[dependabot]

Bumps aminueza/minio from 3.45.1 to 3.46.0.

Release notes

Sourced from aminueza/minio's releases.

v3.46.0

Terraform Provider MinIO v3.46.0

To install this provider, copy and paste this code into your Terraform configuration:

terraform {
  required_providers {
    minio = {
      source  = "aminueza/minio"
      version = "3.46.0"
    }
  }
}

What's Changed

🚀 Features

• feat(ilm): add all_versions_expiration to minio_ilm_policy by @​GuedesTom in aminueza/terraform-provider-minio#1249

🐛 Bug Fixes

• fix(replication): match rules to remote targets by endpoint, not position by @​aminueza in aminueza/terraform-provider-minio#1251

📖 Documentation

• docs(ilm): keep the AIStor-only rule out of the main ilm_policy example by @​aminueza in aminueza/terraform-provider-minio#1252

🔧 Maintenance

• ci: run the Garage tests on golang:1.26.10 by @​aminueza in aminueza/terraform-provider-minio#1253
• chore: declare GO-2026-5932 as not applicable for OSV scanning by @​aminueza in aminueza/terraform-provider-minio#1254
• chore: declare GO-2026-5932 as not applicable for Trivy scanning by @​felladrin in aminueza/terraform-provider-minio#1256

📦 Dependencies

• deps: bump golang.org/x/net from 0.60.0 to 0.62.0 by @​aminueza in aminueza/terraform-provider-minio#1245

Other Changes

• chore: release v3.46.0 by @​github-actions[bot] in aminueza/terraform-provider-minio#1261

New Contributors

• @​GuedesTom made their first contribution in aminueza/terraform-provider-minio#1249

Full Changelog: aminueza/terraform-provider-minio@v3.45.1...v3.46.0

Changelog

Sourced from aminueza/minio's changelog.

[3.46.0] - 2026-11-03

Added

• minio_ilm_policy: new all_versions_expiration block (days, delete_marker) mapping the MinIO AIStor AllVersionsExpiration lifecycle action. With delete_marker = true it purges objects whose latest version is a delete marker, delete marker included. MinIO community servers reject this action.

Fixed

• minio_s3_bucket_replication no longer pairs a rule with the remote target of the rule that used to sit at the same position (#1250). Removing a rule that is not the last one used to send its neighbour's credentials to the wrong remote target and fail the apply. A remote target is now identified by its endpoint and target bucket, and a rule keeps its ID through its remote target, so rules can be removed or reordered.
• Removing a rule from minio_s3_bucket_replication no longer fails with This ARN is in use by an existing configuration: the remote targets of removed rules are deleted after the new configuration is written.
• Destroying minio_s3_bucket_replication removes its remote targets instead of failing with remote targets are still present on the bucket.
• Reading minio_s3_bucket_replication no longer fails with inconsistent number of remote target and bucket replication rules when the bucket has a remote target that no rule uses (#1255). The provider logs a warning, and the next apply that changes the resource, or destroying it, removes the target.
• Two minio_s3_bucket_replication rules that replicate to the same bucket on the same endpoint are now rejected before any remote target is created or updated.

Security

• Bumped golang.org/x/net from 0.60.0 to 0.62.0 for GO-2026-6860 and GO-2026-6866 in x/net/html. The provider does not import x/net/html, so released binaries were not affected; the bump clears the advisories from the dependency scan.

Commits

• 9e6a245 chore: release v3.46.0 (#1261)
• cc98c62 chore: declare GO-2026-5932 as not applicable for Trivy scanning (#1256)
• 7e933f7 chore: declare GO-2026-5932 as not applicable for OSV scanning (#1254)
• 23b7941 fix(replication): match rules to remote targets by endpoint, not position (#1...
• a749bc7 deps: bump github.com/minio/madmin-go/v4 from 4.10.5 to 4.10.6 (#1246)
• a1d3e67 docs(ilm): keep the AIStor-only rule out of the main ilm_policy example (#1252)
• b35400e ci: run the Garage tests on golang:1.26.10 (#1253)
• bcacf2e feat(ilm): add all_versions_expiration to minio_ilm_policy (#1249)
• 94ed9bc docker(deps): bump dxflrs/garage from v2.4.1 to v2.5.0 (#1247)
• 2da0edc deps: bump golang.org/x/net from 0.60.0 to 0.62.0 (#1245)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)