v5.21.0

Release

What's Changed

• lifecycle improvement for none-versionning buckets by @jackyalbo in #9160
• [NSFS | GLACIER] Add support for parallel recall and migrate by @tangledbytes in #9183
• node-ip removal - Phase 5 by @liranmauda in #9193
• SDK | Upgrade AWS SDK to v3 - NamespaceS3 by @naveenpaul1 in #9163
• Add no error for cast issue with macos by @jackyalbo in #9201
• NC | Fix fs_napi syslog facility by @jackyalbo in #9198
• NC | Fix get_tz_date for UTC by @jackyalbo in #9200
• NC | list_mulitpart upload fixes by @jackyalbo in #9202
• NC | Update noobaa.spec python requirement in order to support RHEL 10 by @jackyalbo in #9204
• Fix for noobaa.spec by @jackyalbo in #9207
• LDAP Support - POC by @jackyalbo in #8974
• system store - endpoints load from core instead of db by @alphaprinz in #9150
• Remove bcrypt by @tangledbytes in #9211
• Mongo | Mongo pool upgrade by @naveenpaul1 in #9195
• bucket logging - adapt s3 conn to aws sdk v3 (dfs 3887) by @alphaprinz in #9210
• Fix backingstore deletion by @tangledbytes in #9215
• SDK | Fix log replication sdk issue by @naveenpaul1 in #9213
• [GLACIER] Fix task ID regex by @tangledbytes in #9203
• [NC | NSFS | GLACIER] Add disk usage info to nsfs metrics by @tangledbytes in #9094
• SDK | Update aws sts cred method by @naveenpaul1 in #9218
• Added metrics - object count, max_objects and max_size for quota by @aayushchouhan09 in #9205
• Fix - updated stats_api for schema validation failure by @aayushchouhan09 in #9221
• Bumping version from 5.20.0 to 5.21.0 by @liranmauda in #9223
• Bumping deps to avoid CVE (21/09/2025) by @liranmauda in #9224
• [NSFS | GLACIER] Support newline and backslash character in Glacier logs by @tangledbytes in #9142
• [DB-Cleaner] fixing find_deleted_objects to hit index by @jackyalbo in #9222
• NC | don't stat directories in list_object by @jackyalbo in #9232
• Add Warp on IBM Cloud docs by @Neon-White in #9231
• Add Warp-specific IBM Cloud VM nightly runs tooling by @Neon-White in #9230
• Add nightly IBM VM provision and cleanup tools by @Neon-White in #9229
• [NSFS | NC | GLACIER] Fix _finalize_restore ENOTSUP issue by @tangledbytes in #9236
• SDK | SDKv3Client region missing error by @naveenpaul1 in #9228
• performance - read only pool POC by @alphaprinz in #9197
• [NSFS | GLACIER] Add support for GLACIER_DA and forced GLACIER by @tangledbytes in #9219
• [NSFS | NC | Glacier] Fix migrate hang under race condition by @tangledbytes in #9244
• Added a fix for S3 namespace bucket caching while upload by @aayushchouhan09 in #9245
• Revert "NC | don't stat directories in list_object" by @jackyalbo in #9246
• NC | Ignore EINVAL in stat for list by @jackyalbo in #9247
• pool server - don't issue MANY_STORAGE_ISSUES after scaling up (dfbgus 4152) by @alphaprinz in #9235
• IAM_NOOBAA | IAM Create account by @naveenpaul1 in #9242
• Support AGENT_CONFIG from volume mounts and remove secret logging by @aayushchouhan09 in #9243
• [NSFS | NC | Glacier] Disable force eviction on partial reads by @tangledbytes in #9258
• IAM | IAM Validation Input Fix to Use Regex with Anchor Start and Anchor End by @shirady in #9257
• NC | list_objects skip another case of stat failure on EINVAL by @jackyalbo in #9256
• Added a fix for AWS/Azure S3 namespace bucket caching while upload by @naveenpaul1 in #9261
• IAM | Add IAM endpoint port in config.js by @shirady in #9262
• IAM | IAM User Policy API (Skeleton Only) by @shirady in #9263
• IAM | Minor Fixes by @shirady in #9266
• IAM_NOOBAA | IAM create access key by @naveenpaul1 in #9259
• Added support for tagging for IAM users by @aayushchouhan09 in #9260
• IAM | Account Schema Changes for Supporting Inline User Policy by @shirady in #9269
• IAM | User Inline Policy Implementation by @shirady in #9270
• IAM | User Inline Policy Document Additional Validation by @shirady in #9274
• NSFS refactor file_reader and file_writer by @guymguym in #9153
• IAM | Change bucket owner for IAM user to account and more by @naveenpaul1 in #9268
• CI | fix Run PR Tests to respect changes in .nvmrc and builder.dockerfile for the builder image by @liranmauda in #9276
• Update nodejs from v22.11.0 to v24.4.1 by @liranmauda in #9275
• NC | Fixing two issues in entropy.utils by @jackyalbo in #9279
• NC | Removing root check for manage_nsfs by @jackyalbo in #9280
• Bumping deps to avoid CVE (13/11/2025) by @liranmauda in #9273
• IAM | Authorize Requests for IAM Users According to IAM User Inline Policy by @shirady in #9281
• IAM | Doc | User Inline Policy Documentation by @shirady in #9285
• IAM | put_bucket_policy Principal validation updated with ARN by @naveenpaul1 in #9277
• Replaced deprecated @azure/monitor-query by @liranmauda in #9284
• notificatoins - fixes for lifecycle dfbugs 4469 by @alphaprinz in #9286
• notification - nc test - don't assume test vm has enough free space in FS by @alphaprinz in #9292
• IAM | Use the account server flow by @naveenpaul1 in #9289
• IAM | No Bucket Policy Authorization for IAM Users by @shirady in #9291
• Bumping deps to avoid CVE (13/11/2025) by @liranmauda in #9303
• [GLACIER | NSFS | NC] Replace GLACIER_DA with DEEP_ARCHIVE by @tangledbytes in #9278
• IAM | Change Default Behavior of Users Without IAM User Policy by @shirady in #9302
• Bumping deps to avoid CVE (13/11/2025) (part 2) by @liranmauda in #9305
• IAM | Bucket policy Principal upgrade script by @naveenpaul1 in #9267
• IAM | Block OBC Accounts From IAM API by @shirady in #9308
• Read only uses by @alphaprinz in #9237
• IAM | IAM integration tests by @naveenpaul1 in #9300
• IAM | User Without IAM User Policy Improve Error Message by @shirady in #9307
• Fix - list_buckets allowing unauthorized bucket access by @aayushchouhan09 in #9272
• IAM | Principal in Bucket Policy of the Account Root User When the Requesting Account Is IAM User by @shirady in #9312
• IAM | Principal validation and S3 permission updated with ID by @naveenpaul1 in #9309
• IAM | Basic Interrogation Tests Add User Inline Policy Test Cases by @shirady in #9314
• Added support for second access key s3 access by @aayushchouhan09 in #9290
• Added support for iam user in list_buckets() for containerized by @aayushchouhan09 in #9316
• Fix (NC | NSFS) - list_buckets allowing unauthorized bucket access by @aayushchouhan09 in #9301
• IAM | Basic Interrogation Tests Add User Tags Test Cases by @shirady in #9320
• IAM | Account Server - Block Account Deletion in Case the Account Has Users by @shirady in #9321
• IAM | Block Accounts From Performing IAM API on Themselves by @shirady in #9328
• IAM | Add Tags to GetUser Reply by @shirady in #9327
• NC | Adding support of user bucket path by @jackyalbo in #9271
• improve performance by introducing composite index for datachunks by @karthikps97 in #9293
• IAM | CreateUser, UpdateUser - UserName, NewUserName Check by @shirady in #9323
• IAM | User ID for principal is not supported by @naveenpaul1 in #9329
• Added a fix for authentication of root and iam user account by @aayushchouhan09 in #9331
• IAM | Remove Unneeded system_store Calls - Part 1 by @shirady in #9330
• IAM | Doc | Update file docs/design/AWS_API_Compatibility.md by @shirady in #9332
• IAM | Refactor src/endpoint/s3/s3_bucket_policy_utils.js (Used in Bucket Policy and IAM User Inline Policy) by @shirady in #9336
• IAM | Fix GetAccessKeyLastUsed API by @shirady in #9340
• IAM | Remove Unneeded system_store Calls - Part 2 by @shirady in #9335
• IAM | IAM user integration test for containerized deployments by @naveenpaul1 in #9339
• IAM | Add Events by @shirady in #9342
• IAM | Add Creation Date for IAM Users by @shirady in #9341
• rdkafka change to optional npm dependency by @guymguym in #9344
• IAM | Add Test Cases on IAM API - Part 1 by @shirady in #9345
• IAM | Add Test Cases on IAM API - Part 2 by @shirady in #9347
• IAM | Add Test Cases on IAM API - Part 3 by @shirady in #9350
• RDMA: native code + make rpm by @guymguym in #9337
• IAM | Containerized Noobaa IAM doc (1/2) by @naveenpaul1 in #9348
• IAM | Add Test Cases on IAM API - Part 4 by @shirady in #9351
• [Backport into 5.21] Fixes and improvmants by @liranmauda in #9353
• [Backport into 5.21] fixing supervisor on startup by @liranmauda in #9357
• [5.21 | GLACIER] Backport PR 9360 by @tangledbytes in #9368
• [Backport into 5.21] Bumping deps to avoid CVE (11/01/2026) by @liranmauda in #9372
• [Backport into 5.21] Added a fix for NotPrincipal bucket policy check by @liranmauda in #9382
• [Backport into 5.21] Bumping deps to avoid CVE (19/01/2026) by @liranmauda in #9383
• [Backport into 5.21] ThanosRuleHighRuleEvaluationWarnings firing due to sufix by @liranmauda in #9390
• [Backport into 5.21] Trim down details printed in log by @liranmauda in #9393
• [Backport into 5.21] /etc permissions - allow read and execute for group by @liranmauda in #9399
• [backport to 5.21] NC | S3A fixes backport by @nadavMiz in #9400
• [Backport into 5.21] Spelling Updated for Percent by @liranmauda in #9401
• [Backport 5.21] PR 9380 by @tangledbytes in #9410
• [Backport to 5.21] Optimize bulk delete operation for non versioned buckets by @karthikps97 in #9411
• [Backport 5.21] PR 9413 by @tangledbytes in #9416
• [Backport into 5.21] Include common directory in RPM build by @liranmauda in #9424
• [Backport into 5.21] IAM | Upgrade from 4.20 to 4.21 failed by @liranmauda in #9431
• [Backport into 5.21] make node-rdkafka required dependency by @liranmauda in #9432
• [Backport into 5.21] Bumping deps to avoid CVE (17/02/2026) by @liranmauda in #9436
• [Backport into 5.21] Fixing CA certs to use defaults in case they exist by @liranmauda in #9439
• [Backport into 5.21] Bumping deps to avoid CVE (19/02/2026) by @liranmauda in #9441
• [Backport into 5.21] fixing few issues with sdkv3 by @liranmauda in #9444
• [Backport into 5.21] S3-RDMA by @guymguym in #9447
• [Backport to 5.21] change defalut http server listen ip from 0.0.0.0 to nodes default configuration by @nadavMiz in #9454

Full Changelog: v5.20.0...v5.21.0