openstack/swift — Week of 2026-07-18

MPU feature branch. The bulk of the week — roughly 3,700 lines — landed on feature/mpu, reworking native multipart upload internals. The audit path was rewritten to use relic and action rows to drive audit (963943), the legacy multi_upload.py module was reverted, hidden rows are now allowed in the MPU DBs, and master was merged back into the branch. Two follow-ups fix native MPU ACL handler class discovery and make s3api verify that the MPU middleware is present in the pipeline before enabling native MPU.

S3 and proxy fixes. On the S3 side, list_objects now checks request params for invalid UTF-8 bytes, and some noisy s3api logging was cleaned up. Encryption became more tolerant of errors while decrypting listings, tempurl/staticweb listings with ?inline were fixed to work as intended, and the inline account-update timeout stopped pulling logging into the hot path.

Object server and updater. The object server uses conn_timeout in more places, and object-updater settings docs were clarified.

Tooling. The CORS job is voting again, gettext was dropped from bindep, and a stale note about old pip behavior was removed from the docs.