Milvus 3.0.1 raises bcrypt cost from 4 to 10 but existing password hashes only upgrade on rotation

GitHub·medium signalXBlueskyLinkedInCopy link

Milvus v3.0.1 shipped 2026-09-09 with PR #52145 raising the bcrypt work factor from 4 to 10, and the release notes state plainly that credential rotation is required to upgrade existing hashes. A cost of 4 is roughly 64 times cheaper to brute-force than 10, so every account created before this release stays at the weak factor until its password is changed. The release also adds REST v2 APIs for collection-scoped snapshot management with asynchronous restore, weighted RRF reranking with per-ANN-request weights, and TEXT field support in the Go client and RESTful API.