chore(release): bump versions and update changelogs

packages/storage/CHANGELOG.md

@@ -1,5 +1,18 @@
 # @tigrisdata/storage
 
+## 3.5.2
+
+### Patch Changes
+
+- [#101](https://github.com/tigrisdata/storage/pull/101) [`6306356`](https://github.com/tigrisdata/storage/commit/6306356b6203c5d02cf90bb2ce566bcfdf9fa110) Thanks [@designcode](https://github.com/designcode)! - Fix `403 SignatureDoesNotMatch` from `copy`, `move`, and `updateObject` when the object key contains `/` or any other character that requires percent-encoding (space, `?`, `=`, etc.) and the request is signed with access-key SigV4.
+
+  Two related fixes:
+
+  - Custom HTTP client now constructs `SignatureV4` with `uriEscapePath: false`, matching S3's single-encoding canonical-path scheme. The default `true` (AWS-standard double-encoding) caused the signer to re-escape any percent sequence in the path during canonicalization, while Tigris gateway uses S3 single-encoding — producing the mismatch for every key with a special char.
+  - Object keys in the request path and `X-Amz-Copy-Source` header are URL-encoded per-segment via the new `encodeObjectKey` helper, preserving `/` as a separator so the wire URL stays valid.
+
+  OAuth/session-token callers were unaffected because that auth path skips SigV4 signing entirely.
+
 ## 3.5.1
 
 ### Patch Changes

packages/storage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tigrisdata/storage",
-  "version": "3.5.1",
+  "version": "3.5.2",
   "description": "Tigris is a high-performance object storage system designed for multi-cloud",
   "type": "module",
   "main": "./dist/server.js",