You'll noticeTier: how much it should matter to you
2Useful: my rating, 1 to 5
3Signal: worth watching, 1 to 5
ArtifactsArea: what it touches
New FeaturesKind: in v2.1.239,
New FeaturesSection of the release
What
Listing and reading files from a published artifact go through the session gateway relay only, and failures now say which kind they are: a credential the gateway would not accept, an artifact the relay refused, or a session with no relay at all, which cannot retry the read locally.
Details
The relay-only path also turns off the public-read fallback.
A 403 or 404 from the relay is reported as a refusal; a 401 is the new unauthorized case, which did not exist in v2.1.238.
Evidence
the session gateway did not accept this session's credential for the artifact relay; retrying from here will not help
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
