Update package version to 5.3.0

| datasource      | package     | from                         | to                           |
| --------------- | ----------- | ---------------------------- | ---------------------------- |
| github-releases | minio/minio | RELEASE.2025-09-07T16-13-09Z | RELEASE.2025-10-15T17-29-55Z |

CHANGELOG

@@ -2910,3 +2910,16 @@ Improve replication performance. See (#12080, #12054, #12009) for more details.
 * fix: errUploadIDNotFound will be ignored when err is from peer client by [@jiuker](https://github.com/jiuker) in [#21504](https://github.com/minio/minio/pull/21504)
 * fix: claim based oidc for official aws libraries by [@0xMALVEE](https://github.com/0xMALVEE) in [#21468](https://github.com/minio/minio/pull/21468)
 
+[5.3.0]
+* Update minio to RELEASE.2025-10-15T17-29-55Z
+* [Full Changelog](https://github.com/minio/minio/releases/tag/RELEASE.2025-10-15T17-29-55Z)
+* A CVE was reported [Privilege Escalation via Session Policy Bypass in Service Accounts and STS](https://github.com/minio/minio/security/advisories/GHSA-jjjj-jwhf-8rgr) and fixed in this release,
+* fix: remove unnecessary replication checks by [@0xMALVEE](https://github.com/0xMALVEE) in [#21569](https://github.com/minio/minio/pull/21569)
+* LDAP TLS handshake fails with StartTLS and tls_skip_verify=off by [@mosesdd](https://github.com/mosesdd) in [#21582](https://github.com/minio/minio/pull/21582)
+* fix: incorrect poolID when after decommission adding pools by [@jiuker](https://github.com/jiuker) in [#21590](https://github.com/minio/minio/pull/21590)
+* fix: after saveRebalanceStats cancel will be empty by [@jiuker](https://github.com/jiuker) in [#21597](https://github.com/minio/minio/pull/21597)
+* Use new gofumpt by [@klauspost](https://github.com/klauspost) in [#21613](https://github.com/minio/minio/pull/21613)
+* fix: timeN function return final closure not be called by [@drivebyer](https://github.com/drivebyer) in [#21615](https://github.com/minio/minio/pull/21615)
+* fix: allow trailing slash in AWS S3 POST policies by [@cduzer](https://github.com/cduzer) in [#21612](https://github.com/minio/minio/pull/21612)
+* fix: check sub-policy properly when present by [@donatello](https://github.com/donatello) in [#21642](https://github.com/minio/minio/pull/21642)
+

CloudronManifest.json

@@ -5,8 +5,8 @@
   "description": "file://DESCRIPTION.md",
   "changelog": "file://CHANGELOG",
   "tagline": "Distributed object storage",
-  "version": "5.2.0",
-  "upstreamVersion": "RELEASE.2025-09-07T16-13-09Z",
+  "version": "5.3.0",
+  "upstreamVersion": "RELEASE.2025-10-15T17-29-55Z",
   "healthCheckPath": "/minio/login",
   "memoryLimit": 2147483648,
   "httpPort": 8000,

Dockerfile

@@ -1,12 +1,22 @@
 FROM cloudron/base:5.0.0@sha256:04fd70dbd8ad6149c19de39e35718e024417c3e01dc9c6637eaf4a41ec4e596c
 
-RUN mkdir -p /app/code
+RUN mkdir -p /app/code/go
 WORKDIR /app/code
 
-# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
-ARG MINIO_VERSION=RELEASE.2025-09-07T16-13-09Z
+# Go (https://golang.org/dl/)
+ARG GOVERSION=1.25.1
+ENV GOROOT /usr/local/go-${GOVERSION}
+ENV PATH $GOROOT/bin:$PATH
+ENV GOPATH=/app/code/go
+RUN mkdir -p /usr/local/go-${GOVERSION} && \
+    curl -L https://storage.googleapis.com/golang/go${GOVERSION}.linux-amd64.tar.gz | tar zxf - -C /usr/local/go-${GOVERSION} --strip-components 1
 
-RUN wget https://dl.min.io/server/minio/release/linux-amd64/archive/minio.${MINIO_VERSION} -O /app/code/minio && chmod +x /app/code/minio
+RUN ln -sf /usr/local/go-${GOVERSION} /usr/local/go
+
+# renovate: datasource=github-releases depName=minio/minio versioning=regex:^RELEASE\.(?<major>\d{4})-(?<minor>\d{2})-(?<patch>\d{2})T(?<build>.+)
+ARG MINIO_VERSION=RELEASE.2025-10-15T17-29-55Z
+RUN go install github.com/minio/minio@${MINIO_VERSION} && \
+    go clean -cache -modcache -testcache
 
 # Latest CLI
 RUN wget https://dl.min.io/client/mc/release/linux-amd64/mc -O /app/code/mc && chmod +x /app/code/mc

start.sh

@@ -27,5 +27,5 @@ echo "==> Changing ownership"
 [[ $(stat --format '%U' /app/data/data) != "cloudron" ]] && chown -R cloudron:cloudron /app/data
 
 echo "==> Starting minio"
-exec /usr/local/bin/gosu cloudron:cloudron /app/code/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
+exec /usr/local/bin/gosu cloudron:cloudron /app/code/go/bin/minio --quiet ${CLOUDRON_MINIO_STARTUP_ARGS} --address :9000 --console-address :8000
 

test/package-lock.json

@@ -9,11 +9,11 @@
       "version": "1.0.0",
       "license": "ISC",
       "dependencies": {
-        "@eslint/js": "^9.35.0",
-        "chromedriver": "^140.0.0",
+        "@eslint/js": "^9.37.0",
+        "chromedriver": "^141.0.3",
         "expect.js": "^0.3.1",
-        "mocha": "^11.7.2",
-        "selenium-webdriver": "^4.35.0",
+        "mocha": "^11.7.4",
+        "selenium-webdriver": "^4.36.0",
         "superagent": "^10.2.3"
       }
     },
@@ -24,9 +24,9 @@
       "license": "Apache-2.0"
     },
     "node_modules/@eslint/js": {
-      "version": "9.35.0",
-      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.35.0.tgz",
-      "integrity": "sha512-30iXE9whjlILfWobBkNerJo+TXYsgVM5ERQwMcMKCHckHflCmf7wXDAHlARoWnh0s1U72WqlbeyE7iAcCzuCPw==",
+      "version": "9.37.0",
+      "resolved": "https://registry.npmjs.org/@eslint/js/-/js-9.37.0.tgz",
+      "integrity": "sha512-jaS+NJ+hximswBG6pjNX0uEJZkrT0zwpVi3BA3vX22aFGjJjmgSTSmPpZCRKmoBL5VY/M6p0xsSJx7rk7sy5gg==",
       "license": "MIT",
       "engines": {
         "node": "^18.18.0 || ^20.9.0 || >=21.1.0"
@@ -182,13 +182,13 @@
       "license": "MIT"
     },
     "node_modules/axios": {
-      "version": "1.7.9",
-      "resolved": "https://registry.npmjs.org/axios/-/axios-1.7.9.tgz",
-      "integrity": "sha512-LhLcE7Hbiryz8oMDdDptSrWowmB4Bl6RCt6sIJKpRB4XtVf0iEgewX3au/pJqm+Py1kCASkb/FFKjxQaLtxJvw==",
+      "version": "1.12.2",
+      "resolved": "https://registry.npmjs.org/axios/-/axios-1.12.2.tgz",
+      "integrity": "sha512-vMJzPewAlRyOgxV2dU0Cuz2O8zzzx9VYtbJOaBgXFeLc4IV/Eg50n4LowmehOOR61S8ZMpc2K5Sa7g6A4jfkUw==",
       "license": "MIT",
       "dependencies": {
         "follow-redirects": "^1.15.6",
-        "form-data": "^4.0.0",
+        "form-data": "^4.0.4",
         "proxy-from-env": "^1.1.0"
       }
     },
@@ -316,14 +316,14 @@
       }
     },
     "node_modules/chromedriver": {
-      "version": "140.0.0",
-      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-140.0.0.tgz",
-      "integrity": "sha512-mv41C2fi4YX27muRMWP035HJUnKatu7gMJqBcVD1tSmufWDxDy0m38YaieKG3pa2aAIYNVhlXqiOnHkvnqNMcw==",
+      "version": "141.0.3",
+      "resolved": "https://registry.npmjs.org/chromedriver/-/chromedriver-141.0.3.tgz",
+      "integrity": "sha512-YnB6cK5OIKJvz056A97RxTMlQVj/zzDf9YnJj4jUQwc61Ixk4/cis0rguS8kzHTOLR7IkJZRUOWWGKuBYMjo0Q==",
       "hasInstallScript": true,
       "license": "Apache-2.0",
       "dependencies": {
         "@testim/chrome-version": "^1.1.4",
-        "axios": "^1.7.4",
+        "axios": "^1.12.0",
         "compare-versions": "^6.1.0",
         "extract-zip": "^2.0.1",
         "proxy-agent": "^6.4.0",
@@ -785,9 +785,9 @@
       }
     },
     "node_modules/follow-redirects": {
-      "version": "1.15.9",
-      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.9.tgz",
-      "integrity": "sha512-gew4GsXizNgdoRyqmyfMHyAmXsZDk6mHkSxZFCzW9gwlbtOW44CDtYavM+y+72qD/Vq2l550kMF52DT8fOLJqQ==",
+      "version": "1.15.11",
+      "resolved": "https://registry.npmjs.org/follow-redirects/-/follow-redirects-1.15.11.tgz",
+      "integrity": "sha512-deG2P0JfjrTxl50XGCDyfI97ZGVCxIpfKYmfyrQ54n5FO/0gfIES8C/Psl6kWVDolizcaaxZJnTS0QSMxvnsBQ==",
       "funding": [
         {
           "type": "individual",
@@ -1082,6 +1082,15 @@
         "node": ">=8"
       }
     },
+    "node_modules/is-path-inside": {
+      "version": "3.0.3",
+      "resolved": "https://registry.npmjs.org/is-path-inside/-/is-path-inside-3.0.3.tgz",
+      "integrity": "sha512-Fd4gABb+ycGAmKou8eMftCupSir5lRxqf4aD/vd0cD2qc4HL07OjCeuHMr8Ro4CoMaeCKDB0/ECBOVWjTwUvPQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=8"
+      }
+    },
     "node_modules/is-plain-obj": {
       "version": "2.1.0",
       "resolved": "https://registry.npmjs.org/is-plain-obj/-/is-plain-obj-2.1.0.tgz",
@@ -1302,9 +1311,9 @@
       }
     },
     "node_modules/mocha": {
-      "version": "11.7.2",
-      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.2.tgz",
-      "integrity": "sha512-lkqVJPmqqG/w5jmmFtiRvtA2jkDyNVUcefFJKb2uyX4dekk8Okgqop3cgbFiaIvj8uCRJVTP5x9dfxGyXm2jvQ==",
+      "version": "11.7.4",
+      "resolved": "https://registry.npmjs.org/mocha/-/mocha-11.7.4.tgz",
+      "integrity": "sha512-1jYAaY8x0kAZ0XszLWu14pzsf4KV740Gld4HXkhNTXwcHx4AUEDkPzgEHg9CM5dVcW+zv036tjpsEbLraPJj4w==",
       "license": "MIT",
       "dependencies": {
         "browser-stdout": "^1.3.1",
@@ -1315,6 +1324,7 @@
         "find-up": "^5.0.0",
         "glob": "^10.4.5",
         "he": "^1.2.0",
+        "is-path-inside": "^3.0.3",
         "js-yaml": "^4.1.0",
         "log-symbols": "^4.1.0",
         "minimatch": "^9.0.5",
@@ -1610,9 +1620,9 @@
       "license": "MIT"
     },
     "node_modules/selenium-webdriver": {
-      "version": "4.35.0",
-      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.35.0.tgz",
-      "integrity": "sha512-Baaeiuyu7BIIsSYf0SI7Mi55gsNmdI00KM0Hcofw1RnAY+0QEVpdh5yAxueDxgTZS8vcbGZFU0NJ6Qc1riIrLg==",
+      "version": "4.36.0",
+      "resolved": "https://registry.npmjs.org/selenium-webdriver/-/selenium-webdriver-4.36.0.tgz",
+      "integrity": "sha512-rZGqjXiqNVL6QNqKNEk5DPaIMPbvApcmAS9QsXyt5wT3sfTSHGCh4AX/YKeDTOwei1BOZDlPOKBd82WCosUt9w==",
       "funding": [
         {
           "type": "github",
@@ -1627,8 +1637,8 @@
       "dependencies": {
         "@bazel/runfiles": "^6.3.1",
         "jszip": "^3.10.1",
-        "tmp": "^0.2.3",
-        "ws": "^8.18.2"
+        "tmp": "^0.2.5",
+        "ws": "^8.18.3"
       },
       "engines": {
         "node": ">= 20.0.0"
@@ -1994,9 +2004,9 @@
       "license": "MIT"
     },
     "node_modules/tmp": {
-      "version": "0.2.3",
-      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.3.tgz",
-      "integrity": "sha512-nZD7m9iCPC5g0pYmcaxogYKggSfLsdxl8of3Q/oIbqCqLLIO9IAF0GWjX1z9NZRHPiXv8Wex4yDCaZsgEw0Y8w==",
+      "version": "0.2.5",
+      "resolved": "https://registry.npmjs.org/tmp/-/tmp-0.2.5.tgz",
+      "integrity": "sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==",
       "license": "MIT",
       "engines": {
         "node": ">=14.14"

test/package.json

@@ -9,11 +9,11 @@
   "author": "",
   "license": "ISC",
   "dependencies": {
-    "@eslint/js": "^9.35.0",
-    "chromedriver": "^140.0.0",
+    "@eslint/js": "^9.37.0",
+    "chromedriver": "^141.0.3",
     "expect.js": "^0.3.1",
-    "mocha": "^11.7.2",
-    "selenium-webdriver": "^4.35.0",
+    "mocha": "^11.7.4",
+    "selenium-webdriver": "^4.36.0",
     "superagent": "^10.2.3"
   }
 }