Release v5.0.18 (#2446)

* Update package to github.com/golang-jwt/jwt/v4 v4.5.2

* RELEASE=v5.0.18 ./release.sh

* add helm release v5.0.18

* trigger tests on PRs to branch v5

* Fix [CVE-2024-45338] CWE-1333
Upgrade golang/golang.org/x/net@v0.23.0 to golang.org/x/net v0.33.0

* Fix [CVE-2025-22869] CWE-770
Upgrade golang.org/x/crypto v0.31.0 to golang.org/x/crypto v0.33.0

* Fix [CVE-2025-22870] CWE-115
Upgrade golang.org/x/net v0.35.0 to golang.org/x/net v0.36.0

* Fix [CVE-2025-22870] CWE-115
Upgrade golang.org/x/net v0.36.0 to golang.org/x/net v0.38.0

* exclude swagger-gen

* run actions with go tools 1.24

* Update k8s dependencies and autogenerate code

* Fix console dependency

* golangci-lint disable unused-parameter revive

* fix lints

* Fix references to 5.0.18

Author: pjuarezd

.github/workflows/goreleaser.yml

@@ -5,7 +5,7 @@ on:
     types: [opened, reopened, synchronize]
     branches:
       - 'release*'
-      - 'v5.0.*'
+      - 'v5*'
       - 'master'
 
 jobs:
@@ -18,7 +18,7 @@ jobs:
       - name: Set up Go
         uses: actions/setup-go@v3
         with:
-          go-version: 1.21.x
+          go-version: 1.24.x
       - # Add support for more platforms with QEMU (optional)
         # https://github.com/docker/setup-qemu-action
         name: Set up QEMU

.github/workflows/kubernetes-tests.yml

@@ -1,7 +1,7 @@
 name: Tenant Tests On Kind
 on:
   pull_request:
-    branches: [ v5.0.* ]
+    branches: [ v5* ]
 concurrency:
   group: ${{ github.workflow }}-${{ github.head_ref }}
   cancel-in-progress: true
@@ -12,7 +12,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
     steps:
       - uses: actions/checkout@v3
       - uses: actions/setup-go@v4
@@ -32,7 +32,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -48,7 +48,7 @@ jobs:
     runs-on: ${{ matrix.os }}
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -65,7 +65,7 @@ jobs:
     runs-on: ubuntu-latest
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
     steps:
       - name: Check out code
         uses: actions/checkout@v3
@@ -89,7 +89,7 @@ jobs:
       - govet
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -110,7 +110,7 @@ jobs:
       - shellcheck
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -134,7 +134,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -158,7 +158,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -182,7 +182,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     steps:
@@ -206,7 +206,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
     steps:
       - uses: actions/checkout@v3
@@ -229,7 +229,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
     steps:
       - name: Free Disk Space (Ubuntu)
@@ -263,7 +263,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     # Steps represent a sequence of tasks that will be executed as part of the job
@@ -294,7 +294,7 @@ jobs:
       - operator
     strategy:
       matrix:
-        go-version: [ 1.21.x ]
+        go-version: [ 1.24.x ]
         os: [ ubuntu-latest ]
 
     # Steps represent a sequence of tasks that will be executed as part of the job

.github/workflows/ui.yaml

@@ -3,10 +3,10 @@ name: UI
 on:
   pull_request:
     branches:
-      - v5.0.*
+      - v5.*
   push:
     branches:
-      - v5.0.*
+      - v5.*
 
 # This ensures that previous jobs for the PR are canceled when the PR is
 # updated.

.golangci.yml

@@ -3,9 +3,13 @@ linters-settings:
     min-confidence: 0
   misspell:
     locale: US
+  revive:
+    rules:
+      - name: unused-parameter
+        disabled: true
 
 run:
-  go: '1.21'
+  go: '1.23'
 
 linters:
   disable-all: true
@@ -35,4 +39,4 @@ issues:
         - deadcode
 
 service:
-  golangci-lint-version: 1.51.2 # use the fixed version to not introduce new linters unexpectedly
+  golangci-lint-version: 1.64.6 # use the fixed version to not introduce new linters unexpectedly

.goreleaser.yml

@@ -14,7 +14,6 @@ release:
 before:
   hooks:
     - make clean
-    - make swagger-gen
     - go mod tidy -compat=1.21.8
     - go mod download
 

Makefile

@@ -25,7 +25,7 @@ getdeps:
 	@echo "Checking dependencies"
 	@mkdir -p ${GOPATH}/bin
 	@echo "Installing golangci-lint" && \
-		go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.51.2 && \
+		go install github.com/golangci/golangci-lint/cmd/golangci-lint@v1.64.6 && \
 		echo "Installing govulncheck" && \
 		go install golang.org/x/vuln/cmd/govulncheck@latest &&\
 		echo "installng gopls" && \
@@ -66,7 +66,7 @@ clean:
 	@rm -rf dist/
 
 regen-crd:
-	@go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.14.0
+	@go install sigs.k8s.io/controller-tools/cmd/controller-gen@v0.17.2
 	@${GOPATH}/bin/controller-gen crd:maxDescLen=0,generateEmbeddedObjectMeta=true paths="./..." output:crd:artifacts:config=$(KUSTOMIZE_CRDS)
 	@sed 's#namespace: minio-operator#namespace: {{ .Release.Namespace }}#g' resources/base/crds/minio.min.io_tenants.yaml > $(HELM_TEMPLATES)/minio.min.io_tenants.yaml
 	@sed 's#namespace: minio-operator#namespace: {{ .Release.Namespace }}#g' resources/base/crds/sts.min.io_policybindings.yaml > $(HELM_TEMPLATES)/sts.min.io_policybindings.yaml

README.md

@@ -165,7 +165,7 @@ for [kustomize](https://kubernetes.io/docs/tasks/manage-kubernetes-objects/kusto
 use that to install MiniO Operator.
 
 ```sh
-kubectl kustomize github.com/minio/operator\?ref=v5.0.16
+kubectl kustomize github.com/minio/operator\?ref=v5.0.18
 ```
 
 Run the following command to verify the status of the Operator:

api/domain-handlers.go

@@ -51,7 +51,6 @@ func getUpdateDomainsResponse(session *models.Principal, params operator_api.Upd
 	}
 
 	err = updateTenantDomains(ctx, opClient, params.Namespace, params.Tenant, params.Body.Domains)
-
 	if err != nil {
 		return ErrorWithContext(ctx, err)
 	}

api/login.go

@@ -167,7 +167,6 @@ func getLoginOauth2AuthResponse(params authApi.LoginOauth2AuthParams) (*models.L
 
 		var requestItems oauth2.LoginURLParams
 		err = json.Unmarshal(decodedRState, &requestItems)
-
 		if err != nil {
 			return nil, ErrorWithContext(ctx, err)
 		}

docs/job_crd.adoc

@@ -4,8 +4,8 @@
 [id="{p}-api-reference"]
 == API Reference
 
-:minio-image: https://hub.docker.com/r/minio/minio/tags[minio/minio:RELEASE.2024-03-15T01-07-19Z]
-:kes-image: https://hub.docker.com/r/minio/kes/tags[minio/kes:2024-03-13T17-52-13Z]
+:minio-image: https://hub.docker.com/r/minio/minio/tags[minio/minio:RELEASE.2024-08-03T04-33-23Z]
+:kes-image: https://hub.docker.com/r/minio/kes/tags[minio/kes:2024-06-17T15-47-05Z]
 
 
 [id="{anchor_prefix}-job-min-io-v1alpha1"]