Security Refer to CVE-2025-31489 What's Changed fix(templates): replace dash with underscore by @itsJohnySmith in #19566 build(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 by @dependabot in #21055 Updating PromQL queries to include tilde needed to work with 'all' variable by @excircle in #21054 build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 by @dependabot in #21…
What's Changed decom: Ignore orphan delete markers in verification stage by @vadmeste in #21106 ilm: Expect objects with only free versions when scanning by @krisis in #21112 Full Changelog: RELEASE.2025-04-03T14-56-28Z...RELEASE.2025-04-08T15-41-24Z
What's Changed move to go1.24 by @harshavardhana in #21114 Fix buffered streams missing final entries by @klauspost in #21122 typo: fix error msg for decoding XL headers by @wooffie in #21120 build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 in /docs/debugging/s3-verify by @dependabot in #21185 typo: fix return of checkDiskFatalErrs by @wooffie in #21121 build(deps): bump golang.org/x/cr…
Highlights Removal of boringcrypto support - since go1.24.x, you can now simply use the GOFIPS environment variable on the same binary. Embedded UI Console is now deprecated and moved to object-browser External IDP logins via LDAP/OIDC are removed as well; these are now available as part of the AiStor Product. STS APIs continue to work if someone wishes to build UI in front. For all paying custome…
What's Changed s3: Fix early listing stopping when ILM is enabled (#472) by @vadmeste in #21246 Update README.md by @varun28sharma in #21125 fix: empty fileName cause Reader nil for PostPolicyBucketHandler by @jiuker in #21323 fix: panic for TestListObjectsWithILM by @jiuker in #21322 modernizes for loop in cmd/, internal/ by @12ya in #21309 Add targetArn label for bucket replication metrics by @s…
What's Changed Update Console to latest version by @bexsoft in #21397 CopyObject must preserve checksums and encrypt them if required by @marktheunissen in #21399 fix: admin api - SetPolicyForUserOrGroup avoid nil deref by @wooffie in #21400 fix: lambda handler response to match the lambda return status by @harshavardhana in #21436 Full Changelog: RELEASE.2025-06-13T11-33-47Z...RELEASE.2025-07-18T…
What's Changed Add support for X25519MLKEM768 by @loganaden in #21435 fix: restrict SinglePool by the minimum free drive threshold by @jiuker in #21115 wait for metadata reads on minDisks+1 for HEAD/GET when data==parity by @harshavardhana in #21449 fix boundary value bug when objTime ends in whole seconds (without sub-second) by @supermp in #21419 simplify validating policy mapping by @0xMALVEE i…
What's Changed Update console to v2.0.3 by @bexsoft in #21474 bring more idempotent behavior to AbortMultipartUpload() by @jiuker in #21475 fix: record extral skippedEntry for listObject by @jiuker in #21484 feat: add variable for datasource in grafana dashboards by @hornjo in #21470 imagePullSecrets consistent types for global , local by @0xMALVEE in #21500 Optimize outdated commands in the log b…
Security A CVE was reported Privilege Escalation via Session Policy Bypass in Service Accounts and STS and fixed in this release, All users are advised to download and upgrade their MinIO setup immediately. To install the latest release go install -v github.com/minio/minio@latest OR go install -v github.com/minio/minio@RELEASE.2025-10-15T17-29-55Z For container environments, please clone the sourc…
Release version RELEASE.2025-09-06T17-38-46Z