diff --git a/README.md b/README.md index 8b6bb4cf1..a654b305f 100644 --- a/README.md +++ b/README.md @@ -3,7 +3,7 @@ Generated by [Repository Cards](https://github.com/pgsty/silo/actions/workflows/repository-cards.yml) at 00:00 UTC daily (08:00 Asia/Shanghai). GitHub may queue scheduled runs. -Snapshot: 2026-11-10. 4,599 stars; 76 community contributors. +Snapshot: 2026-11-11. 4,625 stars; 81 community contributors. - `contributors-light.svg` / `contributors-dark.svg`: human issue and PR authors across the SILO project scope, plus reviewed acknowledgements. Bots are excluded. Gold rings follow the reviewed companion-site roster; new authors are collected automatically. - `star-history-light.svg` / `star-history-dark.svg`: initial history reconstructed from the then-current stargazers; later points are daily observed totals, including decreases. Missing days are not fabricated. diff --git a/contributors-dark.svg b/contributors-dark.svg index dfdc01acf..d47d84b40 100644 --- a/contributors-dark.svg +++ b/contributors-dark.svg @@ -1,4 +1,4 @@ -SILO community — 76 contributorsThe existing SILO community roll, including code, proposals and reports across related projects. Gold rings retain the existing significant-contribution designation. Snapshot 2026-11-10. +SILO community — 81 contributorsThe existing SILO community roll, including code, proposals and reports across related projects. Gold rings retain the existing significant-contribution designation. Snapshot 2026-11-11. @@ -24,4 +24,4 @@ - SILO / COMMUNITYContributorsCode, proposals & reports across SILO and related projects76COMMUNITY CONTRIBUTORS@Vonng — Maintains SILO, Console, mcli, shared packages, releases, and documentation@ZouhairCharef — Patched CVE-2026-34986 in go-jose@mfredenhagen — Patched CVE-2026-39883 in OpenTelemetry@cbornet — Reported checksum and missing-bucket defects and aligned S3 checksum error messages@pinginfo — Repaired bucket notification streaming@ycjlin — Fixed missing-bucket ListObjects semantics@waterkip — Repointed documentation links to the SILO portal@Dansyuqri — Added ChecksumType to multipart completion responses@mrjavadseydi — Fixed bucket quota metrics and mcli alias regions; contributed access-frequency ILM and S3-compatible multipart listing proposals@h5vx — Implemented per-bucket CORS configuration and enforcement@nikitapogromsky — Fixed duplicate logger targets that broke Metrics V3 collection@julienlau — Fixed missing-commit-metadata error handling and stale metadata reuse; contributed replication reports and proposals@Aeirx — Preserved Object Lock legal-hold headers in federated CopyObject@AleksaMCode — Fixed the Lambda target-set emptiness check and added a regression test@yupoet — Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case@clown15 — Fixed native multipart-upload timestamp parsing during stale-upload cleanup@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation@910patin — Fixed long-DN LDAP login while preserving IAM revocation-record errors@cyberbret — Contributed on-demand folder and bucket usage scans and the optional persistent usage worker@EduardoAndradeMachado — Contributed Brazilian Portuguese translations to Console and privately reported a security issue@magicxor — Reported and proposed conditional DELETE support for If-Match@davinkevin — Proposed the distroless container image and dependency automation@metaneutrons — Reported and proposed explicit-version delete authorization@mikemikimike — Contributed the replicated SSE-C plaintext part-size fix@chodorenko — Reported and contributed the fix for aws-chunked leaking into replica metadata@dihmandrake — Reported dry-run healing safety issues and proposed parallel deep verification and Helm configuration options@sulin37392 — Proposed dependency updates@lem21h — Proposed robustness and goroutine improvements@liubin07 — Proposed an opt-in object naming mode for coexisting object and prefix names@HaveFun83 — Proposed configurable Kubernetes health probes in the Helm chart@kh0mka — Reported inter-node I/O timeouts, OIDC configuration-fetch failures, and lost Console bucket quotas@MikeVL — Reported resync throughput overflow and missing JSON status, both fixed in mcli 20261026@vampywiz17 — Reported LDAP TLS and Console login regressions@jiri-pejchal — Reported the RabbitMQ client vulnerability and the Console share proxy's exposure of internal metrics@AEGEGE — Reported the slow-HTTP denial-of-service vulnerability@naiveHobo — Reported an IAM admin API access-control issue and the unavailable private reporting channel@orenyomtov — Reported the unsigned-header CopyObject cross-object read (SN-2026-011)@nik0xFF — Reported a security issue privately by email@szopi00 — Reported the Object Lock GOVERNANCE retention authorization bypass@GhaziTriki — Investigated policy-query and Console slowdown and identified overlapping client mirror jobs@haf — Reported audit webhook delivery stopping on peer nodes after configuration reload@sun1024 — Privately reported a security issue in SILO@mosesdd — Requested a maintained Helm chart@Xavier-777 — Reported Console lifecycle management and file preview gaps@jiadzh — Requested Windows build guidance@AntonOfTheWoods — Asked for clarity on Helm chart and operator options@TLINDEN — Reported the missing client in release tarballs@zylpsrs — Reported missing Console tiering and site replication@nsanitate — Proposed CNCF Sandbox governance@makinikm — Reported the missing client in the container image@spaceg00se-r — Requested cpuv1 support and reported a workflow token failure@heroes1412 — Reported the unusable profiling option@chalukyaj — Proposed making the SILO Operator easier to discover@jvasile — Reported missing user, group, and defaults in Debian packages@Kesavaambati — Asked about community support and image maintenance@redfoxfox — Reported Chinese documentation availability@kuldeep-link11 — Reported NATS JWT credentials and target reload issues@meesudzu — Requested the migration guide from upstream MinIO@pmezhuev — Reported missing RPM package signatures@bagutzu — Requested KES-compatible external KMS and OpenBao support@liuhaodongliu990-cmyk — Reported indeterminate progress for prefix downloads@DestroyLee — Reported the missing documentation navigation@sargarass — Reported ListMultipartUploads prefix and pagination semantics@mumu-lab — Reported bucket quota metrics reading a deprecated field@haiming236 — Proposed a built-in image processing pipeline@tiredenzo — Reported inconsistent documentation for two-drive EC:1 support@aschyolkin — Reported a data race in CPU metrics collection@0mp — Requested and discussed FreeBSD support@ztarbug — Requested publication of the Helm chart@zmstone — Requested a GitHub Container Registry mirror@Crowley723 — Requested friendly names for users@geraldcombs — Suggested Windows ZIP packaging, adopted across the maintained release tools@devTeam-AiReg — Asked about availability of the release containing IAM security fixes@azataiot — Reported and analyzed high-latency Console health-report truncation during WebSocket close@siyahkut — Requested Turkish language support@seumasdunlop — Reported the outdated default server image tag in the Helm chartGold rings mark significant contributionsAS OF 2026-11-10 + SILO / COMMUNITYContributorsCode, proposals & reports across SILO and related projects81COMMUNITY CONTRIBUTORS@Vonng — Maintains SILO, Console, mcli, shared packages, releases, and documentation@ZouhairCharef — Patched CVE-2026-34986 in go-jose@mfredenhagen — Patched CVE-2026-39883 in OpenTelemetry@cbornet — Reported checksum and missing-bucket defects and aligned S3 checksum error messages@pinginfo — Repaired bucket notification streaming@ycjlin — Fixed missing-bucket ListObjects semantics@waterkip — Repointed documentation links to the SILO portal@Dansyuqri — Added ChecksumType to multipart completion responses@mrjavadseydi — Fixed bucket quota metrics and mcli alias regions; contributed access-frequency ILM and S3-compatible multipart listing proposals@h5vx — Implemented per-bucket CORS configuration and enforcement@nikitapogromsky — Fixed duplicate logger targets that broke Metrics V3 collection@julienlau — Fixed missing-commit-metadata error handling and stale metadata reuse; contributed replication reports and proposals@Aeirx — Preserved Object Lock legal-hold headers in federated CopyObject@AleksaMCode — Fixed the Lambda target-set emptiness check and added a regression test@yupoet — Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case@clown15 — Fixed native multipart-upload timestamp parsing during stale-upload cleanup@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures@910patin — Fixed long-DN LDAP login while preserving IAM revocation-record errors@cyberbret — Contributed on-demand folder and bucket usage scans and the optional persistent usage worker@EduardoAndradeMachado — Contributed Brazilian Portuguese translations to Console and privately reported a security issue@magicxor — Reported and proposed conditional DELETE support for If-Match@davinkevin — Proposed the distroless container image and dependency automation@metaneutrons — Reported and proposed explicit-version delete authorization@mikemikimike — Contributed the replicated SSE-C plaintext part-size fix@chodorenko — Reported and contributed the fix for aws-chunked leaking into replica metadata@dihmandrake — Reported dry-run healing safety issues and proposed parallel deep verification and Helm configuration options@sulin37392 — Proposed dependency updates@lem21h — Proposed robustness and goroutine improvements@liubin07 — Proposed an opt-in object naming mode for coexisting object and prefix names@HaveFun83 — Proposed configurable Kubernetes health probes in the Helm chart@kh0mka — Reported inter-node I/O timeouts, OIDC configuration-fetch failures, and lost Console bucket quotas@MikeVL — Reported resync throughput overflow and missing JSON status, both fixed in mcli 20261026@vampywiz17 — Reported LDAP TLS and Console login regressions@jiri-pejchal — Reported the RabbitMQ client vulnerability and the Console share proxy's exposure of internal metrics@AEGEGE — Reported the slow-HTTP denial-of-service vulnerability@naiveHobo — Reported an IAM admin API access-control issue and the unavailable private reporting channel@orenyomtov — Reported the unsigned-header CopyObject cross-object read (SN-2026-011)@nik0xFF — Reported a security issue privately by email@szopi00 — Reported the Object Lock GOVERNANCE retention authorization bypass@GhaziTriki — Investigated policy-query and Console slowdown and identified overlapping client mirror jobs@haf — Reported audit and logger webhook delivery stopping on peer nodes after configuration reload@sun1024 — Privately reported a security issue in SILO@SimeonPoot — Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506)@KoreaSecurity — Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322)@XlabAITeam — Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414)@ddd — Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145)@adrian-doyensec — Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600)@mosesdd — Requested a maintained Helm chart@Xavier-777 — Reported Console lifecycle management and file preview gaps@jiadzh — Requested Windows build guidance@AntonOfTheWoods — Asked for clarity on Helm chart and operator options@TLINDEN — Reported the missing client in release tarballs@zylpsrs — Reported missing Console tiering and site replication@nsanitate — Proposed CNCF Sandbox governance@makinikm — Reported the missing client in the container image@spaceg00se-r — Requested cpuv1 support and reported a workflow token failure@heroes1412 — Reported the unusable profiling option@chalukyaj — Proposed making the SILO Operator easier to discover@jvasile — Reported missing user, group, and defaults in Debian packages@Kesavaambati — Asked about community support and image maintenance@redfoxfox — Reported Chinese documentation availability@kuldeep-link11 — Reported NATS JWT credentials and target reload issues@meesudzu — Requested the migration guide from upstream MinIO@pmezhuev — Reported missing RPM package signatures@bagutzu — Requested KES-compatible external KMS and OpenBao support@liuhaodongliu990-cmyk — Reported indeterminate progress for prefix downloads@DestroyLee — Reported the missing documentation navigation@sargarass — Reported ListMultipartUploads prefix and pagination semantics@mumu-lab — Reported bucket quota metrics reading a deprecated field@haiming236 — Proposed a built-in image processing pipeline@tiredenzo — Reported inconsistent documentation for two-drive EC:1 support@aschyolkin — Reported a data race in CPU metrics collection@0mp — Requested and discussed FreeBSD support@ztarbug — Requested publication of the Helm chart@zmstone — Requested a GitHub Container Registry mirror@Crowley723 — Requested friendly names for users@geraldcombs — Suggested Windows ZIP packaging, adopted across the maintained release tools@devTeam-AiReg — Asked about availability of the release containing IAM security fixes@azataiot — Reported and analyzed high-latency Console health-report truncation during WebSocket close@siyahkut — Requested Turkish language support@seumasdunlop — Reported the outdated default server image tag in the Helm chartGold rings mark significant contributionsAS OF 2026-11-11 diff --git a/contributors-light.svg b/contributors-light.svg index 421a5fd2c..9d2ec5eaa 100644 --- a/contributors-light.svg +++ b/contributors-light.svg @@ -1,4 +1,4 @@ -SILO community — 76 contributorsThe existing SILO community roll, including code, proposals and reports across related projects. Gold rings retain the existing significant-contribution designation. Snapshot 2026-11-10. +SILO community — 81 contributorsThe existing SILO community roll, including code, proposals and reports across related projects. Gold rings retain the existing significant-contribution designation. Snapshot 2026-11-11. @@ -24,4 +24,4 @@ - SILO / COMMUNITYContributorsCode, proposals & reports across SILO and related projects76COMMUNITY CONTRIBUTORS@Vonng — Maintains SILO, Console, mcli, shared packages, releases, and documentation@ZouhairCharef — Patched CVE-2026-34986 in go-jose@mfredenhagen — Patched CVE-2026-39883 in OpenTelemetry@cbornet — Reported checksum and missing-bucket defects and aligned S3 checksum error messages@pinginfo — Repaired bucket notification streaming@ycjlin — Fixed missing-bucket ListObjects semantics@waterkip — Repointed documentation links to the SILO portal@Dansyuqri — Added ChecksumType to multipart completion responses@mrjavadseydi — Fixed bucket quota metrics and mcli alias regions; contributed access-frequency ILM and S3-compatible multipart listing proposals@h5vx — Implemented per-bucket CORS configuration and enforcement@nikitapogromsky — Fixed duplicate logger targets that broke Metrics V3 collection@julienlau — Fixed missing-commit-metadata error handling and stale metadata reuse; contributed replication reports and proposals@Aeirx — Preserved Object Lock legal-hold headers in federated CopyObject@AleksaMCode — Fixed the Lambda target-set emptiness check and added a regression test@yupoet — Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case@clown15 — Fixed native multipart-upload timestamp parsing during stale-upload cleanup@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation@910patin — Fixed long-DN LDAP login while preserving IAM revocation-record errors@cyberbret — Contributed on-demand folder and bucket usage scans and the optional persistent usage worker@EduardoAndradeMachado — Contributed Brazilian Portuguese translations to Console and privately reported a security issue@magicxor — Reported and proposed conditional DELETE support for If-Match@davinkevin — Proposed the distroless container image and dependency automation@metaneutrons — Reported and proposed explicit-version delete authorization@mikemikimike — Contributed the replicated SSE-C plaintext part-size fix@chodorenko — Reported and contributed the fix for aws-chunked leaking into replica metadata@dihmandrake — Reported dry-run healing safety issues and proposed parallel deep verification and Helm configuration options@sulin37392 — Proposed dependency updates@lem21h — Proposed robustness and goroutine improvements@liubin07 — Proposed an opt-in object naming mode for coexisting object and prefix names@HaveFun83 — Proposed configurable Kubernetes health probes in the Helm chart@kh0mka — Reported inter-node I/O timeouts, OIDC configuration-fetch failures, and lost Console bucket quotas@MikeVL — Reported resync throughput overflow and missing JSON status, both fixed in mcli 20261026@vampywiz17 — Reported LDAP TLS and Console login regressions@jiri-pejchal — Reported the RabbitMQ client vulnerability and the Console share proxy's exposure of internal metrics@AEGEGE — Reported the slow-HTTP denial-of-service vulnerability@naiveHobo — Reported an IAM admin API access-control issue and the unavailable private reporting channel@orenyomtov — Reported the unsigned-header CopyObject cross-object read (SN-2026-011)@nik0xFF — Reported a security issue privately by email@szopi00 — Reported the Object Lock GOVERNANCE retention authorization bypass@GhaziTriki — Investigated policy-query and Console slowdown and identified overlapping client mirror jobs@haf — Reported audit webhook delivery stopping on peer nodes after configuration reload@sun1024 — Privately reported a security issue in SILO@mosesdd — Requested a maintained Helm chart@Xavier-777 — Reported Console lifecycle management and file preview gaps@jiadzh — Requested Windows build guidance@AntonOfTheWoods — Asked for clarity on Helm chart and operator options@TLINDEN — Reported the missing client in release tarballs@zylpsrs — Reported missing Console tiering and site replication@nsanitate — Proposed CNCF Sandbox governance@makinikm — Reported the missing client in the container image@spaceg00se-r — Requested cpuv1 support and reported a workflow token failure@heroes1412 — Reported the unusable profiling option@chalukyaj — Proposed making the SILO Operator easier to discover@jvasile — Reported missing user, group, and defaults in Debian packages@Kesavaambati — Asked about community support and image maintenance@redfoxfox — Reported Chinese documentation availability@kuldeep-link11 — Reported NATS JWT credentials and target reload issues@meesudzu — Requested the migration guide from upstream MinIO@pmezhuev — Reported missing RPM package signatures@bagutzu — Requested KES-compatible external KMS and OpenBao support@liuhaodongliu990-cmyk — Reported indeterminate progress for prefix downloads@DestroyLee — Reported the missing documentation navigation@sargarass — Reported ListMultipartUploads prefix and pagination semantics@mumu-lab — Reported bucket quota metrics reading a deprecated field@haiming236 — Proposed a built-in image processing pipeline@tiredenzo — Reported inconsistent documentation for two-drive EC:1 support@aschyolkin — Reported a data race in CPU metrics collection@0mp — Requested and discussed FreeBSD support@ztarbug — Requested publication of the Helm chart@zmstone — Requested a GitHub Container Registry mirror@Crowley723 — Requested friendly names for users@geraldcombs — Suggested Windows ZIP packaging, adopted across the maintained release tools@devTeam-AiReg — Asked about availability of the release containing IAM security fixes@azataiot — Reported and analyzed high-latency Console health-report truncation during WebSocket close@siyahkut — Requested Turkish language support@seumasdunlop — Reported the outdated default server image tag in the Helm chartGold rings mark significant contributionsAS OF 2026-11-10 + SILO / COMMUNITYContributorsCode, proposals & reports across SILO and related projects81COMMUNITY CONTRIBUTORS@Vonng — Maintains SILO, Console, mcli, shared packages, releases, and documentation@ZouhairCharef — Patched CVE-2026-34986 in go-jose@mfredenhagen — Patched CVE-2026-39883 in OpenTelemetry@cbornet — Reported checksum and missing-bucket defects and aligned S3 checksum error messages@pinginfo — Repaired bucket notification streaming@ycjlin — Fixed missing-bucket ListObjects semantics@waterkip — Repointed documentation links to the SILO portal@Dansyuqri — Added ChecksumType to multipart completion responses@mrjavadseydi — Fixed bucket quota metrics and mcli alias regions; contributed access-frequency ILM and S3-compatible multipart listing proposals@h5vx — Implemented per-bucket CORS configuration and enforcement@nikitapogromsky — Fixed duplicate logger targets that broke Metrics V3 collection@julienlau — Fixed missing-commit-metadata error handling and stale metadata reuse; contributed replication reports and proposals@Aeirx — Preserved Object Lock legal-hold headers in federated CopyObject@AleksaMCode — Fixed the Lambda target-set emptiness check and added a regression test@yupoet — Improved checksum mismatch messages, verified erasure-coding documentation, and contributed a single-node migration case@clown15 — Fixed native multipart-upload timestamp parsing during stale-upload cleanup@botdeniska — Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures@910patin — Fixed long-DN LDAP login while preserving IAM revocation-record errors@cyberbret — Contributed on-demand folder and bucket usage scans and the optional persistent usage worker@EduardoAndradeMachado — Contributed Brazilian Portuguese translations to Console and privately reported a security issue@magicxor — Reported and proposed conditional DELETE support for If-Match@davinkevin — Proposed the distroless container image and dependency automation@metaneutrons — Reported and proposed explicit-version delete authorization@mikemikimike — Contributed the replicated SSE-C plaintext part-size fix@chodorenko — Reported and contributed the fix for aws-chunked leaking into replica metadata@dihmandrake — Reported dry-run healing safety issues and proposed parallel deep verification and Helm configuration options@sulin37392 — Proposed dependency updates@lem21h — Proposed robustness and goroutine improvements@liubin07 — Proposed an opt-in object naming mode for coexisting object and prefix names@HaveFun83 — Proposed configurable Kubernetes health probes in the Helm chart@kh0mka — Reported inter-node I/O timeouts, OIDC configuration-fetch failures, and lost Console bucket quotas@MikeVL — Reported resync throughput overflow and missing JSON status, both fixed in mcli 20261026@vampywiz17 — Reported LDAP TLS and Console login regressions@jiri-pejchal — Reported the RabbitMQ client vulnerability and the Console share proxy's exposure of internal metrics@AEGEGE — Reported the slow-HTTP denial-of-service vulnerability@naiveHobo — Reported an IAM admin API access-control issue and the unavailable private reporting channel@orenyomtov — Reported the unsigned-header CopyObject cross-object read (SN-2026-011)@nik0xFF — Reported a security issue privately by email@szopi00 — Reported the Object Lock GOVERNANCE retention authorization bypass@GhaziTriki — Investigated policy-query and Console slowdown and identified overlapping client mirror jobs@haf — Reported audit and logger webhook delivery stopping on peer nodes after configuration reload@sun1024 — Privately reported a security issue in SILO@SimeonPoot — Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506)@KoreaSecurity — Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322)@XlabAITeam — Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414)@ddd — Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145)@adrian-doyensec — Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600)@mosesdd — Requested a maintained Helm chart@Xavier-777 — Reported Console lifecycle management and file preview gaps@jiadzh — Requested Windows build guidance@AntonOfTheWoods — Asked for clarity on Helm chart and operator options@TLINDEN — Reported the missing client in release tarballs@zylpsrs — Reported missing Console tiering and site replication@nsanitate — Proposed CNCF Sandbox governance@makinikm — Reported the missing client in the container image@spaceg00se-r — Requested cpuv1 support and reported a workflow token failure@heroes1412 — Reported the unusable profiling option@chalukyaj — Proposed making the SILO Operator easier to discover@jvasile — Reported missing user, group, and defaults in Debian packages@Kesavaambati — Asked about community support and image maintenance@redfoxfox — Reported Chinese documentation availability@kuldeep-link11 — Reported NATS JWT credentials and target reload issues@meesudzu — Requested the migration guide from upstream MinIO@pmezhuev — Reported missing RPM package signatures@bagutzu — Requested KES-compatible external KMS and OpenBao support@liuhaodongliu990-cmyk — Reported indeterminate progress for prefix downloads@DestroyLee — Reported the missing documentation navigation@sargarass — Reported ListMultipartUploads prefix and pagination semantics@mumu-lab — Reported bucket quota metrics reading a deprecated field@haiming236 — Proposed a built-in image processing pipeline@tiredenzo — Reported inconsistent documentation for two-drive EC:1 support@aschyolkin — Reported a data race in CPU metrics collection@0mp — Requested and discussed FreeBSD support@ztarbug — Requested publication of the Helm chart@zmstone — Requested a GitHub Container Registry mirror@Crowley723 — Requested friendly names for users@geraldcombs — Suggested Windows ZIP packaging, adopted across the maintained release tools@devTeam-AiReg — Asked about availability of the release containing IAM security fixes@azataiot — Reported and analyzed high-latency Console health-report truncation during WebSocket close@siyahkut — Requested Turkish language support@seumasdunlop — Reported the outdated default server image tag in the Helm chartGold rings mark significant contributionsAS OF 2026-11-11 diff --git a/contributors.json b/contributors.json index 221f2e507..347a312d3 100644 --- a/contributors.json +++ b/contributors.json @@ -1,6 +1,6 @@ { "repository": "pgsty/silo", - "updated": "2026-11-10", + "updated": "2026-11-11", "people": [ { "handle": "Vonng", @@ -134,7 +134,7 @@ "handle": "botdeniska", "group": "code", "featured": true, - "what": "Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation", + "what": "Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures", "firstContribution": "2026-10-17", "avatarDataUrl": "data:image/jpeg;base64,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" }, @@ -326,7 +326,7 @@ "handle": "haf", "group": "reports", "featured": true, - "what": "Reported audit webhook delivery stopping on peer nodes after configuration reload", + "what": "Reported audit and logger webhook delivery stopping on peer nodes after configuration reload", "firstContribution": "2026-10-26", "avatarDataUrl": "data:image/jpeg;base64,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" }, @@ -338,6 +338,46 @@ "firstContribution": "9999-12-31", "avatarDataUrl": "data:image/jpeg;base64,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" }, + { + "handle": "SimeonPoot", + "group": "reports", + "featured": true, + "what": "Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506)", + "firstContribution": "9999-12-31", + "avatarDataUrl": "data:image/png;base64,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" + }, + { + "handle": "KoreaSecurity", + "group": "reports", + "featured": true, + "what": "Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322)", + "firstContribution": "9999-12-31", + "avatarDataUrl": "data:image/png;base64,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" + }, + { + "handle": "XlabAITeam", + "group": "reports", + "featured": true, + "what": "Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414)", + "firstContribution": "9999-12-31", + "avatarDataUrl": "data:image/png;base64,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" + }, + { + "handle": "ddd", + "group": "reports", + "featured": true, + "what": "Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145)", + "firstContribution": "9999-12-31", + "avatarDataUrl": "data:image/jpeg;base64,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" + }, + { + "handle": "adrian-doyensec", + "group": "reports", + "featured": true, + "what": "Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600)", + "firstContribution": "9999-12-31", + "avatarDataUrl": "data:image/png;base64,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" + }, { "handle": "mosesdd", "group": "reports", diff --git a/curated.json b/curated.json index 9069b8d2f..bfce990aa 100644 --- a/curated.json +++ b/curated.json @@ -1,6 +1,6 @@ { - "updated": "2026-11-09T05:40:48+00:00", - "revision": "5a9fa30f649c092131610b8ba7d1bbcc79dffc59", + "updated": "2026-11-10T01:20:00+00:00", + "revision": "7caf268729c321ef512df54d7a797a94664f55c6", "repositories": [ "pgsty/silo", "pgsty/silo-console", @@ -132,7 +132,7 @@ "handle": "botdeniska", "group": "code", "featured": true, - "what": "Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, and faster policy evaluation", + "what": "Contributed multi-pool migration, deletion and lifecycle safety, conditional multipart checks, native restore reports and verification, LDAP login and storage cleanup fixes, replication checksum repairs, faster policy evaluation, and private security disclosures", "firstContribution": "2026-10-17" }, { @@ -300,7 +300,7 @@ "handle": "haf", "group": "reports", "featured": true, - "what": "Reported audit webhook delivery stopping on peer nodes after configuration reload", + "what": "Reported audit and logger webhook delivery stopping on peer nodes after configuration reload", "firstContribution": "2026-10-26" }, { @@ -310,6 +310,41 @@ "what": "Privately reported a security issue in SILO", "firstContribution": "9999-12-31" }, + { + "handle": "SimeonPoot", + "group": "reports", + "featured": true, + "what": "Discovered the session-policy privilege escalation in service accounts and STS (CVE-2025-62506)", + "firstContribution": "9999-12-31" + }, + { + "handle": "KoreaSecurity", + "group": "reports", + "featured": true, + "what": "Discovered the OIDC JWT algorithm confusion vulnerability (CVE-2026-33322)", + "firstContribution": "9999-12-31" + }, + { + "handle": "XlabAITeam", + "group": "reports", + "featured": true, + "what": "Discovered the S3 Select oversized record memory exhaustion vulnerability (CVE-2026-39414)", + "firstContribution": "9999-12-31" + }, + { + "handle": "ddd", + "group": "reports", + "featured": true, + "what": "Discovered the Snowball auto-extract and unsigned-trailer query authentication bypasses (CVE-2026-40344, CVE-2026-41145)", + "firstContribution": "9999-12-31" + }, + { + "handle": "adrian-doyensec", + "group": "reports", + "featured": true, + "what": "Reported the internode ReadMultiple msgpack path traversal (CVE-2026-42600)", + "firstContribution": "9999-12-31" + }, { "handle": "mosesdd", "group": "reports", diff --git a/history.json b/history.json index b487d93b9..b75cfcfb2 100644 --- a/history.json +++ b/history.json @@ -1501,6 +1501,10 @@ { "date": "2026-11-10", "stars": 4599 + }, + { + "date": "2026-11-11", + "stars": 4625 } ] } diff --git a/star-history-dark.svg b/star-history-dark.svg index 099b5b461..009a6ddc2 100644 --- a/star-history-dark.svg +++ b/star-history-dark.svg @@ -1,4 +1,4 @@ -SILO star history — 4,599 starsGitHub repository pgsty/silo. 4,599 stars as of 2026-11-10. Initial history reconstructed · Daily totals since 2026-09-16 · UTC +SILO star history — 4,625 starsGitHub repository pgsty/silo. 4,625 stars as of 2026-11-11. Initial history reconstructed · Daily totals since 2026-09-16 · UTC @@ -24,4 +24,4 @@ - SILO / GITHUBStar Historypgsty/silo4,599GITHUB STARS01k2k3k4k5kOct 2025Jan 2026Mar 2026Jun 2026Aug 2026Nov 2026OCT 2025 — NOV 2026SNAPSHOT 2026-11-10Initial history reconstructed · Daily totals since 2026-09-16 · UTC + SILO / GITHUBStar Historypgsty/silo4,625GITHUB STARS01k2k3k4k5kOct 2025Jan 2026Mar 2026Jun 2026Aug 2026Nov 2026OCT 2025 — NOV 2026SNAPSHOT 2026-11-11Initial history reconstructed · Daily totals since 2026-09-16 · UTC diff --git a/star-history-light.svg b/star-history-light.svg index 671ed9205..cfdbdb5fb 100644 --- a/star-history-light.svg +++ b/star-history-light.svg @@ -1,4 +1,4 @@ -SILO star history — 4,599 starsGitHub repository pgsty/silo. 4,599 stars as of 2026-11-10. Initial history reconstructed · Daily totals since 2026-09-16 · UTC +SILO star history — 4,625 starsGitHub repository pgsty/silo. 4,625 stars as of 2026-11-11. Initial history reconstructed · Daily totals since 2026-09-16 · UTC @@ -24,4 +24,4 @@ - SILO / GITHUBStar Historypgsty/silo4,599GITHUB STARS01k2k3k4k5kOct 2025Jan 2026Mar 2026Jun 2026Aug 2026Nov 2026OCT 2025 — NOV 2026SNAPSHOT 2026-11-10Initial history reconstructed · Daily totals since 2026-09-16 · UTC + SILO / GITHUBStar Historypgsty/silo4,625GITHUB STARS01k2k3k4k5kOct 2025Jan 2026Mar 2026Jun 2026Aug 2026Nov 2026OCT 2025 — NOV 2026SNAPSHOT 2026-11-11Initial history reconstructed · Daily totals since 2026-09-16 · UTC