80ee: Double the short and moderate test timeouts when using --config=race (#11374) (Vanja Pejovic) #11374
• b86617c: [SS] Fix local snapshot check (#11302) (Maggie Lou) #11302
• 0ffbe41: Remove confusing content license language from free-tier terms (#11378) (Siggi Simonarson) #11378
• 30e207e: [WF] Speed up slow tests (#11376) (Maggie Lou) #11376
• 53874cc: Bump bb CLI version in docs (#11388) (Siggi Simonarson) #11388
• 79b3691: Remove the per-rpc timeout in cachetools.GetBlob (#11369) (Vanja Pejovic) #11369

v2.244.0

Commits

• 9676e90: Tweak capitalization in IAM groups UI (#11309) (Brandon Duffany) #11309
• 4d8888a: Use relative python import in build_image.py (#11312) (Zoey Greer) #11312
• 67920e0: Add cmake to rbe-ubuntu24-04 image (#11310) (Tyler Williams) #11310
• 7488ce1: Bump lodash from 4.17.21 to 4.17.23 in /website (#11174) (dependabot[bot]) #11174
• 505c6f0: Tiny docs fix for pushing images (#11313) (Tyler Williams) #11313
• af91403: add FastCDC chunking function to RPCs (#11299) (Tyler French) #11299
• e0d87bf: add the missing flag to the config doc (#11314) (Lulu Zhang) #11314
• 0731d5e: add nhid to the tryReplicas trace to make it a bit easier to locate the target machine (#11315) (Lulu Zhang) #11315
• 1eeae62: use a faster backoff setting for raft peer-to-peer calls (#11319) (Lulu Zhang) #11319
• 02890ad: record error in nodehost.SyncPropose trace (#11320) (Lulu Zhang) #11320
• b34c0ca: Try to fix Bazel 9 Kythe (#11307) (Tyler French) #11307
• a86e746: Update recharts, react-resize-detector, and lodash for dependabot (#11323) (Zoey Greer) #11323
• 2bfa78c: Bump github.com/go-git/go-git/v5 from 5.13.1 to 5.16.5 (#11291) (dependabot[bot]) #11291
• 9396ff1: Move user list role management to separate page. (#11316) (Vadim Berezniker) #11316
• f550400: Register OCIFetcherServer on gRPC server (#11322) (Dan Stowell) #11322
• 340b2cf: Add a bb ui tui to the cli (#11325) (Siggi Simonarson) #11325

v2.243.0

Chores

• update remote_execution.proto (#11297) #11297 (Tyler French)
• upgrade bazel to 9.0.0 (#11141) #11141 (Tyler French)

Commits

• 72796b9: Rate-limit JWT reparse debug log to once per minute (#11285) (Iain Macdonald) #11285
• 4ef88bc: move the metrics for lease acquiring before sendRangeEvent (#11289) (Lulu Zhang) #11289
• 3e8c8c9: Make NewCustomCommitWriteCloser preserve io.Seeker interface (#11279) (Brandon Duffany) #11279
• be93216: [FC] Add logs for local snapshot misses (#11293) (Maggie Lou) #11293
• 9c0506c: Add Flakes UI documentation to OLAP database config guide (#11294) (Lulu Zhang) #11294
• a805880: Add a way to get info about how flags were configured (#11282) (Brandon Duffany) #11282
• 150e61f: Cache ES256 public keys in the Remote Authenticator (#11246) (Iain Macdonald) #11246
• af0f846: Take into consideration the pod index when we choose the target for the new leader during shutdown (#11292) (Lulu Zhang) #11292
• 0f9daf8: add downloader config for rules_docker (#11298) (Tyler French) #11298
• 16be0a2: Update createUser flow to defer to isGroupEmpty. (#11290) (Vadim Berezniker) #11290
• 1c9e46b: [SS] Add missing header to cache request (#11301) (Maggie Lou) #11301
• fa0e2de: Allow customizing execroot path (oci-only) (#11300) (Tyler Williams) #11300
• upgrade to 1.26.0 (#11304) #11304 (Son Luong Ngoc)
• fix rules_docker puller download (#11305) #11305 (Son Luong Ngoc)
• 65f2740: Reroll 11271 (#11288) (Son Luong Ngoc) #11288
• b28427f: Add region to experiment eval context (#11296) (Brandon Duffany) #11296
• 21f190a: Initialize OCIFetcherClient in executor (#11306) (Dan Stowell) #11306
• f961e03: Ensure rich logging in priority_task_scheduler (#11295) (Brandon Duffany) #11295