Breaking Release
Major breaking changes including removal of boringcrypto support, deprecation of embedded UI Console, and removal of external IDP logins via LDAP/OIDC. These features are now available in the AiStor product, with AiStor binaries maintaining backwards compatibility for existing open source deployments.
Highlights
- Removal of boringcrypto support - since go1.24.x, you can now simply use the GOFIPS environment variable on the same binary.
- Embedded UI Console is now deprecated and moved to object-browser
- External IDP logins via LDAP/OIDC are removed as well; these are now available as part of the AiStor Product.
- STS APIs continue to work if someone wishes to build UI in front.
- For all paying customers, we recommend that if you are planning to upgrade, you should upgrade to AiStor.
- Open a SUBNET issue so that we can guide you further on the AiStor migration.
- AiStor binaries are backwards compatible, so you can upgrade your existing open source deployment to AiStor seamlessly.
What's Changed
- Correct spelling by @shtripat in #21225
- update
minio/kms-go/kmsSDK by @aead in #21233 - Fix nil dereference in adding service account by @taran-p in #21235
- Use go mod tool to install tools for go generate by @klauspost in #21232
- Add documentation for replication_max_lrg_workers by @cniackz in #21236
- fix: after AbortMultipartUpload can do PutObjectPart success that sta… by @jiuker in #21229
- typo: return actual error from RemoveRemoteTargetsForEndpoint by @wooffie in #21238
- feat: support nats nkey seed auth by @matthewdavidlloyd in #21231
- fix: track object and bucket for exipreAll by @jiuker in #21241
- cleanup: use NewWithOptions replace the Deprecated one by @jiuker in #21243
- return error for AppendObject() API by @harshavardhana in #21272
- Update UI console to the latest version by @bexsoft in #21278
- Allow FTPS to force TLS by @klauspost in #21251
- remove support for FIPS 140-2 with boringcrypto by @aead in #21292
- fix: unable to get net.Interface cause panic by @jiuker in #21277
- Update Console UI to latest version by @bexsoft in #21294
- heal: Avoid disabling scanner healing in single and dist erasure mode by @vadmeste in #21302
- fix: Use mime encode for Non-US-ASCII metadata by @jiuker in #21282
- docs: use github-style-notes in the readme by @CommanderStorm in #21308
New Contributors
- @CommanderStorm made their first contribution in #21308
Full Changelog: RELEASE.2025-04-22T22-12-26Z...RELEASE.2025-05-24T17-08-30Z
Source: original entry ↗
More from MinIO
Follow MinIO to get its new changes in your feed and email digest.
Security and bug fix release
This release addresses security vulnerability CVE-2025-31489 and includes multiple bug fixes, dependency updates, and improvements including JWT dependency bumps, template fixes, STS token revocation API, and various stability enhancements across the codebase.
Bugfix Release
Fixed decommissioning to ignore orphan delete markers during verification and corrected ILM scanning to properly handle objects with only free versions.
Bugfix Release
Multiple bug fixes and dependency updates including corrections to buffered streams, error handling, KMS credentials support, and security patches for Go libraries. Upgraded to Go 1.24 and improved batch expiry job reporting.