Bugfix Release
Multiple bug fixes and dependency updates including corrections to buffered streams, error handling, KMS credentials support, and security patches for Go libraries. Upgraded to Go 1.24 and improved batch expiry job reporting.
What's Changed
- move to go1.24 by @harshavardhana in #21114
- Fix buffered streams missing final entries by @klauspost in #21122
- typo: fix error msg for decoding XL headers by @wooffie in #21120
- build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 in /docs/debugging/s3-verify by @dependabot in #21185
- typo: fix return of checkDiskFatalErrs by @wooffie in #21121
- build(deps): bump golang.org/x/crypto from 0.32.0 to 0.35.0 in /docs/debugging/inspect by @dependabot in #21192
- build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @dependabot in #21200
- build(deps): bump golang.org/x/net from 0.34.0 to 0.38.0 in /docs/debugging/s3-verify by @dependabot in #21199
- build(deps): bump github.com/nats-io/nats-server/v2 from 2.9.23 to 2.10.27 by @dependabot in #21191
- Fix shared error buffer by @klauspost in #21203
- support autogenerated credentials for KMS_SECRET_KEY properly by @harshavardhana in #21223
- fix: batch expiry job doesn't report delete marker in batch-status me… by @jiuker in #21183
- Nats tls handshake first by @matthewdavidlloyd in #21008
New Contributors
- @matthewdavidlloyd made their first contribution in #21008
Full Changelog: RELEASE.2025-04-08T15-41-24Z...RELEASE.2025-04-22T22-12-26Z
Source: original entry ↗
More from MinIO
Follow MinIO to get its new changes in your feed and email digest.
Security and bug fix release
This release addresses security vulnerability CVE-2025-31489 and includes multiple bug fixes, dependency updates, and improvements including JWT dependency bumps, template fixes, STS token revocation API, and various stability enhancements across the codebase.
Bugfix Release
Fixed decommissioning to ignore orphan delete markers during verification and corrected ILM scanning to properly handle objects with only free versions.
Breaking Release
Major breaking changes including removal of boringcrypto support, deprecation of embedded UI Console, and removal of external IDP logins via LDAP/OIDC. These features are now available in the AiStor product, with AiStor binaries maintaining backwards compatibility for existing open source deployments.