diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index eb2cb13841..d7c4e923a9 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -132,7 +132,7 @@ jobs: - name: Install nFPM run: | set -euo pipefail - go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.47.0 + go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.48.0 echo "$(go env GOPATH)/bin" >> "${GITHUB_PATH}" - name: Build nFPM packages diff --git a/.github/workflows/test-release.yml b/.github/workflows/test-release.yml index 3734c13455..399fcbf990 100644 --- a/.github/workflows/test-release.yml +++ b/.github/workflows/test-release.yml @@ -85,7 +85,7 @@ jobs: - name: Install package validation tools run: | set -euo pipefail - go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.47.0 + go install github.com/goreleaser/nfpm/v2/cmd/nfpm@v2.48.0 echo "$(go env GOPATH)/bin" >> "${GITHUB_PATH}" sudo apt-get update sudo apt-get install --yes rpm binutils diff --git a/CHANGELOG.md b/CHANGELOG.md index a8784b75b9..2f813cc8fe 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -2,14 +2,28 @@ ## Unreleased +## RELEASE.2026-10-18T00-00-00Z — 2026-10-18 + +Package version: `20261018000000.0.0`. Prepared for release; publication and +container promotion are separate steps. +[Changes since 20260916](https://github.com/pgsty/mc/compare/RELEASE.2026-09-16T00-00-00Z...RELEASE.2026-10-18T00-00-00Z) + - Update silo-pkg to v3.14.2 and upstream minio-go to v7.4.1. Failed multipart uploads are cleaned up after cancellation, retention timestamps are sent in UTC, and STS duration requests are preserved. Existing copy error and checksum handling is retained. Parallel SDK GET and ComposeObject remain opt-in; this update does not enable them in mcli. - Build and test with Go 1.27.2. Refresh Go x/* modules, compress v1.20.3, - msgp v1.6.5 and the etcd clients v3.7.2. Update golangci-lint to v2.14.0, + msgp v1.6.5 and the etcd clients v3.7.2. Update golangci-lint to v2.15.0, govulncheck to v1.9.0 and gofumpt to v0.12.0. +- Update fwd to v1.2.1 to preserve bytes returned together with a read error + and correct Skip offsets and fallback behavior on pipes. Update cpuid to + v2.4.1 for CPU cache identification fixes. +- Refresh the pinned UBI 9 release images and use nFPM v2.48.0 for its security + dependency updates and RPM/APK packaging fixes. GoReleaser remains v2.17.1. + +The go-systemd v22.6.0 portability pin and tablewriter v0.0.5 API remain +unchanged. This release does not require a server or Console upgrade. ## RELEASE.2026-09-16T00-00-00Z — 2026-09-16 diff --git a/Dockerfile.goreleaser b/Dockerfile.goreleaser index c39969b7be..e1fab3040e 100644 --- a/Dockerfile.goreleaser +++ b/Dockerfile.goreleaser @@ -5,14 +5,14 @@ # # This is not full reproducibility: the dnf install below still resolves # whatever the Red Hat repositories serve at build time. -FROM registry.access.redhat.com/ubi9/ubi:latest@sha256:206b65b8ee0f04b992818c9a51b29081b14974630d4850bc358097d0c44ea156 AS certs +FROM registry.access.redhat.com/ubi9/ubi:latest@sha256:16e9e43d99e181463513cc84a514859b1abb9460f1c4d9e208da4b4e51cd5cc3 AS certs RUN dnf -y install ca-certificates && \ update-ca-trust && \ cp /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem /tmp/ca-certificates.crt && \ dnf clean all && \ rm -rf /var/cache/dnf -FROM registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:f332c99eb8f798a8486821c91937f10ad64ee83d7e739303be2df051040918f6 +FROM registry.access.redhat.com/ubi9/ubi-micro:latest@sha256:5be877a2a280ae36eb9ab80ca4efb28bbf77c57abbba38137cdc37a03b8465e6 LABEL maintainer="Ruohang Feng (@Vonng) " \ vendor="PGSTY" \ diff --git a/Makefile b/Makefile index f4c02c2786..fab4e50a8b 100644 --- a/Makefile +++ b/Makefile @@ -9,7 +9,7 @@ VERSION ?= $(shell git describe --tags) TAG ?= "pgsty/mc:$(VERSION)" GOLANGCI = $(GOPATH)/bin/golangci-lint -GOLANGCI_VERSION ?= v2.14.0 +GOLANGCI_VERSION ?= v2.15.0 GOLANGCI_MODULE = github.com/golangci/golangci-lint/v2/cmd/golangci-lint .PHONY: credits check-credits check-dependency-floors test-release-state diff --git a/README.md b/README.md index 79c8bf1c03..65288e15d6 100644 --- a/README.md +++ b/README.md @@ -33,6 +33,10 @@ ## Current release +The `20261018000000` release is being prepared with Go 1.27.2, silo-pkg v3.14.2 +and minio-go v7.4.1. See [CHANGELOG.md](CHANGELOG.md) for the prepared changes. +The latest published release remains: + [20260916](https://github.com/pgsty/mc/releases/tag/RELEASE.2026-09-16T00-00-00Z) (`20260916000000.0.0`) uses silo-pkg v3.14.1 and upstream minio-go `32e1f32cb176`. See [CHANGELOG.md](CHANGELOG.md) for behavior changes and the diff --git a/README_ZH.md b/README_ZH.md index 905a2725db..c831fd97cd 100644 --- a/README_ZH.md +++ b/README_ZH.md @@ -33,6 +33,9 @@ ## 当前版本 +`20261018000000` 正在准备发布，使用 Go 1.27.2、silo-pkg v3.14.2 和 minio-go v7.4.1。 +待发布变更见 [CHANGELOG.md](CHANGELOG.md)。最新已发布版本仍为： + [20260916](https://github.com/pgsty/mc/releases/tag/RELEASE.2026-09-16T00-00-00Z) （`20260916000000.0.0`）使用 silo-pkg v3.14.1 与上游 minio-go `32e1f32cb176`。 行为变化见 [CHANGELOG.md](CHANGELOG.md) 和[中文兼容性说明](https://silo.pgsty.com/zh/compatibility/mcli/#current-release)。 diff --git a/go.mod b/go.mod index 93c5790fb2..9f3219d325 100644 --- a/go.mod +++ b/go.mod @@ -79,7 +79,7 @@ require ( github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect - github.com/klauspost/cpuid/v2 v2.4.0 // indirect + github.com/klauspost/cpuid/v2 v2.4.1 // indirect github.com/klauspost/crc32 v1.3.0 // indirect github.com/kr/pretty v0.3.1 // indirect github.com/kr/text v0.2.0 // indirect @@ -105,7 +105,7 @@ require ( github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6 // indirect github.com/muesli/cancelreader v0.2.2 // indirect github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect - github.com/philhofer/fwd v1.2.0 // indirect + github.com/philhofer/fwd v1.2.1 // indirect github.com/power-devops/perfstat v0.0.0-20260805114148-88456608a4f6 // indirect github.com/prometheus/client_model v0.6.3 // indirect // Security floor for the Prometheus parser used by madmin-go. @@ -133,7 +133,7 @@ require ( go.uber.org/zap v1.28.0 // indirect go.yaml.in/yaml/v3 v3.0.5 // indirect golang.org/x/crypto v0.58.0 // indirect - golang.org/x/exp v0.0.0-20260908205506-85c1c2202aba // indirect + golang.org/x/exp v0.0.0-20261014143641-f0251eb4aa3e // indirect golang.org/x/sync v0.24.0 // indirect golang.org/x/tools v0.52.0 // indirect google.golang.org/genproto/googleapis/api v0.0.0-20260831171406-18b4a7587f8a // indirect diff --git a/go.sum b/go.sum index d5b5220f60..713b47e3df 100644 --- a/go.sum +++ b/go.sum @@ -94,8 +94,8 @@ github.com/juju/ratelimit v1.0.2/go.mod h1:qapgC/Gy+xNh9UxzV13HGGl/6UXNN+ct+vwSg github.com/klauspost/compress v1.20.3 h1:zWNoFqq/lSuYQRim3dUXlXeA0IqwuZGicdG5ZTfY5j4= github.com/klauspost/compress v1.20.3/go.mod h1:LUdAzn7YLVvxLpc7y3V1m40wESHTgc1422pwwBSKYuI= github.com/klauspost/cpuid/v2 v2.0.1/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg= -github.com/klauspost/cpuid/v2 v2.4.0 h1:S6Hrbc7+ywsr0r+RLapfGBHfyefhCTwEh3A0tV913Dw= -github.com/klauspost/cpuid/v2 v2.4.0/go.mod h1:19jmZ9mjzoF//ddRSUsv0zfBTJWh3QJh9FNxZTMrGxU= +github.com/klauspost/cpuid/v2 v2.4.1 h1:I9KxadAkvo+QjtcEE2f2tyfEvmIla/T0m+14PrZNl0U= +github.com/klauspost/cpuid/v2 v2.4.1/go.mod h1:19jmZ9mjzoF//ddRSUsv0zfBTJWh3QJh9FNxZTMrGxU= github.com/klauspost/crc32 v1.3.0 h1:sSmTt3gUt81RP655XGZPElI0PelVTZ6YwCRnPSupoFM= github.com/klauspost/crc32 v1.3.0/go.mod h1:D7kQaZhnkX/Y0tstFGf8VUzv2UofNGqCjnC3zdHB0Hw= github.com/kr/pretty v0.2.1/go.mod h1:ipq/a2n7PKx3OHsz4KJII5eveXtPO4qwEXGdVfWzfnI= @@ -177,8 +177,8 @@ github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= github.com/pgsty/silo-pkg/v3 v3.14.2 h1:nU9gQ9LuDhN/Z6gZNvFj94Vb9xrjEMKAegX16v55s/I= github.com/pgsty/silo-pkg/v3 v3.14.2/go.mod h1:zqIm3FMETmwPHRKuUExCDGfYkCNXt+vpfBnPM821RdI= -github.com/philhofer/fwd v1.2.0 h1:e6DnBTl7vGY+Gz322/ASL4Gyp1FspeMvx1RNDoToZuM= -github.com/philhofer/fwd v1.2.0/go.mod h1:RqIHx9QI14HlwKwm98g9Re5prTQ6LdeRQn+gXJFxsJM= +github.com/philhofer/fwd v1.2.1 h1:UtpS73q8bFgy/yH3gCq8LSNvj5gv/FowNOiWZa7uKwQ= +github.com/philhofer/fwd v1.2.1/go.mod h1:RqIHx9QI14HlwKwm98g9Re5prTQ6LdeRQn+gXJFxsJM= github.com/pkg/diff v0.0.0-20210226163009-20ebb0f2a09e/go.mod h1:pJLUxLENpZxwdsKMEsNbx1VGcRFpLqf3715MtcvvzbA= github.com/pkg/xattr v0.4.12 h1:rRTkSyFNTRElv6pkA3zpjHpQ90p/OdHQC1GmGh1aTjM= github.com/pkg/xattr v0.4.12/go.mod h1:di8WF84zAKk8jzR1UBTEWh9AUlIZZ7M/JNt8e9B6ktU= @@ -291,8 +291,8 @@ golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACk golang.org/x/crypto v0.0.0-20200302210943-78000ba7a073/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54= golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w= -golang.org/x/exp v0.0.0-20260908205506-85c1c2202aba h1:Ck8QetSgk912qxWLMCKxd0in+aiyBQyDSMae6e/xmpU= -golang.org/x/exp v0.0.0-20260908205506-85c1c2202aba/go.mod h1:50RgIsmK7OwqzTTeqcSXQW8SswW0o8fRcDxmqGluJ8E= +golang.org/x/exp v0.0.0-20261014143641-f0251eb4aa3e h1:HgI6W1OolKK6tcV74is+rl9SMT0njsHlp0TbQiGXI/A= +golang.org/x/exp v0.0.0-20261014143641-f0251eb4aa3e/go.mod h1:DBoxwWhjaW8DJJw/YeM4zpeOKMC1FMXSblsYy+1mFSw= golang.org/x/mod v0.42.0 h1:ICeL3t2L30ljSPHHxDnR4fqVcBt/zR2zJAb9juavmQg= golang.org/x/mod v0.42.0/go.mod h1:u5fzIrRInkL8MaO1cbRkUHT64v303YIT5KEqpNr7jRs= golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=