Update package version to 5.3.0

| datasource      | package     | from                         | to                           |
| --------------- | ----------- | ---------------------------- | ---------------------------- |
| github-releases | minio/minio | RELEASE.2025-09-07T16-13-09Z | RELEASE.2025-10-15T17-29-55Z |

CHANGELOG

@@ -2887,3 +2887,39 @@ Improve replication performance. See (#12080, #12054, #12009) for more details.
 * modernizes for loop in cmd/, internal/ by [@12ya](https://github.com/12ya) in https://github.com/minio/minio/pull/21309
 * Add `targetArn` label for bucket replication metrics by [@shtripat](https://github.com/shtripat) in https://github.com/minio/minio/pull/21354
 
+[5.1.1]
+* Update minio to RELEASE.2025-07-23T15-54-02Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-07-23T15-54-02Z)
+* Add support for X25519MLKEM768 by [@loganaden](https://github.com/loganaden) in https://github.com/minio/minio/pull/21435
+* fix: restrict SinglePool by the minimum free drive threshold by [@jiuker](https://github.com/jiuker) in https://github.com/minio/minio/pull/21115
+* wait for metadata reads on minDisks+1 for HEAD/GET when data==parity by [@harshavardhana](https://github.com/harshavardhana) in https://github.com/minio/minio/pull/21449
+* fix boundary value bug when objTime ends in whole seconds (without sub-second) by [@supermp](https://github.com/supermp) in https://github.com/minio/minio/pull/21419
+* simplify validating policy mapping by [@0xMALVEE](https://github.com/0xMALVEE) in https://github.com/minio/minio/pull/21450
+
+[5.2.0]
+* Update minio to RELEASE.2025-09-07T16-13-09Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-09-07T16-13-09Z)
+* Update console to v2.0.3 by [@bexsoft](https://github.com/bexsoft) in [#21474](https://github.com/minio/minio/pull/21474)
+* bring more idempotent behavior to AbortMultipartUpload() by [@jiuker](https://github.com/jiuker) in [#21475](https://github.com/minio/minio/pull/21475)
+* fix: record extral skippedEntry for listObject by [@jiuker](https://github.com/jiuker) in [#21484](https://github.com/minio/minio/pull/21484)
+* feat: add variable for datasource in grafana dashboards by [@hornjo](https://github.com/hornjo) in [#21470](https://github.com/minio/minio/pull/21470)
+* imagePullSecrets consistent types for global , local by [@0xMALVEE](https://github.com/0xMALVEE) in [#21500](https://github.com/minio/minio/pull/21500)
+* Optimize outdated commands in the log by [@dormanze](https://github.com/dormanze) in [#21498](https://github.com/minio/minio/pull/21498)
+* fix(helm): do not suspend versioning by default for buckets, only set versioning if specified(21349) by [@LOCODAK](https://github.com/LOCODAK) in [#21494](https://github.com/minio/minio/pull/21494)
+* Check legalHoldPerm by [@klauspost](https://github.com/klauspost) in [#21508](https://github.com/minio/minio/pull/21508)
+* fix: errUploadIDNotFound will be ignored when err is from peer client by [@jiuker](https://github.com/jiuker) in [#21504](https://github.com/minio/minio/pull/21504)
+* fix: claim based oidc for official aws libraries by [@0xMALVEE](https://github.com/0xMALVEE) in [#21468](https://github.com/minio/minio/pull/21468)
+
+[5.3.0]
+* Update minio to RELEASE.2025-10-15T17-29-55Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-10-15T17-29-55Z)
+* A CVE was reported [Privilege Escalation via Session Policy Bypass in Service Accounts and STS](https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr) and fixed in this release,
+* fix: remove unnecessary replication checks by [@0xMALVEE](https://github.com/0xMALVEE) in [#21569](https://github.com/minio/minio/pull/21569)
+* LDAP TLS handshake fails with StartTLS and tls_skip_verify=off by [@mosesdd](https://github.com/mosesdd) in [#21582](https://github.com/minio/minio/pull/21582)
+* fix: incorrect poolID when after decommission adding pools by [@jiuker](https://github.com/jiuker) in [#21590](https://github.com/minio/minio/pull/21590)
+* fix: after saveRebalanceStats cancel will be empty by [@jiuker](https://github.com/jiuker) in [#21597](https://github.com/minio/minio/pull/21597)
+* Use new gofumpt by [@klauspost](https://github.com/klauspost) in [#21613](https://github.com/minio/minio/pull/21613)
+* fix: timeN function return final closure not be called by [@drivebyer](https://github.com/drivebyer) in [#21615](https://github.com/minio/minio/pull/21615)
+* fix: allow trailing slash in AWS S3 POST policies by [@cduzer](https://github.com/cduzer) in [#21612](https://github.com/minio/minio/pull/21612)
+* fix: check sub-policy properly when present by [@donatello](https://github.com/donatello) in [#21642](https://github.com/minio/minio/pull/21642)
+

CloudronManifest.json

@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "5.1.0",
-  "upstreamVersion": "RELEASE.2025-07-18T21-56-31Z",
+  "version": "5.3.0",
+  "upstreamVersion": "RELEASE.2025-10-15T17-29-55Z",
   "healthCheckPath": "/minio/login",
   "memoryLimit": 2147483648,
   "httpPort": 8000,

Dockerfile

@@ -1,12 +1,22 @@
 FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
 
-RUN mkdir -p /app/code
+RUN mkdir -p /app/code/go
 WORKDIR /app/code
 
-# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
-ARG MINIO_VERSION=RELEASE.2025-07-18T21-56-31Z
+# Go (https://golang.org/dl/)
+ARG GOVERSION=1.25.1
+ENV GOROOT /usr/local/go-${GOVERSION}
+ENV PATH $GOROOT/bin:$PATH
+ENV GOPATH=/app/code/go
+RUN mkdir -p /usr/local/go-${GOVERSION} && \
+    curl -L https://storage.googleapis.com/golang/go${GOVERSION}.linux-amd64.tar.gz | tar zxf - -C /usr/local/go-${GOVERSION} --strip-components 1
 
-RUN wget https://dl.min.io/server/minio/release/linux-amd64/archive/minio.${MINIO_VERSION} -O /app/code/minio && chmod +x /app/code/minio
+RUN ln -sf /usr/local/go-${GOVERSION} /usr/local/go
+
+# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
+ARG MINIO_VERSION=RELEASE.2025-10-15T17-29-55Z
+RUN go install github.com/minio/minio@${MINIO_VERSION} && \
+    go clean -cache -modcache -testcache
 
 # Latest CLI
 RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /app/code/mc && chmod +x /app/code/mc

start.sh

@@ -27,5 +27,5 @@ echo "==> Changing ownership"
 [[ $(stat --format '%U' /app/data/data) != "cloudron" ]] && chown -R cloudron:cloudron /app/data
 
 echo "==> Starting minio"
-exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/go/bin/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
 

test/package-lock.json

@@ -9,12 +9,12 @@
       "version": "1.0.0",
       "license": "ISC",
       "dependencies": {
-        "@eslint/js": "^9.31.0",
-        "chromedriver": "^138.0.3",
+        "@eslint/js": "^9.37.0",
+        "chromedriver": "^141.0.3",
         "expect.js": "^0.3.1",
-        "mocha": "^11.7.1",
-        "selenium-webdriver": "^4.34.0",
-        "superagent": "^10.2.2"
+        "mocha": "^11.7.4",
+        "selenium-webdriver": "^4.36.0",
+        "superagent": "^10.2.3"
       }
     },
     "node_modules/@bazel/runfiles": {
@@ -24,9 +24,9 @@
       "license": "Apache-2.0"
     },
     "node_modules/@eslint/js": {
-      "version": "9.31.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.31.0.tgz",
-      "integrity": "sha512-LOm5OVt7D4qiKCqoiPbA7LWmI+tbw1VbTUowBcUMgQSuM6poJufkFkYDcQpo5KfgD39TnNySV26QjOh7VFpSyw==",
+      "version": "9.37.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.37.0.tgz",
+      "integrity": "sha512-jaS+NJ+hximswBG6pjNX0uEJZkrT0zwpVi3BA3vX22aFGjJjmgSTSmPpZCRKmoBL5VY/M6p0xsSJx7rk7sy5gg==",
       "license": "MIT",
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -182,13 +182,13 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.7.9",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.9.tgz",
-      "integrity": "sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==",
+      "version": "1.12.2",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.12.2.tgz",
+      "integrity": "sha512-vMJzPewAlRyOgxV2dU0Cuz2O8zzzx9VYtbJOaBgXFeLc4IV/Eg50n4LowmehOOR61S8ZMpc2K5Sa7g6A4jfkUw==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.0",
+        "form-data": "^4.0.4",
         "proxy-from-env": "^1.1.0"
       }
     },
@@ -316,14 +316,14 @@
       }
     },
     "node_modules/chromedriver": {
-      "version": "138.0.3",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-138.0.3.tgz",
-      "integrity": "sha512-RKcfzbUthmQzFmy91F9StQQwNZ72khp3febF/RntpkDKhhCkwor0cgop00diwzAVSUq1s2e8B54Iema9FQnynw==",
+      "version": "141.0.3",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-141.0.3.tgz",
+      "integrity": "sha512-YnB6cK5OIKJvz056A97RxTMlQVj/zzDf9YnJj4jUQwc61Ixk4/cis0rguS8kzHTOLR7IkJZRUOWWGKuBYMjo0Q==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@testim/chrome-version": "^1.1.4",
-        "axios": "^1.7.4",
+        "axios": "^1.12.0",
         "compare-versions": "^6.1.0",
         "extract-zip": "^2.0.1",
         "proxy-agent": "^6.4.0",
@@ -631,6 +631,21 @@
         "node": ">= 0.4"
       }
     },
+    "node_modules/es-set-tostringtag": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/es-set-tostringtag/-/es-set-tostringtag-2.1.0.tgz",
+      "integrity": "sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==",
+      "license": "MIT",
+      "dependencies": {
+        "es-errors": "^1.3.0",
+        "get-intrinsic": "^1.2.6",
+        "has-tostringtag": "^1.0.2",
+        "hasown": "^2.0.2"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      }
+    },
     "node_modules/escalade": {
       "version": "3.2.0",
       "resolved": "https://registry.npmjs.org/escalade/-/escalade-3.2.0.tgz",
@@ -770,9 +785,9 @@
       }
     },
     "node_modules/follow-redirects": {
-      "version": "1.15.9",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz",
-      "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==",
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
       "funding": [
         {
           "type": "individual",
@@ -806,13 +821,15 @@
       }
     },
     "node_modules/form-data": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.1.tgz",
-      "integrity": "sha512-tzN8e4TX8+kkxGPK8D5u0FNmjPUjw3lwC9lSLxxoB/+GtsJG91CO8bSWy73APlgAZzZbXEYZJuxjkHH2w+Ezhw==",
+      "version": "4.0.4",
+      "resolved": "https://registry.npmjs.org/form-data/-/form-data-4.0.4.tgz",
+      "integrity": "sha512-KrGhL9Q4zjj0kiUt5OO4Mr/A/jlI2jDYs5eHBpYHPcBEVSiipAvn2Ko2HnPe20rmcuuvMHNdZFp+4IlGTMF0Ow==",
       "license": "MIT",
       "dependencies": {
         "asynckit": "^0.4.0",
         "combined-stream": "^1.0.8",
+        "es-set-tostringtag": "^2.1.0",
+        "hasown": "^2.0.2",
         "mime-types": "^2.1.12"
       },
       "engines": {
@@ -960,6 +977,21 @@
         "url": "https://github.com/sponsors/ljharb"
       }
     },
+    "node_modules/has-tostringtag": {
+      "version": "1.0.2",
+      "resolved": "https://registry.npmjs.org/has-tostringtag/-/has-tostringtag-1.0.2.tgz",
+      "integrity": "sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==",
+      "license": "MIT",
+      "dependencies": {
+        "has-symbols": "^1.0.3"
+      },
+      "engines": {
+        "node": ">= 0.4"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/ljharb"
+      }
+    },
     "node_modules/hasown": {
       "version": "2.0.2",
       "resolved": "https://registry.npmjs.org/hasown/-/hasown-2.0.2.tgz",
@@ -1050,6 +1082,15 @@
         "node": ">=8"
       }
     },
+    "node_modules/is-path-inside": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz",
+      "integrity": "sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/is-plain-obj": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz",
@@ -1270,9 +1311,9 @@
       }
     },
     "node_modules/mocha": {
-      "version": "11.7.1",
-      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.1.tgz",
-      "integrity": "sha512-5EK+Cty6KheMS/YLPPMJC64g5V61gIR25KsRItHw6x4hEKT6Njp1n9LOlH4gpevuwMVS66SXaBBpg+RWZkza4A==",
+      "version": "11.7.4",
+      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.4.tgz",
+      "integrity": "sha512-1jYAaY8x0kAZ0XszLWu14pzsf4KV740Gld4HXkhNTXwcHx4AUEDkPzgEHg9CM5dVcW+zv036tjpsEbLraPJj4w==",
       "license": "MIT",
       "dependencies": {
         "browser-stdout": "^1.3.1",
@@ -1283,6 +1324,7 @@
         "find-up": "^5.0.0",
         "glob": "^10.4.5",
         "he": "^1.2.0",
+        "is-path-inside": "^3.0.3",
         "js-yaml": "^4.1.0",
         "log-symbols": "^4.1.0",
         "minimatch": "^9.0.5",
@@ -1578,9 +1620,9 @@
       "license": "MIT"
     },
     "node_modules/selenium-webdriver": {
-      "version": "4.34.0",
-      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.34.0.tgz",
-      "integrity": "sha512-zGfQFcsASAv3KrYzYh+iw4fFqB7iZAgHW7BU6rRz7isK1i1X4x3LvjmZad4bUUgHDwTnAhlqTzDh21byB+zHMg==",
+      "version": "4.36.0",
+      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.36.0.tgz",
+      "integrity": "sha512-rZGqjXiqNVL6QNqKNEk5DPaIMPbvApcmAS9QsXyt5wT3sfTSHGCh4AX/YKeDTOwei1BOZDlPOKBd82WCosUt9w==",
       "funding": [
         {
           "type": "github",
@@ -1595,8 +1637,8 @@
       "dependencies": {
         "@bazel/runfiles": "^6.3.1",
         "jszip": "^3.10.1",
-        "tmp": "^0.2.3",
-        "ws": "^8.18.2"
+        "tmp": "^0.2.5",
+        "ws": "^8.18.3"
       },
       "engines": {
         "node": ">= 20.0.0"
@@ -1894,20 +1936,20 @@
       }
     },
     "node_modules/superagent": {
-      "version": "10.2.2",
-      "resolved": "https://registry.npmjs.org/superagent/-/superagent-10.2.2.tgz",
-      "integrity": "sha512-vWMq11OwWCC84pQaFPzF/VO3BrjkCeewuvJgt1jfV0499Z1QSAWN4EqfMM5WlFDDX9/oP8JjlDKpblrmEoyu4Q==",
+      "version": "10.2.3",
+      "resolved": "https://registry.npmjs.org/superagent/-/superagent-10.2.3.tgz",
+      "integrity": "sha512-y/hkYGeXAj7wUMjxRbB21g/l6aAEituGXM9Rwl4o20+SX3e8YOSV6BxFXl+dL3Uk0mjSL3kCbNkwURm8/gEDig==",
       "license": "MIT",
       "dependencies": {
-        "component-emitter": "^1.3.0",
+        "component-emitter": "^1.3.1",
         "cookiejar": "^2.1.4",
-        "debug": "^4.3.4",
+        "debug": "^4.3.7",
         "fast-safe-stringify": "^2.1.1",
-        "form-data": "^4.0.0",
+        "form-data": "^4.0.4",
         "formidable": "^3.5.4",
         "methods": "^1.1.2",
         "mime": "2.6.0",
-        "qs": "^6.11.0"
+        "qs": "^6.11.2"
       },
       "engines": {
         "node": ">=14.18.0"
@@ -1962,9 +2004,9 @@
       "license": "MIT"
     },
     "node_modules/tmp": {
-      "version": "0.2.3",
-      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz",
-      "integrity": "sha512-nZD7m9iCPC5g0pYmcaxogYKggSfLsdxl8of3Q/oIbqCqLLIO9IAF0GWjX1z9NZRHPiXv8Wex4yDCaZsgEw0Y8w==",
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
+      "integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
       "license": "MIT",
       "engines": {
         "node": ">=14.14"

test/package.json

@@ -9,11 +9,11 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@eslint/js": "^9.31.0",
-    "chromedriver": "^138.0.3",
+    "@eslint/js": "^9.37.0",
+    "chromedriver": "^141.0.3",
     "expect.js": "^0.3.1",
-    "mocha": "^11.7.1",
-    "selenium-webdriver": "^4.34.0",
-    "superagent": "^10.2.2"
+    "mocha": "^11.7.4",
+    "selenium-webdriver": "^4.36.0",
+    "superagent": "^10.2.3"
   }
 }

test/test.js

@@ -177,7 +177,7 @@ describe('Application life cycle test', function () {
         await timers.setTimeout(10000);
     });
 
-    it('can admin login', login.bind(null, 'minioakey', 'minioskey', true));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', false));
     it('has bucket', checkBucket);
     it('can logout', logout);
     it('does redirect', checkRedirect);
@@ -194,7 +194,7 @@ describe('Application life cycle test', function () {
     });
 
     it('can get app information', getAppInfo);
-    it('can admin login', login.bind(null, 'minioakey', 'minioskey', true));
+    it('can admin login', login.bind(null, 'minioakey', 'minioskey', false));
     it('has bucket', checkBucket);
     it('can logout', logout);