LoginSign Up
← Back to all sparks
M

MinIO

INFRA · APIS
Velocity0.0

High-performance S3-compatible object storage server

min.io ↗

MinIO narrows its open build to a storage engine and points paying users at AiStor

object-storages3-compatibleopen-coreself-hostedidentitygo
◆Current state
MinIO is a Go S3-compatible object store, and its open-source distribution is being deliberately narrowed. One release in this window deprecates the embedded UI console into a separate object-browser project, removes external IDP login via LDAP and OIDC outright, and drops boringcrypto in favour of the GOFIPS environment variable — with paying customers told to migrate to the commercial AiStor product. Everything around it is engine work: ILM and decommissioning correctness, a Go 1.24 toolchain move, a CVE patch, and a new endpoint to revoke STS tokens.
◆Where it's heading
The direction is an open-core line hardening its boundary. The features that made the free binary a finished product — a bundled console, enterprise identity integration, FIPS support — are being unbundled, while what stays open is the storage engine plus enough API surface (STS revocation, replication metrics labels, checksum preservation on CopyObject) for operators to build their own front end. The bugfix releases surrounding the break all sit below that line, which is consistent rather than coincidental.
◆Prediction
Expect the open distribution to keep converging on a headless, API-only server, with any remaining operator-facing convenience features candidates for relocation to AiStor.

◆Recent moves

  1. 3mo ago

    MinIO patches CVE-2025-31489 and adds STS token revocation

    A CVE fix arrives alongside a new admin endpoint for revoking STS tokens — exactly the sort of API-level control that matters more once the bundled console and IDP logins have left the open build.

    View source ↗
  2. 3mo ago

    MinIO fixes decommissioning and ILM scan edge cases

    Two correctness fixes: orphan delete markers ignored during decommission verification, and free-version-only objects handled during ILM scans. Engine housekeeping.

    View source ↗
  3. 3mo ago

    MinIO moves to Go 1.24 and fixes buffered stream truncation

    A toolchain bump to Go 1.24 plus a fix for buffered streams dropping their final entries, wrapped in routine dependency updates. The streaming fix is the only part an operator would notice.

    View source ↗
  4. 3mo ago

    MinIO strips the embedded console and LDAP/OIDC from the open build

    ⚡ SPARK

    The pivot release in this window, and the one the surrounding bugfix drops operate beneath: the embedded console is deprecated, external IDP login is removed, and paying users are directed to AiStor. It redefines what the open distribution is for.

    View source ↗
  5. 3mo ago

    MinIO adds RISC-V 64 cross-compilation and replication metric labels

    Beyond listing and ILM fixes, this adds RISC-V 64 cross-compilation and a targetArn label on bucket replication metrics — modest reach and observability gains in the part of the product that stays open.

    View source ↗
  6. 3mo ago

    MinIO preserves checksums on CopyObject and fixes lambda responses

    CopyObject now preserves and encrypts checksums where required, plus fixes to an admin policy nil dereference and lambda handler status codes. Correctness work on the API surface.

    View source ↗