openstack/swift — Week of 2026-06-06

Security hardening. The headline work is hardened pickle unmarshalling, landed on master and backported to two stable branches at ~400 lines each — roughly 900 lines of churn dedicated to making Swift's pickle deserialization safer. Paired with that, the s3api gained stricter input handling: it now errors on truncated aws-chunked input (also backported), rejects oversized chunked S3 XML bodies, and rejects oversized chunked SLO manifests.

S3 API surface. Beyond the hardening, s3api picked up support for the x-amz-server-side-encryption response header (990318), learned to handle empty Quiet elements in S3 multi-delete requests, and added publicAccessBlock to the not-implemented list so clients get a clean rejection rather than confusing behavior.

Diagnostics. ssync_receiver log lines are now uniformly annotated with the object path, and the relinker logs unexpected worker failures instead of swallowing them — both targeted at making field debugging less archaeological.

Tooling and CI. A handful of stable-only fixes kept older branches green, including pinning to older OpenStack requirements and pinning tempest; CHANGELOG entries for stable releases were forward-ported to master, and a .mailmap entry was refreshed.