0.7.0 — 2026-10-24

This page lists what TessariDB S3 0.7.0, released on 2026-10-24, changed against 0.6.0. Each released version keeps its own copy of these pages, so choosing an older version in the version picker shows what that version changed. The complete history is the CHANGELOG.

Its metadata runs on TessariDB 0.38.2. A metadata store kept by 0.36.2 opens under 0.38.2 unchanged, so moving the database is a change of image tag; do not finalize the store's format while you may still go back to 0.36.2.

Added

• The console signs in with a private key. TESSARIDB_S3_CONSOLE_OIDC_CLIENT_KEY names an Ed25519 key in PKCS#8 PEM; the console sends a signed client assertion (private_key_jwt, EdDSA) instead of a client secret, and logs the public key at start so the client can be registered. Exactly one of the secret and the key is accepted. See Configuration.
• TessariDB OAuth as the console's identity provider. The steps are in The console; the console client's ID token also buys temporary credentials through AssumeRoleWithWebIdentity.

Changed

• tokio 1.54.1 (RUSTSEC-2026-0386).

Upgrading

Replace the image tag with tessaridb/s3:0.7.0. Nothing in the metadata store changes. A console that signs in with a client secret keeps working as it is.