Impact Score: 5/10
MinIO: Major feature release
Source available โ automated, not human-reviewed
Component: minio ยท Channel: stable. Automated analysis, not a compatibility certification. How this works.
Analysis updated: 2026-11-01.
โก Executive Summary (TL;DR)
MinIO RELEASE.2018-03-12T21-25-28Z. Source highlight: Added comprehensive support for **Server Side Encryption (SSE-C)**.
Who Does This Impact? (Role-Based Analysis)
๐ป Software Engineers & Devs
Check the source notes against the package and APIs you use before upgrading.
๐ Product & Engineering Leads
Use the documented changes to assess relevance to your product; release frequency alone is not a quality measure.
โ๏ธ DevOps & Security
Verify the target version, runtime requirements and rollback procedure in the official documentation.
โจ New Features & Capabilities (6)
- Added comprehensive support for **Server Side Encryption (SSE-C)**.
- Introducing **NAS** gateway mode, refer to our documentation here to get started.
- Add Minio TLS configuration doc for Kubernetes deployment (#5617)
- Add healthcheck endpoints (#5543)
- Add missing wget command for easy cut copy paste. (#5609)
- SSE-C: Add support in Bucket Post Policy (#5607)
๐ง Bug Fixes & Patches (6)
- Fix deadlock in in-place CopyObject decryption/encryption (#5637)
- [doc] fix openssl command for ECDSA key generation (#5616)
- Fix mqtt example py code which was not working (#5619)
- Fix shadowing issue reported by go vet (#5590)
- Fix gofmt issues reported for simplification (#5581)
- Fix docs in admin API (#5559)
๐ View Raw Release Notes (Original Developer Log)
## Highlights
- Added comprehensive support for **[Server Side Encryption (SSE-C)](https://docs.aws.amazon.com/AmazonS3/latest/dev/ServerSideEncryptionCustomerKeys.html)**.
- Create **large buckets** with *more* than 16 disks on erasure coded Minio server backends. You can also provide *more* than 16 servers upto **32** on the command line, refer to our documentation [here](https://docs.minio.io/docs/minio-large-bucket-support-quickstart-guide) to get started.
- Introducing **NAS** gateway mode, refer to our documentation [here](https://docs.minio.io/docs/minio-gateway-for-nas) to get started.
## Changelog
- Add Minio TLS configuration doc for Kubernetes deployment (#5617) <Nitish Tiwari>
- Fix deadlock in in-place CopyObject decryption/encryption (#5637) <Harshavardhana>
- Remove madmin docs from top level docs directory (#5636) <Nitish Tiwari>
- Add healthcheck endpoints (#5543) <Nitish Tiwari>
- Return authHeaderMalformed for an incorrect region in signature (#5618) <Harshavardhana>
- Save ETag when updating metadata (#5626) <Harshavardhana>
- Cleanup orchestration documents (#5623) <Nitish Tiwari>
- Remove unwanted errorIf calls (#5621) <kannappanr>
- [doc] fix openssl command for ECDSA key generation (#5616) <Andreas Auernhammer>
- Fix mqtt example py code which was not working (#5619) <Dee Koder>
- Pass location in MakeBucketWithLocation call (#5605) <poornas>
- Ensure to load only regular files for CAs (#5612) <Harshavardhana>
- SSE-C CopyObject key-rotation doesn't need metadata REPLACE value (#5611) <Harshavardhana>
- Add missing wget command for easy cut copy paste. (#5609) <Dee Koder>
- SSE-C: Add support in Bucket Post Policy (#5607) <Anis Elleuch>
- Return bit-rot verified data instead of re-reading from disk (#5568) <Aditya Manthramurthy>
- Support SSE-C multipart source objects in CopyObject (#5603) <Harshavardhana>
- Handle incoming proxy requests ip, scheme (#5591) <Harshavardhana>
- Make sure to filter out internal metadata (#5601) <Harshavardhana>
- Use toAPIErrorCode in HeadObject handler when decrypting request fails (#5600) <Anis Elleuch>
- vendor update github.com/minio/sio (#5599) <Andreas Auernhammer>
- Set appropriate encryption headers in HEAD object response (#5596) <Harshavardhana>
- Add multipart support in SSE-C encryption (#5576) <Anis Elleuch>
- Honor global flags irrespective of the position. (#5486) <kannappanr>
- Fix shadowing issue reported by go vet (#5590) <Harshavardhana>
- Remove stable sort usage when not needed (#5586) <Harshavardhana>
- Fix gofmt issues reported for simplification (#5581) <Harshavardhana>
- Move rpc version to 2.0.0 to align with backend migration (#5575) <Harshavardhana>
- Support encryption for CopyObject, GET-Range requests (#5544) <Harshavardhana>
- update docs for NAS gateway (#5569) <poornas>
- Fix docs in admin API (#5559) <Harshavardhana>
- Do not close *lock.LockedFile on failure (#5565) <Krishnan Parthasarathi>
- Change CopyObject{Part} to single srcInfo argument (#5553) <Harshavardhana>
- Provide more descriptive error during erasure init (#5282) <Krishna Srinivas>
- xl: Avoid removing directory content in Delete API (#5548) <Anis Elleuch>
- Avoid significant connections in TIME_WAIT (#5555) <Harshavardhana>
- Add NAS gateway support (#5516) <poornas>
- posix.RenameFile(): Allow overwriting an empty directory (#5551) <Anis Elleuch>
- gateway/gcs: Remove unused storageEndpoint (#5556) <Harshavardhana>
- tests: Fix failed notify webhook test (#5528) <A. Elleuch>
- Fix delete bucket policies properly (#5540) <Harshavardhana>
- Rename minio-limitations.md to minio-limits.md (#5541) <Harshavardhana>
- Add large bucket support for erasure coded backend (#5160) <Harshavardhana>
- Directory HEADs with encryption headers shouldn't return errors (#5539) <Harshavardhana>
- fail when endpoints point to same path locally (#5523) <Harshavardhana>
- Cleanup banners and remove fossa/snap (#5530) <Harshavardhana>
- revamp minio build messages (#5519) <Harshavardhana>
- Avoid shadowing ignored errors listAllBuckets() (#5524) <Harshavardhana>
- [SSE-C]: avoid encrypting empty objects. (#5525) <Andreas Auernhammer>
- Converge repeated code to common deleteBucketMetadata() (#5508) <Harshavardhana>
- update dsync implementation to fix a regression (#5513) <Harshavardhana>
- Unify gateway and object layer. (#5487) <poornas>