# Panfactum Changelog — edge.24-10-23

> Updates minimum Nix version requirement, dramatically improves module download efficiency, adds S3 public website hosting capabilities, enhances CloudFront CDN functionality, and fixes ECR Helm chart authentication.

## Highlights

- Minimum Nix version bumped to >= 2.23 — a check is now enforced in `.envrc`
- Panfactum modules now downloaded as gzipped tarballs — 90%+ bandwidth reduction, dramatically faster init
- New [`aws_s3_public_website`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_s3_public_website) module for serving files from S3 via CloudFront

## Breaking Changes

- The required Nix version has been updated to `>= 2.23` (up from `>= 2.18`). A check in the `.envrc` loading

## Additions

- Added a new module, [`aws_s3_public_website`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_s3_public_website), to enable serving files directly from an S3 bucket via CloudFront.
  - Impacts: iac-module `aws_s3_public_website` — New module for serving S3 files via CloudFront
- [`aws_cdn`](https://panfactum.com/docs/edge/reference/infrastructure-modules/submodule/aws/aws_cdn) can now handle CORS headers on behalf of origin servers and now uses 10x more efficient [CloudFront functions](https://docs.aws.amazon.com/AmazonCloudFront/latest/DeveloperGuide/cloudfront-functions.html) for
  - Impacts: iac-module `aws_cdn` — Added CORS handling and switched to CloudFront functions

## Improvements

- Panfactum modules are now downloaded as gzipped tarballs from an HTTPS server rather than requiring a full git clone. This

## Fixes

- Deploying modules that use Helm charts hosted in ECR (e.g., [`kube_karpenter`](https://panfactum.com/docs/edge/reference/infrastructure-modules/direct/kubernetes/kube_karpenter)) will now use the appropriate credentials.
  - Impacts: iac-module `kube_karpenter` — Fixed ECR Helm chart authentication credentials
  - Reference (issue-report): [pf-get-repo-variables returns wrong directory in .terragrunt-cache](https://github.com/Panfactum/stack/issues/119)
  - Reference (issue-report): [ECR token caching and public registry handling issues](https://github.com/Panfactum/stack/issues/70)
- Upgraded Argo Workflows to fix issues related to workflow timeouts being ignored.
  - Impacts: iac-module `kube_argo` — Upgraded to fix ignored workflow timeout issues

## Related Resources

- [JSON Data](https://panfactum.com/docs/changelog/edge.24-10-23.json): Machine-readable data
- [Channel Release List](https://panfactum.com/docs/changelog/edge.json): All releases in this channel