SILO 20261026 is the coordinated Server release with mcli 20261026, Console v2.5.1 and silo-pkg v3.15.2. PGSTY KES 20261026 is available as the optional external key service.
Tag: RELEASE.2026-10-26T00-00-00Z · Package version: 20261026000000.0.0 · Source: c3ad836aed0d8a7d23c2e44a5eaa3009d08525e3.
English
Changes since Server 20261018:
- Restore LDAP login for normalized DNs with an impossible ASCII filename component over 255 bytes, while retaining fail-closed handling for unreadable revocation records and other storage errors (#250). Improve IAM policy reload locking and cancellation propagation.
- Make built-in policy Reset immediately restore the native definition. Reload committed policy state on peer/etcd notifications so delayed notifications preserve subsequent edits. Read live bucket inventory for Console refresh; object usage remains scanner-derived.
- Preserve the authoritative multi-pool object copy when ordinary or bulk deletion cleanup fails; improve delete-marker placement and protect referenced tier objects (#257 / #256).
- Retain tier payloads when lifecycle expiration only creates a delete marker, including non-null versions in versioning-suspended buckets (#253 / #252).
- Preserve the FULL_OBJECT checksum type when replicating multipart CRC objects, preventing BadDigest at the destination (#255 / #254).
- Forward storage-RPC deletion options required by overwrite rollback. Preserve established drive/RPC deadlines, cancellation, object locking, read quorum and healing policy.
- Embed Console v2.5.1 with the 2.5 interface, permissions, task and identity-management improvements, high-latency diagnostics, and subsequent group/OIDC/session/export/ZIP/accessibility fixes. Select released mcli 20261026 and silo-pkg v3.15.2, including identity-aware client caches, resync/batch observation and exit-code repairs, alias regions and upstream SDK fixes.
- Build with Go 1.27.3 and upstream minio-go
v7.4.2-0.20261025165926-320af050c445(a pinned commit, not a v7.4.2 tag). Refresh SFTP, etcd, NATS and cloud dependencies; preserve Kafka protocol 2.1 defaults and legacy DARE v1 reads. Ship Windows ZIP archives, native Linux packages, SBOMs and provenance; correct RPM fingerprint verification in finalization. Standard images bundle mcli 20261026 and static curl 8.23.0 and apply the documented certificate-trust mitigation.
Upgrade all participating Server processes and replication sites as a coordinated stack. Back up IAM state, configuration and encryption keys; verify LDAP/OIDC login, policy Reset, bucket refresh, replication, versioned reads and encrypted-object decryption. Update mcli automation for pending batch states and nonzero partial resync mutation exits. A successful query of an already Failed/Canceled resync job still exits zero.
A timeout does not prove that underlying I/O stopped or that a write failed to commit. Late commits, delayed rollback and stale values/tags remain possible after partial failure, lease loss or partitions. This release adds no distributed fencing or strict cross-pool read recovery and cannot restore previously lost data. Durable multipart listing (#79 / #217) and webhook hot reload (#249) are not included; #251 remains open. Earlier candidate test totals do not certify the final source.
The exact release source passed Go CI, VulnCheck and Release gates. Finalize refreshed the signed packages' checksums, SBOMs and build provenance. Platform and package artifacts were verified against their source and checksum manifests before publication. Local Linux arm64 acceptance passed 88 baseline four-node S3 checks, 88 upgraded four-node checks and 136 eight-node multi-pool checks. Historical objects, tags, encryption and multipart uploads survived the coordinated upgrade. Rolling restarts, SIGKILL and a 75-second pause/recovery passed; all 408 acknowledged writes were read back with matching hashes and complete listings. The fixture uses readiness checks and bounded retries for transient connection/recovery errors. The native trusted-TLS mcli suite and 16 persistence checks also passed.
中文
SILO 20261026 与 mcli 20261026、Console v2.5.1、silo-pkg v3.15.2 协调发布；PGSTY KES 20261026 作为可选的外部密钥服务独立部署。自 Server 20261018 以来：
- 修复规范化 LDAP DN 的纯 ASCII 文件名分量超过 255 字节时的登录失败，仍对不可读撤销记录和其他存储错误采用 Fail-Closed（#250）；优化 IAM 策略重载锁与请求取消传播。
- 内置策略 Reset 立即恢复原生定义，对端／etcd 通知重新加载已提交状态，避免延迟通知抹去后续编辑。Console 刷新读取实时存储桶清单；对象用量仍由扫描器更新。
- 普通及批量跨池删除清理失败时保留权威对象副本，改善删除标记放置，并保护仍被引用的远端分层对象（#257 / #256）。
- 生命周期过期仅创建删除标记时保留远端层载荷，包括版本控制暂停桶中的非 null 版本（#253 / #252）。
- 分片 CRC 对象复制保留 FULL_OBJECT 校验和类型，避免目标端 BadDigest（#255 / #254）。
- 转发覆盖回滚所需的存储 RPC 删除选项，保留既有驱动器／RPC 超时、取消、对象锁、读取仲裁与修复策略。
- 内嵌 Console v2.5.1，包含 2.5 界面、权限、任务与身份管理改进、高延迟诊断，以及用户组／OIDC／会话／凭据导出／ZIP／无障碍修复。选用正式发布的 mcli 20261026 与 silo-pkg v3.15.2，纳入客户端缓存身份隔离、resync／batch 状态及退出码、别名 region 与上游 SDK 修复。
- Go 升至 1.27.3，上游 minio-go 固定为
v7.4.2-0.20261025165926-320af050c445（不是 v7.4.2 标签）。更新 SFTP、etcd、NATS 与云依赖，保留 Kafka 默认协议 2.1 和旧 DARE v1 读取兼容。提供 Windows ZIP、Linux 原生包、SBOM 与溯源证明，修正 finalize 的 RPM 指纹校验。标准镜像内置 mcli 20261026、静态 curl 8.23.0，并应用已说明的证书信任缓解措施。
协调升级所有参与的 Server 进程与复制站点。备份 IAM、配置和加密密钥，核验 LDAP／OIDC 登录、策略 Reset、存储桶刷新、复制、历史版本及加密对象读取。mcli 自动化需处理新增 batch pending 状态和 resync 部分修改失败的非零退出码；成功查询已有 Failed／Canceled 任务仍退出零。
超时不证明底层 I/O 已停止或写入没有提交。部分失败、租约丢失或网络分区后仍可能发生延迟提交、延迟回滚与旧值／旧标签读取。本版不增加分布式 fencing 或严格跨池读取恢复，也不能修复历史丢失数据。持久分片列表（#79 / #217）与 webhook 热重载（#249）未纳入，#251 仍开放。早期候选测试数量不作为最终源码验收证据。
精确发布源码通过 Go CI、VulnCheck 与 Release 门禁。两个 RPM 使用 PGSTY 密钥签名，Finalize 已刷新签名后软件包的校验和、SBOM 与溯源证明；正式发布前核验平台及软件包制品与源码、校验清单的一致性。 本地 Linux arm64 验收通过基线四节点 88 项、升级后四节点 88 项和八节点多池 136 项 S3 检查；历史对象、标签、加密及跨升级分片上传验证通过。滚动重启、SIGKILL 和 75 秒暂停恢复通过，408 个已确认写入对象全部读回，哈希及列表完整。测试包含就绪检查，并对瞬时连接／恢复错误采用有界重试。原生可信 TLS 的 mcli 套件与 16 项持久化检查亦通过。
All Server changes / 服务端完整变化 · mcli · Console · silo-pkg · KES · Documentation / 文档