Fluent Bit 2.2.3 → 5.1.5
74 releases · 24 breaking changes · 17 security fixes · 0 advisories fixed
17security24breaking1deprecated277feature292fix
Breaking changes
- breaking CODEOWNERS: remove @braydonk and @jefferbrecht in 5.0.7
- breaking out_logdna: remove promoted known keys in 5.0.5
- breaking out_logdna: remove promoted known keys [Backport to 4.2] in 4.2.5
- breaking github: workflows: remove trivy cron workflow in 4.2.4
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space in 4.2.1
- breaking dockerfile: removed unused DLLs from image for Windows Containers in 4.2.0
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] in 4.1.2
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0] in 4.0.14
- breaking opentelemetry: remove enforcement of timestamp fields for logs (backport v4.0) in 4.0.9
- breaking input: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0] in 4.0.6
- breaking in_node_exporter: removed unnecessary optimization that caused crash in 4.0.3
- breaking packaging: remove older Ubuntu targets from smoke test in 4.0.2
- breaking workflows: remove qemu usage in 4.0.0
- breaking workflows: remove invalid sync directory in 4.0.0
- breaking workflows: remove qemu usage in 3.2.6
- breaking workflows: remove s390x and armv7 platforms for container builds in 3.2.5
- breaking tls: removed alpn selector requirement in 3.2.1
- breaking output: Remove a needless calling of flb_output_instance_destroy() (CID 507809) in 3.1.7
- breaking workflows: remove AppVeyor from release workflow in 3.1.0
- breaking out_splunk: remove raw endpoint in 3.1.0
- breaking processor_labels: Remove a needless existence check for insert operation in 3.0.4
- breaking engine_dispatch: remove chunks from memory if the task fails to be created in 3.0.2
- breaking processor_sql: Remove a needless yywrap definition in 3.0.0
- breaking http_server: removed deprecated code and added window update handling in 3.0.0
Security changes
- security security: harden input handling across core, http_server and plugins in 5.1.3
- security security: harden network input handling (part 2) in 5.1.3
- security security: harden record processing in core, filters and outputs in 5.1.3
- security security: update policy for 5.0 and EOL 4.1 in 5.0.6
- security maintenance: update branch and security EOL info in 4.2.3
- security security: Update supporting timeline in 4.2.2
- security security: update versions and general info in 4.2.0
- security out_file: sanitize incoming Tag to prevent path traversal in 4.1.1
- security out_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0] in 4.0.12
- security security: update policy for 4.0 release series in 4.0.2
- security security update: CVE-2024-50608 and CVE-2024-50609 in 4.0.0
- security security update: CVE-2024-50608 and CVE-2024-50609 (v3.2) in 3.2.7
- security security: supported versions now are 3.1.x and 3.2.x in 3.2.1
- security tls: macos load system certificates using security framework. in 3.2.0
- security lib: nghttp2: backport upstream security fix in 3.1.0
- security Fixes CVE-2024-4323: A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, in… in 3.0.4
- security Update security policy to indicate 3.x supported only in 3.0.3
Deprecations
- deprecated workflows: deprecate windows-2019 in 4.0.4
Every release in between
otherapi: v2: trace: plug leaks on trace requests with duplicated parameters
otherworkflows: bump ossf/scorecard-action from 2.4.4 to 2.5.0
otherworkflows: bump reviewdog/action-actionlint from 1.80.0 to 1.80.1
otherrelease: update to 5.1.5
othertests: runtime: out_http: push JSON format records together
otherrouter: apply input routes with a single input and output
fixout_cloudwatch_logs: fix log stream leak when group allocation fails
otherin_nginx_exporter_metrics: mitigate nginx plus response type confusion
otherlua: bound MessagePack reads when pushing values to Lua
otherin_forward: mitigate forward trace decoding bypasses
otherhttp_server: address cumulative bytes on http2 headers
otheropentelemetry: in_opentelemetry: log_event_encoder: mitigate otel attributes quadratic encoding expansion
otheroauth2_jwt: mitigate leaks on duplicated JWT members
featureout_chronicle: add support for the Chronicle API
otherhttp_client: out_loki: Mitigate crlf injection on HTTP headers
otherfilter_kubernetes: mitigate SEGV occurrences on using Use_Kubelet
featureout_http: add PATCH as an http method
otherout_stackdriver: out_bigquery: out_chronicle: conceal jwt token on debug logs
otherin_collectd: mitigate collectd unaligned type read
otherfilter_parser: free the previous parse buffer when Key_Name repeats
fixout_stackdriver: fix cacheHit copied from cacheLookup in httpRequest
othersnappy: decompression: mitigate checksum fault on snappy decompression
fixin_tail: fix missed copytruncate after cached size refresh
otherrelease: update to 5.1.4
othergithub: workflows: require publicly verified release metadata
otherworkflows: bump reviewdog/action-actionlint from 1.77.0 to 1.79.1
otherworkflows: bump reviewdog/action-shellcheck from 1.34.0 to 1.34.1
fixoutput: fix failing internal output tests
otherfilter_kubernetes: mitigate unbounded tag issue
otherin_opentelemetry: mitigate unbounded decompression of otlp gRPC
otherout_gelf: mitigate stuck issue on exceptions of UDP sockets
otherrewrite_tag: mitigate dropping metadata on rewrite tag
featuremp_preflight: in_forward: add object budget of unpacking msgpack objects
othertests: integration: cover hot reload with glob includes
fixstream_processor: fix operator precedence for logical operations
otherlib: flb_libco: upgrade to 1ae2c7f
otherlib: cfl: upgrade to v1.0.2
otherworkflows: bump helm/kind-action from 1.15.0 to 1.15.1
otherworkflows: bump azure/setup-kubectl from 5.1.0 to 5.2.0
otherlib: zstd: only require a C compiler
othertests: fix signv4 fixtures with raw request targets
otherpackaging: use archived Bullseye repositories
otherworkflows: bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3
otherripser.cpp: initialize temporary diameter entry
othermultiline: enforce multiline_buffer_limit for EQ and ENDSWITH types
fixfilter_kubernetes: fix uninitialized mem edge case
otherbuild: enable C++ before configuring zstd with MSVC
otherbuild: Enclose _C and _CXX and other variables with parentheses
otherworkflows: bump actions/download-artifact from 8.0.1 to 8.0.2
otherworkflows: bump actions/upload-artifact from 7.0.1 to 7.0.2
otherworkflows: bump reviewdog/action-actionlint from 1.79.1 to 1.80.0
otherworkflows: move Windows container storage to the build drive
otherrelease: update to 5.1.3
otherworkflows: bump reviewdog/action-actionlint from 1.73.3 to 1.73.4
othergithub: workflows: Mitigate order dependent issue for uploading task for Windows
otherdockerfile: upgrade base packages to remediate OS CVEs (#12284)
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
otherhttp: downstream: plug intermittent unfriendly logs
otherout_syslog: support RFC6578
othertests: runtime: Stabilize chronicle assertions with eliminating push races
othertests: runtime: Fix assertion failures on Ubuntu 26.04
otherin_opentelemetry: preserve signed 64-bit log body integers
otherworkflows: bump reviewdog/action-hadolint from 1.53.0 to 1.54.0
otherworkflows: bump reviewdog/action-shellcheck from 1.32.1 to 1.33.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.4 to 1.74.0
featureout_arvancloud_cloudlogs: add new output plugin for ArvanCloud CloudLogs
featurein_kubernetes_events: add sqlite indexes
otherbulk_search: es: opensearch: Acknowledge reasons of bulk failures
otheremitter: ml: plug data losses during multiline processing on shutdown
featureout_kafka: implement protobuf format of kafka schema registry support
fixinput_chunk: fix down chunk placement under storage backpressure
otherout_s3: mitigate SEGV/heap corruption
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly
othertests: fix CloudWatch event size regression coverage
othertests: runtime_shell: Add timeouts for runtime shell testing
fixout_gcs: fix networking and worker crashes, add total_file_size
otherout_opentelemetry: preserve failed log batch results
otherin_podman_metrics: do not abort startup when the initial scrape fails
fixopentelemetry: fix OTLP JSON trace status code interoperability
fixout_stackdriver: fix races on shared credentials
featuretls: add tls.crl_file support for certificate revocation checks
fixout_stackdriver: Fix service account regression
featureout_opentelemetry: add metric age cut-off filter
securitysecurity: harden input handling across core, http_server and plugins
fixin_syslog: fix fragile parsing on the first part of tcp frame
fixhttp_client: Fix a building failure on specifying FLB_AWS=Off
fixin_windows_exporter_metrics: fix collecting tcp metrics
securitysecurity: harden network input handling (part 2)
securitysecurity: harden record processing in core, filters and outputs
fixconfig_format: mitigate regression of absolute path of loading yaml config
fixopentelemetry: fix trace status validation and filesystem replay
+29 more items in the release notesotherworkflows: bump docker/setup-buildx-action from 4.2.0 to 4.3.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.1 to 1.73.2
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
otherworkflows: bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
featurein_node_exporter_metrics: Implement stat and thermal_zone for macOS
featureout_prometheus_remote_write: Add 1-hour cut-off for expiring staled metrics
featureout_splunk: add time_key support for the HEC event time
otherDockerfile: optimize layers
fixconfig: fix startup abort when log_level set via env and config
othertests: runtime: Plug a SEGV occurrence on macOS
featureout_gcs: add unify_tag option to buffer all tags into one file
otherlog: clamp the suppression length to what was written
featureout_gcs: implement parquet compressions
otherout_gcs: support application default credentials
fixin_winevtlog: Plug a crash path
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled
otherlog: make consistency for suppress log feature
otheres: opensearch: output: task: handle partial succeeded requests
othertests: runtime: Fix errors of incompatible types for in_ebpf tests
featurefilter_kubernetes: implement namespace exclude
otherin_systemd: support capturing with namespace
otherrelease: update to 5.1.2
otherworkflows: bump softprops/action-gh-release from 3.0.2 to 3.0.3
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
otherlib: cmetrics: update to v2.2.2
otherinput_chunk: input_log: in_storage_backlog: address underflowing / overflowing chunk limit size
otherout_azure_blob: Plug dangling pointers on exceptions
otherout_azure_kusto: stop logging federated and access tokens
featureout_gcs: add Workload Identity Federation support
otherwamrc: Build with LLVM-17
otherreload: preserve configuration path during hot reload
otherout_s3: Clean up orphaned chunks
otherconfig: config_format: address wrongly specified parameter on service section
otheraws: compression: validate valid columnar formats
featuremultiline: add built-in json parser for JSON multiline objects
otherengine: Plug a race on starting engine
othertests: integration: Adjust allocation patterns for Ubuntu 26.04
otherworkflows: bump helm/kind-action from 1.14.0 to 1.15.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.2 to 1.73.3
+10 more items in the release notesotherpackaging: improve package index tree URLs for release listing
fixin_storage_backlog: Fix persistent chunks issues without matching routes on hot reloading
otherworkflows: bump ossf/scorecard-action from 2.4.3 to 2.4.4
otherworkflows: bump actions/stale from 10.4.0 to 11.0.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4
otherworkflows: bump actions/checkout from 7.0.0 to 7.0.1
otherworkflows: bump reviewdog/action-shellcheck from 1.32.0 to 1.32.1
otherworkflows: bump reviewdog/action-actionlint from 1.73.0 to 1.73.1
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.6
otherdownstream: invalidate TLS session before socket close
otherout_s3: Address underflow of buffer size on startup
othercompat: Ensure alignment of reading dword width
otherengine_dispatch: Address stale failed tasks on dispatch
fixin_node_exporter_metrics: fix incorrect pointer arithmetic in diskstats metric cache
otherinput_chunk: in_storage_backlog: Display evicted logs on dropping chunks
fixutils: fix SIMD boundary for JSON string encoding
otherstream_processor: sp_stream: Plug unfreed allocated memories on exceptions
featureout_logdna: add hostname as primary field and runtime tests
othermaintenance: update v5.1 stable status
othermotd: v5.1
otherrelease: update to 5.1.1
otherout_file: support timestamp placeholder
featureout_splunk: Add auto_extract_timestamp parameter
othertests: core_routes: Handle limit of rlimit's soft limit
featureplugin_proxy: add config map to the plugin registration
fixinput_chunk: fix storage limit eviction with 32 or more outputs
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherbuild: bump to v5.1 (dev)
otherskills: Extract skills from memory
otherin_opentelemetry: return not found for invalid endpoint
otherworkflows: bump actions/stale from 10.3.0 to 10.4.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
othertls: openssl: don't recycle a connection after peer close_notify
otherin_winevtlog: Enrich EventData key-value map if enabled
otherlib: cmetrics: upgrade to v2.2.0
fixthread_storage: Fix incorrectly to detect C TLS existence
fixin_forward: fix stale byte accounting when multiple frames share a buffer
otherlib: cfl: upgrade to v1.0.0
otheropentelemetry: reduce protobuf log allocation churn
otherin_gpu_metrics: Handle NVIDIA GPU metrics via NVML
otherlog_event_decoder: time: plug 2038 problem on timestamp
featurein_etw: Implement event tracing for windows input plugin
othertests: runtime: plugins: Enable to build and run runtime testcases on windows
otherlib: cmetrics: upgrade to v2.2.1
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths
featureout_s3: add format=parquet,arrow with selectable page compression codecs
featureconfig: engine: Implement adaptive flushing
featureout_gcs: Implement Google Cloud Storage(gcs) plugin
featurein_node_exporter_metrics: implement additional metrics (filesystem, EXT_* metrics, powersupplyclass) on node exporter metrics
featuredownstream: add coroutine-based event dispatch
featurein_podman_metrics: add per-container disk I/O metrics
fixin_process_exporter_metrics: Fix the reported RSS ram
featureconfig: fips: bin: Initial implementation to enable FIPS compliance
fixin_node_exporter_metrics: fix netstat file reads
featurein_tail: add Windows UTF-8 path encoding mode
featureout_kafka: Implement resolving registry of avro schema
fixout_s3: fix prefix match in log_key extraction
featurepackaging: add packages index generator and release CI
featureout_es: sds: Implement es upstream with sds view
featureout_file: add logs rotation feature
featurein_node_exporter_metrics: add timex linux collector
featuredockerignore: Add an entry not to collide type definition on package creations
featuremetrics: extend support for Tag metrics
featureinput: add pause/resume callbacks
fixoauth2: fix request body ownership on allocation failure
fixin_kubernetes_events: fix unsafe MessagePack field parsing
+58 more items in the release notesotherrelease: update to 5.0.11
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled [Backport to 5.0]
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10 [Backport to 5.0]
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly [Backport to 5.0]
othergithub: workflows: Use cmake 4.2 and minimum policy [Backport to 5.0]
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherrelease: update to 5.0.10
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths [Backport to 5.0]
othergithub: workflows: Enable unit testing on 5.0 branch [Backport to 5.0]
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 5.0]
othertls: yield downstream read retries to the event loop [Backport to 5.0]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 5.0]
othertls: openssl: preserve syscall error details (5.0)
othergithub: workflows: Update release workflow for 5.1 development cycle [Backport to 5.0]
otherbackport: apply selected maintenance fixes to 5.0
otherworkflows: bump azure/setup-helm from 5.0.0 to 5.0.1
otherworkflows: bump actions/setup-python from 6.2.0 to 6.3.0
otherworkflows: bump actions/cache from 5.0.5 to 6.0.0
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches
otherworkflows: bump actions/cache/restore from 6.0.0 to 6.1.0
otherworkflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0
otherworkflows: bump actions/cache/save from 6.0.0 to 6.1.0
otherrelease: update to 5.0.9
featurein_windows_exporter_metrics: Implement user-defined performance counters w/ PDH
othertests: runtime: Try to address test hang
otherworkflows: bump docker/build-push-action from 7.2.0 to 7.3.0
otherworkflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0
otherin_forward: validate PING is a msgpack array in check_ping
otherfilter_kubernetes: Attach k8s metadata for internal logs
featurein_ebpf: Implement openssl trace
othertests: runtime: Use more concrete matchers for assertions
otherin_tail: Another attempt to plug segv on in tail
otherfilter_write_tag: in_emitter: Mitigate data loss on multiline
otherworkflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0
otherworkflows: bump docker/login-action from 4.2.0 to 4.3.0
otherworkflows: bump docker/metadata-action from 6.1.0 to 6.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
otherout_cloudwatch_logs: Plug SEGV on not found error
otherlib: librdkafka: Upgrade to v2.15.0
otherin_ebpf: Generate mostly monotonic event id for increasing traceability
otherin_splunk: return Splunk HEC auth status codes
otherout_forward: align secure forward handshake and chunk ack with protocol spec
fixout_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV)
fixout_stackdriver: fix payload parsing over-reads and null safety
othercodeowners: update @jeffluoo to @JeffLuoo
othergzip: skip FCOMMENT terminator in streaming decompressor
fixin_forward: fix 100% CPU hang and connection teardown use-after-free
otherbuild fixes: out_stackdriver int64_t line var, gzip endian-safe magic check
otherrelease: update to 5.0.8
othergithub: workflows: Adjust permissions to make efficient package/integration tests
othergithub: workflows: Specify OS configs explicitly
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses
fixregex: Plug a regex literal crash
otherout_forward: process type and length of pong strictly
otherunicode: Use the correct maximum size of Cyrillic
otheropentelemetry: render unset AnyValue in OTLP JSON
fixstorage: fix stale chunks handling on limits
otherworkflows: bump actions/checkout from 6.0.3 to 7.0.0
featurein_ebpf: Implement sched trace
otherin_tail: Plug timer lifecycle glitches on progress check
otherin_winevtlog: Handle structured xml query as separated subscriptions
otheraws: error_reporter: Plug SEGV occurrences on cloudwatch logs
fixin_tail: fix out-of-bounds read in unesc_ends_with_nl
fixconfig_format: fix caller-owned parse failure cleanup
otherworkflows: bump softprops/action-gh-release from 3.0.0 to 3.0.1
otherworkflows: bump github/codeql-action from 4.36.1 to 4.36.2
otherscheduler: Plug FD leaks on destroy
otherdockefile: Install libxxhash0 on builder image
otherworkflows: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
otherworkflows: bump reviewdog/action-hadolint from 1.50.5 to 1.51.0
otherout_loki: Handle loki tenant_id_key properly
otherout_cloudwatch_logs: Ensure escaping backslashes on cloudwatch API requests' body
othertests: runtime: Try to eliminate flakyness on CI load
fixin_tail: fix ignore_active_older_files to re-check mtime on aged-out files
otheraws: catch auth errors on XML responses
otherout_azure_blob: correctly handle successful Delete Blob responses
featurenode_exporter_metrics: Add file path to error messages
otherout_es/out_opensearch: sanitize bulk action metadata
fixopentelemetry: fix JSON histogram bounds handling
otherlib: cmetrics: upgrade to v2.1.5
otherrelease: update to 5.0.7
otherhttp_server: serialize worker teardown to prevent race conditions
fixhttp_server: fix libevent crash on connection drop
otherout_chronicle: Support label and namespace mapping
othertests: internal: fuzzers: avoid destroying active input fuzzer tasks
fixconfig_format: fix YAML variant cleanup on parser errors
otheravro: Handle int64 values correctly
othertests: runtime: Stabilize out_lib test case
otherin_elasticsearch: check map size before accessing first entry
fixsnappy: fix OOB reads in framed data parser
featurezstd: add 100 MB decompression size limit
fixin_mqtt: fix OOB read from hardcoded remaining length overhead
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB
otherin_forward: validate array size before accessing message mode fields
fixin_syslog: fix integer overflow in octet-counting length parser
fixout_stackdriver: fix multiple memory leaks and potential corruption
breakingCODEOWNERS: remove @braydonk and @jefferbrecht
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo
otherstorage: discard checksum corrupt chunks on startup
featureparser: Add IANA time_zone support for native timestamps
otherworkflows: pin all actions to SHA
otherout_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB
otherin_stdin: support stdin plugin on windows
featurein_ebpf: Implement dns trace
otherout_s3: Provide options for inactive chunks behavior
featureoauth: out_http: add user-agent option for oauth
fixin_tail: fix offset_key value multiplied by 8 on Windows 64-bit
otherhttp_client_http2: bracket IPv6 authority hosts
otherrelease: update to 5.0.6
featureenv: add bash-style default value operator :-
otherlib: cfl: upgrade to v0.7.1
otherout_kafka: partition OTLP logs by resource
fixsds: general fixes for sds_cat() usage
otherin_forward: handle unpacker allocation failure
othertests: prevent port binding failures in concurrent OTEL tests
otherengine: ignore duplicate STOP to prevent shutdown spin
otherout_azure_logs_ingestion: Plug SEGV on termination
featurepackaging: add support for Ubuntu 26.04
featureconfig: storage: Add total limit size of DLQ
otherhttp_server: harden listener and architecture
othertests: runtime: wait for tail truncate output
fixin_tail: fix file append cleanup on failure
otherin_tail: reconcile files after missed inotify events
othergithub: workflows: Restore ok-package-test trigger behavior
securitysecurity: update policy for 5.0 and EOL 4.1
fixsds: fix handling of cfl_sds return buffers after cfl upgrade
othertls: omit SNI for IP literal hosts
otherhttp_server: spawn internal server in threaded mode
otherin_node_exporter_metrics: Skip ipv6 metrics collection when disabled
breakingout_logdna: remove promoted known keys
featurein_ebpf: Implement exec trace
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak
featureaws: update support for additional regions
otherfilter_kubernetes: make memory growth rigidly on filter k8s
otherout_s3: Handle otlp JSON format
otherfilter_log_to_metrics: retry timer metric append
fixcrypto: fix build with OPENSSL_NO_ENGINE
otherscripts: enable working runtime tests
otheropentelemetry: preserve otlp log resource grouping
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit
fixout_forward: fix retain_metadata_in_forward_mode default value (true)
otherrelease: update to 5.0.5
otherlib: cmetrics: upgrade to v2.1.3
fixinput: fix threaded input conditional routing for logs
otherout_influxdb: plug tag keys failure on out influxdb
fixrouting: fix issue with missing input alias
otherrelease: update to 5.0.4
othertests: http_client_chunked: Plug SEGV occurence on macOS
featurein_http: add new /health endpoint
fixout_loki: fix 'occured' -> 'occurred' in comment
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size
fixin_dummy: Use pre_run callback to fix crash path
otherin_tail: drop redundant fstat() on event collection
otherml: ensure context is registered for REGEX type
otherin_forward: handle retain metadata in upstream conf
otherin_tcp: in_udp: Enhance of parser capabilities
otherhttp_client: Restore behavior for dummy http client
othertests: integration: introduce in-tree integration test suite
otherparser: Address wrong assignments of timezone at midnight
otherrelease: update to 5.0.3
otherworkflows: Unify steps of downloading built macOS packages
fixrecord accessor: fix CFL root-key matching and container translation
featureenv: add new extended format to handle environment variables
fixout_s3: fix retry_limit semantics and multipart upload memory leaks
otherlib: cmetrics: upgrade to v2.1.2
otherin_tail: harden db offset restore across restart
otheroauth2: restore legacy context creation behavior
othernetwork: Handle baraketed ipv6 addresses
fixin_opentelemetry: fix tag routing issue
featurehttp_server: add settings for ingress queue
otherout_syslog: address invalid configurations on in syslog
fixinput_thread: replace raw read() with pipe abstraction to fix crash
otherworkflows: Windows docker insufficient disk space fix
otherhttp_client: enhance parser in timeouts and protocol parsing
featurein_ebpf: add tcp trace
otherrelease: update to 5.0.2
otherbuild: Detect version bump to permit "release: " prefix
otheraws: compression: arrow: Set up proper block size
fixdockerfiles: windows: fixed VS Build Tools installation
featureout_azure_blob: add path templating support comparable to s3
otheroauth2: harden token refresh parsing
fixout_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing
featurein_ebpf: Add vfs trace
featureagents: add initial AGENTS.md
othermoth: update banner to v5.0
othertests: runtime: Mark another port 4318 raced test case
othertests: CI test stabilization
otherworkflows: ensure 5.0 releases are handled
featureopentelemetry: add OTLP JSON and OTLP Proto helpers
otherrelease: update to 4.2.8
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]
fixout_stackdriver: fix payload parsing over-reads and null safety [Backport to 4.2]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 4.2]
otherrelease: update to 4.2.7
otherreleasse: Update version to v4.2.7 [4.2 branch]
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2]
otherlib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2]
otherin_forward: validate PING is a msgpack array in check_ping [Backport to 4.2]
otherout_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2]
othergzip: read magic number endian-safely in streaming decompressor [Backport to 4.2]
fixin_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2]
otherin_splunk: return Splunk HEC auth status codes [Backport to 4.2]
otherrelease: update to 4.2.6
otherworkflows: Windows docker insufficient disk space fix [Backport to 4.2]
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2]
fixout_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2]
featureparser: Add IANA time_zone support for native timestamps [Backport to 4.2]
otheroauth2: harden token refresh parsing [Backport to 4.2]
fixdockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2]
otherworkflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2]
otherout_stackdriver: backport codeowners change
othergithub: workflows: Process unit tests on 4.2 branch [Backport to 4.2]
othergithub: workflows: Specify OS configs explicitly [Backport to 4.2]
fixregex: Plug a regex literal crash [Backport to 4.2]
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2]
otherunicode: Use the correct maximum size of Cyrillic [Backport to 4.2]
otherout_forward: process type and length of pong strictly [Backport to 4.2]
featurenode_exporter_metrics: Add file path to error messages [Backport to 4.2]
otherout_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2]
othertests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2]
otherscheduler: Plug FD leaks on destroy [Backport to 4.2]
otherrelease: update to 4.2.5
featurepackaging: add support for Ubuntu 26.04 (backport to 4.2)
featurebackport: env: add bash-style default value operator :-
otherout_chronicle: Support label and namespace mapping [Backport to 4.2]
fixinput_thread: replace raw read() with pipe abstraction to fix crash [Backport to 4.2]
otheraws: compression: arrow: Set up proper block size [Backport to 4.2]
othernetwork: Handle braketed ipv6 addresses [backport to 4.2]
otherparser: Address wrong assignments of timezone at midnight [Backport to 4.2]
fixrouting: fix issue with missing input alias [Backport to 4.2]
otherout_influxdb: plug tag keys failure on out influxdb [Backport to 4.2]
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size [Backport to 4.2]
otherfilter_kubernetes: don't recycle connections in fetch_pod_service_map [Backport to 4.2]
fixin_tail: fix file append cleanup on failure [Backport to 4.2]
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak [Backport to 4.2]
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit [Backport to 4.2]
otherengine: ignore duplicate STOP to prevent shutdown spin [Backport to 4.2]
fixin_dummy: Use pre_run callback to fix crash path [Backport to 4.2]
breakingout_logdna: remove promoted known keys [Backport to 4.2]
fixcrypto: fix build with OPENSSL_NO_ENGINE [Backport to 4.2]
otherout_azure_logs_ingestion: Plug SEGV on termination [Backport to 4.2]
otherin_forward: handle unpacker allocation failure [Backport to 4.2]
othertests: runtime: wait for tail truncate output [Backport to 4.2]
otheravro: Handle int64 values correctly [Backport to 4.2]
fixmp: fixed count when empty data
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB [Backport to 4.2]
otherin_forward: validate array size before accessing message mode fields [Backport to 4.2]
fixin_syslog: fix integer overflow in octet-counting length parser [Backport to 4.2]
fixin_mqtt: fix OOB read from hardcoded remaining length overhead [Backport to 4.2]
otherzstd: cap buffer at max instead of aborting on overshoot [Backport to 4.2]
othersnappy: read frame length as 3 bytes to avoid OOB at boundary [Backport to 4.2]
otherin_elasticsearch: check map size before accessing first entry [Backport to 4.2]
otherdockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2]
fixfilter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2]
othermultiline: ml: Propagate metadata even if on exceptions [Backport to 4.2]
otherfilter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2]
otherworkflows: Suppress invalid glob patterns [Backport to 4.2]
fixprocessor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2]
otherhttp_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2]
breakinggithub: workflows: remove trivy cron workflow
fixavro: out_kafka: Fix specification errors in avro format [Backport to 4.2]
otherlib: monkey: upgrade to v1.8.8
otherengine: use effective post-processor counts for output metrics (v4.2)
otherrelease: Update to v4.2.4
otherrelease: update to 4.2.3
othercopyright: update year to 2026
fixfilter_kubernetes: fix parser annotation leak
othergithub: scripts: commit_linter: Handle bin prefix for fluent-bit.c
otherbin: Handle CONT signal properly under leaks command
otherfilter_wasm: Handle group metadata
fixcmake: kafka: fix OAuth Bearer detection on Windows
securitymaintenance: update branch and security EOL info
featuregithub: scripts: commit_prefix_check: add config format rules on linter
otherreadme: update active branch 4.2
otherout_opentelemetry: on HTTP/2, read and process gRPC status code
otherconfig_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2]
fixfilter_log_to_metrics: fix initialization and exception cleanup
otherout_stackdriver: clean up oauth2 cache lifecycle
otherfilter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport]
featurein_winevtlog: Add text format for event rendering [Backport to 4.2]
featurein_tail: Add skipped_lines counter [Backport to 4.2]
featurein_splunk: Implement handling remote addr feature [Backport to 4.2]
otheraws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport]
otherplugin_proxy: enable event_type specification for proxy plugins (4.2 Backport)
otherin_splunk: Plug memory issues [Backport to 4.2]
otherpackaging: script: Use rockylinux prefix on package testing script
otherrelease: update to 4.2.2
securitysecurity: Update supporting timeline
otherout_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests
featureaws: Implement simple_aggregation operation
otherout_kinesis_firehose: enable HTTP debugging for AWS client requests
featurehttp_client: add ipv6 bracket if missing from host address
otherlib: updates 20251223
otherrelease: update to 4.2.1
otherworkflows: Not to make latest on publishing 4.1 series on GitHub Relases
fixin_forward: fix connection release on pause memory corruption
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space
otherworkflows: bump actions/checkout from 5 to 6
featurein_opentelemetry: added five missing configuration option descriptions. Fixes #11191.
featureout_s3: implement retry_limit parameter
featurein_blob: added missing configuration descriptions. Fixes #11204.
featuretls: openssl: Implement flexible certstore loading on Windows
featurein_kubernetes_events: add support for configuring input upstream network setup
featureworkflows: add new commit linter tool
otherworkflows: bump actions/checkout from 4 to 6
otherworkflows: bump actions/setup-python from 5 to 6
otherdockerfile: Docker image to support large page sizes
otherdockerfile: update to Debian Trixie
otherin_elasticsearch: fixing missing config parameter description for http2. Fixes #11221.
fixin_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #11232.
otherin_forward: improve configuration parameter descriptions
othergithub: commit_linter: Make more flexibility for commit linter
otherbuild: prevent the toolchain from emitting an executable stack
fixin_forward: fix segfault and double-free in trace path handling
otherin_node_exporter_metrics: Increase buffer size to read /proc/stat correctly
featurein_http: added missing config parameter descriptions.
otherworkflows: bump peter-evans/create-pull-request from 7 to 8
fixout_flowcounter: Fix incorrect bytes calcuation
otherworkflows: bump actions/cache from 4 to 5
otherworkflows: bump actions/download-artifact from 6 to 7
otherworkflows: bump actions/upload-artifact from 5 to 6
othergithub: workflows: Clean up needless resources on GHA workers
featurein_ebpf: add three missing config option descriptions. Fixes #11221.
otherin_gpu_metrics: updated config parameters descriptions.
otherbuild: Tweak linker flags for zstd
otherin_winevtlog: Plug glitches of time offset for DST/STD switches
otherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
otherworkflows: Make not to be the latest release for 4.0 branch
otherbuild: bump to v4.2.0
securitysecurity: update versions and general info
featurehelp: add space for outputs and processors when generating schema.
otheropentelemetry: traces: unify JSON to ctrace encoder
featurerouting: add new routing mechanism for input plugins
othermp: extend cobj API to expose group metadata and attributes
featurein_node_exporter_metrics: add netstat linux collector
otherfstore: safe check on fsf file deletion
otherworkflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch
featurerouter: add conditional support for Logs
fixaws_credential_sts: internal: Fix unit test failures
otherworkflows: bump actions/upload-artifact from 4 to 5
otherworkflows: bump actions/download-artifact from 5 to 6
fixrouter_condition: Fix unconditional route check in routing
featureout_vivo_exporter: add versioned API endpoints
featurerouter: add contexts to conditional support for direct route paths
othersnap: Upgrade snap from core18 to core20
featuredoc-reports: add cncf audit report
otherchunks: extend metadata to support routing information (direct routes)
otherworkflows: bump helm/kind-action from 1.12.0 to 1.13.0
breakingdockerfile: removed unused DLLs from image for Windows Containers
fixkafka: fix cmake cross compile error
featurein_syslog: Add support for RFC 6587 octet-counting
featureout_s3: Add a NULL check for plugging SEGV on dry_run
featurepackaging: add missing SASL dependencies for Rocky/AlmaLinux
fixfix: Make TLS initialization thread-safe and idempotent using pthread_once
featuremotd: add 4.2 banner
featureout_http: Added PUT support
featurerouting: introduce metrics for unmatched (dropped) logs
featurein_tail: Implement long line truncation
featurepackaging: add -L flag to curl for redirect support
featurestorage: config: engine: Introduce dead letter queue
featureworkflows: staging-release: add v4.2
+13 more items in the release notesotherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
featurehelp: add space for outputs and processors when generating schema. [Backport to 4.1]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherfstore: safe check on fsf file deletion [Backport to 4.1]
otherwasm: Plug wasm heap leakages [Backport to 4.1]
featureout_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1]
fixin_forward: fix connection release on pause memory corruption [backport to 4.1]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.1]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.1]
otherrelease: update to 4.1.1
featureworkflows: windows: Add a testing flow with using ARM64 Windows runner
otherscripts: Handle two or more digits for patch version
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter
otherin_splunk: return correct error response for http/1 handler.
otherworkflows: bump ossf/scorecard-action from 2.4.2 to 2.4.3
featureopentelemetry: allow empty strings for TraceID and SpanID (logs)
otherworkflows: bump peter-evans/dockerhub-description from 4 to 5
featureworkflows: add sanity check for toolchains w/ CXX support
featurein_winevtlog: Implement trying to reconnect on cancel mechanism
otherreload: refactor watchdog to be preemptable on windows.
otherdocs: fix broken links
featurein_docker: add helper for container name parsing
featureout_opentelemetry: add configurable log resource limits
otherout_opentelemetry: no longer reallocates the http2 setting string
fixin_http: fix handling of URL encoded value
securityout_file: sanitize incoming Tag to prevent path traversal
otherrouter: use memchr() and tag length for matching tags
fixin_forward: Fix user authentication to align Fluentd's behavior
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup
otherin_calyptia_fleet: load configuration on initial startup.
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list.
otherworkflows: bump github/codeql-action from 3 to 4
fixout_es: fix elasticsearch output api key usage
otherrelease: Update version to 4.0.14
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list (backport of #10943).
featurehelp: add space for outputs and processors when generating schema.
fixin_tail: fix last_processed_bytes calculation [Backport to 4.0]
otherfstore: safe check on fsf file deletion [Backport to 4.0]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherwasm: Plug wasm heap leakages [Backport to 4.0]
fixin_forward: fix connection release on pause memory corruption [Backport to 4.0]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.0]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.0]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.0]
otherin_winevtlog: Plug glitches of time offset for DST/STD switches [Backport to 4.0]
otherrelease: Update version to v4.0.13
otherin_calyptia_fleet: load configuration on initial startup (backport #10996 to 4.0).
fixstorage: fix heap corruption in chunk sort parser [Backport to 4.0]
fixin_forward: Fix of handshaking on forward protocol [Backport to 4.0]
otherrelease: Update to v4.0.12
fixin_splunk: fix the invalid data format response when submitting valid data.
featureopentelemetry: allow empty strings for TraceID and SpanID (logs) [Backport to 4.0]
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter [Backport to 4.0]
otherout_opentelemetry: no longer reallocates the http2 setting string [Backport to 4.0]
fixlog_to_metrics: fix improper handling of record accessor context [Backport to 4.0]
featureout_opentelemetry: add configurable log resource limits [Backport to 4.0]
fixin_http: fix handling of URL encoded value [Backport to 4.0]
securityout_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0]
featurein_docker: add helper for container name parsing [Backport to 4.0]
featurereload: add a timeout mechanism and its based commits backporting [Backport to 4.0]
fixin_forward: Fix user authentication to align Fluentd's behavior [Backport to 4.0]
otherrouter: use memchr() and tag length for matching tags [Backport to 4.0]
otherreload: refactor watchdog to be preemptable on windows. [Backport to 4.0]
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup [Backport to 4.0]
otherrelease: Update version 4.0 [4.0 branch]
otherpackaging: support Alma/Rocky/CentOS 10 plus Debian Trixie/13 [Backport to 4.0]
otherinput: private plugins must use global event loop [Backport to 4.0]
fixtls: fix regression and proper shutdown [Backport to 4.0]
otherrelease: Update version to v4.0.10
fixin_splunk: fix the response when receiving empty payload - backport of 10800
featurein_event_type: implement pause/resume to stop timed collector.
otherworkflows: Install NSIS via chocolatey [Backport to 4.0]
otherin_winevtlog: Plug possible SEGV occurrence paths [Backport to 4.0]
otherlib: updates for cmetrics and monkey (v4.0 backport)
otherutils: relax proxy URL parsing
otherupstream: Move clearing TLS session from prepare phase to destroy phase [Backport to 4.0]
fixin_storage_backlog: fix use-after-free when segregating chunk [Backport to 4.0]
otherrelease: update to 4.0.9
fixin_tail: fix memory leak when using generic unicode conversion (backport #10781)
othercmake: explicitly disable FLB_UNICODE_ENCODER when FLB_USE_SIMDUTF is disabled. [Backport to 4.0]
otherpipe: Specify linger option for flb_pipes which is build on top of socketpairs on Windows [Backport to 4.0]
othercmake: backport #10778 and #10786 to 4.0.
fixengine: fix busy chunks on reload. [Backpoprt to 4.0]
breakingopentelemetry: remove enforcement of timestamp fields for logs (backport v4.0)
featurehttp_client: add response and read idle timeouts (backport v4.0)
fixhttp_client: fix incomplete error handling in flb_http_do() (backport v4.0)
fixopentelemetry: fix handling of numeric attributes (backport v4.0)
featuredownstream: implement pause and resume functionality [Backport to 4.0]
fixnetwork: fix strerror_r detection for musl [Backport to 4.0]
fixengine: fix endless loop on reload [backport to 4.0]
otherrelease: update to 4.0.8
otherinput_metrics: discard cmetrics with no series (backport v4.0)
featurein_node_exporter_metrics: add Linux sockstat collector (backport v4.0)
featurein_node_exporter_metrics: add Linux hwmon collector (backport v4.0)
fixpack: fix token count regression in JSON tokenizer and remove parser reset (backport 4.0)
otherin_kafka: improve offset commit timing to avoid data loss in edge cases (backport v4.0)
featurein_node_exporter_metrics: add new option 'path.rootfs' (backport v4.0)
featureout_azure_kusto: Added workload identity support (backport v4.0)
otherout_datadog: task_arn now correctly mapped to full arn (backport v4.0)
featureout_cloudwatch: add entity support and remove unnecessary log content (backport v4.0)
featureout_kinesis_firehose: introduce port parameter (backport v4.0)
otherdockerfiles: windows: update to ltsc 2025 and fix layers
featureout_es: add apikey to available auth types
otherlib: chunkio: update to 98988d25
otherin_calyptia_fleet: fleet config fetch ignores older-timestamped files
fixopentelemetry: logs: fix packaging length for trace_id and span_id (backport 4.0)
otherworkflows: Retrieve the actual target image with tag [Backport to 4.0]
featureworkflows: Add sudo for a cleanup step
otherrelease: update to 4.0.7
otherin_windows_exporter_metrics: Handle DST more precisely with dynamic timezone verison of functions [Backport to 4.0]
fixopentelemetry: general fixes for log handling [Backport to 4.0]
otherrelease: Update to 4.0.6 [4.0]
fixout_chronicle: Fix log_key detection mechanism [Backport 4.0]
otherfilter_aws: send entity attributes for telemetry association [Backport 4.0]
otherin_winevtlog: Handle Daylight saving time by using newer functions [Backport to 4.0]
otherin_windows_exporter_metrics: Follow windows_exporter prom names correctly and support connection_state metrics [Backport to 4.0]
otherlib: cmetrics: upgrade to v1.0.5 [Backport to 4.0]
featureoutput: add Histogram Metric for end-to-end chunk latency [Backport to 4.0]
breakinginput: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0]
featurein_nginx_exporter_metrics: add scrape_interval option (default: 5s) [Backport to 4.0]
otherout_kafka: do not release config map properties [Backport to 4.0]
otheropentelemetry: utils: handle NULL type as empty strings [Backport to 4.0]
otherin_opentelemetry: handle NULL body in otlp_pack_any_value (fix #10674) [Backport to 4.0]
featurein_prometheus_textfile: new plugin to read .prom metric files [Backport to 4.0]
otherrelease: update to 4.0.5
fixworkflows: fix windows check for container image
otherout_file: Replace SHCreateDirectoryExA to work for recursive directories correctly
othernetwork: enable EDNS for DNS queries
fixpackaging: fix Debian buster repo issues [backport 4.0]
othertls: openssl: output: configurable certstore name [Backport 4.0]
otherpack: Handle UINT64_MAX value correctly in json packing [Backport 4.0]
otherin_windows_exporter_metrics: Extend metrics [Backport 4.0]
otherin_syslog: do batching to reduce ring buffer pressure under load [v4.0]
otheraws: restore IMDS timeouts after upstream_set in EC2 provider [v4.0]
featureoutput: add new net.proxy_env_ignore option [v4.0]
otherrelease: update to 4.0.4
otherworkflows: bump ossf/scorecard-action from 2.4.1 to 2.4.2
otherinstall: update install script to handle Rocky/Alma repos now
fixhash_table: fix leak in case insensitive and add unit tests
otherio: on network connect exceptions, invalidate file descriptor
featureconfig: implement storage inheritance option
otherlib: luajit: only require a C compiler
otherlog_event_decoder: validate memory allocation
fixfilter_modify: fix leaks on exceptions
fixupstream: fix connection count when net.max_worker_connections is set
featurefilter_lua: add groups metadata and body support
otherlib: lwrb: build it as a static lib instead of an interface
othermultiline: release unpacked contexts on exceptions
fixprocessor_content_modifier: fix leak on JSON conversion and data type
fixout_opentelemetry: fix leaks on exceptions
featurehttp_server: add new API to configure the maximum buffer size
fixin_calyptia_fleet: fix memory leak in get_fleet_id_from_header.
fixout_opentelemetry: fix handling of retry status (fix #10481)
otherin_splunk: continue with the next token if length of auth header vs token doesn't match
featureconfig_format: yaml: add detailed error message on bad format
otherin_calyptia_fleet: report the configuration version.
otherdockerfile: Enable default SIMD support in Docker
featurekafka: add support for AWS MSK IAM authentication
featureupstream: prioritize the reuse of connections instead of establishing new ones
fixprocessor_sampling: fix stale span references in registry
featureunicode: defs: conv: Implement conversion rules of character encodings
fixin_calyptia_fleet: fix init error mem leaks.
featurerecord_accessor: add support for binary values and references
featurenetwork: add new net.backlog property to set somaxconn in the process listeners
fixnetwork: general fixes for failure states
featureopentelemetry: new abstraction to handle OTLP data
fixprocessor_sql: record_accessor: stream_processor: Fix yylex() function signatures
featurefilter_lua: add support to access groups and metadata
fixout_opentelemetry: fix logic for grouping when using resource_id/scope_id
fixdownstream: fix check of accept timeout
fixout_cloudwatch_logs: fix strcasestr _GNU_SOURCE
fixreload: fix handling hot reload when reload failure
featurein_kafka: add enable_auto_commit option for Kafka consumer
fixout_opentelemetry: fix behavior of record attributes handling
deprecatedworkflows: deprecate windows-2019
+16 more items in the release notesfeaturepackaging: add AlmaLinux and RockyLinux builds
breakingin_node_exporter: removed unnecessary optimization that caused crash
fixhttp_client: fix muti part http2 request not working
otherbackport to v.3.2 -- in_tail: make read_from_head after the initial discovery optional
otherwasm: Enable reference types feature on wasm
fixengine: fix segfault in flb_config_init error case
otherin_opentelemetry: Configurable logs_body_key
otherrelease: update to 4.0.3
otherin_winevtlog: Support remote access of winevtlog
otherout_opensearch: Prevent a SIGSEGV when ctx->index is NULL
featurefilter_parser: add record accessor support in parser filter
otherbuild: ci: tune MSVC flags, modify ci caching
otherstrptime: Support some of abbriviated timezone strings for GNU extensions
otherlib: upgrade libraries 20250522
othergo: plugin_proxy: error on plugin initialization errors
fixgzip: fix handling of concatenated payloads
othersimdutf_connector: in_tail: skip UTF-16/UTF-8 BOM
otherlog: expose internal logging call counts as internal metrics
otherin_exec_wasi: change wasm_runtime_call_wasm to wasm_application_execute_main to support latest version of tinygo
featureout_azure_blob: added buffering to azure blob
featureengine: add input grace period and check pending chunks on shutdown
otherin_forward: Check return values from mutex functions
otherlib: miniz: only require a C compiler
featureapi: proxy: custom: Implement APIs for custom Go plugins
fixprocessor_sampling: tail: fix spans reconcile processes
otherout_es: Prevent a SIGSEGV when ctx->index is NULL
otherconfig: error configure_plugins_type on invalid properties
otherbuild: Detect msgpack-c and msgpack-c to be valid msgpack library
fixinput: fixed threaded input processor initialization
featureutils: if flb_utils_write_str uses SIMD, add missing highbit_set check() detection
featureout_azure_kusto: support for otel log schema
othertest: stream_processor: Plug a SEGV for macOS
fixgzip: fix decompressor memset usage
fixin_tcp: fix parsed bytes to include separator length
otherin_http: validate memory allocation and fix object type on tag key
fixout_azure_kusto: fix segfault when log level is debug or trace
otherin_opentelemetry: handle exception on unsupported compress format
fixin_forward: fix handling of connections and memory on exceptions
breakingpackaging: remove older Ubuntu targets from smoke test
otherrelease: update to 4.0.2
othertests: internal: fuzzers: split cmetrics decoding
securitysecurity: update policy for 4.0 release series
fixout_azure_kusto: fixed double free
otherlib: ctraces: upgrade to v0.6.5
otherbuild: use the system provided libmsgpack and libsqlite3 if found
otherbuild: only compile simdutf if there is CXX support
featureengine: added conditional to avoid re-scheduling conflict
featurepack: add support for metadata and group info in JSON log
otherprocessor: fail on startup when invalid processors are configured
othersimd: Use __riscv_vsetvl_eXXm1 function to get the actual width of RVV instructions
fixopentelemetry: fix handling of schemaUrl in resource and scope
fixsystemd: build: fix service startup failure when using IMDSv2
featureinput: add missing options to input_global_properties.
otherbin: config: Provide windows.maxstdio option for increasing I/O limit on Windows
otherlib: update CMetrics and CTraces
otherlib: cmetrics: upgrade to v1.0.2
otherout_splunk: Change attaching priority for HEC token
otherrelease: update to 4.0.1
fixplugin_proxy: fixed memory leak
featureout_azure_kusto: added buffering fixes
featurein_storage_backlog: added missing routing mask initialization
fixconfig: yaml: fix double-free from freeing state before cleanup on exit.
otherci, dockefile: frozen version of CMake
otherdockerfile: Windows Containers image Fluent Bit NMake build
otherinput_chunk: routes_mask is not initialized (#10223)
otherlib: dependency updates
otherpipeline: inputs: podman_metrics: use after free fix
fixout_azure_blob: fixed double free
otherin_tail: make read_from_head after the initial discovery optional
fixin_tail: fix disposal order to prevent use after free
othertests: internal: fuzzers: extend ctrace fuzzer
fixopentelemetry: fix support for schema_url in opentelemetry plugins.
fixout_oracle_log_analytics: fix use-after-free on flush failure
fixmp: fix flb_mp_accessor_keys_remove for sibling keys removal
otherci: CMake upgrade in code analysis script
fixconfig_format: fix SEGV from missing return check
fixconf: parsers: fix istio-envoy-proxy parser regex
featurestackdriver: add cloud_logging_base_url
featurelib: monkey: add missing files
featurereadme: add swym logo to fluentbit_users.png
featurelog: added a new management signal to overcome a dedadlock
breakingworkflows: remove qemu usage
featurein_opentelemetry: add support for OpenTelemetry JSON traces
featurezstd: introduce zstd compression support in Fluent Bit (cleanup)
featurein_opentelemetry: refactor Logs handling and add support for gRPC message compression
featureconditionals: add NOT_REGEX operator to conditional processing
featurein_http: add compression handling support for gzip, snappy and zstd
featureout_http: add zstd and snappy compression
featureCODEOWNERS: add AWS code-owners for AWS-related files
featureconditionals: add GTE and LTE operators
securitysecurity update: CVE-2024-50608 and CVE-2024-50609
featureinternal: test: conditional: Add Byte-Order-Mark(BOM) for non western Windows environments
featurefilter_kubernetes: add owner references information into record.
featurezstd: add support for compressed unknown size
featurera: add support for direct array access notation
featureout_splunk: added otlp metadata support
featurefilter_modifier: added missing log event encoder and decoder disposal
featureinput_thread: added missing sanity check
featureout_loki: add stuctured_metadata_map_keys
featurein_opentelemetry: logs: add missing checks for resource and scope
breakingworkflows: remove invalid sync directory
featureinput_chunk: check return values when calculating found chunks for new space.
featureaws: add support for EKS Pod Identity
featureprocessor_sampling: new trace sampling processor
featurecustom: add support for net properties to custom plugins.
featureinput: add support for upstream configuration for input client plugins.
featureout_exit: add time_count (seconds) and record_count parameters for out_exit.
featuretls: add support for setting min/max TLS version and cipher list
featuretask_map: added task map scaling
featureout_azure_kusto: azure managed identity support added
featureprocessor: add conditional processing support for logs
featureprocessor_labels: add support for record accessor in values
featureenv: add support to set environment variable content from a file
featuresimdutf: simdutf_connector: in_tail: Implement UTF-16LE/UTF-16BE encoder
featuresimd: riscv: implement RVV intrinsics
featuresystemd: build: Add sethostname workaround for AmazonLinux2
featurepipe: add flb_pipe_error
+63 more items in the release notesotherrelease: update to 3.2.10
fixrecord_accesor: fix return value for flb_ra_get_kv_pair when get_ra_parser fails (Backport)
featureaws: add support for EKS Pod Identity
fixprocessor: fix missing read_groups flags for log event decoder (backport for 3.2)
otherout_splunk: when packing OTel metadata, include resource attributes (backport 3.2)
otherci: update version to 3.2.9
featurefilter_modifier: added missing log event encoder and decoder disposal
otherhttp_server_http1: updated the request size measurement function
featureinput_thread: added missing sanity check (backport)
featureout_loki: add stuctured_metadata_map_keys (3.2.x Backport)
featurein_opentelemetry: logs: add missing checks for resource and scope (backport 3.2)
otherout_opentelemetry: restored old group meta record processing mechanism (backport)
otherout_opentelemetry: switch config property 'http2' default to 'off' (backport 3.2)
featureout_splunk: added otlp metadata support (backport 3.2)
fixin_opentelemetry: fix handling of status code in JSON traces (backport 3.2)
featurelog: added a new management signal to overcome a deadlock
featurestackdriver: add cloud_logging_base_url (#9779)
fixin_kubernetes_events: fix sqldb cleanup (backport to v3.2)
othertests: in_kubernetes_events: backport flake test fix from #9877.
otherhttp input layer: parser realloc fixes (#9970)
otheropentelemetry: backports from git master
featurein_http: add compression handling support for gzip, snappy and zstd (backport v3.2)
otherinput_chunk: log plugin alias instead of plugin name if exists. - backport to 3.2
featureout_http: add support for zstd and snappy compression (backport for v3.2)
securitysecurity update: CVE-2024-50608 and CVE-2024-50609 (v3.2)
otherworkflows: pin QEMU version for Raspbian only
otherci: update to version 3.2.7
otherrelease: update to 3.2.6
fixworkflows: fix debug image manifest
fixin_opentelemetry: fix finalization of group for gRPC payload (backport for v3.2)
otherin_tail: reintroduced the old ignore_older behavior as opt-in
breakingworkflows: remove qemu usage
otherrelease: update to 3.2.5
other3.2: lib: monkey files
fixpack: fix missing scientific notation in JSON parser [Backport 3.2]
otherbackports: v3.2 20240108
otherpackage: distro: dockerfiles: Install libcurl development package for oauthoicd on rdkafka [Backport 3.2]
otherworkflows: increase size of container builders
breakingworkflows: remove s390x and armv7 platforms for container builds
otherworkflows: split into per-arch container builds
otherrelease: update to 3.2.4
otherworkflows: bump helm/kind-action from 1.11.0 to 1.12.0
featureinternal: add conditionals evaluation API
fixin_systemd: fix memory leak
fixRegression fix: Selects docker image target fpr local-build-all.sh
otherrelease: update to 3.2.3
otherout_calyptia: retry agent registration on flush callback
fixcmake: fix UNICODE-escaped characters on aarch64
fixfilter_parser: fix reserve data and preserve key handling
fixprometheus_remote_write: Fix a typo in configuration
otherwasm: Plug a resource leak on exception (CID 508177)
othercalyptia: generate machine id for fleet agents
otherlib: wasm-micro-runtime: Bump up wasm-micro-runtime to v1.3.3
otherin_winevtlog: Use correct flag for EvtRender
fixin_process_exporter_metrics: Fix error logic when directory cannot be…
fixFix a typo in out opentelemetry plugin
otherin_systemd: Process enumerated data as cfl_kvlist(s) at first
featurecfl_record_accessor: cfl_ra_key: Implement generic CFL based record accessor
otherhttp_server: hs: Handle IPv4 and IPv6 addresses
otherin_forward: Support empty_shared_key parameter
otherutils: Detect machine_id corruption and fill out a dummy value
otherbuild: Use signed char in RISC-V 64bit
otherupdate fluentbit_users.png
otherdocs: update deployment details
otherin_forward: Recreate connection when resumed
otherutf8: enhancements for handling of multibyte sequences
featureopentelemetry: add Logs metadata support for JSON payload
othercfl_record_accessor: Plug resource leaks (CID 516097)
otherplugin: Detect config format and use a proper loader
otherworkflows: bump helm/kind-action from 1.10.0 to 1.11.0
otherlib: update cprofiles and c-ares libraries
otherworkflows: resolve ubuntu 24 packaging problems
featureplugin_proxy: Allow to execute flush callback on Golang side during hot-reloading
otherrelease: update to 3.2.2
featuresignv4: added missing length calculation (CID 514601)
featurehttp_client: added missing exit path (CID 514596, 514571)
featurehttp_common: added missing initializers (CID 514594, 514583)
featureout_opentelemetry: added missing result checks and fixed leaks (CID 514593)
fixhttp_client: fixed potential memory corruption (CID 514587)
featurehttp_client: added missing exit path (CID 514585)
fixhttp_common: moved initializers to correct a bug introduced in PR 9608
otherci: extended CI script to pass test for flb_utils_get_machine_id
otherin_forward: Plug a resource leak on exception (CID 508064)
othernode_exporter_metrics: Use real_path for complaining on glob error
otherplugin: Plug a use-after-free issue (CID 514582)
otherhttp_client: assorted HTTP/2 related fixes
fixout_azure_kusto : fix multiple files tail issue and timeout issue
otherin_opentelemetry: Propogate tag in http2 metrics and trace handlers
otherprocessor_labels: Process operations for output purposed contexts of metrics instead of the original one
otherfilter_lua: expose env variables in FLB_ENV Lua table
othercustom_calyptia: honour collector interval in secs and nano secs.
fixout_stackdriver bug fix: return cached token when current_timestamp is less than cached_expiration
featurehttp_client: out_es: lib: implement http client response testing mechanism
otherin_http: use 'tag_key' option when json array is received
fixnetwork: fix IPV6 handling for accepting connections
otherconfig_format: windows: Handle static config on windows correctly
otherci: support 3.2 releases as latest version
otherRetrieve Kubernetes pod IP address if it is set in status.podIP
othertests: runtime: kubernetes: fixes tests after addition of pod_ip
otherin_ebpf: Prepare build directory for building eBPF objects
otherin_splunk: splunk token validation must be case-insensitive
otherin_ebpf: Handle debian like systems' signal probes
securitysecurity: supported versions now are 3.1.x and 3.2.x
breakingtls: removed alpn selector requirement
otherupdate: bump version to v3.2.1
otherbuild: bump to v3.2 series
otherworkflows: bump peter-evans/create-pull-request from 6 to 7
otherworkflows: linux: Compile and execute internal test on non-amd64 platforms Linux
featureengine: added missing explicit cast (CID 508212)
fixin_elasticsearch: fixed potential issue caused by ingored reallocation (CID 508180)
featureinput: added missing initializer (CID 508207)
fixout_opentelemetry: fixed memory leaks (CID 508192)
othertests: internal: signv4: uncommented code that caused a leak (CID 508181)
fixin_elasticsearch: fixed memory leak (CID 507822)
otherout_influxdb: Handle signed/unsigned integer as influx's integer of that representation
fixin_calyptia_fleet: fixed memory leaks (CID 508187)
otherout_http: Request timed out(408) to be treated as retry
othertests: internal: signv4: fixed leak (CID 508222)
featurefilter_log_to_metrics: Add timer callback for emitting metrics
fixin_calyptia_fleet: fix 'unable to find fleet by name'.
fixfilter_multiline: Reset group metadata buf on flush - Fixes 9262,8925,9337,8567
featurelib: fluent-otel-proto: update generated files and add profiling support
fixreload: do not call flb_stop when flb_start fails to avoid crash on RHEL/CentOS.
featurecore: signal blob implementation
featurein_opentelemetry: add tag_from_uri support to http2 codepath
featuremotd: add missing null character
featurelib: monkey: upgrade to v1.8.1 (add support for HTTP/1.1 chunked transfer encoding)
fixtests/internal: fix use-after-free for input_chunks test input_chunk_dropping_chunks.
fixout_azure_blob: fixed blob endpoint tracking
featuresimd: add new SIMD support for JSON escaping
featureprocessor_content_modifier: add support for Metrics processing
fixinput_chunk: fix input plugin metrics not counting records re-emitted by filters downstream
securitytls: macos load system certificates using security framework.
fixin_forward: fixed incorrect shared key length in authentication
featurefilter_multiline: Add functionality to use as processor
featureoutput: allow records size 0 on flb event type logs processor
featureprocessor_opentelemetry_envelope: add support for Metrics
fixin_calyptia_fleet: fix registering agent after first invocation.
featurefilter: Add dropped_bytes_total / drop_bytes metrics
featureout_datadog: custom added ability ot set custom HTTP headers
featureout_kinesis_streams: add custom port support for Kinesis output plugin
featuremetrics_exporter: add support for filter metrics inside processors
fixfix: ARES_OPT_TRIES must be set to update opt.tries
featureout_kafka: Introduce raw_log_key to write a single value to kafka
fixlib: cprofiles: fixed incorrect check
+31 more items in the release notesfeaturein_opentelemetry: add tag_from_uri support to http2 codepath
fixin_http: fix parsing of root JSON object
otherout_opentelemetry: metrics handling fixes (backport for v3.1)
fixin_forward: fixed incorrect shared key length in authentication
fixin_calyptia_fleet: fix 'unable to find fleet by name'.
other3.1: backport fixes 2024-09-26
fixreload: do not call flb_stop when flb_start fails and fix crash on RHEL
otherupstream: Improve error message for misconfigured HTTP_PROXY variable - Backport to 3.1
featureengine: added missing explicit cast (CID 508212)
othertests: internal: signv4: fixed leak (CID 508222)
othertests: internal: signv4: uncommented code that caused a leak (CID 508181)
fixin_elasticsearch: fixed potential issue caused by ingored reallocation (CID 508180)
fixin_elasticsearch: fixed memory leak (CID 507822)
otherrelease: update to 3.1.8
fixout_opentelemetry: fixed memory leaks (CID 508192)
fixin_calyptia_fleet: fixed memory leaks (CID 508187)
featureinput: added missing initializer (CID 508207)
otherout_splunk: Extend retrying HTTP status code [Backport 3.1]
otherout_http: Request timed out(408) to be treated as retry [Backport 3.1]
otherout_influxdb: Handle signed/unsigned integer as influx's integer of that representation [Backport 3.1]
otherbackport: PR #9338 to 3.1
other3.1: lib: upgrade cmetrics to v0.9.6
otherrelease: update to 3.1.7
othertests: in_http: replaced the failure trigger mechanism
fixfilter_aws: fixed group metadata fetch issue and addressed (CID 507941)
fixout_opensearch: fixed a wrong data type used for a boolean option
fixout_stackdriver: fixed a wrong data type used for two boolean options
fixfilter_tensorflow: fixed a wrong data type used for a boolean option
fixin_nginx_exporter_metrics: fixed a wrong data type used for an option
fixin_opentelemetry: fixed a wrong data type used for an option
fixin_proc: fixed a wrong data type used for three options
fixout_es: fixed a wrong data type used for an option
fixnetwork: fixed a wrong data type used for an option
othertests: config_map: fixed a wrong data type used for an option
otherin_dummy: switched property types to match the config_map
otherin_head: switched the type of buf_size to match the config_map
otherin_elasticsearch: Store log_encoder pointer (CID 508245)
otherout_opensearch: Plug a use-after-free issue (CID 508013)
otherin_event_type: Plug a resource leak on exception (CID 507968)
otherout_chronicle: Plug a resource leak on exception (CID 508008)
fixcore: fix configuration type cast issue on big endian systems
othercore: support configurable event loop mechanism
otherin_emitter: Plug a possible resource leak on exception (CID 508193)
fixfilter_logs_to_metrics: fixed memory corruption issue
featureupstream_ha: added environment variable support
fixcore: fixed the data type used for booleans
otherin_winevtlog: Skip to translate SID for capability SIDs
breakingoutput: Remove a needless calling of flb_output_instance_destroy() (CID 507809)
fixcore: fixes for reports provided by Coverity 20240826
fixin_elasticsearch: Fix string in http response code 400
fixin_winevtlog: out_s3: Fix windows build failures
fixout_azure_blob: fixed double free (CID 508656)
fixin_collectd: fixed out of bounds read
fixout_stackdriver: fixed a memory leak (CID 508244)
fixin_node_exporter_metrics: fixed possible invalid dereference (CID 508238)
featurereload: added appropriate type cast (CID 508209)
fixcoverity: fixes for 20240829
fixin_event_type: fixed two leaks (CID 508227)
fixcore: fixed memory leaks (CID 508230)
fixfilter_multiline: fixed memory leak (CID 508221)
fixfilter_alter_size: fixed memory leak (CID 508216)
fixcoverity: fixes as of 20240830 (CID 507960)
+16 more items in the release notesotherrelease: update to 3.1.6
featurefilter_parser: added debug message (CID 508252)
otherpack: do not multiply out_size by realloc_size
featurestackdriver: Add latency metric for write log entries HTTP request.
fixin_forward: fixed two leaks
otherupstream_ha: upstream_node: process verify hostname on HA settings
othercoverity: report as of 20240813
otherin_kubernetes_events: Use time_t for time(NULL) returned value (CID 507947)
fixin_exec_wasi: Fix resource leak on exception (CID 508347)
otherMake Time_System_Timezone properly detect daylight savings
fixout_prometheus_exporter: Fix dead code notified from coverity (CID 508348)
otherin_forward: Plug a resource leak (CID 508219)
otherin_http: Content-Type rejected for application/json when encoding value is present.
featurein_statsd: Implement metrics type of ingestion way
otherrelease: update to 3.1.5
otherworkflows: bump ossf/scorecard-action from 2.3.3 to 2.4.0
otherout_s3: Plug memory leaks on gzipped buffers during the swapping contents
otherlib: c-ares: ugprade to v1.32.3
fixin_kubernetes_events: fix k8s events end of stream deadlock
fixworkflows: Fix CentOS7 build failure for EPEL
featurefilter_log_to_metrics: add new option 'discard_logs'
othernode_exporter_metrics: Align the collecting metrics of unit statuses
otherin_forward: Use full width of gzip header for checking whether concatenated or not
otherout_oracle_log_analytics: minor fixes
otherworkflows: update unstable nightly builds for 3.0
otherlib: cfl: upgrade to v0.5.2
fixin_mqtt: added buffer size setting and fixed a leak
otherlib: library updates
fixaws_util: fix leading zeros in time_key strings
fixout_opensearch: fixed wrong payload buffer usage for traces
otherbuild: use the system provided LuaJIT if found
otherwindows: build: Enable kafka plugins on Windows
otherout_prometheus_exporter: Handle multiply concatenated metrics type of events
fixcore: fixes for issues reported by Coverity
otherwasm: in_exec_wasi: filter_wasm: Make configurable for wasm heap and stack sizes
othercore: memory alignment feature addition
otherrelease: update to 3.1.4
otherout_stdout: Consume entire metrics type of buffers
featurelog_to_metrics: allow custom namespace and subsystem
otherinput_chunk: do not exit if cannot release old chunks
fixout_datadog: fix typo for dd_hostname documentation
otherrelease: update to 3.1.3
fixout_datadog: fix default message key remapping
fixmetrics: fix handling of old metric names (fix #9086)
fixcore and plugins: fix compiler warnings
otherin_winevtlog: Retrieve messages of forwarded events correctly
otherlib: ctraces: upgrade to v0.5.2
otherin_splunk: Process strict check for credentials
fixin_splunk: Fix handlings for content type when http2 is off
otherrelease: update to 3.1.2
fixpackaing: test: centos7: Fix packaging test
otherdocs: add user logos
othercmake: Correctly fetch FLB_GIT_HASH from signed commit
otherout_opentelemetry: restore manual parsing for log record fields (fix #9071)
featurein_tail: Add option file_cache_advise to reduce file cache usage
featurefilter_log_to_metric: Add emitter alias and mem buf limit
fixflb_input: Config parsing order fixed for storage.pause_on_chunks_overlimit
featurein_forward: Add plugin pause/resume mechanism
otherrelease: update to 3.1.1
featureluajit-cmake: Add git repository existence check
othercmake: build: Revive missing plugin definitions
otherrelease: update to 3.0.7
featurein_prometheus_scrape: add User-Agent HTTP header (#8880)
othertests: internal: log: use milliseconds to do time comparisons for cache timeout.
othertests/runtime/in_podman_metrics: refactor iteration of counters to use cfl_list from #8844.
otherout_cloudwatch_logs: support log_group_class option
otherin_http: respond accordingly to requests that produce errors.
otherout_calyptia: move debug payload to debug level.
othertests: rutime: out_http: simplify and make the in_http test more robust.
otherin_splunk: Store HEC token on enabled HTTP2 and raw endpoints
featurein_splunk: Add switch for storing in metadata or records and handle multiple tokens on in splunk
otherin_kubernetes_events: refactor time check to use struct flb_time.
fixFix GCC 14.1 build issues
otherin_systemd: Move one record back after skipping to the end
fixhttp_server: api: v1: traces: fix finding inputs by alias.
fixin_winevtlog: Fix threshold condition to avoid unnecessary warning
otherdockerfile: update to bookworm base image
fixCMakeLists.txt: fix build with ninja
featureprocessor_metrics_selector: Implement delete by label value operation
featurecore: add log groups support and full OTLP OTLP
fixout_opentelemetry: fix handling of multiple scopes
breakingworkflows: remove AppVeyor from release workflow
fixin_opentelemetry: opentelemetry_prot: Fix string in http response code 400
fixin_prometheus_remote_write: prom_rw_prot: Fix string in http response code 400
fixin_splunk: splunk_prot: Fix string in http response code 400.
featureprocessor_content_modifier: add support for OTel Logs Resource and Scopes
fixin_docker: fix memory leak caused by conversion error
featureprocessor_opentelemetry_envelope: new processor to package non OTel Logs content as OTel
featureout_loki: allow sending unquoted strings
featureparser: add new option time_system_timezone (copy of #8164)
featureout_datadog: Add support for setting a static hostname
featureAdded parser for Linux kernel netfilter firewall log
breakingout_splunk: remove raw endpoint
fixhttp_server and downstream: fix keepalive issues
fixtls: openssl: fix handling of noisy non TLS errors
fixdockerfile: packaging: Fix build check for centos-7 and failures of package creations
securitylib: nghttp2: backport upstream security fix
featureout_gelf: test: Implement injecting tag capability
featureout_loki: add support for structured metadata
fixin_syslog: Fix double free when no parser is set
featureout_loki: Add http_buffer_max_size option and handle HTTP 5xx errors
+31 more items in the release notesotherrelease: update to 3.0.7
featurein_prometheus_scrape: add User-Agent HTTP header (#8880)
othertests: internal: log: use milliseconds to do time comparisons for cache timeout.
othertests/runtime/in_podman_metrics: refactor iteration of counters to use cfl_list from #8844.
otherout_cloudwatch_logs: support log_group_class option
otherin_http: respond accordingly to requests that produce errors.
otherout_calyptia: move debug payload to debug level.
othertests: rutime: out_http: simplify and make the in_http test more robust.
otherin_splunk: Store HEC token on enabled HTTP2 and raw endpoints
featurein_splunk: Add switch for storing in metadata or records and handle multiple tokens on in splunk
otherin_kubernetes_events: refactor time check to use struct flb_time.
fixFix GCC 14.1 build issues
otherin_systemd: Move one record back after skipping to the end
fixhttp_server: api: v1: traces: fix finding inputs by alias.
fixin_winevtlog: Fix threshold condition to avoid unnecessary warning
otherdockerfile: update to bookworm base image
otherlib: cmetrics: upgrade to v0.9.1
fixCMakeLists.txt: fix build with ninja
featureprocessor_metrics_selector: Implement delete by label value operation
otherdockerfiles: windows: Update to use vcpkg instead of chocolatey
otherrelease: update to 3.0.6
featurepackaging: add build support for ubuntu 24.04 noble numbat
otherout_stackdriver: Support writing to textPayload field of Cloud Logging LogEntry.
fixout_splunk: fix metadata bug that affects splunk_token behavior (fix #8867)
fixcore: Fix crash when running dry
otherrelease: update to 3.0.5
otherworkflows: ensure only master releases are marked latest
otherengine: free after log worker thread has been stopped
otherout_splunk: reduce noise and fix hec_token handling (fix #8859)
otherwinevtlog: change total_size_threshold to size_t
fixoutput: Fix handling of metrics in output processor
securityFixes CVE-2024-4323: A memory corruption vulnerability in Fluent Bit versions 2.0.7 thru 3.0.3. This issue lies in the embedded http server’s parsing of trace requests and may result in denial of service conditions, in…
otherrelease: update to 3.0.4
featurein_otel: support to add resource of log
fixhttp_server: Fix keep-alive for HTTP/1.1 requests
otherworkflows: macos: Use matrix for building Apple Silicon artefacts
otherfilter: aws metadata group retries
otherworkflows: bump ossf/scorecard-action from 2.3.1 to 2.3.3
fixconfig: fix error message grammar
otherout_kafka: increase max kafka dynamic topic length to 249 characters
breakingprocessor_labels: Remove a needless existence check for insert operation
fixConfig: fix incorrect assignment of kernel version between major and minor
fixfix: splunk output plugin correct record accessor key for hec_token
otherout_datadog: Update the descriptions of special field options
featurein_premetheus_remote_write: Implement handler of payloads of prometheus remote write protocol
otherworkflows: bump azure/setup-kubectl from 3.2 to 4
otherworkflows: bump azure/setup-helm from 3.5 to 4
otherrelease: update to 3.0.3
otherlib: updates for CFL, CMetrics and CTraces plus others
otherin_splunk: out_splunk: Propagate ingested splunk_token authentication header
otherworkflows: bump helm/kind-action from 1.9.0 to 1.10.0
fixin_http: fix url decoder by unifying normal interface with the one used in HTTP/1.x
securityUpdate security policy to indicate 3.x supported only
otherout_chronicle: handle 1MB or larger chunks
otherlib: updates on ctraces and cmetrics 2024-04-26
otherout_http: Use x-ndjson content type for json_lines
breakingengine_dispatch: remove chunks from memory if the task fails to be created
otherrelease: update to 3.0.2
otherin_forward: Handle multiply concatenated gzip payloads
otherwamrc: build: macos: Prioritize for defined LLVM_DIR environment variable
otherlib: upgrade core libraries
featureout_websocket: Add ability to provide additional headers
otherinput_chunk: handle some chunk size debug messages as traces
fixinput_metric: fixed a double free
otherlib: cmetrics: upgrade to v0.7.3
otherout_loki: Change loglevel for non-existing but defined label in record
otherin_tail: Preventing incorrect inode usage from db. #8025
othertask: on retry, only put chunk down if there are no users (fix #8691)
fixfix Oracle Log Analytics output plugin 400 Bad Request issue
featureAdd support to set otel fields from the event body based on keys. Sig…
fixconfig: fix compilation with FLB_HAVE_STATIC_CONF.
othertest: internal: log: fix failures caused by timing issue.
fixin_opentelemetry: fixed the uris used to detect gRPC requests
fixin_kubernetes_filter: add namespace_metadata_only option to fix regression from #8279
featureUpdate cmetrics_decode_fuzz.c: Add missing include
otherin_winevtlog: Make configurable for the size of collecting threshold per a cycle
otherin_http: reassign mk_http_request values on realloc.
otherlib: sqlite: upgrade to v3.45.2
fixin_emitter: Fix single record chunks and respect mem_buf_limit pause
otherrelease: update to 3.0.1
othertests: runtime: processor_content_modifier: add test cases for convert
otherin_tail: skip_empty_line supports CRLF line
fixprocessor_sql: general fixes for conditional expressions
featureworkflows: windows: Add chain workflow for windows unit testing
featurehttp_server: added parser reset code to prevent use after free
otherlib: cmetrics: upgrade to v0.7.1
otherrelease: update to 2.2.3
otherbuild: Fix release builds with enabled FLB_DEBUG
otherworkflows: bump actions/cache from 3 to 4
fixout_forward: fix memory leak during connection loss
otherin_calyptia_fleet: general fixes from #8371
fixengine: fix several file descriptor leaks.
featurewasm: restore support for some targets
featureout_stackdriver: add k8s_cluster resource type
featureworkflows: update for new 2.2 branch/3.x master
otherworkflows: bump frabert/replace-string-action from 2.4 to 2.5
otherworkflows: bump peter-evans/dockerhub-description from 3 to 4
otherworkflows: bump vlaurin/action-ghcr-prune from 0.5.0 to 0.6.0
featureinput_chunk: added proper accounting of chunks that are rolled over
otherworkflows: bump peter-evans/create-pull-request from 5 to 6
otherworkflows: windows: Use concrete option on Invoke-WebRequest
otherworkflows: bump hmarr/debug-action from 2 to 3
otherdockerfile: windows: Link OpenSSL libraries correctly
otherworkflows: bump helm/kind-action from 1.8.0 to 1.9.0
fixout_stackdriver: fix bug in k8s_pod process_local_resource_id
otherout_stackdriver: print tag with api error message
otherout_opentelemetry: enhancements for log body and attributes handling (fix #8359)
othermotd: v3
otherlib: cmetrics: upgrade to v0.7.0
otherout_cloudwatch_logs: Support EMF format for metrics type of events
featuremp: new API to convert between msgpack and CFL object
fixin_head: fix buffer length for split_line
featurefilter_kubernetes: add kubernetes_namespace metadata
featureAdds support for Content-Encoding: gzip to in_http
featureprocessor: new enhancements, API changes and new processor
fixnetwork: utils: Fix int conversion errors
fixprocessor_content_modifier: fix cb_processor_logs callback arguments type
featurein_forward: Implement handshake protocol
featurenetwork: add port sharing feature
featureprocessor: Implement native processor metrics_selector
featurein_tcp: Add a capability to inject source IP
fixcustom_calyptia: fix using after freed memory(#8530)
featurehttp_client: Add Ability to Process Http Chunked Stream
featurefilter_nest: define a new var to prevent pointer arithmetic
breakingprocessor_sql: Remove a needless yywrap definition
breakinghttp_server: removed deprecated code and added window update handling
+16 more items in the release notes