# Contributors SILO is built by **40 community contributors**, including its maintainers. This record covers every human author who has opened an issue or pull request in the repositories listed below, in any state. It was checked against the complete, paginated GitHub API records on **2026-09-07 03:00:14 UTC**. Contributors appear once in the avatar wall: authors of merged PRs first, other PR authors next, and issue-only authors after them. Within each group, substantial features, security and correctness fixes, proposals adopted in later work, and reports that led to fixes take priority. **Gold rings highlight significant contributions.** The tables preserve each PR's actual status. Automated accounts are excluded from the community count. Upstream MinIO authorship remains in the Git history and [NOTICE](NOTICE); this record covers activity in the PGSTY repositories.

@Vonng @h5vx @mrjavadseydi @Dansyuqri @ycjlin @pinginfo @ZouhairCharef @mfredenhagen @waterkip @mikemikimike @metaneutrons @magicxor @davinkevin @lem21h @sulin37392 @cbornet @vampywiz17 @mumu-lab @jvasile @pmezhuev @TLINDEN @makinikm @meesudzu @kuldeep-link11 @sargarass @liuhaodongliu990-cmyk @Xavier-777 @spaceg00se-r @kh0mka @bagutzu @DestroyLee @mosesdd @zylpsrs @heroes1412 @redfoxfox @jiadzh @AntonOfTheWoods @chalukyaj @nsanitate @Kesavaambati

## Merged pull requests | Contributor | Contribution | Record | | :-- | :-- | :-- | | [@Vonng](https://github.com/Vonng) | Maintains SILO, Console, mcli, shared packages, releases, and documentation | 85 merged PRs across five repositories; [complete maintainer record](#maintainer-record) | | [@h5vx](https://github.com/h5vx) | Implemented per-bucket CORS configuration and enforcement | [pgsty/silo#71](https://github.com/pgsty/silo/pull/71) — Merged ([e4e3007da](https://github.com/pgsty/silo/commit/e4e3007da6d7d1198a6a050e34f84566d40a9654)) | | [@mrjavadseydi](https://github.com/mrjavadseydi) | Fixed effective bucket quota metrics; proposed access-frequency ILM | [pgsty/silo#132](https://github.com/pgsty/silo/pull/132) — Merged ([ad873c735](https://github.com/pgsty/silo/commit/ad873c73571b121293791f13f8dc46ddf5264d60))
[pgsty/silo#60](https://github.com/pgsty/silo/pull/60) — Open | | [@Dansyuqri](https://github.com/Dansyuqri) | Added ChecksumType to multipart completion responses | [pgsty/silo#57](https://github.com/pgsty/silo/pull/57) — Merged ([a96116b12](https://github.com/pgsty/silo/commit/a96116b128bbf2aa42f85eafbf75eb6636cd36ee)) | | [@ycjlin](https://github.com/ycjlin) | Fixed missing-bucket ListObjects semantics | [pgsty/silo#37](https://github.com/pgsty/silo/pull/37) — Merged ([49c8aeac4](https://github.com/pgsty/silo/commit/49c8aeac403916f52f8588bbe8ee42753d86eeef)) | | [@pinginfo](https://github.com/pinginfo) | Repaired bucket notification streaming | [pgsty/silo#34](https://github.com/pgsty/silo/pull/34) — Merged ([b7f52ca43](https://github.com/pgsty/silo/commit/b7f52ca4336bc45a48b81b39c8983a5e6882a6fa)) | | [@ZouhairCharef](https://github.com/ZouhairCharef) | Patched CVE-2026-34986 in go-jose | [pgsty/silo#18](https://github.com/pgsty/silo/pull/18) — Merged ([ff58df949](https://github.com/pgsty/silo/commit/ff58df9499865f0ed00457d282ede219091b1f33)) | | [@mfredenhagen](https://github.com/mfredenhagen) | Patched CVE-2026-39883 in OpenTelemetry | [pgsty/silo#19](https://github.com/pgsty/silo/pull/19) — Merged ([e4fa06394](https://github.com/pgsty/silo/commit/e4fa063942151a8b83288700f28c911376cdca9b)) | | [@waterkip](https://github.com/waterkip) | Repointed documentation links to the SILO portal | [pgsty/silo#41](https://github.com/pgsty/silo/pull/41) — Merged ([0ce4b0f14](https://github.com/pgsty/silo/commit/0ce4b0f14bcbcbd353270ad8d9e0919c21e0ca5e)) | ## Other pull-request authors Every proposal counts, including PRs closed without merging. Authors who also have a merged PR appear in the section above, with their open proposals retained in the same record. | Contributor | Contribution | Pull request | Status | | :-- | :-- | :-- | :-- | | [@mikemikimike](https://github.com/mikemikimike) | Contributed the replicated SSE-C plaintext part-size fix | [pgsty/silo#125](https://github.com/pgsty/silo/pull/125) | Closed as superseded; its core plaintext-size fix landed through [silo#124](https://github.com/pgsty/silo/pull/124), with related attribute handling in [silo#128](https://github.com/pgsty/silo/pull/128) | | [@metaneutrons](https://github.com/metaneutrons) | Reported and proposed explicit-version delete authorization | [pgsty/silo#59](https://github.com/pgsty/silo/pull/59) | Closed as superseded; established the action split implemented in [silo#104](https://github.com/pgsty/silo/pull/104) | | [@magicxor](https://github.com/magicxor) | Reported and proposed conditional DELETE support for If-Match | [pgsty/silo#12](https://github.com/pgsty/silo/pull/12) | Closed after conditional DELETE support landed in [silo#145](https://github.com/pgsty/silo/pull/145) | | [@davinkevin](https://github.com/davinkevin) | Proposed the distroless container image and dependency automation | [pgsty/silo#21](https://github.com/pgsty/silo/pull/21) | Closed as superseded; the distroless image shipped in [RELEASE.2026-08-06](https://github.com/pgsty/silo/releases/tag/RELEASE.2026-08-06T00-00-00Z) | | [@lem21h](https://github.com/lem21h) | Proposed robustness and goroutine improvements | [pgsty/silo#36](https://github.com/pgsty/silo/pull/36) | Closed without merging | | [@sulin37392](https://github.com/sulin37392) | Proposed dependency updates | [pgsty/silo#8](https://github.com/pgsty/silo/pull/8) | Closed without merging | ## Issue reports Reports are retained whether open or closed. PR authors who also opened issues are credited here for their reports as well; the avatar wall and community total still count each person once. | Contributor | Reports | | :-- | :-- | | [@Vonng](https://github.com/Vonng) | 101 issues across SILO, Console, and mcli; [complete maintainer record](#maintainer-record) | | [@metaneutrons](https://github.com/metaneutrons) | [pgsty/silo#58](https://github.com/pgsty/silo/issues/58) Authorize explicit object-version deletes with s3:DeleteObjectVersion | | [@magicxor](https://github.com/magicxor) | [pgsty/silo#10](https://github.com/pgsty/silo/issues/10) DeleteObject ignores `If-Match` header (no conditional delete support) | | [@davinkevin](https://github.com/davinkevin) | [pgsty/silo#20](https://github.com/pgsty/silo/issues/20) Proposal: Enable Renovate for automated dependency updates | | [@cbornet](https://github.com/cbornet) | [pgsty/silo#31](https://github.com/pgsty/silo/issues/31) Multipart uploads with FULL_OBJECT CRC32 not working
[pgsty/silo#32](https://github.com/pgsty/silo/issues/32) `listObjects` should return `NoSuchBucket` when the bucket doesn't exist and prefix is passed
[pgsty/silo#107](https://github.com/pgsty/silo/issues/107) PutObject fails with chunked encoding and checksumType | | [@vampywiz17](https://github.com/vampywiz17) | [pgsty/silo#15](https://github.com/pgsty/silo/issues/15) LDAP TLS regression in RELEASE.2026-03-21T00-00-00Z breaks built-in Console and external Console LDAP login on Kubernetes Tenant
[pgsty/silo#108](https://github.com/pgsty/silo/issues/108) Web Console login regression in RELEASE.2026-09-03T13-18-01Z (local and LDAP users fail) | | [@mumu-lab](https://github.com/mumu-lab) | [pgsty/silo#106](https://github.com/pgsty/silo/issues/106) 监控指标读取已弃用的 BucketQuota.Quota 字段导致 Quota 指标无值 | | [@jvasile](https://github.com/jvasile) | [pgsty/silo#33](https://github.com/pgsty/silo/issues/33) .deb doesn't create user/group/default files | | [@pmezhuev](https://github.com/pmezhuev) | [pgsty/silo#43](https://github.com/pgsty/silo/issues/43) RPM package for RELEASE.2026-06-18T00-00-00Z is missing GPG signature | | [@TLINDEN](https://github.com/TLINDEN) | [pgsty/silo#4](https://github.com/pgsty/silo/issues/4) mc is missing in released tarballs | | [@makinikm](https://github.com/makinikm) | [pgsty/silo#9](https://github.com/pgsty/silo/issues/9) mc missing from pgsty/minio Docker image | | [@meesudzu](https://github.com/meesudzu) | [pgsty/silo#42](https://github.com/pgsty/silo/issues/42) Documentation: Add migration guide from upstream MinIO to this community fork | | [@kuldeep-link11](https://github.com/kuldeep-link11) | [pgsty/silo#39](https://github.com/pgsty/silo/issues/39) notify_nats rejects MINIO_NOTIFY_NATS_USER_CREDENTIALS (JWT creds file path)
[pgsty/silo#40](https://github.com/pgsty/silo/issues/40) notify_nats target changes require MinIO restart (no hot reload for new target IDs) | | [@sargarass](https://github.com/sargarass) | [pgsty/silo#79](https://github.com/pgsty/silo/issues/79) ListMultipartUploads: `prefix` matches only an exact key; `max-uploads`, `key-marker` and `delimiter` are ignored | | [@liuhaodongliu990-cmyk](https://github.com/liuhaodongliu990-cmyk) | [pgsty/silo#62](https://github.com/pgsty/silo/issues/62) fix: show indeterminate progress instead of NaN% when downloading a prefix/folder | | [@Xavier-777](https://github.com/Xavier-777) | [pgsty/silo#2](https://github.com/pgsty/silo/issues/2) WebUI Console 的Bucket无法管理生命周期
[pgsty/silo#17](https://github.com/pgsty/silo/issues/17) Why can't log and xml files be previewed? | | [@spaceg00se-r](https://github.com/spaceg00se-r) | [pgsty/silo#11](https://github.com/pgsty/silo/issues/11) Please support cpuv1
[pgsty/silo#14](https://github.com/pgsty/silo/issues/14) Add issue to project workflow fails due to missing github-token | | [@kh0mka](https://github.com/kh0mka) | [pgsty/silo#51](https://github.com/pgsty/silo/issues/51) Inter-node i/o timeout in ReadFileStreamHandler during storage REST API call | | [@bagutzu](https://github.com/bagutzu) | [pgsty/silo#61](https://github.com/pgsty/silo/issues/61) Maintain KES-compatible external KMS support, including OpenBao | | [@DestroyLee](https://github.com/DestroyLee) | [pgsty/silo.pgsty.com#4](https://github.com/pgsty/silo.pgsty.com/issues/4) 文档目录更新没了 | | [@mosesdd](https://github.com/mosesdd) | [pgsty/silo#1](https://github.com/pgsty/silo/issues/1) update and provide helm chart | | [@zylpsrs](https://github.com/zylpsrs) | [pgsty/silo#6](https://github.com/pgsty/silo/issues/6) 管理控制台缺少Tiering、Site Replication | | [@heroes1412](https://github.com/heroes1412) | [pgsty/silo#13](https://github.com/pgsty/silo/issues/13) cannot use profile | | [@redfoxfox](https://github.com/redfoxfox) | [pgsty/silo#38](https://github.com/pgsty/silo/issues/38) Chinese Doc site availability? | | [@jiadzh](https://github.com/jiadzh) | [pgsty/silo#3](https://github.com/pgsty/silo/issues/3) 能编译Windows版的吗?或者您能简单指导下怎么进行windows下EXE编辑么? | | [@AntonOfTheWoods](https://github.com/AntonOfTheWoods) | [pgsty/silo#5](https://github.com/pgsty/silo/issues/5) clarify options for upstream helm chart and operator | | [@chalukyaj](https://github.com/chalukyaj) | [pgsty/silo#30](https://github.com/pgsty/silo/issues/30) Proposal: Evaluate silo-operator and add it to README.md to allow k8s users to discover it | | [@nsanitate](https://github.com/nsanitate) | [pgsty/silo#7](https://github.com/pgsty/silo/issues/7) Proposal: Apply for CNCF Sandbox to ensure long-term open governance and ecosystem trust | | [@Kesavaambati](https://github.com/Kesavaambati) | [pgsty/silo#35](https://github.com/pgsty/silo/issues/35) Request for Community Support and Future Maintenance of MinIO Docker Images | ## Audit scope All issue and PR pages were read without a date cutoff. Counts below include automated accounts; the **40-person** roll excludes the two bots, Copilot and dependabot. The maintained product stack is SILO, Console, mcli, and silo-pkg; the SDK, KES, website, and older documentation repository were also checked for community submissions. | Repository | Issues | Pull requests | | :-- | --: | --: | | [pgsty/silo](https://github.com/pgsty/silo) | 82 | 61 | | [pgsty/silo-console](https://github.com/pgsty/silo-console) | 34 | 10 | | [pgsty/mc](https://github.com/pgsty/mc) | 18 | 17 | | [pgsty/silo-pkg](https://github.com/pgsty/silo-pkg) | 0 | 3 | | [pgsty/silo-go](https://github.com/pgsty/silo-go) | 0 | 0 | | [pgsty/kes](https://github.com/pgsty/kes) | 0 | 0 | | [pgsty/silo.pgsty.com](https://github.com/pgsty/silo.pgsty.com) | 1 | 11 | | [pgsty/minio-docs](https://github.com/pgsty/minio-docs) | 0 | 0 | | **Total** | **135** | **102** | ## Maintainer record
@Vonng — 85 merged PRs and 101 issues ### pgsty/silo **Merged PRs (46):** [pgsty/silo#44](https://github.com/pgsty/silo/pull/44 "helm: harden Silo chart delivery"), [pgsty/silo#45](https://github.com/pgsty/silo/pull/45 "helm: trim hardening to essentials"), [pgsty/silo#56](https://github.com/pgsty/silo/pull/56 "docs: adopt no-CLA + DCO policy and fix copyright terms"), [pgsty/silo#66](https://github.com/pgsty/silo/pull/66 "fix: checksum CopyObject data before compression"), [pgsty/silo#69](https://github.com/pgsty/silo/pull/69 "fix: preserve transform state on metadata-only copies"), [pgsty/silo#70](https://github.com/pgsty/silo/pull/70 "fix: return checksums from CopyObject"), [pgsty/silo#72](https://github.com/pgsty/silo/pull/72 "fix: return the remote part checksum to federated UploadPartCopy"), [pgsty/silo#73](https://github.com/pgsty/silo/pull/73 "fix: authorize user status changes by target status"), [pgsty/silo#74](https://github.com/pgsty/silo/pull/74 "fix: align multipart completion checksum errors"), [pgsty/silo#80](https://github.com/pgsty/silo/pull/80 "fix: complete per-bucket CORS release hardening"), [pgsty/silo#81](https://github.com/pgsty/silo/pull/81 "test: cover asymmetric CORS site counts"), [pgsty/silo#85](https://github.com/pgsty/silo/pull/85 "fix: restore pre-release server corrections"), [pgsty/silo#86](https://github.com/pgsty/silo/pull/86 "fix: keep rewritten CopyObject data and metadata consistent"), [pgsty/silo#87](https://github.com/pgsty/silo/pull/87 "fix: authenticate SSE-C keys on zero-byte reads"), [pgsty/silo#88](https://github.com/pgsty/silo/pull/88 "fix: skip bucket CORS lookup without an origin"), [pgsty/silo#89](https://github.com/pgsty/silo/pull/89 "fix: replicate object lock config in its own field"), [pgsty/silo#90](https://github.com/pgsty/silo/pull/90 "fix: preserve bucket configs during site adoption"), [pgsty/silo#91](https://github.com/pgsty/silo/pull/91 "fix: report site replication metadata per site"), [pgsty/silo#92](https://github.com/pgsty/silo/pull/92 "fix: reject unsupported checksum assertions"), [pgsty/silo#93](https://github.com/pgsty/silo/pull/93 "fix: reject composite CRC64NVME checksums"), [pgsty/silo#94](https://github.com/pgsty/silo/pull/94 "ci: make server release retries tag-idempotent"), [pgsty/silo#95](https://github.com/pgsty/silo/pull/95 "fix: authenticate SSE-C for object attributes"), [pgsty/silo#96](https://github.com/pgsty/silo/pull/96 "fix: reject composite CRC64NVME completion"), [pgsty/silo#97](https://github.com/pgsty/silo/pull/97 "deps: pin reviewed pre-release components"), [pgsty/silo#98](https://github.com/pgsty/silo/pull/98 "fix: authorize SSE-C attribute reads by replication permission"), [pgsty/silo#101](https://github.com/pgsty/silo/pull/101 "fix: harden CORS and replication request trust"), [pgsty/silo#103](https://github.com/pgsty/silo/pull/103 "fix: serialize whole-record bucket metadata updates"), [pgsty/silo#104](https://github.com/pgsty/silo/pull/104 "fix: authorize explicit version deletes with DeleteObjectVersion"), [pgsty/silo#121](https://github.com/pgsty/silo/pull/121 "fix: return 500 for unreadable objects instead of 206"), [pgsty/silo#122](https://github.com/pgsty/silo/pull/122 "fix: store raw SSE-C replicas verbatim on the destination"), [pgsty/silo#123](https://github.com/pgsty/silo/pull/123 "fix: honor a requested checksum algorithm on SSE-C key rotation"), [pgsty/silo#124](https://github.com/pgsty/silo/pull/124 "fix: record plaintext part sizes for replicated SSE-C multipart parts"), [pgsty/silo#126](https://github.com/pgsty/silo/pull/126 "fix: exclude SSE-C objects from compression"), [pgsty/silo#127](https://github.com/pgsty/silo/pull/127 "fix: include per-bucket CORS in bucket metadata export and import"), [pgsty/silo#128](https://github.com/pgsty/silo/pull/128 "fix: report logical part sizes and end pagination correctly in GetObjectAttributes"), [pgsty/silo#129](https://github.com/pgsty/silo/pull/129 "fix: order value-less replicated Object Lock updates by timestamp"), [pgsty/silo#130](https://github.com/pgsty/silo/pull/130 "docs: describe the startup readiness window of the health probes"), [pgsty/silo#131](https://github.com/pgsty/silo/pull/131 "fix: stop re-replicating an object whose retention was removed"), [pgsty/silo#134](https://github.com/pgsty/silo/pull/134 "fix: retransmit and re-order Object Lock for SSE-C replicas (single erasure set)"), [pgsty/silo#135](https://github.com/pgsty/silo/pull/135 "test: reconcile encrypted-parts attributes test with #119 write validation"), [pgsty/silo#138](https://github.com/pgsty/silo/pull/138 "fix: persist an honest resync terminal status about object counts"), [pgsty/silo#140](https://github.com/pgsty/silo/pull/140 "fix: count resync success by replication outcome, not target existence"), [pgsty/silo#142](https://github.com/pgsty/silo/pull/142 "fix: scope resync worker dispatch to the target being resynced"), [pgsty/silo#143](https://github.com/pgsty/silo/pull/143 "fix: honor a header-delivered checksum advertised as a chunked trailer"), [pgsty/silo#145](https://github.com/pgsty/silo/pull/145 "fix: support conditional DeleteObject (If-Match) with atomic precondition"), [pgsty/silo#146](https://github.com/pgsty/silo/pull/146 "fix: keep embedded Console login working over loopback TLS (#108)"). **Issues (49):** [pgsty/silo#22](https://github.com/pgsty/silo/issues/22 "[Security] CVE-2026-33322: JWT Algorithm Confusion in OIDC Authentication"), [pgsty/silo#23](https://github.com/pgsty/silo/issues/23 "[Security] CVE-2026-33419: LDAP Login Brute-Force via User Enumeration and Missing Rate Limit"), [pgsty/silo#24](https://github.com/pgsty/silo/issues/24 "[Security] CVE-2026-34204: SSE Metadata Injection via Replication Headers (Targeted DoS)"), [pgsty/silo#25](https://github.com/pgsty/silo/issues/25 "[Security] CVE-2026-39414: Denial of Service via Unbounded Memory Allocation in S3 Select CSV Parsing"), [pgsty/silo#26](https://github.com/pgsty/silo/issues/26 "[Security] CVE-2026-32285: Potential vulnerability in third-party dependency github.com/buger/jsonparser v1.1.2"), [pgsty/silo#27](https://github.com/pgsty/silo/issues/27 "[Security] GHSA-hv4r-mvr4-25vw: Unauthenticated Object Write via Query-String Credential Signature Bypass in Unsigned-Trailer Uploads"), [pgsty/silo#28](https://github.com/pgsty/silo/issues/28 "[Security] GHSA-9c4q-hq6p-c237: Unauthenticated Object Write via Missing Signature Verification in Snowball Auto-Extract"), [pgsty/silo#46](https://github.com/pgsty/silo/issues/46 "UploadPart requires a per-part checksum header that AWS S3 computes server-side"), [pgsty/silo#47](https://github.com/pgsty/silo/issues/47 "CompleteMultipartUpload response omits ChecksumType"), [pgsty/silo#48](https://github.com/pgsty/silo/issues/48 "CompleteMultipartUpload checksum failures return non-AWS error codes"), [pgsty/silo#49](https://github.com/pgsty/silo/issues/49 "CompleteMultipartUpload accepts duplicate part numbers and assembles the part twice"), [pgsty/silo#50](https://github.com/pgsty/silo/issues/50 "CRC64NVME + COMPOSITE is silently canonicalised to FULL_OBJECT instead of rejected"), [pgsty/silo#52](https://github.com/pgsty/silo/issues/52 "ReadParts panics on an empty part list, stranding a keep-alive goroutine per storage-REST request"), [pgsty/silo#53](https://github.com/pgsty/silo/issues/53 "Migrating a Postgres or MySQL notify config disables all bucket notifications"), [pgsty/silo#55](https://github.com/pgsty/silo/issues/55 "Release image declares VOLUME ['/data'] but never creates it, so every non-root run fails storage init"), [pgsty/silo#63](https://github.com/pgsty/silo/issues/63 "CopyObject server-side checksum can cover transformed data when compression is enabled"), [pgsty/silo#64](https://github.com/pgsty/silo/issues/64 "Federated UploadPartCopy cannot reliably return the remote computed part checksum"), [pgsty/silo#65](https://github.com/pgsty/silo/issues/65 "MINIO_CONFIG_ENV_FILE silently ignores assignments with spaces around ="), [pgsty/silo#67](https://github.com/pgsty/silo/issues/67 "Metadata-only CopyObject can stamp compression metadata without rewriting data"), [pgsty/silo#68](https://github.com/pgsty/silo/issues/68 "CopyObjectResult omits checksum fields and minio-go drops them"), [pgsty/silo#75](https://github.com/pgsty/silo/issues/75 "Harden per-bucket CORS replication, recovery, and compatibility after #71"), [pgsty/silo#76](https://github.com/pgsty/silo/issues/76 "Fix Object Lock metadata field in site-replication initial sync"), [pgsty/silo#77](https://github.com/pgsty/silo/issues/77 "Audit site-replication source timestamps, tombstones, and per-site counters"), [pgsty/silo#78](https://github.com/pgsty/silo/issues/78 "Preserve existing Object Lock retention during site-replication bucket adoption"), [pgsty/silo#82](https://github.com/pgsty/silo/issues/82 "Zero-byte SSE-C objects never authenticate the customer key"), [pgsty/silo#83](https://github.com/pgsty/silo/issues/83 "Metadata-only CopyObject of a null version rewrites the data and leaves the metadata inconsistent"), [pgsty/silo#84](https://github.com/pgsty/silo/issues/84 "GetObjectAttributes does not authenticate the SSE-C key"), [pgsty/silo#99](https://github.com/pgsty/silo/issues/99 "Federated CopyObject silently ignores a requested checksum algorithm"), [pgsty/silo#100](https://github.com/pgsty/silo/issues/100 "Federated CopyObject rejects any source object stored inline"), [pgsty/silo#102](https://github.com/pgsty/silo/issues/102 "Serialize whole-record bucket metadata updates across config types"), [pgsty/silo#105](https://github.com/pgsty/silo/issues/105 "Audit residual bucket-metadata delete/update and cache ordering"), [pgsty/silo#109](https://github.com/pgsty/silo/issues/109 "[P1] SSE-C replicas become unreadable with destination default encryption or compression"), [pgsty/silo#110](https://github.com/pgsty/silo/issues/110 "[P1] Unreadable-object errors return HTTP 206 and are accepted as successful reads"), [pgsty/silo#111](https://github.com/pgsty/silo/issues/111 "[P1] Empty Object Lock replication updates bypass ordering and erase newer object state"), [pgsty/silo#112](https://github.com/pgsty/silo/issues/112 "[P2] Bucket metadata export/import silently loses per-bucket CORS configuration"), [pgsty/silo#113](https://github.com/pgsty/silo/issues/113 "[P2] In-place SSE-C key rotation ignores a requested checksum algorithm"), [pgsty/silo#114](https://github.com/pgsty/silo/issues/114 "[P2] GetObjectAttributes reports physical sizes for compressed or encrypted multipart parts"), [pgsty/silo#115](https://github.com/pgsty/silo/issues/115 "[P2] GetObjectAttributes pagination cannot finish with sparse multipart part numbers"), [pgsty/silo#116](https://github.com/pgsty/silo/issues/116 "[P2] Four-node restart reports online before every coordinator can read and write"), [pgsty/silo#117](https://github.com/pgsty/silo/issues/117 "[P2] Retention-removal replication mishandles empty-value and timestamp-only state"), [pgsty/silo#118](https://github.com/pgsty/silo/issues/118 "[P2] A compressed SSE-C object replicates to a replica that decrypts to an S2 stream"), [pgsty/silo#119](https://github.com/pgsty/silo/issues/119 "[P1] Replicated SSE-C multipart parts record the ciphertext length, corrupting part-number reads and later the object size"), [pgsty/silo#120](https://github.com/pgsty/silo/issues/120 "[P1] Existing SSE-C replicas cannot always be updated or repaired"), [pgsty/silo#133](https://github.com/pgsty/silo/issues/133 "[P2] Multi-pool: replica-write Object Lock reconciliation is not authoritative across server pools"), [pgsty/silo#136](https://github.com/pgsty/silo/issues/136 "[P2] Resync publishes Completed before the final object counters are persisted"), [pgsty/silo#137](https://github.com/pgsty/silo/issues/137 "resync cancellation robustness: dispatch deadlock, walker leak, and per-bucket cancel routing"), [pgsty/silo#139](https://github.com/pgsty/silo/issues/139 "[P2] Resync counts an existing replica as successful even when its update failed"), [pgsty/silo#141](https://github.com/pgsty/silo/issues/141 "resync worker dispatch is any-target, not scoped to the resync ARN"), [pgsty/silo#144](https://github.com/pgsty/silo/issues/144 "conditional DeleteObject (If-Match) is atomic only within a single erasure set"). ### pgsty/silo-console **Merged PRs (10):** [pgsty/silo-console#9](https://github.com/pgsty/silo-console/pull/9 "deps: pin the pre-release MCLI source"), [pgsty/silo-console#10](https://github.com/pgsty/silo-console/pull/10 "deps: pin the remote env scheme repair"), [pgsty/silo-console#11](https://github.com/pgsty/silo-console/pull/11 "ci: test the upstream package floor on a coherent module graph"), [pgsty/silo-console#38](https://github.com/pgsty/silo-console/pull/38 "Prepare the next release and migrate to silo-pkg v3.13.0"), [pgsty/silo-console#39](https://github.com/pgsty/silo-console/pull/39 "Stabilize TestCafe role session capture"), [pgsty/silo-console#40](https://github.com/pgsty/silo-console/pull/40 "Finalize the SILO Console v2.3.0 candidate"), [pgsty/silo-console#41](https://github.com/pgsty/silo-console/pull/41 "test: stabilize rewind route coverage"), [pgsty/silo-console#42](https://github.com/pgsty/silo-console/pull/42 "release: simplify the v2.3.0 publish path"), [pgsty/silo-console#43](https://github.com/pgsty/silo-console/pull/43 "build: prepare SILO Console v2.3.1"), [pgsty/silo-console#44](https://github.com/pgsty/silo-console/pull/44 "fix: prioritize the maintained SILO dependency graph"). **Issues (34):** [pgsty/silo-console#1](https://github.com/pgsty/silo-console/issues/1 "Unauthenticated deep routes recurse `/login` indefinitely; plain HTTP triggers reliably"), [pgsty/silo-console#2](https://github.com/pgsty/silo-console/issues/2 "Metrics and Object Browser UI regressions: stale Uptime, malformed legends, and cramped menus"), [pgsty/silo-console#3](https://github.com/pgsty/silo-console/issues/3 "390 px viewport clips Metrics tabs and Object Browser content with no horizontal recovery"), [pgsty/silo-console#4](https://github.com/pgsty/silo-console/issues/4 "Collapsed and mobile sidebar exposes unnamed icon-only buttons"), [pgsty/silo-console#5](https://github.com/pgsty/silo-console/issues/5 "Access Key credential fields lack autocomplete metadata and trigger Chrome warnings"), [pgsty/silo-console#6](https://github.com/pgsty/silo-console/issues/6 "Add English/Chinese localization with an in-place language toggle"), [pgsty/silo-console#7](https://github.com/pgsty/silo-console/issues/7 "Migrate Console monitoring queries to MinIO Metrics V3"), [pgsty/silo-console#8](https://github.com/pgsty/silo-console/issues/8 "Replace N/A Info metrics with actionable V3 health signals"), [pgsty/silo-console#12](https://github.com/pgsty/silo-console/issues/12 "Trust forwarding headers only from explicitly configured proxies"), [pgsty/silo-console#13](https://github.com/pgsty/silo-console/issues/13 "Restore TLS certificate and hostname verification for outbound clients"), [pgsty/silo-console#14](https://github.com/pgsty/silo-console/issues/14 "Redact session credentials from detailed debug logs"), [pgsty/silo-console#15](https://github.com/pgsty/silo-console/issues/15 "Bound and validate Object Manager WebSocket sessions"), [pgsty/silo-console#16](https://github.com/pgsty/silo-console/issues/16 "Prevent stale object requests from acting on the wrong object"), [pgsty/silo-console#17](https://github.com/pgsty/silo-console/issues/17 "Close the maintained dependency release chain before the next Console tag"), [pgsty/silo-console#18](https://github.com/pgsty/silo-console/issues/18 "Keep the documented downstream replacement set synchronized with go.mod"), [pgsty/silo-console#19](https://github.com/pgsty/silo-console/issues/19 "Require the complete validation matrix for tagged releases"), [pgsty/silo-console#20](https://github.com/pgsty/silo-console/issues/20 "Prepare authoritative version metadata and embedded assets for the next release"), [pgsty/silo-console#21](https://github.com/pgsty/silo-console/issues/21 "Include license, notice, and attribution material in every release artifact"), [pgsty/silo-console#22](https://github.com/pgsty/silo-console/issues/22 "Release upload references after aborts and network failures"), [pgsty/silo-console#23](https://github.com/pgsty/silo-console/issues/23 "Close diagnostic WebSockets on unmount and bound client-side log history"), [pgsty/silo-console#24](https://github.com/pgsty/silo-console/issues/24 "Replace regex-based IAM resource matching with safe wildcard semantics"), [pgsty/silo-console#25](https://github.com/pgsty/silo-console/issues/25 "Unify SSO session identity and expiry handling across API clients"), [pgsty/silo-console#26](https://github.com/pgsty/silo-console/issues/26 "Stream and cancel multi-object ZIP downloads instead of buffering the full archive"), [pgsty/silo-console#27](https://github.com/pgsty/silo-console/issues/27 "Gate Create Bucket UI on s3:CreateBucket permission"), [pgsty/silo-console#28](https://github.com/pgsty/silo-console/issues/28 "Give every icon-only control an accessible name and fix the localized sign-out name"), [pgsty/silo-console#29](https://github.com/pgsty/silo-console/issues/29 "Handle malformed routes and persisted UI state without blank-screen crashes"), [pgsty/silo-console#30](https://github.com/pgsty/silo-console/issues/30 "Finish localization of remaining raw UI strings"), [pgsty/silo-console#31](https://github.com/pgsty/silo-console/issues/31 "Make release artifacts reproducible for a fixed commit"), [pgsty/silo-console#32](https://github.com/pgsty/silo-console/issues/32 "Add signed checksums, SBOMs, and provenance to release artifacts"), [pgsty/silo-console#33](https://github.com/pgsty/silo-console/issues/33 "Pin CI actions, tools, and browser-test dependencies immutably"), [pgsty/silo-console#34](https://github.com/pgsty/silo-console/issues/34 "Align source-container builds and image publication with the release contract"), [pgsty/silo-console#35](https://github.com/pgsty/silo-console/issues/35 "Harden the systemd service and document certificate-directory ownership"), [pgsty/silo-console#36](https://github.com/pgsty/silo-console/issues/36 "Encode Watch WebSocket filters with URLSearchParams"), [pgsty/silo-console#37](https://github.com/pgsty/silo-console/issues/37 "Preserve structured Inspect errors and avoid reading response bodies twice"). ### pgsty/mc **Merged PRs (16):** [pgsty/mc#1](https://github.com/pgsty/mc/pull/1 "build: harden release provenance and package metadata"), [pgsty/mc#2](https://github.com/pgsty/mc/pull/2 "rebrand: adopt Silo client identity, close SUBNET paths, add brand gate"), [pgsty/mc#3](https://github.com/pgsty/mc/pull/3 "fix: remove vendor encryption key, close proxy-set path, tighten DCO gate"), [pgsty/mc#4](https://github.com/pgsty/mc/pull/4 "fix: repair a link and help text damaged by the brand sweep"), [pgsty/mc#8](https://github.com/pgsty/mc/pull/8 "feat: add read-only checksum verification"), [pgsty/mc#9](https://github.com/pgsty/mc/pull/9 "fix: validate policy writes strictly"), [pgsty/mc#10](https://github.com/pgsty/mc/pull/10 "fix: use regular PUT for empty pipe input"), [pgsty/mc#11](https://github.com/pgsty/mc/pull/11 "ci: make release retries tag-idempotent"), [pgsty/mc#13](https://github.com/pgsty/mc/pull/13 "release: silo-pkg v3.13.0 module path, fail-closed credential redaction, release gates"), [pgsty/mc#22](https://github.com/pgsty/mc/pull/22 "fix: close the findings of the final pre-release review"), [pgsty/mc#24](https://github.com/pgsty/mc/pull/24 "fix: avoid double-closing S3 Select responses"), [pgsty/mc#27](https://github.com/pgsty/mc/pull/27 "build: prepare the 20260903 dependency release"), [pgsty/mc#32](https://github.com/pgsty/mc/pull/32 "fix: read the applied globals for pipe's quiet and json flags"), [pgsty/mc#33](https://github.com/pgsty/mc/pull/33 "fix: accept on/off and enabled/disabled in MC_* boolean env vars"), [pgsty/mc#34](https://github.com/pgsty/mc/pull/34 "fix: keep an explicit checksum on zero-byte uploads"), [pgsty/mc#35](https://github.com/pgsty/mc/pull/35 "fix: sql exits non-zero when a query fails"). **Issues (18):** [pgsty/mc#5](https://github.com/pgsty/mc/issues/5 "[release gate] checksum verify drops stdout when non-TTY"), [pgsty/mc#6](https://github.com/pgsty/mc/issues/6 "[release gate] make Release workflow tag-idempotent and clean orphan drafts"), [pgsty/mc#7](https://github.com/pgsty/mc/issues/7 "[release] integrate and ship the checksum-audit mcli candidate"), [pgsty/mc#12](https://github.com/pgsty/mc/issues/12 "go.mod advertises a minio/pkg v3.6.1 floor the source cannot honor"), [pgsty/mc#14](https://github.com/pgsty/mc/issues/14 "[security][release blocker] make HTTP credential redaction fail-closed"), [pgsty/mc#15](https://github.com/pgsty/mc/issues/15 "[security][release blocker] sanitize error and JSON output before serialization"), [pgsty/mc#16](https://github.com/pgsty/mc/issues/16 "[security][release blocker] register every credential ingress before errors or network calls"), [pgsty/mc#17](https://github.com/pgsty/mc/issues/17 "[security] redact credentials from admin trace and scanner trace"), [pgsty/mc#18](https://github.com/pgsty/mc/issues/18 "[supply chain][release blocker] bind Docker artifacts to exact attestation subjects and architectures"), [pgsty/mc#19](https://github.com/pgsty/mc/issues/19 "[release gate] make artifact release tag-only and require exact-main Test Release evidence"), [pgsty/mc#20](https://github.com/pgsty/mc/issues/20 "[governance][release blocker] define review mode, split tag protection, enable immutable releases"), [pgsty/mc#21](https://github.com/pgsty/mc/issues/21 "[quality debt] archive reproducibility, test portability, and deferred compatibility gaps"), [pgsty/mc#23](https://github.com/pgsty/mc/issues/23 "sql: intermittent panic in the zstd response reader when SelectResults is closed"), [pgsty/mc#25](https://github.com/pgsty/mc/issues/25 "sql: a query error is reported but the process exits 0"), [pgsty/mc#28](https://github.com/pgsty/mc/issues/28 "[P2] Empty pipe input silently drops an explicitly requested checksum"), [pgsty/mc#29](https://github.com/pgsty/mc/issues/29 "[P2] Global --json pipe emits a progress prefix and invalid JSON"), [pgsty/mc#30](https://github.com/pgsty/mc/issues/30 "[P3] mcli pipe writes progress-bar frames into a redirected stdout, unlike every other transfer command"), [pgsty/mc#31](https://github.com/pgsty/mc/issues/31 "[P3] Every mcli command aborts when an MC_* boolean environment variable is set to on, off, enabled or disabled"). ### pgsty/silo-pkg **Merged PRs (3):** [pgsty/silo-pkg#1](https://github.com/pgsty/silo-pkg/pull/1 "fix: require an exact remote env URL scheme"), [pgsty/silo-pkg#2](https://github.com/pgsty/silo-pkg/pull/2 "feat!: own the module path and drop the Silo Go SDK replacement"), [pgsty/silo-pkg#3](https://github.com/pgsty/silo-pkg/pull/3 "ci: key the concurrency group on the pull request or branch"). ### pgsty/silo.pgsty.com **Merged PRs (10):** [pgsty/silo.pgsty.com#2](https://github.com/pgsty/silo.pgsty.com/pull/2 "docs: record CopyObject checksum invariant"), [pgsty/silo.pgsty.com#3](https://github.com/pgsty/silo.pgsty.com/pull/3 "docs: expand CopyObject checksum design"), [pgsty/silo.pgsty.com#5](https://github.com/pgsty/silo.pgsty.com/pull/5 "docs: record ListObjects NoSuchBucket decision"), [pgsty/silo.pgsty.com#6](https://github.com/pgsty/silo.pgsty.com/pull/6 "docs: record multipart checksum error contract"), [pgsty/silo.pgsty.com#7](https://github.com/pgsty/silo.pgsty.com/pull/7 "docs: record final bucket CORS hardening design"), [pgsty/silo.pgsty.com#8](https://github.com/pgsty/silo.pgsty.com/pull/8 "docs: finalize bucket CORS closure status"), [pgsty/silo.pgsty.com#9](https://github.com/pgsty/silo.pgsty.com/pull/9 "docs: record pre-release hardening and checksum contracts"), [pgsty/silo.pgsty.com#10](https://github.com/pgsty/silo.pgsty.com/pull/10 "docs: clarify site status accounting semantics"), [pgsty/silo.pgsty.com#11](https://github.com/pgsty/silo.pgsty.com/pull/11 "docs: record CORS trust and explicit version delete authorization"), [pgsty/silo.pgsty.com#13](https://github.com/pgsty/silo.pgsty.com/pull/13 "docs: startup readiness window on the Healthcheck API page").
## Keeping this record current New issue and PR authors are included when this record is refreshed, regardless of merge status. Keep this file, the English and Chinese README avatar walls, and the [website contributor data](https://github.com/pgsty/silo.pgsty.com/blob/main/data/home/contributors.yaml) in sync. If a contribution is missing or described incorrectly, open an issue or pull request. Code contributions follow the no-CLA, DCO policy in [CONTRIBUTING.md](CONTRIBUTING.md).