# MinIO AIStor RELEASE.2026-02-07T07-43-34Z

Released: February 7, 2026

## Downloads

### Binary Downloads

| Platform | Architecture | Download                                                                    |
| -------- | ------------ | --------------------------------------------------------------------------- |
| Linux    | amd64        | [minio](https://dl.min.io/aistor/minio/release/linux-amd64/minio)           |
| Linux    | arm64        | [minio](https://dl.min.io/aistor/minio/release/linux-arm64/minio)           |
| macOS    | arm64        | [minio](https://dl.min.io/aistor/minio/release/darwin-arm64/minio)          |
| macOS    | amd64        | [minio](https://dl.min.io/aistor/minio/release/darwin-amd64/minio)          |
| Windows  | amd64        | [minio.exe](https://dl.min.io/aistor/minio/release/windows-amd64/minio.exe) |

### FIPS Binaries

| Platform | Architecture | Download                                                                    |
| -------- | ------------ | --------------------------------------------------------------------------- |
| Linux    | amd64        | [minio.fips](https://dl.min.io/aistor/minio/release/linux-amd64/minio.fips) |
| Linux    | arm64        | [minio.fips](https://dl.min.io/aistor/minio/release/linux-arm64/minio.fips) |

### Package Downloads

| Format | Architecture | Download                                                                                                                            |
| ------ | ------------ | ----------------------------------------------------------------------------------------------------------------------------------- |
| DEB    | amd64        | [minio_20260207074334.0.0_amd64.deb](https://dl.min.io/aistor/minio/release/linux-amd64/minio_20260207074334.0.0_amd64.deb)         |
| DEB    | arm64        | [minio_20260207074334.0.0_arm64.deb](https://dl.min.io/aistor/minio/release/linux-arm64/minio_20260207074334.0.0_arm64.deb)         |
| RPM    | amd64        | [minio-20260207074334.0.0-1.x86_64.rpm](https://dl.min.io/aistor/minio/release/linux-amd64/minio-20260207074334.0.0-1.x86_64.rpm)   |
| RPM    | arm64        | [minio-20260207074334.0.0-1.aarch64.rpm](https://dl.min.io/aistor/minio/release/linux-arm64/minio-20260207074334.0.0-1.aarch64.rpm) |

### Container Images

```bash
# Standard
docker pull quay.io/minio/aistor/minio:RELEASE.2026-02-07T07-43-34Z
podman pull quay.io/minio/aistor/minio:RELEASE.2026-02-07T07-43-34Z

# FIPS
docker pull quay.io/minio/aistor/minio:RELEASE.2026-02-07T07-43-34Z.fips
podman pull quay.io/minio/aistor/minio:RELEASE.2026-02-07T07-43-34Z.fips
```

### Homebrew (macOS)

```bash
brew install minio/aistor/minio
```

---

## Security & Compliance

### Software Bill of Materials (SBOM)

This release includes comprehensive SBOM documentation in multiple formats:

- [SPDX JSON](sbom-RELEASE.2026-02-07T07-43-34Z.spdx.json) - Standard SBOM format
- [CycloneDX JSON](sbom-RELEASE.2026-02-07T07-43-34Z.cyclonedx.json) - Security scanner compatible
- [Go Modules](go-modules-RELEASE.2026-02-07T07-43-34Z.txt) - Human-readable dependency list

SBOM files document all direct and transitive dependencies for security auditing and compliance requirements.

---

## Release Notes

This release delivers significant performance improvements for high-concurrency deployments through singleflight deduplication and reduced lock contention, alongside critical fixes for rolling upgrades, inventory job stability, and data usage capacity reporting. Go 1.25.7 is included with security patches for crypto/tls and crypto/x509.

### Security Updates

- **Go 1.25.7 security update**: Updated Go runtime to 1.25.7 (2026-02-04) which includes security fixes for the go command, crypto/tls, and crypto/x509, plus compiler bug fixes. All deployments should upgrade to benefit from these patches (#3001)

### New Features

- **Kubernetes deployment metadata in diagnostics**: Health diagnostics via `mc support diag` now include deployment metadata (operator version, container images, Helm chart versions) for Kubernetes-managed clusters. The AIStor operator writes metadata to a Kubernetes secret, which is synced to MinIO pods and included in the diagnostics output (#3003)

### Performance Improvements

- **Singleflight deduplication to prevent thundering herd**: Added singleflight coalescing for Delta snapshot cache, table authorization, and LDAP IAM store policy lookups. Concurrent requests for the same resource now share a single storage read instead of duplicating work, eliminating cache stampede under load (#2985)
- **Reduced lock contention with xsync.Map and shardlock**: Replaced `sync.RWMutex` + map patterns with lock-free concurrent data structures (`xsync.Map`) and sharded RWMutex (`shardlock`) across bucket metadata, metacache manager, tier metrics, event target list, delta-sharing auth, and bucket targets. Reduces contention in high-traffic code paths (#2919)
- **Cached DNS SRV lookups for LDAP**: DNS SRV record lookups are now cached with a 5-minute TTL using singleflight-backed caching, reducing redundant DNS queries during LDAP login storms. Also migrated from deprecated `ldap.Dial`/`DialTLS` to `ldap.DialURL` (#2911)

### Bug Fixes

- **Fixed rolling upgrade failures due to handler ID reordering**: Handler IDs in the internal RPC protocol were inadvertently reordered, causing `Invalid Handler` errors during rolling upgrades from RELEASE.2025-12-20 to RELEASE.2026-02-02. Handler IDs are now appended at the end with a stability test to prevent future reordering (#2977)
- **Fixed capacity fields returning zero in DataUsageInfo API**: The admin DataUsageInfo API with `?capacity=true` always returned zero for `TotalCapacity`, `TotalUsedCapacity`, and `TotalFreeCapacity` because JSON was marshalled before capacity values were populated (#3012)
- **Fixed LDAP/OpenID purge running before providers are ready**: IAM purge routines now wait for LDAP and OpenID providers to be fully initialized before running, preventing undesired behavior when servers are enabled but not yet contactable (#3002)
- **Fixed inventory job deadlock and spurious context cancellation**: Encapsulated `periodicSaver` lifecycle with explicit Start/Stop methods, preventing `SaveMetaNow()` from deadlocking when the saver has exited and eliminating spurious "context canceled" errors on successful job completions (#2981)
- **Fixed AppendObject in extended naming mode**: AppendObject operations now correctly use encoded object names for disk operations while preserving original names for encryption key derivation, resolving failures when `MINIO_OBJECT_NAMING=on` is enabled (#2972)
- **Fixed config file parsing with spaces around `=`**: `MINIO_CONFIG_ENV_FILE` now trims whitespace from keys and values, matching systemd `EnvironmentFile=` behavior. Previously, aligned config files with spaces around `=` silently failed because keys contained trailing spaces (#2916)
- **Fixed NDJSON content type for webhook log targets**: Webhook targets now set `Content-Type: application/x-ndjson` when sending log entries, ensuring receivers can properly parse newline-delimited JSON payloads (#2909)
- **Fixed tables staged-to-live recovery semantics**: Changed recovery from roll-forward to roll-back behavior when a pointer update succeeds but registry update fails. Since the client never received a success response, rolling back is the correct recovery action (#2995)
- **Fixed v3 metrics bucket limit**: Reverted the bucket limit for v3 metrics from 1000 back to 10. The multidimensional response structure makes a 100x increase untenable (#3007)
- **Hardened Kubernetes JWT validation**: Added safe type assertion checks in `ValidateServiceAccountJWT` to prevent potential nil pointer dereference panics (#2978)
- **Fixed tables metadata pointer cache invalidation**: Table metadata pointer cache entries are now properly cleared on delete operations (#2961)

---

## Upgrade Instructions

For detailed upgrade instructions, please read: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/

Platform-specific upgrade guides:

- **Linux/Bare Metal**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-linux/
- **Kubernetes with Helm**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-kubernetes-helm/

### New Configuration Options

- Kubernetes deployment metadata is automatically collected when the AIStor operator writes to `/tmp/minio/deployment.json` in MinIO pods. No additional configuration is required.

### Support

For enterprise support:

- SUBNET Support: https://subnet.min.io
- Documentation: https://docs.min.io
