minio

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.

What's Changed

• Fix mysql notification target by @donatello in https://github.com/minio/minio/pull/14350
• Add ability to use custom commands by @Sea-you in https://github.com/minio/minio/pull/14227
• Allow bootstrapping policies with special characters in Helm by @FernFerret in https://github.com/minio/minio/pull/14356
• Allow policy bootstrapping with nil "Resource" in Helm chart by @FernFerret in https://github.com/minio/minio/pull/14359
• Fix config reset api not working by @anjalshireesh in https://github.com/minio/minio/pull/14368
• fix: do not reload disk format.json on a reconnected disk by @harshavardhana in https://github.com/minio/minio/pull/14351
• Apply dynamic config at sub-system level by @anjalshireesh in https://github.com/minio/minio/pull/14369
• ci: Always set disks as non root disks by @vadmeste in https://github.com/minio/minio/pull/14389
• Use custom transport for site replication by @poornas in https://github.com/minio/minio/pull/14391
• cache: improve error reported for atime check by @poornas in https://github.com/minio/minio/pull/14384
• reduce unnecessary logging during speedtest by @harshavardhana in https://github.com/minio/minio/pull/14387
• Add support for tier-remove and tier-verify by @krisis in https://github.com/minio/minio/pull/14382
• Send deployment id and minio version in http header by @anjalshireesh in https://github.com/minio/minio/pull/14378
• do not skip healing disks during deletes by @harshavardhana in https://github.com/minio/minio/pull/14394
• enable CI environment additionally for MINIO_CI_CD by @harshavardhana in https://github.com/minio/minio/pull/14395
• fix: clientId must be unique for all servers by @harshavardhana in https://github.com/minio/minio/pull/14398
• fix: openid config provider not initialized correctly by @hellivan in https://github.com/minio/minio/pull/14399
• Make audit webhook and kafka config dynamic by @anjalshireesh in https://github.com/minio/minio/pull/14390
• reject speedtest when there isn't enough disk space available by @harshavardhana in https://github.com/minio/minio/pull/14402
• select: Allow lower case 'is' by @klauspost in https://github.com/minio/minio/pull/14405
• fix: possible wrong path composition for keycloak user lookups by @hellivan in https://github.com/minio/minio/pull/14401
• fix: invalid parentUser id on OIDC auto expiration by @hellivan in https://github.com/minio/minio/pull/14400

New Contributors

• @FernFerret made their first contribution in https://github.com/minio/minio/pull/14356
• @hellivan made their first contribution in https://github.com/minio/minio/pull/14399

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-18T01-50-10Z...RELEASE.2022-02-24T22-12-01Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.

What's Changed

• fix: console logger regression with dynamic logger webhook registration by @harshavardhana in https://github.com/minio/minio/pull/14346

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-17T23-22-26Z...RELEASE.2022-02-18T01-50-10Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Logger webhook is now dynamic and does not require a server restart, refer #14289
• Fixes a ILM Transition issue when restoring objects from a remote tier, refer #14340

What's Changed

• Fix leaked healing goroutines by @klauspost in https://github.com/minio/minio/pull/14322
• Mark SUBNET credentials as sensitive by @anjalshireesh in https://github.com/minio/minio/pull/14320
• Add enable key to logger webhook help by @anjalshireesh in https://github.com/minio/minio/pull/14326
• Add fgprof (cpuio) profiles by @klauspost in https://github.com/minio/minio/pull/14321
• Update hourly tier-stats only on succesful tiering by @krisis in https://github.com/minio/minio/pull/14330
• Make logger webhook config dynamic by @anjalshireesh in https://github.com/minio/minio/pull/14289
• Handle non existent kms key correctly by @poornas in https://github.com/minio/minio/pull/14329
• allow clearing FIFO config as fallback by @harshavardhana in https://github.com/minio/minio/pull/14338
• Don't add free-version on restore-object by @krisis in https://github.com/minio/minio/pull/14340
• align 32bit integers with atomic values in structs by @harshavardhana in https://github.com/minio/minio/pull/14344

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-16T00-35-27Z...RELEASE.2022-02-17T23-22-26Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Add support for Accept-Encoding: gzip on GetObject(), refer #14226
• Cleanup of stale files in NAS gateway mode, refer #14295

What's Changed

• Always check for root disks unless MINIO_CI_CD is set by @vadmeste in https://github.com/minio/minio/pull/14232
• Minio helm chart improvements for user and policy creation by @jescalona-lf in https://github.com/minio/minio/pull/14216
• docs: turn-on more markdown rules and fix them by @harshavardhana in https://github.com/minio/minio/pull/14301
• Add GetObject gzip option by @klauspost in https://github.com/minio/minio/pull/14226
• nas: Cleanup stale background append files by @vadmeste in https://github.com/minio/minio/pull/14295
• doc: add console-address on all example by @khancyr in https://github.com/minio/minio/pull/14307
• fix: creating steep directory structure on trash folder by @harshavardhana in https://github.com/minio/minio/pull/14314

New Contributors

• @jescalona-lf made their first contribution in https://github.com/minio/minio/pull/14216
• @khancyr made their first contribution in https://github.com/minio/minio/pull/14307

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-12T00-51-25Z...RELEASE.2022-02-16T00-35-27Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Replication resync is now an active process for DR activities, refer #14266
• Speed up startup time by moving most sub-systems to non-blocking mode, refer #14240
• Extend cases for dangling objects further during GetObjectInfo(), refer #14273

What's Changed

• speed-up startup time, do not block on ListBuckets() by @harshavardhana in https://github.com/minio/minio/pull/14240
• fix: rename some function names to avoid confusion by @harshavardhana in https://github.com/minio/minio/pull/14262
• Fix network policies in modern kubernetes versions by @wilsonge in https://github.com/minio/minio/pull/14265
• prometheus: Add number of requests arrived since last scrape by @vadmeste in https://github.com/minio/minio/pull/14261
• Add subsystem level validation on config set by @anjalshireesh in https://github.com/minio/minio/pull/14269
• Tier metrics prometheus by @krisis in https://github.com/minio/minio/pull/13413
• fix: allow danging objects to be purged properly deleteMultipleObjects() by @harshavardhana in https://github.com/minio/minio/pull/14273
• fix the error logs have been omitted because of retryCount never exc… by @DanielQujun in https://github.com/minio/minio/pull/14268
• gateway: Enable bucket forwarding handler by @vadmeste in https://github.com/minio/minio/pull/14277
• restore: Add quotes some fields in x-amz-restore header by @vadmeste in https://github.com/minio/minio/pull/14281
• Fix adding bucket forwarder handler in server mode by @vadmeste in https://github.com/minio/minio/pull/14288
• Refactor replication resync to be an active process by @poornas in https://github.com/minio/minio/pull/14266
• parallelize background cleanup on local disks across sets by @harshavardhana in https://github.com/minio/minio/pull/14290
• Bump github.com/nats-io/nats-server/v2 from 2.3.2 to 2.7.2 by @dependabot in https://github.com/minio/minio/pull/14297
• cleanup markdown docs across multiple files by @harshavardhana in https://github.com/minio/minio/pull/14296

New Contributors

• @wilsonge made their first contribution in https://github.com/minio/minio/pull/14265
• @DanielQujun made their first contribution in https://github.com/minio/minio/pull/14268

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-07T08-17-33Z...RELEASE.2022-02-12T00-51-25Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.

What's Changed

• init console server after server config is initialized (02/07/22) (Harshavardhana)

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-05T04-40-59Z...RELEASE.2022-02-07T08-17-33Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Add support for removing site(s) from multi-site replication, refer #14104
• Add support for "drive" speedtest - refer #14182

What's Changed

• Add API for removing site(s) from site replication by @poornas in https://github.com/minio/minio/pull/14104
• add support for drive speedtest by @wlan0 in https://github.com/minio/minio/pull/14182
• upgrade container base image to ubi-minimal:8.5 by @harshavardhana in https://github.com/minio/minio/pull/14231
• when o_direct is disabled do not attempt fadvise call by @harshavardhana in https://github.com/minio/minio/pull/14230
• Remove notification from NotificationSys on bucket deletion by @poornas in https://github.com/minio/minio/pull/14236
• ignore unreadable metrics on certain closed systems by @harshavardhana in https://github.com/minio/minio/pull/14234
• improve messaging for hotfix builds by @harshavardhana in https://github.com/minio/minio/pull/14245
• return error with empty x-amz-copy-source-range headers by @harshavardhana in https://github.com/minio/minio/pull/14249
• fix: quorum requirement for DeleteMarkers and parity upgraded objects by @harshavardhana in https://github.com/minio/minio/pull/14248
• Use madmin-go v1.3.1 by @anjalshireesh in https://github.com/minio/minio/pull/14250
• speedup getFormatErasureInQuorum use driveCount by @harshavardhana in https://github.com/minio/minio/pull/14239
• Add ability to mount extra minio env from secret by @Sea-you in https://github.com/minio/minio/pull/14254

New Contributors

• @Sea-you made their first contribution in https://github.com/minio/minio/pull/14254

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-02-01T18-00-14Z...RELEASE.2022-02-05T04-40-59Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• FIFO bucket quota feature is removed due to sub-optimal implementation, out of memory situations, it will be added back as ILM capacity based expiration in future #14206
• Hard quota value is added as part of Prometheus metrics for alert monitoring #14222
• Improvements in SiteReplicationStatus to filter by specific entities in site-replication #14177
• Callhome improvements bring SUBNET proxy persistence support #14225

What's Changed

• Added filters for SiteReplicationStatus API by @poornas in https://github.com/minio/minio/pull/14177
• Slight tweaks to SUBNET portion of the template by @eco-minio in https://github.com/minio/minio/pull/14205
• Return all stats in SiteReplicationStatus API if options unset by @poornas in https://github.com/minio/minio/pull/14207
• fix: possible crash if private.key is empty by @harshavardhana in https://github.com/minio/minio/pull/14208
• ignore disk metrics for single drive mode by @harshavardhana in https://github.com/minio/minio/pull/14212
• remove FIFO bucket quota, use ILM expiration instead by @harshavardhana in https://github.com/minio/minio/pull/14206
• Add quota usage as part of Prometheus metrics by @harshavardhana in https://github.com/minio/minio/pull/14222
• heal: Avoid printing repetitive error to heal a root disk by @vadmeste in https://github.com/minio/minio/pull/14220
• Add subnet proxy config by @anjalshireesh in https://github.com/minio/minio/pull/14225
• fs: Retry listing if no marker by @klauspost in https://github.com/minio/minio/pull/14221

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-28T02-28-16Z...RELEASE.2022-02-01T18-00-14Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.

What's Changed

• make sure to pass groups for all credentials while verifying policies by @harshavardhana in https://github.com/minio/minio/pull/14193
• do not expect 'speedtest' to be a bucket by @harshavardhana in https://github.com/minio/minio/pull/14199
• Optimize read locker cleanup by @klauspost in https://github.com/minio/minio/pull/14200
• Ensure that AssumeRole calls are sent to Audit log by @donatello in https://github.com/minio/minio/pull/14202
• update quorum requirement to list all objects by @harshavardhana in https://github.com/minio/minio/pull/14201
• Validate config before saving changes after config reset by @poornas in https://github.com/minio/minio/pull/14203

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-27T03-53-02Z...RELEASE.2022-01-28T02-28-16Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• LDAP now supports multiple user search base DNs. refer #14191

What's Changed

• publish storage API latency through node metrics by @vadmeste in https://github.com/minio/minio/pull/14117
• locking: Fix wrong map id by @klauspost in https://github.com/minio/minio/pull/14184
• cached diskIDs are not needed for scanner healing by @harshavardhana in https://github.com/minio/minio/pull/14170
• docs: add casdoor as identity provider by @Abingcbc in https://github.com/minio/minio/pull/14185
• de-couple cache completeMultipartUpload with caller context by @yfanswer in https://github.com/minio/minio/pull/14181
• feat: maintain in-memory tier stats for the last 24hrs by @krisis in https://github.com/minio/minio/pull/13782
• Identity LDAP: Allow multiple search base DNs by @donatello in https://github.com/minio/minio/pull/14191

New Contributors

• @Abingcbc made their first contribution in https://github.com/minio/minio/pull/14185
• @yfanswer made their first contribution in https://github.com/minio/minio/pull/14181

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-25T19-56-04Z...RELEASE.2022-01-27T03-53-02Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• First release to support Decommissioning feature.
• Site replication now allows replication of all users and groups.
• Site replication now supports editing endpoints, credentials etc.
• Server startup speedup in all setups close to 3x to 4x startup improvement with setups with larger drives.
• allow disabling O_DIRECT in certain environments for reads, especially for repeated READ access patterns on same object.

What's Changed

• feat: decommission feature for pools by @harshavardhana in https://github.com/minio/minio/pull/14012
• do not remove Sid from svcaccount policies by @harshavardhana in https://github.com/minio/minio/pull/14064
• fix: decommission bugfixes found during migration of .minio.sys/config by @harshavardhana in https://github.com/minio/minio/pull/14078
• Fix replication of tag removal by @poornas in https://github.com/minio/minio/pull/14056
• fix: when healing log path when we give up by @harshavardhana in https://github.com/minio/minio/pull/14079
• Avoid reconnect of disk during startup sequence by @yinhen in https://github.com/minio/minio/pull/14070
• ignore configNotFound error in AccountInfo() by @harshavardhana in https://github.com/minio/minio/pull/14082
• fix: ignore drained pool in Healing, hold lock additionally by @harshavardhana in https://github.com/minio/minio/pull/14080
• fix: simplify usage calculation and progress by @harshavardhana in https://github.com/minio/minio/pull/14086
• replication: attempt abort multipart-upload at max 3 times on remote by @harshavardhana in https://github.com/minio/minio/pull/14087
• re-do upgrade README.md to explain mc admin update by @harshavardhana in https://github.com/minio/minio/pull/14090
• fix: make sure to avoid calling RenameData() on disconnected disks. by @harshavardhana in https://github.com/minio/minio/pull/14094
• fix: use renameAll instead of deleteObject() for purging temporary files by @harshavardhana in https://github.com/minio/minio/pull/14096
• Ignore version not found in deleteVersions by @klauspost in https://github.com/minio/minio/pull/14093
• Simplify the messaging for internode versions by @harshavardhana in https://github.com/minio/minio/pull/14103
• Add Put input readahead by @klauspost in https://github.com/minio/minio/pull/14084
• reject changing pools when there are pending decommissions in-progress by @harshavardhana in https://github.com/minio/minio/pull/14102
• lock: Fix decision when a lock needs to be removed by @vadmeste in https://github.com/minio/minio/pull/14095
• fix: copyMetrics to avoid map references elsewhere by @harshavardhana in https://github.com/minio/minio/pull/14113
• Add envVars for CLI arguments by @harshavardhana in https://github.com/minio/minio/pull/14114
• allow disabling O_DIRECT in certain environments for reads by @harshavardhana in https://github.com/minio/minio/pull/14115
• cleanup dsync tests and remove net/rpc references by @harshavardhana in https://github.com/minio/minio/pull/14118
• Wait for updates collector when disk.NSScanner returns error by @krisis in https://github.com/minio/minio/pull/14127
• fix: ListBucketUsers comment doc. by @Okeyja in https://github.com/minio/minio/pull/14129
• Specify tags in options while selecting replication targets by @poornas in https://github.com/minio/minio/pull/14126
• Fix inconsistent metadata after healing by @klauspost in https://github.com/minio/minio/pull/14125
• support site replication to replicate IAM users,groups by @harshavardhana in https://github.com/minio/minio/pull/14128
• tests: Remove RPC wording from the code by @vadmeste in https://github.com/minio/minio/pull/14142
• Add Subnet link in the issue template for urgency clause by @vadmeste in https://github.com/minio/minio/pull/14131
• fs: Return prefix as listing marker if no objects by @klauspost in https://github.com/minio/minio/pull/14143
• use dnscache resolver for resolving command line endpoints by @harshavardhana in https://github.com/minio/minio/pull/14135
• Update xl.meta docs by @klauspost in https://github.com/minio/minio/pull/14150
• add ability to edit site replication endpoint by @poornas in https://github.com/minio/minio/pull/14022
• fix: correct parentUser lookup for OIDC auto expiration by @harshavardhana in https://github.com/minio/minio/pull/14154
• add github lock threads action by @harshavardhana in https://github.com/minio/minio/pull/14155
• docs: add decommission docs about pool removal by @harshavardhana in https://github.com/minio/minio/pull/14159
• speed up startup sequence for all operations by @harshavardhana in https://github.com/minio/minio/pull/14148
• Disallow delete replication for tag based rules by @poornas in https://github.com/minio/minio/pull/14167
• Minor improvements to newXLStorage by @krisis in https://github.com/minio/minio/pull/14166
• ignore remote disks with diskID empty as offline by @harshavardhana in https://github.com/minio/minio/pull/14168

New Contributors

• @yinhen made their first contribution in https://github.com/minio/minio/pull/14070
• @Okeyja made their first contribution in https://github.com/minio/minio/pull/14129

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-08T03-11-54Z...RELEASE.2022-01-25T19-56-04Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to any previous release before RELEASE.2021-11-24T23-19-33Z. Please upgrade staging or testing environments first.
• Fixed policies that go missing in multiple pool setups upon server restarts, refer #14053
• Service accounts not propagate properly in site replication, refer #14054

What's Changed

• Update NOTES.txt by @dharmendrakariya in https://github.com/minio/minio/pull/14049
• fix: progagation of service accounts for site replication by @donatello in https://github.com/minio/minio/pull/14054
• heal: isObjectDangling should return false when it cannot decide by @harshavardhana in https://github.com/minio/minio/pull/14053

New Contributors

• @dharmendrakariya made their first contribution in https://github.com/minio/minio/pull/14049

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-07T01-53-23Z...RELEASE.2022-01-08T03-11-54Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to any previous release before RELEASE.2021-11-24T23-19-33Z. Please upgrade staging or testing environments first.
• Support Internal IDP and OIDC users with site-replication refer #14041
• Performance improvements in DeleteMultipleObjects, new TLS sesssion LRU cache, refer #14038, #14039

What's Changed

• Add API for cluster replication status visibility by @poornas in https://github.com/minio/minio/pull/13885
• enforceRetentionForDeletion should return false early for delete-marker by @harshavardhana in https://github.com/minio/minio/pull/14033
• Add time info to health data by @anjalshireesh in https://github.com/minio/minio/pull/14013
• DeleteMultipleObjects: Finish even if cancelled + concurrent sets by @klauspost in https://github.com/minio/minio/pull/14038
• make sure to comply with MQTT spec by @harshavardhana in https://github.com/minio/minio/pull/14037
• Add small client TLS PSK cache by @klauspost in https://github.com/minio/minio/pull/14039
• Do not clean golangci-lint's cache by @donatello in https://github.com/minio/minio/pull/14042
• Add internal IDP and OIDC users support for site-replication by @donatello in https://github.com/minio/minio/pull/14041
• fix: redigo dep to latest unretracted version by @donatello in https://github.com/minio/minio/pull/14043
• Update site replication docs by @donatello in https://github.com/minio/minio/pull/14044

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-04T07-41-07Z...RELEASE.2022-01-07T01-53-23Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Updated console to release v0.13.2

What's Changed

• update console to v0.13.2 (01/03/22)

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2022-01-03T18-22-58Z...RELEASE.2022-01-04T07-41-07Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Audit logging now supports versions and multiple object names in deletes - refer #14017

What's Changed

• doc: Wrong spelling by @wufeiwua in https://github.com/minio/minio/pull/14014
• run gofumpt cleanup across code-base by @harshavardhana in https://github.com/minio/minio/pull/14015
• fix: initialize new drwMutex for each attempt in 'for {' loop. by @harshavardhana in https://github.com/minio/minio/pull/14009
• fix: audit log to support object names in multipleObjectNames() handler by @harshavardhana in https://github.com/minio/minio/pull/14017
• typo: Low capital in some JSON field names in log/audit output by @vadmeste in https://github.com/minio/minio/pull/14020
• use readConfig/saveConfig to simplify I/O on usage/tracker info by @harshavardhana in https://github.com/minio/minio/pull/14019

New Contributors

• @wufeiwua made their first contribution in https://github.com/minio/minio/pull/14014

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-29T06-49-06Z...RELEASE.2022-01-03T18-22-58Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Healing related fixes to calculate correct quorum for objects - refer #13998, #14000

What's Changed

• fix: choose appropriate quorum for a given erasure set by @harshavardhana in https://github.com/minio/minio/pull/13998
• Update TLS README.md - fix command example by @cptchips in https://github.com/minio/minio/pull/14001
• correctly calculate read quorum based on the available fileInfo by @harshavardhana in https://github.com/minio/minio/pull/14000

New Contributors

• @cptchips made their first contribution in https://github.com/minio/minio/pull/14001

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-27T07-23-18Z...RELEASE.2021-12-29T06-49-06Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Priviledge escalation issue fixed in this release refer to our security advisory on this vulnerability. All users are advised to upgrade if they are public facing deployment. CVE-2021-43858
• Healing of shards that do not have aligned padding issue are fixed automatically in two locations one in "healing" and another during a "GetObject()" call - refer #13978, #13945
• Multi-pool setup should purge the dangling objects properly.

What's Changed

• Move last remaining IAM notification calls into IAMSys methods by @donatello in https://github.com/minio/minio/pull/13941
• skip inconsistent shards if possible by @harshavardhana in https://github.com/minio/minio/pull/13945
• return a meaningful error for disabled users by @harshavardhana in https://github.com/minio/minio/pull/13968
• Limit mySQL key size to 3K by @klauspost in https://github.com/minio/minio/pull/13974
• add configurable delta for skipping shards by @harshavardhana in https://github.com/minio/minio/pull/13967
• fix: user privilege escalation bug by @donatello in https://github.com/minio/minio/pull/13976
• simplify logger time and avoid possible crashes by @harshavardhana in https://github.com/minio/minio/pull/13986
• add healing for invalid shards by skipping the blocks by @harshavardhana in https://github.com/minio/minio/pull/13978
• fix: healing across pools removing dangling objects by @harshavardhana in https://github.com/minio/minio/pull/13990
• trim values from environment files by @harshavardhana in https://github.com/minio/minio/pull/13991

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-20T22-07-16Z...RELEASE.2021-12-27T07-23-18Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Fixes regression in Console UI logins for 'root' users and also users with direct group mapping. Refer #13955, #13953

What's Changed

• Fix access for root user's STS credential by @donatello in https://github.com/minio/minio/pull/13947
• env: Remove quotes when parsing a config env file by @vadmeste in https://github.com/minio/minio/pull/13953
• Add configurable channel queue_size for audit/logger webhook targets by @harshavardhana in https://github.com/minio/minio/pull/13819
• Fix regression in STS permissions via group in internal IDP by @donatello in https://github.com/minio/minio/pull/13955

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-18T04-42-33Z...RELEASE.2021-12-20T22-07-16Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• New feature supporting AWS S3 Compatible NewerNonCurrentVersions implementation for ILM. Refer #13815, #13944 for more details.
• Bug fixes in Site Replication, Bucket Replication of Delete Markers.
• IAM policy now supports create/mod timestamps, refer #13796
• S3 Select now supports IS (NOT) operators, refer #13906
• Optimization of prometheus metrics endpoint, refer #13922

What's Changed

• Add policy creation and modification timestamps by @donatello in https://github.com/minio/minio/pull/13796
• update heal object unit test by @jiangfucheng in https://github.com/minio/minio/pull/13886
• check for update in the background by @harshavardhana in https://github.com/minio/minio/pull/13889
• Fix: non-existent policy cannot be set on a user/group by @donatello in https://github.com/minio/minio/pull/13898
• replication: warn if insufficient workers by @poornas in https://github.com/minio/minio/pull/13899
• update: keycloak binding documentation by @fpaupier in https://github.com/minio/minio/pull/13894
• add code to parse secrets natively instead of shell scripts by @harshavardhana in https://github.com/minio/minio/pull/13883
• Newer noncurrent versions by @krisis in https://github.com/minio/minio/pull/13815
• select: Add IS (NOT) operators by @klauspost in https://github.com/minio/minio/pull/13906
• fix: error handling cases in site-replication by @harshavardhana in https://github.com/minio/minio/pull/13901
• copy bucket slice to avoid skipping .minio.sys/buckets by @harshavardhana in https://github.com/minio/minio/pull/13912
• Check for nil RPC by @klauspost in https://github.com/minio/minio/pull/13917
• Disallow versioning/replication change in cluster replication setup by @poornas in https://github.com/minio/minio/pull/13910
• add hash-set debugging currently supports SIPMOD by @harshavardhana in https://github.com/minio/minio/pull/13911
• Helm gcs gateway support by @dhughesni in https://github.com/minio/minio/pull/13810
• update selfupdate dependency to fix signature verification by @harshavardhana in https://github.com/minio/minio/pull/13919
• select: Return early from bool AND, OR by @klauspost in https://github.com/minio/minio/pull/13914
• Deprecate caching for erasure/distributed mode by @poornas in https://github.com/minio/minio/pull/13909
• Run the data scanner routine in a loop by @vadmeste in https://github.com/minio/minio/pull/13928
• Fix healing of replication delete markers by @poornas in https://github.com/minio/minio/pull/13933
• Map policy to parent for STS by @donatello in https://github.com/minio/minio/pull/13884
• re-implement prometheus metrics endpoint to be simpler by @harshavardhana in https://github.com/minio/minio/pull/13922
• cache only metrics served from the disks by @harshavardhana in https://github.com/minio/minio/pull/13940
• Add IsKubernetes and IsDocker to health data by @anjalshireesh in https://github.com/minio/minio/pull/13936
• Fix race in bucket replication stats by @donatello in https://github.com/minio/minio/pull/13942
• Add docs for NewerNoncurrentVersions by @krisis in https://github.com/minio/minio/pull/13944

New Contributors

• @fpaupier made their first contribution in https://github.com/minio/minio/pull/13894
• @dhughesni made their first contribution in https://github.com/minio/minio/pull/13810

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-10T23-03-39Z...RELEASE.2021-12-18T04-42-33Z

Highlights

• Click here to download the latest version of MinIO.
• Click here for production support.
• Similar to release RELEASE.2021-11-24T23-19-33Z. Downgrades are not supported in this release for erasure-coded clusters, due to on-disk data format version bump - once upgraded erasure-coded clusters cannot be downgraded to the previous release. Please upgrade staging or testing environments first.
• Allows STS credentials to be able to create static users on MinIO. Refer #13882, #13874
• Allow creation of objects with some weird characters such as newline. Refer #13858, #13873
• Make sure to ListObjectVersions lists DeleteMarked folders. Refer #13871

What's Changed

• add test to expect prefix without a directory object by @harshavardhana in https://github.com/minio/minio/pull/13865
• storage: Use request.Form and avoid mux matching by @vadmeste in https://github.com/minio/minio/pull/13858
• add more directory marker tests and fix a bug by @harshavardhana in https://github.com/minio/minio/pull/13871
• Fix user listing with LDAP by @donatello in https://github.com/minio/minio/pull/13872
• ignore if volume exists in MakeVolBulk, return other errors by @harshavardhana in https://github.com/minio/minio/pull/13866
• Allow STS credentials to create users by @donatello in https://github.com/minio/minio/pull/13874
• add more tests to cover areas for weird object names by @harshavardhana in https://github.com/minio/minio/pull/13873
• Clarify example for Standalone Docker instructions by @ravindk89 in https://github.com/minio/minio/pull/13879
• Add tests to ensure that OIDC user can create IAM users by @donatello in https://github.com/minio/minio/pull/13881
• Don't zero buffer if big enough by @klauspost in https://github.com/minio/minio/pull/13877
• xl-meta: Add header titles by @klauspost in https://github.com/minio/minio/pull/13880
• Allow OIDC user to query user info if policies permit by @donatello in https://github.com/minio/minio/pull/13882

Full Changelog: https://github.com/minio/minio/compare/RELEASE.2021-12-09T06-19-41Z...RELEASE.2021-12-10T23-03-39Z