crates.io · #2616 most downloaded on crates.io

reqsign

0.20.716M downloads/moapache/opendal-reqsign ↗New releases in your daily digest, changelog included.

Signing HTTP requests for AWS, Azure, Google, Huawei, Aliyun, Tencent and Oracle services

Last release 12 days ago
25 Sep 2026
Ships fairly regularly
a new release about every 5 weeks
Rarely documented
notes for 6 of the last 60 stable releases
4 versions withdrawn
withdrawn after publishing
5 years old
83 releases · first in 2022

Release timeline

83 releases since 2022

20222023202420252026

20222026

One column per quarter.

Releases

0.20.725 Sept 2026
Source release: Apache distribution ( source archive , signature , SHA-512 , KEYS ).
Apache OpenDAL reqsign 0.20.7

Source release: Apache distribution (source archive, signature, SHA-512, KEYS).

Release vote · Vote result

The signed tag v0.20.7 points to the voted RC commit 6d31aed1acf67506ed8df35775fb321a8be8a984.

Notable changes:

Add Aliyun STS AssumeRole credential grants.

Accept caller-provided subject tokens for AWS, Azure, and Google exchanges.

Add Google service-account impersonation grants and service-account token providers.

Preserve Google provider-discovered signer identities for IAMCredentials query signing.

Fix S3 Express session-provider grants and deduplicate concurrent Azure user-delegation key requests.

Unify async synchronization with AsyncBand and expand Azure and Google live credential-provider tests.

Compatibility note:

Google Credential now has a public signer_email field. Callers using exhaustive struct literals must add signer_email: None or ..Default::default(); exhaustive patterns must include the field or ... Existing constructors and access to service_account and token continue to work.

Crate versions:

reqsign-core: 3.3.2

reqsign-command-execute-tokio: 3.0.7

reqsign-file-read-tokio: 3.0.7

reqsign-http-send-reqwest: 4.0.7

reqsign-aliyun-oss: 3.2.0

reqsign-aws-core: 3.2.0

reqsign-aws-v4: 3.3.1

reqsign-aws-v4a: 3.0.6

reqsign-azure-storage: 3.3.0

reqsign-google: 3.2.0

reqsign-huaweicloud-obs: 3.0.7

reqsign-oracle: 3.0.7

reqsign-tencent-cos: 3.0.7

reqsign-volcengine-tos: 3.1.3

reqsign: 0.20.7

0.20.624 Aug 2026

Apache OpenDAL reqsign 0.20.6 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.6/

Vote and result:

Vote: #845
Result: #850

Notable changes:

Add automatic S3 Express session configuration from directory bucket names.
Add maximum-allowed S3 Express sessions, IAM signing, and custom CreateSession endpoints.
Deduplicate concurrent signer credential refreshes through the shared credential cache.
Add live AWS credential-provider coverage for the supported default provider chain.

Crate versions:

reqsign: 0.20.6
reqsign-core: 3.3.1
reqsign-aliyun-oss: 3.1.5
reqsign-aws-core: 3.1.1
reqsign-aws-v4: 3.3.0
reqsign-aws-v4a: 3.0.5
reqsign-azure-storage: 3.2.1
reqsign-command-execute-tokio: 3.0.6
reqsign-file-read-tokio: 3.0.6
reqsign-google: 3.1.1
reqsign-http-send-reqwest: 4.0.6
reqsign-huaweicloud-obs: 3.0.6
reqsign-oracle: 3.0.6
reqsign-tencent-cos: 3.0.6
reqsign-volcengine-tos: 3.1.2

Open source →

0.20.57 Aug 2026

Emergency patch release. Final tag for the voted candidate v0.20.5-rc.1 .

Apache OpenDAL Reqsign 0.20.5

Emergency patch release. Final tag for the voted candidate v0.20.5-rc.1.

Vote: #826
Result: #827
Source release: https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.5/

Open source →

0.20.44 Aug 2026withdrawn

Apache OpenDAL reqsign 0.20.4 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.4/

Notable changes:

Add AWS SigV4a header signing and query presigning through dedicated aws-core and aws-v4a crates.
Add explicit AWS profile selection across the default credential provider and prefer it over AWS_PROFILE.
Add presigned URL support for Volcengine TOS.
Migrate Rust crate releases to crates.io Trusted Publishing with GitHub OIDC.

Crate versions:

reqsign: 0.20.4
reqsign-core: 3.2.1
reqsign-aliyun-oss: 3.1.3
reqsign-aws-core: 3.0.3
reqsign-aws-v4: 3.1.0
reqsign-aws-v4a: 3.0.3
reqsign-azure-storage: 3.1.2
reqsign-command-execute-tokio: 3.0.4
reqsign-file-read-tokio: 3.0.4
reqsign-google: 3.0.4
reqsign-http-send-reqwest: 4.0.4
reqsign-huaweicloud-obs: 3.0.4
reqsign-oracle: 3.0.4
reqsign-tencent-cos: 3.0.4
reqsign-volcengine-tos: 3.1.0

Open source →

0.20.327 Jul 2026

Apache OpenDAL reqsign 0.20.3 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.3/

Notable changes:

Preserve the original wire request representation during signing.
Define credential validity contracts for signing implementations.

Crate versions:

reqsign: 0.20.3
reqsign-core: 3.2.0
reqsign-aliyun-oss: 3.1.2
reqsign-aws-v4: 3.0.3
reqsign-azure-storage: 3.1.1
reqsign-command-execute-tokio: 3.0.3
reqsign-file-read-tokio: 3.0.3
reqsign-google: 3.0.3
reqsign-http-send-reqwest: 4.0.3
reqsign-huaweicloud-obs: 3.0.3
reqsign-oracle: 3.0.3
reqsign-tencent-cos: 3.0.3
reqsign-volcengine-tos: 3.0.3

Open source →

0.20.210 Jul 2026

Apache OpenDAL reqsign 0.20.2 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.2/

Notable changes:

Add Azure Storage credential provider setters for client secret and workload identity providers.
Validate credentials against the intended signature expiration time.
Make JWT support in reqsign-core optional.
Upgrade quick-xml to 0.41 and update selected GitHub Actions dependencies.

Crate versions:

reqsign: 0.20.2
reqsign-core: 3.1.0
reqsign-aliyun-oss: 3.1.1
reqsign-aws-v4: 3.0.2
reqsign-azure-storage: 3.1.0
reqsign-command-execute-tokio: 3.0.2
reqsign-file-read-tokio: 3.0.2
reqsign-google: 3.0.2
reqsign-http-send-reqwest: 4.0.2
reqsign-huaweicloud-obs: 3.0.2
reqsign-oracle: 3.0.2
reqsign-tencent-cos: 3.0.2
reqsign-volcengine-tos: 3.0.2

Open source →

0.20.11 Jun 2026

Apache OpenDAL reqsign 0.20.1 has been released.

Source release artifacts are available from the Apache release distribution:
https://dist.apache.org/repos/dist/release/opendal/reqsign-0.20.1/

Notable changes:

Add Aliyun OSS Signature V2 signing support.
Support explicit Aliyun OIDC configuration.
Remove the jsonwebtoken dependency from the workspace.
Update RustCrypto hash dependencies and selected GitHub Actions dependencies.
Fix the missing LICENSE file in the published reqsign-volcengine-tos crate.

Crate versions:

reqsign: 0.20.1
reqsign-aliyun-oss: 3.1.0
reqsign-http-send-reqwest: 4.0.1
other reqsign service/context/core crates: 3.0.1

Open source →

0.20.023 Mar 2026