From 280e64a4d48b9e3f451782be787f2addffe6e89c Mon Sep 17 00:00:00 2001 From: A Ibrahim Date: Mon, 11 May 2026 16:28:14 +0200 Subject: [PATCH] fix: bump @tigrisdata/storage to 3.5.2 for SigV4 path-encoding fix Picks up @tigrisdata/storage@3.5.2 which fixes `403 SignatureDoesNotMatch` from `copy`, `move`, and `updateObject` when the object key contains `/` or any character that requires percent-encoding (space, `?`, `=`, etc.) and the request is signed with access-key SigV4. This unblocks the integration tests that have been failing on main since #99 landed: - `folder auto-detection > should auto-detect folder for cp/mv` - `file to folder operations > *` - `wildcard folder marker operations > *` - `cp/mv command - additional branches > should *match wildcard*` OAuth/session-token callers were unaffected because that auth path skips SigV4 signing entirely, which is why this only surfaced once the CI integration suite started exercising `copy`/`move` with access keys after the cp/mv SDK swap in #99. Verified locally with access-key auth against a real bucket: - nested-key cp (`folder/file.txt`) - special-char key cp (`folder/my file.txt`) - same-bucket rename via `mv` Co-Authored-By: Claude Opus 4.7 (1M context) --- package-lock.json | 8 ++++---- package.json | 2 +- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/package-lock.json b/package-lock.json index e8d21b9..fa41267 100644 --- a/package-lock.json +++ b/package-lock.json @@ -13,7 +13,7 @@ "@aws-sdk/credential-providers": "^3.1038.0", "@smithy/shared-ini-file-loader": "^4.4.9", "@tigrisdata/iam": "^2.1.1", - "@tigrisdata/storage": "^3.5.1", + "@tigrisdata/storage": "^3.5.2", "commander": "^14.0.3", "enquirer": "^2.4.1", "jose": "^6.2.3", @@ -4032,9 +4032,9 @@ } }, "node_modules/@tigrisdata/storage": { - "version": "3.5.1", - "resolved": "https://registry.npmjs.org/@tigrisdata/storage/-/storage-3.5.1.tgz", - "integrity": "sha512-52+cT33XWpTB7v0Hoin2smBesfQkSyyWXRwiAk4RDaTjXHgEPn9F4fnZZcS9D4LSeW4qgyYLBlTARxBpMy9m/g==", + "version": "3.5.2", + "resolved": "https://registry.npmjs.org/@tigrisdata/storage/-/storage-3.5.2.tgz", + "integrity": "sha512-VbjLO7W627Xy3iWPbbbvLMwIziZxLxfFRZyp2qGNjOE7qjy/+ADQzN0VjjiFZdVc7uL7RjHh78CGhJOjAI204A==", "license": "MIT", "dependencies": { "@aws-crypto/sha256-js": "^5.2.0", diff --git a/package.json b/package.json index f327ecd..b126495 100644 --- a/package.json +++ b/package.json @@ -103,7 +103,7 @@ "@aws-sdk/credential-providers": "^3.1038.0", "@smithy/shared-ini-file-loader": "^4.4.9", "@tigrisdata/iam": "^2.1.1", - "@tigrisdata/storage": "^3.5.1", + "@tigrisdata/storage": "^3.5.2", "commander": "^14.0.3", "enquirer": "^2.4.1", "jose": "^6.2.3",