bazel-remote

Externally visible changes since v2.4.3:

• Add experimental gRPC proxy backend
• Add --min_tls_version flag (does not apply to proxy backends)
• [metrics] initialize hits/misses for each cache entry kind
• Fix container entrypoints
• Upgrade to debian12 base container images
• Fix infinite recursion with idle timer
• [s3proxy] add signature_type config option
• Upgrade azidentity to v1.5.2

Externally visible changes since v2.4.2:

• Make config files work again (#694)
• Fix serving uncompressed blob as compressed (#691)

The use of config files is broken in this release. Please upgrade to v2.4.3 for a fix.

Externally visible changes since v2.4.1:

• Log an error when unable to reserve enough space to download a blob from proxy backends. #649
• Always enable cgo in builds made with bazel. #655
• Require the max_size argument (or corresponding environment variable) when running the container images. #660
• Add s3 addressing style support. #662 #668
• Http proxy sets content length when uncompressed. #676
• Support HTTP proxy with mTLS. #679
• Make unsupported /metrics requests more obvious. #687

Note: the mac binaries attached here were made from https://github.com/buchgr/bazel-remote/commit/43755b3087007f8417c9eb1d54c7dd3000e3776c - hopefully the release trigger works automatically in the next release.

Externally visible changes since v2.4.0:

• Delete .DS_Store files when migrating cache dir, ignore them when loading a current cache dir #640
• Make bazel-remote packages consumable as a module #635

Update 2023-04-29: re-uploaded bazel-remote-2.4.1-linux-arm64 correctly built with cgo zstd support.

Externally visible changes since v2.3.9:

• Faster startup by scanning cache dir in parallel, and optimising the LRU index sorting.
• Make idle_timeout setting also apply when using https.
• Shutdown gracefully on sigint (ctrl-c) and sigterm.
• Exit immediately if either of the HTTP or gRPC servers fail.
• Fix AC key mangling for gRPC.
• Always allow gRPC health check requests, even without authentication. #590
• Fix cache file permissions, they shouldn't be world-writable.
• Avoid a bunch of corner case crashes.
• Use a docker base container image without openssl. #605
• Advertise support up to REAPI version 2.3.
• Allow setting local timezone for logs.
• Allow logging without timestamps.

Externally visible changes since v2.3.8:

• Add experimental Azure blob storage proxy backend (#560)
• Set log flags before logging anything
• Add -zstd_implementation=cgo option (#559, #485)
• Build linux release binaries on ubuntu 18.04
• Upgrade to go 1.19

Externally visible changes since v2.3.7:

• Update s3 object timestamps on cache hit (#542)
• [disk] limit the number of concurrent file removals even more on mac (#556)

Externally visible changes since v2.3.6:

• Add missing access log entry
• [metrics] add lru eviction idle time metric
• Correct FindMissingCasBlobs metrics
• Remove S3 performance note from README
• Make remoteHTTPProxyCache.Contains do HEAD request

Externally visible changes since v2.3.5:

• Update minio-go in the bazel build too (fix release binaries + docker images) (#534)

Externally visible changes since v2.3.4:

• [grpc] Add basic bytestream QueryWriteStatus support (#528)
• Add a max proxy blob size option (#526)
• Update minio-go - fix for s3 IAM auth delays (#531)
• Improve GetValidatedActionResult() performance by validating action result blobs in parallel (#530)

Externally visible changes since v2.3.3:

• Validate ActionResults more thoroughly
• Fix http: superfluous response.WriteHeader call logs
• Add gRPC health check service
• Implement unambiguous compressed blobs bytestream upload early return bazelbuild/remote-apis#213

Externally visible changes since v2.3.1:

• Add new flags: --http_address, --grpc_address, --profile_address with support for unix sockets, and deprecate the corresponding host/port flags.
• Add linux and darwin arm64 release binaries.
• Avoid prometheus counter panic.

Externally visible changes since v2.3.0:

• Fixed a segfault when validating malformed ActionResult messages.

Externally visible changes since v2.2.0:

• Limit the number of concurrent file removals #479
• Count hits/miss metrics for each cache entry kind separately #472
• Return a proper NotImplemented status for QueryWriteStatus #489
• Add support for reading credentials from AWS credentials file (as used by aws-cli) #492
• Add s3.auth_method (breaking change) #492

This adds support for compressed inlined data in BatchReadBlobs and BatchUpdateBlobs.

This is a bugfix release, which resolves the following issue:

• bytestream write can leak goroutines if disk.Put doesn't drain the io.Reader (#473)

Externally visible changes since v1.3.2:

• Fix another goroutine leak in bytestream Write.

This is a bugfix release, which resolves the following issue:

• .htpasswd authentication not working when using allow_unauthenticated_reads: true (#468)

Notable changes since v2.1.1:

• Upgrade minio-go to v7.0.13 for an IMDSv2 fix. (#465)
• Remove some dead code found by linters.
• Optimise FindMissingBlobs. (#408)
• Push both amd64 and arm64 images to dockerhub. (#450)
• Fix a segfault when unable to create a temporary file. (#451)

Externally visible changes since v2.1.0:

• Upgrade minio-go to v7.0.11 (which as IMDSv2 support)
• Fix an infinite loop when clients requested the empty blob compressed via bytestream read.