23 July 2026

Production release: 23 July 2026
Staging release: 20 July 2026

Version: 2.23.0

Delegated Authorization: Added delegated auth token support in the File Service processing engine for upload, download, and batch upload operations.
Delegated Token Support: File Service APIs now support delegated authorization tokens, enabling delegated access for API clients.
DPoP Token Validation: Added audience (aud) claim verification and htu validation for DPoP tokens to ensure tokens are minted for File Service and bound to the intended request URI.

Create Upload Response: The Create Upload API now returns a result field, consistent with the Get Upload response.
Duplicate customId Validation: Duplicate customId / customRootId conflicts now return a clear validation error instead of an internal database or versioning error on Create Space, Create Folder, Create Upload, Copy File, and Create Object.
Feature Flag Gating: Vectorization and search endpoints are now gated behind feature flags to support controlled rollout.

Region-Aware Endpoint Routing: The File Service client in the processing engine now routes API calls directly to the target region when a region mapping is configured, avoiding sequential endpoint probing.
Structured Logging: Improved engine log messages with consistent key=value fields to support faster debugging.

Object Operation Metrics: Extended the Dataops metrics processor to handle events related to object operations.

AWS-Only Packaging: Packaging and promote scripts support an AWS-only mode that skips Azure artifacts for GovCloud deployments.
Migration Artifact Exclusion: GovCloud pipelines exclude migration deployment artifacts (migrator ECS package and related migration components).

Fixed premature SQS message deletion in the malware scanning pipeline that bypassed the dead-letter queue; messages are now acknowledged only after a successful scan, with idempotent handling for duplicate deliveries.
Improved File Service processing engine performance by eliminating slow sequential regional endpoint probing during file retrieval.
Fixed batch upload path resolution so batch_specific fallback resolves by relative path instead of file name.
Fixed space restore so restored files, folders, and objects correctly recreate space-path entries, preventing duplicate resources and FILE_CONFLICT (FS_FILE_4010) errors.
Removed outdated malware-scanning documentation that was still discoverable via search.

Observability: Dual-ship ECS application logs to New Relic via the Fluent Bit FireLens sidecar alongside existing Sumo Logic output, without changing Sumo or Datadog sidecar behavior.
DynamoDB Monitoring: Enabled CloudWatch Contributor Insights (throttled keys mode) for the production DynamoDB resources table in US, EU, AP, and AU.