mcli 20261112

mcli 20261112 is released. Package version: 20261112000000.0.0 · Tag: RELEASE.2026-11-12T00-00-00Z · Source: a37a9f054fba.

Standalone archives, Linux packages and checksums are attached. Docker images for linux/amd64 and linux/arm64 are published at pgsty/mc:RELEASE.2026-11-12T00-00-00Z and pgsty/mc:latest from the verified Linux release archives. Existing Server and Console builds retain their embedded client versions until upgraded.

English

This maintenance release hardens IAM/bucket policy validation, aligns access-key inline-policy reset behavior across the SILO stack, and updates the toolchain and base dependencies:

• Adopt silo-pkg v3.16.1 with strict JSON policy decoding in policy.ParseConfigStrict and policy.ParseBucketPolicyConfig, rejecting unknown fields, trailing tokens, malformed principals, and unsupported NotPrincipal entries instead of silently ignoring them.
• Allow explicit empty policy documents ({} or {"Statement":[]}) when resetting inline policies to parent inheritance in admin accesskey edit --policy, idp ldap accesskey edit --policy, and idp openid accesskey edit --policy, while rejecting unknown fields and non-object inputs (#78). Omitting --policy continues to preserve the existing inline policy on SILO 20261112.
• Require Go 1.27.4 across source, CI, and the development build image.
• Update Go base libraries, grpc-gateway to v2.33.0, grpc to v1.85.0, go-humanize to v1.1.0, compress to v1.20.4, terminfo to v1.2.1, GoReleaser to v2.20.1, and refresh pinned container bases while retaining the verified minio-go, gjson, systemd, terminal-width, and tablewriter compatibility selections.

The maintained server target is PGSTY SILO. Upstream MinIO and other S3-compatible services remain best effort.

中文

mcli 20261112 已正式发布。 本次维护版本收紧策略 JSON 解析校验、对齐访问密钥内联策略重置语义，并升级构建工具链与基础依赖：

• 升级 silo-pkg v3.16.1，启用 policy.ParseConfigStrict 与 policy.ParseBucketPolicyConfig 严格 JSON 解码，拒绝未知字段、尾部多余 token、非法 Principal 以及未实现的 NotPrincipal，不再静默忽略。
• 允许在 admin accesskey edit --policy、idp ldap accesskey edit --policy、idp openid accesskey edit --policy 中传入显式空策略文档（{} 或 {"Statement":[]}）以将内联策略重置为继承父用户权限，同时继续拒绝未知字段与非对象输入（#78）；在配合 SILO 20261112 时，省略 --policy 将保持既有内联策略不变。
• 源码、CI 与开发构建镜像统一要求 Go 1.27.4。
• 更新 Go 基础库、grpc-gateway v2.33.0、grpc v1.85.0、go-humanize v1.1.0、compress v1.20.4、terminfo v1.2.1、GoReleaser v2.20.1 及固定基础镜像摘要，保留经验证的 minio-go、gjson、systemd、终端宽度与 tablewriter 兼容选型。

正式维护目标为 PGSTY SILO，对上游 MinIO 和其他 S3 兼容服务保持尽最大努力（best-effort）兼容。

Source & Artifact Validation / 源码与产物验证

Go tests · Cross-compilation · Vulnerability check · Release pipeline gate · Release CI

All 19 attached assets match their GitHub SHA-256 digests and provenance attestations. Both RPMs (x86_64 and aarch64) are signed with the maintainer's public key (9592A7BC7A682E7333376E09E7935D8DB9BD8B20) with matching .sha256sum sidecars.

Changes since 20261109 · Changelog