What's Changed
- fix(storage): refresh DuckDB
credential_chainS3 secrets so cold-volume ops do not fail withExpiredToken~6h after start on EC2 instance profile / IRSA / Pod Identity.CREATE SECRETnow usesREFRESH auto, and Homer recreates the secret each tiering cycle, before moves/maintenance, and after native PUT (BeforeRegister). Static keys and custom endpoints (MinIO/R2) are unchanged. Fixes #980 via #981 - fix(security): bump
echo/v4from 4.15.3 to 4.15.4 for CVE-2026-55677 (encoded-slash static file bypass). #979
Full Changelog: 11.0.331...11.0.333