From b3abce178b38f6f0b80897d4c3bf74e0377102f5 Mon Sep 17 00:00:00 2001 From: "Jordan K. Wilson" Date: Thu, 21 May 2026 19:43:30 +1200 Subject: [PATCH 1/2] feat: skip HeadObject probe during S3 disk construction `rclone` uses HeadObject call to determine file/directory status of Root, however, in the case of fastschema, it will always be a directory, so can turn this probe off. --- pkg/rclonefs/s3.go | 1 + 1 file changed, 1 insertion(+) diff --git a/pkg/rclonefs/s3.go b/pkg/rclonefs/s3.go index 27d2dd0..0c4642a 100644 --- a/pkg/rclonefs/s3.go +++ b/pkg/rclonefs/s3.go @@ -74,6 +74,7 @@ func NewS3(config *RcloneS3Config) (fs.Disk, error) { cfgMap.Set("secret_access_key", config.SecretAccessKey) cfgMap.Set("acl", config.ACL) cfgMap.Set("bucket_acl", config.BucketACL) + cfgMap.Set("no_head_object", "true") if config.AccessKeyID == "" && config.SecretAccessKey == "" { cfgMap.Set("env_auth", "true") } From 0c4d0a76d6dd1bbb79db6ebcf60073f7498ed2be Mon Sep 17 00:00:00 2001 From: "Jordan K. Wilson" Date: Thu, 21 May 2026 19:44:53 +1200 Subject: [PATCH 2/2] fix(deps): bump github.com/rclone/rclone from 1.70.3 to 1.73.5 Resolves GO-2026-4964 / CVE-2026-41176 (unauthenticated options/set auth bypass in rclone