v0.34.0_1

src/runtime/updates.rs

@@ -147,12 +147,24 @@ impl App {
             // intentionally decoupled from the configuration revision, so unrelated
             // control-plane saves do not invalidate hot/cold objects.
             let envelope = prepared.envelope.clone();
+            // After commit, reject late cache tickets from the old routing
+            // snapshot before any scope purge. Existing unaffected objects stay.
+            this.cache.set_control_revision(envelope.revision);
             match invalidation {
                 CacheInvalidation::All(cache_revision) => {
                     this.cache.purge(Some(cache_revision));
                 }
+                CacheInvalidation::Scopes(scopes) => {
+                    for scope in scopes {
+                        this.cache.purge_scope(&scope);
+                    }
+                }
                 CacheInvalidation::None => {}
             }
+            // A COLD entry is usable after restart only if its scope still has
+            // the same origin/content policy. Publish the fingerprints after
+            // the cache generation barriers but before the routing snapshot.
+            this.cache.replace_scope_revisions(vhost_cache_revisions(&envelope.config));
             this.cache.configure(envelope.config.cache.clone());
             this.rate_limiter.reset();
             this.logs.configure(envelope.config.logging.clone());