# MinIO AIStor RELEASE.2026-09-19T17-05-25Z

Released: 2026-09-19

Closes authorization and information-disclosure defects in the policy engine, S3 listings and the Tables catalog, and
fixes three listing paths that could silently omit objects. Adds Iceberg REST authentication and per-feature licensing.

---

## Downloads

### darwin-amd64

- [minio](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio)
- [minio.RELEASE.2026-09-19T17-05-25Z](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z)
- [minio.RELEASE.2026-09-19T17-05-25Z.sha256sum](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.sha256sum)
- [minio.sha256sum](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.asc](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.minisig](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.minisig)
- [minio.asc](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.asc)
- [minio.minisig](https://dl.min.io/aistor/minio/release/darwin-amd64/archive/minio.minisig)

### darwin-arm64

- [minio](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio)
- [minio.RELEASE.2026-09-19T17-05-25Z](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z)
- [minio.RELEASE.2026-09-19T17-05-25Z.sha256sum](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.sha256sum)
- [minio.sha256sum](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.asc](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.minisig](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.minisig)
- [minio.asc](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.asc)
- [minio.minisig](https://dl.min.io/aistor/minio/release/darwin-arm64/archive/minio.minisig)

### linux-amd64

- [minio](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio)
- [minio.RELEASE.2026-09-19T17-05-25Z](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma)
- [minio.rdma](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma)
- [aistor-20260919170525.0.0-1.x86_64.rpm.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/aistor-20260919170525.0.0-1.x86_64.rpm.sha256sum)
- [aistor_20260919170525.0.0_amd64.deb.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/aistor_20260919170525.0.0_amd64.deb.sha256sum)
- [aistor_20260919170525.0.0_x86_64.apk.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/aistor_20260919170525.0.0_x86_64.apk.sha256sum)
- [minio-20260919170525.0.0-1.x86_64.rpm.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/minio-20260919170525.0.0-1.x86_64.rpm.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.sha256sum)
- [minio.rdma.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma.sha256sum)
- [minio.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.sha256sum)
- [minio_20260919170525.0.0_amd64.deb.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260919170525.0.0_amd64.deb.sha256sum)
- [minio_20260919170525.0.0_x86_64.apk.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260919170525.0.0_x86_64.apk.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.minisig)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.minisig)
- [minio.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.asc)
- [minio.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.minisig)
- [minio.rdma.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma.asc)
- [minio.rdma.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma.minisig)
- [aistor-20260919170525.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/aistor-20260919170525.0.0-1.x86_64.rpm)
- [aistor.apk](https://dl.min.io/aistor/minio/release/linux-amd64/archive/aistor.apk)
- [aistor.deb](https://dl.min.io/aistor/minio/release/linux-amd64/archive/aistor.deb)
- [aistor.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/archive/aistor.rpm)
- [aistor_20260919170525.0.0_amd64.deb](https://dl.min.io/aistor/minio/release/linux-amd64/aistor_20260919170525.0.0_amd64.deb)
- [aistor_20260919170525.0.0_x86_64.apk](https://dl.min.io/aistor/minio/release/linux-amd64/aistor_20260919170525.0.0_x86_64.apk)
- [minio-20260919170525.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/minio-20260919170525.0.0-1.x86_64.rpm)
- [minio.apk](https://dl.min.io/aistor/minio/release/linux-amd64/minio.apk)
- [minio.deb](https://dl.min.io/aistor/minio/release/linux-amd64/minio.deb)
- [minio.rdma-20260919170525.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma-20260919170525.0.0-1.x86_64.rpm)
- [minio.rdma_20260919170525.0.0_amd64.deb](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma_20260919170525.0.0_amd64.deb)
- [minio.rdma_20260919170525.0.0_x86_64.apk](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.rdma_20260919170525.0.0_x86_64.apk)
- [minio.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/minio.rpm)
- [minio_20260919170525.0.0_amd64.deb](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260919170525.0.0_amd64.deb)
- [minio_20260919170525.0.0_x86_64.apk](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260919170525.0.0_x86_64.apk)

### linux-amd64 (FIPS)

- [minio.RELEASE.2026-09-19T17-05-25Z.fips](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.fips)
- [minio.fips](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.fips)
- [minio.RELEASE.2026-09-19T17-05-25Z.fips.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.fips.sha256sum)
- [minio.fips.sha256sum](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.fips.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.fips.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.fips.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.fips.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.RELEASE.2026-09-19T17-05-25Z.fips.minisig)
- [minio.fips.asc](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.fips.asc)
- [minio.fips.minisig](https://dl.min.io/aistor/minio/release/linux-amd64/archive/minio.fips.minisig)

### linux-arm64

- [minio](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio)
- [minio.RELEASE.2026-09-19T17-05-25Z](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma)
- [minio.rdma](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma)
- [aistor-20260919170525.0.0-1.aarch64.rpm.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/aistor-20260919170525.0.0-1.aarch64.rpm.sha256sum)
- [aistor_20260919170525.0.0_aarch64.apk.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/aistor_20260919170525.0.0_aarch64.apk.sha256sum)
- [aistor_20260919170525.0.0_arm64.deb.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/aistor_20260919170525.0.0_arm64.deb.sha256sum)
- [minio-20260919170525.0.0-1.aarch64.rpm.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/minio-20260919170525.0.0-1.aarch64.rpm.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.sha256sum)
- [minio.rdma.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma.sha256sum)
- [minio.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.sha256sum)
- [minio_20260919170525.0.0_aarch64.apk.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260919170525.0.0_aarch64.apk.sha256sum)
- [minio_20260919170525.0.0_arm64.deb.sha256sum](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260919170525.0.0_arm64.deb.sha256sum)
- [minio.RELEASE.2026-09-19T17-05-25Z.asc](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.minisig](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.minisig)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.asc](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.asc)
- [minio.RELEASE.2026-09-19T17-05-25Z.rdma.minisig](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.RELEASE.2026-09-19T17-05-25Z.rdma.minisig)
- [minio.asc](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.asc)
- [minio.minisig](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.minisig)
- [minio.rdma.asc](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma.asc)
- [minio.rdma.minisig](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma.minisig)
- [aistor-20260919170525.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/aistor-20260919170525.0.0-1.aarch64.rpm)
- [aistor.apk](https://dl.min.io/aistor/minio/release/linux-arm64/archive/aistor.apk)
- [aistor.deb](https://dl.min.io/aistor/minio/release/linux-arm64/archive/aistor.deb)
- [aistor.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/archive/aistor.rpm)
- [aistor_20260919170525.0.0_aarch64.apk](https://dl.min.io/aistor/minio/release/linux-arm64/aistor_20260919170525.0.0_aarch64.apk)
- [aistor_20260919170525.0.0_arm64.deb](https://dl.min.io/aistor/minio/release/linux-arm64/aistor_20260919170525.0.0_arm64.deb)
- [minio-20260919170525.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/minio-20260919170525.0.0-1.aarch64.rpm)
- [minio.apk](https://dl.min.io/aistor/minio/release/linux-arm64/minio.apk)
- [minio.deb](https://dl.min.io/aistor/minio/release/linux-arm64/minio.deb)
- [minio.rdma-20260919170525.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma-20260919170525.0.0-1.aarch64.rpm)
- [minio.rdma_20260919170525.0.0_aarch64.apk](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma_20260919170525.0.0_aarch64.apk)
- [minio.rdma_20260919170525.0.0_arm64.deb](https://dl.min.io/aistor/minio/release/linux-arm64/archive/minio.rdma_20260919170525.0.0_arm64.deb)
- [minio.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/minio.rpm)
- [minio_20260919170525.0.0_aarch64.apk](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260919170525.0.0_aarch64.apk)
- [minio_20260919170525.0.0_arm64.deb](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260919170525.0.0_arm64.deb)

### windows-amd64

- [minio.exe](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe)
- [minio.exe.RELEASE.2026-09-19T17-05-25Z](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.RELEASE.2026-09-19T17-05-25Z)
- [minio.exe.RELEASE.2026-09-19T17-05-25Z.sha256sum](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.RELEASE.2026-09-19T17-05-25Z.sha256sum)
- [minio.exe.sha256sum](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.sha256sum)
- [minio.exe.RELEASE.2026-09-19T17-05-25Z.asc](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.RELEASE.2026-09-19T17-05-25Z.asc)
- [minio.exe.RELEASE.2026-09-19T17-05-25Z.minisig](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.RELEASE.2026-09-19T17-05-25Z.minisig)
- [minio.exe.asc](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.asc)
- [minio.exe.minisig](https://dl.min.io/aistor/minio/release/windows-amd64/archive/minio.exe.minisig)
<!-- Release notes generated using configuration in .github/release.yml at RELEASE.2026-09-19T17-05-25Z -->

### Container Images

```bash
# Standard
docker pull quay.io/minio/aistor/minio:RELEASE.2026-09-19T17-05-25Z
podman pull quay.io/minio/aistor/minio:RELEASE.2026-09-19T17-05-25Z

# FIPS
docker pull quay.io/minio/aistor/minio:RELEASE.2026-09-19T17-05-25Z.fips
podman pull quay.io/minio/aistor/minio:RELEASE.2026-09-19T17-05-25Z.fips
```

The `latest` tag also points at this release.

### Homebrew (macOS)

```bash
brew install minio/aistor/minio
```

---

## New Features

### Tables and Iceberg

- Iceberg REST OAuth2 client-credentials token endpoint, Bearer auth, and vended storage credentials scoped to a single
  table prefix (ffb1f47ec).
- Trusted OpenID bearer tokens on the Iceberg REST endpoint, so StarRocks, Trino and the Apache Iceberg client no longer
  need a pre-exchange at `AssumeRoleWithWebIdentity` (4948f8620).
- Bucket quotas on Tables warehouses, with `IsWarehouse` reported by `AccountInfo` (#7085).

### S3 API

- Five additional AWS checksum algorithms on writes, reads and `GetObjectAttributes` (#4554).
- `ListObjects`, `ListObjectsV2` and `ListObjectVersions` report checksum algorithm and type, and return the digest when
  the listing requests metadata (#3342, #7253).

### Observability and operations

- Per-status-code S3 metrics, `minio_api_requests_response_total{name,type,code}` and
  `minio_bucket_api_response_total{bucket,name,type,code}`, so 403 can be told from 404, 412 or 429 (#4984).
- Real-time healing telemetry: healing counts, segmented stats, per-bucket heal stats and drive heal reasons (#4115).
- `GET /minio/admin/v4/list-notification-targets`, giving `mc event target list` a server route on this line (#3358).
- Per-stream exclusion filters for the global log and event queues, under a new `/logs/filter` group (#6699).

### Configuration

- Fifteen subsystems reload via `mc admin config set` without a restart: all ten notification targets, lambda webhooks,
  Delta Sharing, Kubernetes, the policy plugin and legacy OPA (#3500).

---

## Performance Improvements

- xxh3S replaces highwayhash256S as the default bitrot algorithm, with crc64nvme selectable (#6937).
- Prefix and recursive deletes are substantially faster on drives holding many objects (#5960).
- Higher authorization throughput on busy nodes with large policy sets (c4bff3b13).

---

## Bug Fixes

### Listings

- A listing could report itself complete while silently omitting objects (479206c64).
- Objects could be dropped from a listing page when a drive returned a partial result (#7207).
- A `ListObjectsV2` request combining `start-after` with a non-`/` delimiter could crash the request (a959adaf0).
- Deleted objects could still be returned after a prefix or recursive delete (#5960).

### Replication

- Deleted objects could fail to replicate across three or more sites, retrying indefinitely (#7220).
- Replication could repeat the same work and retry deletes without end (#7125).
- A deleted bucket could reappear on other replicated sites (#7227).
- ILM-created delete markers are excluded from replication (#6875).
- Reading site replication metrics could hang indefinitely (cea38c7e8, cce414604, SubNet #17948).

### Lifecycle, healing and decommission

- Lifecycle expiry could report the wrong rule for expired objects after the first batch (#6075).
- A pool decommission could finish without recording its final state (#7009).
- Heal worker counts above the supported maximum are now rejected instead of silently reduced (#6103).

### Tables

- Renaming a table across namespaces left stale entries in the catalog (#6126).

### Other

- Prefix-scoped QoS rules did not match on `ListObjectsV1` (#7263).
- Reloading notification configuration leaked resources on every reload (#4256).
- The KMS client re-admitted a powered-off node every 30 seconds, stalling every request that picked it (#7328).
- Corrected a checksum handling error that could affect later checksum operations (#4815).
- Requesting the most recent error, API or audit log records returned the oldest instead (362cf638c).
- Every configuration sub-system and key now carries help text in `mc admin config` output (204ed3fea).
- Bucket inventory output formats are matched case-insensitively (#7304).
- STS now names the correct size limit when rejecting an oversized session policy (#7285).
- A tier whose endpoint resolves back to the same cluster is rejected (#5346).
- RDMA storage errors no longer flood every node's log during a routine cleanup race (#7212).
- Delete replication no longer floods logs with repeated messages (66c150e5b).
- The experimental async GPU-direct RDMA path is removed, with `MINIO_RDMA_ASYNC` and `MINIO_RDMA_POLL_INTERVAL_US` (#7239).
- KMS dependencies updated (#5354).

---

## Free-Tier License Changes

- Features are gated on the license ahead of authentication. A version 1 license is authoritative — anything it does not
  list is denied; a version 0 license falls back to the pre-licensing feature set (#6496).
- Free tier refuses encrypted object writes, `PutBucketEncryption`, KMS key creation, `KeyRotate` jobs and Tables
  encryption config. `ErrFreeTierNotAllowed` moves from 403 to 405 (#6331).
- Free tier no longer auto-encrypts writes when a KMS is configured; plain writes are stored in plaintext. Existing
  objects are untouched, so a bucket may hold both (#6509).
- Licensing refusals are now distinguishable from authorization ones: `XMinioPaidTierLicenseRequired` and
  `XMinioAdminTierTargetLicenseRequired` replace a generic `AccessDenied` (#5346).

---

## Security Updates

- Deny rules in the built-in `readonly` and `consolereadonly` policies were not enforced, so a user holding `readonly`
   plus any policy allowing `admin:CreateUser` was granted it (abb15b84e).
- A crafted wildcard in a submitted policy could consume minutes of CPU, and a Deny differing only in `NotResource`
   could be silently dropped from a large policy (680226aad).
- Tables `GetNamespace` and `ListTables` let a caller enumerate every bucket in the deployment; both now require
   `s3:ListBucket` on the bucket (7628a4ed5).
- Server-managed warehouse state under `.warehouse/`, `.namespaces/` and `.maintenance/` was enumerable through S3
  listings (#7235).
- `ListObjectsV2` returned checksum digests to callers holding only `s3:ListBucket` (#7253).
- A caller-supplied `?namespace=x` could satisfy an `s3tables:namespace` policy condition (#7226).
- An IdP-supplied `roleArn` claim could select the policy a claim-based STS credential runs under (ea689eb72).
- `AddUser` bypassed an explicit deny on `admin:ChangeMyPassword` (#7433).
- Snowball entry checksums are now sealed with the object encryption key (#7233).
- gRPC to v1.83.2 (GO-2026-6348, GO-2026-6441, GO-2026-6443) and amqp091-go (GO-2026-6372) (ec7a0b9de).

---

## Security & Compliance

### Software Bill of Materials (SBOM)

This release includes SBOM documentation in multiple formats:

- [SPDX JSON](sbom-RELEASE.2026-09-19T17-05-25Z.spdx.json) - Standard SBOM format
- [CycloneDX JSON](sbom-RELEASE.2026-09-19T17-05-25Z.cyclonedx.json) - Security scanner compatible
- [Go Modules](go-modules-RELEASE.2026-09-19T17-05-25Z.txt) - Human-readable dependency list

The SPDX and CycloneDX documents cover the server module's declared and verified dependencies, as recorded in `go.mod`
and `go.sum`. The Go modules list is the resolved build list, which additionally includes modules reached only through
the dependency graph. Neither includes the repository's separate test and tooling modules, which are not shipped.

---

## Upgrade Instructions

For detailed upgrade instructions, please read: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/

Platform-specific upgrade guides:

- **Linux/Bare Metal**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-linux/
- **Kubernetes with Helm**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-kubernetes-helm/

### Migration Notes

1. Under a version 1 license, enforcement is fail-closed — confirm it lists every feature you use before upgrading. A
   version 0 license is unaffected (#6496).
2. Free tier with a KMS configured: previously auto-encrypted writes now land in plaintext, and explicit encryption is
   refused with 405. Existing objects remain readable (#6331, #6509).
3. The default bitrot algorithm becomes xxh3S. Existing shards keep their recorded algorithm (#6937).
4. `bucket_event_queue` `dir_max_size` rises from 1000 MB to 10000 MB, so plan for the extra disk per node or set the key
   back (2f15bb03a).

### New Configuration Options

- `crc64nvme` is selectable as a bitrot algorithm, and the default moves from `highwayhash256S` to `xxh3S` (#6937).
- A new `/logs/filter` configuration group provides per-stream exclusion filters for the global log and event queues
  (#6699).
- Heal worker and drive-worker counts are now validated against their supported maximum at config-set time (#6103).
- The `bucket_event_queue` `dir_max_size` default changes from 1000 MB to 10000 MB, matching every other queue subsystem
  (2f15bb03a). See Migration Notes.
- Fifteen subsystems are now dynamically reloadable through `mc admin config set` without a restart (#3500).

### Support

For enterprise support:

- SUBNET Support: https://subnet.min.io
- Documentation: https://docs.min.io
