Release Artifacts

Each MinIO AIStor release publishes a set of artifacts alongside the server and client binaries. These artifacts support compliance auditing, dependency tracking, and automated release monitoring.

AIStor Server artifacts

Every AIStor Server release includes the following artifacts:

Artifact Format Description
Release notes Markdown Changes, bug fixes, security updates, and new features
SBOM (CycloneDX) JSON Software Bill of Materials in CycloneDX format
SBOM (SPDX) JSON Software Bill of Materials in SPDX format
Go modules Text Complete list of Go module dependencies and versions

All artifacts for past and current releases are available at the server release notes index.

AIStor Client artifacts

Every AIStor Client (mc) release includes the same set of artifacts:

Artifact Format Description
Release notes Markdown Changes, bug fixes, security updates, and new features
SBOM (CycloneDX) JSON Software Bill of Materials in CycloneDX format
SBOM (SPDX) JSON Software Bill of Materials in SPDX format
Go modules Text Complete list of Go module dependencies and versions

All artifacts for past and current releases are available at the client release notes index.

Software Bill of Materials

MinIO AIStor publishes SBOMs in two industry-standard formats with every server and client release:

  • CycloneDX — A lightweight SBOM format designed for security contexts. CycloneDX SBOMs are commonly consumed by vulnerability scanners and software composition analysis (SCA) tools.
  • SPDX — An ISO/IEC 5962:2021 standard format used for license compliance and regulatory reporting.

Both formats provide a complete inventory of all direct and transitive dependencies compiled into the release binary, including package names, versions, and license identifiers.

Use these SBOMs to:

  • Satisfy supply chain security requirements such as EO 14028 and EU CRA
  • Scan for known vulnerabilities using tools like Grype, Trivy, or OWASP Dependency-Track
  • Audit license compliance across all transitive dependencies
  • Compare dependency changes between releases before upgrading

Go modules

The Go modules file lists all Go module dependencies with their exact versions. This is the raw output of go list -m all at build time.

Release feeds

MinIO provides machine-readable feeds for monitoring new releases. Use these to integrate release notifications into existing tooling or automation pipelines.

RSS feeds

Subscribe to release notifications using any RSS reader or automation tool:

Feed URL
AIStor Server https://dl.min.io/feed-aistor.rss

JSON feeds

JSON Feed endpoints provide the same release information in native JSON format, suitable for programmatic consumption:

Feed URL
AIStor Server https://dl.min.io/api/feeds/aistor.json

REST API

The MinIO download server exposes a REST API for querying release information programmatically. All endpoints return JSON with a 5-minute server-side cache.

Endpoints

Endpoint Description
GET /api/releases/aistor All releases with platform-specific download links
GET /api/releases/aistor/latest Latest release only

All endpoints use the base URL https://dl.min.io.

Example

Query the latest stable release:

curl -s https://dl.min.io/api/releases/aistor/latest | jq '.[0].product, .[0].release_date'

The response includes structured download information for each platform (Linux, macOS, Windows, Docker) with architecture-specific binary URLs and checksums.

Automation examples

Use the REST API to build automation around MinIO AIStor releases:

Check for new releases in CI/CD:

LATEST=$(curl -s https://dl.min.io/api/releases/aistor/latest | jq -r '.[0].release_date')
echo "Latest AIStor release: ${LATEST}"

Download the server SBOM for the current release and scan with Grype:

curl -sO https://dl.min.io/aistor/minio/release/notes/sbom-RELEASE.2026-04-11T03-20-12Z.cyclonedx.json
grype sbom:sbom-RELEASE.2026-04-11T03-20-12Z.cyclonedx.json

Download the client SBOM for the current release and scan with Grype:

curl -sO https://dl.min.io/aistor/mc/release/notes/sbom-RELEASE.2026-04-11T06-53-06Z.cyclonedx.json
grype sbom:sbom-RELEASE.2026-04-11T06-53-06Z.cyclonedx.json

Subscribe to the JSON feed with a webhook:

curl -s https://dl.min.io/api/feeds/aistor.json | jq '.items[0]'

Release notes viewer

The Release Notes page provides a browseable interface for viewing all release notes. This page is also linked from the Upgrade documentation.