4.46 4.47

high risk

ComposioHQ/awesome-claude-skillsSep 8, 2026 → Sep 14, 20266 days between releases

What's New

Shifts focus from performance optimization to S3 security and IAM policy management

Breaking Changes

  • s3: reject virtual-host bucket retargeting via X-Forwarded-Host
  • s3: bucket-policy Allow must not override an identity explicit Deny

New Features

  • Bucket quota S3 extension

Improvements

  • Improved mount performance with Chunk Manifest Resolution caching
  • Hardened S3 security against spoofing and incorrect SourceIp evaluation
  • Widen metadata-subscription readahead buffers for performance

Bug Fixes

  • Fixed OAuth token expiry handling for Iceberg integration
  • Fixed IAM policy deletion constraints and native Admin preservation
  • Release store lock before scrubbing EC volumes

Upgrade Notes

S3 API changes now reject virtual-host bucket retargeting via X-Forwarded-Host and enforce IAM policy precedence rules (Allow cannot override explicit Deny). Review IAM policies to ensure compliance with these new security constraints.

The Two Releases

4.46

4.46

Sep 8, 2026· 1 month ago

This release optimizes S3 listing performance, improves mount reliability, and removes deprecated RDMA sidecar components. It also introduces new telemetry metrics and volume management improvements.

Full release notes
4.47

4.47

Sep 14, 2026· 1 month ago

A comprehensive update focusing on S3 API security, IAM policy management, and performance enhancements for volume and mount operations. Includes fixes for volume copy validation, mount handling, and OAuth token expiry.

Full release notes