v5.1.0

5.1.0 (2026-05-05)

Bug Fixes

• deps: update module github.com/fsnotify/fsnotify to v1.10.1 (f1ff5f4)

Code Refactoring

• user-isolation: switch to transparent path injection (2bcb48c)

Documentation

• config: add userIsolation configuration documentation (33c40e4)
• user-isolation: clarify user identifier usage in isolation feature (bd33be1)
• user-isolation: expand documentation on user isolation feature (58d425e)
• user-isolation: fix formatting and heading consistency in user isolation documentation (82d0e01)
• user-isolation: improve clarity and formatting (d1dfb05)

Features

• bucket: add per-user folder isolation (c2e9bb5)
• user-isolation: enhance user isolation functionality and error handling (76cf2ea) (Thanks to @serg4kostiuk )

Maintenance

• deps: update golangci/golangci-lint to v2.12.1 (41530db)
• deps: update pre-commit hook commitizen-tools/commitizen to v4.15.0 (46a9f88)

Styles

• Change linter configuration (830281c)

Tests

• bucket: add unit tests for user isolation (b4802e9)
• server: Fix tests broke in rebase (5e1b141)
• user-isolation: add integration tests for user isolation resource patterns (2b8cf4e)

v5.0.0

5.0.0 (2026-04-25)

Bug Fixes

• reject dot-segment path traversals before routing and auth (af5ff57) Thanks to @argos83

• fix!: add '/' separator to glob pattern compilation for resource path matching (1320e4a)

BREAKING CHANGES

• resource path patterns using '' now match exactly one
  path segment. Any resource definition relying on '' crossing '/' must be
  updated to use '**'.

v4.21.0

4.21.0 (2026-04-19)

Bug Fixes

• config: fixing pr comments for config (9ca6577)
• deps: update module github.com/go-playground/validator/v10 to v10.30.2 (a00aa46)
• test: fixing and adding more test (5481c24)

Continuous Integration

• Patch CI for permissions (8ce84d1)

Features

• config: add support for bucket virtual-host style config (d4cdf41) Thanks to @fdiaz3000

Maintenance

• Add CLAUDE.md file (db8f157)
• deps: update dependency go to v1.26.1 (462e542)
• deps: update dependency go to v1.26.2 (fa5e888)
• deps: update dependency jmattheis/goverter to v1.9.4 (bb412a5)
• deps: update docker/setup-qemu-action action to v4 (b52dc50)
• deps: update dorny/paths-filter action to v4 (0be3b6e)
• deps: update golangci/golangci-lint to v2.11.4 (750555a)
• deps: update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (306f5d5)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.9.4 (aad0766)
• deps: update module golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment to v0.44.0 (130ca70)
• deps: update pascalgn/size-label-action action to v0.5.7 (27e88de)
• deps: update pre-commit hook commitizen-tools/commitizen to v4.13.10 (f1ecca5)
• deps: update squidfunk/mkdocs-material docker tag to v9.7.6 (7c90d5d)
• Update dependencies and lint (945029b)

v4.20.0

4.20.0 (2026-02-26)

Bug Fixes

• deps: update module github.com/go-playground/validator/v10 to v10.30.1 (27a0781)
• deps: update module github.com/go-resty/resty/v2 to v2.17.1 (fc9628f)

Features

• support request headers as S3 object metadata in PUT templates (c2c1780) (Thanks to @argos83 and @sebastian-tello)

Maintenance

• deps: update golangci/golangci-lint to v2.8.0 (45a4540)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.9.3 (ce70214)
• deps: update module go:github.com/jmattheis/goverter/cmd/goverter to v1.9.3 (aa1addc)
• deps: update module golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment to v0.41.0 (156f08c)
• deps: update module golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment to v0.42.0 (14599d0)
• deps: update pre-commit hook commitizen-tools/commitizen to v4.11.2 (b3c6587)
• deps: update squidfunk/mkdocs-material docker tag to v9.7.1 (f445b90)
• deps: update squidfunk/mkdocs-material docker tag to v9.7.3 (b2fd0c8)
• Upgrade dependencies, linter and patch code (41e0778)

v4.19.0

4.19.0 (2025-12-14)

Bug Fixes

• deps: update gomock monorepo to v0.5.2 (f9e9c61)
• deps: update module github.com/go-chi/chi/v5 to v5.2.2 [security] (b24a080)
• deps: update module github.com/go-playground/validator/v10 to v10.25.0 (db5a194)
• deps: update module github.com/prometheus/client_golang to v1.21.1 (ba45c8a)
• deps: update module github.com/prometheus/client_golang to v1.22.0 (b14d960)
• deps: update module github.com/prometheus/client_golang to v1.23.2 (d164229)
• deps: update module github.com/spf13/cobra to v1.9.1 (1e69ce9)
• deps: update module golang.org/x/net to v0.37.0 (5d9115d)
• deps: update module golang.org/x/net to v0.40.0 (8f81fb2)
• deps: update module golang.org/x/net to v0.41.0 (cd24be8)
• deps: update module golang.org/x/oauth2 to v0.28.0 (3619f20)
• deps: update module golang.org/x/oauth2 to v0.30.0 (2be0ec3)
• deps: update module golang.org/x/sync to v0.12.0 (400b2ef)

Continuous Integration

• Fix golang version (5646dce)

Features

• add Content-Digest header (4a07cea) (Thanks to @lalten )
• Upgrade dependencies, linter and reformat code (793a582)
• Upgrade dependencies, linter and rules and reformat code (02c0156)

Maintenance

• Clean dependencies (2f4a013)
• Clean dependencies (6ddd011)
• Clean dependencies (b8e1b16)
• Clean dependencies (46c77ec)
• config: migrate config renovate.json (a91cd5d)
• deps: update actions/checkout action to v5 (bb2a323)
• deps: update actions/checkout action to v6 (74a1846)
• deps: update actions/labeler action to v6 (48bcf26)
• deps: update actions/setup-go action to v6 (efcbc7a)
• deps: update actions/setup-python action to v6 (d74ab22)
• deps: update actions/stale action to v10 (b249873)
• deps: update alpine docker tag to v3.22 (8d96e84)
• deps: update alpine docker tag to v3.23 (564082f)
• deps: update dependency go to v1.24.3 (915fadc)
• deps: update dependency go to v1.24.4 (f0585c4)
• deps: update dependency go to v1.25.1 (3643ed7)
• deps: update dependency go to v1.25.3 (88e95a8)
• deps: update dependency golangci/golangci-lint to v2 (1dd95a4)
• deps: update dependency golangci/golangci-lint to v2.7.2 (1770fd8)
• deps: update dependency gotestsum to v1.13.0 (e383666)
• deps: update dependency gotestyourself/gotestsum to v1.12.2 (343abd7)
• deps: update dependency gotestyourself/gotestsum to v1.12.3 (e613659)
• deps: update dependency jmattheis/goverter to v1.8.0 (b5d7674)
• deps: update dependency jmattheis/goverter to v1.8.2 (6a77f66)
• deps: update dependency jmattheis/goverter to v1.8.3 (f164994)
• deps: update dependency jmattheis/goverter to v1.9.2 (b05a94d)
• deps: update golangci/golangci-lint to v1.64.6 (7adab5e)
• deps: update golangci/golangci-lint to v2.1.6 (796306d)
• deps: update golangci/golangci-lint to v2.2.2 (28a06db)
• deps: update golangci/golangci-lint-action action to v7 (00d8208)
• deps: update golangci/golangci-lint-action action to v8 (bb38b35)
• deps: update golangci/golangci-lint-action action to v9 (6b2327e)
• deps: update gomock monorepo to v0.6.0 (5a42974)
• deps: update mikepenz/action-junit-report action to v6 (46aec7e)
• deps: update module github.com/go-jose/go-jose/v4 to v4.0.5 [security] (55ca2c5)
• deps: update module github.com/go-viper/mapstructure/v2 to v2.3.0 [security] (f12eb7e)
• deps: update module github.com/go-viper/mapstructure/v2 to v2.3.0 [security] (9417678)
• deps: update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] (76ea26f)
• deps: update module github.com/imdario/mergo to v1.0.2 (7d9d6e6)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.8.0 (5e27bf1)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.8.2 (e19e511)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.8.3 (1a0cc76)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.9.0 (407a8b7)
• deps: update module github.com/jmattheis/goverter/cmd/goverter to v1.9.2 (4cf6f52)
• deps: update module go:github.com/jmattheis/goverter/cmd/goverter to v1.9.0 (a994505)
• deps: update mo...

v4.18.1

4.18.1 (2025-02-20)

Bug Fixes

• Sanitize all http request fields to avoid XSS injection in templates (c611c74)

Special thanks to @ddvleeuwen who discover and reported the XSS injection possibility quickly ! ( CVE-2025-27088 )

Continuous Integration

• Add renovate tag for golang (2873011)

Maintenance

• deps: update golangci/golangci-lint to v1.64.2 (42211af)
• deps: update golangci/golangci-lint to v1.64.3 (0de5a48)
• deps: update module golang.org/x/tools/go/analysis/passes/fieldalignment/cmd/fieldalignment to v0.30.0 (b6cbdf7)
• deps: update pre-commit hook commitizen-tools/commitizen to v4.2.1 (6d33a99)
• deps: update squidfunk/mkdocs-material docker tag to v9.6.4 (0543412)
• Rollback golang version to avoid crash on installation (01f0c92)

v4.18.0

4.18.0 (2025-02-07)

Bug Fixes

• Add forgotten resources method in validation (833ef9a)
• Fix resource configuration validation (f299e06)
• Pin opa version (890f6e2)

Continuous Integration

• Upgrade linter (eeb3180)

Documentation

• Add forgotten key in documentation (0bf5dd9)

Features

• Upgrade dependencies (fc6bdb5)

Maintenance

• Add mise support (5368260)
• config: migrate config renovate.json (2842eeb)
• deps: update dependency mkdocs-awesome-pages-plugin to v2.10.1 (e90c8ce)
• deps: update pre-commit hook commitizen-tools/commitizen to v4.1.1 (02a1d5e)
• deps: update squidfunk/mkdocs-material docker tag to v9.6.3 (3498da2)
• Improve renovate configuration (3ae06b0)
• Remove dead mise tool (fb22680)
• Upgrade golang to 1.23.6 (cef372a)
• Upgrade linter to latest version and makefile packages (eb568af)
• Upgrade pre-commit hooks (0642cc6)

v4.17.2

4.17.2 (2024-12-19)

Bug Fixes

• deps: update module github.com/fsnotify/fsnotify to v1.8.0 (7d5d9b0)
• deps: update module github.com/go-chi/chi/v5 to v5.2.0 (da26ccc)
• deps: update module github.com/go-playground/validator/v10 to v10.23.0 (3458ef8)
• deps: update module github.com/go-resty/resty/v2 to v2.16.2 (9d90231)
• deps: update module github.com/stretchr/testify to v1.10.0 (b26461c)
• deps: update module golang.org/x/net to v0.31.0 (edf5f9b)
• deps: update module golang.org/x/net to v0.32.0 (4c509ff)
• deps: update module golang.org/x/net to v0.33.0 [security] (0a40726)
• deps: update module golang.org/x/oauth2 to v0.24.0 (ba8fee8)
• deps: update module golang.org/x/sync to v0.10.0 (de81d38)
• deps: update module golang.org/x/sync to v0.9.0 (c124586)

Maintenance

• Clean dependencies (1bae4ec)
• deps: update alpine docker tag to v3.21 (d07b39d)
• deps: update dependency golangci/golangci-lint to v1.62.2 (2164bd9)
• deps: update mikepenz/action-junit-report action to v5 (afced01)
• deps: update module golang.org/x/crypto to v0.31.0 [security] (22aacf0)
• deps: update pre-commit hook commitizen-tools/commitizen to v3.31.0 (3fa82dd)
• deps: update pre-commit hook commitizen-tools/commitizen to v4 (4ae6570)
• deps: update squidfunk/mkdocs-material docker tag to v9.5.48 (18f2d17)
• deps: update squidfunk/mkdocs-material docker tag to v9.5.49 (16ce7db)

v4.17.1

4.17.1 (2024-10-29)

Bug Fixes

• deps: update module github.com/go-resty/resty/v2 to v2.15.3 (6d8d836)
• deps: update module go.uber.org/mock to v0.5.0 (c1228f1)
• Fix a possible nil pointer exception on configuration reload (b5b2656) (Thanks to @aolwas for the report)

Maintenance

• deps: update pascalgn/size-label-action action to v0.5.5 (c002d63)
• deps: update pre-commit hook commitizen-tools/commitizen to v3.30.0 (fffdac7)
• deps: update pre-commit hook pre-commit/pre-commit-hooks to v5 (1547861)
• deps: update squidfunk/mkdocs-material docker tag to v9.5.42 (9fabd32)
• Upgrade dependencies (9f9db94)

v4.17.0

4.17.0 (2024-09-23)

Bug Fixes

• server: Not found not correctly managed inside target router (5968733)

Features

• Add HEAD request support (7fd1750), closes #474
• Upgrade dependencies, linter and alpine docker image (c55e070)
• Upgrade golang, dependencies and linter (49d5871)

Maintenance

• Change labeler configuration for new major version (4ae228e)
• Change Renovate configuration and change project files for new Renovate (9bcc908)
• deps: update actions/checkout action to v4 (e3a51be)
• deps: update dependency golangci/golangci-lint to v1.61.0 (3ae597a)
• deps: update dependency mkdocs-awesome-pages-plugin to v2.9.3 (6e81d4b)
• deps: update docker/setup-qemu-action action to v3 (295b542)
• deps: update mikepenz/action-junit-report action to v4 (8a172d5)
• deps: update pascalgn/size-label-action action to v0.5.4 (fd8a3de)
• deps: update squidfunk/mkdocs-material docker tag to v9.5.36 (2d07d34)