# changelog

author: Globus Toolkit <support@globus.org> - 3.5-1
changelog:
  - Doxygen markup fixes
  - Include more manpages for API
  - Fix typos in error strings
  - Quiet some autoconf/automake warnings


author: Globus Toolkit <support@globus.org> - 3.13-1
changelog:
  - Doxygen markup fixes
  - Use consistent flavor tags
  - Use mixed case man page install for all packages
  - Use consistent PREDEFINED in all Doxyfiles
  - Fix dependency version
  - Fix typos and clarify some documentation


author: Globus Toolkit <support@globus.org> - 17.2-1
changelog:
  - Merge #110 from ellert: Fix regex for perl 5.26 compatibility
  - Fix globus_location_test when GLOBUS_LOCATION environment is set


author: Globus Toolkit <support@globus.org> - 2.20.0-1.el8+gcs5
changelog:
  * Initial release as an RPM package

    * Includes support for multi-user Globus Compute Endpoints; see
      https://globus-compute.readthedocs.io/ for more information.


author: Globus Toolkit <support@globus.org> - 15.99-1
changelog:
  - support user selection for mapped collections
  - export guest user identity info to legacy callouts
  - dsi-rest: limit memory usage during stalled cloud writes


author: Globus Toolkit <support@globus.org> - 15.78-2
changelog:
  - Only check the major version of GCS login response
  - allow per-storage-gateway config files
  - add support for posix staging callouts
  - build fixes


author: Globus Toolkit <support@globus.org> - 15.88
changelog:
  - Modernize package metadata
  - enforce both restrict_paths and sharing_rp when both are set on guest collections


author: Globus Toolkit <support@globus.org> - 15.90-1
changelog:
  - Add additional verification for login parameters
  - Remove nuisance log messages
  - Export identity info for legacy callouts


author: Globus Toolkit <support@globus.org> - 16.1-1
changelog:
  - Consolidate checksum algorithms for connector support
  - Fixing shutdown hang by closing ipc_uds server
  - Add configuration option outbound_data_interface
  - Log errors establishing the control channel
  - NULL contact string was causing a segfault


author: Globus Toolkit <support@globus.org> - 16.6-1
changelog:
  - fix errors when failing to stat an individual entry of a listing
  - fix end of session cleanup to wait for pending operations
  - allow legacy callbacks for HTTPS logins


author: Globus Toolkit <support@globus.org> - 16.7-1
changelog:
  - windows build fixes
  - dynamic file support
  - CRC32C checksum support
  - peek support for rest library


author: Globus Toolkit <support@globus.org> - 16.8-1
changelog:
  - improve dynamic file caching
  - error with ENDPOINT_ERROR when GCS Manager is down or returns invalid login response


author: Globus Toolkit <support@globus.org> - 16.1~rc2-1
changelog:
  - Fixing shutdown hang by closing ipc_uds server
  - Add configuration option outbound_data_interface
  - Log errors establishing the control channel
  - NULL contact string was causing a segfault


author: Globus Toolkit <support@globus.org> 4.0.49-1
changelog:
  - Add retries to http downloads for version and ec2 checking.
  - Fix ec2 checks not failing in Azure.


author: Globus Toolkit <support@globus.org> 4.0.56-1
changelog:
  - Better error parsing for EC2 checks (#21)
  - Fix python3 conversion issue reading signing policy (#22)


author: Globus Toolkit <support@globus.org> 4.0.57-1
changelog:
  - Match CILogon IdP based on Organization name or Display name
  - Python 3 fix on version string in version_id


author: Globus Toolkit <support@globus.org> - 0.4-1
changelog:
  - Cache token introspect
  - Update dependencies
  - Cleanup logging
  - Add DELETE support for user credentials
  - Adjust error response
  - Add deleted and invalid columns
  - Add migration for index
  - Add script for adding administrator role
  - Make required identity provider check more strict
  - Add dependency on the latest mod-wsgi


author: Globus Toolkit <support@globus.org> - 0.5-1
changelog:
  - Fix setting owner_string for linked identities
  - Add more server-timing metrics
  - Add framework for server timing metrics
  - Update Flask to v0.12.1


author: Globus Toolkit <support@globus.org> - 0.8-1
changelog:
  - Change error http status from 400 to 500
  - Fix cache expiration calculation
  - Retry operations on 401 status
  - Avoid SELinux rpm install errors when it is not enabled


author: Globus Toolkit<support@globus.org> - 5.4.8-1.el8+gcs5
changelog:
  -   Add node create subcommand
  -   Reorder service startup in node setup [ch-3931]
  -   Remove unneeded check in Collection.init_on_load()
  -   Fix grammar
  -   Clean up vhosts in assistant
  -   Add audit command
  -   Remove duplicated version gridftp configuration
  -   Add support for sharing user and group restrictions


author: Globus Toolkit<support@globus.org> - 5.4.9-1.el8+gcs5
changelog:
  -   Improve API error messages for DATA_TYPE mismatch
  -   Migrate Endpoint id in migrate53
  -   Add forward compatiblity to node object
  -   Add new command to migrate uuids of old endpoints
  -   Verify log directory at node setup
  -   Fix crash in endpoint setup


author: Globus Toolkit<support@globus.org> - 5.4.10-1.el8+gcs5
changelog:
  -   Add posix-staging connector
  -   Add iRODS connector
  -   Fix allowed_domain check for identities like user@domain@accounts.google.com
  -   GCSv5 expression mapping should allow 'private' identities
  -   Fix threading error in gcs_manager_assistant


author: Globus Toolkit<support@globus.org> - 5.4.12-1.el8+gcs5
changelog:
  -   Fix issues handling broken credentials
  -   Allow private IDs to be granted roles
  -   Fix lockdir permissions when migrating
  -   Improve robustness of apache reload
  -   Fix gcs_manager_assistant locale on debian
  -   Move storage_gateway user/group restrictions to mapped collection sharing
      restrictions in migrate653


author: Globus Toolkit<support@globus.org> - 5.4.14-1.el8+gcs5
changelog:
  -   Add support for using custom certs and domains for GCS endpoints and collections
  -   Add OIDC service to interface with local PAM modules
  -   Migrated collections have wrong redirect_uris
  -   Improve validation of node port ranges
  -   Remove duplicate entries from --help output
  -   Improve error messages when logging in to invalid collection id
  -   Update api_version and remove FIXMES from versions in API docs


author: Globus Toolkit<support@globus.org> - 5.4.15-1.el8+gcs5
changelog:
  -   Normalize validated_email for Google Cloud Platform
  -   Minor documentation fixes
  -   URL-encode ceph usernames in validity query
  -   Allow updating port ranges
  -   Allow node setup to accept multiple IP addresses
  -   Fix certificate renewal updates


author: Globus Toolkit<support@globus.org> - 5.4.16-1.el8+gcs5
changelog:
  -   Fix domain obfuscate on FIPS-compliant machines
  -   Improve error messages when rerunning globus-connnect-server endpoint setup
      with a different deployment key
  -   Restrict roles to non-email identities
  -   Fix crash in migrate53


author: Globus Toolkit<support@globus.org> - 5.4.17-1.el8+gcs5
changelog:
  -   Mark Google credentials as invalid if refresh fails
  -   Add warning about deleting endpoint with OIDC
  -   Prioritize missing subscription error over missing scope error
  -   Guest collections inherit encrypt requirement from mapped collections
  -   Remove most sqlalchemy reconstructors to improve performance
  -   Fix certificate renewal issue with changed private key
  -   Set mapped_collection_id in transfer record
  -   Update collections to have consistent force_encryption value
  -   Fix issues logging in to ceph on systems running python3.5


author: Globus Toolkit<support@globus.org> - 5.4.18-1.el8+gcs5
changelog:
  -   Changes to support OneDrive connector (currently in beta release)
  -   Fix error deleting google cloud storage gateway
  -   Add new user sharing policies


author: Globus Toolkit<support@globus.org> - 5.4.20-1.el8+gcs5
changelog:
  -   Fix ownership of gcs setup.log
  -   Add optional requires_mfa property for HA storage gateways
  -   Eliminated use of getgrall() to avoid timeout issues
  -   Add force_verify property to collections
  -   Fix installation error when SELinux is not installed
  -   Improve POSIX check_user_allowed
  -   Fix propagation of default sharing policy changes across DTNs
  -   Add support for MFA
  -   Propagate force_verify property to guest collections
  -   Fix migration of v5.3 mapped collections
  -   Pin gcs-cli to 1.0.18


author: Globus Toolkit<support@globus.org> - 5.4.21-1.el8+gcs5
changelog:
  -   High assurance storage gateways can require multi factor authentication for
      access to collections.
  -   Collections can force checksum verification or disable it altogether.
  -   Added ActiveScale and OneDrive connectors.
  -   Change wsgi container to gunicorn to improve login performance


author: Globus Toolkit<support@globus.org> - 5.4.22-1.el8+gcs5
changelog:
  -   Fix sharing policies pagination in CLI
  -   Delete sharing policies objects from database when a collection is deleted


author: Globus Toolkit<support@globus.org> - 5.4.24-1.el8+gcs5
changelog:
  -   Fix error handling when object can't be created
  -   Return empty list instead of error when an admin lists collections and there are none
  -   Add GCS Manager check socket to self-diagnostic
  -   Disable gcs_manager.socket on node cleanup


author: Globus Toolkit<support@globus.org> - 5.4.25-1.el8+gcs5
changelog:
  - Update test suite
  - Handle transfer limit when creating too many collections
  - Don't return 403 error when there's an empty list of user credentials on a
    private endpoint
  - Explicit error when the OIDC discovery URL is unreachable


author: Globus Toolkit<support@globus.org> - 5.4.30-1.el8+gcs5
changelog:
  -   Restrict domain names to valid strings
  -   Audit log parser fix for duplicate stat operation error records
  -   Restrict gridftp access to Transfer service IP range
  -   Improvements in certificate renewal handling
  -   Google Cloud Storage: add support for admin-configured service credentials


author: Globus Toolkit<support@globus.org> - 5.4.32-2.el8+gcs5
changelog:
  -   Fix ProxyPassReverse directive
  -   Upgrade dependencies to support newer python versions
  -   Collection contact_email inherits from endpoint when not set
  -   Unused identities can be used for roles
  -   Check collection authorization timeout in collection role creation
  -   migrate4 updates collections when owner changes
  -   Track conflicts between dependent objects on update


author: Globus Toolkit<support@globus.org> - 5.4.35-1.el8+gcs5
changelog:
  -   Fix for v4 migrations with disabled guest collections
  -   Fixed v4 migration --finalize
  -   Fix for v5.3 migrations
  -   Update gcs_migration
  -   Handle case insensitive email comparisons for id tokens


author: Globus Toolkit<support@globus.org> - 5.4.38-1.el8+gcs5
changelog:
  -   Fixed 'collection show' for endpoint admins
  -   Add ability to register new oidc server
  -   Azure blob and onedrive connectors get username from id_token


author: Globus Toolkit<support@globus.org> - 5.4.42-1.el8+gcs5
changelog:
  -   Update DNS registration client
  -   Improve type checking integration
  -   Remove support for disabled guest collections
  -   Authentication timeout doesn't apply to clients
  -   Fix issues with rapid object updates


author: Globus Toolkit<support@globus.org> - 5.4.43-1.el8+gcs5
changelog:
  -   Use websockets for object change notifications
  -   Fix TypeError syncing data_interface
  -   Increase wsgi timeout
  -   Improve validation of default_directory collection property
  -   Add support for migrating shared endpoints to guest collections
  -   Improve error behavior when node setup or cleanup are run against a deleted endpoint
  -   Update to newer globus-python-sdk
  -   Set advertised owner on new collections and endpoints
  -   Fix apache startup issue in node setup
  -   Add HPSS connector


author: Globus Toolkit<support@globus.org> - 5.4.44-1.el8+gcs5
changelog:
  -   Fix for OIDC updates from AppSync
  -   Handle role conflicts in migrate4
  -   Fix error on credential refresh failure during login
  -   Refactor CLI imports to improve startup time


author: Globus Toolkit<support@globus.org> - 5.4.45-1.el8+gcs5
changelog:
  -   Add limit to size of keychain
  -   Use API for scope strings
  -   Use case insensitive comparison on box user account mapping
  -   Fix oidc_register when no additional domains are used


author: Globus Toolkit<support@globus.org> - 5.4.47-1.el8+gcs5
changelog:
  -   Support gcs-migration 0.18
  -   Fix error updating node IP address
  -   Improve CLI error handling of parameters with prefixes
  -   Ignore implicit ACLs when migrating from v4


author: Globus Toolkit<support@globus.org> - 5.4.48-1.el8+gcs5
changelog:
  -   Improve error message when ~/.globus has permission issues
  -   Guest collection and role updates are handled asynchronously
  -   Improvements in 'gcs endpoint migrate4'
  -   ~ and $HOME allowed in collection base path
  -   Improve 'gcs login localhost' error when node is not configured
  -   Collection operations are performed asynchronously
  -   v4 migration removes migration keywords on collections
  -   v4 migration prevents updates once finalization begins
  -   Improved recovery of previous v4 migration runs
  -   Migration does not create new storage gateways when v4 endpoint display name changes


author: Globus Toolkit<support@globus.org> - 5.4.49-1.el8+gcs5
changelog:
  -   Add admin_managed_credentials property to storage_gateway
  -   Support anonymous ACLs in migration


author: Globus Toolkit<support@globus.org> - 5.4.51-1.el8+gcs5
changelog:
  -   Allow endpoint admin to delete credentials
  -   Return error when getting soft-deleted creds
  -   Support admin_managed_credentials in GET
  -   Print diagnostics from checks in endpoint migrate4
  -   Fix link to role docs
  -   Update migrate4 to support the S3 connector
  -   Bump version of jwcrypto
  -   Removed the 'node vhost-update' CLI subcommand
  -   Fixed service restart during upgrades
  -   New gcs_migration version


author: Globus Toolkit<support@globus.org> - 5.4.52-1.el8+gcs5
changelog:
  -   Add support for migrating blackpearl collections
  -   Fix error migrating endoints with multiple shares owned by the same user


author: Globus Toolkit<support@globus.org> - 5.4.53-1.el8+gcs5
changelog:
  -   Update python depedencies for py311 support
  -   Remove unneeded CA configuration
  -   Updated gcs-migration to 0.23
  -   Added support for Fedora 27 and Rocky 9
  -   Override GLOBUS_GSSAPI_VHOST_CRED_OWNER in gridftp env
  -   Update to gcs-migration 0.23
  -   updates for python 3.11 [sc-19983]
  -   remove unnecessary CA certs [sc-19973]
  -   Add "$GLOBUS_GSSAPI_VHOST_CRED_OWNER gcsweb" to /etc/gridftp.d/globus-connect-server-package [sc-12886]
  -   Remove unneeded six dependency on deb [sc-19984]


author: Globus Toolkit<support@globus.org> - 5.4.55-1.el8+gcs5
changelog:
  -   GCS Release 2022-12-14
  -   Add support for migrating v4 ceph endpoints
  -   Add hpss migration
  -   Support gridftp server running on alternate control ports
  -   Fix endpoint update on collections without domain_name set


author: Globus Toolkit<support@globus.org> - 5.4.56-1.el8+gcs5
changelog:
  -   Allow OIDC registration to use domain previously used by email IdP
  -   Fix TypeError in endpoint migrate53 command
  -   Update to gcs-migration 0.25


author: Globus Toolkit<support@globus.org> - 5.4.57-1.el8+gcs5
changelog:
  -   Add empty docroot to vhost config
  -   Add support for guest collection auth policies
  -   Increase user_message maximum length to 256
  -   Support setting collection owner_string on unmanaged endpoitns
  -   Improve error handling for missing/unreadable gridftp config data and migration_plan yaml files
  -   Update visibility rules for root_path on guest collections
  -   Improve debian node cleanup
  -   Add delete protection option for collections
  -   Improve DNS pattern validation
  -   Improve credential refresh error handling
  -   Add read-only user_credential_required property to google cloud and azure blob storage policies
  -   Attempt fixing invalid credentials when they are service managed


author: Globus Toolkit<support@globus.org> - 5.4.58-1.el8+gcs5
changelog:
  -   Add globus-python dependency for consistent version of python across supported OSes
  -   Allow mapped collection admins to delete related guest collections
  -   Update gcs-migration to 0.27~rc1 [sc-22560]
  -   Conditionally start OIDC
  -   Collection HTTPS API replies triggered with bearer tokens
  -   Collection HTTPS API replies include realm
  -   Requesting private policies on gateways triggers 403 as needed


author: Globus Toolkit<support@globus.org> - 5.4.59-1.el8+gcs5
changelog:
  -   Update API documentation
  -   Add support for S3 requester_pays
  -   Fix collection deletion errors on multi-node endpoints


author: Globus Toolkit<support@globus.org> - 5.4.60-1.el8+gcs5
changelog:
  -   Update SElinux policies to work with systemd socket activation changes
  -   Add last_access and created_at to collection
  -   Add API to query based on last-access or created-at
  -   Add guest collection batch delete operation
  -   Add endpoint client {create | list | delete} commands
  -   Improve error message when trying to set network_use without a subscription
  -   Update transfer with information about s3 requester_pays


author: Globus Toolkit<support@globus.org> - 5.4.61-1.el8+gcs5
changelog:
  -   Update GCS CLI order for syntax checking
  -   Remove Auth token on logout
  -   Grammar fix in CLI
  -   Endpoint setup fetches client credentials


author: Globus Toolkit<support@globus.org> - 5.4.62-1.el8+gcs5
changelog:
  -   Remove migrate53 command
  -   Fix error when multiple mappings exists for a user accessing s3 buckets without a key
  -   Fix typos in API docs
  -   Improve token handling in endpoint migrate4
  -   improve handling of include=private_policies for collection listings
  -   Add bash tab completion for CLI
  -   Return conflict error when trying to delete advertised owner admin role
  -   When changing endpoint owner by running endpoint setup, update the primary administrator role
  -   Add --project-admin option to endpoint setup
  -   Improve error handling when creating roles
  -   Fix error with -F list on some CLI commands


author: Globus Toolkit<support@globus.org> - 5.4.63-1.el8+gcs5
changelog:
  -   Fix error running audit commands
  -   Improve CLI completion generating
  -   Don't add data_access scope to HA collections
  -   Fix for multiple local mappings for identities
  -   Improve invalid local user error message
  -   Updated help message for endpoint setup --owner and --project-admin
  -   Add support for IPv6 data addresses
  -   'endpoint setup' display project display name alongside project id
  -   Removed '[required]' from the --client-id help messages for 'endpoint cleanup' and 'node setup'.
  -   Clarify output when OIDC update run without any options
  -   Update endpoint/collection contact fields
  -   Mapped collection administrator can now modify guest collections via PATCH/PUT
  -   Endpoint and mapped collection admins can not add roles to guest collections, but can delete them.
  -   Reduce Auth calls for gridftp connections
  -   Improved the 'endpoint cleanup' message when the new-style deployment key is missing so the client-id is missing
  -   Updated 'endpoint setup' error message when deployment key is reused.
  -   Fix for running audit commands


author: Globus Toolkit<support@globus.org> - 5.4.65-1.el8+gcs5
changelog:
  -   Fix identity mapping errors when using external identity mappings
  -   Fixes to work with globus-sdk 3.20
  -   Add template for completion of oauth credential generation via cli
  -   Make project id optional on google cloud collections
  -   Add oauth connector storage gateway policy "allow_any_account"
  -   Add template for completion of oauth credential generation via cli
  -   Handle deployment key mismatch in node setup
  -   Update Globus SDK
  -   Explain in error message which service is unreachable.
  -   self-diagnostic: Check for service users and home dirs
  -   self-diagnostic: List SELinux modules and policy version
  -   Fix compatibility issue with el7
  -   Fix "Unbound local error" in identity-mapping cilogon|myproxy
  -   Update SELinux policies to fix OIDC create errors on el9
  -   Fix scriptlet locale on el9
  -   Fix missing newline at end of gridftp config file
  -   Fix issue with public API responses always serializing with the 1.0.0 version of schemas


author: Globus Toolkit<support@globus.org> - 5.4.66-1.el8+gcs5
changelog:
  -   Add preliminary SUSE support
  -   Cache identity lookup results in v4 migration tools
  -   Delay startup of GCS Manager Assistant until network is online


author: Globus Toolkit<support@globus.org> - 5.4.67-1.el8+gcs5
changelog:
  -   Add support for filtering collection lists by gateway ID
  -   Improve retry logic in v4 migration tools
  -   Mapped collection admin can view guest collection roles
  -   Allow $HOME and ~ in sharing restrict paths
  -   Add GCS network connectivity test to self-diagnostics
  -   Allow setting client as endpoint owner
  -   Endpoint cleanup will delete client registrations
  -   Improve collection listing response time
  -   Old-style deployment keys can be updated to the new style
  -   Fix error handling when guest collection owner is not in allowed domains
  -   Collection listings can be filtered by storage gateway ID


author: Globus Toolkit<support@globus.org> - 5.4.69-1.el8+gcs5
changelog:
  -   Fix for endpoint setup when id/secret already exist
  -   Make delete protection the default for mapped collections
  -   Improve error handling in api_app.wsgi
  -   Create credential at login even if there are multiple mappings
  -   Allow modifying parameters to oidc create
  -   Allow creating credential for any valid mapping
  -   Improve error when starting GCS Manager before running node setup
  -   add Transfer's v6 cidr block to allow_from config


author: Globus Toolkit<support@globus.org> - 5.4.71-1.el8+gcs5
changelog:
  -   Mapped collections owner can be changed
  -   Update globus-sdk dependency
  -   Allow guest collection owner identities to map if unused


author: Globus Toolkit<support@globus.org> - 5.4.72-1.el8+gcs5
changelog:
  -   Add details to more exceptions
  -   Improve errors listing roles for non-existent or deleted collections
  -   Update globus-oidc to 0.3.12
  -   Improve paginated collection/storage gateway list queries
  -   Use new external identity mapping package
  -   Update GCS CLI to use the latest SDK's Auth policy functions
  -   Improve endpoint setup project creation
  -   Improve error message for incomplete network settings
  -   Add support for subscription groups
  -   Fix CLI error w/collection list or show on a private endpoint
  -   Update project looking and creation in endpoint setup


author: Globus Toolkit<support@globus.org> - 5.4.73-1.el8+gcs5
changelog:
  -   Fix path to LICENSE.txt
  -   Support db migration downgrade in native package downgrade
  -   Improve DB error handling in assistant
  -   Support GARE errors
  -   Fix listing user credentials when there are multiple mappings


author: Globus Toolkit<support@globus.org> - 5.4.74-1.el8+gcs5
changelog:
  -   Improve error reporting in subscription setup and when authorization fails
  -   Remove migration support
  -   Validate that network parameters are consistent
  -   Improve error responses when authentication timeout occurs
  -   Remove endpoint migration support
  -   Validate that network parameters are consistent
  -   Added ACL expiry to HA mapped collections


author: Globus Toolkit<support@globus.org> - 5.4.76-1.el8+gcs5
changelog:
  -   Allow network settings on storage gateways
  -   Fix guest collection admin viewing private policies
  -   Fix for `endpoint setup` progress meter messaging
  -   CLI usage updates for `endpoint key convert`
  -   Max ACL expiry settable on HA guest collections


author: Globus Toolkit<support@globus.org> - 5.4.77-1.el8+gcs5
changelog:
  -   Fix for session update suggestions in the CLI
  -   Fix for updating scopes when gateway domains change
  -   Improved subscription error messages
  -   Modify SELinux policies for NoNewPrivileges
  -   Updated 'endpoint setup' subscription message
  -   Update GARE responses to use ID's
  -   Fixed validation of gateway network_use on unmanaged endpoints


author: Globus Toolkit<support@globus.org> - 5.4.79-1.el8+gcs5
changelog:
  -   Support for HA-only transfers
  -   Fix for db downgrades on Ubuntu
  -   Added proxy support for Appsync websockets


author: Globus Toolkit<support@globus.org> - 5.4.80-1.el8+gcs5
changelog:
  -   Enable logging for external id mapping
  -   Fix for collection reset-owner-string
  -   Fix for dependent scopes in error responses
  -   Include globus-idm-validator in packages
  -   Add API for checking collections for errors
  -   Improve s3_multi_creds length checking
  -   Remove unnecessary dropbox scopes
  -   Add support for updating client secret


author: Globus Toolkit<support@globus.org> - 5.4.81-1.el8+gcs5
changelog:
  -   Added gcs node enable|disable commands
  -   Added gcs -> globus-connect-server alias
  -   Fix authentication requirements for collection listings


author: Globus Toolkit<support@globus.org> - 5.4.82-1.el8+gcs5
changelog:
  -   Improved GARE authentication response for unknown identities
  -   Update NotFromAllowedDomainError to better fit Transfer/gridftp contexts
  -   collection#1.13.0 adds auto_delete_timeout and skip_auto_delete
  -   Allow CLI login using collection ID
  -   CLI stateful options are no longer context dependent
  -   Added custom httpd logging for GCS


author: Globus Toolkit<support@globus.org> - 5.4.83-1.el8+gcs5
changelog:
  -   Added guest activity notification policies
  -   Fix for disabling collection HTTPS on guest collections
  -   Add support for subscription-admin-verified collection property


author: Globus Toolkit<support@globus.org> - 5.4.84~rc1-1.el8+gcs5
changelog:
  -   Added guest activity notification policies
  -   Fix for disabling collection HTTPS on guest collections
  -   Add support for subscription-admin-verified collection property
  -   Flows can be associated with collections
  -   Fix for listing collection by mapped collection ID


author: Globus Toolkit<support@globus.org> - 5.4.86-1.el8+gcs5
changelog:
  -   prevent apache log issues with high collection counts
  -   Support IMDSv2
  -   Use importlib.metadata to load entry points
  -   Fix tests to run on non-linux


author: Globus Toolkit<support@globus.org> - 5.4.87-1.el8+gcs5
changelog:
  -   Dependency updates
  -   Support for preserving mod_time on transfers
  -   Support for disabling specific methods on collection HTTPS access


author: Globus Toolkit<support@globus.org> - 5.4.89-1.el8+gcs5
changelog:
  -   updated JWT signer lib from google-auth for gcloud service creds
  -   Fix for lost log messages after log rotation


author: Globus Toolkit <support@globus.org> - 0.38-1
changelog:
  - Improve testing error for restartability.
  - Improve logging
  - When HTTP GET returns an error, don't send it on a data channel


author: Globus Toolkit <support@globus.org> - 8.34-1
changelog:
  - add FTP_TEST_RESTART_AFTER_RANGE=n to force restarts after n range markers for restart points 22 and 24 (RETR_RESPONSE and STOR_RESPONSE)


author: Globus Toolkit <support@globus.org> - 8.9-1
changelog:
  - Rebuild for new OSes
  - Update license text
  - ignore invalid connections once the data channel is established


author: Globus Toolkit <support@globus.org> - 9.24-1
changelog:
  - don't attempt sshftp data protection without creds
  - checksum verification based on contribution from IBM


author: Globus Toolkit <support@globus.org> - 12.19-1
changelog:
  - Add support for supported checksum advertising
  - Add support for SHA1, SHA256, SHA512 to POSIX DSI


author: Globus Toolkit <support@globus.org> - 1.9-1
changelog:
  - Fixes #9  : Trailing '/' for EndPoint value results in a confusing error message
  - Fixes #12 : Trailing '/' in mapped collections breaks directory listings


author: Globus Toolkit <support@globus.org> - 0.22-1
changelog:
  - fix authentication failure when token renewal occurs during large uploads
  - improve error when attempting to overwrite a file without permission


author: Globus Toolkit <support@globus.org> - 0.40-1
changelog:
  - Update for V4 signature auth
  - Support buckets outside of the default region
  - Improved error messages


author: Globus Toolkit <support@globus.org> - 0.60-1
changelog:
  - Fix missing cdir/abspath in list response on non-Globus created directories
  - Pull credentials from GCSv5.4 for Google Cloud Storage


author: Globus Toolkit <support@globus.org> - 0.63-1
changelog:
  - Support for requester-pays buckets
  - Use HeadBucket for region discovery
  - Use default region if discovery fails
  - Cache region discovery
  - Always generate root listing from configured bucket policy


author: Globus Toolkit <support@globus.org> - 0.67-1
changelog:
  - Remove trailing / from S3 endpoint
  - Improve error message when permission to list buckets is denied


author: Globus Toolkit <support@globus.org> - 0.73-1
changelog:
  - add s3 multipart upload part_size configuration
  - fix gcloud crash during checksum
  - improve handling when multiple MPU exist
  - remove unused dependency


author: Globus Toolkit <support@globus.org> - 6.2-1
changelog:
  - prevent client from requesting clear control channel
  - CIPHERS config will now apply to control channel


author: Globus Toolkit <support@globus.org> - 0.65-1
changelog:
  - Fix issues accessing previously unaccessed files in Google drive
  - Remove calls to deprecated team drives APIs


author: Globus Toolkit <support@globus.org> - 0.68-1
changelog:
  - Fix intermittent issues writing to Shared Drives
  - Fix NOT_A_DIRECTORY errors on file accesses
  - Fix AMBIGUOUS_PATH errors when writing paths with repeated directory names
  - Fix Checksum on newly created google doc files


author: Globus Toolkit <support@globus.org> - 0.79-1
changelog:
  - Allow overwriting Google document types
  - Error correctly when attempting a write to an invalid path
  - Allow writes to subfolders within /Shared with me


author: Globus Toolkit <support@globus.org> - 0.79~rc1-1
changelog:
  - Allow overwriting Google document types
  - Error correctly when attempting a write to an invalid path


author: Globus Toolkit <support@globus.org> - 0.9-1
changelog:
  - Return PERMISSION_DENIED instead of INTERNAL_ERROR on writes to the virtual root paths
  - Set default home directory to \My files


author: Globus Toolkit <support@globus.org> - 5.7-1
changelog:
  - GT-599: Race condition in globus_gsi_callback_get_SSL_callback_data_index() and globus_gsi_callback_get_X509_STORE_callback_data_index()


author: Globus Toolkit <support@globus.org> - 5.12-1
changelog:
  - Fix crash with empty X.509 subject name
  - Ensure that X509_OBJECT_new compatibility macro initializes the object


author: Globus Toolkit <support@globus.org> - 9.10-1
changelog:
  - Include more manpages for API
  - Doxygen markup fixes
  - Fix dependency version
  - Fix typos and clarify some documentation
  - Quiet some autoconf/automake warnings


author: Globus Toolkit <support@globus.org> - 3.5-1
changelog:
  - Include more manpages for API
  - Use consistent PREDEFINED in all Doxyfiles
  - Doxygen markup fixes
  - Fix typos and clarify some documentation
  - Quiet some autoconf/automake warnings


author: Globus Toolkit <support@globus.org> - 5.7-1
changelog:
  - Include more manpages for API
  - Doxygen markup fixes
  - Fix typos and clarify some documentation
  - Quiet some autoconf/automake warnings


author: Globus Toolkit <support@globus.org> - 13.9-1
changelog:
  - Set the default minimum TLS version to 1.2.  1.0 and 1.1 are deprecated.
  - Set the maximum TLS version default to 1.2.  1.3 is not yet supported.
  - use 2048 bit keys to support openssl 1.1.1


author: Globus Toolkit <support@globus.org> - 11.5-1
changelog:
  - Use new dlpreopen variable from gsi driver to build tests for installer
  - Fix uninitialized variable reads and some warnings in io tests


author: Globus <support@globus.org> - 0.4-1
changelog:
  - Remove unused SELinux capabilities
  - Install SELinux policy module only if targeted selinux policy is installed.


author: Globus Toolkit <support@globus.org> - 4.6-1
changelog:
  - Include more manpages for API
  - Use consistent PREDEFINED in all Doxyfiles
  - Doxygen markup fixes
  - Quiet some autoconf/automake warnings


author: Globus Toolkit <support@globus.org> - 6.14-1
changelog:
  - Missing handle_init in grid-cert-diagnostics -c
  - Add option (-H) to compare hostname when checking a certificate with -c


author: Globus Toolkit <support@globus.org> - 6.0.23-1
changelog:
  - (deb) add bullseye and impish
  - (deb) remove groovy
  - Refactor version detection in repo install scripts


author: Globus Toolkit <support@globus.org> - 1.4-1
changelog:
  - Make anonymous requests when credentials aren't available (closes #2)
  - Add GLOBUS_LIBS3_DEBUG_FILE env var to capture curl debug


author: Globus Toolkit <support@globus.org> - 2.5-1
changelog:
  - don't ignore error when body download doesn't match Content-Length
  - handle ceph RGW responses with excess user attributes


author: Globus Toolkit <support@globus.org> - 3.9-1
changelog:
  - Add dlpreopen variable to uninstalled pc file
  - Propagate error back to caller when name mismatch occurs on server
    instead of just closing the handle


author: Globus Toolkit <support@globus.org> - 6.1.28-4
changelog:
  - Remove krb5 dependency on sles.12
  - Add /usr/sbin and /sbin for post scripts
  - Add shadow to BuildRequires


