Skip to content

v3.14.1

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 16 Sep 04:16
v3.14.1
fa657ef
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

silo-pkg v3.14.1 fixes upstream SDK error handling and updates JWX for JSON field-name escaping. It is a source-only Go module release for the maintained SILO stack.

Changes

  • Update minio-go to v7.3.1-0.20260915093545-32e1f32cb176: CopyObject now retries and reports S3 errors embedded in HTTP 200 responses instead of returning success (upstream #2306).
  • Update JWX from v3.2.0 to v3.3.0: custom claim, header and JWK field names are JSON-escaped on output (GHSA-4cf7-xm37-g63h release notes). The selected testify test dependency advances to v1.12.1.
  • Migrate the lint configuration to gomodguard_v2, retaining golangci-lint v2.13.1.
  • Preserve the Go 1.26 compatibility floor, Go 1.27.1 toolchain and go-systemd v22.6.0 NetBSD compatibility replacement. Public Go signatures and v3.14.0 password-policy semantics are unchanged.

Adoption

require github.com/pgsty/silo-pkg/v3 v3.14.1

Consumers upgrading from before v3.14.0 must still account for the password-authorization split introduced in that release. See the migration guide and component version matrix. Publishing this library does not upgrade an installed Server, Console or mcli.

Changes since v3.14.0

Validation

  • Complete lint and race tests on Go 1.27.1; complete race tests on Go 1.26.8.
  • LDAP integration with OpenLDAP, module tidiness and checksum verification.
  • The selected SDK CopyObject regression and JWX field-name escaping regressions passed with the race detector.
  • govulncheck v1.8.0 reports no reachable or imported-package vulnerability. GO-2026-5932 remains a module-only advisory in unused OpenPGP code.

Release commit: fa657ef431ae22e720df37e5144cf00f67102945; PR #9.

Exact-commit main CI: Go, LDAP Config Validator, VulnCheck.

Assets 2
Loading