SILO Console v2.5.0

SILO Console 2.5.0 refreshes the administration interface, updates the Go dependency stack, and fixes diagnostic health reports on high-latency connections.

Changes

• Add permission-aware navigation and Overview, sortable/filterable bucket tables, improved object previews, Tasks, and updated identity and policy management in a responsive light/dark interface.
• Fix #63: Health, Trace, Logs, Watch, Speedtest and Profile complete the WebSocket closing handshake before releasing the connection. Closing uses the existing reader and a five-second budget without limiting active streams. Thanks to Azat (@azataiot) for the report and analysis.
• Preserve buffered health-report JSON frames, close response bodies, and reject truncated, cancelled or failed responses. Retain the madmin v3 API and timeout close semantics.
• Restore write-only access to the object workspace, handle wildcard bucket-root grants while preserving prefix restrictions, and show rejected-action JSON errors.
• Prevent a delayed bucket search from navigating back to the list after an object workspace has opened.

Dependencies

Use Go 1.27.3, silo-pkg v3.15.1, the published mcli 20261025 source (dcc78d506f94), and upstream minio-go v7.4.2-0.20261020194015-ab93db7ba435. The SDK selection includes post-v7.4.1 multipart, read/seek and batch-delete fixes; it is not a formally tagged v7.4.2 release. Existing policy and output-format compatibility selections remain in place. Frontend builds use Node 24.22.1, Yarn 4.13.0 and Vite 8.3.5.

The shared maintenance announcement records the CVEs addressed by the dependency updates and the remaining upstream advisory limitations. Diagnostic and navigation repairs are correctness fixes, not additional CVE claims.

Upgrade notes

• This release updates standalone Console. An existing SILO Server binary keeps its embedded Console until that Server is rebuilt and released.
• Reset to default and immediately fresh bucket inventory require the coordinated Server fixes already on Server main (41822710e). Published Server 20261018 does not contain them; resetting an overridden built-in policy there can fail the first policy read. This release does not publish a new Server version.
• Task cancellation does not undo mutations that already completed. Existing environment variables, API routes, CLI conventions and module paths are retained.
• The maintained integration target is pgsty/silo. Compatibility with unmodified upstream MinIO remains best effort.

Verification and downloads

The release contains six platform binaries and archives, nine Linux packages, source, checksums, SPDX SBOMs, legal notices, and Sigstore/GitHub provenance. Windows uses ZIP; Linux and macOS use tar.gz. Official images are on Docker Hub as docker.io/pgsty/silo-console:v2.5.0 for Linux amd64/arm64.

See the verification contract and the complete changelog.

The exact release commit passed the required integration and vulnerability checks, including 658 browser tests. The downloaded release binary passed 12 high-latency health-report checks against the published and repaired Server sources. All 44 assets were verified; Linux amd64/arm64 images were pulled anonymously and their binaries matched the release files.

Verified image digest: sha256:b7c30b47524d536bb0fca4319629e2ca07704515242937e5dd71791720a10bfd.