1.35.3 — CDN enable completes on a live account; REST never writes the secrets column

2026-10-15

Enabling CDN delivery on a real AWS account now finishes: the CDN record's id columns fit CloudFront's 36-character key group ids. A REST body can no longer write a model's encrypted secrets column on any model.

Fixed

• Enabling CDN delivery created every AWS resource and then failed to save the CdnDistribution row, because a CloudFront key group id is a 36-character UUID and the column held 32. distribution_id, oac_id and key_group_id are now 64 characters. A re-run after upgrading adopts what the failed run created.
• mojo_secrets, the encrypted secrets column of every MojoSecrets model, is never taken from a REST body, on any model, alongside id, pk, created and uuid.

Upgrade notes

• Migration fileman.0018 widens three columns on fileman_cdndistribution. No data changes.