Update Minio container image#29092
Conversation
c279ba4 to
28d7596
Compare
|
Should this not run more tests @ebyhr ? |
|
Haha .. now it suddenly kicked things off .. thanks @ebyhr |
TestDeltaLakeOssDeltaLakeMinioReads is broken now.
* New digest addresses CVE-2026-39414 / GHSA-h749-fxx7-pwpg
|
Whoa .. this is weird. Earlier run everything passed apart from the referenced Delta Lake test .. now Iceberg with minio-avro is also busting out .. will see how this continues. |
Does this matter? |
Ideally we update since these tests also run on CI/CD and developer machines, but we would have to find out why the tests are failing first. I am not sure when I can get into the details. |
|
This pull request has gone a while without any activity. Ask for help on #core-dev on Trino slack. |
Description
Addresses CVE-2026-39414 (GHSA-h749-fxx7-pwpg) in the older image.
Additional context and related issues
This is now using the Chainguard EmeritOSS maintained version of MinIO, which now includes patches for security issues.
Uses https://github.com/chainguard-forks/minio/releases/tag/RELEASE.2026-04-10T21-52-59Z
Related PR for aws-proxy is at trinodb/aws-proxy#210
Release notes
(x) This is not user-visible or is docs only, and no release notes are required.