v40.3.0

What's Changed

Bug Fixes

• Ref #1106: Do not bother deleting unreferenced commits if not tag was removed by @leplatrem in #1107
• Force full git-export once a day by @leplatrem in #1105
• Fix #1106: fix branching in git-export by @leplatrem in #1108

New Features

• Fix #1109: git-export: handle case with several updates in a short period of time after a long inactivity by @leplatrem in #1110
• Adjust v1 reader to make quotes in quoted timestamps optional by @alexcottner in #1112
• Removing quoted timestamps from v2 reader by @alexcottner in #1113

Dependency Updates

• Bump the development-dependencies group with 2 updates by @dependabot[bot] in #1114

Other Changes

• Updating docker-compose to work with v1 and v2 readers by @alexcottner in #1111

Full Changelog: v40.2.6...v40.3.0

v40.2.6

What's Changed

Bug Fixes

• Fix RMST-257: do not expect local bucket branches by @leplatrem in #1102

Dependency Updates

• Bump the development-dependencies group with 3 updates by @dependabot[bot] in #1097
• Bump the development-dependencies group with 3 updates by @dependabot[bot] in #1100
• Bump actions/cache from 4 to 5 in the all-dependencies group by @dependabot[bot] in #1101
• Bump python from 3.14.1-slim to 3.14.2-slim by @dependabot[bot] in #1103

Full Changelog: v40.2.5...v40.2.6

v40.2.5

What's Changed

Dependency Updates

• Bump urllib3 from 2.5.0 to 2.6.0 in /cronjobs by @dependabot[bot] in #1094
• Bump urllib3 from 2.5.0 to 2.6.0 in /browser-tests by @dependabot[bot] in #1096
• Bump urllib3 from 2.5.0 to 2.6.0 by @dependabot[bot] in #1095

Full Changelog: v40.2.4...v40.2.5

v40.2.4

What's Changed

Bug Fixes

• git-reader: Add version.json into the container by @leplatrem in #1083

Dependency Updates

• Bump actions/checkout from 5 to 6 in the all-dependencies group by @dependabot[bot] in #1085
• Bump the development-dependencies group with 2 updates by @dependabot[bot] in #1084
• Bump ruff from 0.14.6 to 0.14.7 in the development-dependencies group by @dependabot[bot] in #1087
• Update Kinto Admin version to 6.0.0 by @github-actions[bot] in #1090
• Bump werkzeug from 3.1.3 to 3.1.4 by @dependabot[bot] in #1091
• Bump python from 3.14.0-slim to 3.14.1-slim by @dependabot[bot] in #1092

Full Changelog: v40.2.3...v40.2.4

v40.2.3

What's Changed

Bug Fixes

• git-reader: Add missing version info in container by @leplatrem in #1077
• git-reader: Add HEAD support on attachments endpoints by @leplatrem in #1078
• Git reader: /__version__ reads from APP_DIR and /app by default by @leplatrem in #1080

Full Changelog: v40.2.2...v40.2.3

v40.2.2

What's Changed

New Features

• git-export: Delete attachments once every 2 days by default by @leplatrem in #1075

Other Changes

• Adding release tags for git-reader image publishing by @alexcottner in #1076

Full Changelog: v40.2.1...v40.2.2

v40.2.1

What's Changed

New Features

• RMST-206: git-export: delete old objects by @leplatrem in #1072

Dependency Updates

• Adding prometheus-client package to git-reader by @alexcottner in #1074

Full Changelog: v40.2.0...v40.2.1

v40.2.0

What's Changed

Bug Fixes

• git-export: Skip bundle if no attachment in collection by @leplatrem in #1066
• gitupdate without any changes should not result in an error exit code by @alexcottner in #1069
• Fix expire orphan attachment job, event hold not required by @leplatrem in #1073

New Features

• RMST-235: Add metrics to git-reader by @leplatrem in #1071

Dependency Updates

• Adding missing lz4 package to git-reader by @alexcottner in #1068
• Bump the development-dependencies group with 3 updates by @dependabot[bot] in #1070

Full Changelog: v40.1.0...v40.2.0

v40.1.0

What's Changed

New Features

• Leverage Sentry cron API by @leplatrem in #1062

Bug Fixes

• Add missing explicit pyjwt by @leplatrem in #1061
• Add cryptography module for jwt to work by @leplatrem in #1063

Dependency Updates

• Upgrade kinto to 23.2.1 by @leplatrem in #1065

Full Changelog: v40.0.0...v40.1.0

v40.0.0

What's Changed

Breaking Changes

• RMST-165: add multiple signing keys support by @leplatrem in #1056

Replace all key_id settings like:

kinto.signer.autograph.key_id = ...
kinto.signer.security-state-staging.autograph.key_id = ...

to key_ids:

kinto.signer.autograph.key_ids = ...
kinto.signer.security-state-staging.autograph.key_ids = ...

New Features

• Add slowdown setting for git-export by @leplatrem in #1059
• cronjob: expire orphan attachments, set custom_time instead of releasing hold by @leplatrem in #1060

Dependency Updates

• Bump ruff from 0.14.2 to 0.14.3 in the development-dependencies group by @dependabot[bot] in #1055
• Bump cryptography from 46.0.2 to 46.0.3 in the production-dependency-patches group by @dependabot[bot] in #1054
• Fix #1048: Upgrade to kinto 23.2.0 by @leplatrem in #1057

Full Changelog: v39.2.1...v40.0.0