opendal 0.1.12 → 0.1.13

data/core/services/d1/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/dashmap/Cargo.toml

@@ -34,7 +34,7 @@ all-features = true
 [dependencies]
 dashmap = "6"
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 
 [dev-dependencies]

data/core/services/dashmap/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/dbfs/Cargo.toml

@@ -36,7 +36,7 @@ base64 = { workspace = true }
 bytes = { workspace = true }
 http = { workspace = true }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 

data/core/services/dbfs/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/dropbox/Cargo.toml

@@ -32,10 +32,10 @@ version = { workspace = true }
 all-features = true
 
 [dependencies]
-asyncband = { workspace = true }
+asyncband = { workspace = true, features = ["mutex"] }
 bytes = { workspace = true }
 http = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 

data/core/services/dropbox/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/etcd/Cargo.toml

@@ -32,9 +32,9 @@ version = { workspace = true }
 all-features = true
 
 [dependencies]
+asyncband = { workspace = true, features = ["pool"] }
 etcd-client = { version = "0.19.0", features = ["tls"] }
-fastpool = "1.0.2"
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 tokio = { workspace = true, features = ["time"] }
 

data/core/services/etcd/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/etcd/src/core.rs

@@ -15,11 +15,11 @@
 // specific language governing permissions and limitations
 // under the License.
 
+use asyncband::pool::ManageObject;
+use asyncband::pool::ObjectStatus;
+use asyncband::pool::bounded;
 use etcd_client::Client;
 use etcd_client::ConnectOptions;
-use fastpool::ManageObject;
-use fastpool::ObjectStatus;
-use fastpool::bounded;
 use std::fmt::Debug;
 use std::sync::Arc;
 

data/core/services/foundationdb/Cargo.toml

@@ -36,7 +36,7 @@ foundationdb = { version = "0.11.0", features = [
   "embedded-fdb-include",
   "fdb-7_3",
 ] }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 
 [dev-dependencies]

data/core/services/foundationdb/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/foyer/Cargo.toml

@@ -34,12 +34,12 @@ all-features = true
 [dependencies]
 foyer = { version = "0.22.3" }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 serde = { workspace = true, features = ["derive"] }
 
 [dev-dependencies]
-opendal = { path = "../..", version = "0.59.1", features = ["services-memory"] }
-opendal-core = { path = "../../core", version = "0.59.1", features = [
+opendal = { path = "../..", version = "0.59.2", features = ["services-memory"] }
+opendal-core = { path = "../../core", version = "0.59.2", features = [
   "services-memory",
 ] }
 size = "0.5"

data/core/services/foyer/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/fs/Cargo.toml

@@ -34,7 +34,7 @@ all-features = true
 [dependencies]
 bytes = { workspace = true }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false, features = [
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false, features = [
   "internal-tokio-rt",
 ] }
 serde = { workspace = true, features = ["derive"] }

data/core/services/fs/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/fs/src/core.rs

@@ -41,24 +41,28 @@ impl FsCore {
     /// lexical, so a key such as `../../etc/passwd` would otherwise escape the
     /// configured `root` at syscall time. The fs backend documents that "all
     /// operations will happen under this root", so we reject any key whose
-    /// components include a `..` (parent-dir) traversal.
+    /// components include a `..` (parent-dir) traversal, a root directory, or a
+    /// path prefix: `PathBuf::join` discards the base when the key is absolute,
+    /// which covers `/etc/passwd` plus the Windows `C:\`, `\\?\` and UNC forms
+    /// that `normalize_path` leaves untouched.
     pub fn confined_join(base: &Path, path: &str) -> Result<PathBuf> {
         use std::path::Component;
         let trimmed = path.trim_end_matches('/');
-        if Path::new(trimmed)
-            .components()
-            .any(|c| matches!(c, Component::ParentDir))
-        {
-            return Err(Error::new(
-                ErrorKind::NotFound,
-                "path escapes the configured root via `..`",
+        if Path::new(trimmed).components().any(|c| {
+            matches!(
+                c,
+                Component::ParentDir | Component::RootDir | Component::Prefix(_)
             )
-            .with_context("path", path));
+        }) {
+            return Err(
+                Error::new(ErrorKind::NotFound, "path escapes the configured root")
+                    .with_context("path", path),
+            );
         }
         Ok(base.join(trimmed))
     }
 
-    /// Join a caller-supplied key onto `self.root`, rejecting `..` traversal.
+    /// Join a caller-supplied key onto `self.root`, keeping the result confined.
     #[inline]
     pub fn root_join(&self, path: &str) -> Result<PathBuf> {
         Self::confined_join(&self.root, path)
@@ -382,4 +386,59 @@ mod tests {
         let got = FsCore::get_user_metadata(&dst_path).unwrap();
         assert_eq!(got.get("key").map(String::as_str), Some("preserved123"));
     }
+
+    #[test]
+    fn test_confined_join_rejects_escaping_keys() {
+        let base = Path::new("/data/root");
+        for key in ["../etc/passwd", "a/../../b", "/etc/passwd", "//etc/passwd"] {
+            let err = FsCore::confined_join(base, key).unwrap_err();
+            assert_eq!(
+                err.kind(),
+                ErrorKind::NotFound,
+                "key should be rejected: {key}"
+            );
+        }
+    }
+
+    #[test]
+    fn test_confined_join_allows_normal_keys() {
+        let base = Path::new("/data/root");
+        assert_eq!(
+            FsCore::confined_join(base, "a/b.txt").unwrap(),
+            PathBuf::from("/data/root/a/b.txt")
+        );
+        assert_eq!(
+            FsCore::confined_join(base, "a/b/").unwrap(),
+            PathBuf::from("/data/root/a/b")
+        );
+        // The root path `/` trims to empty and resolves to the base itself.
+        assert_eq!(
+            FsCore::confined_join(base, "/").unwrap(),
+            PathBuf::from("/data/root")
+        );
+    }
+
+    #[cfg(unix)]
+    #[tokio::test]
+    async fn test_delete_iter_rejects_absolute_path_outside_root() {
+        use opendal_core::Operator;
+
+        let root_dir = tempfile::TempDir::new().unwrap();
+        let outside_dir = tempfile::TempDir::new().unwrap();
+
+        let outside = outside_dir.path().join("outside.txt");
+        std::fs::write(&outside, b"content").unwrap();
+
+        let op =
+            Operator::new(crate::Fs::default().root(root_dir.path().to_str().unwrap())).unwrap();
+
+        // `Deleter` takes the caller's key verbatim, so an absolute key reaches
+        // `root_join` without `normalize_path` having stripped the leading `/`.
+        let err = op
+            .delete_iter([outside.to_str().unwrap().to_string()])
+            .await
+            .unwrap_err();
+        assert_eq!(err.kind(), ErrorKind::NotFound);
+        assert!(outside.exists());
+    }
 }

data/core/services/ftp/Cargo.toml

@@ -32,11 +32,11 @@ version = { workspace = true }
 all-features = true
 
 [dependencies]
+asyncband = { workspace = true, features = ["pool"] }
 bytes = { workspace = true }
-fastpool = "1.0.2"
 http = { workspace = true }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 rustls-native-certs = "0.8"
 serde = { workspace = true, features = ["derive"] }
 suppaftp = { version = "10.0.2", default-features = false, features = [

data/core/services/ftp/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/ftp/src/core.rs

@@ -18,7 +18,7 @@
 use std::sync::Arc;
 use std::time::Duration;
 
-use fastpool::{ManageObject, ObjectStatus, bounded};
+use asyncband::pool::{ManageObject, ObjectStatus, bounded};
 use suppaftp::FtpError;
 use suppaftp::Status;
 use suppaftp::tokio::AsyncRustlsConnector;

data/core/services/ftp/src/reader.rs

@@ -21,8 +21,8 @@ use super::core::Manager;
 use super::core::format_ftp_error;
 use super::lister::FtpLister;
 use super::writer::FtpWriter;
+use asyncband::pool::bounded;
 use bytes::BytesMut;
-use fastpool::bounded;
 use opendal_core::raw::*;
 use opendal_core::*;
 use std::sync::Arc;

data/core/services/ftp/src/writer.rs

@@ -15,8 +15,8 @@
 // specific language governing permissions and limitations
 // under the License.
 
+use asyncband::pool::bounded;
 use bytes::Buf;
-use fastpool::bounded;
 use tokio::io::AsyncWrite;
 use tokio::io::AsyncWriteExt;
 

data/core/services/gcs/Cargo.toml

@@ -36,7 +36,7 @@ async-trait = "0.1"
 bytes = { workspace = true }
 http = { workspace = true }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false, features = [
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false, features = [
   "reqsign",
 ] }
 percent-encoding = "2.3"
@@ -50,6 +50,7 @@ tokio = { workspace = true, features = ["rt"] }
 uuid = { workspace = true, features = ["v4"] }
 
 [dev-dependencies]
+asyncband = { workspace = true, features = ["latch", "mutex"] }
 futures = { workspace = true }
 serde_json = { workspace = true }
-tokio = { workspace = true, features = ["macros", "rt-multi-thread", "sync"] }
+tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }

data/core/services/gcs/LICENSE

@@ -199,3 +199,19 @@
    WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
    See the License for the specific language governing permissions and
    limitations under the License.
+
+
+------------------------------------------------------------------------------------
+This product bundles third-party components under other open source licenses.
+This section summarizes those components and their licenses. See the referenced
+license files for text of these licenses.
+
+
+Creative Commons Zero v1.0 Universal
+------------------------------------
+
+bindings/dotnet/.gitignore
+
+The above file is derived from VisualStudio.gitignore in
+https://github.com/github/gitignore. Its license text is in
+bindings/dotnet/LICENSE-CC0-1.0.txt.

data/core/services/gcs/src/composer.rs

@@ -365,11 +365,12 @@ fn new_tasks(
 
 #[cfg(test)]
 mod tests {
-    use std::sync::Mutex;
     use std::sync::atomic::AtomicUsize;
     use std::sync::atomic::Ordering;
     use std::time::Duration;
 
+    use asyncband::latch::Latch;
+    use asyncband::mutex::Mutex;
     use futures::stream;
     use http::Method;
     use http::Response;
@@ -378,28 +379,25 @@ mod tests {
     use reqsign_core::Signer;
     use reqsign_google::RequestSigner;
     use reqsign_google::TokenCredentialProvider;
-    use tokio::sync::Notify;
 
     use super::*;
     use opendal_core::raw::oio::Compose;
 
     struct ComposeTransport {
-        started: AtomicUsize,
+        started: Latch,
         active: AtomicUsize,
         max_active: AtomicUsize,
         generation: AtomicUsize,
-        notify: Notify,
         requests: Mutex<Vec<serde_json::Value>>,
     }
 
     impl ComposeTransport {
         fn new() -> Self {
             Self {
-                started: AtomicUsize::new(0),
+                started: Latch::new(2),
                 active: AtomicUsize::new(0),
                 max_active: AtomicUsize::new(0),
                 generation: AtomicUsize::new(1),
-                notify: Notify::new(),
                 requests: Mutex::new(Vec::new()),
             }
         }
@@ -432,21 +430,13 @@ mod tests {
 
             let value: serde_json::Value = serde_json::from_slice(&req.body().to_bytes())
                 .expect("compose request body must be valid JSON");
-            self.0.requests.lock().unwrap().push(value.clone());
+            self.0.requests.lock().await.push(value.clone());
 
             if req.uri().path().contains("__opendal%2Fcompose%2F") {
                 let active = self.0.active.fetch_add(1, Ordering::SeqCst) + 1;
                 self.0.max_active.fetch_max(active, Ordering::SeqCst);
-                self.0.started.fetch_add(1, Ordering::SeqCst);
-                self.0.notify.notify_waiters();
-
-                loop {
-                    let notified = self.0.notify.notified();
-                    if self.0.started.load(Ordering::SeqCst) >= 2 {
-                        break;
-                    }
-                    notified.await;
-                }
+                self.0.started.count_down();
+                self.0.started.wait().await;
                 self.0.active.fetch_sub(1, Ordering::SeqCst);
             }
 
@@ -485,7 +475,7 @@ mod tests {
 
             if req.method() == Method::GET {
                 self.0.metadata_reads.fetch_add(1, Ordering::SeqCst);
-                let token = self.0.token.lock().unwrap().clone().unwrap();
+                let token = self.0.token.lock().await.clone().unwrap();
                 let body = Buffer::from(
                     serde_json::to_vec(&serde_json::json!({
                         "size": "32",
@@ -504,7 +494,7 @@ mod tests {
                     .as_str()
                     .unwrap()
                     .to_string();
-                *self.0.token.lock().unwrap() = Some(token);
+                *self.0.token.lock().await = Some(token);
 
                 if self.0.intermediate_posts.fetch_add(1, Ordering::SeqCst) == 0 {
                     return Err(Error::new(
@@ -586,7 +576,7 @@ mod tests {
             .expect("composition must succeed");
 
         assert_eq!(transport.max_active.load(Ordering::SeqCst), 2);
-        let requests = transport.requests.lock().unwrap();
+        let requests = transport.requests.lock().await;
         assert_eq!(requests.len(), 3);
 
         let source_lists: Vec<&Vec<serde_json::Value>> = requests
@@ -672,7 +662,7 @@ mod tests {
         }
         composer.close().await.expect("composition must succeed");
 
-        let requests = transport.requests.lock().unwrap();
+        let requests = transport.requests.lock().await;
         assert_eq!(requests.len(), 34);
         let source_lists: Vec<&Vec<serde_json::Value>> = requests
             .iter()

data/core/services/gcs-grpc/Cargo.toml

@@ -36,7 +36,7 @@ bytes = { workspace = true }
 futures = { workspace = true, features = ["async-await", "std"] }
 http = { workspace = true }
 log = { workspace = true }
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false, features = [
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false, features = [
   "reqsign",
 ] }
 percent-encoding = "2"

data/core/services/gcs-grpc/proto/google/storage/v2/storage.proto

@@ -1,21 +1,20 @@
-/*
- * Licensed to the Apache Software Foundation (ASF) under one
- * or more contributor license agreements.  See the NOTICE file
- * distributed with this work for additional information
- * regarding copyright ownership.  The ASF licenses this file
- * to you under the Apache License, Version 2.0 (the
- * "License"); you may not use this file except in compliance
- * with the License.  You may obtain a copy of the License at
- *
- *   http://www.apache.org/licenses/LICENSE-2.0
- *
- * Unless required by applicable law or agreed to in writing,
- * software distributed under the License is distributed on an
- * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
- * KIND, either express or implied.  See the License for the
- * specific language governing permissions and limitations
- * under the License.
- */
+// Copyright 2026 Google LLC
+//
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+//     http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+// Modified by the Apache Software Foundation: retain the wire-compatible subset
+// used by OpenDAL, with unused definitions, annotations, and imports removed.
+// Source: https://github.com/googleapis/googleapis/blob/2e9c5681901a2eebf7f547f0b60c895b1732415e/google/storage/v2/storage.proto
 
 syntax = "proto3";
 

data/core/services/gdrive/Cargo.toml

@@ -32,9 +32,9 @@ version = { workspace = true }
 all-features = true
 
 [dependencies]
-opendal-core = { path = "../../core", version = "0.59.1", default-features = false }
+opendal-core = { path = "../../core", version = "0.59.2", default-features = false }
 
-asyncband = { workspace = true }
+asyncband = { workspace = true, features = ["mutex", "singleflight"] }
 bytes = { workspace = true }
 http = { workspace = true }
 log = { workspace = true }
@@ -42,4 +42,5 @@ serde = { workspace = true, features = ["derive"] }
 serde_json = { workspace = true }
 
 [dev-dependencies]
+asyncband = { workspace = true, features = ["semaphore"] }
 tokio = { workspace = true, features = ["macros", "rt-multi-thread"] }