docs: record the published Console 2.7.0 release

content/_index.md

@@ -11,7 +11,7 @@ upstream_modified: true
 body_class: landing-page
 ---
 
-This site targets **[SILO 20261026](/blog/release/silo-20261026/)** (with embedded Console 2.5.1), standalone **[Console 2.6.0](/blog/release/console-2.6.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)**, **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**, and optional external key service **[KES 20261026](/blog/release/silo-20261026/#kes)**, all built with Go 1.27.3. See the [component matrix](/compatibility/versions/) and [Console 2.7.0 release notes](/blog/release/console-2.7.0/).
+This site targets **[SILO 20261026](/blog/release/silo-20261026/)** (with embedded Console 2.5.1), standalone **[Console 2.7.0](/blog/release/console-2.7.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)**, **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**, and optional external key service **[KES 20261026](/blog/release/silo-20261026/#kes)**, all built with Go 1.27.3. See the [component matrix](/compatibility/versions/).
 
 > [!WARNING]
 > **SILO is a MinIO fork maintained by the Pigsty community.** It is not affiliated with, endorsed by, or sponsored by MinIO, Inc. “MinIO” is a trademark of MinIO, Inc., used here only to identify the upstream project. See [Attribution](/about/attribution/) for source and licensing details.

content/_index.zh.md

@@ -11,7 +11,7 @@ upstream_modified: true
 body_class: landing-page
 ---
 
-本站以 **[SILO 20261026](/zh/blog/release/silo-20261026/)** 正式版（内嵌 Console 2.5.1）为基线，配套独立版 **[Console 2.6.0](/zh/blog/release/console-2.6.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)**、**[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)** 和可选外部密钥服务 **[KES 20261026](/zh/blog/release/silo-20261026/#kes)**，统一使用 Go 1.27.3。见[组件矩阵](/zh/compatibility/versions/)与 [Console 2.7.0 发布说明](/zh/blog/release/console-2.7.0/)。
+本站以 **[SILO 20261026](/zh/blog/release/silo-20261026/)** 正式版（内嵌 Console 2.5.1）为基线，配套独立版 **[Console 2.7.0](/zh/blog/release/console-2.7.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)**、**[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)** 和可选外部密钥服务 **[KES 20261026](/zh/blog/release/silo-20261026/#kes)**，统一使用 Go 1.27.3。见[组件矩阵](/zh/compatibility/versions/)。
 
 > [!WARNING]
 > **SILO 是由 Pigsty 社区维护的 MinIO 分支。** 本项目并非 MinIO, Inc. 的关联项目，也未获得其认可、赞助或背书。“MinIO” 是 MinIO, Inc. 的商标，此处仅用于标识上游项目。源码与许可信息详见[归属与署名](/zh/about/attribution/)。

content/blog/release/_index.md

@@ -17,6 +17,6 @@ aliases:
 
 Release notes track feature updates, security fixes, dependency upgrades, compatibility requirements, and artifact delivery across the SILO stack.
 
-[Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages and usage-worker, plain-HTTP and upload fixes; [Console 2.6.0](/blog/release/console-2.6.0/) remains the published stable version until 2.7.0 is published. 2.7.0 adopts the separately released [mcli 20261109](/blog/release/mcli-20261109/) and [silo-pkg 3.16.0](/blog/release/pkg-3.16.0/).
+[Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages and usage-worker, plain-HTTP and upload fixes; it is the published stable version, succeeding [Console 2.6.0](/blog/release/console-2.6.0/). 2.7.0 adopts the separately released [mcli 20261109](/blog/release/mcli-20261109/) and [silo-pkg 3.16.0](/blog/release/pkg-3.16.0/).
 
 The **[20261026 coordinated release](/blog/release/silo-20261026/)** consolidates all SILO Server, mcli, and KES changes since 20261018 alongside **[Console 2.5.1](/blog/release/console-2.5.1/)** and **[silo-pkg 3.15.2](/blog/release/pkg-3.15.2/)** (the October 24–25 maintenance drafts have been folded into the final release notes, with their URLs redirecting automatically).

content/blog/release/_index.zh.md

@@ -17,6 +17,6 @@ aliases:
 
 发布日志记录各版本的功能演进、安全修复、依赖更新、兼容性要求与交付制品。
 
-[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言，以及用量后台任务、普通 HTTP 与上传修复；在 2.7.0 公开发布前，[Console 2.6.0](/zh/blog/release/console-2.6.0/) 仍为已公开的稳定版本。2.7.0 采用已独立发布的 [mcli 20261109](/zh/blog/release/mcli-20261109/) 与 [silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)。
+[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言，以及用量后台任务、普通 HTTP 与上传修复；它是当前已公开的稳定版本，接替 [Console 2.6.0](/zh/blog/release/console-2.6.0/)。2.7.0 采用已独立发布的 [mcli 20261109](/zh/blog/release/mcli-20261109/) 与 [silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)。
 
 最新的 **[20261026 联合发布](/zh/blog/release/silo-20261026/)** 汇总了 SILO Server、mcli 与 KES 自 20261018 正式版以来的全部更新，并配套发布 **[Console 2.5.1](/zh/blog/release/console-2.5.1/)** 与 **[silo-pkg 3.15.2](/zh/blog/release/pkg-3.15.2/)**（10 月 24—25 日的阶段性维护记录已并入正式发布日志，原链接自动重定向至新页面）。

content/blog/release/console-2.7.0.md

@@ -245,3 +245,32 @@ history and copyright notices.
 
 See the [community contribution record](/about/contributors/) for actual PR
 states and historical credits.
+
+## Verified release and source {#verification}
+
+Tag [`v2.7.0`](https://github.com/pgsty/silo-console/tree/v2.7.0) resolves to
+[`4e91ae506e706ccdecb512b1d8b5ab4d9871d505`](https://github.com/pgsty/silo-console/commit/4e91ae506e706ccdecb512b1d8b5ab4d9871d505).
+The release workflow accepted this exact commit:
+
+- [Required matrix](https://github.com/pgsty/silo-console/actions/runs/42612682270), including maintained SILO integration, the permission matrix, SSO, replication, shared downloads, PostgreSQL usage, Swagger regeneration, platform builds, package lifecycle and independent artifact reproduction.
+- [Required vulnerability checks](https://github.com/pgsty/silo-console/actions/runs/42612682615).
+- [Tag release pipeline](https://github.com/pgsty/silo-console/actions/runs/42616923335): checksum and image signatures, SPDX attestations and GitHub provenance verified.
+
+The release contains **44 assets**: six platform executables, six
+bundles, nine Linux packages, a source archive, SPDX SBOMs, legal files, the
+SHA-256 manifest and its Sigstore bundle. Verification commands are in the
+[tagged release contract](https://github.com/pgsty/silo-console/blob/v2.7.0/docs/release-contract.md).
+
+The multi-platform image is `docker.io/pgsty/silo-console:v2.7.0` for Linux
+amd64 and arm64, with immutable digest:
+
+```text
+sha256:85aeb3ce802eb4aaae33503bcb665dc72c7544db037b5cda5ffae73b26719892
+```
+
+After publication, `promote-image.yaml` ([run 42618891230](https://github.com/pgsty/silo-console/actions/runs/42618891230)) verified the published release, signatures, SBOM attestation, provenance and anonymous access, then promoted this digest to `latest`.
+
+An earlier `v2.7.0` tag on `26ce922` produced only an unpublished draft and
+candidate image; it was replaced by this tag before publication, after the final
+review found the fixes listed above.
+

content/blog/release/console-2.7.0.zh.md

@@ -175,3 +175,29 @@ CI 使用明确的权限和平台矩阵，从项目版本文件读取工具链
   [#63](https://github.com/pgsty/silo-console/issues/63) 中报告并分析高延迟下健康报告截断，已在 2.5.0 修复。
 
 实际 PR 状态与历史贡献见[社区贡献记录](/zh/about/contributors/)。
+
+## 发布验收与准确源码 {#verification}
+
+标签 [`v2.7.0`](https://github.com/pgsty/silo-console/tree/v2.7.0) 指向
+[`4e91ae506e706ccdecb512b1d8b5ab4d9871d505`](https://github.com/pgsty/silo-console/commit/4e91ae506e706ccdecb512b1d8b5ab4d9871d505)。
+发布流水线接受的正是这一提交：
+
+- [Required matrix](https://github.com/pgsty/silo-console/actions/runs/42612682270)：维护中的 SILO 集成、权限矩阵、SSO、复制、共享下载、PostgreSQL 用量、Swagger 重新生成、各平台构建、软件包生命周期与独立制品复现。
+- [Required vulnerability checks](https://github.com/pgsty/silo-console/actions/runs/42612682615)。
+- [标签发布流水线](https://github.com/pgsty/silo-console/actions/runs/42616923335)：校验和与镜像签名、SPDX 声明和 GitHub 来源证明均已验证。
+
+发布包含 **44 个制品**：六个平台的独立可执行文件、六个压缩包、九个 Linux 软件包、源码归档、SPDX SBOM、
+法律文件、SHA-256 校验和清单及其 Sigstore bundle。验证命令见
+[该标签的发布契约](https://github.com/pgsty/silo-console/blob/v2.7.0/docs/release-contract.md)。
+
+多平台镜像为 `docker.io/pgsty/silo-console:v2.7.0`，支持 Linux amd64 与 arm64，不可变摘要为：
+
+```text
+sha256:85aeb3ce802eb4aaae33503bcb665dc72c7544db037b5cda5ffae73b26719892
+```
+
+发布后，`promote-image.yaml`（[run 42618891230](https://github.com/pgsty/silo-console/actions/runs/42618891230)）验证了已发布版本、签名、SBOM 声明、来源证明与匿名访问，然后将该摘要推进为 `latest`。
+
+此前指向 `26ce922` 的 `v2.7.0` 标签只生成过未公开发布的草稿和候选镜像；最终审查发现上文所列问题后，
+在正式发布前由本标签替换。
+

content/compatibility/console.md

@@ -9,7 +9,7 @@ icon: fa-solid fa-window-maximize
 ---
 
 > [!NOTE]
-> **Latest published release:** [Console v2.6.0](/blog/release/console-2.6.0/) (2026-11-05, UTC+8) adds usage scans, retained-version totals, and bucket-administration fixes. [Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages, Arabic RTL, container CA/temporary-directory fixes, usage-worker TLS and scheduling fixes, folder sizes over plain HTTP, `silo-pkg v3.16.0`, official `mcli 20261109`, and updated Swagger documentation. Upgrading standalone Console does not replace Server's embedded Console; built-in policy Reset and live bucket inventory reads require the Server 20261026 release (absent from published Server 20261018). See the [component matrix](/compatibility/versions/).
+> **Latest published release:** [Console v2.7.0](/blog/release/console-2.7.0/) (2026-11-09, UTC+8) adds ten UI languages, Arabic RTL, container CA/temporary-directory fixes, usage-worker TLS and scheduling fixes, folder sizes over plain HTTP, `silo-pkg v3.16.0`, official `mcli 20261109`, and updated Swagger documentation. [Console v2.6.0](/blog/release/console-2.6.0/) added usage scans, retained-version totals, and bucket-administration fixes. Upgrading standalone Console does not replace Server's embedded Console; built-in policy Reset and live bucket inventory reads require the Server 20261026 release (absent from published Server 20261018). See the [component matrix](/compatibility/versions/).
 
 SILO Console is Silo's build of the MinIO Console. This page records where the two are interchangeable and where they differ. Start with the [three-level overview](/compatibility/), then use the details below to check UI and automation behavior.
 

content/compatibility/console.zh.md

@@ -9,7 +9,7 @@ icon: fa-solid fa-window-maximize
 ---
 
 > [!NOTE]
-> **最新正式版：** [Console v2.6.0](/zh/blog/release/console-2.6.0/)（2026-11-05，UTC+8）新增用量扫描、保留版本统计与存储桶管理修复。[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复、用量后台任务的 TLS 与调度修复、普通 HTTP 下的目录大小计算、`silo-pkg v3.16.0`、正式版 `mcli 20261109` 及 Swagger 文档更新。升级独立 Console 不会替换 Server 内嵌控制台；内置策略 Reset 与实时存储桶列表需配合 Server 20261026 正式版生效（Server 20261018 不包含这两项服务端缓存修复）。配套版本见[组件矩阵](/zh/compatibility/versions/)。
+> **最新正式版：** [Console v2.7.0](/zh/blog/release/console-2.7.0/)（2026-11-09，UTC+8）加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复、用量后台任务的 TLS 与调度修复、普通 HTTP 下的目录大小计算、`silo-pkg v3.16.0`、正式版 `mcli 20261109` 及 Swagger 文档更新。[Console v2.6.0](/zh/blog/release/console-2.6.0/) 新增了用量扫描、保留版本统计与存储桶管理修复。升级独立 Console 不会替换 Server 内嵌控制台；内置策略 Reset 与实时存储桶列表需配合 Server 20261026 正式版生效（Server 20261018 不包含这两项服务端缓存修复）。配套版本见[组件矩阵](/zh/compatibility/versions/)。
 
 SILO Console 是 Silo 构建的 MinIO Console。本页记录二者在哪些地方可以互换使用，在哪些地方存在差异。先看[三档兼容性总览](/zh/compatibility/)，再按下文核对界面与自动化接口。
 

content/compatibility/versions.md

@@ -15,14 +15,14 @@ SILO 20261026 is the current Server release, with embedded Console 2.5.1, mcli 2
 
 <span id="console-2-6-0"></span>
 
-The latest published standalone Console is [2.6.0](/blog/release/console-2.6.0/),
-from source `f8ab146695fd1df74e4b84128a286d552921bf00`. It adds usage scans,
-retained-version totals and bucket-administration fixes, using Go 1.27.3,
-silo-pkg 3.15.2 and mcli 20261026.
-[Console 2.7.0](/blog/release/console-2.7.0/) adds ten UI languages, Arabic
+The latest published standalone Console is [2.7.0](/blog/release/console-2.7.0/),
+from source `4e91ae506e706ccdecb512b1d8b5ab4d9871d505`. It adds ten UI languages, Arabic
 RTL, container CA/temporary-directory fixes, and usage-worker, plain-HTTP and
-upload fixes, using silo-pkg v3.16.0 and the official mcli 20261109 release
-(`v0.0.0-20261109021353-e1d4cc5abfe0`).
+upload fixes, using Go 1.27.3, silo-pkg v3.16.0 and the official mcli 20261109
+release (`v0.0.0-20261109021353-e1d4cc5abfe0`).
+[2.6.0](/blog/release/console-2.6.0/) (source
+`f8ab146695fd1df74e4b84128a286d552921bf00`) added usage scans,
+retained-version totals and bucket-administration fixes.
 Server 20261026 continues to embed Console 2.5.1 until a
 separate Server release adopts newer source.
 

content/compatibility/versions.zh.md

@@ -15,13 +15,11 @@ SILO 20261026 是当前正式服务端版本，内嵌 Console 2.5.1、mcli 20261
 
 <span id="console-2-6-0"></span>
 
-最新正式发布的独立 Console 为 [2.6.0](/zh/blog/release/console-2.6.0/)，
-源码提交为 `f8ab146695fd1df74e4b84128a286d552921bf00`。
-该版本加入用量扫描、保留版本统计与存储桶管理修复，使用 Go 1.27.3、
-silo-pkg 3.15.2 和 mcli 20261026。
-[Console 2.7.0](/zh/blog/release/console-2.7.0/) 加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复，
-以及用量后台任务、普通 HTTP 与上传修复，采用 silo-pkg v3.16.0 与正式 mcli 20261109
-（Go 伪版本 `v0.0.0-20261109021353-e1d4cc5abfe0`）。
+最新正式发布的独立 Console 为 [2.7.0](/zh/blog/release/console-2.7.0/)，
+源码提交为 `4e91ae506e706ccdecb512b1d8b5ab4d9871d505`。
+该版本加入十种界面语言、阿拉伯语 RTL、容器 CA／临时目录修复，以及用量后台任务、普通 HTTP 与上传修复，
+使用 Go 1.27.3、silo-pkg v3.16.0 与正式 mcli 20261109（Go 伪版本 `v0.0.0-20261109021353-e1d4cc5abfe0`）。
+[2.6.0](/zh/blog/release/console-2.6.0/)（源码 `f8ab146695fd1df74e4b84128a286d552921bf00`）加入了用量扫描、保留版本统计与存储桶管理修复。
 Server 20261026 仍内嵌 Console 2.5.1，采用新版源码需要单独发布 Server。
 
 ## mcli 20261109 {#mcli-20261109}

data/releases.yaml

@@ -21,11 +21,11 @@ client:
   date: "2026-11-09"
   source: e1d4cc5abfe00b674eb36347399e7398990be467
 console:
-  tag: v2.6.0
-  build: 2.6.0
+  tag: v2.7.0
+  build: 2.7.0
   windows_archive_format: zip
-  source: f8ab146695fd1df74e4b84128a286d552921bf00
-  notes: "blog/release/console-2.6.0/"
+  source: 4e91ae506e706ccdecb512b1d8b5ab4d9871d505
+  notes: "blog/release/console-2.7.0/"
 pkg:
   tag: v3.16.0
   source: b7aeea85e84e8888d6ab424c7123a1297711bc3f