# AIStor Operator RELEASE.2026-04-13T10-27-16Z

Released: 2026-04-13

This release addresses a security vulnerability in the OpenTelemetry SDK dependency (CVE-2026-39883) and includes updated Helm charts (aistor-operator v5.6.2, minkms-operator v1.5.2) with upgraded component images.

---

## Component Versions

| Component       | Tag                                              | Container Image                                                                |
| --------------- | ------------------------------------------------ | ------------------------------------------------------------------------------ |
| Operator        | `RELEASE.2026-04-13T10-27-16Z`                   | `quay.io/minio/aistor/operator:RELEASE.2026-04-13T10-27-16Z`                  |
| Migration       | `RELEASE.2026-04-11T08-24-01Z`                   | `quay.io/minio/aistor/operator-migration:RELEASE.2026-04-11T08-24-01Z`        |
| MinIO Sidecar   | `RELEASE.2026-04-11T08-21-39Z`                   | `quay.io/minio/aistor/minio-sidecar:RELEASE.2026-04-11T08-21-39Z`            |
| KES Sidecar     | `RELEASE.2026-04-08T22-44-27Z`                   | `quay.io/minio/aistor/kes-sidecar:RELEASE.2026-04-08T22-44-27Z`              |
| MinKMS Sidecar  | `RELEASE.2026-04-11T08-18-20Z`                   | `quay.io/minio/aistor/minkms-sidecar:RELEASE.2026-04-11T08-18-20Z`           |

### Container Images

```bash
# Operator
docker pull quay.io/minio/aistor/operator:RELEASE.2026-04-13T10-27-16Z
docker pull quay.io/minio/aistor/operator:RELEASE.2026-04-13T10-27-16Z.fips

# Migration
docker pull quay.io/minio/aistor/operator-migration:RELEASE.2026-04-11T08-24-01Z
docker pull quay.io/minio/aistor/operator-migration:RELEASE.2026-04-11T08-24-01Z.fips

# Sidecars
docker pull quay.io/minio/aistor/minio-sidecar:RELEASE.2026-04-11T08-21-39Z
docker pull quay.io/minio/aistor/minio-sidecar:RELEASE.2026-04-11T08-21-39Z.fips
docker pull quay.io/minio/aistor/kes-sidecar:RELEASE.2026-04-08T22-44-27Z
docker pull quay.io/minio/aistor/kes-sidecar:RELEASE.2026-04-08T22-44-27Z.fips
docker pull quay.io/minio/aistor/minkms-sidecar:RELEASE.2026-04-11T08-18-20Z
docker pull quay.io/minio/aistor/minkms-sidecar:RELEASE.2026-04-11T08-18-20Z.fips
```

### Helm Charts

```bash
# AIStor Operator
helm repo add minio https://helm.min.io
helm upgrade --install aistor-operator minio/aistor-operator
```

| Chart                | Version   |
| -------------------- | --------- |
| aistor-operator      | `5.6.2`   |
| minkms-operator      | `1.5.2`   |

---

## Security Updates

- **Operator**: Upgraded OpenTelemetry SDK from v1.42.0 to v1.43.0 to fix [CVE-2026-39883](https://nvd.nist.gov/vuln/detail/CVE-2026-39883) (#1444)

---

## Helm Chart Changes

### aistor-operator v5.6.2 (#1449, #1450)

| Image | Version | Previous Version |
|---|---|---|
| `aistor/operator` | `RELEASE.2026-04-13T10-27-16Z` | `RELEASE.2026-04-11T08-24-01Z` |
| `aistor/minio` | `RELEASE.2026-04-14T21-32-45Z` | `RELEASE.2026-04-11T03-20-12Z` |
| `aistor/mc` | `RELEASE.2026-04-13T21-15-24Z` | `RELEASE.2026-04-11T06-53-06Z` |
| `aistor/kes` | `RELEASE.2026-04-13T20-11-36Z` | `RELEASE.2026-04-09T09-14-06Z` |
| `aistor/kes-sidecar` | `RELEASE.2026-04-08T22-44-27Z` | unchanged |
| `aistor/minio-sidecar` | `RELEASE.2026-04-11T08-21-39Z` | unchanged |
| `aistor/aihub` | `RELEASE.2025-12-11T18-08-15Z` | unchanged |
| `aistor/minwall` | `RELEASE.2024-11-01T19-53-30Z` | unchanged |
| `aistor/prompt` | `RELEASE.2025-01-17T21-55-43Z` | unchanged |
| `aistor/warp` | `v1.4.1` | `v1.4.0` |

**Chart changes:** No chart template changes -- image updates only.

> **Note:** This Helm chart uses a new default MinIO image. Existing object stores may be upgraded when the operator is upgraded. To prevent automatic upgrades, pin the image by setting `.spec.image` on the `ObjectStore` resource.

### minkms-operator v1.5.2 (#1449, #1450)

| Image | Version | Previous Version |
|---|---|---|
| `aistor/operator` | `RELEASE.2026-04-13T10-27-16Z` | `RELEASE.2026-04-11T08-24-01Z` |
| `aistor/minkms-sidecar` | `RELEASE.2026-04-11T08-18-20Z` | unchanged |
| `aistor/minkms` | `RELEASE.2026-04-09T16-36-52Z` | unchanged |

**Chart changes:** No chart template changes -- image updates only.

---

## Security & Compliance

### Software Bill of Materials (SBOM)

This release includes comprehensive SBOM documentation in multiple formats:

- [SPDX JSON](sbom-RELEASE.2026-04-13T10-27-16Z.spdx.json) - Standard SBOM format
- [CycloneDX JSON](sbom-RELEASE.2026-04-13T10-27-16Z.cyclonedx.json) - Security scanner compatible
- [Go Modules](go-modules-RELEASE.2026-04-13T10-27-16Z.txt) - Human-readable dependency list

SBOM files document all direct and transitive dependencies for security auditing and compliance requirements.

---

## Upgrade Instructions

For detailed upgrade instructions, please read: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/

Platform-specific guides:

- **Kubernetes with Helm**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-aistor-kubernetes-helm/
- **Kubernetes (Standard)**: https://docs.min.io/enterprise/aistor-object-store/upgrade-aistor-server/upgrade-kubernetes-standard/

### Support

For enterprise support:

- SUBNET Support: https://subnet.min.io
- Documentation: https://docs.min.io