SILO Console 2.4.1 Released

SILO Console v2.4.1 was released on September 16, 2026 from 1360e26d976d. It integrates pkg v3.14.1 and mcli 20260916, restricts the anonymous sharing proxy, streams multi-object ZIP downloads and adds signed, traceable release artifacts.

Shared downloads

The fix for #52 restricts the anonymous proxy to object-content GET requests at the configured S3 origin. It rejects redirects, system paths and query-selected operations that are not object downloads. Public objects, presigned links and version-specific downloads continue to work. No new sharing-disable environment variable is needed.

Thanks to Jiri Pejchal (@jiri-pejchal) for reporting the internal-metrics exposure. See the sharing boundary for the supported request forms and reverse-proxy requirements.

Password-policy migration

This patch release includes an authorization change. The Change Password button and session capability use admin:ChangeMyPassword; creating users and resetting another user’s password continue to use admin:CreateUser. With the matching SILO Server, denying CreateUser alone no longer locks the caller’s own password. To retain that restriction, deny both actions in the same statement before upgrading, keeping its original scope and conditions.

The updated built-in readonly permits self-service password changes and no longer overrides a separate CreateUser Allow. Saved policy overrides retain their stored statements. Upgrade Server, Console and pkg together and review the migration and rollback guide.

Downloads and browser recovery

• Multi-selection ZIP downloads stream to a file writer when the browser supports it, with backpressure, cancellation and duplicate-transfer protection. Other browsers hand the download to their native download manager. Neither path buffers the complete ZIP in JavaScript.
• Progress uses a percentage only when the response supplies a reliable total. The native fallback identifies the handoff explicitly; cancellation then belongs to the browser’s download manager. Selections over 5 GiB or with an unknown total recommend mcli for long-running transfers.
• Invalid routes and rendering failures offer recovery without clearing preferences. English and Chinese labels, icon controls, sign-out text and keyboard-accessible tooltips are completed.

Dependencies and embedding

The SDK handles S3 errors embedded in HTTP 200 CopyObject responses; JWX fixes custom JSON field-name escaping and strfmt updates hostname validation for Go 1.27. The embedded frontend and third-party credits are regenerated from this dependency graph. go-systemd v22.6.0 and tablewriter v0.0.5 remain intentional compatibility pins.

Go embedders select Console as github.com/pgsty/silo-console v0.0.0-20260916075814-1360e26d976d through the historical github.com/minio/console module replacement. Go does not inherit dependency replacements: copy the explicit MC replacement from the tagged README. The supported administration target is the coordinated SILO stack; upstream MinIO/MC compatibility is best effort.

Packages and verification

The official container image is on Docker Hub, with Linux amd64 and arm64 support:

docker pull docker.io/pgsty/silo-console:v2.4.1

The release contains 44 assets: binaries and bundles, DEB/RPM/APK packages, source, legal notices, SPDX SBOMs, a checksum manifest and its Sigstore bundle. Checksums and the OCI image use keyless Cosign signatures; GitHub provenance records the build workflow and tagged release inputs. The image’s latest tag advances only after the published release passes signature, provenance, SBOM and anonymous-access checks. See the release contract for online and offline verification.

Linux packages retain minio-console.service, console-user and /etc/default/console. The service now uses /var/lib/silo-console for state, /etc/silo-console/certs for certificates, and a 90-second shutdown limit. Before restarting an existing installation, migrate certificates with the documented ownership or retain the old path through CONSOLE_OPTS. The installer preserves old certificates and keys and does not restart the service for you. See the package upgrade instructions.

The exact release source passed the complete CI matrix, vulnerability checks and release verification. Local validation also covered 251 frontend unit tests, 51 browser tests, byte-identical embedded assets and sharing in standalone and embedded deployments. The downloaded Darwin/arm64 executable was independently checked against the signed checksum manifest and exercised against a SILO test server.