v26.1

Open milestone

Due Dec 3, 2026

View on GitHub ↗

152

Issues

20%

Completed31 of 152

121

In progress

12d

Median time to close0–279d range

Contributors

Completed (31)

In progress (121)

Assignees

1/27

14/27

1/22

9/19

4/15

0/2

0/2

1/2

36 unassigned

Labels

bug64

stale37

origin34

enhancement34

internal29

client26

cache23

director23

documentation18

infrastructure17

web-ui14

registry14

Facilitation12

critical9

+17 more

Timeline

One row per issue, oldest first. Each bar runs from the day the issue was created to the day it was completed (open issues run to today). Drag the slider or use the buttons to zoom.

Completed

In progress

Not planned

Expected publish

AssigneeIssue

Dec 2024

Jan 2025

Feb 2025

Mar 2025

Apr 2025

May 2025

Jun 2025

Jul 2025

Aug 2025

Sep 2025

Oct 2025

Nov 2025

Dec 2025

Jan 2026

Feb 2026

Mar 2026

Apr 2026

May 2026

Jun 2026

Jul 2026

Aug 2026

Sep 2026

Oct 2026

Nov 2026

Dec 2026

#1826Recursive object get with `.` local filename does not behave like `cp -r` or `mc -r`

#1828Origin capabilities may be bypassed in some cases

#2933Add new TransferAd Atributes for parts of TransferUrl

#2971Adding web ui pieces to configure logging configurations

#2974Add command-line flags for capturing profiling information from the client

#2980No way to update ACL expiration time

#2984ACL Put Swagger Doc has Incorrect Body template

#2988ACL Post Swagger Documentation Off

#2998Turn on "flashing lights" when Pelican detects a server's certs are ~1 week from expiration

#3020Cache Authfile conflict warning is backwards

#3039Add methods to deprecate and then turn off parameters based on version

#3040Give fed admins the ability to adjust server weights on the fly

#3043The origin's web UI for managing users has mislabelled and missing fields

#3071HTTPS Gets are non deterministic when there is a space

#3082EC Private key with "BEGIN EC PRIVATE KEY" is considered an invalid key type

#3095Origins disabling Director.Tests should not show up red

#3107Much needed cleanup of test file transfer utilities

#3108`discoverFederationImpl` in dire need of rework

#3109Federation config knobs that aren't gettable/settable via `param` should still be named in param

#3113Add section for the Origin to the troubleshooting guide

#3129Add FAQ regarding local credentials file

#3136Unit tests are missing for the origin's and cache's self-test feature

#3157`pelican server set-logging-level` messages don't warn when state won't change or what bumped levels will revert to

#3164Add multi-export support for Globus Origins (still single collection)

#3191Registry.Require{Cache,Origin}Approva should be True by default

#3197Add approve/deny buttons to the edit registration request page

#3204Server ads in HA Director setup should have provenance taint

#3240Add config validation CI test that compares `docs/parameters.yaml` against `pelican config dump` output

#3247Standardize the API via CRUD Helpers

#3248Create Token Authentication Middleware

#3273Tables Update

#3283Document required settings for "https" storage type

#3284Add CI tests that don't use "fed in a box"

#3307S3 Origins log S3 statistics at the info level every ~1 second

#3366Store stable endpoint registration identifier in plugin transfer classads

#3369Strip leading and trailing whitespaces in Registration strings (prefix, Sitename, anything we match on)

#3411Pelican-server binary parsing non PELICAN_* prefixed EnvVars

#3422Incorrect authfile generation for public + private origins

#3429Logging Metadata Parent Issue

#3431Logging Metadata Namespace: HTTP Handler

#3432Logging Metadata: Virtual object serving and authorization

#3433Logging Metadata: Federation Integration

#3434Logging Metadata: CLI Integration

#3435Logging Metadata: Origin Integration Documentation

#3445POSIX v2 origins don't run self tests

#3447Document how to scrape a Pelican service with Prometheus

#3448`-c`/`--cache` option should default to HTTPS instead of HTTP

#3469Better distinguish between "tagged" and "released" in workflows

#3471Add the ability to specify post-registration messages

#3485API docs hard to read in dark mode

#3495Director: goroutine accumulation and client timeouts due to `context.Background()` in stat path

#3496Included supported versions in config documentation

#3498Strongly-Typed Object Schemas for `parameters.yaml`

#3503Cache Self and Director tests should test both cache hit and cache miss scenarios

#3505Issuer key auto-update never runs on Caches

#3511Director: goroutine leak and client timeouts from a blocking `errgroup.Wait()` in the `serverAds` eviction handler

#3520Tighten Prometheus label

#3527Add in more scitokens/authfile parsing functionality.

#3529Use Debug or Trace logging level for multiuser_UserSentry messages

#3544API Documentation is Incorrect/Incomplete consistently

#3545Code-first Open API Specification

#3550Switch the default built-in issuer to "embedded"

#3555Date input form doesn't accept ISO 8601 / 24h formats, and invalid entry causes unrecoverable state (month locks to 12)

#3579Fix Flaky Tests

#3582Update `pelican object sync` to work with individual objects

#3621logging: malformed monitoring packet should not be logged as "error"

#3634"Failed to advertise" message points user to the Director's webpage, rather than the Registry's

#3640goreleaser failed to compile due to missing pnpm

#3646Wrong API endpoint URLs under the "federation in a box" scenario

#3647Make a knob for a Read Only Configuration page

#3653`go generate` no longer updates generated docs for CLI commands

#3680VSCode Source Control (Git) cluttered by too many files generated by pnpm

#3690Mark `{Registry,Director,Origin,Cache}.DbLocation` as deprecated in the doc

#3694Error.Is not properly matching

#3696Cached token authorization is refreshed on use, so an expired token stays authorized

#3714Integrate Scope Plugin

#3723Improve UX for working with checksums

#3724Remove unnecessary warning from default client actions regarding checksums

#3725Document how to use existing client options --checksum-algorithm and --checksums

#3727Document object-checksum relationship, routing, and verification

#3728Document user-facing recipe of how to use checksums feature

#3729Add client configuration option for specifying checksum algorithm

#3730Cache Inode usage and purging

#3731Bump xrdhttp-pelican version to 0.0.13 in images

#3733Be able to skip director query for `pelican token create` command

#3740Missing man pages in `pelican-dev` container image

#3741Enable export of all scraped data to external Prometheus DBs

#3744Prometheus cardinality limits config is non-functional

#3745Gin's `url` and `host` Prometheus labels are unbounded

#3746Unable to reset web UI password via Pelican CLI

#3747Cache v2 Error state due to "xrootd has not been started"

#3748Director drops `RawPath` when building redirects, collapstion `%2F` in object paths

#3749Add Checksumming on upload attempts and don't return "failure if identical"

#3762`make` throws unnecessary error message every time if frontend `index.html` is not built

#3764CI test for `no-docs-required` label in GitHub Issues is not functioning

#3767Wrong OIDC discovery endpoint for GitHub

#3771Display full path and handler name for HTTP handlers

#3772Negitive Numbers in WebUI Config considered Non-Int?

#3775Possible timestamp collision in Director-Origin health test

#3776Gin ignores environment variable and locked into release mode

#3777Allow the owner to edit the descriptive fields of an approved registration

#3781Inefficiencies in CI/CD testing workflows

#3782GitHub Action for running "go test" requires more space than is officially available

#3783Missing buttons for denied Cache/Origin registration

#3785GitHub Actions management of Go's build cache is unhelpful and wasteful

#3786"Build and Test" workflow makes poor use of the GitHub Actions cache

#3787Store a namespace's auth state in the registry so caches keep serving it when no origin is online

#3792Some symbols are not resolvable by Gopls in VS Code

#3794GitHub Actions run most of the unit test suite twice on Linux and macOS

#3795Go tests run CLI commands from a binary that is never released, and rebuild it in every package

#3796GitHub Actions build the web UI for unit tests for no real benefit

#3805Director test on V2 Cache fails to evict test file

#3807V2 Cache health test result still displayed as XRootD health test result in Director Panel

#3808Speed up tests on CI/CD

#3809Missing registration banner in Cache

#3815`transfer` is missing in `ServerTypeFromString()` in `server_structs/generic_server.go`

#3817`pelican-server serve --help` misses broker, localcache and transfer modules in help test

#3820Improve collection scope minting and checking.

#3826Director tests between v26 PosixV2 Origin <-> v26 Director, 404 error on PUT

#3832Standalone Origin fails to start when (unused) Federation.DiscoveryUrl is set, instead of ignoring it

#3835`pelican-server` reports wrong JWT profile name in error message

#3836SciToken triggers warning message and unnecessary retries but WLCG token does not

#3837Configure Dependabot to automatically update more dependencies

#3838Director: adaptive-sort load weight ignores cache capacity, so a busy high-capacity cache is ranked last even for its local clients

#3839Display "User ID" for Registration ownership as the user's username instead of raw database ID

#3841Use credentials file for "Destination Directory STAT" if no token is given

#3844Origin rejects SciToken with `read` scope but `storage.read` works fine

#3851Clean Up Website Navigation

#3861`TestHandleCLIExecutableAlias` is flakey on Windows

#3865Update xrootd and plugin versions in 26.0 images

#3868Local cache refuse valid SciToken

#3875Storage authorization depends on how a token spells its scopes

#3885Token can be minted with mixed scope even if profile is explicitly specified

#3893Director drops an origin's whole advertisement when one newly exported namespace is not yet approved

#3902User-specified checksum algorithm is ignored in client upload verification

#3903Bind `Client.DefaultChecksumAlgo` to object get and stat

#3904Empower AI agents to drive Pelican transfers with client-agent and MCP

#3906Lotman crashing issue on restarts.

#3908Finalize Origin Client

#3911CI/CD should call out when the client binary increases in size beyond some threshold

#3918Pelican Client considers "no space left on device" to be a Retryable Error

#3920GitHub Actions jobs with write access are not as locked down as they should be

#3923Store auth state in Registry

#3928XRootD origin does not provide SHA checksum

#3930XRootD origin computes CRC32 in a different way from the client

#3931Configure Dependabot to automatically update dependencies on long-lived release branches

#3932"Check Rebase on Main" vacuously passes for all PRs from forks

#3935Clicking on Group in Groups pages fire Scope requests for all groups

#3941`LaunchRequestMonitor` retains every broker response body until shutdown

#3942[CacheV2] Can't fetch anything unless the director hosts federation metadata

#3945Origin's "Shutting Down" advertisement for graceful restart handling causes "No sources found for the requested path"

#3949Authorization error messages with public operations on standalone origin

Publish · Dec 3, 2026

Pelican Dev Zone

Pelican Dev Zone

v26.1

Assignees

Labels

Timeline