diff --git a/content/_index.md b/content/_index.md
index 9b0ee37c..53bd98f0 100644
--- a/content/_index.md
+++ b/content/_index.md
@@ -11,7 +11,7 @@ upstream_modified: true
 body_class: landing-page
 ---
 
-This site targets **[SILO 20261026](/blog/release/silo-20261026/)** (with embedded Console 2.5.1), standalone **[Console 2.6.0](/blog/release/console-2.6.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)**, **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**, and optional external key service **[KES 20261026](/blog/release/silo-20261026/#kes)**, all built with Go 1.27.3. See the [component matrix](/compatibility/versions/) and [Console 2.7.0 candidate notes](/blog/release/console-2.7.0/).
+This site targets **[SILO 20261026](/blog/release/silo-20261026/)** (with embedded Console 2.5.1), standalone **[Console 2.6.0](/blog/release/console-2.6.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)**, **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**, and optional external key service **[KES 20261026](/blog/release/silo-20261026/#kes)**, all built with Go 1.27.3. See the [component matrix](/compatibility/versions/) and [Console 2.7.0 release notes](/blog/release/console-2.7.0/).
 
 > [!WARNING]
 > **SILO is a MinIO fork maintained by the Pigsty community.** It is not affiliated with, endorsed by, or sponsored by MinIO, Inc. “MinIO” is a trademark of MinIO, Inc., used here only to identify the upstream project. See [Attribution](/about/attribution/) for source and licensing details.
diff --git a/content/_index.zh.md b/content/_index.zh.md
index e7555346..c49b1d84 100644
--- a/content/_index.zh.md
+++ b/content/_index.zh.md
@@ -11,7 +11,7 @@ upstream_modified: true
 body_class: landing-page
 ---
 
-本站以 **[SILO 20261026](/zh/blog/release/silo-20261026/)** 正式版（内嵌 Console 2.5.1）为基线，配套独立版 **[Console 2.6.0](/zh/blog/release/console-2.6.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)**、**[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)** 和可选外部密钥服务 **[KES 20261026](/zh/blog/release/silo-20261026/#kes)**，统一使用 Go 1.27.3。见[组件矩阵](/zh/compatibility/versions/)与 [Console 2.7.0 候选版本说明](/zh/blog/release/console-2.7.0/)。
+本站以 **[SILO 20261026](/zh/blog/release/silo-20261026/)** 正式版（内嵌 Console 2.5.1）为基线，配套独立版 **[Console 2.6.0](/zh/blog/release/console-2.6.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)**、**[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)** 和可选外部密钥服务 **[KES 20261026](/zh/blog/release/silo-20261026/#kes)**，统一使用 Go 1.27.3。见[组件矩阵](/zh/compatibility/versions/)与 [Console 2.7.0 发布说明](/zh/blog/release/console-2.7.0/)。
 
 > [!WARNING]
 > **SILO 是由 Pigsty 社区维护的 MinIO 分支。** 本项目并非 MinIO, Inc. 的关联项目，也未获得其认可、赞助或背书。“MinIO” 是 MinIO, Inc. 的商标，此处仅用于标识上游项目。源码与许可信息详见[归属与署名](/zh/about/attribution/)。
diff --git a/content/administration/console/managing-objects.md b/content/administration/console/managing-objects.md
index 565c0ebe..31970603 100644
--- a/content/administration/console/managing-objects.md
+++ b/content/administration/console/managing-objects.md
@@ -7,7 +7,7 @@ upstream_modified: true
 ---
 
 > [!NOTE]
-> **Console 2.5.1 – 2.7.0 updates:** The Tasks drawer tracks bounded transfers and bulk operations (canceling a task stops remaining batches without rolling back completed mutations); Text/Markdown/CSV previews display a notice when truncated at `1 MiB`; ZIP preview failures before the first response byte preserve the upstream S3 error status; and sorting, filtering, and Select All operate on the currently loaded page ([Console 2.5.1](/blog/release/console-2.5.1/#objects)). [Console 2.6.0](/blog/release/console-2.6.0/) adds on-demand folder size scans, bucket usage refresh with optional PostgreSQL worker persistence, pre-create bucket validation, and exact integer quota math; the [Console 2.7.0 candidate](/blog/release/console-2.7.0/) expands the interface to ten languages.
+> **Console 2.5.1 – 2.7.0 updates:** The Tasks drawer tracks bounded transfers and bulk operations (canceling a task stops remaining batches without rolling back completed mutations); Text/Markdown/CSV previews display a notice when truncated at `1 MiB`; ZIP preview failures before the first response byte preserve the upstream S3 error status; and sorting, filtering, and Select All operate on the currently loaded page ([Console 2.5.1](/blog/release/console-2.5.1/#objects)). [Console 2.6.0](/blog/release/console-2.6.0/) adds on-demand folder size scans, bucket usage refresh with optional PostgreSQL worker persistence, pre-create bucket validation, and exact integer quota math; [Console 2.7.0](/blog/release/console-2.7.0/) expands the interface to ten languages and fixes usage-worker TLS, scheduling and folder sizes over plain HTTP.
 
 <a id="managing-objects"></a>
 <a id="minio-console-managing-objects"></a>
@@ -139,7 +139,7 @@ The tiering tab allows users with the appropriate permissions to:
 ## Usage scans (Console v2.6.0+) {#usage-scans}
 
 > [!NOTE]
-> **Component availability:** This section describes the usage scan and bucket refresh functionality shipped in [Console v2.6.0](/blog/release/console-2.6.0/) ([PR #70](https://github.com/pgsty/silo-console/pull/70)) and retained in [Console v2.7.0](/blog/release/console-2.7.0/). Server `20261026` embeds Console `v2.5.1`; `pgsty/silo` `main` embeds Console `v2.6.0` for the next Server release. A Console release and the corresponding embedded-Console dependency update in SILO Server are separate delivery steps. The supported integration target is `pgsty/silo`; upstream MinIO compatibility is best effort.
+> **Component availability:** This section describes the usage scan and bucket refresh functionality shipped in [Console v2.6.0](/blog/release/console-2.6.0/) ([PR #70](https://github.com/pgsty/silo-console/pull/70)) and retained in [Console v2.7.0](/blog/release/console-2.7.0/), which also fixes the worker issues noted below. Server `20261026` embeds Console `v2.5.1`; `pgsty/silo` `main` embeds Console `v2.6.0` for the next Server release. A Console release and the corresponding embedded-Console dependency update in SILO Server are separate delivery steps. The supported integration target is `pgsty/silo`; upstream MinIO compatibility is best effort.
 
 <!-- Adapted from pgsty/silo-console PR #70, docs/FolderSizes.md.
 Copyright (c) 2026 Urbanize. SPDX-License-Identifier: AGPL-3.0-or-later. -->
@@ -241,6 +241,13 @@ public schema. Browser processes never migrate in response to a request. Use a
 verified TLS database URI and a bounded connection pool. Keep worker credentials
 out of browser processes.
 
+The worker verifies the storage endpoint like `console server`: it trusts the
+system roots, every certificate under `certs/CAs` in `--certs-dir` and Console's
+`public.crt`, and honors `CONSOLE_MINIO_SERVER_TLS_SKIP_VERIFY` for the
+`CONSOLE_MINIO_SERVER` origin only. It only reads that directory; it neither
+creates it nor loads `private.key`. Workers before Console 2.7.0 trusted only
+the system roots and failed against a private CA.
+
 Both processes use the identical `CONSOLE_MINIO_SERVER` endpoint and database.
 Set `CONSOLE_USAGE_S3_ACCESS_KEY`, `CONSOLE_USAGE_S3_SECRET_KEY` and optionally
 `CONSOLE_USAGE_S3_SESSION_TOKEN` only on the worker. Its dedicated S3 policy is:
@@ -260,12 +267,18 @@ on every status request. API responses are `Cache-Control: no-store`.
 
 The worker subscribes to authenticated storage mutation notifications. Creates,
 overwrites, completed multipart uploads and removals invalidate the affected
-bucket. Repeated or reordered events coalesce into one queued scan, rather than
+bucket. Since Console 2.7.0, deleting a bucket, including a force delete that
+emits no object events, also discards its saved totals at once, so a bucket
+re-created under the same name never shows them. Repeated or reordered events coalesce into one queued scan, rather than
 adding or subtracting potentially duplicated byte deltas. Changes during a scan
 request a follow-up generation. Requests are durable in PostgreSQL, prioritized
 for explicit refreshes and claimed with expiring, fenced leases. Workers yield
 between bounded time slices; pagination resumes only after a whole object key
 and all its versions, so a key spanning multiple version pages is not skipped.
+Stopping a worker returns its in-progress scans to the queue with their
+checkpoints; another worker resumes them at once. When upgrading, stop all
+older workers before starting new ones: since 2.7.0 the scan budget is saved
+in the checkpoint, and older workers discard it.
 
 The live notification subscription has **no durable replay guarantee**. Startup
 and reconnect invalidate existing totals for reconciliation. Frequent bucket
@@ -277,6 +290,8 @@ recover. A completed scan is a live listing, not an atomic filesystem snapshot.
 Without the database, Refresh performs bounded foreground metadata scans and the
 UI explicitly says automatic updates are unconfigured. Navigating away stops
 those scans; completed totals are not shared across replicas in this mode.
+When the server's concurrent scan slots are busy (HTTP 429), Refresh waits and
+retries for about 30 seconds before reporting a bucket as failed.
 
 #### Worker and API settings {#worker-and-api-settings}
 
@@ -291,7 +306,7 @@ Invalid, missing required or incompatible settings fail closed.
 | `POOL_MAX_CONNECTIONS` | 4 | Connections per process |
 | `CONCURRENT_SCANS` | 1 | Concurrent worker scan slices |
 | `MAX_ENTRIES` | 100000000 | Maximum entries per full bucket scan |
-| `SCAN_TIMEOUT` | `30m` | Maximum full-scan elapsed time across slices |
+| `SCAN_TIMEOUT` | `30m` | Maximum listing time per full bucket scan, summed across slices; time queued behind other buckets is not counted (before 2.7.0: elapsed wall-clock time) |
 | `SCAN_SLICE` | `5s` | Fair scheduling slice, completed at a whole-key boundary |
 | `LEASE` | `2m` | Scan and observer lease lifetime |
 | `HEARTBEAT` | `15s` | Lease/coverage heartbeat and operation budget |
diff --git a/content/administration/console/managing-objects.zh.md b/content/administration/console/managing-objects.zh.md
index e9378f9a..c200b2c6 100644
--- a/content/administration/console/managing-objects.zh.md
+++ b/content/administration/console/managing-objects.zh.md
@@ -7,7 +7,7 @@ upstream_modified: true
 ---
 
 > [!NOTE]
-> **Console 2.5.1 – 2.7.0 更新：** 新增 Tasks 抽屉用于跟踪分批传输与批量操作进度（取消任务会停止后续批次，但不会回滚已完成的修改）；文本/Markdown/CSV 预览超过 `1 MiB` 时会显示截断提示；ZIP 归档预览在输出首字节前失败时会保留原始 S3 错误状态；对象列表的排序、筛选与全选作用于当前已加载的分页（[Console 2.5.1](/zh/blog/release/console-2.5.1/#objects)）。[Console 2.6.0](/zh/blog/release/console-2.6.0/) 新增按需文件夹大小扫描、带可选 PostgreSQL worker 持久化的存储桶用量刷新、创建前存储桶校验以及精确整数配额换算；[Console 2.7.0 候选版](/zh/blog/release/console-2.7.0/) 将界面扩展为十种语言。
+> **Console 2.5.1 – 2.7.0 更新：** 新增 Tasks 抽屉用于跟踪分批传输与批量操作进度（取消任务会停止后续批次，但不会回滚已完成的修改）；文本/Markdown/CSV 预览超过 `1 MiB` 时会显示截断提示；ZIP 归档预览在输出首字节前失败时会保留原始 S3 错误状态；对象列表的排序、筛选与全选作用于当前已加载的分页（[Console 2.5.1](/zh/blog/release/console-2.5.1/#objects)）。[Console 2.6.0](/zh/blog/release/console-2.6.0/) 新增按需文件夹大小扫描、带可选 PostgreSQL worker 持久化的存储桶用量刷新、创建前存储桶校验以及精确整数配额换算；[Console 2.7.0](/zh/blog/release/console-2.7.0/) 将界面扩展为十种语言，并修复用量后台任务的 TLS、调度以及普通 HTTP 下的目录大小计算。
 
 <a id="minio-console-managing-objects"></a>
 <a id="id1" data-td-print-local></a>
@@ -143,7 +143,7 @@ MinIO 不限制单个部署允许创建的存储桶总数。 不过，作为通
 ## 用量扫描（Console v2.6.0+） {#usage-scans}
 
 > [!NOTE]
-> **组件可用性：** 本节介绍随 [Console v2.6.0](/zh/blog/release/console-2.6.0/)（[PR #70](https://github.com/pgsty/silo-console/pull/70)）发布并在 [Console v2.7.0](/zh/blog/release/console-2.7.0/) 中继续保留的用量扫描与存储桶刷新功能。Server `20261026` 内嵌 Console `v2.5.1`；`pgsty/silo` `main` 已内嵌 Console `v2.6.0` 供下一版 Server 发布使用。Console 发布与 SILO Server 更新内嵌 Console 依赖是两个独立的交付步骤。正式支持的集成目标是 `pgsty/silo`；与上游 MinIO 的兼容性属于尽力而为。
+> **组件可用性：** 本节介绍随 [Console v2.6.0](/zh/blog/release/console-2.6.0/)（[PR #70](https://github.com/pgsty/silo-console/pull/70)）发布并在 [Console v2.7.0](/zh/blog/release/console-2.7.0/) 中继续保留的用量扫描与存储桶刷新功能；2.7.0 同时修复了下文提到的后台任务问题。Server `20261026` 内嵌 Console `v2.5.1`；`pgsty/silo` `main` 已内嵌 Console `v2.6.0` 供下一版 Server 发布使用。Console 发布与 SILO Server 更新内嵌 Console 依赖是两个独立的交付步骤。正式支持的集成目标是 `pgsty/silo`；与上游 MinIO 的兼容性属于尽力而为。
 
 <!-- 改编自 pgsty/silo-console PR #70 的 docs/FolderSizes.md。
 Copyright (c) 2026 Urbanize. SPDX-License-Identifier: AGPL-3.0-or-later. -->
@@ -229,6 +229,10 @@ worker 负责数据库模式迁移，需要其专用数据库 `public` schema 
 Web 进程不会在处理浏览器请求时执行迁移。使用经过验证的 TLS 数据库连接和有上限的连接池，
 不要把 worker 的 S3 凭据交给 Web 进程。
 
+worker 与 `console server` 以相同方式校验存储端点：信任系统根证书、`--certs-dir` 下 `certs/CAs` 中的全部证书
+以及 Console 的 `public.crt`，并且只对 `CONSOLE_MINIO_SERVER` 这一个源遵守 `CONSOLE_MINIO_SERVER_TLS_SKIP_VERIFY`。
+worker 只读取该目录，既不创建目录，也不加载 `private.key`。Console 2.7.0 之前的 worker 只信任系统根证书，遇到私有 CA 会连接失败。
+
 两个进程应使用相同的 `CONSOLE_MINIO_SERVER` 端点和数据库。
 仅在 worker 上设置 `CONSOLE_USAGE_S3_ACCESS_KEY`、`CONSOLE_USAGE_S3_SECRET_KEY`，
 需要时再设置 `CONSOLE_USAGE_S3_SESSION_TOKEN`。专用身份的 S3 策略如下：
@@ -245,10 +249,13 @@ SILO 当前允许将 ListBucket 作为 ListBucketVersions 的兼容性回退，A
 API 响应使用 `Cache-Control: no-store`。
 
 worker 订阅经过认证的存储变更通知。创建、覆盖、完成分段上传和删除操作会使相关桶的统计失效。
+自 Console 2.7.0 起，删除桶（包括不产生对象事件的强制删除）也会立即丢弃其已保存的统计，同名重建的桶不会显示旧数据。
 重复或乱序事件合并为一个待扫描任务，不直接加减可能重复的字节差值；扫描期间发生变更则安排下一代任务。
 任务持久化在 PostgreSQL 中，显式刷新优先处理，通过带过期时间和归属校验的租约领取。
 worker 在受限时间片之间让出执行权，只在完整对象键及其所有版本处理完毕后保存恢复位置，
 因此同一个键跨越多个版本分页时不会漏计。
+停止 worker 时，进行中的扫描带着检查点回到队列，由其他 worker 立即续扫。
+升级时先停止所有旧版本 worker 再启动新版本：自 2.7.0 起扫描预算保存在检查点中，旧版本 worker 会丢弃这一信息。
 
 实时通知订阅**不保证持久化重放**。启动或重新连接后，会将已有统计标为需要校准。
 较频繁的桶清单检查仅发现新桶，不重扫未变化的桶；独立的完整校准负责补偿事件流缺口和未通知的变化。
@@ -256,6 +263,7 @@ worker 在受限时间片之间让出执行权，只在完整对象键及其所
 
 没有配置数据库时，刷新使用有边界的前台元数据扫描，界面明确提示自动更新未配置。
 导航后停止扫描，这种模式下的已完成统计不在不同 Console 副本间共享。
+服务器的并发扫描槽位已满（HTTP 429）时，刷新会等待并重试约 30 秒，之后才将桶标为失败。
 
 #### worker 与 API 配置 {#worker-and-api-settings}
 
@@ -270,7 +278,7 @@ worker 在受限时间片之间让出执行权，只在完整对象键及其所
 | `POOL_MAX_CONNECTIONS` | 4 | 每进程最大连接数 |
 | `CONCURRENT_SCANS` | 1 | 并发扫描时间片数量 |
 | `MAX_ENTRIES` | 100000000 | 每次完整桶扫描最多处理的条目数 |
-| `SCAN_TIMEOUT` | `30m` | 跨时间片的完整扫描总耗时上限 |
+| `SCAN_TIMEOUT` | `30m` | 单个桶完整扫描的列举时间上限，跨时间片累计；排队等待其他桶的时间不计入（2.7.0 之前按墙钟时间计算） |
 | `SCAN_SLICE` | `5s` | 公平调度时间片，在完整键边界让出执行权 |
 | `LEASE` | `2m` | 扫描与事件观察者的租约期限 |
 | `HEARTBEAT` | `15s` | 租约/覆盖状态心跳间隔与单次操作时间预算 |
diff --git a/content/administration/minio-console/_index.md b/content/administration/minio-console/_index.md
index 2ee2b5a1..af842c1a 100644
--- a/content/administration/minio-console/_index.md
+++ b/content/administration/minio-console/_index.md
@@ -22,7 +22,7 @@ You can use the MinIO Console for administration tasks like Identity and Access
 
 SILO embeds the maintained Silo Console in the server. The [Silo Console repository](https://github.com/pgsty/silo-console) documents the downstream source, releases, and compatibility changes; standalone deployment is an advanced integration path and must use a Console version compatible with the target server release.
 
-In [Console v2.7.0](/blog/release/console-2.7.0/), the Console UI supports 10 locales (`en-US`, `zh-CN`, `zh-TW`, `ja-JP`, `ko-KR`, `fr-FR`, `de-DE`, `es-ES`, `pt-BR`, and `ru-RU`), selectable from the top bar or via `?lang=<locale>` ([design record](/blog/design/console-languages/)). Standalone container images (`v2.6.0+`) also include the root CA bundle (`/etc/ssl/certs/ca-certificates.crt`) and a writable `/tmp` directory (`1777`) for outbound HTTPS and temporary file operations.
+Since [Console v2.7.0](/blog/release/console-2.7.0/), the Console UI offers ten languages (English, Simplified Chinese, French, German, Russian, Spanish, Brazilian Portuguese, Japanese, Arabic with a right-to-left layout, and Turkish), selectable from the language menu or the command palette ([design record](/blog/design/console-languages/)). Standalone container images (`v2.7.0+`) also include the root CA bundle (`/etc/ssl/certs/ca-certificates.crt`) and a writable `/tmp` directory (`1777`) for outbound HTTPS and temporary file operations.
 
 ### Supported Browsers {#supported-browsers}
 
diff --git a/content/administration/minio-console/_index.zh.md b/content/administration/minio-console/_index.zh.md
index 3ce879b4..c18048a6 100644
--- a/content/administration/minio-console/_index.zh.md
+++ b/content/administration/minio-console/_index.zh.md
@@ -24,7 +24,7 @@ MinIO Console 是一个功能丰富的图形用户界面，提供与 [`mc`](/zh/
 
 SILO 在服务端内嵌持续维护的 Silo Console。[Silo Console 仓库](https://github.com/pgsty/silo-console)记录下游源码、版本发布与兼容性变化；独立部署属于高级集成路径，必须选择与目标服务端版本兼容的 Console 版本。
 
-在 [Console v2.7.0](/zh/blog/release/console-2.7.0/) 中，Console 界面支持 10 种语言（`en-US`、`zh-CN`、`zh-TW`、`ja-JP`、`ko-KR`、`fr-FR`、`de-DE`、`es-ES`、`pt-BR` 与 `ru-RU`），可通过顶栏语言选择器或 `?lang=<locale>` 切换（详见[设计记录](/zh/blog/design/console-languages/)）。独立容器镜像（`v2.6.0+`）还内置系统根证书包（`/etc/ssl/certs/ca-certificates.crt`）与可写 `/tmp` 目录（权限 `1777`），用于外部 HTTPS 连接与临时文件操作。
+自 [Console v2.7.0](/zh/blog/release/console-2.7.0/) 起，Console 界面提供十种语言（英语、简体中文、法语、德语、俄语、西班牙语、巴西葡萄牙语、日语、阿拉伯语（从右向左布局）与土耳其语），可通过语言菜单或命令面板切换（详见[设计记录](/zh/blog/design/console-languages/)）。独立容器镜像（`v2.7.0+`）还内置系统根证书包（`/etc/ssl/certs/ca-certificates.crt`）与可写 `/tmp` 目录（权限 `1777`），用于外部 HTTPS 连接与临时文件操作。
 
 <a id="id3" data-td-print-local></a>
 
diff --git a/content/blog/design/_index.md b/content/blog/design/_index.md
index 14484519..ba4e598f 100644
--- a/content/blog/design/_index.md
+++ b/content/blog/design/_index.md
@@ -15,7 +15,7 @@ Design records document the engineering decisions behind PGSTY SILO: root causes
 
 ## November 9: Console Languages {#november-9-console-languages}
 
-- [Adding Multilingual Support to SILO](/blog/design/console-languages/): Ten UI languages across [Console 2.6.0](/blog/release/console-2.6.0/) and [Console 2.7.0](/blog/release/console-2.7.0/) (including Portuguese from [#83](https://github.com/pgsty/silo-console/pull/83), Turkish requested in [silo#277](https://github.com/pgsty/silo/issues/277), and full translation completion in [#87](https://github.com/pgsty/silo-console/pull/87) and [#90](https://github.com/pgsty/silo-console/pull/90)), maintenance tiers, English fallback and Arabic RTL, with measured gzip and cache tradeoffs behind per-language assets and eager loading.
+- [Adding Multilingual Support to SILO](/blog/design/console-languages/): Ten UI languages across [Console 2.6.0](/blog/release/console-2.6.0/) and [Console 2.7.0](/blog/release/console-2.7.0/) (including Portuguese from [#83](https://github.com/pgsty/silo-console/pull/83) and Turkish requested in [silo#277](https://github.com/pgsty/silo/issues/277)), maintenance tiers, English fallback and Arabic RTL, with measured gzip and cache tradeoffs behind per-language assets and eager loading.
 
 ## November 6: Found in Release Acceptance {#november-6-found-in-release}
 
diff --git a/content/blog/design/_index.zh.md b/content/blog/design/_index.zh.md
index 2c3c1964..bd182ad4 100644
--- a/content/blog/design/_index.zh.md
+++ b/content/blog/design/_index.zh.md
@@ -15,7 +15,7 @@ cascade:
 
 ## 2026-11-09 Console 多语言 {#november-9-console-languages}
 
-- [为 SILO 提供多语言支持](/zh/blog/design/console-languages/)：横跨 [Console 2.6.0](/zh/blog/release/console-2.6.0/) 与 [Console 2.7.0](/zh/blog/release/console-2.7.0/) 的十语言界面（涵盖 [#83](https://github.com/pgsty/silo-console/pull/83) 葡语贡献、[silo#277](https://github.com/pgsty/silo/issues/277) 土耳其语需求，以及 [#87](https://github.com/pgsty/silo-console/pull/87) 与 [#90](https://github.com/pgsty/silo-console/pull/90) 的全量译文补齐），记录维护分级、英文回退与阿拉伯语 RTL，以及支持逐语言分包、全量加载决策的 gzip 和缓存实测。
+- [为 SILO 提供多语言支持](/zh/blog/design/console-languages/)：横跨 [Console 2.6.0](/zh/blog/release/console-2.6.0/) 与 [Console 2.7.0](/zh/blog/release/console-2.7.0/) 的十语言界面（涵盖 [#83](https://github.com/pgsty/silo-console/pull/83) 葡语贡献与 [silo#277](https://github.com/pgsty/silo/issues/277) 土耳其语需求），记录维护分级、英文回退与阿拉伯语 RTL，以及支持逐语言分包、全量加载决策的 gzip 和缓存实测。
 
 ## 2026-11-06 发布验收中发现 {#november-6-found-in-release}
 
diff --git a/content/blog/design/console-languages.md b/content/blog/design/console-languages.md
index f700f5ee..1b985e87 100644
--- a/content/blog/design/console-languages.md
+++ b/content/blog/design/console-languages.md
@@ -14,7 +14,7 @@ url: "/blog/design/console-languages/"
 
 [Console PR #83](https://github.com/pgsty/silo-console/pull/83), contributed by Eduardo Andrade Machado, supplies Brazilian Portuguese. [silo#277](https://github.com/pgsty/silo/issues/277), opened by siyahkut, requests Turkish. These contributions led to a configurable ten-language UI.
 
-**Status as of 2026-11-09:** the ten-language UI, reviewed translations, per-language compression, eager loading and long-lived asset caching are integrated into Console `main` for the [Console 2.7.0 candidate](/blog/release/console-2.7.0/). Final review preserves compact labels and verifies the affected controls at phone, tablet and desktop widths. Source integration, tag creation and public release publication remain separate milestones.
+**Status as of 2026-11-09:** the ten-language UI, reviewed translations, per-language compression, eager loading and long-lived asset caching are integrated into Console `main` and ship in [Console 2.7.0](/blog/release/console-2.7.0/). Final review preserves compact labels and verifies the affected controls at phone, tablet and desktop widths. Source integration, tag creation and public release publication remain separate milestones.
 
 ## Decision {#tldr}
 
diff --git a/content/blog/design/console-languages.zh.md b/content/blog/design/console-languages.zh.md
index 3fb63ba4..a9f0cd51 100644
--- a/content/blog/design/console-languages.zh.md
+++ b/content/blog/design/console-languages.zh.md
@@ -14,7 +14,7 @@ url: "/zh/blog/design/console-languages/"
 
 Eduardo Andrade Machado 的 [Console PR #83](https://github.com/pgsty/silo-console/pull/83) 提供了巴西葡萄牙语翻译。siyahkut 在 [silo#277](https://github.com/pgsty/silo/issues/277) 中请求土耳其语。这两项贡献推动 Console 扩展为可配置的十语言界面。
 
-**截至 2026-11-09 的状态：**十语言界面、审校后的译文、逐语言压缩、静态全量加载和长期缓存已合入 Console `main`，并纳入 [Console 2.7.0 候选版](/zh/blog/release/console-2.7.0/)。最终复核保留了紧凑标签要求，并检查了相关控件在手机、平板和桌面宽度下的显示。源码合入、打标与正式产品发布仍是不同阶段。
+**截至 2026-11-09 的状态：**十语言界面、审校后的译文、逐语言压缩、静态全量加载和长期缓存已合入 Console `main`，并随 [Console 2.7.0](/zh/blog/release/console-2.7.0/) 发布。最终复核保留了紧凑标签要求，并检查了相关控件在手机、平板和桌面宽度下的显示。源码合入、打标与正式产品发布仍是不同阶段。
 
 ## 决定 {#tldr}
 
diff --git a/content/blog/release/_index.md b/content/blog/release/_index.md
index 24511b0e..f5e896da 100644
--- a/content/blog/release/_index.md
+++ b/content/blog/release/_index.md
@@ -17,6 +17,6 @@ aliases:
 
 Release notes track feature updates, security fixes, dependency upgrades, compatibility requirements, and artifact delivery across the SILO stack.
 
-[Console 2.7.0](/blog/release/console-2.7.0/) has a verified tag and Draft Release; [Console 2.6.0](/blog/release/console-2.6.0/) remains the published stable version. The candidate adopts the separately released [mcli 20261109](/blog/release/mcli-20261109/) and [silo-pkg 3.16.0](/blog/release/pkg-3.16.0/).
+[Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages and usage-worker, plain-HTTP and upload fixes; [Console 2.6.0](/blog/release/console-2.6.0/) remains the published stable version until 2.7.0 is published. 2.7.0 adopts the separately released [mcli 20261109](/blog/release/mcli-20261109/) and [silo-pkg 3.16.0](/blog/release/pkg-3.16.0/).
 
 The **[20261026 coordinated release](/blog/release/silo-20261026/)** consolidates all SILO Server, mcli, and KES changes since 20261018 alongside **[Console 2.5.1](/blog/release/console-2.5.1/)** and **[silo-pkg 3.15.2](/blog/release/pkg-3.15.2/)** (the October 24–25 maintenance drafts have been folded into the final release notes, with their URLs redirecting automatically).
diff --git a/content/blog/release/_index.zh.md b/content/blog/release/_index.zh.md
index a5acd291..17e17275 100644
--- a/content/blog/release/_index.zh.md
+++ b/content/blog/release/_index.zh.md
@@ -17,6 +17,6 @@ aliases:
 
 发布日志记录各版本的功能演进、安全修复、依赖更新、兼容性要求与交付制品。
 
-[Console 2.7.0](/zh/blog/release/console-2.7.0/) 的标签与 Draft Release 已通过验证，[Console 2.6.0](/zh/blog/release/console-2.6.0/) 仍为已公开的稳定版本。候选版采用已独立发布的 [mcli 20261109](/zh/blog/release/mcli-20261109/) 与 [silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)。
+[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言，以及用量后台任务、普通 HTTP 与上传修复；在 2.7.0 公开发布前，[Console 2.6.0](/zh/blog/release/console-2.6.0/) 仍为已公开的稳定版本。2.7.0 采用已独立发布的 [mcli 20261109](/zh/blog/release/mcli-20261109/) 与 [silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)。
 
 最新的 **[20261026 联合发布](/zh/blog/release/silo-20261026/)** 汇总了 SILO Server、mcli 与 KES 自 20261018 正式版以来的全部更新，并配套发布 **[Console 2.5.1](/zh/blog/release/console-2.5.1/)** 与 **[silo-pkg 3.15.2](/zh/blog/release/pkg-3.15.2/)**（10 月 24—25 日的阶段性维护记录已并入正式发布日志，原链接自动重定向至新页面）。
diff --git a/content/blog/release/console-2.7.0.md b/content/blog/release/console-2.7.0.md
index 9b81658f..d3e9bd1e 100644
--- a/content/blog/release/console-2.7.0.md
+++ b/content/blog/release/console-2.7.0.md
@@ -1,29 +1,67 @@
 ---
-title: "SILO Console 2.7.0: Ten Languages and Container Reliability"
-linkTitle: "Console 2.7.0 (Draft Release)"
+title: "SILO Console 2.7.0: Ten Languages, Usage Worker and Container Fixes"
+linkTitle: "Console 2.7.0"
 date: 2026-11-09
 author: "SILO"
-description: "Console 2.7.0 release candidate: ten UI languages, Arabic RTL, container fixes, released mcli and silo-pkg dependencies, and updated API documentation."
+description: "Console 2.7.0: ten UI languages and Arabic RTL, usage-worker TLS and scheduling fixes, folder sizes over plain HTTP, container fixes, released mcli and silo-pkg dependencies, and updated API documentation."
 tags: [Release, Console]
 draft: false
 weight: 1
 url: "/blog/release/console-2.7.0/"
 ---
 
-**Verified Draft Release, not yet publicly released.** Console 2.7.0 expands
-the administration interface to ten languages, fixes container HTTPS and
-temporary files, adopts the released mcli 20261109 and silo-pkg 3.16.0, and
-updates API documentation. The `v2.7.0` tag and its complete validation and
-release pipelines have passed. GitHub assets remain in a Draft Release;
-the versioned candidate image is available on Docker Hub. As of **2026-11-09**,
-[2.6.0](https://github.com/pgsty/silo-console/releases/tag/v2.6.0) remains the
-latest published release and `latest` still identifies its verified image.
-Publishing the draft and promoting `latest` are separate steps.
+Console 2.7.0 expands the administration interface to ten languages, fixes
+container HTTPS and temporary files, adopts the released mcli 20261109 and
+silo-pkg 3.16.0 and updates API documentation. It also fixes usage-worker TLS
+and scheduling, folder sizes over plain HTTP and malformed uploads, all found
+in the final pre-release review. Publication status and assets are on
+[GitHub releases](https://github.com/pgsty/silo-console/releases).
 
 [GitHub releases](https://github.com/pgsty/silo-console/releases) ·
 [Changes since 2.6.0](https://github.com/pgsty/silo-console/compare/v2.6.0...v2.7.0) ·
 [Console compatibility](/compatibility/console/)
 
+## Fixes found before release {#fixes}
+
+The final review before release found defects that 2.6.0 already shipped
+with. 2.7.0 fixes them:
+
+- **Folder sizes over plain HTTP.** Embedded Console is usually opened at
+  `http://<ip>:9001`, which browsers do not treat as a secure context. There
+  **Calculate folder sizes** and the decryption-key copy button silently did
+  nothing. Both now work over HTTP.
+- **Usage worker TLS.** `console usage-worker` accepts `--certs-dir` and trusts
+  the same roots as `console server`: the system roots, `certs/CAs` and
+  Console's `public.crt`. It applies `CONSOLE_MINIO_SERVER_TLS_SKIP_VERIFY` to
+  the SILO endpoint only. Earlier workers trusted only the system roots and
+  failed against a private CA. The worker only reads the directory: it neither
+  creates it nor loads `private.key`.
+- **Scan budget.** `CONSOLE_USAGE_SCAN_TIMEOUT` now limits listing time summed
+  across scan slices. Time a bucket spends queued behind other buckets no
+  longer counts, so many large buckets no longer end `limited` together.
+  Buckets left limited by the earlier accounting resume with a full budget on
+  their next retry.
+- **Worker restarts.** A scan interrupted by stopping the worker returns to the
+  queue with its checkpoint and resumes at once, instead of showing
+  "Update failed" for at least 30 seconds. Bucket changes the worker received
+  before stopping are saved rather than dropped.
+- **Deleted buckets.** The worker handles bucket creation and deletion events.
+  Deleting a bucket, including a force delete that emits no object events,
+  discards its saved totals, so a bucket re-created under the same name never
+  shows them.
+- **Busy scanner.** Without the usage database, **Refresh** waits and retries
+  for about 30 seconds when the server's scan slots are busy (HTTP 429),
+  instead of marking buckets as failed.
+- **Uploads.** Malformed or truncated multipart uploads return an error instead
+  of panicking the request handler.
+- **Arabic field layout.** The reveal button and unit selectors of password,
+  URL, e-mail and number fields stay beside the text instead of covering it,
+  and the task-count badge is back in its corner.
+
+Before upgrading the optional usage worker, stop all older workers, then start
+2.7.0 workers. Mixed versions do not accumulate the new scan budget
+consistently.
+
 ## Ten languages in one menu {#languages}
 
 The login page, public pages and signed-in Console share a language menu.
@@ -111,17 +149,17 @@ build paths:
 Public certificates can use system trust without disabling TLS verification.
 Private CAs still need explicit configuration. An existing mount over the
 system bundle continues to override it. Official images remain on Docker Hub
-as **`docker.io/pgsty/silo-console`**. The verified candidate image uses
-`v2.7.0`; the `latest` tag remains unchanged.
+as **`docker.io/pgsty/silo-console`**, tagged `v2.7.0` for this release.
 
 ## Upgrade and dependency boundaries {#upgrade}
 
 Folder and bucket usage scans, retained-version totals, freshness indicators
 and the optional PostgreSQL usage worker already shipped in
-[2.6.0](/blog/release/console-2.6.0/). They are retained in 2.7.0. PostgreSQL is
+[2.6.0](/blog/release/console-2.6.0/). They are retained in 2.7.0, with the
+worker fixes [above](#fixes). PostgreSQL is
 needed only for that optional worker, not for the language or container changes.
 
-The candidate adopts the released components verified in
+2.7.0 adopts the released components verified in
 [PR #86](https://github.com/pgsty/silo-console/pull/86):
 
 | Component | Reviewed source selection |
@@ -160,8 +198,7 @@ best effort.
 The obsolete upstream-MinIO build job was removed in
 [PR #85](https://github.com/pgsty/silo-console/pull/85). The maintained SILO
 acceptance matrix, advisory upstream-MC compatibility probe and frontend/container
-asset-consistency check remain. The exact tagged commit and its separate
-release-artifact verification are recorded below.
+asset-consistency check remain.
 
 ## API documentation and validation {#api-docs}
 
@@ -208,35 +245,3 @@ history and copyright notices.
 
 See the [community contribution record](/about/contributors/) for actual PR
 states and historical credits.
-
-## Verified draft and source {#verification}
-
-Tag [`v2.7.0`](https://github.com/pgsty/silo-console/tree/v2.7.0) resolves to
-[`26ce922424f18424ca64389632b74685b8c82752`](https://github.com/pgsty/silo-console/commit/26ce922424f18424ca64389632b74685b8c82752).
-The checks accepted this exact commit:
-
-- [Required matrix: 38/38 jobs](https://github.com/pgsty/silo-console/actions/runs/42571555305), including maintained SILO integration, the permission matrix, SSO, replication, shared downloads, PostgreSQL usage, Swagger regeneration, platform builds, package lifecycle and independent artifact reproduction. Playwright passed 886 regression tests and eight additional grouped checks.
-- [Required vulnerability checks: 3/3 jobs](https://github.com/pgsty/silo-console/actions/runs/42571555292).
-- [Tag release pipeline](https://github.com/pgsty/silo-console/actions/runs/42574599791): draft assets, checksum and image signatures, SPDX attestations and GitHub provenance verified.
-
-The artifact job was rerun after GitHub returned HTTP 504 while downloading
-Syft's checksum file; the validation requirements and source stayed unchanged.
-
-The draft contains **44 assets**: six platform executables, six bundles, nine
-Linux packages, a source archive, 17 SPDX SBOMs, legal files, the SHA-256 manifest
-and its Sigstore bundle. The manifest covers 38 payloads. Draft GitHub assets
-are visible to maintainers until publication; public download links continue
-to use 2.6.0. Verification commands are in the
-[tagged release contract](https://github.com/pgsty/silo-console/blob/v2.7.0/docs/release-contract.md).
-
-The multi-platform candidate image is `docker.io/pgsty/silo-console:v2.7.0`
-for Linux amd64 and arm64, with immutable digest:
-
-```text
-sha256:a7f3e3f326fa992895cba23a216e44689592666dfb070306e2ab058c0b27acc5
-```
-
-The `latest` digest remains
-`sha256:49b297b1ecc6252e2fe95ee641f96b165eaf92db8394872462562d3e90e67608`.
-The draft is ready for maintainer publication; it has not been published or
-promoted to `latest`.
diff --git a/content/blog/release/console-2.7.0.zh.md b/content/blog/release/console-2.7.0.zh.md
index 0cb01674..5c77203b 100644
--- a/content/blog/release/console-2.7.0.zh.md
+++ b/content/blog/release/console-2.7.0.zh.md
@@ -1,26 +1,46 @@
 ---
-title: "SILO Console 2.7.0：十种语言与容器可靠性修复"
-linkTitle: "Console 2.7.0（发布草稿）"
+title: "SILO Console 2.7.0：十种语言、用量后台任务与容器修复"
+linkTitle: "Console 2.7.0"
 date: 2026-11-09
 author: "SILO"
-description: "Console 2.7.0 候选版本说明：十种语言、阿拉伯语 RTL、容器修复、正式 mcli 与 silo-pkg 依赖，以及 API 文档更新。"
+description: "Console 2.7.0：十种语言与阿拉伯语 RTL、用量后台任务的 TLS 与调度修复、普通 HTTP 下的目录大小计算、容器修复、正式 mcli 与 silo-pkg 依赖，以及 API 文档更新。"
 tags: [Release, Console]
 draft: false
 weight: 1
 url: "/zh/blog/release/console-2.7.0/"
 ---
 
-**已验证的 Draft Release，尚未公开发布。** Console 2.7.0 将管理界面扩展到十种语言，修复容器 HTTPS 与临时文件问题，
-采用已正式发布的 mcli 20261109、silo-pkg 3.16.0，并更新 API 文档。
-`v2.7.0` 标签对应的完整验证与发布流水线均已通过；GitHub 制品保留在 Draft Release 中，
-带版本号的候选镜像已在 Docker Hub 就绪。截至 **2026-11-09**，最新正式版仍为
-[2.6.0](https://github.com/pgsty/silo-console/releases/tag/v2.6.0)，`latest` 仍指向其已验证镜像。
-公开发布草稿与推进 `latest` 是后续独立步骤。
+Console 2.7.0 将管理界面扩展到十种语言，修复容器 HTTPS 与临时文件问题，
+采用已正式发布的 mcli 20261109、silo-pkg 3.16.0，并更新 API 文档；
+同时修复发布前最终审查发现的问题：用量后台任务的 TLS 与调度、普通 HTTP 下的目录大小计算，以及畸形上传请求。
+发布状态与制品见 [GitHub Releases](https://github.com/pgsty/silo-console/releases)。
 
 [GitHub Releases](https://github.com/pgsty/silo-console/releases) ·
 [2.6.0 之后的变化](https://github.com/pgsty/silo-console/compare/v2.6.0...v2.7.0) ·
 [Console 兼容性](/zh/compatibility/console/)
 
+## 发布前修复的问题 {#fixes}
+
+发布前的最终审查发现了一些 2.6.0 起就存在的缺陷，2.7.0 一并修复：
+
+- **普通 HTTP 下的目录大小。** 内嵌 Console 通常通过 `http://<ip>:9001` 访问，浏览器不把它视为安全上下文。
+  此时 **Calculate folder sizes** 和解密密钥的复制按钮点击后没有任何反应。现在两者在 HTTP 下都能正常使用。
+- **用量后台任务的 TLS。** `console usage-worker` 支持 `--certs-dir`，与 `console server` 信任相同的根证书：
+  系统根证书、`certs/CAs` 和 Console 的 `public.crt`；`CONSOLE_MINIO_SERVER_TLS_SKIP_VERIFY` 只对 SILO 端点生效。
+  此前的后台任务只信任系统根证书，遇到私有 CA 会连接失败。后台任务只读取该目录，不会创建它，也不会加载 `private.key`。
+- **扫描预算。** `CONSOLE_USAGE_SCAN_TIMEOUT` 现在限制跨时间片累计的列举时间，桶排队等待其他桶的时间不再计入，
+  因此大量大桶不会再一起以 `limited` 结束。按旧方式计时而停在 limited 的桶，下次重试时会获得完整预算。
+- **后台任务重启。** 停止后台任务时，正在进行的扫描带着检查点回到队列并立即续扫，
+  不再至少 30 秒显示“更新失败”；停止前已收到的桶变更也会保存，不会丢失。
+- **已删除的桶。** 后台任务处理桶创建与删除事件。删除桶（包括不产生对象事件的强制删除）会丢弃其已保存的统计，
+  同名重建的桶不会再显示旧桶的数据。
+- **扫描繁忙。** 未配置用量数据库时，服务器扫描槽位已满（HTTP 429）的情况下，**刷新**会等待并重试约 30 秒，
+  不再直接把桶标为失败。
+- **上传。** 畸形或被截断的 multipart 上传返回错误，不再导致请求处理 panic。
+- **阿拉伯语字段布局。** 密码、URL、邮箱和数字字段的显示按钮与单位选择器位于文字旁边，不再遮挡文字；任务数角标恢复到右上角位置。
+
+升级可选用量后台任务时，先停止所有旧版本后台任务，再启动 2.7.0。新旧版本混跑时，新的扫描预算无法一致累计。
+
 ## 一个菜单，十种语言 {#languages}
 
 登录页、公开页面和登录后的控制台共用语言菜单，命令面板提供同样的选择：
@@ -84,15 +104,15 @@ url: "/zh/blog/release/console-2.7.0/"
 
 公开证书可直接使用系统信任，无需关闭 TLS 校验。私有 CA 仍需显式配置；
 已有的系统证书包挂载继续覆盖镜像中的证书包。
-官方镜像仍位于 Docker Hub 的 **`docker.io/pgsty/silo-console`**；已验证的候选镜像使用 `v2.7.0` 标签，`latest` 保持不变。
+官方镜像仍位于 Docker Hub 的 **`docker.io/pgsty/silo-console`**，本版本标签为 `v2.7.0`。
 
 ## 升级与依赖边界 {#upgrade}
 
 目录和存储桶用量扫描、保留版本统计、新鲜度提示，以及可选的 PostgreSQL 用量后台任务，
-已随 [2.6.0](/zh/blog/release/console-2.6.0/) 发布，2.7.0 继续保留。
+已随 [2.6.0](/zh/blog/release/console-2.6.0/) 发布，2.7.0 继续保留，并包含[上文](#fixes)的后台任务修复。
 只有可选用量后台任务需要 PostgreSQL；语言和容器变化不引入这一要求。
 
-候选版本采用 [PR #86](https://github.com/pgsty/silo-console/pull/86) 已验证的正式组件：
+2.7.0 采用 [PR #86](https://github.com/pgsty/silo-console/pull/86) 已验证的正式组件：
 
 | 组件 | 已核对的源码选择 |
 | --- | --- |
@@ -123,7 +143,6 @@ SILO Server 20261026 内嵌 Console 2.5.1。升级独立 Console 不会替换内
 
 [PR #85](https://github.com/pgsty/silo-console/pull/85) 移除了过时的上游 MinIO 构建任务，
 保留维护的 SILO 验收矩阵、作为参考的上游 MC 兼容性探针，以及前端与容器资源一致性检查。
-准确标签提交及其独立发布制品验收结果见下文。
 
 ## API 文档与校验 {#api-docs}
 
@@ -156,31 +175,3 @@ CI 使用明确的权限和平台矩阵，从项目版本文件读取工具链
   [#63](https://github.com/pgsty/silo-console/issues/63) 中报告并分析高延迟下健康报告截断，已在 2.5.0 修复。
 
 实际 PR 状态与历史贡献见[社区贡献记录](/zh/about/contributors/)。
-
-## 草稿验收与准确源码 {#verification}
-
-标签 [`v2.7.0`](https://github.com/pgsty/silo-console/tree/v2.7.0) 指向
-[`26ce922424f18424ca64389632b74685b8c82752`](https://github.com/pgsty/silo-console/commit/26ce922424f18424ca64389632b74685b8c82752)。
-以下检查均验收这一准确提交：
-
-- [Required matrix：38/38 项](https://github.com/pgsty/silo-console/actions/runs/42571555305)，覆盖维护中的 SILO 集成、权限矩阵、SSO、复制、分享下载、PostgreSQL 用量、Swagger 生成、跨平台构建、软件包生命周期与独立制品复现。Playwright 通过 886 项回归测试及另 8 项分组检查。
-- [Required vulnerability checks：3/3 项](https://github.com/pgsty/silo-console/actions/runs/42571555292)。
-- [标签发布流水线](https://github.com/pgsty/silo-console/actions/runs/42574599791)：草稿制品、校验和与镜像签名、SPDX 声明和 GitHub 来源证明均已验证。
-
-制品任务曾因 GitHub 下载 Syft 校验文件时返回 HTTP 504 而重跑；源码与验证要求保持不变。
-
-草稿包含 **44 个制品**：六个平台的独立可执行文件、六个压缩包、九个 Linux 软件包、
-源码包、17 份 SPDX SBOM、法律文件、SHA-256 清单及其 Sigstore 签名包。
-校验和清单覆盖 38 个载荷文件。GitHub 草稿制品在公开发布前仅对维护者可见，
-公开下载链接继续使用 2.6.0。验证命令见
-[该标签的发布契约](https://github.com/pgsty/silo-console/blob/v2.7.0/docs/release-contract.md)。
-
-多平台候选镜像为 `docker.io/pgsty/silo-console:v2.7.0`，支持 Linux amd64 与 arm64，不可变摘要为：
-
-```text
-sha256:a7f3e3f326fa992895cba23a216e44689592666dfb070306e2ab058c0b27acc5
-```
-
-`latest` 摘要仍为
-`sha256:49b297b1ecc6252e2fe95ee641f96b165eaf92db8394872462562d3e90e67608`。
-草稿已具备供维护者公开发布的条件，本次尚未公开发布，也未推进 `latest`。
diff --git a/content/compatibility/console.md b/content/compatibility/console.md
index cd21b674..0d20ccf2 100644
--- a/content/compatibility/console.md
+++ b/content/compatibility/console.md
@@ -9,7 +9,7 @@ icon: fa-solid fa-window-maximize
 ---
 
 > [!NOTE]
-> **Latest published release:** [Console v2.6.0](/blog/release/console-2.6.0/) (2026-11-05, UTC+8) adds usage scans, retained-version totals, and bucket-administration fixes. The [Console 2.7.0 candidate](/blog/release/console-2.7.0/) adds ten UI languages, Arabic RTL, container CA/temporary-directory fixes, `silo-pkg v3.16.0`, official `mcli 20261109`, and updated Swagger documentation. Upgrading standalone Console does not replace Server's embedded Console; built-in policy Reset and live bucket inventory reads require the Server 20261026 release (absent from published Server 20261018). See the [component matrix](/compatibility/versions/).
+> **Latest published release:** [Console v2.6.0](/blog/release/console-2.6.0/) (2026-11-05, UTC+8) adds usage scans, retained-version totals, and bucket-administration fixes. [Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages, Arabic RTL, container CA/temporary-directory fixes, usage-worker TLS and scheduling fixes, folder sizes over plain HTTP, `silo-pkg v3.16.0`, official `mcli 20261109`, and updated Swagger documentation. Upgrading standalone Console does not replace Server's embedded Console; built-in policy Reset and live bucket inventory reads require the Server 20261026 release (absent from published Server 20261018). See the [component matrix](/compatibility/versions/).
 
 SILO Console is Silo's build of the MinIO Console. This page records where the two are interchangeable and where they differ. Start with the [three-level overview](/compatibility/), then use the details below to check UI and automation behavior.
 
diff --git a/content/compatibility/console.zh.md b/content/compatibility/console.zh.md
index 3c4f7089..bcde1d56 100644
--- a/content/compatibility/console.zh.md
+++ b/content/compatibility/console.zh.md
@@ -9,7 +9,7 @@ icon: fa-solid fa-window-maximize
 ---
 
 > [!NOTE]
-> **最新正式版：** [Console v2.6.0](/zh/blog/release/console-2.6.0/)（2026-11-05，UTC+8）新增用量扫描、保留版本统计与存储桶管理修复。[Console 2.7.0 候选版](/zh/blog/release/console-2.7.0/)加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复、`silo-pkg v3.16.0`、正式版 `mcli 20261109` 及 Swagger 文档更新。升级独立 Console 不会替换 Server 内嵌控制台；内置策略 Reset 与实时存储桶列表需配合 Server 20261026 正式版生效（Server 20261018 不包含这两项服务端缓存修复）。配套版本见[组件矩阵](/zh/compatibility/versions/)。
+> **最新正式版：** [Console v2.6.0](/zh/blog/release/console-2.6.0/)（2026-11-05，UTC+8）新增用量扫描、保留版本统计与存储桶管理修复。[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复、用量后台任务的 TLS 与调度修复、普通 HTTP 下的目录大小计算、`silo-pkg v3.16.0`、正式版 `mcli 20261109` 及 Swagger 文档更新。升级独立 Console 不会替换 Server 内嵌控制台；内置策略 Reset 与实时存储桶列表需配合 Server 20261026 正式版生效（Server 20261018 不包含这两项服务端缓存修复）。配套版本见[组件矩阵](/zh/compatibility/versions/)。
 
 SILO Console 是 Silo 构建的 MinIO Console。本页记录二者在哪些地方可以互换使用，在哪些地方存在差异。先看[三档兼容性总览](/zh/compatibility/)，再按下文核对界面与自动化接口。
 
diff --git a/content/compatibility/versions.md b/content/compatibility/versions.md
index ee828916..253cce33 100644
--- a/content/compatibility/versions.md
+++ b/content/compatibility/versions.md
@@ -19,11 +19,10 @@ The latest published standalone Console is [2.6.0](/blog/release/console-2.6.0/)
 from source `f8ab146695fd1df74e4b84128a286d552921bf00`. It adds usage scans,
 retained-version totals and bucket-administration fixes, using Go 1.27.3,
 silo-pkg 3.15.2 and mcli 20261026.
-The [2.7.0 candidate](/blog/release/console-2.7.0/) adds ten UI languages, Arabic
-RTL, and container CA/temporary-directory fixes, using silo-pkg v3.16.0 and the
-official mcli 20261109 release (`v0.0.0-20261109021353-e1d4cc5abfe0`). Its
-frontend and package metadata use 2.7.0. Tag `v2.7.0` and the Draft Release have
-passed validation; draft artifacts do not change the public stable download.
+[Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages, Arabic
+RTL, container CA/temporary-directory fixes, and usage-worker, plain-HTTP and
+upload fixes, using silo-pkg v3.16.0 and the official mcli 20261109 release
+(`v0.0.0-20261109021353-e1d4cc5abfe0`).
 Server 20261026 continues to embed Console 2.5.1 until a
 separate Server release adopts newer source.
 
diff --git a/content/compatibility/versions.zh.md b/content/compatibility/versions.zh.md
index f8c6685d..75d3ace2 100644
--- a/content/compatibility/versions.zh.md
+++ b/content/compatibility/versions.zh.md
@@ -19,10 +19,9 @@ SILO 20261026 是当前正式服务端版本，内嵌 Console 2.5.1、mcli 20261
 源码提交为 `f8ab146695fd1df74e4b84128a286d552921bf00`。
 该版本加入用量扫描、保留版本统计与存储桶管理修复，使用 Go 1.27.3、
 silo-pkg 3.15.2 和 mcli 20261026。
-[2.7.0 候选版](/zh/blog/release/console-2.7.0/)加入十种界面语言、阿拉伯语 RTL
-及容器 CA／临时目录修复，采用 silo-pkg v3.16.0 与正式 mcli 20261109
-（Go 伪版本 `v0.0.0-20261109021353-e1d4cc5abfe0`）。前端与软件包版本统一为 2.7.0；
-标签 `v2.7.0` 与 Draft Release 已通过验证，草稿制品不改变公开稳定下载。
+[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复，
+以及用量后台任务、普通 HTTP 与上传修复，采用 silo-pkg v3.16.0 与正式 mcli 20261109
+（Go 伪版本 `v0.0.0-20261109021353-e1d4cc5abfe0`）。
 Server 20261026 仍内嵌 Console 2.5.1，采用新版源码需要单独发布 Server。
 
 ## mcli 20261109 {#mcli-20261109}