# KES RELEASE.2025-10-09T10-10-19Z

Released: October 9, 2025

This release upgrades KES to Go 1.24.8 and updates all third-party dependencies to their latest versions, significantly improving security posture and reducing vulnerability exposure. By addressing patches across cloud provider SDKs, security libraries, and infrastructure components, this maintenance release ensures compatibility with current tooling while maintaining deployment stability.

## Security Updates

- **Patched upstream dependencies** across OAuth2, crypto, and cloud provider SDKs to address known vulnerabilities
- Reduced false positive CVE reports by limiting updates to verified, applicable dependencies
- Go runtime updated from 1.24.4 to 1.24.8 with security fixes

## Improvements

- Updated cloud provider SDKs (Google Cloud, Azure, AWS) to latest versions for enhanced compatibility
- Infrastructure components including gRPC and Prometheus upgraded to current releases
- Improved security scanner accuracy by maintaining clear dependency boundaries

---

## Upgrade Instructions

For detailed upgrade instructions, visit: https://docs.min.io/

### Quick Upgrade Steps:

1. Download the latest binary for your architecture from the release page
2. Stop the KES service
3. Replace the existing binary with the new version
4. Restart the KES service

For complete release details and downloads, visit: https://github.com/miniohq/kes/releases/tag/RELEASE.2025-10-09T10-10-19Z