diff --git a/CONTRIBUTORS.md b/CONTRIBUTORS.md index 5170db5c6..643411bb7 100644 --- a/CONTRIBUTORS.md +++ b/CONTRIBUTORS.md @@ -1,13 +1,14 @@ # Contributors -Silo is maintained by the Pigsty community. This file records the people who have contributed to -this fork since it was established in 2026 — merged code, proposed changes, and the bug reports and -compatibility findings that shaped the releases. +Silo is maintained by the Pigsty community. This file records the community members who have +contributed to this fork since it was established in 2026 — merged code, proposed changes, and every +issue report or compatibility finding filed against the project. It is maintained by hand and updated at each release. GitHub's own contributor graph is unavailable here because `pgsty/silo` is a fork, so this file — not that page — is the project's attribution -record. Contributors are listed by GitHub handle. Authorship of every merged commit is preserved in -the Git history and can be verified with `git log --format='%an <%ae>'`. +record. Contributors are listed by GitHub handle. Project maintainers and automated accounts are not +duplicated in this community roll; their work, and authorship of every merged commit, remain in the +Git history and can be verified with `git log --format='%an <%ae>'`. Upstream MinIO authorship is recorded separately: this fork derives from [`minio/minio`](https://github.com/minio/minio), [`NOTICE`](NOTICE) retains the upstream product @@ -22,9 +23,9 @@ Contributors whose changes are merged into `main`. | [@ZouhairCharef](https://github.com/ZouhairCharef) | Upgraded `go-jose` to v4.1.4 to patch CVE-2026-34986 | [#18](https://github.com/pgsty/silo/pull/18) | [`68e0ba9`](https://github.com/pgsty/silo/commit/68e0ba997) | | [@mfredenhagen](https://github.com/mfredenhagen) | Bumped `go.opentelemetry.io` to address CVE-2026-39883 | [#19](https://github.com/pgsty/silo/pull/19) | [`1869bd3`](https://github.com/pgsty/silo/commit/1869bd30b) | | [@pinginfo](https://github.com/pinginfo) | Implemented `Flush` on `trackingResponseWriter`, repairing bucket notification streaming | [#34](https://github.com/pgsty/silo/pull/34) | [`65795ee`](https://github.com/pgsty/silo/commit/65795ee1f) | +| [@ycjlin](https://github.com/ycjlin) | `ListObjects` returns `NoSuchBucket` for a prefix on a missing bucket | [#37](https://github.com/pgsty/silo/pull/37) | [`e9c5340`](https://github.com/pgsty/silo/commit/e9c5340be) | | [@waterkip](https://github.com/waterkip) | Repointed documentation links from the upstream domain to the Silo portal | [#41](https://github.com/pgsty/silo/pull/41) | [`d495d30`](https://github.com/pgsty/silo/commit/d495d30d5) | | [@Dansyuqri](https://github.com/Dansyuqri) | Added `ChecksumType` to the `CompleteMultipartUpload` response | [#57](https://github.com/pgsty/silo/pull/57) | [`d014a12`](https://github.com/pgsty/silo/commit/d014a12cf) | -| [@ycjlin](https://github.com/ycjlin) | `ListObjects` returns `NoSuchBucket` for a prefix on a missing bucket | [#37](https://github.com/pgsty/silo/pull/37) | [`e9c5340`](https://github.com/pgsty/silo/commit/e9c5340be) | | [@h5vx](https://github.com/h5vx) | Implemented per-bucket CORS: stored configuration, S3 handlers, and request enforcement | [#71](https://github.com/pgsty/silo/pull/71) | [`e4e3007`](https://github.com/pgsty/silo/commit/e4e3007da) | ## Proposed changes @@ -34,17 +35,19 @@ differently. | Contributor | Change | Pull request | Status | | :-- | :-- | :-- | :-- | -| [@magicxor](https://github.com/magicxor) | `DELETE` precondition checks for the `If-Match` header | [#12](https://github.com/pgsty/silo/pull/12) | Open, queued for review | +| [@sulin37392](https://github.com/sulin37392) | Dependency updates against the fork | [#8](https://github.com/pgsty/silo/pull/8) | Closed | +| [@magicxor](https://github.com/magicxor) | `DELETE` precondition checks for the `If-Match` header | [#12](https://github.com/pgsty/silo/pull/12) | Open; changes requested | | [@davinkevin](https://github.com/davinkevin) | Distroless-based Docker image variant | [#21](https://github.com/pgsty/silo/pull/21) | Superseded by the distroless variant shipped in RELEASE.2026-08-06, which the PR anticipated by four months | | [@lem21h](https://github.com/lem21h) | Assorted fixes and improvements | [#36](https://github.com/pgsty/silo/pull/36) | Closed | -| [@sulin37392](https://github.com/sulin37392) | Dependency updates against the fork | [#8](https://github.com/pgsty/silo/pull/8) | Closed | +| [@metaneutrons](https://github.com/metaneutrons) | Separate `DeleteObject` and `DeleteObjectVersion` authorization for explicit versions | [#59](https://github.com/pgsty/silo/pull/59) | Closed; the proposal informed the implementation shipped in [#104](https://github.com/pgsty/silo/pull/104) | +| [@mrjavadseydi](https://github.com/mrjavadseydi) | Access-frequency ILM for moving hot objects between server pools | [#60](https://github.com/pgsty/silo/pull/60) | Open | ## Reports Bug reports, compatibility findings, and proposals filed against this fork. Several shipped fixes trace directly back to these: the bundled-client guarantee (#4, #9), the LDAP-over-TLS repair (#15), -the completed native package payload (#33), GPG-signed RPMs (#43), and the upstream migration guide -(#42). +the completed native package payload (#33), GPG-signed RPMs (#43), the upstream migration guide +(#42), and explicit-version delete authorization (#58). | Contributor | Reported | | :-- | :-- | @@ -62,7 +65,7 @@ the completed native package payload (#33), GPG-signed RPMs (#43), and the upstr | [@vampywiz17](https://github.com/vampywiz17) | [#15](https://github.com/pgsty/silo/issues/15) LDAP TLS regression breaking Console login on Kubernetes | | [@davinkevin](https://github.com/davinkevin) | [#20](https://github.com/pgsty/silo/issues/20) Renovate for automated dependency updates | | [@chalukyaj](https://github.com/chalukyaj) | [#30](https://github.com/pgsty/silo/issues/30) Silo Operator discoverability | -| [@cbornet](https://github.com/cbornet) | [#31](https://github.com/pgsty/silo/issues/31) Multipart uploads with `FULL_OBJECT` CRC32 · [#32](https://github.com/pgsty/silo/issues/32) `ListObjects` bucket-existence semantics | +| [@cbornet](https://github.com/cbornet) | [#31](https://github.com/pgsty/silo/issues/31) Multipart uploads with `FULL_OBJECT` CRC32 · [#32](https://github.com/pgsty/silo/issues/32) `ListObjects` bucket-existence semantics · [#107](https://github.com/pgsty/silo/issues/107) Chunked `PutObject` with `checksumType` | | [@jvasile](https://github.com/jvasile) | [#33](https://github.com/pgsty/silo/issues/33) `.deb` missing user, group, and default files | | [@Kesavaambati](https://github.com/Kesavaambati) | [#35](https://github.com/pgsty/silo/issues/35) Community support for the Docker images | | [@redfoxfox](https://github.com/redfoxfox) | [#38](https://github.com/pgsty/silo/issues/38) Chinese documentation site unreachable | @@ -70,10 +73,15 @@ the completed native package payload (#33), GPG-signed RPMs (#43), and the upstr | [@meesudzu](https://github.com/meesudzu) | [#42](https://github.com/pgsty/silo/issues/42) Migration guide from upstream MinIO | | [@pmezhuev](https://github.com/pmezhuev) | [#43](https://github.com/pgsty/silo/issues/43) RPM package missing its GPG signature | | [@kh0mka](https://github.com/kh0mka) | [#51](https://github.com/pgsty/silo/issues/51) Inter-node I/O timeout in `ReadFileStreamHandler` | +| [@metaneutrons](https://github.com/metaneutrons) | [#58](https://github.com/pgsty/silo/issues/58) Explicit object-version delete authorization | +| [@bagutzu](https://github.com/bagutzu) | [#61](https://github.com/pgsty/silo/issues/61) KES-compatible external KMS support, including OpenBao | +| [@liuhaodongliu990-cmyk](https://github.com/liuhaodongliu990-cmyk) | [#62](https://github.com/pgsty/silo/issues/62) Indeterminate progress for prefix downloads | +| [@sargarass](https://github.com/sargarass) | [#79](https://github.com/pgsty/silo/issues/79) `ListMultipartUploads` prefix and pagination semantics | +| [@mumu-lab](https://github.com/mumu-lab) | [#106](https://github.com/pgsty/silo/issues/106) Bucket quota metric reads a deprecated field | ## Adding yourself Contributions are accepted inbound=outbound under AGPL-3.0-or-later with no CLA; see -[`CONTRIBUTING.md`](CONTRIBUTING.md). Merged pull requests are added here at the next release. If a -contribution is missing or recorded incorrectly, open an issue or say so on the pull request and it -will be fixed. +[`CONTRIBUTING.md`](CONTRIBUTING.md). Issue and pull-request authors are added whenever this record +is refreshed; merged changes move into the Code section. If a contribution is missing or recorded +incorrectly, open an issue or say so on the pull request and it will be fixed. diff --git a/README.md b/README.md index 2aee0f695..b73ea6a9b 100644 --- a/README.md +++ b/README.md @@ -95,30 +95,43 @@ Report vulnerabilities privately as described in [`SECURITY.md`](SECURITY.md); e ## Contributors +The cards highlight community changes merged into `main`; the avatar wall includes every other +community member who has opened an issue or pull request. +
- ![]() @ZouhairCharef CVE-2026-34986 + ![]() @h5vx Per-bucket CORS · #71 |
- ![]() @mfredenhagen CVE-2026-39883 + ![]() @ycjlin Missing-bucket listing · #37 |
- ![]() @pinginfo Notification streaming + ![]() @Dansyuqri Multipart checksum type · #57 |
- ![]() @waterkip Documentation links + ![]() @pinginfo Notification streaming · #34 + |
+
+ ![]() @ZouhairCharef CVE-2026-34986 · #18 + |
+
+ ![]() @mfredenhagen CVE-2026-39883 · #19 + |
+
+ ![]() @waterkip Documentation links · #41 |
-
-
-
+
+
@@ -139,9 +152,13 @@ Report vulnerabilities privately as described in [`SECURITY.md`](SECURITY.md); e
+
+
+
+
- ![]() @ZouhairCharef CVE-2026-34986 + ![]() @h5vx 单桶 CORS · #71 |
- ![]() @mfredenhagen CVE-2026-39883 + ![]() @ycjlin 缺失桶列举语义 · #37 |
- ![]() @pinginfo 桶通知流式输出 + ![]() @Dansyuqri 分片上传校验类型 · #57 |
- ![]() @waterkip 文档链接修正 + ![]() @pinginfo 桶通知流式输出 · #34 + |
+
+ ![]() @ZouhairCharef CVE-2026-34986 · #18 + |
+
+ ![]() @mfredenhagen CVE-2026-39883 · #19 + |
+
+ ![]() @waterkip 文档链接修正 · #41 |
-
-
-
+
+
@@ -139,9 +151,13 @@ S3 API、`MINIO_*` 环境变量、`minio_*` 指标、`x-minio-*` 头、`/minio/*
+
+
+
+