# changelog

author: Matt Westphall <westphall@wisc.edu> - 3.6.0-1
changelog:
  - Make redirector line in cache config customizable (SOFTWARE-5641)
  - check for *.local files in /etc/xrootd in authfile-updater (SOFTWARE-5597)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 4.1.0-1
changelog:
  - Enable ARM builds (except for xcache-consistency-check) (SOFTWARE-6057)
  - Dummy out xcache-consistency-check on OSG 25 and newer (SOFTWARE-6054)
  - Fix makefile for EL10 (Python 3.12) support


author: Tim Theisen <tim@cs.wisc.edu> - 24.10.2-1
changelog:
  - Remove support for old JobRouter syntax
  - New condor_dag_checker tool finds syntax and logic errors before run
  - New condor_q -hold-codes produces a summary of held jobs
  - condor_status -lvm reports current disk usage by slots on the EPs
  - Fix bug where condor_q would truncate job counts to six digits
  - Fix bug where suspended jobs did not change state to idle when vacated


author: Tim Theisen <tim@cs.wisc.edu> - 23.10.28-1
changelog:
  - Exit -code and -signal environment variables are now set for Docker jobs
  - Fix issue where ImageSize was over-reported on the Windows platform
  - HTCondor tarballs now contain Pelican 7.18.1 and Apptainer 1.4.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.11.2-1
changelog:
  - Add job attributes to track why and how often a job is vacated
  - Add the ability to notify a user when their job first starts
  - Can now specify which Vault servers are trusted
  - Added htcondor2.ping() to the Python bindings


author: Tim Theisen <tim@cs.wisc.edu> - 23.10.29-1
changelog:
  - Fix flocking to pools when there are intermittent network issues
  - HTCondor tarballs now contain Pelican 7.19.3


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.12-1
changelog:
  - Update condor_upgrade_check to warn about v1 Python bindings retirement
  - Update condor_upgrade_check to look for old syntax job transforms
  - All changes in 23.10.29


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.4-1
changelog:
  - Add the ability to enforce memory and CPU limits on local universe jobs
  - Add the ability for condor_chirp to work within a Docker universe job
  - condor_watch_q now exits with any keyboard input
  - The shell submit keyword now works with interactive jobs
  - All changes in 24.0.12


author: Tim Theisen <tim@cs.wisc.edu> - 25.0.1-1
changelog:
  - New and improved Python bindings: classad2 and htcondor2
  - The original Python bindings have been removed


author: Tim Theisen <tim@cs.wisc.edu> - 25.0.7-1
changelog:
  - Fix the broken htcondor2.Schedd.refreshGPIProxy() Python method
  - Improve condor_history performance on filesystems with I/O rate limits


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.18-1
changelog:
  - Enable use of in-memory SciTokens cache, if disk cache not usable
  - Fix condor_submit using different executables with late materialization
  - HTCondor tarballs now contain Pelican 7.23.0


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.18-1
changelog:
  - Improve AMD GPU detection when using RCOM6/HIP libraries
  - Fix for new jobs getting kicked off LVM EP due to quantization mismatch
  - condor_submit now reports an error for circular requirement expressions
  - condor_status now correctly reports offline GPUs
  - Can use a string for 'since' with htcondor.Schedd.history()
  - Fix for backfill GPUs disappearing on reconfig


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.19-1
changelog:
  - Now properly reports NVIDIA MIG GPU device names
  - Fix performance problem in the htcondor2 Python ClassAd parser
  - Fix AllowedExecuteDuration to be reliably enforced when no file transfer
  - Batch grid universe jobs now tolerate a dot in the username
  - Fix huge reported job execution times when an AP restarts


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.20-1
changelog:
  - Fix reporting of RemoteUserCPU in parallel universe
  - condor_ssh_to_job can now execute one-shot commands when using containers
  - condor_ssh_to_job now enters the proper cgroup when using containers
  - HTCondor tarballs now contain Pelican 7.24.2


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.13-1
changelog:
  - Fix bug that could cause Python job submission to crash
  - HTCondor tarballs now contain Pelican 7.20.2


author: Tim Theisen <tim@cs.wisc.edu> - 25.0.2-1
changelog:
  - Update Python file transfer plugins to use the new Python bindings
  - Fix incorrect environment when using Singularity and nested scratch


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.14-1
changelog:
  - Fix problem running PyTorch jobs on multiple GPUs with
    newer versions of the CUDA library by providing long GPU IDs
    in the CUDA_VISIBLE_DEVICES environment variable


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.14-1
changelog:
  - Fix interoperability problem between HTCondor-CE 24 and 25 which
    manifests as a Job Router crash when upgrading the CE to HTCondor 25
  - Fix several issues when submitting jobs with itemdata in
    the htcondor2 Python bindings
  - Fix bug when using max_idle and transfer_input_files that could result
    in the container_image to be only transferred with the first job


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.15-1
changelog:
  - Fix bug where AP would fail to read job credential files
  - Fix bugs that could causes a crash in the authentication code
  - HTCondor tarballs now contain Pelican 7.21.1 and Apptainer 1.4.4


author: Tim Theisen <tim@cs.wisc.edu> - 24.0.16-1
changelog:
  - Fix floating point memory or disk request not fitting into some slots
  - Fix condor_rooster crash when unhibernate rank was not constant
  - Fix memory leak in the htcondor2.JobEventLog.events() Python method
  - condor_history -long now prints attributes in alphabetical order
  - Fix LVM setup to not timeout when creating a large volume
  - LVM creation no longer saves meta data which eventually fills the disk
  - HTCondor tarballs now contain Pelican 7.22.0 and Apptainer 1.4.5


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.16-1
changelog:
  - Fix problem specifying scope or audience with a Vault-managed credential
  - Fix late materialization bug when job transform sets immutable attribute
  - Fix problem where a backfill slot would refuse claims


author: Tim Theisen <tim@cs.wisc.edu> - 25.0.6-1
changelog:
  - Initial support for openSUSE 16
  - Make HTCondor Python wheel usable with the python-slim Docker image


author: Tim Theisen <tim@cs.wisc.edu> - 24.12.18-1
changelog:
  - Improve AMD GPU detection when using RCOM6/HIP libraries
  - Fix for new jobs getting kicked off LVM EP due to quantization mismatch
  - condor_submit now reports an error for circular requirement expressions
  - condor_status now correctly reports offline GPUs
  - Can use use a string for 'since' with htcondor.Schedd.history()
  - Fix for backfill GPUs disappearing on reconfig


author: Dave Dykstra <dwd@cern.ch>> - 2.12.7-2
changelog:
  - Apply pretrans transaction check to all subpackages that need to
    have their version stay in sync


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.9-3.2
changelog:
  - Fix building of RPM to properly choose Python36 or Python39.
       Also, restrict building to x86_64 architecture.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 5.10-1.1
changelog:
  - Update to squid-5.10, with release notes at
      https://github.com/squid-cache/squid/commits/v5.
      The security patches included in frontier-squid-5.9-2 have been incorporated
      into the baseline Squid code in this release.
      It also contains fixes for minor bugs and these security issues:
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-25617
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-23638
      https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-37894
      https://megamansec.github.io/Squid-Security-Audit/esi-underflow.html
      https://megamansec.github.io/Squid-Security-Audit/ftp-fatal.html
      https://megamansec.github.io/Squid-Security-Audit/ipv6-assert.html
      https://megamansec.github.io/Squid-Security-Audit/stream-assert.html
   - For SELinux, provide proper labeling for /usr/libexec/squid/frontier-squid
      script to prevent log rotation failures.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.13-1.3
changelog:
  - Upgrade to 6.13-1 tarball with announcement at
     https://lists.squid-cache.org/pipermail/squid-announce/2025-February/000167.html
     and release notes at https://github.com/squid-cache/squid/releases/tag/SQUID_6_13
     squid-6 has a number of new features and changes, such as
      - TLS ServerHello
      - Log TLS Communication Secrets
      - Ban ACL key Changes in ACLs
      - Block to-local Traffic
      - RFC 9211: HTTP Cache-Status support
      - RFC 9111: Stop treating Warning specially
      - ext_kerberos_ldap_group_acl: Support -b with -D
      - Remove Gopher Protocol Support
      - Remove Outdated Tools
   - Set "memory_cache_shared on" as work-around for Squid bug 5332:
      https://bugs.squid-cache.org/show_bug.cgi?id=5332
   - Require Rock cache when workers > 1.  NOTE: This is a breaking change for
      installations with multiple workers, but necessary because of the work-around
      for bug 5332.
   - Set "request_header_access If-Modified-Since deny all" when Rock cache is used to
      avoid Squid bug 4890: https://bugs.squid-cache.org/show_bug.cgi?id=4890
   - Add patch to fix reporting of number of cache objects.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.14-1.1
changelog:
  - Upgrade to 6.14-1 tarball with the following release notes:
     https://github.com/squid-cache/squid/releases/tag/SQUID_6_14
   - Add an "ignore_vary" option to prevent Vary headers (like those from
      Cloudflare) from interfering with caching in Rock cache, and enable
      that option by default.
   - Add a default value of "shared_transient_entries_limit 1048576" to
      reduce the chances of clashing hashes of queries while using
      multiple workers.  A clashing hash causes a query to not be cached.
      This increased value could use up to 128MB of shared memory.
   - Restored text of error messages that appear in rare cases and that were
      missing from the previous release.
   - Improved checks for cache memory configuration to allow multiple services to
      have their own cache memory values and to prevent reduction in configured
      cache memory during re-starts. Also, increased safety buffer of shared memory from
      10% to 20%.
   - Addressed security vulnerability SQUID-2025:2 Information Disclosure in Error handling:
      https://github.com/squid-cache/squid/security/advisories/GHSA-c8cc-phh7-xmxr
   - Removed obsolete in2p3, gridpp, and triumf from "acl ATLAS_FRONTIER".
   - Add a patch from v7 to avoid a "slot->sameKey()" assertion error in
      rock/RockSwapDir.cc that has been seen with multiple workers and
      causes one worker to restart and prevent a query from being cached
      until a full restart.
   - Remove cachenumfix.patch because it is now part of Squid 6.14.
  - Add support for EL10.
  - Disable admin emails from shoal-agent.
  - Changed pip3 install of obsolete Python module "netifaces" to new "netifaces-plus" to
     enable shoal-agent to run on EL10.
  - Fixed setting permissions of shoal-download directories to prevent "Permission denied"
     errors.


author: Carl Vuosalo <carl.vuosalo@cern.ch> 6.14-1.2
changelog:
  - During build of source RPM, download additional Python modules "cffi" and
     "typing_extensions" to support building EL9 and EL10 from source RPM on OSG
     build machines where downloading is disabled.
  - Correct location of "shoal_email.patch".


author: Marco Mambelli <marcom@fnal.gov> - 3.10.6
changelog:
  - Glideinwms v3.10.6
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_6/history.html
  - Release candidates 3.10.6-01.rc1 to 3.10.6-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.7-3
changelog:
  - Glideinwms v3.10.7
  - 3.10.7-1 was on Fri Jun 21 2024
  - Removed bash mangling in 3.10.7-3
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_7/history.html
  - Release candidates 3.10.7-01.rc1 to 3.10.7-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.8
changelog:
  - Glideinwms v3.10.8
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_8/history.html
  - Release candidates 3.10.8-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.9
changelog:
  - Glideinwms v3.10.9
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_9/history.html
  - Release candidates 3.10.9-01.rc1 to 3.10.9-03.rc3


author: Marco Mambelli <marcom@fnal.gov> - 3.10.10
changelog:
  - Glideinwms v3.10.10
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_10/history.html
  - Release candidates 3.10.10-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.11
changelog:
  - Glideinwms v3.10.11
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_11/history.html
  - Release candidates 3.10.11-01.rc1 to 3.10.11-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.12
changelog:
  - Glideinwms v3.10.12
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_12/history.html
  - Release candidates 3.10.12-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.13
changelog:
  - Glideinwms v3.10.13
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_13/history.html
  - Release candidates 3.10.13-01.rc1


author: Marco Mambelli <marcom@fnal.gov> - 3.10.14
changelog:
  - Glideinwms v3.10.14
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_14/history.html
  - Release candidates 3.10.14-01.rc1 to 3.10.14-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.15
changelog:
  - Glideinwms v3.10.15
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_15/history.html
  - Release candidates 3.10.15-01.rc1 to 3.10.15-02.rc2


author: Marco Mambelli <marcom@fnal.gov> - 3.10.16
changelog:
  - Glideinwms v3.10.16
  - Release Notes: http://glideinwms.fnal.gov/doc.v3_10_16/history.html
  - Release candidates 3.10.16-01.rc1 to 3.10.16-02.rc2


author: Brian Lin <blin@cs.wisc.edu.> - 2.8.4-1
changelog:
  - HTCondor AP and CE probes now drop privileges to the 'condor' user
    if run as 'root' (SOFTWARE-5531)
  - Improve logging and failure modes when encountering unwriteable
    directories (SOFTWARE-5531)


author: Matt Westphall <westphall@wisc.edu.> - 2.8.5-1
changelog:
  - Log gratia probe failures to aid debugging (SOFTWARE-6037)
  - Fix NameError in post-install script (SOFTWARE-5558)


author: Matt Westphall <westphall@wisc.edu.> - 2.9.1-1
changelog:
  - Advertise the following ClassAd attributes in condor-ap (SOFTWARE-6257):
  - OSG_INSTITUTION_ID, MachineAttrOSG_INSTITUTION_ID0,  
  - GLIDEIN_Site, MachineAttrName0, MachineAttrGLIDEIN_ResourceName0, MachineAttrGLIDEIN_Site0


author: Tim Theisen <tim@cs.wisc.edu> - 23.0.18-1
changelog:
  - Does not pass WholeNode request expressions to non-HTCondor batch systems
  - Fix certificate subject parsing in condor_ce_host_network_check


author: Dave Dykstra <dwd@fnal.gov> 1.20-1
changelog:
  - Update httokensh to by default set the minimum vault token time to live to
    6 days, and to make sure that the background refresh never gets a new vault
    token.
  - Changed the preferred name of httokendecode to htdecodetoken, keeping
    links in the opposite direction.
  - Add man pages for httokensh, htdestroytoken, and htdecodetoken.


author: Dave Dykstra <dwd@fnal.gov> 2.0-1
changelog:
  - Replace use of m2crypto and pyOpenSSL with urllib3
  - Replace use of pykerberos with gssapi
  - Use standard Requires for Python modules instead of PyInstaller
  - Add --vaultcertname option to specify an alternative certificate name.
    That used to be an additional optional meaning of the --vaultalias option,
    but urllib3 requires only one name to match.
  - Add setuptools build infrastructure
  - Refactor htgettoken script into module with entry point.
    This enables invoking htgettoken as `htgettoken.main()` from Python.
  - Use wheels to build/install Python package, which simplified the entry
    points and improves (slightly) the metadata
  - Fix the httokensh background process's check for its parent process.
    That is only a backup in case only the parent process is hard-killed,
    because normally the parent process kills the background process when
    the parent exits.
  - Use newer `sts` secrets API for token exchanges.
  - Fix the `-o`/`--outfile` option to work with relative paths. 
  - Change the `--nobearertoken` option to always get and save a vault token.


author: Dave Dykstra <dwd@fnal.gov> 2.0-2
changelog:
  - Fix broken httokendecode symlink.
  - Use python wheels to build/install on el9.  It didn't work on el8 so
    the use of wheels was removed at the last minute before the 2.0-1
    release (without removing it from the changelog like it should have).


author: Dave Dykstra <dwd@fnal.gov> 2.1-1
changelog:
  - Fix htdecodetoken to work with token files that do not end in a newline.
  - Support args in htgettoken.main() Python entry point.


author: Dave Dykstra <dwd@fnal.gov> 2.2-1
changelog:
  - Add BuildRequires python3-devel to generate correct Python metadata.
  - Remove explicit Requires for python dependencies, rely on Python metadata.
  - Always build with wheels.
  - Remove Python root logger configuration.


author: Dave Dykstra <dwd@fnal.gov> 2.4-1
changelog:
  - Add the new -s and -f options to the htdecodetoken usage summary.
  - Add a -v option to htdecodetoken to show the token source.


author: Dave Dykstra <dwd@fnal.gov> 2.5-1
changelog:
  - Add htdestroytoken -f option to force a removal of a refresh token in
    vault.
  - Add htgettoken --novaulttoken option as an alias for --noiodc, --nossh,
    and --nokerberos.
  - Again fix --showbearerurl to work in combination with --nobearertoken.
    That was fixed in 1.17 but broke in 1.21 and 2.0.
  - Fix httokensh to pay attention to htgettoken options in $HTGETTOKENOPTS.
  - Fix httokensh to correctly locate the log file if a -o or --outfile
    is given, instead of writing to ".log" in the current directory.
  - Fix httokensh to not pass on a --vaulttokenminttl option to the background
    htgettoken command, to make the vault token last as long as possible since
    it doesn't get renewed.


author: Dave Dykstra <dwd@fnal.gov> 2.6-1
changelog:
  - Have htdecodetoken take advantage of new scitokens-verify ability
    to read from stdin, when available.
  - Add support in htdestroytoken -f for getting a CA cert directory
    from ${X509_CERT_DIR:-/etc/grid-security/certificates} or from 
    a --capath option, and to get a CA cert file from a --cafile option,
    mirroring the behavior of htgettoken.


author: Dave Dykstra <dwd@fnal.gov> 1.16-1
changelog:
  - Add 'ratelimits' keyword to put a limit on the number of requests per
    client per interval.
  - Allow '@' to be included in the ssh plugin's keys.
  - Fix bug that prevented reconfiguration when a policy name changed.
  - Update vault-plugin-auth-jwt to 0.18.0.
  - Update vault-plugin-auth-ssh to 0.3.1.
  - Require vault to be >= 1.15.


author: Dave Dykstra <dwd@fnal.gov> 1.17-1
changelog:
  - Add a patch of PR #90 to vault-plugin-secrets-oauthapp which adds caching
    of tokens exchanged via the /sts path and adds a minimum_seconds option to
    the API.
  - Give vault tokens the capabilities of deleting secrets and revoking
    themselves.
  - Update required vault to 1.17.
  - Update vault-plugin-auth-jwt to 0.21.0.
  - Update vault-plugin-auth-ssh to 0.3.2 which includes the patch for '@' 
    that was previously applied.


author: Dave Dykstra <dwd@fnal.gov> 1.18-1
changelog:
  - Restore patch #41 on vault-plugin-secrets-oauthapp which was accidentally
    dropped.
  - Update to latest commit on vault-plugin-auth-jwt because one of the
    other patches now depends on it in order to apply cleanly.


author: Dave Dykstra <dwd@fnal.gov> 1.19-1
changelog:
  - Replace vault with openbao-2.2.0 and remove vault-plugin-secrets-jwt
    (since the builtin version works with openbao).
  - Replace vault-plugin-secrets-oauthapp with openbao-plugin-secrets-oauthapp
    3.2.0 but still install it as vault-plugins-secrets-oauthapp for upgrade
    compatibility.
  - Update vault-plugin-auth-ssh to 0.3.4.


author: Dave Dykstra <dwd@fnal.gov> 2.0.0-1
changelog:
  - Remove the external auth/oidc plugin registration to switch to the
    builtin plugin.
  - Change to semantic versioning starting at 2.0.0.  Compared to 1.18,
    the removal of the external vault-plugin-secrets-jwt plugin causes
    some incompatibility and requires a careful upgrade path in HA
    installations (that is, upgrade all vault/openbao first).


author: Dave Dykstra <dwd@fnal.gov> 2.1.0-1
changelog:
  - Update to require openbao 2.3.2, which has been updated in preparation
    for moving it to EPEL by changing the service to run under the openbao
    user and group id instead of vault.


author: Dave Dykstra <dwd@fnal.gov> 1.19-1
changelog:
  - Replace vault with openbao-2.2.0 and remove vault-plugin-auth-jwt
    (since the builtin version works with openbao).
  - Replace vault-plugin-secrets-oauthapp with openbao-plugin-secrets-oauthapp
    3.2.0 but still install it as vault-plugins-secrets-oauthapp for upgrade
    compatibility.
  - Update vault-plugin-auth-ssh to 0.3.4.


author: Dave Dykstra <dwd@fnal.gov> 2.0.0-1
changelog:
  - Remove the external auth/oidc plugin registration to switch to the
    builtin plugin.
  - Change to semantic versioning starting at 2.0.0.  Compared to 1.18,
    the removal of the external vault-plugin-auth-jwt plugin causes
    some incompatibility and requires a careful upgrade path in HA
    installations (that is, upgrade all vault/openbao first).


author: Dave Dykstra <dwd@fnal.gov> 2.1.0-3
changelog:
  - Avoid showing a disturbing error message from find if the vault user id
    does not exist, by redirecting stderr from find to /dev/null.


author: Dave Dykstra <dwd@fnal.gov> 2.2.0-1
changelog:
  - Change the startup loop when joining a raft cluster to wait for a leader
    to be chosen, not just a non-zero exit code from list-peers.
  - Remove inclusion of golang source code.
  - Update minimum required openbao to 2.5.0.
  - Update minimum required openbao-vault-plugin-oauthapp to 3.3.0.


author: Justin Hiemstra <jhiemstra@wisc.edu> - 0.0.2-1
changelog:
  - v0.0.2 release of LotMan -- adds the ability to set sqlite timeouts
    and enables WAL mode for better concurrency.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 7.9.9-1
changelog:
  - Upgrade to Pelican 7.9.9
  - Require pelican version >= service version
  - Restart service if pelican or (for xrootd-requiring services) xrootd-server is upgraded
  - Require xrootd >= 5.7.0
  - Require xrootd-multiuser


author: Mátyás Selmeci <mselmeci@wisc.edu> - 7.16.1-1
changelog:
  - Upgrade to Pelican 7.16.1 (SOFTWARE-6152)
  - Require "pelican-server" for the cache and origin (SOFTWARE-6152)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 7.16.6-1
changelog:
  - Upgrade to Pelican 7.16.6 (SOFTWARE-6152)
  - Require xrootd-s3-http where available
  - Drop explicit dependency on xrootd since it is already implied by pelican-server
  - Instruct user to specify Cache.StorageLocation in cache config


author: Mátyás Selmeci <mselmeci@wisc.edu> - 25-1
changelog:
  - Replace with metapackage containing configuration for using the pelican-*.service files.
    Includes migration instructions.

  - Replace osdf-*.service files with symlinks to the corresponding pelican-*.service files;
    replace /etc/pelican/osdf-*.yaml files with symlinks to the corresponding pelican-*.yaml files


author: Mátyás Selmeci <matyas@cs.wisc.edu> 4.2.0-1
changelog:
  - Turn osg-configure-rsv into a dummy package (SOFTWARE-4511)
  - Add "queue" to OSG_ResourceCatalog for Pilot sections (SOFTWARE-5881)


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 1.7.0-1
changelog:
  - Convert osg-system-profiler-viewer to Python 3
  - Add XRootD cconfig dumps (SOFTWARE-4933)
  - Print crypto policy if available (SOFTWARE-5330)
  - Fix email address in help message


author: Dave Dykstra - 1.0.0-1
changelog:
  - Add "--client-credentials" option to osg-token-renewer-setup which configures
    a mode that directly connects with grant_type=client_credentials to an Oauth
    token endpoint to fetch access tokens.
  - Move all the files into a osg-token-renewer-client subpackage that does
    not require the oidc-agent package.  When oidc-agent is not installed, only
    the client credentials mode works.
  - Change the group of the /etc/osg/tokens directory to osg-token-svc and make
    the directory fully accessible to the osg-token-svc group. This enabled
    removing the extra capabilities given to the systemd service, making it a
    little more secure.


author: Mátyás Selmeci <matyas@cs.wisc.edu> - 23-5
changelog:
  - Log DNs of incoming certificates (SOFTWARE-5370); raise required XRootD version to 1:5.6.0 for the feature


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.3-1.1
changelog:
  - Update to XRootD 5.8.3 (SOFTWARE-6164)
      - Patches added:
          - 0009-Avoid-reference-beyond-end-of-table~80b938c.patch
          - 0010-XrdPfc-Ensure-a-reference-to-the-file-is-kept-when-s~aa225e2.patch
      - Patches kept:
          - 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~7c119b0.patch
          - 0002-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0003-XrdSciTokens-Handle-multiple-authorization-token-set~b82ddc3.patch
          - 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~956b9fa.patch -> 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch
          - 0006-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0007-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
          - 0008-XRootD-s-xml-response-for-PROPFIND-will-now-include~aacf631.patch
      - Patches dropped:
          - 0005-XrdHttp-Fix-HTTP-protocol-errors-on-failure~4fb2221.patch
          - 0009-Fix-life-time-of-a-variable-used-for-signaling-that~286b8ca.patch
          - 0010-Correct-concurrency-and-state-tracking-around-Redriv~86d48f1.patch
          - 0011-Fix-race-conditions-around-use-of-ecMsg~803dc26.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.4-1.1
changelog:
  - Update to XRootD 5.8.4 (SOFTWARE-6187)
      - Patches added:
      - Patches kept:
          - 0001-Allow-hostname-used-by-XRootD-to-be-overridden-by-en~7c119b0.patch -> 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by~7c119b0.patch
          - 0002-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch -> 0002-4-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0003-XrdSciTokens-Handle-multiple-authorization-token-set~b82ddc3.patch -> 0003-6-XrdSciTokens-Handle-multiple-authorization-token-s~b82ddc3.patch
          - 0004-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch -> 0004-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch
          - 0006-Re-engineer-concurrency-limits-for-throttles~39fea57.patch -> 0005-23-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0007-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch -> 0006-23-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
          - 0008-XRootD-s-xml-response-for-PROPFIND-will-now-include~aacf631.patch -> 0007-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch
          - 0011-Enable-write-through-mode-for-cache~330eac1.patch -> 0008-32-Enable-write-through-mode-for-cache~330eac1.patch
      - Patches dropped:
          - 0009-Avoid-reference-beyond-end-of-table~80b938c.patch
          - 0010-XrdPfc-Ensure-a-reference-to-the-file-is-kept-when-s~aa225e2.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.8.4-1.3
changelog:
  - Add patches (SOFTWARE-6202):
      - 0009-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch
      - 0010-36-Do-a-clean-TLS-shutdown-for-HTTPS~cdc53fe.patch
      - 0011-35-Make-HTTP-s-maximum-open-delay-configurable~3496b32.patch


author: Matt Westphall <westphall@wisc.edu> - 5.9.0-1.1
changelog:
  - Update to XRootD 5.8.4 (SOFTWARE-6187)
      - Patches added:
      - Patches kept:
          - 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by~7c119b0.patch -> 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by-~8d1252d.patch
          - 0003-6-XrdSciTokens-Handle-multiple-authorization-token-s~b82ddc3.patch -> 0002-6-XrdSciTokens-Handle-multiple-authorization-token-s~a0751f6.patch
          - 0004-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch -> 0003-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch
          - 0007-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch -> 0004-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch
          - 0008-32-Enable-write-through-mode-for-cache~330eac1.patch -> 0005-32-Enable-write-through-mode-for-cache~330eac1.patch
          - 0009-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch -> 0006-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch
          - 0012-37-Add-TPC-worker-pool~70720be.patch -> 0007-37-Add-TPC-worker-pool~0bcba8c.patch
      - Patches dropped:
          - 0002-4-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0005-23-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0006-23-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
          - 0010-36-Do-a-clean-TLS-shutdown-for-HTTPS~cdc53fe.patch
          - 0011-35-Make-HTTP-s-maximum-open-delay-configurable~3496b32.patch


author: Matt Westphall <westphall@wisc.edu> - 5.9.0-1.1
changelog:
  - Update to XRootD 5.9.0 (SOFTWARE-6187)
      - Patches added:
      - Patches kept:
          - 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by~7c119b0.patch -> 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by-~8d1252d.patch
          - 0003-6-XrdSciTokens-Handle-multiple-authorization-token-s~b82ddc3.patch -> 0002-6-XrdSciTokens-Handle-multiple-authorization-token-s~a0751f6.patch
          - 0004-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch -> 0003-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch
          - 0007-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch -> 0004-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch
          - 0008-32-Enable-write-through-mode-for-cache~330eac1.patch -> 0005-32-Enable-write-through-mode-for-cache~330eac1.patch
          - 0009-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch -> 0006-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch
          - 0012-37-Add-TPC-worker-pool~70720be.patch -> 0007-37-Add-TPC-worker-pool~0bcba8c.patch
      - Patches dropped:
          - 0002-4-XrdTls-Allow-disabling-of-X.509-client-auth~18e1c81.patch
          - 0005-23-Re-engineer-concurrency-limits-for-throttles~39fea57.patch
          - 0006-23-Modify-XrdThrottle-to-be-an-OSS-plugin~921fef5.patch
          - 0010-36-Do-a-clean-TLS-shutdown-for-HTTPS~cdc53fe.patch
          - 0011-35-Make-HTTP-s-maximum-open-delay-configurable~3496b32.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.9.1-1.1
changelog:
  - Update to XRootD 5.9.1 (SOFTWARE-6260)
      - Patches added:
      - Patches kept:
          - 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by-~8d1252d.patch -> 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by~e13587e.patch
          - 0002-6-XrdSciTokens-Handle-multiple-authorization-token-s~a0751f6.patch -> 0002-6-XrdSciTokens-Handle-multiple-authorization-token-s~d8842b6.patch
          - 0003-14-XrdHttp-Undo-HTTP-PUT-response-code-change~43ed40b.patch -> 0003-14-XrdHttp-Undo-HTTP-PUT-response-code-change~73ddc83.patch
          - 0004-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch
          - 0005-32-Enable-write-through-mode-for-cache~330eac1.patch
          - 0006-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch
          - 0007-37-Add-TPC-worker-pool~0bcba8c.patch -> 0007-37-Add-TPC-worker-pool~31dd3de.patch
      - Patches dropped:


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.9.1-1.3
changelog:
  - Add 0009-42-Full-pkcs11-integration~d92e458.patch (SOFTWARE-6280)
  - Add 0010-45-Revert-XrdHttp-Undo-HTTP-PUT-response-code-change~6d22469.patch (SOFTWARE-6280)


author: Mátyás Selmeci <mselmeci@wisc.edu> - 5.9.2-1.1
changelog:
  - Update to XRootD 5.9.2 (SOFTWARE-6324)
      - Patches added:
          - 0008-48-Fix-XRootD-local-build-error-caused-by-libXrdAccS~e742ff8.patch
      - Patches kept:
          - 0001-1-Allow-hostname-used-by-XRootD-to-be-overridden-by~e13587e.patch
          - 0002-6-XrdSciTokens-Handle-multiple-authorization-token-s~d8842b6.patch
          - 0004-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch -> 0003-25-XRootD-s-xml-response-for-PROPFIND-will-now-inclu~aacf631.patch
          - 0005-32-Enable-write-through-mode-for-cache~330eac1.patch -> 0004-32-Enable-write-through-mode-for-cache~330eac1.patch
          - 0006-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch -> 0005-34-Add-S3-as-a-permitted-proxy-protocol~b36d9b7.patch
          - 0007-37-Add-TPC-worker-pool~31dd3de.patch -> 0006-37-Add-TPC-worker-pool~08d3d9a.patch
          - 0009-42-Full-pkcs11-integration~d92e458.patch -> 0007-42-Full-pkcs11-integration~d92e458.patch
      - Patches dropped:
          - 0003-14-XrdHttp-Undo-HTTP-PUT-response-code-change~73ddc83.patch
          - 0008-41-Fix-null-pointer-dereference-in-ThrottleManager~a327e0e.patch
          - 0010-45-Revert-XrdHttp-Undo-HTTP-PUT-response-code-change~6d22469.patch
          - 0011-46-Use-correct-format-specifier-for-user-connections~ec7d5f7.patch


author: Mátyás Selmeci <mselmeci@wisc.edu> - 138-1
changelog:
  - Add new CERN IAM endpoint for CMS (SOFTWARE-6072)
  - Remove lcg-voms2.cern.ch and voms2.cern.ch LSC files and vomses entries (SOFTWARE-6072)


author: Brian Bockelman <bbockelman@morgridge.org> 1.4.0-1
changelog:
  - Add experimental support for s3://-style URLs.
  - Delay initialization of thread pools until the first file is opened.
  - Cleanly shutdown helper threads when plugin is unloaded, reducing
    the chance of a segfault when a CLI or unit test is shutting down.
  - Fix a few minor memory leaks and race conditions uncovered by
    AddressSanitizer.


author: Brian Bockelman <bbockelman@morgridge.org> 1.5.2-1
changelog:
  - Add infrastructure for automating GitHub releases from a pushed tag
  - Automatically build as part of a release.


author: Brian Bockelman <bbockelman@morgridge.org> 1.5.5-1
changelog:
  - Fix a bug that could trigger a deadlock when a busy plugin is unable
    to continue an ongoing prefetch request.


author: Brian Bockelman <bbockelman@morgridge.org> 1.5.6-1
changelog:
  - Fix a bug that could cause the client to stop processing new requests
    if a significant number (approximately 16k) of operations have
    expired since process startup.


author: Brian Bockelman <bbockelman@morgridge.org> 1.6.0-1
changelog:
  - Add ability for the client to query only for caches when using
    `pelican://` URLs
  - Allow connection callback to occur without a DNS lookup
  - Fix potential use-after-free in the prefetch code that is enabled
    by default.  To trigger, the read operation must complete almost
    immediately (possible in unit tests, unlikely in "real world" situations
    where the client and server are not on the same host).
  - Fix ability to have multiple write calls ongoing in parallel
  - Basic implementation of a local writeback cache for `pelican://` URLs.
    This is considered experimental and not currently user-facing.


author: Brian Bockelman <bbockelman@morgridge.org> 1.6.2-1
changelog:
  - Add ability to override cache endpoints via environment variable.
  - Fix timeout calculation which caused stall error / "time expired"
    randomly.
  - Fix compatibility with Go WebDAV for directory listings.
  - Fix potential crash at end of prefetch.
  - Prevent expired operations from eventually deadlocking the client


author: Brian Bockelman <bbockelman@morgridge.org> - 0.0.9-1
changelog:
  - Fix permission issues for prestage when used with token auth
  - Add support for re-exec'ing the xrootd binary, allowing it to reload
    the configuration in-place
  - Add a signal handler that prints out stack traces on crash


author: Brian Bockelman <bbockelman@morgridge.org> - 0.0.10-1
changelog:
  - Fix bug preventing prestaging token from being passed to the filesystem
    layer
  - Workaround fact pre-read isn't implemented in XrdPss
  - Add regression tests corresponding to the above two issues


author: Brian Bockelman <bbockelman@morgridge.org> - 0.4.1-1
changelog:
  - Fix stall timeouts which would never fire.
  - Fix bug where S3 rate limiting would result in corrupt data being sent back to the client.
  - Remove redundant HEAD which was invoked twice on S3 file open.
  - Put libcurl into threadsafe mode, avoiding potential deadlocks or long unresponsive periods.


author: William Jiang <whjiang@wisc.edu> - 0.5.0-1
changelog:
  - Add support for Globus endpoints (reads, writes, listings)
  - Add support for HTTP writes
  - Add new "Persist on Successful Close" (POSC) plugin to prevent files being
    uploaded from being visible in the namespace.
  - The HTTP OSS plugin can do file listings based on generated directories.


author: Brian Bockelman <bbockelman@morgridge.org> - 0.5.1-1
changelog:
  - Minor build fixes for a wider set of platforms.
  - Ensure unit tests can succeed even when running without network connectivity
  - Bump user agent version (forgotten in 0.5.0).


author: Patrick Brophy <patrick.brophy2@gmail.com> - 0.6.0-1
changelog:
  - Fix some race conditions with the Globus plugin.
  - Package the new libXrdPelicanHttpCore shared object which addresses the above.
  - Add file size verification to POSC plugin to prevent incomplete uploads
  - New XRootD Name2Name plugin to perform path prefix substitution


author: Patrick Brophy <patrick.brophy2@gmail.com> - 0.6.3-1
changelog:
  - Fixed crash when copying XrdSecEntity in POSC plugin
  - Fixed parallel runs of POSC tests
  - Fixed definition of libXrdPelicanHttpCore


