# changelog

author: Globus Toolkit <support@globus.org> - 2.20.0-1.fc38+gcs5
changelog:
  * Initial release as an RPM package

    * Includes support for multi-user Globus Compute Endpoints; see
      https://globus-compute.readthedocs.io/ for more information.


author: Globus Toolkit <support@globus.org> - 15.99-1
changelog:
  - support user selection for mapped collections
  - export guest user identity info to legacy callouts
  - dsi-rest: limit memory usage during stalled cloud writes


author: Globus Toolkit <support@globus.org> - 15.90-1
changelog:
  - Add additional verification for login parameters
  - Remove nuisance log messages
  - Export identity info for legacy callouts


author: Globus Toolkit <support@globus.org> - 16.1-1
changelog:
  - Consolidate checksum algorithms for connector support
  - Fixing shutdown hang by closing ipc_uds server
  - Add configuration option outbound_data_interface
  - Log errors establishing the control channel
  - NULL contact string was causing a segfault


author: Globus Toolkit<support@globus.org> - 5.4.57-1.fc38+gcs5
changelog:
  -   Add empty docroot to vhost config
  -   Add support for guest collection auth policies
  -   Increase user_message maximum length to 256
  -   Support setting collection owner_string on unmanaged endpoitns
  -   Improve error handling for missing/unreadable gridftp config data and migration_plan yaml files
  -   Update visibility rules for root_path on guest collections
  -   Improve debian node cleanup
  -   Add delete protection option for collections
  -   Improve DNS pattern validation
  -   Improve credential refresh error handling
  -   Add read-only user_credential_required property to google cloud and azure blob storage policies
  -   Attempt fixing invalid credentials when they are service managed


author: Globus Toolkit<support@globus.org> - 5.4.58-1.fc38+gcs5
changelog:
  -   Add globus-python dependency for consistent version of python across supported OSes
  -   Allow mapped collection admins to delete related guest collections
  -   Update gcs-migration to 0.27~rc1 [sc-22560]
  -   Conditionally start OIDC
  -   Collection HTTPS API replies triggered with bearer tokens
  -   Collection HTTPS API replies include realm
  -   Requesting private policies on gateways triggers 403 as needed


author: Globus Toolkit<support@globus.org> - 5.4.59-1.fc38+gcs5
changelog:
  -   Update API documentation
  -   Add support for S3 requester_pays
  -   Fix collection deletion errors on multi-node endpoints


author: Globus Toolkit<support@globus.org> - 5.4.60-1.fc38+gcs5
changelog:
  -   Update SElinux policies to work with systemd socket activation changes
  -   Add last_access and created_at to collection
  -   Add API to query based on last-access or created-at
  -   Add guest collection batch delete operation
  -   Add endpoint client {create | list | delete} commands
  -   Improve error message when trying to set network_use without a subscription
  -   Update transfer with information about s3 requester_pays


author: Globus Toolkit<support@globus.org> - 5.4.61-1.fc38+gcs5
changelog:
  -   Update GCS CLI order for syntax checking
  -   Remove Auth token on logout
  -   Grammar fix in CLI
  -   Endpoint setup fetches client credentials


author: Globus Toolkit<support@globus.org> - 5.4.62-1.fc38+gcs5
changelog:
  -   Remove migrate53 command
  -   Fix error when multiple mappings exists for a user accessing s3 buckets without a key
  -   Fix typos in API docs
  -   Improve token handling in endpoint migrate4
  -   improve handling of include=private_policies for collection listings
  -   Add bash tab completion for CLI
  -   Return conflict error when trying to delete advertised owner admin role
  -   When changing endpoint owner by running endpoint setup, update the primary administrator role
  -   Add --project-admin option to endpoint setup
  -   Improve error handling when creating roles
  -   Fix error with -F list on some CLI commands


author: Globus Toolkit<support@globus.org> - 5.4.63-1.fc38+gcs5
changelog:
  -   Fix error running audit commands
  -   Improve CLI completion generating
  -   Don't add data_access scope to HA collections
  -   Fix for multiple local mappings for identities
  -   Improve invalid local user error message
  -   Updated help message for endpoint setup --owner and --project-admin
  -   Add support for IPv6 data addresses
  -   'endpoint setup' display project display name alongside project id
  -   Removed '[required]' from the --client-id help messages for 'endpoint cleanup' and 'node setup'.
  -   Clarify output when OIDC update run without any options
  -   Update endpoint/collection contact fields
  -   Mapped collection administrator can now modify guest collections via PATCH/PUT
  -   Endpoint and mapped collection admins can not add roles to guest collections, but can delete them.
  -   Reduce Auth calls for gridftp connections
  -   Improved the 'endpoint cleanup' message when the new-style deployment key is missing so the client-id is missing
  -   Updated 'endpoint setup' error message when deployment key is reused.
  -   Fix for running audit commands


author: Globus Toolkit<support@globus.org> - 5.4.65-1.fc38+gcs5
changelog:
  -   Fix identity mapping errors when using external identity mappings
  -   Fixes to work with globus-sdk 3.20
  -   Add template for completion of oauth credential generation via cli
  -   Make project id optional on google cloud collections
  -   Add oauth connector storage gateway policy "allow_any_account"
  -   Add template for completion of oauth credential generation via cli
  -   Handle deployment key mismatch in node setup
  -   Update Globus SDK
  -   Explain in error message which service is unreachable.
  -   self-diagnostic: Check for service users and home dirs
  -   self-diagnostic: List SELinux modules and policy version
  -   Fix compatibility issue with el7
  -   Fix "Unbound local error" in identity-mapping cilogon|myproxy
  -   Update SELinux policies to fix OIDC create errors on el9
  -   Fix scriptlet locale on el9
  -   Fix missing newline at end of gridftp config file
  -   Fix issue with public API responses always serializing with the 1.0.0 version of schemas


author: Globus Toolkit<support@globus.org> - 5.4.66-1.fc38+gcs5
changelog:
  -   Add preliminary SUSE support
  -   Cache identity lookup results in v4 migration tools
  -   Delay startup of GCS Manager Assistant until network is online


author: Globus Toolkit<support@globus.org> - 5.4.67-1.fc38+gcs5
changelog:
  -   Add support for filtering collection lists by gateway ID
  -   Improve retry logic in v4 migration tools
  -   Mapped collection admin can view guest collection roles
  -   Allow $HOME and ~ in sharing restrict paths
  -   Add GCS network connectivity test to self-diagnostics
  -   Allow setting client as endpoint owner
  -   Endpoint cleanup will delete client registrations
  -   Improve collection listing response time
  -   Old-style deployment keys can be updated to the new style
  -   Fix error handling when guest collection owner is not in allowed domains
  -   Collection listings can be filtered by storage gateway ID


author: Globus Toolkit<support@globus.org> - 5.4.69-1.fc38+gcs5
changelog:
  -   Fix for endpoint setup when id/secret already exist
  -   Make delete protection the default for mapped collections
  -   Improve error handling in api_app.wsgi
  -   Create credential at login even if there are multiple mappings
  -   Allow modifying parameters to oidc create
  -   Allow creating credential for any valid mapping
  -   Improve error when starting GCS Manager before running node setup
  -   add Transfer's v6 cidr block to allow_from config


author: Globus Toolkit<support@globus.org> - 5.4.71-1.fc38+gcs5
changelog:
  -   Mapped collections owner can be changed
  -   Update globus-sdk dependency
  -   Allow guest collection owner identities to map if unused


author: Globus Toolkit<support@globus.org> - 5.4.52-1.fc38+gcs5
changelog:
  -   Add support for migrating blackpearl collections
  -   Fix error migrating endoints with multiple shares owned by the same user


author: Globus Toolkit<support@globus.org> - 5.4.53-1.fc38+gcs5
changelog:
  -   Update python depedencies for py311 support
  -   Remove unneeded CA configuration
  -   Updated gcs-migration to 0.23
  -   Added support for Fedora 27 and Rocky 9
  -   Override GLOBUS_GSSAPI_VHOST_CRED_OWNER in gridftp env
  -   Update to gcs-migration 0.23
  -   updates for python 3.11 [sc-19983]
  -   remove unnecessary CA certs [sc-19973]
  -   Add "$GLOBUS_GSSAPI_VHOST_CRED_OWNER gcsweb" to /etc/gridftp.d/globus-connect-server-package [sc-12886]
  -   Remove unneeded six dependency on deb [sc-19984]


author: Globus Toolkit<support@globus.org> - 5.4.55-1.fc38+gcs5
changelog:
  -   GCS Release 2022-12-14
  -   Add support for migrating v4 ceph endpoints
  -   Add hpss migration
  -   Support gridftp server running on alternate control ports
  -   Fix endpoint update on collections without domain_name set


author: Globus Toolkit<support@globus.org> - 5.4.56-1.fc38+gcs5
changelog:
  -   Allow OIDC registration to use domain previously used by email IdP
  -   Fix TypeError in endpoint migrate53 command
  -   Update to gcs-migration 0.25


author: Globus Toolkit<support@globus.org> - 5.4.72-1.fc38+gcs5
changelog:
  -   Add details to more exceptions
  -   Improve errors listing roles for non-existent or deleted collections
  -   Update globus-oidc to 0.3.12
  -   Improve paginated collection/storage gateway list queries
  -   Use new external identity mapping package
  -   Update GCS CLI to use the latest SDK's Auth policy functions
  -   Improve endpoint setup project creation
  -   Improve error message for incomplete network settings
  -   Add support for subscription groups
  -   Fix CLI error w/collection list or show on a private endpoint
  -   Update project looking and creation in endpoint setup


author: Globus Toolkit<support@globus.org> - 5.4.73-1.fc38+gcs5
changelog:
  -   Fix path to LICENSE.txt
  -   Support db migration downgrade in native package downgrade
  -   Improve DB error handling in assistant
  -   Support GARE errors
  -   Fix listing user credentials when there are multiple mappings


author: Globus Toolkit<support@globus.org> - 5.4.74-1.fc38+gcs5
changelog:
  -   Improve error reporting in subscription setup and when authorization fails
  -   Remove migration support
  -   Validate that network parameters are consistent
  -   Improve error responses when authentication timeout occurs
  -   Remove endpoint migration support
  -   Validate that network parameters are consistent
  -   Added ACL expiry to HA mapped collections


author: Globus Toolkit <support@globus.org> - 8.9-1
changelog:
  - Rebuild for new OSes
  - Update license text
  - ignore invalid connections once the data channel is established


author: Globus Toolkit <support@globus.org> - 0.22-1
changelog:
  - fix authentication failure when token renewal occurs during large uploads
  - improve error when attempting to overwrite a file without permission


author: Globus Toolkit <support@globus.org> - 0.60-1
changelog:
  - Fix missing cdir/abspath in list response on non-Globus created directories
  - Pull credentials from GCSv5.4 for Google Cloud Storage


author: Globus Toolkit <support@globus.org> - 0.64-1
changelog:
  - Support for requester-pays buckets
  - Use HeadBucket for region discovery
  - Use default region if discovery fails
  - Cache region discovery
  - Always generate root listing from configured bucket policy


author: Globus Toolkit <support@globus.org> - 0.67-1
changelog:
  - Remove trailing / from S3 endpoint
  - Improve error message when permission to list buckets is denied


author: Globus Toolkit <support@globus.org> - 0.79-1
changelog:
  - Allow overwriting Google document types
  - Error correctly when attempting a write to an invalid path
  - Allow writes to subfolders within /Shared with me


author: Globus Toolkit <support@globus.org> - 0.9-1
changelog:
  - Return PERMISSION_DENIED instead of INTERNAL_ERROR on writes to the virtual root paths
  - Set default home directory to \My files


author: Globus <support@globus.org> - 0.5-1
changelog:
  - Remove unused SELinux capabilities
  - Install SELinux policy module only if targeted selinux policy is installed.


