What's Changed

• Reshape jobs API: split into Backend/Queue/Runner with status, watch, list, cancel by @irees in #606
• Support both GBFS 2.x and 3.x by @irees in #613
• Remove aws sdk go v1 by @irees in #614
• Move dbmigrate commands into the packages that own their embedded data by @irees in #615
• Use static interface assertions by @irees in #616
• Prepare for additional Checker interfaces by @irees in #617
• Context enrichers by @irees in #618
• Bump to go 1.26.3, deps by @irees in #619
• Back out GraphQL mutations for permissions by @irees in #620
• Geohash indexing for feed versions by @irees in #622
• Additional PermFilter checking by @irees in #623
• Improve search behavior and consistency by @irees in #624
• Remove additional panics in request path by @irees in #625
• Partial rebuild-stats by @irees in #626
• Harden github actions and pin github action dependencies by @irees in #627
• Replace npx FGA model generator with in-repo Go generator by @irees in #638
• Refresh dependencies and switch Dependabot to security-only PRs by @irees in #639
• Accept integer enum values for ObjectType and Relation in JSON request bodies by @drewda in #640
• Fix group issue by @irees in #641
• Minor fixes to stop buffering by @irees in #642
• Optimize census buffer query by @irees in #643
• Specify automatic/manual import by @irees in #645
• Default admin-submitted jobs to the submitter's user ID by @drewda in #644
• Bound copier and validator memory by @irees in #648
• Treat stops.txt as conditionally required for flex feeds by @drewda in #647
• Bound shape memory during import and validation by @irees in #649
• Job artifacts by @irees in #646
• Close reader in rebuild-stats to remove downloaded temp files by @drewda in #651
• Use s3manager by @irees in #652

Full Changelog: v1.3.3...v1.3.4

• [closed] Fix materialized views #612
• [closed] add a justfile with dev commands & spec snapshots #560
• [closed] route REST endpoint & GraphQL resolver: add filtering by serves_stop_onestop_id #577
• [closed] Update and improve GraphQL descriptions #611
• [closed] Check and fix temporary file cleanup #580
• [closed] Support feed authorization in validate command #599
• [closed] Cap HTTP redirect hops #600
• [closed] Checker fails closed #609
• [closed] Consolidate dependabot upgrades #610
• [closed] export endpoint: optionally apply a sort order to the CSVs in the output zip #558
• [closed] Expose created_at/updated_at on Stop, Pathway, and Level GraphQL types #607
• [closed] Add a test feed with real pathways data #608
• [closed] Use safer http fetch by default #604
• [closed] Upgrade to go 1.26 #601
• [closed] Fix Redis connection leak in RTFinder pub/sub #594
• [closed] Filter tenant/group children #593
• [closed] Add users resolvers and additional tenant/group filters #590
• [closed] Permissions in GraphQL API #581
• [closed] Use JWKS for fetching public keys #584
• [closed] regenerate pb files with protoc-gen-go v1.36.11 #583
• [closed] fix REST OpenAPI redirect to include mount path #582
• [closed] Authz simplify #578
• [closed] fix REST OpenAPI redirect #579
• [closed] expose arrive_by flag in directions GraphQL API #567
• [dependencies][go] Bump google.golang.org/grpc from 1.65.0 to 1.79.3 #575
• [closed] stop REST endpoint: expose filtering by location_type #576
• [closed] Additional indexes on (feed_version_id,id) #574
• [closed] Helper fn to wrap db with standardized query logger #573
• [closed] Ensure any existing data is cleared out before calling MaterializeFee… #571
• [closed] Improve error messages when record does not exist #570
• [closed] Init CLAUDE.md #569

• [closed] Update IANA timezone database to 2025c #568
• [closed] Log response size and duration #565
• [closed] Bump interline-io/log #564
• [closed] Adjust tl_segment_patterns; make way_id nullable #563
• [closed] expanding "Census" data resolvers #556
• [closed] Segment updates #562
• [closed] Make Azure file verification optional reverify by download #559
• [closed] Improve segments query (and debugging tools) #553
• [closed] Add WithPermFilter for more flexibility on perm caching #557

• [closed] writer for locations.geojson output #534
• [closed] validator command can now output JSON to stdout, with extras optionally included #537
• [closed] fix version command & remove duplication with the server version subcommand #539
• [closed] Verify data was written to storage correctly #540
• [closed] Import fetch jobs #543
• [closed] REST API: for single entity endpoints, return a 404 when no result #545
• [closed] Set feed visibility during dmfr sync #547
• [closed] REST API: include feed tags #546
• [closed] Additional DMFR subcommands #544
• [closed] Exponential backoff for 429 errors #542
• [closed] Bump interline-io/log #541

• [closed] Additional guards and checks for Flex trips #538
• [closed] Use the release commit SHA if available, otherwise fall back to context.sha #536
• [dependencies][go] Bump golang.org/x/crypto from 0.40.0 to 0.45.0 #526
• [closed] Initial schema update for Flex #530
• [closed] Migrating away from bad-entities tests #529
• [closed] Remove date tag from generated docs to reduce git churn #532
• [closed] Fix bug in tt.Seconds Scan #533
• [closed] Configurable error limit #531
• [closed] Improve rules/filters/validator/bestpractices organization #528
• [closed] GTFS-Flex: database, copier, validation support #527
• [closed] add a feed-version export REST endpoint #511
• [closed] Delete binary #521
• [closed] Focus points #520
• [closed] Improvements to feed-state command #522
• [closed] Materialized route geometries #519
• [closed] Config option to use materialized views for active entities #518
• [closed] Sync materialized views to active set #515
• [closed] Minor fixes to feed-state command #514
• [closed] Feed state manager #513
• [closed] Update GraphQL documentation for census geographies #512
• [closed] Transformation filter #509
• [closed] Even more geography buffer improvements #508
• [closed] Allow floats that are integers to be valid integers #510
• [closed] Merge improvements #473
• [closed] Adjust fallback-week calculation to avoid incomplete weeks #506
• [closed] More limit fixes #507
• [closed] Optimizations for geography buffer queries #505
• [closed] More flexible query/resolver limits #503
• [closed] Include Action finder in example server #500
• [closed] Support level MultiPolygons #498
• [closed] Add explicit lt/lte/gt/gte checks #499
• [closed] Relax requirement for valid rows in stops.txt for fetch and import #356
• [closed] Use updated kin-openapi fork #496
• [closed] More validation of pathways #469
• [closed] Stop time query and loader optimizations #494
• [closed] Fix MatchEntityID #493
• [closed] Census geography and GTFS-RT lookup optimizations #492
• [closed] address security nitpicks from CodeQL #491
• [closed] Add server details to README #490
• [dependencies][go] Bump github.com/go-chi/chi/v5 from 5.0.10 to 5.2.2 #488
• [dependencies][go] Bump golang.org/x/image from 0.10.0 to 0.18.0 #487
• [closed] Adjust generated code diff #489
• [dependencies][go] Bump golang.org/x/oauth2 from 0.20.0 to 0.27.0 #486
• [closed] Merge transitland-server #485
• [closed] More query logger improvements #484
• [closed] More QueryLogger accuracy #483
• [closed] Use irees/squirrel fork #482

• [closed] release workflow needs more permissions #480
• [closed] Another try at Apple signing and notarization #479
• [closed] Trying again to fix Apple signing and notarization #478
• [closed] Remove application identity from gonconfig.json for Apple notarization process #477
• [closed] More fixes for Apple signing and notarization #476
• [closed] update Apple notarization references #475
• [closed] DMFR v0.6.0 #474
• [closed] trying again to trigger homebrew update, now with GH App credentials #471

• [closed] try to trigger homebrew update upon release #470
• [closed] Convert GTFS Realtime Vehicle Positions to GeoJSON or GeoJSONL #467
• [closed] Shape max segment length #466
• [closed] Extract marker compatibility with new extension interface #464
• [closed] build on latest macOS Intel and arm64 runners #463
• [closed] GH Actions should name the uploaded artifact transitland-linux #462

• [closed] Fix GH Actions file paths for release assets #461
• [closed] Revert "GitHub Actions no longer needs to use an xlarge sized runner for Apple arm64 processor" #460
• [closed] Make Marker a standard extension type #459
• [closed] Change from debug to trace log for filter skips #458
• [closed] GitHub Actions no longer needs to use an xlarge sized runner for Apple arm64 processor #457
• [closed] add a checksum subcommand to get Transitland-style sha1 hash of static feed contents #455
• [closed] S3 acl #454
• [closed] remove GODEBUG=tlsrsakex=1 because it's only useful at run time (not build time) #453
• [closed] update out-of-date GH Actions depencies #452

• [closed] build transitland-lib to support insecure but still used RSA ciphers #451
• [closed] Census layers #450
• [closed] Update bootstrap.sh #449
• [closed] dbmigrate subcommand #443
• [closed] MultiPolygon support #448
• [closed] adm0/adm1 names and codes for census geographies, where available #447

• [closed] Improve layout of testdata directory #446
• [closed] TransferStopLocationTypeCheck #444