Update package version to 4.4.2

| datasource      | package     | from                         | to                           |
| --------------- | ----------- | ---------------------------- | ---------------------------- |
| github-releases | minio/minio | RELEASE.2025-04-08T15-41-24Z | RELEASE.2025-04-22T22-12-26Z |

CHANGELOG

@@ -1974,3 +1974,895 @@ Improve replication performance. See (#12080, #12054, #12009) for more details.
 * kafka: Do not require key when sending a message by @vadmeste in #17962
 * with xlv2 format we never had to fill in checksumInfo() by @harshavardhana in #17963
 * replication: remove check for empty version id by @poornas in #17964
+
+[3.8.2]
+* Update minio to 2023-09-07T02-05-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-07T02-05-02Z)
+* metrics: fix panic in replication stats reporting by @poornas in #17979
+* refactor bandwidth throttling for replication target by @harshavardhana in #17980
+* use syscall.Rename() directly instead of os.Rename() by @harshavardhana in #17982
+* replication resync: avoid blocking on results channel. by @poornas in #17981
+* Embed file in ZIP with custom permissions by @shtripat in #17954
+
+[3.8.3]
+* Update minio to 2023-09-16T01-01-47Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-16T01-01-47Z)
+* Address some significant memory issues in replication MRF when many objects are from existing object replication
+* Improve Disk replacement healing from single-threaded to multi-threaded via relying on the nr_requests value on Linux
+* Allow concurrent SFTP connections
+
+[3.8.4]
+* Update minio to 2023-09-20T22-49-55Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-20T22-49-55Z)
+* Major memory improvements in replication hot-path reduction of 2x to 3x allocations on a busy cluster.
+* SSE-KMS now uses a fast-path without doing md5sum providing a major performance boost for encrypted objects via SSE-KMS.
+* Improve performance for Console UI logins.
+* Fixes a regression in permission handling of LDAP user based service accounts in previous release.
+
+[3.8.5]
+* Update minio to 2023-09-23T03-47-50Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-23T03-47-50Z)
+* Prometheus metrics or mc admin info would take significantly longer when audit/logger webhooks were down for some reason, performance improved when these endpoints are down makes them non-blocking. #18083
+* Fix a regression while loading AssumeRoleWithCertificate credentials #18088 for more details
+
+[3.9.0]
+* Update minio to 2023-09-27T15-22-50Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-27T15-22-50Z)
+* Add abandoned folder scanning to metrics by @klauspost in #18076
+* Improve ListObject Compatibility by @klauspost in #18099
+* fix: set scanning details locally to avoid cached values by @harshavardhana in #18092
+* fix: check post policy like AWS S3 by @jiuker in #18074
+* site replication: allow setting bandwidth default for bucket by @poornas in #18062
+
+[3.9.1]
+* Update minio to 2023-09-30T07-02-29Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-09-30T07-02-29Z)
+* Fixes an issue with multipart objects with multiple versions, due to rename2() optimization being incorrectly used
+* AbortMultipartUpload() is now idempotent, much like AWS S3.
+
+[3.9.2]
+* Update minio to 2023-10-07T15-07-38Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-10-07T15-07-38Z)
+* Add tests for multipart upload overwrites on versioned buckets by @harshavardhana in #18142
+* Add support for resource metrics by @anjalshireesh in #18057
+* Add paramaters in Helm chart to load OIDC clientSecret from Secret Resource by @alikhtag in #17784
+* Fix startup formatting by @zveinn in #18156
+
+[3.9.3]
+* Update minio to 2023-10-16T04-13-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-10-16T04-13-43Z)
+* fix DeleteServiceAccount API behavior by @taran-p in #18163
+* fix: upon write failure on disk journal close the file properly by @harshavardhana in #18183
+* fix: O_DIRECT is on only for multi-disk setups by @donatello in #18194
+* Use better host names for metric errors by @klauspost in #18188
+* simplify channel send() in WalkDir() by @T-M-A in #18186
+* Fix current_send_in_progress metric always being zero by @mctoohey in #18160
+* avoid rebalance state for getObjectTags if any by @harshavardhana in #18197
+
+[3.9.4]
+* Update minio to 2023-10-24T04-42-36Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-10-24T04-42-36Z)
+* choose different max_concurrent requests per drive based on HDD/NVMe by @harshavardhana in #18254
+* Don't skip rules with ExpiredObjectDeleteMarker by @krisis in #18256
+* Fix globalDeploymentID race by @klauspost in #18275
+* Remove unused config migration by @klauspost in #18277
+* Fix linter errors in Windows specific code by @klauspost in #18276
+* cache DiskInfo() metrics call separately by @harshavardhana in #18270
+
+[3.9.5]
+* Update minio to 2023-10-25T06-33-25Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-10-25T06-33-25Z)
+* Fix BackendInfo() race by @klauspost in #18305
+* Improve multipart listing speed by @klauspost in #18307
+* fix: flaky and stupid tests in root lockdown by @harshavardhana in #18308
+* fix: listObjectParts to prefer local and single disks by @harshavardhana in #18309
+* avoid racy replicationCount checks by @harshavardhana in #18311
+
+[3.9.6]
+* Update minio to 2023-11-01T01-57-10Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-01T01-57-10Z)
+* update go mod and CREDITS by @harshavardhana in #18289
+* fix: do not preserve mtime during CopyObject() metadata updates by @harshavardhana in #18316
+* Preserve replica timestamps in multipart by @poornas in #18318
+* fix:Canceling the heal caused goroutine to leak. by @jiuker in #18322
+* fix: update the user cache while adding service accounts with expiry by @Praveenrajmani in #18320
+* fix: parse the subsys env error by @jiuker in #18319
+* add MC_CONFIG_DIR to use mc from writable path by @harshavardhana in #18317
+* Reload replication targets lazily if missing by @poornas in #18333
+
+[3.9.7]
+* Update minio to 2023-11-01T18-37-25Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-01T18-37-25Z)
+* Fix hanging scanner saves by @klauspost in #18368
+
+[3.9.8]
+* Update minio to 2023-11-06T22-26-08Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-06T22-26-08Z)
+* Capture network device info in health report by @anjalshireesh in #18381
+* fix: siteReplicationSys.startResync return no buckets return if error by @jiuker in #18374
+* update console v0.41.0 by @harshavardhana in #18385
+* Do not anonymize hostnames by default by @anjalshireesh in #18387
+* fix: object versions metric help by @vicmunoz in #18388
+
+[3.9.9]
+* Update minio to 2023-11-11T08-14-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-11T08-14-41Z)
+* fix:add err to all bucket resync failed by @jiuker in #18401
+* site replication: avoid propagating bucket b/w settings by @poornas in #18399
+* refactor SFTP to use the new minio/pkg implementation by @zveinn in #18406
+* Tiered objects require ns locks unlike inlined by @krisis in #18409
+* Support case insensitive kafka SASL mechanism config values by @vadmeste in #18398
+
+[3.9.10]
+* Update minio to 2023-11-15T20-43-25Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-15T20-43-25Z)
+* fix: make sure to purge all the completed in resume() by @harshavardhana in #18429
+* fix: ignore dperf on unformatted/unavailable/unmounted drives by @harshavardhana in #18435
+* Adding a missing return to fix SFTP Rmdir message by @zveinn in #18438
+
+[3.9.11]
+* Update minio to 2023-11-20T22-40-07Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-11-20T22-40-07Z)
+* health: split liveness and readiness handler by @aead in #18457
+* Remove stale data in HEAD/GET object by @vadmeste in #18460
+* remove checking for BucketInfo() peer call for every PUT() by @harshavardhana in #18464
+* Added graph for Erasure Set Tolerance value by @shtripat in #18472
+* audit: Try to send audit even if the status is offline by @vadmeste in #18458
+* fix: close the http.Body when WebhookTarget isActive by @jiuker in #18467
+
+[3.10.0]
+* Update minio to 2023-12-02T10-51-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-02T10-51-33Z)
+* Websocket grid functionality by @klauspost in #18461
+* return errors if dataDir is missing during HeadObject() by @harshavardhana in #18477
+* fix: close http body for es action by @jiuker in #18491
+* Replicate Expiry ILM configs while site replication by @shtripat in #18130
+* use Access(F_OK) do not need to check for permissions by @harshavardhana in #18492
+* fix: go mod was pointed to personal repos with replace remove it by @harshavardhana in #18498
+* Adding a fix to check for bucket existence before upload by @zveinn in #18496
+* use the latest UBI image by @harshavardhana in #18497
+* Implement batch snowball by @vadmeste in #18485
+
+[3.10.1]
+* Update minio to 2023-12-06T09-09-22Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-06T09-09-22Z)
+* avoid hot-tier SLA to be tied to warm-tier SLA by @harshavardhana in #18581
+* avoid double MRF heal when there is versions disparity by @harshavardhana in #18585
+* upon RenameData() quorum error delete any partial success by @harshavardhana in #18586
+* avoid caching metrics for timeout errors per drive by @harshavardhana in #18584
+* parallelize renameData() cleanup upon error by @harshavardhana in #18591
+* handle crashes with ILM expiry changes by @harshavardhana in #18590
+
+[3.10.2]
+* Update minio to 2023-12-07T04-16-00Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-07T04-16-00Z)
+* fix: GetFreePort() will get the same port by @jiuker in #18604
+* Capture percentage of cpu load and memory used by @anjalshireesh in #18596
+* fix: use the right channel to feed the data in by @harshavardhana in #18605
+* Update Console version to v0.42.1 by @bexsoft in #18606
+
+[3.11.0]
+* Update minio to 2023-12-09T18-17-51Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-09T18-17-51Z)
+* Add support of conf file to pass arguments and options by @vadmeste in #18592
+* feat: add events_errors_total metric by @jiuker in #18610
+* add configuration to limit replication workers by @poornas in #18601
+* use latest minisign release by @harshavardhana in #18614
+
+[3.11.1]
+* Update minio to 2023-12-13T23-28-55Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-13T23-28-55Z)
+* tier: Add support of SP credentials with Azure by @vadmeste in #18630
+* Fix issue [#18315], resolve the absence of the sed command in ubi-mic… by @opencmit2 in #18459
+* reduce logging during permission denied errors by @harshavardhana in #18641
+* healthcheck requests with user-agent mozilla do not need redirects by @harshavardhana in #18642
+* Changed the expression to render the value by @shtripat in #18627
+
+[3.11.2]
+* Update minio to 2023-12-14T18-51-57Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-14T18-51-57Z)
+* re-use the same local drive used by remote-peer by @harshavardhana in #18645
+* Label the notification target metrics by their target IDs by @Praveenrajmani in #18633
+* update console UI to v0.43.0 release by @harshavardhana in #18653
+
+[3.11.3]
+* Update minio to 2023-12-20T01-00-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-20T01-00-02Z)
+* tier: Add support of AWS S3 tiering with web identity token file by @vadmeste in #18648
+* metrics: Refactor handling of histogram vectors by @krisis in #18632
+* Fix incorrect metric desc for bucketRequestsDuration by @krisis in #18657
+* Add APIs to create and list access keys for LDAP by @taran-p in #18402
+* update go dependencies by @harshavardhana in #18662
+* Fix bucket metrics api path in docs by @vanugrah in #18661
+* Read new key license_v2 from SUBNET response by @anjalshireesh in #18669
+* Enable cross compile for openbsd/amd64 by @danieljakots in #18666
+* update dependencies for https://pkg.go.dev/vuln/GO-2023-2402 by @harshavardhana in #18676
+* Fix quota config replication for SR by @poornas in #18684
+* Update Console version to v0.43.1 by @cesnietor in #18683
+
+[3.11.4]
+* Update minio to 2023-12-23T07-19-11Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2023-12-23T07-19-11Z)
+* Export tier metrics by @krisis in https://github.com/minio/minio/pull/18678
+* allow pre-allocating buffers to reduce frequent GCs during growth by @harshavardhana in https://github.com/minio/minio/pull/18686
+* prom: Add online and healing drives metrics per erasure set by @vadmeste in https://github.com/minio/minio/pull/18700
+* send proper IPv6 names avoid bracketing notation by @harshavardhana in https://github.com/minio/minio/pull/18699
+* rename object_size -> block_size for cache subsystem by @harshavardhana in https://github.com/minio/minio/pull/18694
+* tier: Allow edit of the new Azure and AWS auth params by @vadmeste in https://github.com/minio/minio/pull/18690
+* fix: reject clients that do not send proper payload by @harshavardhana in https://github.com/minio/minio/pull/18701
+* Graph cluster wide where applicable by @shtripat in https://github.com/minio/minio/pull/18705
+* server-info: Avoid initializing audit/log http/kafka targets by @vadmeste in https://github.com/minio/minio/pull/18703
+* Fix precendence bug in S3Select SQL IN clauses by @donatello in https://github.com/minio/minio/pull/18708
+
+[3.12.0]
+* Update minio to 2024-01-01T16-36-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-01T16-36-33Z)
+* A significant performance improvement feature to optimize ListObjects() is part of this release.
+* New console HTTP security headers are fully customizable now for specific needs, refer #18631
+
+[3.12.1]
+* Update minio to 2024-01-05T22-17-24Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-05T22-17-24Z)
+* Added list of scanner metrics to document by @shtripat in #18731
+* scanner: Allow full throttle if there is no parallel disk ops by @vadmeste in #18109
+* fix: an odd crash when deleting null DEL markers by @harshavardhana in #18727
+* prom: Add read quorum per erasure set metric by @vadmeste in #18736
+* scanner: Add a config to disable short sleep between objects scan by @vadmeste in #18734
+* NEW API: GetObjectAttributes by @zveinn in #18732
+
+[3.12.2]
+* Update minio to 2024-01-11T07-46-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-11T07-46-16Z)
+
+[3.12.3]
+* Update minio to 2024-01-13T07-53-03Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-13T07-53-03Z)
+* Verify that remote target bucket is on MinIO server for bucket replication by @taran-p in https://github.com/minio/minio/pull/18656
+* avoid disk monitoring leaks under various conditions by @harshavardhana in https://github.com/minio/minio/pull/18777
+* xl: Remove wrong wording for errCorruptedFormat by @vadmeste in https://github.com/minio/minio/pull/18775
+* Add more size intervals to obj size histogram by @krisis in https://github.com/minio/minio/pull/18772
+* support proxying of tagging requests in replication by @poornas in https://github.com/minio/minio/pull/18649
+* treat all localhost endpoints as local setup with same port by @harshavardhana in https://github.com/minio/minio/pull/18784
+
+[3.12.4]
+* Update minio to 2024-01-16T16-07-38Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-16T16-07-38Z)
+* fix: listing SSE encrypted multipart objects by @harshavardhana in https://github.com/minio/minio/pull/18786
+* adding a missing return case to fix GetObjectTagging by @zveinn in https://github.com/minio/minio/pull/18793
+* xl-meta: Clean output by @klauspost in https://github.com/minio/minio/pull/18794
+
+[3.12.5]
+* Update minio to 2024-01-18T22-51-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-18T22-51-28Z)
+* reject reference format from a different deployment by @harshavardhana in #18800
+* fix: a typo in storeDataUsageInBackend() comment by @chienguo in #18778
+* Deallocate huge read buffers by @klauspost in #18813
+* fix: HealBucket regression for empty buckets, simplify it by @harshavardhana in #18815
+* Fix mini typo by @fwessels in #18816
+
+[3.12.6]
+* Update minio to 2024-01-29T03-56-32Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-29T03-56-32Z)
+* Fixes an ugly issue with runtime debug stack excessive logging regression
+* avoid calling close for nil inbound/outblock channels (3 hours ago)
+* remove getReplicationNodeMetrics() from peer metrics groups (4 hours ago)
+
+[3.12.7]
+* Update minio to 2024-01-31T20-20-33Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-01-31T20-20-33Z)
+* This release fixes a security issue related to service accounts and their permissions for more details
+* Performance improvement for large clusters with high IOPs requirements.
+* fix: bucket metric of data usage for replication info will be ignore by @jiuker in https://github.com/minio/minio/pull/18895
+* fix metrics panic in node metrics endpoint by @poornas in https://github.com/minio/minio/pull/18894
+* Update list.md by @dvaldivia in https://github.com/minio/minio/pull/18907
+* allow configuring maximum idle connections per host by @harshavardhana in https://github.com/minio/minio/pull/18908
+* enable xattr capture by default by @harshavardhana in https://github.com/minio/minio/pull/18911
+* reuse transports for callhome and remote tgt validation by @poornas in https://github.com/minio/minio/pull/18912
+* exclude veeam virtual objects from replication by @poornas in https://github.com/minio/minio/pull/18918
+* Add cgroup v2 support for memory limit by @vadmeste in https://github.com/minio/minio/pull/18905
+* remove checkBucketExist check entirely to avoid fan-out calls by @harshavardhana in https://github.com/minio/minio/pull/18917
+* Improve tracing & notification scalability by @klauspost in https://github.com/minio/minio/pull/18903
+* use all the available nr_requests for NVMe by @harshavardhana in https://github.com/minio/minio/pull/18920
+* add total usable capacity, free and used to DataUsageInfo() by @harshavardhana in https://github.com/minio/minio/pull/18921
+* remove all the frivolous logs, that may or may not be actionable by @harshavardhana in https://github.com/minio/minio/pull/18922
+* Update service file version in makefile by @donatello in https://github.com/minio/minio/pull/18925
+* Correct small typo by @fwessels in https://github.com/minio/minio/pull/18923
+* fix: permission checks for editing access keys by @donatello in https://github.com/minio/minio/pull/18928
+* Keep ServiceV1 admin stop/restart API and mark as deprecated by @vadmeste in https://github.com/minio/minio/pull/18932
+
+[3.12.8]
+* Update minio to 2024-02-04T22-36-13Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-04T22-36-13Z)
+* move a collection of peer APIs to websockets by @harshavardhana in https://github.com/minio/minio/pull/18936
+* Improve object reuse for grid messages by @klauspost in https://github.com/minio/minio/pull/18940
+* batch: Fix a typo while validating smallerThan field by @vadmeste in https://github.com/minio/minio/pull/18942
+* fix: null inline policy handling for access keys by @donatello in https://github.com/minio/minio/pull/18945
+* log: Use error log type instead of Application/MinIO type by @vadmeste in https://github.com/minio/minio/pull/18930
+* Fix some leftover issues from PR 18936 by @fwessels in https://github.com/minio/minio/pull/18946
+* simplify deadlineWriter, re-use WithDeadline by @harshavardhana in https://github.com/minio/minio/pull/18948
+* Fix ineffective recycling by @klauspost in https://github.com/minio/minio/pull/18952
+* deprecate disk tokens, instead rely on deadlines and active monitoring by @harshavardhana in https://github.com/minio/minio/pull/18947
+* move Make,Delete,Head,Heal bucket calls to websockets by @harshavardhana in https://github.com/minio/minio/pull/18951
+* Fix mux client memory leak by @klauspost in https://github.com/minio/minio/pull/18956
+* disconnected returns, an unexpected error to List() returning 500s by @harshavardhana in https://github.com/minio/minio/pull/18959
+* xl: Disable rename2 in decommissioning/rebalance by @vadmeste in https://github.com/minio/minio/pull/18964
+* Fix typo in api-router.go by @fwessels in https://github.com/minio/minio/pull/18955
+* Add more advanced cases for dangling by @harshavardhana in https://github.com/minio/minio/pull/18968
+
+[3.12.9]
+* Update minio to 2024-02-06T21-36-22Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-06T21-36-22Z)
+* Fixes a second memory leak observed in ReadVersion without data that uses websockets layer.
+* Fixes a crash while running mc admin trace on a distributed setup.
+* Fixes TCP socket hangs by adding short deadlines.
+
+[3.12.10]
+* Update minio to 2024-02-09T21-25-16Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-09T21-25-16Z)
+* do not block iam.store registration by @harshavardhana in https://github.com/minio/minio/pull/18999
+* listing must return WalkDir() errors first by @harshavardhana in https://github.com/minio/minio/pull/19006
+* Add GetBucketInfo toStorageErr conversion by @klauspost in https://github.com/minio/minio/pull/19005
+* fix: skip policy usage validation for cache update by @donatello in https://github.com/minio/minio/pull/19008
+* Update IAM access manager plugin demo by @donatello in https://github.com/minio/minio/pull/19007
+* Fix blocked streams blocking reconnects by @klauspost in https://github.com/minio/minio/pull/19017
+* optimize startup sequence performance by @harshavardhana in https://github.com/minio/minio/pull/19009
+* Fix shared top locks client by @klauspost in https://github.com/minio/minio/pull/19018
+* fix: dangling objects honor parityBlocks instead of dataBlocks by @harshavardhana in https://github.com/minio/minio/pull/19019
+* remove unnecessary metrics in 'mc admin info' output by @harshavardhana in https://github.com/minio/minio/pull/19020
+* Add extra disconnect safety by @klauspost in https://github.com/minio/minio/pull/19022
+* introduce reader deadlines for net.Conn by @harshavardhana in https://github.com/minio/minio/pull/19023
+
+[3.12.11]
+* Update minio to 2024-02-12T21-02-27Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-12T21-02-27Z)
+* avoid excessive logging for objects that do not exist by @harshavardhana in https://github.com/minio/minio/pull/19030
+* Fix panic in tagging request proxying by @poornas in https://github.com/minio/minio/pull/19032
+* do not have to use the same distributionAlgo as first pool by @harshavardhana in https://github.com/minio/minio/pull/19031
+* fix: allow configuring excess versions alerting by @harshavardhana in https://github.com/minio/minio/pull/19028
+* preserve conflicting objects when parent object is being deleted by @harshavardhana in https://github.com/minio/minio/pull/19034
+* Convert service account add/update expiration to cond values by @vadmeste in https://github.com/minio/minio/pull/19024
+* relax pre-emptive GetBucketInfo() for multi-object delete by @harshavardhana in https://github.com/minio/minio/pull/19035
+* honor replaced disk properly by updating globalLocalDrives by @harshavardhana in https://github.com/minio/minio/pull/19038
+* metrics: fix typo in namespace for proxy tagging metric by @poornas in https://github.com/minio/minio/pull/19039
+
+[3.12.12]
+* Update minio to 2024-02-13T15-35-11Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-13T15-35-11Z)
+* FIx unexpected behavior when creating service account by @taran-p in https://github.com/minio/minio/pull/19036
+* sts: Add test for DurationSeconds condition by @vadmeste in https://github.com/minio/minio/pull/19044
+* add missing handler for reloading site replication config on peers by @harshavardhana in https://github.com/minio/minio/pull/19042
+* fix: update batch replication stats for snowball uploads by @Praveenrajmani in https://github.com/minio/minio/pull/19045
+* Send a bucket notification event on DeleteObject() for non-existing object by @Praveenrajmani in https://github.com/minio/minio/pull/19037
+* fix incorrect disk io stats in k8s environment by @anjalshireesh in https://github.com/minio/minio/pull/19016
+
+[3.12.13]
+* Update minio to 2024-02-14T21-36-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-14T21-36-02Z)
+
+[3.12.14]
+* Update minio to 2024-02-17T01-15-57Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-17T01-15-57Z)
+
+[3.13.0]
+* Implement OIDC authentication
+
+[3.13.1]
+* Update minio to 2024-02-26T09-33-48Z 
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-02-26T09-33-48Z)
+* fix: crash in ResourceMetrics RPC handling concurrent writers by @harshavardhana in https://github.com/minio/minio/pull/19123
+* fix: re-arrange console-sys to log properly in k8s/docker by @harshavardhana in https://github.com/minio/minio/pull/19129
+
+[3.13.2]
+* Update minio to 2024-03-03T17-50-39Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-03T17-50-39Z)
+* Major performance improvement on total connection usage and de-duplicate ILM entries refer #18926
+* Major performance improvement for Listing() to avoid readdir() under situations for directory lookups refer #19100
+* Read drive IO stats from sysfs instead of procfs by @Praveenrajmani in #19131
+* ilm: Select an object when all AND tags are satisfied by @vadmeste in #19134
+* remove unnecessary 'recreate' code by @harshavardhana in #19136
+* feat: add userCredentials for nats by @jiuker in #19139
+
+[3.13.3]
+* Update minio to 2024-03-05T04-48-44Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-05T04-48-44Z)
+* fix: healthcheck to fail even if one erasure set doesn't have quorum by @Praveenrajmani in #19180
+* Add common middleware to S3 API handlers by @donatello in #19171
+* fix: nLink is unreliable on all filesystems by @harshavardhana in #19187
+* Fix ilm config at startup by @krisis in #19189
+* fix: skip local disks properly in cluster health maintenance check by @harshavardhana in #19184
+
+[3.13.4]
+* Update minio to 2024-03-07T00-43-48Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-07T00-43-48Z)
+* fix: cluster read health check to return proper values by @Praveenrajmani in #19203
+* fix: a regression in loading replication creds by @harshavardhana in #19204
+* fix: go mod update v1.33.0 https://pkg.go.dev/vuln/GO-2024-2611 by @harshavardhana in #19208
+* bucket import: avoid overwriting bucket creation date by @poornas in #19207
+* Set expected expiry date for ExpiredObjectAllVersions by @krisis in #19210
+
+[3.13.5]
+* Update minio to 2024-03-10T02-53-48Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-10T02-53-48Z)
+* make immediate purge non-blocking up to 100,000 entries per drive (#19231)
+* make immediate purge non-blocking upto 100000 entries per drive
+* Bonus: turn-off O_DIRECT verification when FSType is 'XFS'
+
+[3.13.6]
+* Update minio to 2024-03-15T01-07-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-15T01-07-19Z)
+* allow dynamically changing max_object_versions per object (#19265)
+
+[3.13.7]
+* Update minio to 2024-03-21T23-13-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/2024-03-21T23-13-43Z)
+* write anything beyond 4k to be written in 4k pages by @harshavardhana in https://github.com/minio/minio/pull/19269
+* fix wrong time.Parse params order by @alingse in https://github.com/minio/minio/pull/19279
+* implement a flag to specify custom crossdomain.xml by @harshavardhana in https://github.com/minio/minio/pull/19262
+* fix: add a default requests deadline when deadline is 0 by @harshavardhana in https://github.com/minio/minio/pull/19287
+* add deprecated expiry_workers to be ignored by @harshavardhana in https://github.com/minio/minio/pull/19289
+* add additional logs for the decom during metadata save by @harshavardhana in https://github.com/minio/minio/pull/19288
+* feat: add user to NOTIFY_REDIS by @jiuker in https://github.com/minio/minio/pull/19285
+* change the notification queue full message by @harshavardhana in https://github.com/minio/minio/pull/19293
+* list: Fix IsTruncated and NextMarker when encountering expired objects by @vadmeste in https://github.com/minio/minio/pull/19290
+* xl: Purge instead of moving to trash with near filled disks by @vadmeste in https://github.com/minio/minio/pull/19294
+* crypto: generate OEK using HMAC-SHA256 instead of SHA256 by @aead in https://github.com/minio/minio/pull/19297
+* decom: Fix failed status after a failed decommission by @vadmeste in https://github.com/minio/minio/pull/19300
+* Handle zero versions qualified for expiration by @krisis in https://github.com/minio/minio/pull/19301
+* avoid triggering heals on metacache files if any by @harshavardhana in https://github.com/minio/minio/pull/19299
+* add IAM policyDB lookup fallbacks to drives by @harshavardhana in https://github.com/minio/minio/pull/19302
+* replication: enforce precondition for multipart by @poornas in https://github.com/minio/minio/pull/19306
+* fix: peer addr returned as empty string by @anjalshireesh in https://github.com/minio/minio/pull/19308
+* fix: Fix crash when logging events and anonymous is enabled by @vadmeste in https://github.com/minio/minio/pull/19313
+* use retry during policy reload from drives by @harshavardhana in https://github.com/minio/minio/pull/19307
+* Encode dir obj names before expiration by @krisis in https://github.com/minio/minio/pull/19305
+* fix batch snowball to close channel after listing finishes by @poornas in https://github.com/minio/minio/pull/19316
+
+[3.13.8]
+* Update minio to 2024-03-26T22-10-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/2024-03-26T22-10-45Z)
+* Webhook targets refactor and bug fixes by @zveinn in https://github.com/minio/minio/pull/19275
+* fix: convert multiple callers to use toStorageErr(err) correctly by @harshavardhana in https://github.com/minio/minio/pull/19339
+* fix: should return when error happend by @jiuker in https://github.com/minio/minio/pull/19342
+* bring back minor DNS cache for k8s setups by @harshavardhana in https://github.com/minio/minio/pull/19341
+* Adding dashboard for MinIO node metrics by @shtripat in https://github.com/minio/minio/pull/19329
+* Fix races in IAM cache lazy loading by @klauspost in https://github.com/minio/minio/pull/19346
+* allow configuring inline shard size value by @harshavardhana in https://github.com/minio/minio/pull/19336
+* replication:fix precondition check for multipart by @poornas in https://github.com/minio/minio/pull/19349
+
+[3.13.9]
+* Update minio to 2024-03-30T09-41-56Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-03-30T09-41-56Z)
+* Support for SSE-C encrypted objects with site and bucket replication.
+* CPU issue addressed when you have 1000's of folder prefixes at bucket root.
+* LDAP support normalization of DN names for consistent behavior.
+
+[3.13.10]
+* Update minio to 2024-04-06T05-26-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-06T05-26-02Z)
+* Reduce big message RPC allocations by @klauspost in #19390
+* Prioritize the bucket configs first during the decommissioning by @Praveenrajmani in #19393
+* fix: missing metrics for healed objects by @harshavardhana in #19392
+* Always return slice with cap by @klauspost in #19395
+* Adding console targets back into systemtarget log slice by @zveinn in #19398
+* feat: support EdDSA/Ed25519 for oss by @jiuker in #19397
+* update to latest deps by @harshavardhana in #19399
+* Avoid using a nil transport when the config is not initialized by @vadmeste in #19405
+
+[3.13.11]
+* Update minio to 2024-04-18T19-09-19Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-18T19-09-19Z)
+* fix: add fallbackDisks for disk healing by @harshavardhana in #19425
+* fix: increase the tiering part size to 128MiB by @harshavardhana in #19424
+* heal: Add more per disk healing result in the audit by @vadmeste in #19427
+* batch-repl: Do not allow both source/target to be remote by @vadmeste in #19434
+* Allow setting readOnlyRootFilesystem in securityContext by @AlexanderThaller in #19437
+* Add a warning when the total size of an object versions exceeds 1 TiB by @vadmeste in #19435
+* make if-none-match PUT/POST RFC compliant by @harshavardhana in #19448
+* fix: unknow contentType for ArchiveFileHandler by @jiuker in #19451
+
+[3.13.12]
+* Update minio to 2024-04-28T17-53-50Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-04-28T17-53-50Z)
+* updating tests to use new mc --enc flags by @zveinn in #19508
+* fix: get rid of large buffers by @harshavardhana in #19549
+* cleanup: Simplify usage of MinIOSourceProxyRequest by @rluetzner in #19553
+* optimize ftp/sftp upload() implementations to avoid CPU load by @harshavardhana in #19552
+* add ILM + site-replication tests by @harshavardhana in #19554
+* Store object EC in metadata header by @klauspost in #19534
+* Reduce parallelReader allocs by @klauspost in #19558
+* make LRU cache global for internode tokens by @harshavardhana in #19555
+* fix: ignore signaturev2 for policy header check by @jiuker in #19551
+* build(deps): bump golang.org/x/net from 0.19.0 to 0.23.0 in /docs/debugging/s3-verify by @dependabot in #19559
+* Disable trailing header support for MinIO tiers by @krisis in #19561
+* re-use transport and set stronger backwards compatible Ciphers by @harshavardhana in #19565
+* do not panic on rebalance during server restarts by @harshavardhana in #19563
+* Fix RenameData data race by @klauspost in #19579
+* Remove leading zero strings in return value of (*xlMetaV2)getDataDirs() by @seiyab in #19567
+* fix: can't get total disksize for decom status by @jiuker in #19585
+* make renameData() more defensive during overwrites by @harshavardhana in #19548
+* Add system CPU metrics to metrics-v3 by @anjalshireesh in #19560
+* fix: avoid some IAM import errors if LDAP enabled by @donatello in #19591
+* simplify listener implementation setup customizations in right place by @harshavardhana in #19589
+* Add cluster notification metrics in metrics-v3 by @balamurugana in #19533
+* Fix few wrongly defined metric types by @anjalshireesh in #19586
+* fix: site-replication will reset group status when add user by @jiuker in #19594
+* Validates PostgreSQL table name by @ramondeklein in #19602
+* xl-meta: Allow combining multiple unversioned objects by @klauspost in #19604
+* support preserving renameData() on inlined content during overwrites by @harshavardhana in #19609
+* fix: IAM import for LDAP should replace mappings by @donatello in #19607
+* fix: IAM LDAP access key import bug by @donatello in #19608
+* Fixes an internal error while force-deleting a bucket by @ramondeklein in #19614
+* Update Console UI to v1.3.0 by @cesnietor in #19617
+* fix: LDAP init. issue when LDAP server is down by @donatello in #19619
+* heal: Fix regression in healing a new fresh drive by @vadmeste in #19615
+* add metrics ioerror counter for alerts on I/O errors by @harshavardhana in #19618
+* Fix DeleteObject API for unversioned objects with insufficient read q… by @poornas in #19581
+* deprecate usage of sha256-simd by @harshavardhana in #19621
+* heal: Avoid marking a bucket as done when remote drives are offline by @vadmeste in #19587
+* helm: fix port types in CiliumNetworkPolicy by @twelho in #19232
+* Add process metrics in metrics-v3 by @anjalshireesh in #19612
+* Handle failures in pool rebalancing by @Praveenrajmani in #19623
+* heal/list: Fix rare incomplete listing with flaky internode connections by @vadmeste in #19625
+* iam reload policy mapping of STS users properly by @poornas in #19626
+* a bunch of fixes for error handling by @harshavardhana in #19627
+
+[3.13.13]
+* Update minio to 2024-05-01T01-11-10Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-01T01-11-10Z)
+* Always unfreeze when connection dies by @klauspost in #19634
+* avoid data race for testing by @jiuker in #19635
+* Suppress metrics with zero values by @shtripat in #19638
+* Allow custom SFTP algorithm selection by @klauspost in #19636
+* fix: a crash in RemoveReplication target by @harshavardhana in #19640
+* ilm: Handle DeleteAllVersions action differently for DEL markers by @krisis in #19481
+
+[3.13.14]
+* Update minio to 2024-05-07T06-41-25Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-07T06-41-25Z)
+* Fix --stfp "mac-algos=..." overwrites cipher algorithms by @klauspost in #19643
+* enhance ListSVCs() API to return more info to avoid InfoSvc() by @harshavardhana in #19642
+* Wait one minute after startup to restart decommissioning by @klauspost in #19645
+* add logrotate support for MinIO logs by @harshavardhana in #19641
+* Return listing when exceeding min disk errors by @klauspost in #19644
+* fix: Filter out cust. AssumeRole Token for audit by @donatello in #19646
+* support compression after rotation of logs by @harshavardhana in #19647
+* Add cluster IAM metrics in metrics-v3 by @balamurugana in #19595
+* Use better gzip for log rotate by @klauspost in #19651
+* Change endpoint format for per-bucket metrics by @anjalshireesh in #19655
+* replication: Avoid proxying if requested object is a deletemarker by @poornas in #19656
+* With retention, skip actions expiring all versions by @krisis in #19657
+* extend server config.yaml to support per pool set drive count by @harshavardhana in #19663
+* Fix Walk missing entries with opts.Marker set by @klauspost in #19661
+* avoid using 10MiB EC buffers in maxAPI calculations by @harshavardhana in #19665
+* turn-off coloring if we have std{err,out} dumb terminals by @harshavardhana in #19667
+* add support for specific error response for InvalidRange by @harshavardhana in #19668
+* support 'mc support perf object' with root login disabled by @harshavardhana in #19672
+* fix: Ignore AWSAccessKeyId check for SignV2 policy condition by @jiuker in #19673
+* Make WalkDir return errors by @klauspost in #19677
+* support ETag value to be '*' by @harshavardhana in #19682
+* Update Console version to v1.4.0 by @bexsoft in #19684
+* Set Console Redirect URL env variable by @cesnietor in #19683
+* fix: collect quorum errors for deletePrefix() by @harshavardhana in #19685
+* Support user certificate based authentication on SFTP by @olljanat in #19650
+
+[3.13.15]
+* Update minio to 2024-05-10T01-41-38Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-10T01-41-38Z)
+* fix: unexpected credentials missing while passing (05/09/24)
+* remove references for MINIO_SERVER_URL (05/09/24)
+* add log-prefix name for specifying custom log-name (#19712) (05/09/24)
+* Revert "Fix incorrect merging of slash-suffixed objects (#19699)" (05/09/24)
+* fix: truncate Expiration to second when Add ServiceAccount (#19674) (05/10/24)
+* Fix incorrect merging of slash-suffixed objects (#19699) (05/09/24)
+* deprecate unexpected healing failed counters (#19705) (05/09/24)
+* pass around correct endpoint while registering remote storage (#19710) (05/09/24)
+* ldap-import: Add additional logs (#19691) (05/09/24)
+* results must be a single channel to avoid overwriting healing.bin (#19702) (05/09/24)
+* chore: use errors.New to replace fmt.Errorf with no parameters (#19568) (05/09/24)
+* upgrade to go1.22.x (05/09/24)
+* allow caller context during reloads() to cancel (#19687) (05/08/24)
+* grid: Fix a window of a disconnected node not marked as offline (#19703) (05/09/24)
+* Accept multipart checksums with part count (#19680) (05/08/24)
+* kms: add support for MinKMS and remove some unused/broken code (#19368) (05/08/24)
+* return appropriate error upon reaching maxClients() (#19669) (05/07/24) 
+
+[3.13.16]
+* Update minio to 2024-05-27T19-17-46Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-27T19-17-46Z)
+* Major optimization in handling hung network disconnects, and related tests and hardening added #19719, #19605, #19741
+* Fix a medium CVE for information disclosure - during GETs with conditional headers such as If-modified-since, if-unmodified-since #19810
+
+[3.13.17]
+* Update minio to 2024-05-28T17-19-04Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-05-28T17-19-04Z)
+
+[3.13.18]
+* Update minio to 2024-06-04T19-20-08Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-04T19-20-08Z)
+
+[3.13.19]
+* Update minio to 2024-06-06T09-36-42Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-06T09-36-42Z)
+
+[3.13.20]
+* Update minio to 2024-06-11T03-13-30Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-11T03-13-30Z)
+* Disable caching of encrypted objects by @klauspost in #19890
+* Calculate correct object size while replication by @shtripat in #19888
+* Don't tier directory objects by @krisis in #19891
+* Update docker build script to pull all changes by @donatello in #19892
+* Two way streams fixes - take 2 by @klauspost in #19796
+
+[3.13.21]
+* Update minio to 2024-06-13T22-53-53Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-13T22-53-53Z)
+
+[3.13.22]
+* Update minio to 2024-06-22T05-26-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-22T05-26-45Z)
+
+[3.13.23]
+* Update minio to 2024-06-26T01-06-18Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-26T01-06-18Z)
+
+[3.13.24]
+* Update minio to 2024-06-28T09-06-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-28T09-06-49Z)
+
+[3.13.25]
+* Update minio to 2024-06-29T01-20-47Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-06-29T01-20-47Z)
+
+[3.13.26]
+* Update minio to 2024-07-04T14-25-45Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-04T14-25-45Z)
+
+[3.13.27]
+* Update minio to 2024-07-10T18-41-49Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-10T18-41-49Z)
+* Add typos check to Makefile by @vadmeste in #20051
+* Abstract grid connections by @klauspost in #20038
+* Fix documentation for removal of delete markers ILM rule by @allanrogerr in #20056
+* batch: Update job info object on success by @krisis in #20053
+* Log replication errors once by @shtripat in #20063
+
+[3.13.28]
+* Update minio to 2024-07-13T01-46-15Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-13T01-46-15Z)
+
+[3.13.29]
+* Update minio to 2024-07-15T19-02-30Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-15T19-02-30Z)
+
+[3.13.30]
+* Update minio to 2024-07-16T23-46-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-16T23-46-41Z)
+
+[3.13.31]
+* Update minio to 2024-07-26T20-48-21Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-26T20-48-21Z)
+
+[3.13.32]
+* Update minio to 2024-07-29T22-14-52Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-29T22-14-52Z)
+
+[3.13.33]
+* Update minio to 2024-07-31T05-46-26Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-07-31T05-46-26Z)
+
+[3.13.34]
+* Update minio to 2024-08-03T04-33-23Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-03T04-33-23Z)
+
+[3.13.35]
+* Update minio to 2024-08-17T01-24-54Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-17T01-24-54Z)
+
+[3.13.36]
+* Update minio to 2024-08-26T15-33-07Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-26T15-33-07Z)
+
+[3.13.37]
+* Update minio to 2024-08-29T01-40-52Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-08-29T01-40-52Z)
+* fix: string format when log IAM refresh take over 5s by @jiuker in #20331
+* when a drive is closed cancel the cleanupTrash goroutine by @harshavardhana in #20337
+* add more details on the payload sent to webhook audit by @harshavardhana in #20335
+* bucket-metadata: Reload events/repl-targets for all buckets by @vadmeste in #20334
+
+[3.13.38]
+* Update minio to 2024-09-09T16-59-28Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-09T16-59-28Z)
+* Skip non existent ldap entities while import (#20352)
+* Dont hard error for nonexisting LDAP entries instead of logging them
+
+[3.13.39]
+* Update minio to 2024-09-13T20-26-02Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-13T20-26-02Z)
+* PutObject() for multi-pooled was holding large region locks, which was not necessary. This affects almost all slowpoke clients and lengthy uploads.
+* Re-arrange locks for CompleteMultipart, PutObject to be close to rename()
+
+[3.14.0]
+* Update minio to 2024-09-22T00-33-43Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-09-22T00-33-43Z)
+* Limit S3 Select JSON documents to 10MB by @klauspost in #20439
+* remove windows CI/CD for now by @harshavardhana in #20441
+* Fix behavior of AddServiceAccountLDAP for non-admin users by @taran-p in #20442
+* Added iam import tests for openid by @shtripat in #20432
+* batch: Set a default retry attempts and a prefix by @vadmeste in #20452
+* Ensure proper stale_uploads_cleanup_interval is used at all times by @ramondeklein in #20451
+
+[3.15.0]
+* Update minio to 2024-10-02T17-50-41Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-10-02T17-50-41Z)
+* Limit jstream parse depth by @klauspost in #20474
+* remove the list from 'mc stat' from testing via '--no-list' by @harshavardhana in #20468
+* cleanup existing part.N's before renamePart() by @harshavardhana in #20466
+* hold on to batch job stats till cleanup by @poornas in #20480
+* use absolute path for binary checksum verification by @harshavardhana in #20487
+* Fix PPC cgroup memory limit by @klauspost in #20488
+
+[3.15.1]
+* Update minio to 2024-10-13T13-34-11Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-10-13T13-34-11Z)
+
+[3.15.2]
+* Update minio to 2024-10-29T16-01-48Z
+* [Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-10-29T16-01-48Z)
+* Correct the date filter check for batch replication by @​shtripat in https://github.com/minio/minio/pull/20569
+* Clear omitted fields by @​klauspost in https://github.com/minio/minio/pull/20575
+* Trace ILM errors by @​klauspost in https://github.com/minio/minio/pull/20576
+* Fix ILM expire workers exiting by @​klauspost in https://github.com/minio/minio/pull/20578
+* fix: avoid useless expires value in listing meta by @​donatello in https://github.com/minio/minio/pull/20584
+* heal: Avoid deadline error with very large objects (#​140) by @​vadmeste in https://github.com/minio/minio/pull/20586
+* heal: large objects fix and avoid .healing.bin corner case premature exit by @​vadmeste in https://github.com/minio/minio/pull/20577
+* run IAM purge routines deterministically every hr by @​donatello in https://github.com/minio/minio/pull/20587
+
+[3.16.0]
+* Update Minio to RELEASE.2024-11-07T00-52-20Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-11-07T00-52-20Z)
+* Update README.md by [@​allanrogerr](https://github.com/allanrogerr) in https://github.com/minio/minio/pull/20599
+* Remove `expires` field from list objects metadata by [@​donatello](https://github.com/donatello) in https://github.com/minio/minio/pull/20600
+* add tests for ILM transition and healing ([#​166](https://github.com/minio/minio/issues/166)) by [@​harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/20601
+* Update console package to v1.7.3 by [@​cesnietor](https://github.com/cesnietor) in https://github.com/minio/minio/pull/20606
+* Bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 by [@​dependabot](https://github.com/dependabot) in https://github.com/minio/minio/pull/20611
+* Fix msgUnPath crash by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20614
+* docs: remove redundant prometheus metric by [@​erfantkerfan](https://github.com/erfantkerfan) in https://github.com/minio/minio/pull/20618
+* decompress audit log properly before sending to remote target by [@​ramondeklein](https://github.com/ramondeklein) in https://github.com/minio/minio/pull/20619
+* [@​erfantkerfan](https://github.com/erfantkerfan) made their first contribution in https://github.com/minio/minio/pull/20618
+
+[3.17.0]
+* Update minio to RELEASE.2024-12-13T22-19-12Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-12-13T22-19-12Z)
+* Fix lint issues from v1.62.0 upgrade by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20633
+* Harden internode DeadlineConn by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20631
+* Make DeadlineConn http.Listener compatible by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20635
+
+[3.18.0]
+* CLOUDRON_OIDC_PROVIDER_NAME implemented
+
+[3.18.1]
+* Update minio to RELEASE.2024-12-18T13-15-44Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2024-12-18T13-15-44Z)
+* Bump golang.org/x/crypto from 0.23.0 to 0.31.0 in /docs/debugging/inspect by [@​dependabot](https://github.com/dependabot) in https://github.com/minio/minio/pull/20760
+* Bump golang.org/x/crypto from 0.29.0 to 0.31.0 by [@​dependabot](https://github.com/dependabot) in https://github.com/minio/minio/pull/20767
+* update all dependencies and use latest msgp by [@​harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/20768
+* s3: Sanitize the source object name in CopyObject handler by [@​marktheunissen](https://github.com/marktheunissen) in https://github.com/minio/minio/pull/20774
+* heal: Include more use case of not healable but readable objects ([#​248](https://github.com/minio/minio/issues/248)) by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20776
+
+[4.0.0]
+* Update minio to RELEASE.2025-01-18T00-31-37Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-01-18T00-31-37Z)
+* ListObjectParts should return actual size by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20782
+* Add resiliency tests by [@​allanrogerr](https://github.com/allanrogerr) in https://github.com/minio/minio/pull/20786
+* Add cpuio profiling potential crash workaround by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20809
+* Bump golang.org/x/net to silence wrong vuln checker by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20814
+* decom: avoid skipping single delete markers for replication by [@​poornas](https://github.com/poornas) in https://github.com/minio/minio/pull/20836
+* update `github.com/minio/kms-go/kes` to v0.3.1 by [@​aead](https://github.com/aead) in https://github.com/minio/minio/pull/20843
+* Fix inconsistently written compressed files. by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20846
+* s3: Provide enough buffer when the object final size is unknown by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20847
+* Correct bucket metrics name by [@​shtripat](https://github.com/shtripat) in https://github.com/minio/minio/pull/20823
+* update deps by [@​harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/20851
+
+[4.0.1]
+* Update minio to RELEASE.2025-01-20T14-49-07Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-01-20T14-49-07Z)
+* do not list buckets without local quorum by [@​harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/20852
+* Add Full Object Checksums and CRC64-NVME by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20855
+
+[4.1.0]
+* Update minio to RELEASE.2025-02-03T21-03-04Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-02-03T21-03-04Z)
+* do not expose secret-key to lambda event handler by [@​harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/20870
+* Allow URLs up to 32KB and improve parsing speed by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20874
+* DeleteObjects: Send delete to all pools ([#​172](https://github.com/minio/minio/issues/172)) by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20821
+* Check for valid checksum by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20878
+* Add lock overload protection by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20876
+* Redact sensitive fields from DescribeBatchJob by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20881
+* fix: proxy requests to honor global transport by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20889
+
+[4.1.1]
+* Update minio to RELEASE.2025-02-07T23-21-09Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-02-07T23-21-09Z)
+* replication: default tag timestamps in CopyObject call by [@​poornas](https://github.com/poornas) in https://github.com/minio/minio/pull/20891
+* sts: allow client-provided intermediate CAs by [@​aead](https://github.com/aead) in https://github.com/minio/minio/pull/20896
+* Fix multipart replication with 1 part objects by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20895
+* kms: add `MINIO_KMS_REPLICATE_KEYID` option by [@​aead](https://github.com/aead) in https://github.com/minio/minio/pull/20909
+
+[4.1.2]
+* Update minio to RELEASE.2025-02-18T16-25-55Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-02-18T16-25-55Z)
+* Fix nil pointer deref in PeerPolicyMappingHandler by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20913
+* (s)ftp: Enable trailing headers for upload by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20914
+* Quick patch for Snowball AutoExtract: [#​20883](https://github.com/minio/minio/issues/20883) by [@​mannreis](https://github.com/mannreis) in https://github.com/minio/minio/pull/20885
+* Update console to 1.7.6 by [@​cesnietor](https://github.com/cesnietor) in https://github.com/minio/minio/pull/20925
+* Fix missing authorization check for `PutObjectRetentionHandler` by [@​ramondeklein](https://github.com/ramondeklein) in https://github.com/minio/minio/pull/20929
+* ftp: Enable trailing headers, just like sftp by [@​jkandasa](https://github.com/jkandasa) in https://github.com/minio/minio/pull/20938
+* fix(docs): update mc admin trace link to MinIO official docs by [@​felixrodrigo19](https://github.com/felixrodrigo19) in https://github.com/minio/minio/pull/20943
+* Extract all files from encrypted stream with inspect by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20937
+* Test checksum types for invalid combinations by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20953
+* tests: Do not allow forced type asserts by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20905
+* [@​mannreis](https://github.com/mannreis) made their first contribution in https://github.com/minio/minio/pull/20885
+* [@​jkandasa](https://github.com/jkandasa) made their first contribution in https://github.com/minio/minio/pull/20938
+* [@​1911860538](https://github.com/1911860538) made their first contribution in https://github.com/minio/minio/pull/20939
+* [@​felixrodrigo19](https://github.com/felixrodrigo19) made their first contribution in https://github.com/minio/minio/pull/20943
+
+[4.1.3]
+* Update minio to RELEASE.2025-02-28T09-55-16Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-02-28T09-55-16Z)
+* Fix importIAM issue with importing implied policies by [@​taran-p](https://github.com/taran-p) in https://github.com/minio/minio/pull/20956
+* Update SRSvcAccCreate with new type by [@​taran-p](https://github.com/taran-p) in https://github.com/minio/minio/pull/20974
+* build(deps): bump github.com/go-jose/go-jose/v4 from 4.0.4 to 4.0.5 by [@​dependabot](https://github.com/dependabot) in https://github.com/minio/minio/pull/20976
+* Fix typos by [@​triplechecker-com](https://github.com/triplechecker-com) in https://github.com/minio/minio/pull/20970
+* Update golang.org/x/crypto to address govulncheck complaint by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20983
+* Allow disabling of all X-Forwarded-For header processing by [@​marktheunissen](https://github.com/marktheunissen) in https://github.com/minio/minio/pull/20977
+* check for errors on bitrotWriter Close()  by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/20982
+* replication: set checksum type correctly by [@​poornas](https://github.com/poornas) in https://github.com/minio/minio/pull/20985
+* fix: SFTP auth bypass with no pub key in LDAP by [@​donatello](https://github.com/donatello) in https://github.com/minio/minio/pull/20986
+* Fix healing probability for skipped folders by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20988
+* [@​triplechecker-com](https://github.com/triplechecker-com) made their first contribution in https://github.com/minio/minio/pull/20970
+
+[4.2.0]
+* Update minio to RELEASE.2025-03-12T18-04-18Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-03-12T18-04-18Z)
+* Enforce a bucket limit of 100 to v2 metrics calls by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20761
+* Update typos config by [@​donatello](https://github.com/donatello) in https://github.com/minio/minio/pull/21018
+* Update ssh and jws libs for fixed CVEs by [@​donatello](https://github.com/donatello) in https://github.com/minio/minio/pull/21017
+* Disable unstable test by [@​klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/20996
+* decom: Ignore not found buckets ([#​509](https://github.com/minio/minio/issues/509)) by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/21023
+
+[4.3.0]
+* Update base image to 5.0.0
+
+[4.4.0]
+* Update minio to RELEASE.2025-04-03T14-56-28Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-04-03T14-56-28Z)
+* fix(templates): replace dash with underscore by [@itsJohnySmith](https://github.com/itsJohnySmith) in https://github.com/minio/minio/pull/19566
+* Updating PromQL queries to include tilde needed to work with 'all' variable by [@excircle](https://github.com/excircle) in https://github.com/minio/minio/pull/21054
+* Add new API endpoint to revoke STS tokens by [@taran-p](https://github.com/taran-p) in https://github.com/minio/minio/pull/21072
+* fix call toAPIErrorCode with a nil value error after check another err by [@alingse](https://github.com/alingse) in https://github.com/minio/minio/pull/21083
+* fix: token is invalid for admin heal when minio is distErasure at windows by [@jiuker](https://github.com/jiuker) in https://github.com/minio/minio/pull/21092
+* internal: add handling of KVS config parse by [@wooffie](https://github.com/wooffie) in https://github.com/minio/minio/pull/21079
+* Fix anonymous unsigned trailing headers by [@klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/21095
+* Fix: Change TTFB metric type to histogram by [@iamsagar99](https://github.com/iamsagar99) in https://github.com/minio/minio/pull/20999
+* Try reconnect IAM systems if failed initially by [@shtripat](https://github.com/shtripat) in https://github.com/minio/minio/pull/20333
+* Fix evaluation of NewerNoncurrentVersions by [@krisis](https://github.com/krisis) in https://github.com/minio/minio/pull/21096
+
+[4.4.1]
+* Update minio to RELEASE.2025-04-08T15-41-24Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-04-08T15-41-24Z)
+* decom: Ignore orphan delete markers in verification stage by [@​vadmeste](https://github.com/vadmeste) in https://github.com/minio/minio/pull/21106
+* ilm: Expect objects with only free versions when scanning by [@​krisis](https://github.com/krisis) in https://github.com/minio/minio/pull/21112
+
+[4.4.2]
+* Update minio to RELEASE.2025-04-22T22-12-26Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-04-22T22-12-26Z)
+* move to go1.24 by [@harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/21114
+* Fix buffered streams missing final entries  by [@klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/21122
+* typo: fix error msg for decoding XL headers by [@wooffie](https://github.com/wooffie) in https://github.com/minio/minio/pull/21120
+* typo: fix return of checkDiskFatalErrs by [@wooffie](https://github.com/wooffie) in https://github.com/minio/minio/pull/21121
+* Fix shared error buffer by [@klauspost](https://github.com/klauspost) in https://github.com/minio/minio/pull/21203
+* support autogenerated credentials for KMS_SECRET_KEY properly by [@harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/21223
+* fix: batch expiry job doesn't report delete marker in batch-status me by [@jiuker](https://github.com/jiuker) in https://github.com/minio/minio/pull/21183
+* Nats tls handshake first by [@matthewdavidlloyd](https://github.com/matthewdavidlloyd) in https://github.com/minio/minio/pull/21008
+

CloudronManifest.json

@@ -5,10 +5,10 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "3.8.1",
-  "upstreamVersion": "2023-09-04T19-57-37Z",
+  "version": "4.4.2",
+  "upstreamVersion": "RELEASE.2025-04-22T22-12-26Z",
   "healthCheckPath": "/minio/login",
-  "memoryLimit": 805306368,
+  "memoryLimit": 2147483648,
   "httpPort": 8000,
   "httpPorts": {
     "API_SERVER_DOMAIN": {
@@ -19,16 +19,31 @@
     }
   },
   "addons": {
-    "localstorage": {}
+    "localstorage": {},
+    "oidc": {
+      "loginRedirectUri": "/oauth_callback"
+    }
+  },
+  "optionalSso": true,
+  "checklist": {
+    "change-default-password": {
+      "sso": false,
+      "message": "Change the default admin credentials by following this [guide](https://cloudron.io/documentation/apps/minio/#admin-credentials)"
+    }
   },
   "manifestVersion": 2,
   "website": "http://www.minio.io",
-  "minBoxVersion": "7.1.2",
+  "minBoxVersion": "8.1.0",
   "forumUrl": "https://forum.cloudron.io/category/69/minio",
   "documentationUrl": "https://docs.cloudron.io/apps/minio/",
   "contactEmail": "support@cloudron.io",
   "icon": "logo.png",
-  "tags": [ "storage", "hosting", "s3", "objectstore" ],
+  "tags": [
+    "storage",
+    "hosting",
+    "s3",
+    "objectstore"
+  ],
   "mediaLinks": [
     "https://screenshots.cloudron.io/io.minio.cloudronapp/pic1.png",
     "https://screenshots.cloudron.io/io.minio.cloudronapp/pic2.png"

Dockerfile

@@ -1,16 +1,16 @@
-FROM cloudron/base:4.0.0@sha256:31b195ed0662bdb06a6e8a5ddbedb6f191ce92e8bee04c03fb02dd4e9d0286df
+FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
 
 RUN mkdir -p /app/code
 WORKDIR /app/code
 
-ARG VERSION=RELEASE.2023-09-04T19-57-37Z
+# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
+ARG MINIO_VERSION=RELEASE.2025-04-22T22-12-26Z
 
-# sometimes here https://dl.min.io/server/minio/release/linux-amd64/archive/
-# RUN wget https://dl.min.io/server/minio/release/linux-amd64/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio
-RUN wget https://dl.min.io/server/minio/release/linux-amd64/archive/minio.${VERSION} -O /app/code/minio && chmod +x /app/code/minio
-# https://dl.min.io/client/mc/release/linux-amd64/
+RUN wget https://dl.min.io/server/minio/release/linux-amd64/archive/minio.${MINIO_VERSION} -O /app/code/minio && chmod +x /app/code/minio
+
+# Latest CLI
 RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /app/code/mc && chmod +x /app/code/mc
 
-COPY env.sh start.sh /app/code/
+COPY env.sh.template start.sh /app/code/
 
 CMD [ "/app/code/start.sh" ]

POSTINSTALL.md

@@ -1,7 +1,18 @@
+<nosso>
 Please use the following credentials to login:
 
 **Username**: minioadmin<br/>
 **Password**: minioadmin<br/>
 
-Please change the credentials immediately by following this [guide](https://cloudron.io/documentation/apps/minio/#admin-credentials).
+</nosso>
 
+<sso>
+
+Please use the following credentials to login via 'Other Authentication Methods' -> 'Use Credentials':
+
+**Username**: minioadmin<br/>
+**Password**: See `MINIO_ROOT_PASSWORD` in `/app/data/env.sh` <a href="/frontend/filemanager.html#/viewer/app/$CLOUDRON-APP-ID/env.sh">Open File Manager</a><br/>
+
+Cloudron users have `readwrite` access policy. See the [docs](https://cloudron.io/documentation/apps/minio/#admin-credentials) on how to change it.
+
+</nosso>

env.sh

@@ -1,9 +0,0 @@
-# Add custom minio configuration to this file. Restart the app for changes to take effect.
-
-export CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'
-
-# See https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_ROOT_USER
-# You can use pwgen -1s 64 to generate usernames and passwords
-export MINIO_ROOT_USER=minioadmin
-export MINIO_ROOT_PASSWORD=minioadmin
-

env.sh.template

@@ -0,0 +1,4 @@
+# Add custom minio configuration to this file. Restart the app for changes to take effect.
+
+export CLOUDRON_MINIO_STARTUP_ARGS='server /app/data/data'
+

logo.svg

@@ -0,0 +1,41 @@
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
+<svg
+   width="512"
+   height="512"
+   fill="#ffffff"
+   version="1.1"
+   id="svg3"
+   sodipodi:docname="logo.svg"
+   inkscape:version="1.4 (e7c3feb100, 2024-10-09)"
+   inkscape:export-filename="logo.png"
+   inkscape:export-xdpi="96"
+   inkscape:export-ydpi="96"
+   xmlns:inkscape="http://www.inkscape.org/namespaces/inkscape"
+   xmlns:sodipodi="http://sodipodi.sourceforge.net/DTD/sodipodi-0.dtd"
+   xmlns="http://www.w3.org/2000/svg"
+   xmlns:svg="http://www.w3.org/2000/svg">
+  <defs
+     id="defs3" />
+  <sodipodi:namedview
+     id="namedview3"
+     pagecolor="#ffffff"
+     bordercolor="#666666"
+     borderopacity="1.0"
+     inkscape:showpageshadow="2"
+     inkscape:pageopacity="0.0"
+     inkscape:pagecheckerboard="0"
+     inkscape:deskcolor="#d1d1d1"
+     inkscape:zoom="0.98823083"
+     inkscape:cx="222.1141"
+     inkscape:cy="376.93623"
+     inkscape:window-width="1920"
+     inkscape:window-height="1014"
+     inkscape:window-x="0"
+     inkscape:window-y="0"
+     inkscape:window-maximized="1"
+     inkscape:current-layer="svg3" />
+  <path
+     d="m 156.67193,317.75421 a 286.44793,286.44793 0 0 1 56.74397,-80.47822 290.54005,290.54005 0 0 1 28.37199,-24.89369 v 61.3817 z m -49.10536,56.88038 134.22132,-68.20188 v 156.18233 l 30.21344,39.28427 V 290.47346 l 18.3463,-9.48007 a 91.049521,91.049521 0 0 0 25.0301,-144.04238 L 246.28921,64.725212 a 15.345425,15.345425 0 0 1 0.75022,-21.619998 15.413627,15.413627 0 0 1 21.6882,0.750221 l 9.68467,10.093879 20.46057,-19.914953 C 274.38839,2.2522814 244.31136,6.2761929 227.05628,22.167233 a 44.058422,44.058422 0 0 0 -1.90965,62.200124 l 69.83873,72.771413 a 62.336528,62.336528 0 0 1 -13.64038,96.02826 l -9.48006,4.91053 V 159.38943 A 315.97936,315.97936 0 0 0 107.56657,374.29359 Z"
+     id="path2"
+     style="fill:#cf163e;fill-opacity:1;stroke:none;stroke-width:6.82019" />
+</svg>

renovate.json5

@@ -0,0 +1,4 @@
+{
+    "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+    "extends": ["local>devops/renovator//default.renovate.json5"]
+}

start.sh

@@ -4,7 +4,19 @@ set -eu
 
 mkdir -p /app/data/data /run/minio/config /run/minio/certs
 
-[[ ! -f /app/data/env.sh ]] && cp /app/code/env.sh /app/data/env.sh
+# env vars take precedence over config.yaml (https://github.com/minio/minio/blob/master/docs/distributed/CONFIG.md#things-to-know)
+if [[ ! -f /app/data/env.sh ]]; then
+    echo "=> First run"
+    cp /app/code/env.sh.template /app/data/env.sh
+    # minio does not show the password login by default when OIDC is setup (https://github.com/minio/minio/discussions/16928)
+    # we generate a dynamic password because users might forget to change the admin password (with the oidc login being so click friendly)
+    if [[ -n "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
+        echo -e "export MINIO_ROOT_USER=minioadmin\nexport MINIO_ROOT_PASSWORD=$(pwgen -1s 20)\n\n" >> /app/data/env.sh
+    else
+        echo -e "export MINIO_ROOT_USER=minioadmin\nexport MINIO_ROOT_PASSWORD=minioadmin\n\n" >> /app/data/env.sh
+    fi
+fi
+
 source /app/data/env.sh
 
 # https://docs.min.io/minio/baremetal/reference/minio-server/minio-server.html#envvar.MINIO_SERVER_URL
@@ -16,11 +28,23 @@ if [[ ! -d /app/data/mc_config ]]; then
     /app/code/mc --config-dir /app/data/mc_config &> /dev/null || true
 fi
 
+if [[ -n "${CLOUDRON_OIDC_ISSUER:-}" ]]; then
+    export MINIO_IDENTITY_OPENID_DISPLAY_NAME="${CLOUDRON_OIDC_PROVIDER_NAME:-Cloudron}"
+    export MINIO_IDENTITY_OPENID_CONFIG_URL="${CLOUDRON_OIDC_DISCOVERY_URL}"
+    export MINIO_IDENTITY_OPENID_CLIENT_ID="${CLOUDRON_OIDC_CLIENT_ID}"
+    export MINIO_IDENTITY_OPENID_CLIENT_SECRET="${CLOUDRON_OIDC_CLIENT_SECRET}"
+    export MINIO_IDENTITY_OPENID_SCOPES="openid profile email"
+    if [[ -z "${MINIO_IDENTITY_OPENID_ROLE_POLICY:-}" ]]; then
+        export MINIO_IDENTITY_OPENID_ROLE_POLICY="readwrite"
+    fi
+
+    export MINIO_IDENTITY_OPENID_COMMENT="Cloudron OIDC"
+fi
+
 # minio is used for backups at times and has a large number of files. optimize by checking if files are actually in correct chown state
 echo "==> Changing ownership"
 [[ $(stat --format '%U' /app/data/data) != "cloudron" ]] && chown -R cloudron:cloudron /app/data
 
-# the --config-dir is deprecated and not used. but without it, minio will try to create $HOME/.minio :/ same for --certs-dir
 echo "==> Starting minio"
-exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --certs-dir /run/minio/certs --config-dir /run/minio/config --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
 

test/package.json

@@ -9,10 +9,10 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "chromedriver": "^116.0.0",
+    "chromedriver": "^135.0.2",
     "expect.js": "^0.3.1",
-    "mocha": "^10.2.0",
-    "selenium-webdriver": "^4.12.0",
-    "superagent": "^8.1.2"
+    "mocha": "^11.1.0",
+    "selenium-webdriver": "^4.31.0",
+    "superagent": "^10.2.0"
   }
 }

test/test.js

@@ -1,11 +1,7 @@
 #!/usr/bin/env node
 
 /* jshint esversion: 8 */
-/* global describe */
-/* global before */
-/* global after */
-/* global it */
-/* global xit */
+/* global it, xit, describe, before, after, afterEach */
 
 'use strict';
 
@@ -20,24 +16,47 @@ const execSync = require('child_process').execSync,
     { Builder, By, until } = require('selenium-webdriver'),
     { Options } = require('selenium-webdriver/chrome');
 
+if (!process.env.USERNAME || !process.env.PASSWORD) {
+    console.log('USERNAME and PASSWORD env vars need to be set');
+    process.exit(1);
+}
+
 describe('Application life cycle test', function () {
     this.timeout(0);
 
-    const LOCATION = 'test';
-    const TEST_TIMEOUT = 30000;
+    const LOCATION = process.env.LOCATION || 'test';
+    const TEST_TIMEOUT = parseInt(process.env.TIMEOUT, 10) || 30000;
     const BUCKET = 'cloudrontestbucket';
     const EXEC_ARGS = { cwd: path.resolve(__dirname, '..'), stdio: 'inherit' };
 
     let browser, app;
+    let rootPassword;
+    const username = process.env.USERNAME;
+    const password = process.env.PASSWORD;
 
     before(function () {
-        browser = new Builder().forBrowser('chrome').setChromeOptions(new Options().windowSize({ width: 1280, height: 1024 })).build();
+        const chromeOptions = new Options().windowSize({ width: 1600, height: 1024 });
+        chromeOptions.addArguments('guest'); // disable password checks
+        if (process.env.CI) chromeOptions.addArguments('no-sandbox', 'disable-dev-shm-usage', 'headless');
+        browser = new Builder().forBrowser('chrome').setChromeOptions(chromeOptions).build();
+        if (!fs.existsSync('./screenshots')) fs.mkdirSync('./screenshots');
     });
 
     after(function () {
         browser.quit();
     });
 
+    afterEach(async function () {
+        if (!process.env.CI || !app) return;
+
+        const currentUrl = await browser.getCurrentUrl();
+        if (!currentUrl.includes(app.domain)) return;
+        expect(this.currentTest.title).to.be.a('string');
+
+        const screenshotData = await browser.takeScreenshot();
+        fs.writeFileSync(`./screenshots/${new Date().getTime()}-${this.currentTest.title.replaceAll(' ', '_')}.png`, screenshotData, 'base64');
+    });
+
     async function waitForElement(elem) {
         await browser.wait(until.elementLocated(elem), TEST_TIMEOUT);
         await browser.wait(until.elementIsVisible(browser.findElement(elem)), TEST_TIMEOUT);
@@ -49,34 +68,69 @@ describe('Application life cycle test', function () {
         expect(app).to.be.an('object');
     }
 
-    async function login(accessKey='minioadmin', secretKey='minioadmin') {
+    async function login(username, password, expandLoginForm=true) {
+        await browser.manage().deleteAllCookies();
+        await browser.get('about:blank');
+        await browser.sleep(2000);
         await browser.get(`https://${app.fqdn}/login`);
+        await browser.sleep(2000);
+
+        if (expandLoginForm) {
+            await waitForElement(By.xpath('//div[@id="alternativeMethods-select"]/div[contains(., "Other Authentication Methods")]'));
+            await browser.findElement(By.xpath('//div[@id="alternativeMethods-select"]/div[contains(., "Other Authentication Methods")]')).click();
+            await browser.sleep(2000);
+            await browser.findElement(By.xpath('//li[contains(., "Use Credentials")] | //div[@label="Use Credentials"]')).click();
+            await browser.sleep(2000);
+        }
         await waitForElement(By.id('accessKey'));
-        await browser.findElement(By.id('accessKey')).sendKeys(accessKey);
-        await browser.findElement(By.id('secretKey')).sendKeys(secretKey);
+        await browser.findElement(By.id('accessKey')).sendKeys(username);
+        await browser.findElement(By.id('secretKey')).sendKeys(password);
         await browser.findElement(By.xpath('//button[@id="do-login"]')).click();
         await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
         await timers.setTimeout(5000);
     }
 
+    async function loginOIDC(username, password, alreadyAuthenticated = true) {
+        browser.manage().deleteAllCookies();
+        await browser.get(`https://${app.fqdn}/login`);
+        await browser.sleep(10000);
+
+        await waitForElement(By.xpath('//button[contains(., "iam")]'));
+        await browser.findElement(By.xpath('//button[contains(., "iam")]')).click();
+        await browser.sleep(10000);
+
+        if (!alreadyAuthenticated) {
+            await waitForElement(By.id('inputUsername'));
+            await browser.findElement(By.id('inputUsername')).sendKeys(username);
+            await browser.findElement(By.id('inputPassword')).sendKeys(password);
+            await browser.findElement(By.id('loginSubmitButton')).click();
+            
+            await browser.sleep(2000);
+        }
+
+        await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
+    }
+
     async function logout() {
         await browser.get(`https://${app.fqdn}/`);
         await waitForElement(By.xpath('//span[contains(text(), "Buckets")]'));
         const button = await browser.findElement(By.xpath('//button[@id="sign-out"]'));
         await browser.executeScript('arguments[0].scrollIntoView(false)', button);
         await button.click();
-        await waitForElement(By.id('accessKey'));
+        await browser.sleep(10000); // needed!
+        await waitForElement(By.xpath('//*[@id="accessKey"] | //button[contains(., "Cloudron")]'));
     }
 
     async function addBucket() {
         await browser.get(`https://${app.fqdn}/buckets`);
         await waitForElement(By.xpath('//button[@id="create-bucket"]'));
         await browser.findElement(By.xpath('//button[@id="create-bucket"]')).click();
-        await browser.sleep(2000);
+        await browser.sleep(1000);
+        await waitForElement(By.xpath('//input[@id="bucket-name"]'));
         await browser.findElement(By.xpath('//input[@id="bucket-name"]')).sendKeys(BUCKET);
         await browser.findElement(By.xpath('//button[@id="create-bucket"]')).click();
+        await browser.get(`https://${app.fqdn}/buckets`);
         await waitForElement(By.xpath(`//h1[contains(text(), "${BUCKET}")]`));
-        await timers.setTimeout(5000);
     }
 
     async function checkBucket() {
@@ -96,38 +150,87 @@ describe('Application life cycle test', function () {
         expect(response.body.toString('utf8')).to.contain('<Code>AccessDenied</Code>');
     }
 
+    async function changeAdminCredentials() {
+        let data = fs.readFileSync(path.join(__dirname, '../env.sh.template'), 'utf8');
+        data += '\nexport MINIO_ROOT_USER=minioakey\nexport MINIO_ROOT_PASSWORD=minioskey\n';
+        fs.writeFileSync('/tmp/env.sh', data);
+        execSync(`cloudron push --app ${app.id} /tmp/env.sh /app/data/env.sh`, EXEC_ARGS);
+        execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
+        await timers.setTimeout(10000);
+    }
+
+    async function getAdminCredentials() {
+        execSync(`cloudron pull --app ${app.id} /app/data/env.sh /tmp/env.sh`, EXEC_ARGS);
+        const data = fs.readFileSync('/tmp/env.sh', 'utf8');
+        const m = data.match(/MINIO_ROOT_PASSWORD=(.*)/);
+        if (!m) throw new Error('Could not detect root password');
+        rootPassword = m[1].trim();
+        console.log(`root password is [${rootPassword}]`);
+    }
+
     xit('build app', function () { execSync('cloudron build', EXEC_ARGS); });
-    it('install app', async function () {
-        execSync(`cloudron install --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS);
+
+    // no SSO
+    it('install app (no SSO)', async function () {
+        execSync(`cloudron install --no-sso --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS);
         await timers.setTimeout(10000);
     });
 
     it('can get app information', getAppInfo);
 
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
+    it('can admin login', login.bind(null, 'minioadmin', 'minioadmin', false));
     it('can add bucket', addBucket);
     it('can logout', logout);
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
-    it('can change credentials', async function () {
-        let data = fs.readFileSync(path.join(__dirname, '../env.sh'), 'utf8');
-        data = data
-            .replace(/MINIO_ROOT_USER=.*/, 'MINIO_ROOT_USER=minioakey')
-            .replace(/MINIO_ROOT_PASSWORD=.*/, 'MINIO_ROOT_PASSWORD=minioskey');
-        fs.writeFileSync('/tmp/env.sh', data);
-        execSync(`cloudron push --app ${app.id} /tmp/env.sh /app/data/env.sh`, EXEC_ARGS);
+    it('can change admin credentials', changeAdminCredentials);
+    it('can restart app', async function () {
         execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
         await timers.setTimeout(10000);
     });
 
-    it('can restart app', function () { execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS); });
-
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', false));
     it('has bucket', checkBucket);
     it('can logout', logout);
     it('does redirect', checkRedirect);
     it('check api', checkApi);
+    it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
+
+    // SSO
+    it('install app (SSO)', async function () {
+        execSync(`cloudron install --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS);
+        await timers.setTimeout(10000);
+    });
+
+    it('can get app information', getAppInfo);
+    it('can get admin credentials', getAdminCredentials);
+    it('can admin login', async function () { await login('minioadmin', rootPassword); });
+    it('can add bucket', addBucket);
+    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, false));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+
+    it('can change admin credentials', changeAdminCredentials);
+
+    it('can restart app', async function () {
+        execSync(`cloudron restart --app ${app.id}`, EXEC_ARGS);
+        await timers.setTimeout(10000);
+    });
+
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey'));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+    it('does redirect', checkRedirect);
+    it('check api', checkApi);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, true));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
 
     it('backup app', function () { execSync('cloudron backup create --app ' + app.id, EXEC_ARGS); });
     it('restore app', async function () {
@@ -139,9 +242,15 @@ describe('Application life cycle test', function () {
         await timers.setTimeout(10000);
     });
 
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can get app information', getAppInfo);
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey'));
     it('has bucket', checkBucket);
     it('can logout', logout);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, true));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
@@ -152,28 +261,44 @@ describe('Application life cycle test', function () {
     });
     it('can get app information', getAppInfo);
 
-    it('can login', login.bind(null, 'minioakey', 'minioskey'));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey'));
     it('has bucket', checkBucket);
     it('can logout', logout);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, true));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+
     it('does redirect', checkRedirect);
     it('check api', checkApi);
 
     it('uninstall app', function () { execSync('cloudron uninstall --app ' + app.id, EXEC_ARGS); });
 
     // test update
-    it('can install app', function () { execSync('cloudron install --appstore-id io.minio.cloudronapp --location ' + LOCATION, EXEC_ARGS); });
+    it('can install app for update', function () { execSync('cloudron install --appstore-id io.minio.cloudronapp --location ' + LOCATION, EXEC_ARGS); });
     it('can get app information', getAppInfo);
 
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
+    it('can get admin credentials', getAdminCredentials);
+    it('can admin login', async function () { await login('minioadmin', rootPassword); });
     it('can add buckets', addBucket);
     it('can logout', logout);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, true));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+
     it('can update', function () { execSync(`cloudron update --app ${LOCATION}`, EXEC_ARGS); });
     it('can configure', function () { execSync(`cloudron configure --app ${LOCATION} --location ${LOCATION} --secondary-domains API_SERVER_DOMAIN=${LOCATION}-api`, EXEC_ARGS); });
     it('can get app information', getAppInfo);
 
-    it('can login', login.bind(null, 'minioadmin', 'minioadmin'));
+    it('can admin login', async function () { await login('minioadmin', rootPassword); });
     it('has bucket', checkBucket);
     it('can logout', logout);
+
+    it('can OIDC login', loginOIDC.bind(null, username, password, true));
+    it('has bucket', checkBucket);
+    it('can logout', logout);
+
     it('does redirect', checkRedirect);
     it('check api', checkApi);