Signed URLs are now available for Vercel Blob

Vercel Blob now supports time-bound signed URLs for scoped, secure access without exposing your entire Blob store. Each signed URL is scoped to a single operation (put, get, head, or delete), a single pathname, and an expiry up to 7 days. Features include:

• Direct uploads from the browser: Upload URLs (put) support multipart for streaming large files straight to Blob storage
• Conditional deletes: Delete URLs accept an ifMatch option so deletion only applies if the object hasn't been overwritten since the URL was signed
• OIDC integration: Your server authenticates via OIDC, generates signed tokens, and produces narrowly scoped URLs for the browser, keeping your BLOB_READ_WRITE_TOKEN server-side

Update @vercel/blob to 2.4.0 or later.