Bugfix release

What's Changed

• fix: listing SSE encrypted multipart objects by @harshavardhana in #18786
• adding a missing return case to fix GetObjectTagging by @zveinn in #18793
• xl-meta: Clean output by @klauspost in #18794

Full Changelog: RELEASE.2024-01-13T07-53-03Z...RELEASE.2024-01-16T16-07-38Z

Bugfix release

What's Changed

• Verify that remote target bucket is on MinIO server for bucket replication by @taran-p in #18656
• avoid disk monitoring leaks under various conditions by @harshavardhana in #18777
• xl: Remove wrong wording for errCorruptedFormat by @vadmeste in #18775
• Add more size intervals to obj size histogram by @krisis in #18772
• support proxying of tagging requests in replication by @poornas in #18649
• treat all localhost endpoints as local setup with same port by @harshavardhana in #18784

Full Changelog: RELEASE.2024-01-11T07-46-16Z...RELEASE.2024-01-13T07-53-03Z

Bugfix release

Highlights

• A possible CPU usage improvement with many nested folders when doing recursive
  listing moving to readdir() to be attempted via fd instead of using poll.FD, which
  seems to cause a good amount of CPU build-up.

• Performance improvements on bucket only heal on large dense setups, where bucket
  is now healed via each nodes providing 10x to 100x reduction in number of network calls
  depending on number of drives per node.

What's Changed

• remove outdated notes by @jiuker in #18755
• fix: prevent queries from starting before initialization by @jiuker in #18756
• Add line, col to types used in batch-expire by @krisis in #18747
• fix: s3 sql parse error for colums as with quotes by @jiuker in #18765
• avoid frivolous logs for expired credentials by @harshavardhana in #18767
• Node level bucket heal by @shtripat in #18612
• optimize readdir() open calls to be dealt with directly via 'fd' by @harshavardhana in #18762
• fix: prevent queries from starting before initialization by @jiuker in #18766
• Workflow to add issues to Tracking project by @dvaldivia in #18771
• update all dependencies and console v0.45.0 by @harshavardhana in #18773

Full Changelog: RELEASE.2024-01-05T22-17-24Z...RELEASE.2024-01-11T07-46-16Z

Bugfix release

What's Changed

• Added list of scanner metrics to document by @shtripat in #18731
• scanner: Allow full throttle if there is no parallel disk ops by @vadmeste in #18109
• fix: an odd crash when deleting null DEL markers by @harshavardhana in #18727
• prom: Add read quorum per erasure set metric by @vadmeste in #18736
• scanner: Add a config to disable short sleep between objects scan by @vadmeste in #18734
• NEW API: GetObjectAttributes by @zveinn in #18732
• simplify success response for GetObjectAttributes() by @harshavardhana in #18746
• audit: Add the count of drives from where the dangling object is removed by @vadmeste in #18737

Full Changelog: RELEASE.2024-01-01T16-36-33Z...RELEASE.2024-01-05T22-17-24Z

Feature release

Highlights

• A significant performance improvement feature to optimize ListObjects() is part of this release.
  MinIO manages some form of drive-level information about the validity of the drives, which
  It optimizes the number of disks used in a List() call per erasure set. This dramatically
  improves ListObjects() operations per second on a dense cluster. Refer to PR #18084
  for more information. This is not enabled by default but will eventually become the
  default in future releases.

• New console HTTP security headers are fully customizable now for specific needs, refer #18631

    * csp_policy
    * hsts_seconds
    * hsts_include_subdomains
    * hsts_preload
    * referrer_policy

What's Changed

• upgrade Go mod dependencies by @harshavardhana in #18710
• Upgrade Console to v0.44.0 by @dvaldivia in #18717
• clarify maximum number of buckets by @harshavardhana in #18718
• Adding ~ to match job when multiple jobs by @marioanton in #18706
• audit: Fix merrs and derrs object dangling message by @vadmeste in #18714
• re-use globalLocalDrives properly by @harshavardhana in #18721
• feat: introduce list_quorum="auto" to prefer quorum drives by @harshavardhana in #18084
• Make enableSha256 configurable in mc perf test by @moting9 in #18712
• [doc] Fix the name of RoleArn param in AssumeRoleWithWebIdentity requests by @tsuzu in #18711
• MinIO Console security headers by @pjuarezd in #18631

New Contributors

• @marioanton made their first contribution in #18706
• @moting9 made their first contribution in #18712
• @tsuzu made their first contribution in #18711
• @pjuarezd made their first contribution in #18631

Full Changelog: RELEASE.2023-12-23T07-19-11Z...RELEASE.2024-01-01T16-36-33Z

Bugfix release

What's Changed

• Export tier metrics by @krisis in #18678
• allow pre-allocating buffers to reduce frequent GCs during growth by @harshavardhana in #18686
• prom: Add online and healing drives metrics per erasure set by @vadmeste in #18700
• send proper IPv6 names avoid bracketing notation by @harshavardhana in #18699
• rename object_size -> block_size for cache subsystem by @harshavardhana in #18694
• tier: Allow edit of the new Azure and AWS auth params by @vadmeste in #18690
• fix: reject clients that do not send proper payload by @harshavardhana in #18701
• Graph cluster wide where applicable by @shtripat in #18705
• server-info: Avoid initializing audit/log http/kafka targets by @vadmeste in #18703
• Fix precendence bug in S3Select SQL IN clauses by @donatello in #18708

Full Changelog: RELEASE.2023-12-20T01-00-02Z...RELEASE.2023-12-23T07-19-11Z

Bugfix release

What's Changed

• tier: Add support of AWS S3 tiering with web identity token file by @vadmeste in #18648
• metrics: Refactor handling of histogram vectors by @krisis in #18632
• Fix incorrect metric desc for bucketRequestsDuration by @krisis in #18657
• Add APIs to create and list access keys for LDAP by @taran-p in #18402
• update go dependencies by @harshavardhana in #18662
• Fix bucket metrics api path in docs by @vanugrah in #18661
• Read new key license_v2 from SUBNET response by @anjalshireesh in #18669
• Enable cross compile for openbsd/amd64 by @danieljakots in #18666
• update dependencies for https://pkg.go.dev/vuln/GO-2023-2402 by @harshavardhana in #18676
• Fix quota config replication for SR by @poornas in #18684
• Update Console version to v0.43.1 by @cesnietor in #18683

New Contributors

• @vanugrah made their first contribution in #18661

Full Changelog: RELEASE.2023-12-14T18-51-57Z...RELEASE.2023-12-20T01-00-02Z

Bugfix release

Highlights

• Slower drives or slower networks that hit DriveMaxTimeouts but asynchronously wake up the connection
  with new data can potentially trigger an incorrect buffer to be shared among concurrent WRITE
  goroutines. The final data buffer might not be the same that was intended to be written to the disk,
  causing cross-pollution of buffers among objects.

  This release fixes this problem, which has affected releases since

  • RELEASE.2023-08-04T17-40-21Z, which added drive timeouts on the READERs
    (rarely triggered since drives don't usually hang for READERs)

  • This problem was partially addressed in RELEASE.2023-11-11T08-14-41Z unknowingly,
    However, it ended up manifesting itself now with WRITERs since the WRITERs used
    same deadline READERs for the network stream in this release.

  • We haven't seen reports of this from community users yet; we found this internally during
    our tests in a customer deployment.

All users are advised to upgrade to the latest release.

What's Changed

• re-use the same local drive used by remote-peer by @harshavardhana in #18645
• Label the notification target metrics by their target IDs by @Praveenrajmani in #18633
• update console UI to v0.43.0 release by @harshavardhana in #18653
• Fix CreateFile shared buffer corruption. by @klauspost in #18652

Full Changelog: RELEASE.2023-12-13T23-28-55Z...RELEASE.2023-12-14T18-51-57Z

Bugfix release

What's Changed

• tier: Add support of SP credentials with Azure by @vadmeste in #18630
• Fix issue [#18315], resolve the absence of the sed command in ubi-mic… by @opencmit2 in #18459
• reduce logging during permission denied errors by @harshavardhana in #18641
• healthcheck requests with user-agent mozilla do not need redirects by @harshavardhana in #18642
• Changed the expression to render the value by @shtripat in #18627
• fix datadir missing check on HeadObject by @poornas in #18646
• replication: Pass metadata timestamps in CopyObject call by @poornas in #18647

New Contributors

• @opencmit2 made their first contribution in #18459

Full Changelog: RELEASE.2023-12-09T18-17-51Z...RELEASE.2023-12-13T23-28-55Z

Feature release

Highlights

• MinIO supports starting the server arguments and configuration via a YAML configuration file. This YAML configuration
  describes everything that can be configured in a MinIO setup, such as '--address', '--console-address', and command
  line arguments for the MinIO server. Official documentation will be subsequently updated. Internal documentation on
  this feature is described here.

• Historical flag --config-dir | -C does not work anymore. to provide a certs directory, you are advised to provide the
  supported flag --certs-dir | -S instead, --config-dir has been long deprecated its finally time to completely remove
  its support.

• Bitrot files will now be triggered with a proactive heal when needed.

What's Changed

• Add support of conf file to pass arguments and options by @vadmeste in #18592
• feat: add events_errors_total metric by @jiuker in #18610
• add configuration to limit replication workers by @poornas in #18601
• use latest minisign release by @harshavardhana in #18614
• info: Populate pool/set/disk indexes for offline disks by @vadmeste in #18613
• yml-config: Add support of rootUser and rootPassword by @vadmeste in #18615
• allow bitrot files to be healed in MRF by @harshavardhana in #18618
• fix: remove ODirectReader entirely since we do not need it anymore by @harshavardhana in #18619

Full Changelog: RELEASE.2023-12-07T04-16-00Z...RELEASE.2023-12-09T18-17-51Z