diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md
index 643411bb7..ed3b03860 100644
--- a/CONTRIBUTORS.md
+++ b/CONTRIBUTORS.md
@@ -1,87 +1,182 @@
# Contributors
-Silo is maintained by the Pigsty community. This file records the community members who have
-contributed to this fork since it was established in 2026 — merged code, proposed changes, and every
-issue report or compatibility finding filed against the project.
+SILO is built by **40 community contributors**, including its maintainers. This record covers every
+human author who has opened an issue or pull request in the repositories listed below, in any state.
+It was checked against the complete, paginated GitHub API records on **2026-09-07**.
-It is maintained by hand and updated at each release. GitHub's own contributor graph is unavailable
-here because `pgsty/silo` is a fork, so this file — not that page — is the project's attribution
-record. Contributors are listed by GitHub handle. Project maintainers and automated accounts are not
-duplicated in this community roll; their work, and authorship of every merged commit, remain in the
-Git history and can be verified with `git log --format='%an <%ae>'`.
+Contributors appear once in the avatar wall: authors of merged PRs first, other PR authors next,
+and issue-only authors after them. Within each group, substantial features, security and correctness
+fixes, proposals adopted in later work, and reports that led to fixes take priority. **Gold rings
+highlight significant contributions.** The tables preserve each PR's actual status.
-Upstream MinIO authorship is recorded separately: this fork derives from
-[`minio/minio`](https://github.com/minio/minio), [`NOTICE`](NOTICE) retains the upstream product
-notice, and the Git history carries the full upstream commit record.
+Automated accounts are excluded from the community count. Upstream MinIO authorship remains in
+the Git history and [NOTICE](NOTICE); this record covers activity in the PGSTY repositories.
-## Code
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-Contributors whose changes are merged into `main`.
+## Merged pull requests
-| Contributor | Change | Pull request | Commit |
+| Contributor | Contribution | Record |
+| :-- | :-- | :-- |
+| [@Vonng](https://github.com/Vonng) | Maintains SILO, Console, mcli, shared packages, releases, and documentation | 84 merged PRs across five repositories; [complete maintainer record](#maintainer-record) |
+| [@h5vx](https://github.com/h5vx) | Implemented per-bucket CORS configuration and enforcement | [pgsty/silo#71](https://github.com/pgsty/silo/pull/71) — Merged ([e4e3007da](https://github.com/pgsty/silo/commit/e4e3007da6d7d1198a6a050e34f84566d40a9654)) |
+| [@mrjavadseydi](https://github.com/mrjavadseydi) | Fixed effective bucket quota metrics; proposed access-frequency ILM | [pgsty/silo#132](https://github.com/pgsty/silo/pull/132) — Merged ([ad873c735](https://github.com/pgsty/silo/commit/ad873c73571b121293791f13f8dc46ddf5264d60))
[pgsty/silo#60](https://github.com/pgsty/silo/pull/60) — Open |
+| [@Dansyuqri](https://github.com/Dansyuqri) | Added ChecksumType to multipart completion responses | [pgsty/silo#57](https://github.com/pgsty/silo/pull/57) — Merged ([a96116b12](https://github.com/pgsty/silo/commit/a96116b128bbf2aa42f85eafbf75eb6636cd36ee)) |
+| [@ycjlin](https://github.com/ycjlin) | Fixed missing-bucket ListObjects semantics | [pgsty/silo#37](https://github.com/pgsty/silo/pull/37) — Merged ([49c8aeac4](https://github.com/pgsty/silo/commit/49c8aeac403916f52f8588bbe8ee42753d86eeef)) |
+| [@pinginfo](https://github.com/pinginfo) | Repaired bucket notification streaming | [pgsty/silo#34](https://github.com/pgsty/silo/pull/34) — Merged ([b7f52ca43](https://github.com/pgsty/silo/commit/b7f52ca4336bc45a48b81b39c8983a5e6882a6fa)) |
+| [@ZouhairCharef](https://github.com/ZouhairCharef) | Patched CVE-2026-34986 in go-jose | [pgsty/silo#18](https://github.com/pgsty/silo/pull/18) — Merged ([ff58df949](https://github.com/pgsty/silo/commit/ff58df9499865f0ed00457d282ede219091b1f33)) |
+| [@mfredenhagen](https://github.com/mfredenhagen) | Patched CVE-2026-39883 in OpenTelemetry | [pgsty/silo#19](https://github.com/pgsty/silo/pull/19) — Merged ([e4fa06394](https://github.com/pgsty/silo/commit/e4fa063942151a8b83288700f28c911376cdca9b)) |
+| [@waterkip](https://github.com/waterkip) | Repointed documentation links to the SILO portal | [pgsty/silo#41](https://github.com/pgsty/silo/pull/41) — Merged ([0ce4b0f14](https://github.com/pgsty/silo/commit/0ce4b0f14bcbcbd353270ad8d9e0919c21e0ca5e)) |
+
+## Other pull-request authors
+
+Every proposal counts, including PRs closed without merging. Authors who also have a merged PR
+appear in the section above, with their open proposals retained in the same record.
+
+| Contributor | Contribution | Pull request | Status |
| :-- | :-- | :-- | :-- |
-| [@ZouhairCharef](https://github.com/ZouhairCharef) | Upgraded `go-jose` to v4.1.4 to patch CVE-2026-34986 | [#18](https://github.com/pgsty/silo/pull/18) | [`68e0ba9`](https://github.com/pgsty/silo/commit/68e0ba997) |
-| [@mfredenhagen](https://github.com/mfredenhagen) | Bumped `go.opentelemetry.io` to address CVE-2026-39883 | [#19](https://github.com/pgsty/silo/pull/19) | [`1869bd3`](https://github.com/pgsty/silo/commit/1869bd30b) |
-| [@pinginfo](https://github.com/pinginfo) | Implemented `Flush` on `trackingResponseWriter`, repairing bucket notification streaming | [#34](https://github.com/pgsty/silo/pull/34) | [`65795ee`](https://github.com/pgsty/silo/commit/65795ee1f) |
-| [@ycjlin](https://github.com/ycjlin) | `ListObjects` returns `NoSuchBucket` for a prefix on a missing bucket | [#37](https://github.com/pgsty/silo/pull/37) | [`e9c5340`](https://github.com/pgsty/silo/commit/e9c5340be) |
-| [@waterkip](https://github.com/waterkip) | Repointed documentation links from the upstream domain to the Silo portal | [#41](https://github.com/pgsty/silo/pull/41) | [`d495d30`](https://github.com/pgsty/silo/commit/d495d30d5) |
-| [@Dansyuqri](https://github.com/Dansyuqri) | Added `ChecksumType` to the `CompleteMultipartUpload` response | [#57](https://github.com/pgsty/silo/pull/57) | [`d014a12`](https://github.com/pgsty/silo/commit/d014a12cf) |
-| [@h5vx](https://github.com/h5vx) | Implemented per-bucket CORS: stored configuration, S3 handlers, and request enforcement | [#71](https://github.com/pgsty/silo/pull/71) | [`e4e3007`](https://github.com/pgsty/silo/commit/e4e3007da) |
+| [@mikemikimike](https://github.com/mikemikimike) | Contributed the replicated SSE-C plaintext part-size fix | [pgsty/silo#125](https://github.com/pgsty/silo/pull/125) | Closed as superseded; its core plaintext-size fix landed through [silo#124](https://github.com/pgsty/silo/pull/124), with related attribute handling in [silo#128](https://github.com/pgsty/silo/pull/128) |
+| [@metaneutrons](https://github.com/metaneutrons) | Reported and proposed explicit-version delete authorization | [pgsty/silo#59](https://github.com/pgsty/silo/pull/59) | Closed as superseded; established the action split implemented in [silo#104](https://github.com/pgsty/silo/pull/104) |
+| [@magicxor](https://github.com/magicxor) | Reported and proposed conditional DELETE support for If-Match | [pgsty/silo#12](https://github.com/pgsty/silo/pull/12) | Closed after conditional DELETE support landed in [silo#145](https://github.com/pgsty/silo/pull/145) |
+| [@davinkevin](https://github.com/davinkevin) | Proposed the distroless container image and dependency automation | [pgsty/silo#21](https://github.com/pgsty/silo/pull/21) | Closed as superseded; the distroless image shipped in [RELEASE.2026-08-06](https://github.com/pgsty/silo/releases/tag/RELEASE.2026-08-06T00-00-00Z) |
+| [@lem21h](https://github.com/lem21h) | Proposed robustness and goroutine improvements | [pgsty/silo#36](https://github.com/pgsty/silo/pull/36) | Closed without merging |
+| [@sulin37392](https://github.com/sulin37392) | Proposed dependency updates | [pgsty/silo#8](https://github.com/pgsty/silo/pull/8) | Closed without merging |
-## Proposed changes
+## Issue reports
-Pull requests that are open for review, or that were closed after informing work that shipped
-differently.
+Reports are retained whether open or closed. PR authors who also opened issues are credited here
+for their reports as well; the avatar wall and community total still count each person once.
-| Contributor | Change | Pull request | Status |
-| :-- | :-- | :-- | :-- |
-| [@sulin37392](https://github.com/sulin37392) | Dependency updates against the fork | [#8](https://github.com/pgsty/silo/pull/8) | Closed |
-| [@magicxor](https://github.com/magicxor) | `DELETE` precondition checks for the `If-Match` header | [#12](https://github.com/pgsty/silo/pull/12) | Open; changes requested |
-| [@davinkevin](https://github.com/davinkevin) | Distroless-based Docker image variant | [#21](https://github.com/pgsty/silo/pull/21) | Superseded by the distroless variant shipped in RELEASE.2026-08-06, which the PR anticipated by four months |
-| [@lem21h](https://github.com/lem21h) | Assorted fixes and improvements | [#36](https://github.com/pgsty/silo/pull/36) | Closed |
-| [@metaneutrons](https://github.com/metaneutrons) | Separate `DeleteObject` and `DeleteObjectVersion` authorization for explicit versions | [#59](https://github.com/pgsty/silo/pull/59) | Closed; the proposal informed the implementation shipped in [#104](https://github.com/pgsty/silo/pull/104) |
-| [@mrjavadseydi](https://github.com/mrjavadseydi) | Access-frequency ILM for moving hot objects between server pools | [#60](https://github.com/pgsty/silo/pull/60) | Open |
-
-## Reports
-
-Bug reports, compatibility findings, and proposals filed against this fork. Several shipped fixes
-trace directly back to these: the bundled-client guarantee (#4, #9), the LDAP-over-TLS repair (#15),
-the completed native package payload (#33), GPG-signed RPMs (#43), the upstream migration guide
-(#42), and explicit-version delete authorization (#58).
-
-| Contributor | Reported |
+| Contributor | Reports |
| :-- | :-- |
-| [@mosesdd](https://github.com/mosesdd) | [#1](https://github.com/pgsty/silo/issues/1) Helm chart availability |
-| [@Xavier-777](https://github.com/Xavier-777) | [#2](https://github.com/pgsty/silo/issues/2) Console bucket lifecycle management · [#17](https://github.com/pgsty/silo/issues/17) Log and XML file preview |
-| [@jiadzh](https://github.com/jiadzh) | [#3](https://github.com/pgsty/silo/issues/3) Windows build guidance |
-| [@TLINDEN](https://github.com/TLINDEN) | [#4](https://github.com/pgsty/silo/issues/4) `mc` missing from released tarballs |
-| [@AntonOfTheWoods](https://github.com/AntonOfTheWoods) | [#5](https://github.com/pgsty/silo/issues/5) Upstream Helm chart and operator options |
-| [@zylpsrs](https://github.com/zylpsrs) | [#6](https://github.com/pgsty/silo/issues/6) Console missing Tiering and Site Replication |
-| [@nsanitate](https://github.com/nsanitate) | [#7](https://github.com/pgsty/silo/issues/7) CNCF Sandbox governance proposal |
-| [@makinikm](https://github.com/makinikm) | [#9](https://github.com/pgsty/silo/issues/9) `mc` missing from the Docker image |
-| [@magicxor](https://github.com/magicxor) | [#10](https://github.com/pgsty/silo/issues/10) `DeleteObject` ignores the `If-Match` header |
-| [@spaceg00se-r](https://github.com/spaceg00se-r) | [#11](https://github.com/pgsty/silo/issues/11) `cpuv1` support · [#14](https://github.com/pgsty/silo/issues/14) Project workflow token failure |
-| [@heroes1412](https://github.com/heroes1412) | [#13](https://github.com/pgsty/silo/issues/13) Profile option unusable |
-| [@vampywiz17](https://github.com/vampywiz17) | [#15](https://github.com/pgsty/silo/issues/15) LDAP TLS regression breaking Console login on Kubernetes |
-| [@davinkevin](https://github.com/davinkevin) | [#20](https://github.com/pgsty/silo/issues/20) Renovate for automated dependency updates |
-| [@chalukyaj](https://github.com/chalukyaj) | [#30](https://github.com/pgsty/silo/issues/30) Silo Operator discoverability |
-| [@cbornet](https://github.com/cbornet) | [#31](https://github.com/pgsty/silo/issues/31) Multipart uploads with `FULL_OBJECT` CRC32 · [#32](https://github.com/pgsty/silo/issues/32) `ListObjects` bucket-existence semantics · [#107](https://github.com/pgsty/silo/issues/107) Chunked `PutObject` with `checksumType` |
-| [@jvasile](https://github.com/jvasile) | [#33](https://github.com/pgsty/silo/issues/33) `.deb` missing user, group, and default files |
-| [@Kesavaambati](https://github.com/Kesavaambati) | [#35](https://github.com/pgsty/silo/issues/35) Community support for the Docker images |
-| [@redfoxfox](https://github.com/redfoxfox) | [#38](https://github.com/pgsty/silo/issues/38) Chinese documentation site unreachable |
-| [@kuldeep-link11](https://github.com/kuldeep-link11) | [#39](https://github.com/pgsty/silo/issues/39) `notify_nats` rejects JWT credentials files · [#40](https://github.com/pgsty/silo/issues/40) `notify_nats` target changes require a restart |
-| [@meesudzu](https://github.com/meesudzu) | [#42](https://github.com/pgsty/silo/issues/42) Migration guide from upstream MinIO |
-| [@pmezhuev](https://github.com/pmezhuev) | [#43](https://github.com/pgsty/silo/issues/43) RPM package missing its GPG signature |
-| [@kh0mka](https://github.com/kh0mka) | [#51](https://github.com/pgsty/silo/issues/51) Inter-node I/O timeout in `ReadFileStreamHandler` |
-| [@metaneutrons](https://github.com/metaneutrons) | [#58](https://github.com/pgsty/silo/issues/58) Explicit object-version delete authorization |
-| [@bagutzu](https://github.com/bagutzu) | [#61](https://github.com/pgsty/silo/issues/61) KES-compatible external KMS support, including OpenBao |
-| [@liuhaodongliu990-cmyk](https://github.com/liuhaodongliu990-cmyk) | [#62](https://github.com/pgsty/silo/issues/62) Indeterminate progress for prefix downloads |
-| [@sargarass](https://github.com/sargarass) | [#79](https://github.com/pgsty/silo/issues/79) `ListMultipartUploads` prefix and pagination semantics |
-| [@mumu-lab](https://github.com/mumu-lab) | [#106](https://github.com/pgsty/silo/issues/106) Bucket quota metric reads a deprecated field |
+| [@Vonng](https://github.com/Vonng) | 101 issues across SILO, Console, and mcli; [complete maintainer record](#maintainer-record) |
+| [@metaneutrons](https://github.com/metaneutrons) | [pgsty/silo#58](https://github.com/pgsty/silo/issues/58) Authorize explicit object-version deletes with s3:DeleteObjectVersion |
+| [@magicxor](https://github.com/magicxor) | [pgsty/silo#10](https://github.com/pgsty/silo/issues/10) DeleteObject ignores `If-Match` header (no conditional delete support) |
+| [@davinkevin](https://github.com/davinkevin) | [pgsty/silo#20](https://github.com/pgsty/silo/issues/20) Proposal: Enable Renovate for automated dependency updates |
+| [@cbornet](https://github.com/cbornet) | [pgsty/silo#31](https://github.com/pgsty/silo/issues/31) Multipart uploads with FULL_OBJECT CRC32 not working
[pgsty/silo#32](https://github.com/pgsty/silo/issues/32) `listObjects` should return `NoSuchBucket` when the bucket doesn't exist and prefix is passed
[pgsty/silo#107](https://github.com/pgsty/silo/issues/107) PutObject fails with chunked encoding and checksumType |
+| [@vampywiz17](https://github.com/vampywiz17) | [pgsty/silo#15](https://github.com/pgsty/silo/issues/15) LDAP TLS regression in RELEASE.2026-03-21T00-00-00Z breaks built-in Console and external Console LDAP login on Kubernetes Tenant
[pgsty/silo#108](https://github.com/pgsty/silo/issues/108) Web Console login regression in RELEASE.2026-09-03T13-18-01Z (local and LDAP users fail) |
+| [@mumu-lab](https://github.com/mumu-lab) | [pgsty/silo#106](https://github.com/pgsty/silo/issues/106) 监控指标读取已弃用的 BucketQuota.Quota 字段导致 Quota 指标无值 |
+| [@jvasile](https://github.com/jvasile) | [pgsty/silo#33](https://github.com/pgsty/silo/issues/33) .deb doesn't create user/group/default files |
+| [@pmezhuev](https://github.com/pmezhuev) | [pgsty/silo#43](https://github.com/pgsty/silo/issues/43) RPM package for RELEASE.2026-06-18T00-00-00Z is missing GPG signature |
+| [@TLINDEN](https://github.com/TLINDEN) | [pgsty/silo#4](https://github.com/pgsty/silo/issues/4) mc is missing in released tarballs |
+| [@makinikm](https://github.com/makinikm) | [pgsty/silo#9](https://github.com/pgsty/silo/issues/9) mc missing from pgsty/minio Docker image |
+| [@meesudzu](https://github.com/meesudzu) | [pgsty/silo#42](https://github.com/pgsty/silo/issues/42) Documentation: Add migration guide from upstream MinIO to this community fork |
+| [@kuldeep-link11](https://github.com/kuldeep-link11) | [pgsty/silo#39](https://github.com/pgsty/silo/issues/39) notify_nats rejects MINIO_NOTIFY_NATS_USER_CREDENTIALS (JWT creds file path)
[pgsty/silo#40](https://github.com/pgsty/silo/issues/40) notify_nats target changes require MinIO restart (no hot reload for new target IDs) |
+| [@sargarass](https://github.com/sargarass) | [pgsty/silo#79](https://github.com/pgsty/silo/issues/79) ListMultipartUploads: `prefix` matches only an exact key; `max-uploads`, `key-marker` and `delimiter` are ignored |
+| [@liuhaodongliu990-cmyk](https://github.com/liuhaodongliu990-cmyk) | [pgsty/silo#62](https://github.com/pgsty/silo/issues/62) fix: show indeterminate progress instead of NaN% when downloading a prefix/folder |
+| [@Xavier-777](https://github.com/Xavier-777) | [pgsty/silo#2](https://github.com/pgsty/silo/issues/2) WebUI Console 的Bucket无法管理生命周期
[pgsty/silo#17](https://github.com/pgsty/silo/issues/17) Why can't log and xml files be previewed? |
+| [@spaceg00se-r](https://github.com/spaceg00se-r) | [pgsty/silo#11](https://github.com/pgsty/silo/issues/11) Please support cpuv1
[pgsty/silo#14](https://github.com/pgsty/silo/issues/14) Add issue to project workflow fails due to missing github-token |
+| [@kh0mka](https://github.com/kh0mka) | [pgsty/silo#51](https://github.com/pgsty/silo/issues/51) Inter-node i/o timeout in ReadFileStreamHandler during storage REST API call |
+| [@bagutzu](https://github.com/bagutzu) | [pgsty/silo#61](https://github.com/pgsty/silo/issues/61) Maintain KES-compatible external KMS support, including OpenBao |
+| [@DestroyLee](https://github.com/DestroyLee) | [pgsty/silo.pgsty.com#4](https://github.com/pgsty/silo.pgsty.com/issues/4) 文档目录更新没了 |
+| [@mosesdd](https://github.com/mosesdd) | [pgsty/silo#1](https://github.com/pgsty/silo/issues/1) update and provide helm chart |
+| [@zylpsrs](https://github.com/zylpsrs) | [pgsty/silo#6](https://github.com/pgsty/silo/issues/6) 管理控制台缺少Tiering、Site Replication |
+| [@heroes1412](https://github.com/heroes1412) | [pgsty/silo#13](https://github.com/pgsty/silo/issues/13) cannot use profile |
+| [@redfoxfox](https://github.com/redfoxfox) | [pgsty/silo#38](https://github.com/pgsty/silo/issues/38) Chinese Doc site availability? |
+| [@jiadzh](https://github.com/jiadzh) | [pgsty/silo#3](https://github.com/pgsty/silo/issues/3) 能编译Windows版的吗？或者您能简单指导下怎么进行windows下EXE编辑么？ |
+| [@AntonOfTheWoods](https://github.com/AntonOfTheWoods) | [pgsty/silo#5](https://github.com/pgsty/silo/issues/5) clarify options for upstream helm chart and operator |
+| [@chalukyaj](https://github.com/chalukyaj) | [pgsty/silo#30](https://github.com/pgsty/silo/issues/30) Proposal: Evaluate silo-operator and add it to README.md to allow k8s users to discover it |
+| [@nsanitate](https://github.com/nsanitate) | [pgsty/silo#7](https://github.com/pgsty/silo/issues/7) Proposal: Apply for CNCF Sandbox to ensure long-term open governance and ecosystem trust |
+| [@Kesavaambati](https://github.com/Kesavaambati) | [pgsty/silo#35](https://github.com/pgsty/silo/issues/35) Request for Community Support and Future Maintenance of MinIO Docker Images |
-## Adding yourself
+## Audit scope
-Contributions are accepted inbound=outbound under AGPL-3.0-or-later with no CLA; see
-[`CONTRIBUTING.md`](CONTRIBUTING.md). Issue and pull-request authors are added whenever this record
-is refreshed; merged changes move into the Code section. If a contribution is missing or recorded
-incorrectly, open an issue or say so on the pull request and it will be fixed.
+All issue and PR pages were read without a date cutoff. Counts below include automated accounts;
+the **40-person** roll excludes the two bots, Copilot and dependabot. The maintained product stack
+is SILO, Console, mcli, and silo-pkg; the SDK, KES, website, and older documentation repository were
+also checked for community submissions.
+
+| Repository | Issues | Pull requests |
+| :-- | --: | --: |
+| [pgsty/silo](https://github.com/pgsty/silo) | 82 | 60 |
+| [pgsty/silo-console](https://github.com/pgsty/silo-console) | 34 | 10 |
+| [pgsty/mc](https://github.com/pgsty/mc) | 18 | 17 |
+| [pgsty/silo-pkg](https://github.com/pgsty/silo-pkg) | 0 | 3 |
+| [pgsty/silo-go](https://github.com/pgsty/silo-go) | 0 | 0 |
+| [pgsty/kes](https://github.com/pgsty/kes) | 0 | 0 |
+| [pgsty/silo.pgsty.com](https://github.com/pgsty/silo.pgsty.com) | 1 | 11 |
+| [pgsty/minio-docs](https://github.com/pgsty/minio-docs) | 0 | 0 |
+| **Total** | **135** | **101** |
+
+## Maintainer record
+
+
+@Vonng — 84 merged PRs and 101 issues
+
+### pgsty/silo
+
+**Merged PRs (45):** [pgsty/silo#44](https://github.com/pgsty/silo/pull/44 "helm: harden Silo chart delivery"), [pgsty/silo#45](https://github.com/pgsty/silo/pull/45 "helm: trim hardening to essentials"), [pgsty/silo#56](https://github.com/pgsty/silo/pull/56 "docs: adopt no-CLA + DCO policy and fix copyright terms"), [pgsty/silo#66](https://github.com/pgsty/silo/pull/66 "fix: checksum CopyObject data before compression"), [pgsty/silo#69](https://github.com/pgsty/silo/pull/69 "fix: preserve transform state on metadata-only copies"), [pgsty/silo#70](https://github.com/pgsty/silo/pull/70 "fix: return checksums from CopyObject"), [pgsty/silo#72](https://github.com/pgsty/silo/pull/72 "fix: return the remote part checksum to federated UploadPartCopy"), [pgsty/silo#73](https://github.com/pgsty/silo/pull/73 "fix: authorize user status changes by target status"), [pgsty/silo#74](https://github.com/pgsty/silo/pull/74 "fix: align multipart completion checksum errors"), [pgsty/silo#80](https://github.com/pgsty/silo/pull/80 "fix: complete per-bucket CORS release hardening"), [pgsty/silo#81](https://github.com/pgsty/silo/pull/81 "test: cover asymmetric CORS site counts"), [pgsty/silo#85](https://github.com/pgsty/silo/pull/85 "fix: restore pre-release server corrections"), [pgsty/silo#86](https://github.com/pgsty/silo/pull/86 "fix: keep rewritten CopyObject data and metadata consistent"), [pgsty/silo#87](https://github.com/pgsty/silo/pull/87 "fix: authenticate SSE-C keys on zero-byte reads"), [pgsty/silo#88](https://github.com/pgsty/silo/pull/88 "fix: skip bucket CORS lookup without an origin"), [pgsty/silo#89](https://github.com/pgsty/silo/pull/89 "fix: replicate object lock config in its own field"), [pgsty/silo#90](https://github.com/pgsty/silo/pull/90 "fix: preserve bucket configs during site adoption"), [pgsty/silo#91](https://github.com/pgsty/silo/pull/91 "fix: report site replication metadata per site"), [pgsty/silo#92](https://github.com/pgsty/silo/pull/92 "fix: reject unsupported checksum assertions"), [pgsty/silo#93](https://github.com/pgsty/silo/pull/93 "fix: reject composite CRC64NVME checksums"), [pgsty/silo#94](https://github.com/pgsty/silo/pull/94 "ci: make server release retries tag-idempotent"), [pgsty/silo#95](https://github.com/pgsty/silo/pull/95 "fix: authenticate SSE-C for object attributes"), [pgsty/silo#96](https://github.com/pgsty/silo/pull/96 "fix: reject composite CRC64NVME completion"), [pgsty/silo#97](https://github.com/pgsty/silo/pull/97 "deps: pin reviewed pre-release components"), [pgsty/silo#98](https://github.com/pgsty/silo/pull/98 "fix: authorize SSE-C attribute reads by replication permission"), [pgsty/silo#101](https://github.com/pgsty/silo/pull/101 "fix: harden CORS and replication request trust"), [pgsty/silo#103](https://github.com/pgsty/silo/pull/103 "fix: serialize whole-record bucket metadata updates"), [pgsty/silo#104](https://github.com/pgsty/silo/pull/104 "fix: authorize explicit version deletes with DeleteObjectVersion"), [pgsty/silo#121](https://github.com/pgsty/silo/pull/121 "fix: return 500 for unreadable objects instead of 206"), [pgsty/silo#122](https://github.com/pgsty/silo/pull/122 "fix: store raw SSE-C replicas verbatim on the destination"), [pgsty/silo#123](https://github.com/pgsty/silo/pull/123 "fix: honor a requested checksum algorithm on SSE-C key rotation"), [pgsty/silo#124](https://github.com/pgsty/silo/pull/124 "fix: record plaintext part sizes for replicated SSE-C multipart parts"), [pgsty/silo#126](https://github.com/pgsty/silo/pull/126 "fix: exclude SSE-C objects from compression"), [pgsty/silo#127](https://github.com/pgsty/silo/pull/127 "fix: include per-bucket CORS in bucket metadata export and import"), [pgsty/silo#128](https://github.com/pgsty/silo/pull/128 "fix: report logical part sizes and end pagination correctly in GetObjectAttributes"), [pgsty/silo#129](https://github.com/pgsty/silo/pull/129 "fix: order value-less replicated Object Lock updates by timestamp"), [pgsty/silo#130](https://github.com/pgsty/silo/pull/130 "docs: describe the startup readiness window of the health probes"), [pgsty/silo#131](https://github.com/pgsty/silo/pull/131 "fix: stop re-replicating an object whose retention was removed"), [pgsty/silo#134](https://github.com/pgsty/silo/pull/134 "fix: retransmit and re-order Object Lock for SSE-C replicas (single erasure set)"), [pgsty/silo#135](https://github.com/pgsty/silo/pull/135 "test: reconcile encrypted-parts attributes test with #119 write validation"), [pgsty/silo#138](https://github.com/pgsty/silo/pull/138 "fix: persist an honest resync terminal status about object counts"), [pgsty/silo#140](https://github.com/pgsty/silo/pull/140 "fix: count resync success by replication outcome, not target existence"), [pgsty/silo#142](https://github.com/pgsty/silo/pull/142 "fix: scope resync worker dispatch to the target being resynced"), [pgsty/silo#143](https://github.com/pgsty/silo/pull/143 "fix: honor a header-delivered checksum advertised as a chunked trailer"), [pgsty/silo#145](https://github.com/pgsty/silo/pull/145 "fix: support conditional DeleteObject (If-Match) with atomic precondition").
+
+**Issues (49):** [pgsty/silo#22](https://github.com/pgsty/silo/issues/22 "[Security] CVE-2026-33322: JWT Algorithm Confusion in OIDC Authentication"), [pgsty/silo#23](https://github.com/pgsty/silo/issues/23 "[Security] CVE-2026-33419: LDAP Login Brute-Force via User Enumeration and Missing Rate Limit"), [pgsty/silo#24](https://github.com/pgsty/silo/issues/24 "[Security] CVE-2026-34204: SSE Metadata Injection via Replication Headers (Targeted DoS)"), [pgsty/silo#25](https://github.com/pgsty/silo/issues/25 "[Security] CVE-2026-39414: Denial of Service via Unbounded Memory Allocation in S3 Select CSV Parsing"), [pgsty/silo#26](https://github.com/pgsty/silo/issues/26 "[Security] CVE-2026-32285: Potential vulnerability in third-party dependency github.com/buger/jsonparser v1.1.2"), [pgsty/silo#27](https://github.com/pgsty/silo/issues/27 "[Security] GHSA-hv4r-mvr4-25vw: Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads"), [pgsty/silo#28](https://github.com/pgsty/silo/issues/28 "[Security] GHSA-9c4q-hq6p-c237: Unauthenticated Object Write via Missing Signature Verification in Snowball Auto-Extract"), [pgsty/silo#46](https://github.com/pgsty/silo/issues/46 "UploadPart requires a per-part checksum header that AWS S3 computes server-side"), [pgsty/silo#47](https://github.com/pgsty/silo/issues/47 "CompleteMultipartUpload response omits ChecksumType"), [pgsty/silo#48](https://github.com/pgsty/silo/issues/48 "CompleteMultipartUpload checksum failures return non-AWS error codes"), [pgsty/silo#49](https://github.com/pgsty/silo/issues/49 "CompleteMultipartUpload accepts duplicate part numbers and assembles the part twice"), [pgsty/silo#50](https://github.com/pgsty/silo/issues/50 "CRC64NVME + COMPOSITE is silently canonicalised to FULL_OBJECT instead of rejected"), [pgsty/silo#52](https://github.com/pgsty/silo/issues/52 "ReadParts panics on an empty part list, stranding a keep-alive goroutine per storage-REST request"), [pgsty/silo#53](https://github.com/pgsty/silo/issues/53 "Migrating a Postgres or MySQL notify config disables all bucket notifications"), [pgsty/silo#55](https://github.com/pgsty/silo/issues/55 "Release image declares VOLUME ['/data'] but never creates it, so every non-root run fails storage init"), [pgsty/silo#63](https://github.com/pgsty/silo/issues/63 "CopyObject server-side checksum can cover transformed data when compression is enabled"), [pgsty/silo#64](https://github.com/pgsty/silo/issues/64 "Federated UploadPartCopy cannot reliably return the remote computed part checksum"), [pgsty/silo#65](https://github.com/pgsty/silo/issues/65 "MINIO_CONFIG_ENV_FILE silently ignores assignments with spaces around ="), [pgsty/silo#67](https://github.com/pgsty/silo/issues/67 "Metadata-only CopyObject can stamp compression metadata without rewriting data"), [pgsty/silo#68](https://github.com/pgsty/silo/issues/68 "CopyObjectResult omits checksum fields and minio-go drops them"), [pgsty/silo#75](https://github.com/pgsty/silo/issues/75 "Harden per-bucket CORS replication, recovery, and compatibility after #71"), [pgsty/silo#76](https://github.com/pgsty/silo/issues/76 "Fix Object Lock metadata field in site-replication initial sync"), [pgsty/silo#77](https://github.com/pgsty/silo/issues/77 "Audit site-replication source timestamps, tombstones, and per-site counters"), [pgsty/silo#78](https://github.com/pgsty/silo/issues/78 "Preserve existing Object Lock retention during site-replication bucket adoption"), [pgsty/silo#82](https://github.com/pgsty/silo/issues/82 "Zero-byte SSE-C objects never authenticate the customer key"), [pgsty/silo#83](https://github.com/pgsty/silo/issues/83 "Metadata-only CopyObject of a null version rewrites the data and leaves the metadata inconsistent"), [pgsty/silo#84](https://github.com/pgsty/silo/issues/84 "GetObjectAttributes does not authenticate the SSE-C key"), [pgsty/silo#99](https://github.com/pgsty/silo/issues/99 "Federated CopyObject silently ignores a requested checksum algorithm"), [pgsty/silo#100](https://github.com/pgsty/silo/issues/100 "Federated CopyObject rejects any source object stored inline"), [pgsty/silo#102](https://github.com/pgsty/silo/issues/102 "Serialize whole-record bucket metadata updates across config types"), [pgsty/silo#105](https://github.com/pgsty/silo/issues/105 "Audit residual bucket-metadata delete/update and cache ordering"), [pgsty/silo#109](https://github.com/pgsty/silo/issues/109 "[P1] SSE-C replicas become unreadable with destination default encryption or compression"), [pgsty/silo#110](https://github.com/pgsty/silo/issues/110 "[P1] Unreadable-object errors return HTTP 206 and are accepted as successful reads"), [pgsty/silo#111](https://github.com/pgsty/silo/issues/111 "[P1] Empty Object Lock replication updates bypass ordering and erase newer object state"), [pgsty/silo#112](https://github.com/pgsty/silo/issues/112 "[P2] Bucket metadata export/import silently loses per-bucket CORS configuration"), [pgsty/silo#113](https://github.com/pgsty/silo/issues/113 "[P2] In-place SSE-C key rotation ignores a requested checksum algorithm"), [pgsty/silo#114](https://github.com/pgsty/silo/issues/114 "[P2] GetObjectAttributes reports physical sizes for compressed or encrypted multipart parts"), [pgsty/silo#115](https://github.com/pgsty/silo/issues/115 "[P2] GetObjectAttributes pagination cannot finish with sparse multipart part numbers"), [pgsty/silo#116](https://github.com/pgsty/silo/issues/116 "[P2] Four-node restart reports online before every coordinator can read and write"), [pgsty/silo#117](https://github.com/pgsty/silo/issues/117 "[P2] Retention-removal replication mishandles empty-value and timestamp-only state"), [pgsty/silo#118](https://github.com/pgsty/silo/issues/118 "[P2] A compressed SSE-C object replicates to a replica that decrypts to an S2 stream"), [pgsty/silo#119](https://github.com/pgsty/silo/issues/119 "[P1] Replicated SSE-C multipart parts record the ciphertext length, corrupting part-number reads and later the object size"), [pgsty/silo#120](https://github.com/pgsty/silo/issues/120 "[P1] Existing SSE-C replicas cannot always be updated or repaired"), [pgsty/silo#133](https://github.com/pgsty/silo/issues/133 "[P2] Multi-pool: replica-write Object Lock reconciliation is not authoritative across server pools"), [pgsty/silo#136](https://github.com/pgsty/silo/issues/136 "[P2] Resync publishes Completed before the final object counters are persisted"), [pgsty/silo#137](https://github.com/pgsty/silo/issues/137 "resync cancellation robustness: dispatch deadlock, walker leak, and per-bucket cancel routing"), [pgsty/silo#139](https://github.com/pgsty/silo/issues/139 "[P2] Resync counts an existing replica as successful even when its update failed"), [pgsty/silo#141](https://github.com/pgsty/silo/issues/141 "resync worker dispatch is any-target, not scoped to the resync ARN"), [pgsty/silo#144](https://github.com/pgsty/silo/issues/144 "conditional DeleteObject (If-Match) is atomic only within a single erasure set").
+
+### pgsty/silo-console
+
+**Merged PRs (10):** [pgsty/silo-console#9](https://github.com/pgsty/silo-console/pull/9 "deps: pin the pre-release MCLI source"), [pgsty/silo-console#10](https://github.com/pgsty/silo-console/pull/10 "deps: pin the remote env scheme repair"), [pgsty/silo-console#11](https://github.com/pgsty/silo-console/pull/11 "ci: test the upstream package floor on a coherent module graph"), [pgsty/silo-console#38](https://github.com/pgsty/silo-console/pull/38 "Prepare the next release and migrate to silo-pkg v3.13.0"), [pgsty/silo-console#39](https://github.com/pgsty/silo-console/pull/39 "Stabilize TestCafe role session capture"), [pgsty/silo-console#40](https://github.com/pgsty/silo-console/pull/40 "Finalize the SILO Console v2.3.0 candidate"), [pgsty/silo-console#41](https://github.com/pgsty/silo-console/pull/41 "test: stabilize rewind route coverage"), [pgsty/silo-console#42](https://github.com/pgsty/silo-console/pull/42 "release: simplify the v2.3.0 publish path"), [pgsty/silo-console#43](https://github.com/pgsty/silo-console/pull/43 "build: prepare SILO Console v2.3.1"), [pgsty/silo-console#44](https://github.com/pgsty/silo-console/pull/44 "fix: prioritize the maintained SILO dependency graph").
+
+**Issues (34):** [pgsty/silo-console#1](https://github.com/pgsty/silo-console/issues/1 "Unauthenticated deep routes recurse `/login` indefinitely; plain HTTP triggers reliably"), [pgsty/silo-console#2](https://github.com/pgsty/silo-console/issues/2 "Metrics and Object Browser UI regressions: stale Uptime, malformed legends, and cramped menus"), [pgsty/silo-console#3](https://github.com/pgsty/silo-console/issues/3 "390 px viewport clips Metrics tabs and Object Browser content with no horizontal recovery"), [pgsty/silo-console#4](https://github.com/pgsty/silo-console/issues/4 "Collapsed and mobile sidebar exposes unnamed icon-only buttons"), [pgsty/silo-console#5](https://github.com/pgsty/silo-console/issues/5 "Access Key credential fields lack autocomplete metadata and trigger Chrome warnings"), [pgsty/silo-console#6](https://github.com/pgsty/silo-console/issues/6 "Add English/Chinese localization with an in-place language toggle"), [pgsty/silo-console#7](https://github.com/pgsty/silo-console/issues/7 "Migrate Console monitoring queries to MinIO Metrics V3"), [pgsty/silo-console#8](https://github.com/pgsty/silo-console/issues/8 "Replace N/A Info metrics with actionable V3 health signals"), [pgsty/silo-console#12](https://github.com/pgsty/silo-console/issues/12 "Trust forwarding headers only from explicitly configured proxies"), [pgsty/silo-console#13](https://github.com/pgsty/silo-console/issues/13 "Restore TLS certificate and hostname verification for outbound clients"), [pgsty/silo-console#14](https://github.com/pgsty/silo-console/issues/14 "Redact session credentials from detailed debug logs"), [pgsty/silo-console#15](https://github.com/pgsty/silo-console/issues/15 "Bound and validate Object Manager WebSocket sessions"), [pgsty/silo-console#16](https://github.com/pgsty/silo-console/issues/16 "Prevent stale object requests from acting on the wrong object"), [pgsty/silo-console#17](https://github.com/pgsty/silo-console/issues/17 "Close the maintained dependency release chain before the next Console tag"), [pgsty/silo-console#18](https://github.com/pgsty/silo-console/issues/18 "Keep the documented downstream replacement set synchronized with go.mod"), [pgsty/silo-console#19](https://github.com/pgsty/silo-console/issues/19 "Require the complete validation matrix for tagged releases"), [pgsty/silo-console#20](https://github.com/pgsty/silo-console/issues/20 "Prepare authoritative version metadata and embedded assets for the next release"), [pgsty/silo-console#21](https://github.com/pgsty/silo-console/issues/21 "Include license, notice, and attribution material in every release artifact"), [pgsty/silo-console#22](https://github.com/pgsty/silo-console/issues/22 "Release upload references after aborts and network failures"), [pgsty/silo-console#23](https://github.com/pgsty/silo-console/issues/23 "Close diagnostic WebSockets on unmount and bound client-side log history"), [pgsty/silo-console#24](https://github.com/pgsty/silo-console/issues/24 "Replace regex-based IAM resource matching with safe wildcard semantics"), [pgsty/silo-console#25](https://github.com/pgsty/silo-console/issues/25 "Unify SSO session identity and expiry handling across API clients"), [pgsty/silo-console#26](https://github.com/pgsty/silo-console/issues/26 "Stream and cancel multi-object ZIP downloads instead of buffering the full archive"), [pgsty/silo-console#27](https://github.com/pgsty/silo-console/issues/27 "Gate Create Bucket UI on s3:CreateBucket permission"), [pgsty/silo-console#28](https://github.com/pgsty/silo-console/issues/28 "Give every icon-only control an accessible name and fix the localized sign-out name"), [pgsty/silo-console#29](https://github.com/pgsty/silo-console/issues/29 "Handle malformed routes and persisted UI state without blank-screen crashes"), [pgsty/silo-console#30](https://github.com/pgsty/silo-console/issues/30 "Finish localization of remaining raw UI strings"), [pgsty/silo-console#31](https://github.com/pgsty/silo-console/issues/31 "Make release artifacts reproducible for a fixed commit"), [pgsty/silo-console#32](https://github.com/pgsty/silo-console/issues/32 "Add signed checksums, SBOMs, and provenance to release artifacts"), [pgsty/silo-console#33](https://github.com/pgsty/silo-console/issues/33 "Pin CI actions, tools, and browser-test dependencies immutably"), [pgsty/silo-console#34](https://github.com/pgsty/silo-console/issues/34 "Align source-container builds and image publication with the release contract"), [pgsty/silo-console#35](https://github.com/pgsty/silo-console/issues/35 "Harden the systemd service and document certificate-directory ownership"), [pgsty/silo-console#36](https://github.com/pgsty/silo-console/issues/36 "Encode Watch WebSocket filters with URLSearchParams"), [pgsty/silo-console#37](https://github.com/pgsty/silo-console/issues/37 "Preserve structured Inspect errors and avoid reading response bodies twice").
+
+### pgsty/mc
+
+**Merged PRs (16):** [pgsty/mc#1](https://github.com/pgsty/mc/pull/1 "build: harden release provenance and package metadata"), [pgsty/mc#2](https://github.com/pgsty/mc/pull/2 "rebrand: adopt Silo client identity, close SUBNET paths, add brand gate"), [pgsty/mc#3](https://github.com/pgsty/mc/pull/3 "fix: remove vendor encryption key, close proxy-set path, tighten DCO gate"), [pgsty/mc#4](https://github.com/pgsty/mc/pull/4 "fix: repair a link and help text damaged by the brand sweep"), [pgsty/mc#8](https://github.com/pgsty/mc/pull/8 "feat: add read-only checksum verification"), [pgsty/mc#9](https://github.com/pgsty/mc/pull/9 "fix: validate policy writes strictly"), [pgsty/mc#10](https://github.com/pgsty/mc/pull/10 "fix: use regular PUT for empty pipe input"), [pgsty/mc#11](https://github.com/pgsty/mc/pull/11 "ci: make release retries tag-idempotent"), [pgsty/mc#13](https://github.com/pgsty/mc/pull/13 "release: silo-pkg v3.13.0 module path, fail-closed credential redaction, release gates"), [pgsty/mc#22](https://github.com/pgsty/mc/pull/22 "fix: close the findings of the final pre-release review"), [pgsty/mc#24](https://github.com/pgsty/mc/pull/24 "fix: avoid double-closing S3 Select responses"), [pgsty/mc#27](https://github.com/pgsty/mc/pull/27 "build: prepare the 20260903 dependency release"), [pgsty/mc#32](https://github.com/pgsty/mc/pull/32 "fix: read the applied globals for pipe's quiet and json flags"), [pgsty/mc#33](https://github.com/pgsty/mc/pull/33 "fix: accept on/off and enabled/disabled in MC_* boolean env vars"), [pgsty/mc#34](https://github.com/pgsty/mc/pull/34 "fix: keep an explicit checksum on zero-byte uploads"), [pgsty/mc#35](https://github.com/pgsty/mc/pull/35 "fix: sql exits non-zero when a query fails").
+
+**Issues (18):** [pgsty/mc#5](https://github.com/pgsty/mc/issues/5 "[release gate] checksum verify drops stdout when non-TTY"), [pgsty/mc#6](https://github.com/pgsty/mc/issues/6 "[release gate] make Release workflow tag-idempotent and clean orphan drafts"), [pgsty/mc#7](https://github.com/pgsty/mc/issues/7 "[release] integrate and ship the checksum-audit mcli candidate"), [pgsty/mc#12](https://github.com/pgsty/mc/issues/12 "go.mod advertises a minio/pkg v3.6.1 floor the source cannot honor"), [pgsty/mc#14](https://github.com/pgsty/mc/issues/14 "[security][release blocker] make HTTP credential redaction fail-closed"), [pgsty/mc#15](https://github.com/pgsty/mc/issues/15 "[security][release blocker] sanitize error and JSON output before serialization"), [pgsty/mc#16](https://github.com/pgsty/mc/issues/16 "[security][release blocker] register every credential ingress before errors or network calls"), [pgsty/mc#17](https://github.com/pgsty/mc/issues/17 "[security] redact credentials from admin trace and scanner trace"), [pgsty/mc#18](https://github.com/pgsty/mc/issues/18 "[supply chain][release blocker] bind Docker artifacts to exact attestation subjects and architectures"), [pgsty/mc#19](https://github.com/pgsty/mc/issues/19 "[release gate] make artifact release tag-only and require exact-main Test Release evidence"), [pgsty/mc#20](https://github.com/pgsty/mc/issues/20 "[governance][release blocker] define review mode, split tag protection, enable immutable releases"), [pgsty/mc#21](https://github.com/pgsty/mc/issues/21 "[quality debt] archive reproducibility, test portability, and deferred compatibility gaps"), [pgsty/mc#23](https://github.com/pgsty/mc/issues/23 "sql: intermittent panic in the zstd response reader when SelectResults is closed"), [pgsty/mc#25](https://github.com/pgsty/mc/issues/25 "sql: a query error is reported but the process exits 0"), [pgsty/mc#28](https://github.com/pgsty/mc/issues/28 "[P2] Empty pipe input silently drops an explicitly requested checksum"), [pgsty/mc#29](https://github.com/pgsty/mc/issues/29 "[P2] Global --json pipe emits a progress prefix and invalid JSON"), [pgsty/mc#30](https://github.com/pgsty/mc/issues/30 "[P3] mcli pipe writes progress-bar frames into a redirected stdout, unlike every other transfer command"), [pgsty/mc#31](https://github.com/pgsty/mc/issues/31 "[P3] Every mcli command aborts when an MC_* boolean environment variable is set to on, off, enabled or disabled").
+
+### pgsty/silo-pkg
+
+**Merged PRs (3):** [pgsty/silo-pkg#1](https://github.com/pgsty/silo-pkg/pull/1 "fix: require an exact remote env URL scheme"), [pgsty/silo-pkg#2](https://github.com/pgsty/silo-pkg/pull/2 "feat!: own the module path and drop the Silo Go SDK replacement"), [pgsty/silo-pkg#3](https://github.com/pgsty/silo-pkg/pull/3 "ci: key the concurrency group on the pull request or branch").
+
+### pgsty/silo.pgsty.com
+
+**Merged PRs (10):** [pgsty/silo.pgsty.com#2](https://github.com/pgsty/silo.pgsty.com/pull/2 "docs: record CopyObject checksum invariant"), [pgsty/silo.pgsty.com#3](https://github.com/pgsty/silo.pgsty.com/pull/3 "docs: expand CopyObject checksum design"), [pgsty/silo.pgsty.com#5](https://github.com/pgsty/silo.pgsty.com/pull/5 "docs: record ListObjects NoSuchBucket decision"), [pgsty/silo.pgsty.com#6](https://github.com/pgsty/silo.pgsty.com/pull/6 "docs: record multipart checksum error contract"), [pgsty/silo.pgsty.com#7](https://github.com/pgsty/silo.pgsty.com/pull/7 "docs: record final bucket CORS hardening design"), [pgsty/silo.pgsty.com#8](https://github.com/pgsty/silo.pgsty.com/pull/8 "docs: finalize bucket CORS closure status"), [pgsty/silo.pgsty.com#9](https://github.com/pgsty/silo.pgsty.com/pull/9 "docs: record pre-release hardening and checksum contracts"), [pgsty/silo.pgsty.com#10](https://github.com/pgsty/silo.pgsty.com/pull/10 "docs: clarify site status accounting semantics"), [pgsty/silo.pgsty.com#11](https://github.com/pgsty/silo.pgsty.com/pull/11 "docs: record CORS trust and explicit version delete authorization"), [pgsty/silo.pgsty.com#13](https://github.com/pgsty/silo.pgsty.com/pull/13 "docs: startup readiness window on the Healthcheck API page").
+
+
+
+## Keeping this record current
+
+New issue and PR authors are included when this record is refreshed, regardless of merge status.
+Keep this file, the English and Chinese README avatar walls, and the
+[website contributor data](https://github.com/pgsty/silo.pgsty.com/blob/main/data/home/contributors.yaml)
+in sync. If a contribution is missing or described incorrectly, open an issue or pull request.
+
+Code contributions follow the no-CLA, DCO policy in [CONTRIBUTING.md](CONTRIBUTING.md).
diff --git a/README.md b/README.md
index b73ea6a9b..644e31833 100644
--- a/README.md
+++ b/README.md
@@ -95,70 +95,52 @@ Report vulnerabilities privately as described in [`SECURITY.md`](SECURITY.md); e
## Contributors
-The cards highlight community changes merged into `main`; the avatar wall includes every other
-community member who has opened an issue or pull request.
+**40 community contributors** build SILO, Console, mcli, shared packages, and related projects. The list includes maintainers and every human Issue or PR author, ordered by merged PRs, other PRs, then issue reports. Gold rings highlight significant contributions.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-GitHub does not generate a contributor graph for forks, so [`CONTRIBUTORS.md`](CONTRIBUTORS.md) — not the Insights page — is this project's attribution record. It names all 37 community contributors alongside the change or report they contributed.
+[View the full contribution record](CONTRIBUTORS.md) for each person's proposals, fixes, and reports.
## Background
diff --git a/README_ZH.md b/README_ZH.md
index 338939142..2075beabd 100644
--- a/README_ZH.md
+++ b/README_ZH.md
@@ -95,69 +95,52 @@ S3 API、`MINIO_*` 环境变量、`minio_*` 指标、`x-minio-*` 头、`/minio/*
## 贡献者
-上方卡片展示已合入 `main` 的社区贡献；下方头像墙收录其他所有提交过 issue 或 PR 的社区成员。
+**40 位社区贡献者**共同建设 SILO、Console、mcli、公共包与相关项目。名单包含维护者，以及所有提出 Issue 或 PR 的真人作者；按已合并 PR、其他 PR、Issue 报告排序，黄圈标记显著贡献。
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
-GitHub 不为 fork 仓库生成贡献者图表，因此 [`CONTRIBUTORS.md`](CONTRIBUTORS.md)（而非 Insights 页面）才是本项目的署名记录，其中逐一记录了全部 37 位社区贡献者对应的改动或报告。
+[查看完整贡献记录](CONTRIBUTORS.md)，了解每位贡献者的提案、修复与问题报告。
## 背景
