From a9f5f0efa331fb8c7095772d231f30cab1b57f0f Mon Sep 17 00:00:00 2001
From: X77 <1494159925@qq.com>
Date: Thu, 8 Oct 2026 10:51:33 +0800
Subject: [PATCH 1/2] fix(deploy): repoint MinIO runtime image to pgsty/silo

quay.io/minio/minio returns 401 Unauthorized for anonymous pulls on every
tag, so PR E2E (Real Services) and the Helm S3 smoke test fail before any
test runs. MinIO deleted minio/minio from Docker Hub on 2026-09-11 and
quay.io started requiring authentication on 2026-09-24.

Repoint the three runtime surfaces to pgsty/silo, a maintained MinIO fork
(AGPLv3 - same license as the image currently in use). It is a drop-in:
identical env vars, ports and command. Verified on a GitHub Actions runner
with SkillHub's exact configuration (health endpoints 200, S3 round trip
mb/put/get/ls/rb all pass).

- docker-compose.yml
- deploy/runtime-mirror-images.txt
- charts/skillhub/tests/install-upgrade-smoke.sh

Signed-off-by: X77 <1494159925@qq.com>
---
 charts/skillhub/tests/install-upgrade-smoke.sh | 2 +-
 deploy/runtime-mirror-images.txt               | 2 +-
 docker-compose.yml                             | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/charts/skillhub/tests/install-upgrade-smoke.sh b/charts/skillhub/tests/install-upgrade-smoke.sh
index 30934aff..5c9a9b8e 100755
--- a/charts/skillhub/tests/install-upgrade-smoke.sh
+++ b/charts/skillhub/tests/install-upgrade-smoke.sh
@@ -84,7 +84,7 @@ spec:
     spec:
       containers:
         - name: minio
-          image: quay.io/minio/minio@sha256:14cea493d9a34af32f524e538b8346cf79f3321eff8e708c1e2960462bd8936e
+          image: docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z
           args:
             - server
             - /data
diff --git a/deploy/runtime-mirror-images.txt b/deploy/runtime-mirror-images.txt
index c33b13f1..5e89b4e4 100644
--- a/deploy/runtime-mirror-images.txt
+++ b/deploy/runtime-mirror-images.txt
@@ -1,7 +1,7 @@
 # source_image target_image
 postgres:16-alpine postgres:16-alpine
 redis:7-alpine redis:7-alpine
-quay.io/minio/minio:latest minio:latest
+docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z minio:RELEASE.2026-09-16T00-00-00Z
 prom/prometheus:latest prometheus:latest
 grafana/grafana:latest grafana:latest
 nginx:alpine nginx:alpine
diff --git a/docker-compose.yml b/docker-compose.yml
index 2f0e45df..32412b02 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -41,7 +41,7 @@ services:
       retries: 5
 
   minio:
-    image: ${MINIO_IMAGE:-quay.io/minio/minio:latest}
+    image: ${MINIO_IMAGE:-docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z}
     ports:
       - "9000:9000"
       - "9001:9001"

From ee57b85aec79416b29940a15592b4e5d80bcdbef Mon Sep 17 00:00:00 2001
From: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
Date: Thu, 8 Oct 2026 11:25:46 +0800
Subject: [PATCH 2/2] fix(deploy): pin Helm image and preserve mirror alias

Signed-off-by: XiaoSeS <87064762+XiaoSeS@users.noreply.github.com>
---
 charts/skillhub/tests/install-upgrade-smoke.sh | 2 +-
 deploy/runtime-mirror-images.txt               | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/charts/skillhub/tests/install-upgrade-smoke.sh b/charts/skillhub/tests/install-upgrade-smoke.sh
index 5c9a9b8e..728d38a6 100755
--- a/charts/skillhub/tests/install-upgrade-smoke.sh
+++ b/charts/skillhub/tests/install-upgrade-smoke.sh
@@ -84,7 +84,7 @@ spec:
     spec:
       containers:
         - name: minio
-          image: docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z
+          image: docker.io/pgsty/silo@sha256:635197cb9f36d01bee221d34d1c7d7960f6a95c48b0b6c01d99cd13bdae51a46
           args:
             - server
             - /data
diff --git a/deploy/runtime-mirror-images.txt b/deploy/runtime-mirror-images.txt
index 5e89b4e4..e83668f3 100644
--- a/deploy/runtime-mirror-images.txt
+++ b/deploy/runtime-mirror-images.txt
@@ -1,7 +1,7 @@
 # source_image target_image
 postgres:16-alpine postgres:16-alpine
 redis:7-alpine redis:7-alpine
-docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z minio:RELEASE.2026-09-16T00-00-00Z
+docker.io/pgsty/silo:RELEASE.2026-09-16T00-00-00Z minio:latest
 prom/prometheus:latest prometheus:latest
 grafana/grafana:latest grafana:latest
 nginx:alpine nginx:alpine