Vonng · Nov 9, 2026 · Nov 9, 2026
diff --git a/README.md b/README.md
@@ -6,15 +6,15 @@ This repository contains the bilingual documentation for **Silo**, a community f
 
 ## Release state and publication
 
-Current releases: **mcli 20261109**, **SILO Server and KES 20261026**,
-**SILO Console v2.6.0**, and **silo-pkg v3.16.0**. All use Go 1.27.3.
-The standalone mcli release adopts pkg v3.16.0; existing Server and Console
-artifacts retain their embedded client and package versions. KES is an
-optional external key service.
+Current releases: **SILO Server and mcli 20261109**, **SILO Console v2.7.0**,
+**silo-pkg v3.16.0**, and **KES 20261026**. All use Go 1.27.3.
+Server 20261109 embeds Console 2.7.0, mcli 20261109 and pkg v3.16.0.
+KES remains a separate, optional external key service.
 
 | Release notes | English | 简体中文 |
 | --- | --- | --- |
-| Console 2.7.0 (unreleased draft) | [Release draft](content/blog/release/console-2.7.0.md) | [发布草稿](content/blog/release/console-2.7.0.zh.md) |
+| Server 20261109 | [Release notes](content/blog/release/silo-20261109.md) | [发布说明](content/blog/release/silo-20261109.zh.md) |
+| Console 2.7.0 | [Release notes](content/blog/release/console-2.7.0.md) | [发布说明](content/blog/release/console-2.7.0.zh.md) |
 | Console 2.6.0 | [Release notes](content/blog/release/console-2.6.0.md) | [发布说明](content/blog/release/console-2.6.0.zh.md) |
 | mcli 20261109 | [Release notes](content/blog/release/mcli-20261109.md) | [发布说明](content/blog/release/mcli-20261109.zh.md) |
 | silo-pkg 3.16.0 | [Release notes](content/blog/release/pkg-3.16.0.md) | [发布说明](content/blog/release/pkg-3.16.0.zh.md) |
@@ -25,11 +25,10 @@ optional external key service.
 See the [component matrix](content/compatibility/versions.md) for exact sources,
 upgrade order and compatibility boundaries.
 
-Console 2.7.0 documents the merged ten-language UI, Arabic RTL and container
-fixes. Its tag and Draft Release have passed validation. The public release notes
-record the exact source, CI and image digest, and distinguish the unpublished
-GitHub draft from a product release. Published Console downloads
-continue to use 2.6.0. Server 20261026 still embeds Console 2.5.1.
+Server 20261109 adds lifecycle, restore, Object Lock and batch authorization
+repairs. Read its upgrade notes before mixing versions or rolling back batch
+jobs. Console 2.7.0 is published independently and embedded in this Server
+release; older Server binaries retain their original UI and dependencies.
 
 `data/releases.yaml` drives the homepage and download templates.
 `server.published: true` enables public asset links; `published_server` records

diff --git a/README_ZH.md b/README_ZH.md
@@ -6,11 +6,12 @@
 
 ## 当前版本
 
-当前版本为 **mcli 20261109**、**SILO Server 与 KES 20261026**、**SILO Console v2.6.0** 和 **silo-pkg v3.16.0**，均使用 Go 1.27.3。独立 mcli 已采用 pkg v3.16.0；既有 Server 与 Console 制品保留各自内嵌的客户端及包版本。KES 是可选的外部密钥服务。
+当前版本为 **SILO Server 与 mcli 20261109**、**SILO Console v2.7.0**、**silo-pkg v3.16.0** 与 **KES 20261026**，均使用 Go 1.27.3。Server 20261109 内嵌 Console 2.7.0、mcli 20261109 与 pkg v3.16.0；KES 保持独立、可选的外部密钥服务。
 
 | 发布说明 | English | 简体中文 |
 | --- | --- | --- |
-| Console 2.7.0（未发布草稿） | [Release draft](content/blog/release/console-2.7.0.md) | [发布草稿](content/blog/release/console-2.7.0.zh.md) |
+| Server 20261109 | [Release notes](content/blog/release/silo-20261109.md) | [发布说明](content/blog/release/silo-20261109.zh.md) |
+| Console 2.7.0 | [Release notes](content/blog/release/console-2.7.0.md) | [发布说明](content/blog/release/console-2.7.0.zh.md) |
 | Console 2.6.0 | [Release notes](content/blog/release/console-2.6.0.md) | [发布说明](content/blog/release/console-2.6.0.zh.md) |
 | mcli 20261109 | [Release notes](content/blog/release/mcli-20261109.md) | [发布说明](content/blog/release/mcli-20261109.zh.md) |
 | silo-pkg 3.16.0 | [Release notes](content/blog/release/pkg-3.16.0.md) | [发布说明](content/blog/release/pkg-3.16.0.zh.md) |
@@ -20,7 +21,7 @@
 
 精确源码版本、升级顺序与兼容性边界见[组件矩阵](content/compatibility/versions.zh.md)。
 
-Console 2.7.0 记录已合入主线的十语言界面、阿拉伯语 RTL 和容器修复。标签与 Draft Release 已通过验证，公开版本说明记录准确源码、CI 和镜像摘要，并区分尚未公开发布的 GitHub 草稿与产品正式版；正式下载继续指向 2.6.0。Server 20261026 仍内嵌 Console 2.5.1。
+Server 20261109 交付生命周期、恢复、Object Lock 与批处理授权修复。混合版本或回退 batch 作业前，请先阅读升级说明。Console 2.7.0 已独立发布，也内嵌于本次 Server；旧 Server 二进制仍保留各自原有的界面与依赖。
 
 `data/releases.yaml` 驱动首页与下载页。`server.published: true` 启用公开制品下载链接，`published_server` 记录当前公开版本。准备后续候选版本时保持 false，直到相应 Server 制品与 Docker 镜像公开且完成核验。`windows_archive_format` 跟随各组件实际发布制品：当前 Windows 归档统一为 ZIP，Linux/macOS 保持 tar.gz；历史下载链接保留原格式。制品发布与具体生产集群部署分别验收。
 

diff --git a/content/about/security-advisories.md b/content/about/security-advisories.md
@@ -14,7 +14,7 @@ Entries with a public CVE use that identifier. Because upstream `minio/minio` is
 
 ## Current Release Boundary {#boundary}
 
-The current production baseline is **[Server 20261026](/blog/release/silo-20261026/)** (with embedded **[Console v2.5.1](/blog/release/console-2.5.1/)** and **[silo-pkg v3.15.2](/blog/release/pkg-3.15.2/)**), standalone **[Console v2.6.0](/blog/release/console-2.6.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)**, and **[silo-pkg v3.16.0](/blog/release/pkg-3.16.0/)**, all built with Go 1.27.3. **[KES 20261026](/blog/release/silo-20261026/#kes)** is the optional external key service. These releases retain the earlier security fixes below and add the [dependency security updates](/blog/release/silo-20261026/#runtime-fixes). The first fixed versions remain:
+The current production baseline is **[Server 20261109](/blog/release/silo-20261109/)**, with embedded and standalone **[Console 2.7.0](/blog/release/console-2.7.0/)**, **[mcli 20261109](/blog/release/mcli-20261109/)** and **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**, built with Go 1.27.3. **[KES 20261026](/blog/release/silo-20261026/#kes)** remains optional. Server 20261109 adds bulk/replicated Object Lock deletion protection and batch authorization controls; follow its [coordinated upgrade requirements](/blog/release/silo-20261109/#upgrade). It retains the earlier security fixes below. Their first fixed versions remain:
 
 - **Server 20261018** fixes [SN-2026-015](#sn-2026-015) (`PutObjectRetention` governance bypass), [SN-2026-016](#sn-2026-016) (version-addressed and in-place Object Lock overwrites), and [SN-2026-017](#sn-2026-017) (Admin credential authorization boundaries), and adds scoped STS token revocation (`0cd388c66`). Server 20260916 and earlier remain affected by `SN-2026-015` through `SN-2026-017`; deploy the upgrade to every Server node and replication peer accepting writes. See the [October security note](/blog/security/20261018-release-hardening/) and [Component Version Matrix](/compatibility/versions/).
 - **Server 20260916** and **Console v2.4.1** include [SN-2026-011](#sn-2026-011) through [SN-2026-014](#sn-2026-014), which are absent from Server 20260903.

diff --git a/content/about/security-advisories.zh.md b/content/about/security-advisories.zh.md
@@ -14,7 +14,7 @@ icon: fa-solid fa-shield-halved
 
 ## 当前发布边界 {#boundary}
 
-当前生产推荐基线为 **[Server 20261026](/zh/blog/release/silo-20261026/)**（内嵌 **[Console v2.5.1](/zh/blog/release/console-2.5.1/)** 与 **[silo-pkg v3.15.2](/zh/blog/release/pkg-3.15.2/)**）、独立版 **[Console v2.6.0](/zh/blog/release/console-2.6.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)** 与 **[silo-pkg v3.16.0](/zh/blog/release/pkg-3.16.0/)**，均使用 Go 1.27.3；可选的外部密钥服务为 **[KES 20261026](/zh/blog/release/silo-20261026/#kes)**。当前版本保留以下历史安全修复，并纳入[依赖安全更新](/zh/blog/release/silo-20261026/#runtime-fixes)。各问题首次修复的版本如下：
+当前生产推荐基线为 **[Server 20261109](/zh/blog/release/silo-20261109/)**，配套内嵌与独立 **[Console 2.7.0](/zh/blog/release/console-2.7.0/)**、**[mcli 20261109](/zh/blog/release/mcli-20261109/)** 和 **[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)**，使用 Go 1.27.3；**[KES 20261026](/zh/blog/release/silo-20261026/#kes)** 保持可选。Server 20261109 新增批量／复制删除的 Object Lock 保护与批处理授权控制，请按[协同升级要求](/zh/blog/release/silo-20261109/#upgrade)实施。此前安全修复继续保留，其首次修复版本如下：
 
 - **Server 20261018** 修复了 [SN-2026-015](#sn-2026-015)（`PutObjectRetention` 治理保留期授权绕过）、[SN-2026-016](#sn-2026-016)（指定版本与原地写入覆写对象锁）以及 [SN-2026-017](#sn-2026-017)（委派 IAM Admin 凭据授权边界），并新增按主体/按令牌范围吊销 STS 会话的能力（`0cd388c66`）。Server 20260916 及更早版本仍受 `SN-2026-015` 至 `SN-2026-017` 影响；请将修复部署至每一个接受写入的 Server 节点与复制站点。详见[十月安全公告](/zh/blog/security/20261018-release-hardening/)与[组件版本矩阵](/zh/compatibility/versions/)。
 - **Server 20260916** 与 **Console v2.4.1** 包含 [SN-2026-011](#sn-2026-011) 至 [SN-2026-014](#sn-2026-014) 的修复（Server 20260903 不包含）。

diff --git a/content/blog/release/silo-20261026.md b/content/blog/release/silo-20261026.md
@@ -21,7 +21,7 @@ aliases:
 **SILO, mcli, and PGSTY KES 20261026 are now released**, alongside **[SILO Console 2.5.1](/blog/release/console-2.5.1/)** and **[silo-pkg 3.15.2](/blog/release/pkg-3.15.2/)**. This article consolidates the October 24–25 maintenance records and summarizes all changes since the **20261018** release. All three executables share the same release date and package version; KES remains an optional, independently deployed key encryption service.
 
 > [!NOTE]
-> Subsequent standalone releases ship **[mcli 20261109](/blog/release/mcli-20261109/)**, **[Console 2.6.0](/blog/release/console-2.6.0/)**, and **[silo-pkg 3.16.0](/blog/release/pkg-3.16.0/)**. Additional post-`20261026` Server maintenance repairs are merged on `main` and await the next Server release; see the [Server compatibility page](/compatibility/server/#post-20261026) and [component matrix](/compatibility/versions/).
+> [Server 20261109](/blog/release/silo-20261109/) now delivers the subsequent maintenance repairs, with **Console 2.7.0**, **mcli 20261109** and **silo-pkg 3.16.0**. KES remains at 20261026. See the [component matrix](/compatibility/versions/) and the new release’s upgrade requirements.
 
 ## Released components {#scope}
 

diff --git a/content/blog/release/silo-20261026.zh.md b/content/blog/release/silo-20261026.zh.md
@@ -21,7 +21,7 @@ aliases:
 **SILO、mcli 与 PGSTY KES 20261026 现已联合发布**，配套 **[SILO Console 2.5.1](/zh/blog/release/console-2.5.1/)** 与 **[silo-pkg 3.15.2](/zh/blog/release/pkg-3.15.2/)**。本文整合了 10 月 24—25 日的维护记录，完整说明自 **20261018** 正式版以来的所有变更。三个可执行组件采用统一的发布日期与包版本号；KES 仍作为可选的外部密钥服务独立部署。
 
 > [!NOTE]
-> 此后独立发布的组件版本包括 **[mcli 20261109](/zh/blog/release/mcli-20261109/)**、**[Console 2.6.0](/zh/blog/release/console-2.6.0/)** 与 **[silo-pkg 3.16.0](/zh/blog/release/pkg-3.16.0/)**。`20261026` 之后的 Server 维护修复已合入 `main` 分支，待下一版 Server 正式交付；详见[服务端兼容性说明](/zh/compatibility/server/#post-20261026)与[组件矩阵](/zh/compatibility/versions/)。
+> 后续维护修复已由 [Server 20261109](/zh/blog/release/silo-20261109/) 正式交付，配套 **Console 2.7.0**、**mcli 20261109** 与 **silo-pkg 3.16.0**。KES 保持 20261026；详见[组件矩阵](/zh/compatibility/versions/)和新版升级要求。
 
 ## 发布组件 {#scope}