Skip to content

silo-pkg v3.15.1

Latest
Latest

Choose a tag to compare

View all tags
@Vonng Vonng released this 25 Oct 09:41
v3.15.1
8893479

silo-pkg v3.15.1 updates upstream minio-go to include six fixes after v7.4.1. The minimum Go version remains 1.27.3.

SDK fixes

The SDK moves from v7.4.1 to v7.4.2-0.20261020194015-ab93db7ba435, pinned to upstream commit ab93db7ba435. Upstream has not published a v7.4.2 tag.

  • Reject short sequential and parallel streamed multipart uploads before sending an incomplete part.
  • Preserve sequential reads after ReadAt reaches EOF.
  • Reject negative ReadAt offsets before fetching object metadata.
  • Preserve read and seek bounds after Object.Stat.
  • Report each failed object once in batch-delete results.

Upstream changes since v7.4.1

Dependencies and compatibility

All 55 dependency requirements were checked against upstream stable versions. Other selected dependencies remain current except the deliberate go-humanize v1.0.1, go-runewidth v0.0.29 and go-systemd/v22 v22.6.0 compatibility selections. Go does not inherit dependency replacements; consuming applications must retain the replacements they need.

Public package APIs, policy formats, authorization semantics and the v3.14.3 policy optimizations are preserved. This patch does not add a new CVE fix. The deprecated OpenPGP advisory GO-2026-5932 remains a module-level finding without an upstream fix; the affected packages are not imported by silo-pkg.

Validation

  • make test: lint and full silo-pkg race suite.
  • Full upstream minio-go race suite, including HTTP-fixture regressions for the six fixes. Tests requiring an external S3 server were not enabled.
  • Module verification and tidy checks; Linux amd64/arm64, Windows amd64 and NetBSD amd64 builds.
  • Consumers tested with the candidate package: mc cmd race suite; Console API/pkg/cmd compilation; SILO SDK/SFTP-related tests. Consumer dependency files were not changed.
  • Final-commit CI: Go, LDAP, VulnCheck.
require github.com/pgsty/silo-pkg/v3 v3.15.1

This is a source-only release. SILO, Console and mcli adopt the SDK fixes by updating the module and rebuilding; their releases remain separate. This release continues the shared 20261024 maintenance batch.

Released commit: 8893479a348a.

Changes since v3.15.0

Assets 2
Loading