P
v0.316.0-rc.4
v0.316.0-rc.4
P
3.16.0-rc.4 / 2026-11-03
[CHANGE] API: The experimental search endpoints now clamp batch_size to 1000. #19731 [CHANGE] Configuration: Default --web.external-url to https when --web.config.file enables TLS. #19241 [CHANGE] PromQL: Subquery samples are now included in the query TotalSamples and TotalSamplesPerStep statistics, and SamplesRead now counts reads from subqueries with an @ modifier in range queries. #19165 [CHANG…
P
v3.16.0-rc.3
v3.16.0-rc.3
P
v0.316.0-rc.2
v0.316.0-rc.2
P
3.16.0-rc.2 / 2026-10-27
[CHANGE] API: The experimental search endpoints now clamp batch_size to 1000. (#19731, @roidelapluie) [CHANGE] Configuration: Default --web.external-url to https when --web.config.file enables TLS. (#19241, @hexonal) [CHANGE] PromQL: Subquery samples are now included in the query TotalSamples and TotalSamplesPerStep statistics, and SamplesRead now counts reads from subqueries with an @ modifier in…
P
v3.16.0-rc.1
v3.16.0-rc.1
P
v3.16.0-rc.0
v3.16.0-rc.0
P
3.15.1 / 2026-10-21
[SECURITY] Container images: Update CA certificates to distrust "emSign ECC Root CA - G3" and "Comodo AAA Services root" following the compromise of eMudhra intermediate CA private keys. [SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template. [SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-661…
P
v0.315.1
v0.315.1
P
3.13.5 / 2026-10-21
[SECURITY] Container images: Update CA certificates to distrust "emSign ECC Root CA - G3" and "Comodo AAA Services root" following the compromise of eMudhra intermediate CA private keys. [SECURITY] Build with Go 1.26.10 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template. [SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-66…
P
v0.313.5
v0.313.5
P
3.13.4 / 2026-09-29
[SECURITY] Bump google.golang.org/grpc to v1.83.1 to fix HTTP/2 DATA frame fragmentation memory exhaustion (GO-2026-6348). #19834 [SECURITY] UI: Update vulnerable npm dependencies. #19834 [BUGFIX] Agent: Ignore unknown WAL record types to allow rolling back from newer versions. #19814 [BUGFIX] Federation: Fix corruption of float native histograms. #19679 [BUGFIX] Scrape: Fix failing scrapes of pro…
P
v0.313.4
v0.313.4
P
3.15.0 / 2026-09-24
[CHANGE] PromQL: A range query whose end was not aligned to step caused subqueries inside it to evaluate past the parent's last actual step, inflating peakSamples in the query stats and against the query.max-samples limit, and wasting storage I/O reading samples that were never used in the result. Add tests to prevent regression of the fix made in #18081. #18598 [CHANGE] PromQL: Do not register a…
P
v0.315.0
v0.315.0
P
3.15.0-rc.1 / 2026-09-21
[BUGFIX] TSDB: Avoid WAL corruption after a failed WAL write in Agent mode. #19700
P
v0.315.0-rc.1
v0.315.0-rc.1
P
3.15.0-rc.0 / 2026-09-09
[CHANGE] PromQL: A range query whose end was not aligned to step caused subqueries inside it to evaluate past the parent's last actual step, inflating peakSamples in the query stats and against the query.max-samples limit, and wasting storage I/O reading samples that were never used in the result. Add tests to prevent regression of the fix made in #18081. #18598 [CHANGE] PromQL: Do not register a…
P
v0.315.0-rc.0
v0.315.0-rc.0
P
3.13.3 / 2026-09-07
[SECURITY] Bump github.com/klauspost/compress to v1.18.7 (GO-2026-5841) and golang.org/x/crypto to v0.55.0 (GO-2026-6303). [BUGFIX] Docker SD: Fix panic in Docker Swarm service discovery when a service runs as a plugin or network-attachment. #19102 [BUGFIX] PromQL: Fix case-insensitive regex label matchers silently dropping matching values. #19167 [BUGFIX] Scrape: Fix scrape manager spinning at 10…
P
v0.313.3
v0.313.3
P
3.14.0 / 2026-08-17
[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all. Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major release. #19124 [CHANGE] API: /api/v1/status/config now correctly shows separator: "" and replacement: "" in relabel configs when explicitly set to empt…
P
v0.314.0
v0.314.0
P
3.14.0-rc.0 / 2026-08-06
[CHANGE] API: Deprecate the stats query parameter of /api/v1/query and /api/v1/query_range for values other than true and all. Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major release. #19124 [CHANGE] API: /api/v1/status/config now correctly shows separator: "" and replacement: "" in relabel configs when explicitly set to empt…
P
v0.314.0-rc.0
v0.314.0-rc.0
P
v0.313.2
v0.313.2
P
3.13.2 / 2026-07-29
What's Changed [SECURITY] Bump golang.org/x/text to v0.39.0 (CVE-2026-56852) and google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf). #19290 by @krajorama [BUGFIX] PromQL: Preallocate the active query tracker file to avoid SIGBUS crashes when the data disk is full. #19289 by @akshajrawat Full Changelog: v3.13.1...v3.13.2
P
v0.313.1
v0.313.1
P
3.13.1 / 2026-07-10
This is a bugfix release for 3.13 LTS. [BUGFIX] TSDB: Fix the head-chunk cache returning samples from the wrong chunk, or spurious not-found errors, to range queries after head-chunk truncation. #19134
P
3.5.5 / 2026-07-09
This release is built with Go 1.25.12 and fixes a security issue in a UI dependency. [SECURITY] UI: Bump sanitize-html to v2.17.5 to fix CVE-2026-53606. #19060