@specific.dev/spectest 0.131.7 → 0.131.9

package/dist/components/s3-runtime/README.md

@@ -22,7 +22,16 @@ each part and its ordering, and the composite checksum survives HEAD/GET for
 reconciliation. Completion conditions use the backend's atomic conditional write.
 Overwriting an object does not inherit the previous object's checksum metadata.
 This patch supports SHA256/COMPOSITE; it does not implement every S3 checksum
-algorithm or streaming checksum trailers.
+algorithm or streaming checksum trailers. It also supports UploadPartCopy from
+one backend snapshot, including closed byte ranges, exact ETag conditions,
+version selection and SHA256 part receipts. Date-based copy conditions are
+explicitly unsupported (501), rather than silently ignored.
+
+Multipart completion stores its opaque ETag on the same in-memory object version
+as the bytes. HEAD/GET, listings, copy conditions and atomic write conditions use
+that tag; ordinary PUT and CopyObject retain their own payload-derived tags.
+Versioned HEAD reads the requested version. The optional backend write port keeps
+completion tags out of client metadata and avoids a separate post-write update.
 
 Run `./test.sh` from this directory to exercise real HTTP requests against the
 same patched sources used in the image, including corrupt retries, conditional

package/dist/components/s3-runtime/main_test.go

@@ -147,39 +147,54 @@ func TestMultipartSHA256IntegrityAndReconciliation(t *testing.T) {
 }
 
 func TestMultipartConditionalCompletionIsAtomic(t *testing.T) {
-	p := newProbe(t)
-	paths := []string{p.start("same", true), p.start("same", true)}
-	parts := []string{p.part(paths[0], 1, []byte("first"), true), p.part(paths[1], 1, []byte("second"), true)}
-	statuses := make(chan int, 2)
-	var wg sync.WaitGroup
-	for i := range paths {
-		wg.Add(1)
-		go func(i int) {
-			defer wg.Done()
-			req, _ := http.NewRequest("POST", p.server.URL+paths[i], bytes.NewReader(completion(parts[i])))
-			req.Header.Set("If-None-Match", "*")
-			res, err := p.server.Client().Do(req)
-			if err != nil {
-				statuses <- 0
-				return
+	for _, replace := range []bool{false, true} {
+		t.Run(fmt.Sprint(replace), func(t *testing.T) {
+			p := newProbe(t)
+			header, tag := "If-None-Match", "*"
+			if replace {
+				seed := p.start("same", true)
+				part := p.part(seed, 1, []byte("original"), true)
+				response := p.request("POST", seed, completion(part), nil, 200)
+				var receipt struct{ ETag string }
+				if err := xml.Unmarshal(response.body, &receipt); err != nil {
+					t.Fatal(err)
+				}
+				header, tag = "If-Match", receipt.ETag
 			}
-			defer res.Body.Close()
-			io.Copy(io.Discard, res.Body)
-			statuses <- res.StatusCode
-		}(i)
-	}
-	wg.Wait()
-	close(statuses)
-	counts := map[int]int{}
-	for s := range statuses {
-		counts[s]++
-	}
-	if counts[200] != 1 || counts[412] != 1 {
-		t.Fatalf("competing creates: %v", counts)
-	}
-	body := p.request("GET", "/uploads/same", nil, nil, 200).body
-	if string(body) != "first" && string(body) != "second" {
-		t.Fatalf("bad winner: %s", body)
+			paths := []string{p.start("same", true), p.start("same", true)}
+			parts := []string{p.part(paths[0], 1, []byte("first"), true), p.part(paths[1], 1, []byte("second"), true)}
+			statuses := make(chan int, 2)
+			var wg sync.WaitGroup
+			for i := range paths {
+				wg.Add(1)
+				go func(i int) {
+					defer wg.Done()
+					req, _ := http.NewRequest("POST", p.server.URL+paths[i], bytes.NewReader(completion(parts[i])))
+					req.Header.Set(header, tag)
+					res, err := p.server.Client().Do(req)
+					if err != nil {
+						statuses <- 0
+						return
+					}
+					defer res.Body.Close()
+					io.Copy(io.Discard, res.Body)
+					statuses <- res.StatusCode
+				}(i)
+			}
+			wg.Wait()
+			close(statuses)
+			counts := map[int]int{}
+			for s := range statuses {
+				counts[s]++
+			}
+			if counts[200] != 1 || counts[412] != 1 {
+				t.Fatalf("competing creates: %v", counts)
+			}
+			body := p.request("GET", "/uploads/same", nil, nil, 200).body
+			if string(body) != "first" && string(body) != "second" {
+				t.Fatalf("bad winner: %s", body)
+			}
+		})
 	}
 }
 
@@ -197,3 +212,161 @@ func TestMultipartAbortAndLegacyUpload(t *testing.T) {
 		t.Fatal("legacy multipart changed")
 	}
 }
+
+func TestUploadPartCopyRetainsExactSourceAndRejectsStaleRetry(t *testing.T) {
+	p := newProbe(t)
+	source := bytes.Repeat([]byte("0123456789"), 600000)
+	put := p.request("PUT", "/uploads/staging%20%2B%25.csv", source, nil, 200)
+	path := p.start("copied", false)
+	headers := map[string]string{"x-amz-copy-source": "/uploads/staging%20%2B%25.csv", "x-amz-copy-source-if-match": put.header.Get("ETag"), "x-amz-copy-source-range": "bytes=3-5242882"}
+	res := p.request("PUT", path+"&partNumber=1", nil, headers, 200)
+	var part struct {
+		XMLName      xml.Name
+		ETag         string
+		LastModified string
+	}
+	if err := xml.Unmarshal(res.body, &part); err != nil || part.XMLName.Local != "CopyPartResult" || part.ETag == "" || part.LastModified == "" {
+		t.Fatalf("copy part receipt: %s: %v", res.body, err)
+	}
+	first := fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag></Part>", part.ETag)
+	headers["x-amz-copy-source-if-match"] = `"stale"`
+	p.request("PUT", path+"&partNumber=1", nil, headers, 412)
+	headers["x-amz-copy-source-if-match"] = put.header.Get("ETag")
+	for _, invalid := range []string{"bytes=6000000-6000001", "bytes=3-6000000", "bytes=5-3", "bytes=-3", "bytes=3-", "bytes=0-1,3-4"} {
+		headers["x-amz-copy-source-range"] = invalid
+		p.request("PUT", path+"&partNumber=1", nil, headers, 416)
+	}
+	headers["x-amz-copy-source-range"] = "bytes=5242883-5999999"
+	res = p.request("PUT", path+"&partNumber=2", nil, headers, 200)
+	if err := xml.Unmarshal(res.body, &part); err != nil {
+		t.Fatal(err)
+	}
+	second := fmt.Sprintf("<Part><PartNumber>2</PartNumber><ETag>%s</ETag></Part>", part.ETag)
+	p.request("POST", path, completion(first, second), nil, 200)
+	got := p.request("GET", "/uploads/copied", nil, nil, 200)
+	if !bytes.Equal(got.body, source[3:]) {
+		t.Fatal("copy changed the retained byte range")
+	}
+	p.request("PUT", path+"&partNumber=2", nil, headers, 404)
+}
+
+func TestUploadPartCopyVersionChecksumAndAbort(t *testing.T) {
+	p := newProbe(t)
+	p.request("PUT", "/uploads?versioning", []byte(`<VersioningConfiguration><Status>Enabled</Status></VersioningConfiguration>`), nil, 200)
+	original := []byte("retained original version")
+	source := p.request("PUT", "/uploads/versioned", original, nil, 200)
+	version := source.header.Get("x-amz-version-id")
+	if version == "" {
+		t.Fatal("source has no version")
+	}
+	p.request("PUT", "/uploads/versioned", []byte("replacement"), nil, 200)
+	path := p.start("version-copy", true)
+	headers := map[string]string{"x-amz-copy-source": "/uploads/versioned?versionId=" + version, "x-amz-copy-source-if-match": source.header.Get("ETag")}
+	res := p.request("PUT", path+"&partNumber=1", nil, headers, 200)
+	var part struct {
+		ETag           string
+		ChecksumSHA256 string
+	}
+	if err := xml.Unmarshal(res.body, &part); err != nil {
+		t.Fatal(err)
+	}
+	if part.ChecksumSHA256 != sum(original) {
+		t.Fatal("copied version checksum differs")
+	}
+	headers["x-amz-copy-source-if-none-match"] = source.header.Get("ETag")
+	p.request("PUT", path+"&partNumber=1", nil, headers, 412)
+	delete(headers, "x-amz-copy-source-if-none-match")
+	headers["x-amz-copy-source-if-modified-since"] = "Sat, 31 Oct 2026 00:00:00 GMT"
+	p.request("PUT", path+"&partNumber=1", nil, headers, 501)
+	delete(headers, "x-amz-copy-source-if-modified-since")
+	descriptor := fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag><ChecksumSHA256>%s</ChecksumSHA256></Part>", part.ETag, part.ChecksumSHA256)
+	digest := sha256.Sum256(original)
+	composite := sum(digest[:]) + "-1"
+	p.request("POST", path, completion(descriptor), map[string]string{"x-amz-checksum-type": "COMPOSITE", "x-amz-checksum-sha256": composite}, 200)
+	got := p.request("GET", "/uploads/version-copy", nil, nil, 200)
+	if !bytes.Equal(got.body, original) || got.header.Get("x-amz-checksum-sha256") != composite {
+		t.Fatal("versioned copy bytes or composite receipt changed")
+	}
+	path = p.start("aborted-copy", false)
+	p.request("DELETE", path, nil, nil, 204)
+	p.request("PUT", path+"&partNumber=1", nil, headers, 404)
+	headers["x-amz-copy-source"] = "/uploads/missing"
+	path = p.start("missing-copy", false)
+	p.request("PUT", path+"&partNumber=1", nil, headers, 404)
+	p.request("DELETE", path, nil, nil, 204)
+}
+
+func TestMultipartSourceEntityTagSurvivesCopyVersionsAndOverwrite(t *testing.T) {
+	for _, count := range []int{1, 2} {
+		t.Run(fmt.Sprint(count), func(t *testing.T) {
+			p := newProbe(t)
+			p.request("PUT", "/uploads?versioning", []byte("<VersioningConfiguration><Status>Enabled</Status></VersioningConfiguration>"), nil, 200)
+			body := bytes.Repeat([]byte("a"), 6*1024*1024)
+			path := p.start("staged", false)
+			parts := []string{}
+			if count == 1 {
+				parts = append(parts, p.part(path, 1, body, false))
+			} else {
+				parts = append(parts, p.part(path, 1, body[:5*1024*1024], false), p.part(path, 2, body[5*1024*1024:], false))
+			}
+			complete := p.request("POST", path, completion(parts...), nil, 200)
+			var receipt struct{ ETag string }
+			if err := xml.Unmarshal(complete.body, &receipt); err != nil || !strings.Contains(receipt.ETag, fmt.Sprintf("-%d", count)) {
+				t.Fatalf("completion tag: %s: %v", complete.body, err)
+			}
+			version := complete.header.Get("x-amz-version-id")
+			if version == "" {
+				t.Fatal("missing completed version")
+			}
+			destination := p.start("copied-staging", false)
+			headers := map[string]string{"x-amz-copy-source": "/uploads/staged", "x-amz-copy-source-if-match": receipt.ETag, "x-amz-copy-source-range": fmt.Sprintf("bytes=0-%d", len(body)-1)}
+			copied := p.request("PUT", destination+"&partNumber=1", nil, headers, 200)
+			var part struct{ ETag string }
+			if err := xml.Unmarshal(copied.body, &part); err != nil {
+				t.Fatal(err)
+			}
+			for _, method := range []string{"HEAD", "GET"} {
+				got := p.request(method, "/uploads/staged", nil, nil, 200)
+				if got.header.Get("ETag") != receipt.ETag {
+					t.Fatalf("%s lost completion tag: %s", method, got.header.Get("ETag"))
+				}
+				p.request(method, "/uploads/staged", nil, map[string]string{"If-None-Match": receipt.ETag}, 304)
+			}
+			for _, query := range []string{"?list-type=2", "?versions"} {
+				got := p.request("GET", "/uploads"+query, nil, nil, 200)
+				var list struct {
+					Contents []struct{ ETag string }
+					Version  []struct{ ETag string }
+				}
+				if err := xml.Unmarshal(got.body, &list); err != nil {
+					t.Fatal(err)
+				}
+				tags := []string{}
+				for _, row := range list.Contents {
+					tags = append(tags, row.ETag)
+				}
+				for _, row := range list.Version {
+					tags = append(tags, row.ETag)
+				}
+				if len(tags) != 1 || tags[0] != receipt.ETag {
+					t.Fatalf("list lost tag: %v", tags)
+				}
+			}
+			put := p.request("PUT", "/uploads/staged", []byte("replacement"), map[string]string{"If-Match": receipt.ETag}, 200)
+			if put.header.Get("ETag") == receipt.ETag {
+				t.Fatal("normal overwrite inherited multipart tag")
+			}
+			p.request("PUT", destination+"&partNumber=1", nil, headers, 412)
+			headers["x-amz-copy-source"] += "?versionId=" + version
+			p.request("PUT", destination+"&partNumber=1", nil, headers, 200)
+			head := p.request("HEAD", "/uploads/staged?versionId="+version, nil, nil, 200)
+			if head.header.Get("ETag") != receipt.ETag {
+				t.Fatal("version lost its tag")
+			}
+			p.request("POST", destination, completion(fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag></Part>", part.ETag)), nil, 200)
+			if got := p.request("GET", "/uploads/copied-staging", nil, nil, 200); !bytes.Equal(got.body, body) {
+				t.Fatal("copied multipart staging bytes changed")
+			}
+		})
+	}
+}

package/dist/components/s3-runtime/multipart.patch

@@ -239,3 +239,310 @@
  			// new metadata overwrites old but keep the rest
  			// TODO: check how metadata can be deleted?!
  			if _, ok := meta[k]; !ok {
+--- a/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
++++ b/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
+@@ -960,6 +960,10 @@
+ 		return ErrInvalidPart
+ 	}
+ 
++	if r.Header.Get("x-amz-copy-source") != "" {
++		return g.copyMultipartUploadPart(bucket, object, uploadID, int(partNumber), w, r)
++	}
++
+ 	size, err := strconv.ParseInt(r.Header.Get("Content-Length"), 10, 64)
+ 	if err != nil || size <= 0 {
+ 		return ErrMissingContentLength
+--- /dev/null
++++ b/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
+@@ -0,0 +1,95 @@
++package gofakes3
++
++import (
++	"crypto/sha256"
++	"encoding/base64"
++	"encoding/xml"
++	"io"
++	"net/http"
++	"net/url"
++	"strings"
++)
++
++// Copy from one backend snapshot: a separate HEAD followed by GET could race
++// an overwrite and copy bytes that no longer match the caller's condition.
++func (g *GoFakeS3) copyMultipartUploadPart(bucket, object string, uploadID UploadID, number int, w http.ResponseWriter, r *http.Request) error {
++	source, query, _ := strings.Cut(r.Header.Get("x-amz-copy-source"), "?")
++	source, err := url.PathUnescape(source)
++	if err != nil {
++		return ErrInvalidArgument
++	}
++	parts := strings.SplitN(strings.TrimPrefix(source, "/"), "/", 2)
++	if len(parts) != 2 || parts[0] == "" || parts[1] == "" {
++		return ErrInvalidArgument
++	}
++	params, err := url.ParseQuery(query)
++	if err != nil {
++		return ErrInvalidArgument
++	}
++	for key := range params {
++		if key != "versionId" {
++			return ErrInvalidArgument
++		}
++	}
++	// Do not silently ignore conditions this compatibility subset cannot apply.
++	for _, key := range []string{"x-amz-copy-source-if-modified-since", "x-amz-copy-source-if-unmodified-since"} {
++		if r.Header.Get(key) != "" {
++			return ErrNotImplemented
++		}
++	}
++	var src *Object
++	if version := params.Get("versionId"); version != "" {
++		if g.versioned == nil {
++			return ErrNotImplemented
++		}
++		src, err = g.versioned.GetObjectVersion(parts[0], parts[1], VersionID(version), nil)
++	} else {
++		src, err = g.storage.GetObject(parts[0], parts[1], nil)
++	}
++	if err != nil {
++		return err
++	}
++	if src == nil || src.Contents == nil {
++		return ErrInternal
++	}
++	defer src.Contents.Close()
++	if src.IsDeleteMarker {
++		return ErrInvalidArgument
++	}
++	tag := FormatETag(src.Hash)
++	if expected := r.Header.Get("x-amz-copy-source-if-match"); expected != "" && expected != tag {
++		return ErrPreconditionFailed
++	}
++	if expected := r.Header.Get("x-amz-copy-source-if-none-match"); expected != "" && expected == tag {
++		return ErrPreconditionFailed
++	}
++	start, size := int64(0), src.Size
++	if value := r.Header.Get("x-amz-copy-source-range"); value != "" {
++		span, err := parseRangeHeader(value)
++		if err != nil || span == nil || span.FromEnd || span.End == RangeNoEnd || span.End >= src.Size {
++			return ErrInvalidRange
++		}
++		start, size = span.Start, span.End-span.Start+1
++	}
++	if size <= 0 {
++		return ErrInvalidRange
++	}
++	if _, err := io.CopyN(io.Discard, src.Contents, start); err != nil {
++		return err
++	}
++	digest := sha256.New()
++	body := io.TeeReader(io.LimitReader(src.Contents, size), digest)
++	etag, err := g.uploader.UploadPart(bucket, object, uploadID, number, size, body)
++	if err != nil {
++		return err
++	}
++	if src.VersionID != "" {
++		w.Header().Set("x-amz-copy-source-version-id", string(src.VersionID))
++	}
++	return g.xmlEncoder(w).Encode(struct {
++		XMLName        xml.Name    `xml:"CopyPartResult"`
++		ETag           string      `xml:"ETag"`
++		LastModified   ContentTime `xml:"LastModified"`
++		ChecksumSHA256 string      `xml:"ChecksumSHA256"`
++	}{ETag: etag, LastModified: NewContentTime(g.timeSource.Now()), ChecksumSHA256: base64.StdEncoding.EncodeToString(digest.Sum(nil))})
++}
+--- a/vendor/github.com/johannesboyne/gofakes3/backend.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend.go
+@@ -23,7 +23,9 @@
+ 	Size     int64
+ 	Contents io.ReadCloser
+ 	Hash     []byte
+-	Range    *ObjectRange
++	// EntityTag is the stored opaque tag; Hash remains the payload MD5.
++	EntityTag string
++	Range     *ObjectRange
+ 
+ 	// VersionID will be empty if bucket versioning has not been enabled.
+ 	VersionID VersionID
+@@ -31,6 +33,21 @@
+ 	// If versioning is enabled for the bucket, this is true if this object version
+ 	// is a delete marker.
+ 	IsDeleteMarker bool
++}
++
++// ETag returns the version-owned tag, retaining compatibility with backends
++// that only supply payload hashes.
++func (object *Object) ETag() string {
++	if object.EntityTag != "" {
++		return object.EntityTag
++	}
++	return FormatETag(object.Hash)
++}
++
++// MultipartObjectBackend atomically stores completion bytes, metadata and ETag
++// under the same conditional-write lock. The tag never enters client metadata.
++type MultipartObjectBackend interface {
++	PutMultipartObject(bucket, key string, metadata map[string]string, input io.Reader, size int64, tag string, conditions *PutConditions) (PutObjectResult, error)
+ }
+ 
+ type ObjectList struct {
+@@ -150,7 +167,8 @@
+ 
+ 	// Hash is the MD5 hash of the object content (used for ETag comparison)
+ 	// Only required if Exists is true
+-	Hash []byte
++	Hash      []byte
++	EntityTag string
+ }
+ 
+ // ObjectInfo is a deprecated alias for ConditionalObjectInfo.
+@@ -182,7 +200,10 @@
+ 		if len(expectedETag) >= 2 && expectedETag[0] == '"' && expectedETag[len(expectedETag)-1] == '"' {
+ 			expectedETag = expectedETag[1 : len(expectedETag)-1]
+ 		}
+-		actualETag := hex.EncodeToString(objectInfo.Hash)
++		actualETag := strings.Trim(objectInfo.EntityTag, "\"")
++		if actualETag == "" {
++			actualETag = hex.EncodeToString(objectInfo.Hash)
++		}
+ 		if expectedETag != actualETag {
+ 			return ErrorMessage(ErrPreconditionFailed, "The ETag does not match")
+ 		}
+--- a/vendor/github.com/johannesboyne/gofakes3/uploader.go
++++ b/vendor/github.com/johannesboyne/gofakes3/uploader.go
+@@ -496,7 +496,12 @@
+ 		input.ChecksumSHA256 = ""
+ 		input.ChecksumType = ""
+ 	}
+-	result, err := u.storage.PutObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), input.Conditions)
++	var result PutObjectResult
++	if backend, ok := u.storage.(MultipartObjectBackend); ok {
++		result, err = backend.PutMultipartObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), etag, input.Conditions)
++	} else {
++		result, err = u.storage.PutObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), input.Conditions)
++	}
+ 	if err != nil {
+ 		return "", "", err
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
++++ b/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
+@@ -535,7 +535,7 @@
+ 		w.Header().Set("x-amz-version-id", string(obj.VersionID))
+ 	}
+ 
+-	etag := `"` + hex.EncodeToString(obj.Hash) + `"`
++	etag := obj.ETag()
+ 	w.Header().Set("ETag", etag)
+ 
+ 	if r.Header.Get("If-None-Match") == etag {
+@@ -576,7 +576,16 @@
+ 		return err
+ 	}
+ 
+-	obj, err := g.storage.HeadObject(bucket, object)
++	var obj *Object
++	var err error
++	if versionID == "" {
++		obj, err = g.storage.HeadObject(bucket, object)
++	} else {
++		if g.versioned == nil {
++			return ErrNotImplemented
++		}
++		obj, err = g.versioned.HeadObjectVersion(bucket, object, versionID)
++	}
+ 	if err != nil {
+ 		return err
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
++++ b/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
+@@ -56,7 +56,7 @@
+ 	if src.IsDeleteMarker {
+ 		return ErrInvalidArgument
+ 	}
+-	tag := FormatETag(src.Hash)
++	tag := src.ETag()
+ 	if expected := r.Header.Get("x-amz-copy-source-if-match"); expected != "" && expected != tag {
+ 		return ErrPreconditionFailed
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/backend.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/backend.go
+@@ -119,7 +119,7 @@
+ 			response.Add(&gofakes3.Content{
+ 				Key:          item.data.name,
+ 				LastModified: gofakes3.NewContentTime(item.data.lastModified),
+-				ETag:         gofakes3.FormatETag(item.data.hash),
++				ETag:         item.data.entityTag,
+ 				Size:         int64(len(item.data.body)),
+ 			})
+ 		}
+@@ -240,6 +240,16 @@
+ 	size int64,
+ 	conditions *gofakes3.PutConditions,
+ ) (result gofakes3.PutObjectResult, err error) {
++	return db.putObject(bucketName, objectName, meta, input, size, "", conditions)
++}
++
++// PutMultipartObject retains the completion tag in the same object version as
++// its bytes and uses the ordinary atomic conditional-write admission.
++func (db *Backend) PutMultipartObject(bucketName, objectName string, meta map[string]string, input io.Reader, size int64, tag string, conditions *gofakes3.PutConditions) (gofakes3.PutObjectResult, error) {
++	return db.putObject(bucketName, objectName, meta, input, size, tag, conditions)
++}
++
++func (db *Backend) putObject(bucketName, objectName string, meta map[string]string, input io.Reader, size int64, tag string, conditions *gofakes3.PutConditions) (result gofakes3.PutObjectResult, err error) {
+ 	// No need to lock the backend while we read the data into memory; it holds
+ 	// the write lock open unnecessarily, and could be blocked for an unreasonably
+ 	// long time by a connection timing out:
+@@ -272,11 +282,15 @@
+ 	}
+ 
+ 	hash := md5.Sum(bts)
++	if tag == "" {
++		tag = gofakes3.FormatETag(hash[:])
++	}
+ 
+ 	item := &bucketData{
+ 		name:         objectName,
+ 		body:         bts,
+ 		hash:         hash[:],
++		entityTag:    tag,
+ 		metadata:     meta,
+ 		lastModified: db.timeSource.Now(),
+ 	}
+@@ -557,7 +571,7 @@
+ 					IsLatest:     version == object.data,
+ 					LastModified: gofakes3.NewContentTime(version.lastModified),
+ 					Size:         int64(len(version.body)),
+-					ETag:         gofakes3.FormatETag(version.hash),
++					ETag:         version.entityTag,
+ 				}
+ 				if bucket.versioning != gofakes3.VersioningNone { // S300005
+ 					resultVer.VersionID = version.versionID
+@@ -587,8 +601,9 @@
+ 		return &gofakes3.ConditionalObjectInfo{Exists: false}, nil
+ 	}
+ 	return &gofakes3.ConditionalObjectInfo{
+-		Exists: true,
+-		Hash:   existing.data.hash,
++		Exists:    true,
++		Hash:      existing.data.hash,
++		EntityTag: existing.data.entityTag,
+ 	}, nil
+ }
+ 
+--- a/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/bucket.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/bucket.go
+@@ -118,6 +118,7 @@
+ 	deleteMarker bool
+ 	body         []byte
+ 	hash         []byte
++	entityTag    string
+ 	metadata     map[string]string
+ }
+ 
+@@ -150,6 +151,7 @@
+ 	return &gofakes3.Object{
+ 		Name:           bi.name,
+ 		Hash:           bi.hash,
++		EntityTag:      bi.entityTag,
+ 		Metadata:       bi.metadata,
+ 		Size:           sz,
+ 		Range:          rnge,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@specific.dev/spectest",
-  "version": "0.131.7",
+  "version": "0.131.9",
   "description": "Spectest SDK for defining test environments in TypeScript.",
   "type": "module",
   "main": "./dist/index.js",

package/src/components/s3-runtime/README.md

@@ -22,7 +22,16 @@ each part and its ordering, and the composite checksum survives HEAD/GET for
 reconciliation. Completion conditions use the backend's atomic conditional write.
 Overwriting an object does not inherit the previous object's checksum metadata.
 This patch supports SHA256/COMPOSITE; it does not implement every S3 checksum
-algorithm or streaming checksum trailers.
+algorithm or streaming checksum trailers. It also supports UploadPartCopy from
+one backend snapshot, including closed byte ranges, exact ETag conditions,
+version selection and SHA256 part receipts. Date-based copy conditions are
+explicitly unsupported (501), rather than silently ignored.
+
+Multipart completion stores its opaque ETag on the same in-memory object version
+as the bytes. HEAD/GET, listings, copy conditions and atomic write conditions use
+that tag; ordinary PUT and CopyObject retain their own payload-derived tags.
+Versioned HEAD reads the requested version. The optional backend write port keeps
+completion tags out of client metadata and avoids a separate post-write update.
 
 Run `./test.sh` from this directory to exercise real HTTP requests against the
 same patched sources used in the image, including corrupt retries, conditional

package/src/components/s3-runtime/main_test.go

@@ -147,39 +147,54 @@ func TestMultipartSHA256IntegrityAndReconciliation(t *testing.T) {
 }
 
 func TestMultipartConditionalCompletionIsAtomic(t *testing.T) {
-	p := newProbe(t)
-	paths := []string{p.start("same", true), p.start("same", true)}
-	parts := []string{p.part(paths[0], 1, []byte("first"), true), p.part(paths[1], 1, []byte("second"), true)}
-	statuses := make(chan int, 2)
-	var wg sync.WaitGroup
-	for i := range paths {
-		wg.Add(1)
-		go func(i int) {
-			defer wg.Done()
-			req, _ := http.NewRequest("POST", p.server.URL+paths[i], bytes.NewReader(completion(parts[i])))
-			req.Header.Set("If-None-Match", "*")
-			res, err := p.server.Client().Do(req)
-			if err != nil {
-				statuses <- 0
-				return
+	for _, replace := range []bool{false, true} {
+		t.Run(fmt.Sprint(replace), func(t *testing.T) {
+			p := newProbe(t)
+			header, tag := "If-None-Match", "*"
+			if replace {
+				seed := p.start("same", true)
+				part := p.part(seed, 1, []byte("original"), true)
+				response := p.request("POST", seed, completion(part), nil, 200)
+				var receipt struct{ ETag string }
+				if err := xml.Unmarshal(response.body, &receipt); err != nil {
+					t.Fatal(err)
+				}
+				header, tag = "If-Match", receipt.ETag
 			}
-			defer res.Body.Close()
-			io.Copy(io.Discard, res.Body)
-			statuses <- res.StatusCode
-		}(i)
-	}
-	wg.Wait()
-	close(statuses)
-	counts := map[int]int{}
-	for s := range statuses {
-		counts[s]++
-	}
-	if counts[200] != 1 || counts[412] != 1 {
-		t.Fatalf("competing creates: %v", counts)
-	}
-	body := p.request("GET", "/uploads/same", nil, nil, 200).body
-	if string(body) != "first" && string(body) != "second" {
-		t.Fatalf("bad winner: %s", body)
+			paths := []string{p.start("same", true), p.start("same", true)}
+			parts := []string{p.part(paths[0], 1, []byte("first"), true), p.part(paths[1], 1, []byte("second"), true)}
+			statuses := make(chan int, 2)
+			var wg sync.WaitGroup
+			for i := range paths {
+				wg.Add(1)
+				go func(i int) {
+					defer wg.Done()
+					req, _ := http.NewRequest("POST", p.server.URL+paths[i], bytes.NewReader(completion(parts[i])))
+					req.Header.Set(header, tag)
+					res, err := p.server.Client().Do(req)
+					if err != nil {
+						statuses <- 0
+						return
+					}
+					defer res.Body.Close()
+					io.Copy(io.Discard, res.Body)
+					statuses <- res.StatusCode
+				}(i)
+			}
+			wg.Wait()
+			close(statuses)
+			counts := map[int]int{}
+			for s := range statuses {
+				counts[s]++
+			}
+			if counts[200] != 1 || counts[412] != 1 {
+				t.Fatalf("competing creates: %v", counts)
+			}
+			body := p.request("GET", "/uploads/same", nil, nil, 200).body
+			if string(body) != "first" && string(body) != "second" {
+				t.Fatalf("bad winner: %s", body)
+			}
+		})
 	}
 }
 
@@ -197,3 +212,161 @@ func TestMultipartAbortAndLegacyUpload(t *testing.T) {
 		t.Fatal("legacy multipart changed")
 	}
 }
+
+func TestUploadPartCopyRetainsExactSourceAndRejectsStaleRetry(t *testing.T) {
+	p := newProbe(t)
+	source := bytes.Repeat([]byte("0123456789"), 600000)
+	put := p.request("PUT", "/uploads/staging%20%2B%25.csv", source, nil, 200)
+	path := p.start("copied", false)
+	headers := map[string]string{"x-amz-copy-source": "/uploads/staging%20%2B%25.csv", "x-amz-copy-source-if-match": put.header.Get("ETag"), "x-amz-copy-source-range": "bytes=3-5242882"}
+	res := p.request("PUT", path+"&partNumber=1", nil, headers, 200)
+	var part struct {
+		XMLName      xml.Name
+		ETag         string
+		LastModified string
+	}
+	if err := xml.Unmarshal(res.body, &part); err != nil || part.XMLName.Local != "CopyPartResult" || part.ETag == "" || part.LastModified == "" {
+		t.Fatalf("copy part receipt: %s: %v", res.body, err)
+	}
+	first := fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag></Part>", part.ETag)
+	headers["x-amz-copy-source-if-match"] = `"stale"`
+	p.request("PUT", path+"&partNumber=1", nil, headers, 412)
+	headers["x-amz-copy-source-if-match"] = put.header.Get("ETag")
+	for _, invalid := range []string{"bytes=6000000-6000001", "bytes=3-6000000", "bytes=5-3", "bytes=-3", "bytes=3-", "bytes=0-1,3-4"} {
+		headers["x-amz-copy-source-range"] = invalid
+		p.request("PUT", path+"&partNumber=1", nil, headers, 416)
+	}
+	headers["x-amz-copy-source-range"] = "bytes=5242883-5999999"
+	res = p.request("PUT", path+"&partNumber=2", nil, headers, 200)
+	if err := xml.Unmarshal(res.body, &part); err != nil {
+		t.Fatal(err)
+	}
+	second := fmt.Sprintf("<Part><PartNumber>2</PartNumber><ETag>%s</ETag></Part>", part.ETag)
+	p.request("POST", path, completion(first, second), nil, 200)
+	got := p.request("GET", "/uploads/copied", nil, nil, 200)
+	if !bytes.Equal(got.body, source[3:]) {
+		t.Fatal("copy changed the retained byte range")
+	}
+	p.request("PUT", path+"&partNumber=2", nil, headers, 404)
+}
+
+func TestUploadPartCopyVersionChecksumAndAbort(t *testing.T) {
+	p := newProbe(t)
+	p.request("PUT", "/uploads?versioning", []byte(`<VersioningConfiguration><Status>Enabled</Status></VersioningConfiguration>`), nil, 200)
+	original := []byte("retained original version")
+	source := p.request("PUT", "/uploads/versioned", original, nil, 200)
+	version := source.header.Get("x-amz-version-id")
+	if version == "" {
+		t.Fatal("source has no version")
+	}
+	p.request("PUT", "/uploads/versioned", []byte("replacement"), nil, 200)
+	path := p.start("version-copy", true)
+	headers := map[string]string{"x-amz-copy-source": "/uploads/versioned?versionId=" + version, "x-amz-copy-source-if-match": source.header.Get("ETag")}
+	res := p.request("PUT", path+"&partNumber=1", nil, headers, 200)
+	var part struct {
+		ETag           string
+		ChecksumSHA256 string
+	}
+	if err := xml.Unmarshal(res.body, &part); err != nil {
+		t.Fatal(err)
+	}
+	if part.ChecksumSHA256 != sum(original) {
+		t.Fatal("copied version checksum differs")
+	}
+	headers["x-amz-copy-source-if-none-match"] = source.header.Get("ETag")
+	p.request("PUT", path+"&partNumber=1", nil, headers, 412)
+	delete(headers, "x-amz-copy-source-if-none-match")
+	headers["x-amz-copy-source-if-modified-since"] = "Sat, 31 Oct 2026 00:00:00 GMT"
+	p.request("PUT", path+"&partNumber=1", nil, headers, 501)
+	delete(headers, "x-amz-copy-source-if-modified-since")
+	descriptor := fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag><ChecksumSHA256>%s</ChecksumSHA256></Part>", part.ETag, part.ChecksumSHA256)
+	digest := sha256.Sum256(original)
+	composite := sum(digest[:]) + "-1"
+	p.request("POST", path, completion(descriptor), map[string]string{"x-amz-checksum-type": "COMPOSITE", "x-amz-checksum-sha256": composite}, 200)
+	got := p.request("GET", "/uploads/version-copy", nil, nil, 200)
+	if !bytes.Equal(got.body, original) || got.header.Get("x-amz-checksum-sha256") != composite {
+		t.Fatal("versioned copy bytes or composite receipt changed")
+	}
+	path = p.start("aborted-copy", false)
+	p.request("DELETE", path, nil, nil, 204)
+	p.request("PUT", path+"&partNumber=1", nil, headers, 404)
+	headers["x-amz-copy-source"] = "/uploads/missing"
+	path = p.start("missing-copy", false)
+	p.request("PUT", path+"&partNumber=1", nil, headers, 404)
+	p.request("DELETE", path, nil, nil, 204)
+}
+
+func TestMultipartSourceEntityTagSurvivesCopyVersionsAndOverwrite(t *testing.T) {
+	for _, count := range []int{1, 2} {
+		t.Run(fmt.Sprint(count), func(t *testing.T) {
+			p := newProbe(t)
+			p.request("PUT", "/uploads?versioning", []byte("<VersioningConfiguration><Status>Enabled</Status></VersioningConfiguration>"), nil, 200)
+			body := bytes.Repeat([]byte("a"), 6*1024*1024)
+			path := p.start("staged", false)
+			parts := []string{}
+			if count == 1 {
+				parts = append(parts, p.part(path, 1, body, false))
+			} else {
+				parts = append(parts, p.part(path, 1, body[:5*1024*1024], false), p.part(path, 2, body[5*1024*1024:], false))
+			}
+			complete := p.request("POST", path, completion(parts...), nil, 200)
+			var receipt struct{ ETag string }
+			if err := xml.Unmarshal(complete.body, &receipt); err != nil || !strings.Contains(receipt.ETag, fmt.Sprintf("-%d", count)) {
+				t.Fatalf("completion tag: %s: %v", complete.body, err)
+			}
+			version := complete.header.Get("x-amz-version-id")
+			if version == "" {
+				t.Fatal("missing completed version")
+			}
+			destination := p.start("copied-staging", false)
+			headers := map[string]string{"x-amz-copy-source": "/uploads/staged", "x-amz-copy-source-if-match": receipt.ETag, "x-amz-copy-source-range": fmt.Sprintf("bytes=0-%d", len(body)-1)}
+			copied := p.request("PUT", destination+"&partNumber=1", nil, headers, 200)
+			var part struct{ ETag string }
+			if err := xml.Unmarshal(copied.body, &part); err != nil {
+				t.Fatal(err)
+			}
+			for _, method := range []string{"HEAD", "GET"} {
+				got := p.request(method, "/uploads/staged", nil, nil, 200)
+				if got.header.Get("ETag") != receipt.ETag {
+					t.Fatalf("%s lost completion tag: %s", method, got.header.Get("ETag"))
+				}
+				p.request(method, "/uploads/staged", nil, map[string]string{"If-None-Match": receipt.ETag}, 304)
+			}
+			for _, query := range []string{"?list-type=2", "?versions"} {
+				got := p.request("GET", "/uploads"+query, nil, nil, 200)
+				var list struct {
+					Contents []struct{ ETag string }
+					Version  []struct{ ETag string }
+				}
+				if err := xml.Unmarshal(got.body, &list); err != nil {
+					t.Fatal(err)
+				}
+				tags := []string{}
+				for _, row := range list.Contents {
+					tags = append(tags, row.ETag)
+				}
+				for _, row := range list.Version {
+					tags = append(tags, row.ETag)
+				}
+				if len(tags) != 1 || tags[0] != receipt.ETag {
+					t.Fatalf("list lost tag: %v", tags)
+				}
+			}
+			put := p.request("PUT", "/uploads/staged", []byte("replacement"), map[string]string{"If-Match": receipt.ETag}, 200)
+			if put.header.Get("ETag") == receipt.ETag {
+				t.Fatal("normal overwrite inherited multipart tag")
+			}
+			p.request("PUT", destination+"&partNumber=1", nil, headers, 412)
+			headers["x-amz-copy-source"] += "?versionId=" + version
+			p.request("PUT", destination+"&partNumber=1", nil, headers, 200)
+			head := p.request("HEAD", "/uploads/staged?versionId="+version, nil, nil, 200)
+			if head.header.Get("ETag") != receipt.ETag {
+				t.Fatal("version lost its tag")
+			}
+			p.request("POST", destination, completion(fmt.Sprintf("<Part><PartNumber>1</PartNumber><ETag>%s</ETag></Part>", part.ETag)), nil, 200)
+			if got := p.request("GET", "/uploads/copied-staging", nil, nil, 200); !bytes.Equal(got.body, body) {
+				t.Fatal("copied multipart staging bytes changed")
+			}
+		})
+	}
+}

package/src/components/s3-runtime/multipart.patch

@@ -239,3 +239,310 @@
  			// new metadata overwrites old but keep the rest
  			// TODO: check how metadata can be deleted?!
  			if _, ok := meta[k]; !ok {
+--- a/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
++++ b/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
+@@ -960,6 +960,10 @@
+ 		return ErrInvalidPart
+ 	}
+ 
++	if r.Header.Get("x-amz-copy-source") != "" {
++		return g.copyMultipartUploadPart(bucket, object, uploadID, int(partNumber), w, r)
++	}
++
+ 	size, err := strconv.ParseInt(r.Header.Get("Content-Length"), 10, 64)
+ 	if err != nil || size <= 0 {
+ 		return ErrMissingContentLength
+--- /dev/null
++++ b/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
+@@ -0,0 +1,95 @@
++package gofakes3
++
++import (
++	"crypto/sha256"
++	"encoding/base64"
++	"encoding/xml"
++	"io"
++	"net/http"
++	"net/url"
++	"strings"
++)
++
++// Copy from one backend snapshot: a separate HEAD followed by GET could race
++// an overwrite and copy bytes that no longer match the caller's condition.
++func (g *GoFakeS3) copyMultipartUploadPart(bucket, object string, uploadID UploadID, number int, w http.ResponseWriter, r *http.Request) error {
++	source, query, _ := strings.Cut(r.Header.Get("x-amz-copy-source"), "?")
++	source, err := url.PathUnescape(source)
++	if err != nil {
++		return ErrInvalidArgument
++	}
++	parts := strings.SplitN(strings.TrimPrefix(source, "/"), "/", 2)
++	if len(parts) != 2 || parts[0] == "" || parts[1] == "" {
++		return ErrInvalidArgument
++	}
++	params, err := url.ParseQuery(query)
++	if err != nil {
++		return ErrInvalidArgument
++	}
++	for key := range params {
++		if key != "versionId" {
++			return ErrInvalidArgument
++		}
++	}
++	// Do not silently ignore conditions this compatibility subset cannot apply.
++	for _, key := range []string{"x-amz-copy-source-if-modified-since", "x-amz-copy-source-if-unmodified-since"} {
++		if r.Header.Get(key) != "" {
++			return ErrNotImplemented
++		}
++	}
++	var src *Object
++	if version := params.Get("versionId"); version != "" {
++		if g.versioned == nil {
++			return ErrNotImplemented
++		}
++		src, err = g.versioned.GetObjectVersion(parts[0], parts[1], VersionID(version), nil)
++	} else {
++		src, err = g.storage.GetObject(parts[0], parts[1], nil)
++	}
++	if err != nil {
++		return err
++	}
++	if src == nil || src.Contents == nil {
++		return ErrInternal
++	}
++	defer src.Contents.Close()
++	if src.IsDeleteMarker {
++		return ErrInvalidArgument
++	}
++	tag := FormatETag(src.Hash)
++	if expected := r.Header.Get("x-amz-copy-source-if-match"); expected != "" && expected != tag {
++		return ErrPreconditionFailed
++	}
++	if expected := r.Header.Get("x-amz-copy-source-if-none-match"); expected != "" && expected == tag {
++		return ErrPreconditionFailed
++	}
++	start, size := int64(0), src.Size
++	if value := r.Header.Get("x-amz-copy-source-range"); value != "" {
++		span, err := parseRangeHeader(value)
++		if err != nil || span == nil || span.FromEnd || span.End == RangeNoEnd || span.End >= src.Size {
++			return ErrInvalidRange
++		}
++		start, size = span.Start, span.End-span.Start+1
++	}
++	if size <= 0 {
++		return ErrInvalidRange
++	}
++	if _, err := io.CopyN(io.Discard, src.Contents, start); err != nil {
++		return err
++	}
++	digest := sha256.New()
++	body := io.TeeReader(io.LimitReader(src.Contents, size), digest)
++	etag, err := g.uploader.UploadPart(bucket, object, uploadID, number, size, body)
++	if err != nil {
++		return err
++	}
++	if src.VersionID != "" {
++		w.Header().Set("x-amz-copy-source-version-id", string(src.VersionID))
++	}
++	return g.xmlEncoder(w).Encode(struct {
++		XMLName        xml.Name    `xml:"CopyPartResult"`
++		ETag           string      `xml:"ETag"`
++		LastModified   ContentTime `xml:"LastModified"`
++		ChecksumSHA256 string      `xml:"ChecksumSHA256"`
++	}{ETag: etag, LastModified: NewContentTime(g.timeSource.Now()), ChecksumSHA256: base64.StdEncoding.EncodeToString(digest.Sum(nil))})
++}
+--- a/vendor/github.com/johannesboyne/gofakes3/backend.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend.go
+@@ -23,7 +23,9 @@
+ 	Size     int64
+ 	Contents io.ReadCloser
+ 	Hash     []byte
+-	Range    *ObjectRange
++	// EntityTag is the stored opaque tag; Hash remains the payload MD5.
++	EntityTag string
++	Range     *ObjectRange
+ 
+ 	// VersionID will be empty if bucket versioning has not been enabled.
+ 	VersionID VersionID
+@@ -31,6 +33,21 @@
+ 	// If versioning is enabled for the bucket, this is true if this object version
+ 	// is a delete marker.
+ 	IsDeleteMarker bool
++}
++
++// ETag returns the version-owned tag, retaining compatibility with backends
++// that only supply payload hashes.
++func (object *Object) ETag() string {
++	if object.EntityTag != "" {
++		return object.EntityTag
++	}
++	return FormatETag(object.Hash)
++}
++
++// MultipartObjectBackend atomically stores completion bytes, metadata and ETag
++// under the same conditional-write lock. The tag never enters client metadata.
++type MultipartObjectBackend interface {
++	PutMultipartObject(bucket, key string, metadata map[string]string, input io.Reader, size int64, tag string, conditions *PutConditions) (PutObjectResult, error)
+ }
+ 
+ type ObjectList struct {
+@@ -150,7 +167,8 @@
+ 
+ 	// Hash is the MD5 hash of the object content (used for ETag comparison)
+ 	// Only required if Exists is true
+-	Hash []byte
++	Hash      []byte
++	EntityTag string
+ }
+ 
+ // ObjectInfo is a deprecated alias for ConditionalObjectInfo.
+@@ -182,7 +200,10 @@
+ 		if len(expectedETag) >= 2 && expectedETag[0] == '"' && expectedETag[len(expectedETag)-1] == '"' {
+ 			expectedETag = expectedETag[1 : len(expectedETag)-1]
+ 		}
+-		actualETag := hex.EncodeToString(objectInfo.Hash)
++		actualETag := strings.Trim(objectInfo.EntityTag, "\"")
++		if actualETag == "" {
++			actualETag = hex.EncodeToString(objectInfo.Hash)
++		}
+ 		if expectedETag != actualETag {
+ 			return ErrorMessage(ErrPreconditionFailed, "The ETag does not match")
+ 		}
+--- a/vendor/github.com/johannesboyne/gofakes3/uploader.go
++++ b/vendor/github.com/johannesboyne/gofakes3/uploader.go
+@@ -496,7 +496,12 @@
+ 		input.ChecksumSHA256 = ""
+ 		input.ChecksumType = ""
+ 	}
+-	result, err := u.storage.PutObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), input.Conditions)
++	var result PutObjectResult
++	if backend, ok := u.storage.(MultipartObjectBackend); ok {
++		result, err = backend.PutMultipartObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), etag, input.Conditions)
++	} else {
++		result, err = u.storage.PutObject(bucket, object, mpu.Meta, bytes.NewReader(body), int64(len(body)), input.Conditions)
++	}
+ 	if err != nil {
+ 		return "", "", err
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
++++ b/vendor/github.com/johannesboyne/gofakes3/gofakes3.go
+@@ -535,7 +535,7 @@
+ 		w.Header().Set("x-amz-version-id", string(obj.VersionID))
+ 	}
+ 
+-	etag := `"` + hex.EncodeToString(obj.Hash) + `"`
++	etag := obj.ETag()
+ 	w.Header().Set("ETag", etag)
+ 
+ 	if r.Header.Get("If-None-Match") == etag {
+@@ -576,7 +576,16 @@
+ 		return err
+ 	}
+ 
+-	obj, err := g.storage.HeadObject(bucket, object)
++	var obj *Object
++	var err error
++	if versionID == "" {
++		obj, err = g.storage.HeadObject(bucket, object)
++	} else {
++		if g.versioned == nil {
++			return ErrNotImplemented
++		}
++		obj, err = g.versioned.HeadObjectVersion(bucket, object, versionID)
++	}
+ 	if err != nil {
+ 		return err
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
++++ b/vendor/github.com/johannesboyne/gofakes3/upload_part_copy.go
+@@ -56,7 +56,7 @@
+ 	if src.IsDeleteMarker {
+ 		return ErrInvalidArgument
+ 	}
+-	tag := FormatETag(src.Hash)
++	tag := src.ETag()
+ 	if expected := r.Header.Get("x-amz-copy-source-if-match"); expected != "" && expected != tag {
+ 		return ErrPreconditionFailed
+ 	}
+--- a/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/backend.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/backend.go
+@@ -119,7 +119,7 @@
+ 			response.Add(&gofakes3.Content{
+ 				Key:          item.data.name,
+ 				LastModified: gofakes3.NewContentTime(item.data.lastModified),
+-				ETag:         gofakes3.FormatETag(item.data.hash),
++				ETag:         item.data.entityTag,
+ 				Size:         int64(len(item.data.body)),
+ 			})
+ 		}
+@@ -240,6 +240,16 @@
+ 	size int64,
+ 	conditions *gofakes3.PutConditions,
+ ) (result gofakes3.PutObjectResult, err error) {
++	return db.putObject(bucketName, objectName, meta, input, size, "", conditions)
++}
++
++// PutMultipartObject retains the completion tag in the same object version as
++// its bytes and uses the ordinary atomic conditional-write admission.
++func (db *Backend) PutMultipartObject(bucketName, objectName string, meta map[string]string, input io.Reader, size int64, tag string, conditions *gofakes3.PutConditions) (gofakes3.PutObjectResult, error) {
++	return db.putObject(bucketName, objectName, meta, input, size, tag, conditions)
++}
++
++func (db *Backend) putObject(bucketName, objectName string, meta map[string]string, input io.Reader, size int64, tag string, conditions *gofakes3.PutConditions) (result gofakes3.PutObjectResult, err error) {
+ 	// No need to lock the backend while we read the data into memory; it holds
+ 	// the write lock open unnecessarily, and could be blocked for an unreasonably
+ 	// long time by a connection timing out:
+@@ -272,11 +282,15 @@
+ 	}
+ 
+ 	hash := md5.Sum(bts)
++	if tag == "" {
++		tag = gofakes3.FormatETag(hash[:])
++	}
+ 
+ 	item := &bucketData{
+ 		name:         objectName,
+ 		body:         bts,
+ 		hash:         hash[:],
++		entityTag:    tag,
+ 		metadata:     meta,
+ 		lastModified: db.timeSource.Now(),
+ 	}
+@@ -557,7 +571,7 @@
+ 					IsLatest:     version == object.data,
+ 					LastModified: gofakes3.NewContentTime(version.lastModified),
+ 					Size:         int64(len(version.body)),
+-					ETag:         gofakes3.FormatETag(version.hash),
++					ETag:         version.entityTag,
+ 				}
+ 				if bucket.versioning != gofakes3.VersioningNone { // S300005
+ 					resultVer.VersionID = version.versionID
+@@ -587,8 +601,9 @@
+ 		return &gofakes3.ConditionalObjectInfo{Exists: false}, nil
+ 	}
+ 	return &gofakes3.ConditionalObjectInfo{
+-		Exists: true,
+-		Hash:   existing.data.hash,
++		Exists:    true,
++		Hash:      existing.data.hash,
++		EntityTag: existing.data.entityTag,
+ 	}, nil
+ }
+ 
+--- a/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/bucket.go
++++ b/vendor/github.com/johannesboyne/gofakes3/backend/s3mem/bucket.go
+@@ -118,6 +118,7 @@
+ 	deleteMarker bool
+ 	body         []byte
+ 	hash         []byte
++	entityTag    string
+ 	metadata     map[string]string
+ }
+ 
+@@ -150,6 +151,7 @@
+ 	return &gofakes3.Object{
+ 		Name:           bi.name,
+ 		Hash:           bi.hash,
++		EntityTag:      bi.entityTag,
+ 		Metadata:       bi.metadata,
+ 		Size:           sz,
+ 		Range:          rnge,