Fluent Bit 3.0.5 → 5.1.2
65 releases · 20 breaking changes · 12 security fixes · 0 advisories fixed
12security20breaking1deprecated248feature256fix
Breaking changes
- breaking CODEOWNERS: remove @braydonk and @jefferbrecht in 5.0.7
- breaking out_logdna: remove promoted known keys in 5.0.5
- breaking out_logdna: remove promoted known keys [Backport to 4.2] in 4.2.5
- breaking github: workflows: remove trivy cron workflow in 4.2.4
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space in 4.2.1
- breaking dockerfile: removed unused DLLs from image for Windows Containers in 4.2.0
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] in 4.1.2
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0] in 4.0.14
- breaking opentelemetry: remove enforcement of timestamp fields for logs (backport v4.0) in 4.0.9
- breaking input: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0] in 4.0.6
- breaking in_node_exporter: removed unnecessary optimization that caused crash in 4.0.3
- breaking packaging: remove older Ubuntu targets from smoke test in 4.0.2
- breaking workflows: remove qemu usage in 4.0.0
- breaking workflows: remove invalid sync directory in 4.0.0
- breaking workflows: remove qemu usage in 3.2.6
- breaking workflows: remove s390x and armv7 platforms for container builds in 3.2.5
- breaking tls: removed alpn selector requirement in 3.2.1
- breaking output: Remove a needless calling of flb_output_instance_destroy() (CID 507809) in 3.1.7
- breaking workflows: remove AppVeyor from release workflow in 3.1.0
- breaking out_splunk: remove raw endpoint in 3.1.0
Security changes
- security security: update policy for 5.0 and EOL 4.1 in 5.0.6
- security maintenance: update branch and security EOL info in 4.2.3
- security security: Update supporting timeline in 4.2.2
- security security: update versions and general info in 4.2.0
- security out_file: sanitize incoming Tag to prevent path traversal in 4.1.1
- security out_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0] in 4.0.12
- security security: update policy for 4.0 release series in 4.0.2
- security security update: CVE-2024-50608 and CVE-2024-50609 in 4.0.0
- security security update: CVE-2024-50608 and CVE-2024-50609 (v3.2) in 3.2.7
- security security: supported versions now are 3.1.x and 3.2.x in 3.2.1
- security tls: macos load system certificates using security framework. in 3.2.0
- security lib: nghttp2: backport upstream security fix in 3.1.0
Deprecations
- deprecated workflows: deprecate windows-2019 in 4.0.4
Every release in between
otherworkflows: bump docker/setup-buildx-action from 4.2.0 to 4.3.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.1 to 1.73.2
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
otherworkflows: bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
featurein_node_exporter_metrics: Implement stat and thermal_zone for macOS
featureout_prometheus_remote_write: Add 1-hour cut-off for expiring staled metrics
featureout_splunk: add time_key support for the HEC event time
otherDockerfile: optimize layers
fixconfig: fix startup abort when log_level set via env and config
othertests: runtime: Plug a SEGV occurrence on macOS
featureout_gcs: add unify_tag option to buffer all tags into one file
otherlog: clamp the suppression length to what was written
featureout_gcs: implement parquet compressions
otherout_gcs: support application default credentials
fixin_winevtlog: Plug a crash path
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled
otherlog: make consistency for suppress log feature
otheres: opensearch: output: task: handle partial succeeded requests
othertests: runtime: Fix errors of incompatible types for in_ebpf tests
featurefilter_kubernetes: implement namespace exclude
otherin_systemd: support capturing with namespace
otherrelease: update to 5.1.2
otherworkflows: bump softprops/action-gh-release from 3.0.2 to 3.0.3
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
otherlib: cmetrics: update to v2.2.2
otherinput_chunk: input_log: in_storage_backlog: address underflowing / overflowing chunk limit size
otherout_azure_blob: Plug dangling pointers on exceptions
otherout_azure_kusto: stop logging federated and access tokens
featureout_gcs: add Workload Identity Federation support
otherwamrc: Build with LLVM-17
otherreload: preserve configuration path during hot reload
otherout_s3: Clean up orphaned chunks
otherconfig: config_format: address wrongly specified parameter on service section
otheraws: compression: validate valid columnar formats
featuremultiline: add built-in json parser for JSON multiline objects
otherengine: Plug a race on starting engine
othertests: integration: Adjust allocation patterns for Ubuntu 26.04
otherworkflows: bump helm/kind-action from 1.14.0 to 1.15.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.2 to 1.73.3
+10 more items in the release notesotherpackaging: improve package index tree URLs for release listing
fixin_storage_backlog: Fix persistent chunks issues without matching routes on hot reloading
otherworkflows: bump ossf/scorecard-action from 2.4.3 to 2.4.4
otherworkflows: bump actions/stale from 10.4.0 to 11.0.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4
otherworkflows: bump actions/checkout from 7.0.0 to 7.0.1
otherworkflows: bump reviewdog/action-shellcheck from 1.32.0 to 1.32.1
otherworkflows: bump reviewdog/action-actionlint from 1.73.0 to 1.73.1
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.6
otherdownstream: invalidate TLS session before socket close
otherout_s3: Address underflow of buffer size on startup
othercompat: Ensure alignment of reading dword width
otherengine_dispatch: Address stale failed tasks on dispatch
fixin_node_exporter_metrics: fix incorrect pointer arithmetic in diskstats metric cache
otherinput_chunk: in_storage_backlog: Display evicted logs on dropping chunks
fixutils: fix SIMD boundary for JSON string encoding
otherstream_processor: sp_stream: Plug unfreed allocated memories on exceptions
featureout_logdna: add hostname as primary field and runtime tests
othermaintenance: update v5.1 stable status
othermotd: v5.1
otherrelease: update to 5.1.1
otherout_file: support timestamp placeholder
featureout_splunk: Add auto_extract_timestamp parameter
othertests: core_routes: Handle limit of rlimit's soft limit
featureplugin_proxy: add config map to the plugin registration
fixinput_chunk: fix storage limit eviction with 32 or more outputs
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherbuild: bump to v5.1 (dev)
otherskills: Extract skills from memory
otherin_opentelemetry: return not found for invalid endpoint
otherworkflows: bump actions/stale from 10.3.0 to 10.4.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
othertls: openssl: don't recycle a connection after peer close_notify
otherin_winevtlog: Enrich EventData key-value map if enabled
otherlib: cmetrics: upgrade to v2.2.0
fixthread_storage: Fix incorrectly to detect C TLS existence
fixin_forward: fix stale byte accounting when multiple frames share a buffer
otherlib: cfl: upgrade to v1.0.0
otheropentelemetry: reduce protobuf log allocation churn
otherin_gpu_metrics: Handle NVIDIA GPU metrics via NVML
otherlog_event_decoder: time: plug 2038 problem on timestamp
featurein_etw: Implement event tracing for windows input plugin
othertests: runtime: plugins: Enable to build and run runtime testcases on windows
otherlib: cmetrics: upgrade to v2.2.1
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths
featureout_s3: add format=parquet,arrow with selectable page compression codecs
featureconfig: engine: Implement adaptive flushing
featureout_gcs: Implement Google Cloud Storage(gcs) plugin
featurein_node_exporter_metrics: implement additional metrics (filesystem, EXT_* metrics, powersupplyclass) on node exporter metrics
featuredownstream: add coroutine-based event dispatch
featurein_podman_metrics: add per-container disk I/O metrics
fixin_process_exporter_metrics: Fix the reported RSS ram
featureconfig: fips: bin: Initial implementation to enable FIPS compliance
fixin_node_exporter_metrics: fix netstat file reads
featurein_tail: add Windows UTF-8 path encoding mode
featureout_kafka: Implement resolving registry of avro schema
fixout_s3: fix prefix match in log_key extraction
featurepackaging: add packages index generator and release CI
featureout_es: sds: Implement es upstream with sds view
featureout_file: add logs rotation feature
featurein_node_exporter_metrics: add timex linux collector
featuredockerignore: Add an entry not to collide type definition on package creations
featuremetrics: extend support for Tag metrics
featureinput: add pause/resume callbacks
fixoauth2: fix request body ownership on allocation failure
fixin_kubernetes_events: fix unsafe MessagePack field parsing
+58 more items in the release notesotherrelease: update to 5.0.11
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled [Backport to 5.0]
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10 [Backport to 5.0]
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly [Backport to 5.0]
othergithub: workflows: Use cmake 4.2 and minimum policy [Backport to 5.0]
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherrelease: update to 5.0.10
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths [Backport to 5.0]
othergithub: workflows: Enable unit testing on 5.0 branch [Backport to 5.0]
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 5.0]
othertls: yield downstream read retries to the event loop [Backport to 5.0]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 5.0]
othertls: openssl: preserve syscall error details (5.0)
othergithub: workflows: Update release workflow for 5.1 development cycle [Backport to 5.0]
otherbackport: apply selected maintenance fixes to 5.0
otherworkflows: bump azure/setup-helm from 5.0.0 to 5.0.1
otherworkflows: bump actions/setup-python from 6.2.0 to 6.3.0
otherworkflows: bump actions/cache from 5.0.5 to 6.0.0
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches
otherworkflows: bump actions/cache/restore from 6.0.0 to 6.1.0
otherworkflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0
otherworkflows: bump actions/cache/save from 6.0.0 to 6.1.0
otherrelease: update to 5.0.9
featurein_windows_exporter_metrics: Implement user-defined performance counters w/ PDH
othertests: runtime: Try to address test hang
otherworkflows: bump docker/build-push-action from 7.2.0 to 7.3.0
otherworkflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0
otherin_forward: validate PING is a msgpack array in check_ping
otherfilter_kubernetes: Attach k8s metadata for internal logs
featurein_ebpf: Implement openssl trace
othertests: runtime: Use more concrete matchers for assertions
otherin_tail: Another attempt to plug segv on in tail
otherfilter_write_tag: in_emitter: Mitigate data loss on multiline
otherworkflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0
otherworkflows: bump docker/login-action from 4.2.0 to 4.3.0
otherworkflows: bump docker/metadata-action from 6.1.0 to 6.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
otherout_cloudwatch_logs: Plug SEGV on not found error
otherlib: librdkafka: Upgrade to v2.15.0
otherin_ebpf: Generate mostly monotonic event id for increasing traceability
otherin_splunk: return Splunk HEC auth status codes
otherout_forward: align secure forward handshake and chunk ack with protocol spec
fixout_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV)
fixout_stackdriver: fix payload parsing over-reads and null safety
othercodeowners: update @jeffluoo to @JeffLuoo
othergzip: skip FCOMMENT terminator in streaming decompressor
fixin_forward: fix 100% CPU hang and connection teardown use-after-free
otherbuild fixes: out_stackdriver int64_t line var, gzip endian-safe magic check
otherrelease: update to 5.0.8
othergithub: workflows: Adjust permissions to make efficient package/integration tests
othergithub: workflows: Specify OS configs explicitly
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses
fixregex: Plug a regex literal crash
otherout_forward: process type and length of pong strictly
otherunicode: Use the correct maximum size of Cyrillic
otheropentelemetry: render unset AnyValue in OTLP JSON
fixstorage: fix stale chunks handling on limits
otherworkflows: bump actions/checkout from 6.0.3 to 7.0.0
featurein_ebpf: Implement sched trace
otherin_tail: Plug timer lifecycle glitches on progress check
otherin_winevtlog: Handle structured xml query as separated subscriptions
otheraws: error_reporter: Plug SEGV occurrences on cloudwatch logs
fixin_tail: fix out-of-bounds read in unesc_ends_with_nl
fixconfig_format: fix caller-owned parse failure cleanup
otherworkflows: bump softprops/action-gh-release from 3.0.0 to 3.0.1
otherworkflows: bump github/codeql-action from 4.36.1 to 4.36.2
otherscheduler: Plug FD leaks on destroy
otherdockefile: Install libxxhash0 on builder image
otherworkflows: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
otherworkflows: bump reviewdog/action-hadolint from 1.50.5 to 1.51.0
otherout_loki: Handle loki tenant_id_key properly
otherout_cloudwatch_logs: Ensure escaping backslashes on cloudwatch API requests' body
othertests: runtime: Try to eliminate flakyness on CI load
fixin_tail: fix ignore_active_older_files to re-check mtime on aged-out files
otheraws: catch auth errors on XML responses
otherout_azure_blob: correctly handle successful Delete Blob responses
featurenode_exporter_metrics: Add file path to error messages
otherout_es/out_opensearch: sanitize bulk action metadata
fixopentelemetry: fix JSON histogram bounds handling
otherlib: cmetrics: upgrade to v2.1.5
otherrelease: update to 5.0.7
otherhttp_server: serialize worker teardown to prevent race conditions
fixhttp_server: fix libevent crash on connection drop
otherout_chronicle: Support label and namespace mapping
othertests: internal: fuzzers: avoid destroying active input fuzzer tasks
fixconfig_format: fix YAML variant cleanup on parser errors
otheravro: Handle int64 values correctly
othertests: runtime: Stabilize out_lib test case
otherin_elasticsearch: check map size before accessing first entry
fixsnappy: fix OOB reads in framed data parser
featurezstd: add 100 MB decompression size limit
fixin_mqtt: fix OOB read from hardcoded remaining length overhead
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB
otherin_forward: validate array size before accessing message mode fields
fixin_syslog: fix integer overflow in octet-counting length parser
fixout_stackdriver: fix multiple memory leaks and potential corruption
breakingCODEOWNERS: remove @braydonk and @jefferbrecht
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo
otherstorage: discard checksum corrupt chunks on startup
featureparser: Add IANA time_zone support for native timestamps
otherworkflows: pin all actions to SHA
otherout_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB
otherin_stdin: support stdin plugin on windows
featurein_ebpf: Implement dns trace
otherout_s3: Provide options for inactive chunks behavior
featureoauth: out_http: add user-agent option for oauth
fixin_tail: fix offset_key value multiplied by 8 on Windows 64-bit
otherhttp_client_http2: bracket IPv6 authority hosts
otherrelease: update to 5.0.6
featureenv: add bash-style default value operator :-
otherlib: cfl: upgrade to v0.7.1
otherout_kafka: partition OTLP logs by resource
fixsds: general fixes for sds_cat() usage
otherin_forward: handle unpacker allocation failure
othertests: prevent port binding failures in concurrent OTEL tests
otherengine: ignore duplicate STOP to prevent shutdown spin
otherout_azure_logs_ingestion: Plug SEGV on termination
featurepackaging: add support for Ubuntu 26.04
featureconfig: storage: Add total limit size of DLQ
otherhttp_server: harden listener and architecture
othertests: runtime: wait for tail truncate output
fixin_tail: fix file append cleanup on failure
otherin_tail: reconcile files after missed inotify events
othergithub: workflows: Restore ok-package-test trigger behavior
securitysecurity: update policy for 5.0 and EOL 4.1
fixsds: fix handling of cfl_sds return buffers after cfl upgrade
othertls: omit SNI for IP literal hosts
otherhttp_server: spawn internal server in threaded mode
otherin_node_exporter_metrics: Skip ipv6 metrics collection when disabled
breakingout_logdna: remove promoted known keys
featurein_ebpf: Implement exec trace
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak
featureaws: update support for additional regions
otherfilter_kubernetes: make memory growth rigidly on filter k8s
otherout_s3: Handle otlp JSON format
otherfilter_log_to_metrics: retry timer metric append
fixcrypto: fix build with OPENSSL_NO_ENGINE
otherscripts: enable working runtime tests
otheropentelemetry: preserve otlp log resource grouping
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit
fixout_forward: fix retain_metadata_in_forward_mode default value (true)
otherrelease: update to 5.0.5
otherlib: cmetrics: upgrade to v2.1.3
fixinput: fix threaded input conditional routing for logs
otherout_influxdb: plug tag keys failure on out influxdb
fixrouting: fix issue with missing input alias
otherrelease: update to 5.0.4
othertests: http_client_chunked: Plug SEGV occurence on macOS
featurein_http: add new /health endpoint
fixout_loki: fix 'occured' -> 'occurred' in comment
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size
fixin_dummy: Use pre_run callback to fix crash path
otherin_tail: drop redundant fstat() on event collection
otherml: ensure context is registered for REGEX type
otherin_forward: handle retain metadata in upstream conf
otherin_tcp: in_udp: Enhance of parser capabilities
otherhttp_client: Restore behavior for dummy http client
othertests: integration: introduce in-tree integration test suite
otherparser: Address wrong assignments of timezone at midnight
otherrelease: update to 5.0.3
otherworkflows: Unify steps of downloading built macOS packages
fixrecord accessor: fix CFL root-key matching and container translation
featureenv: add new extended format to handle environment variables
fixout_s3: fix retry_limit semantics and multipart upload memory leaks
otherlib: cmetrics: upgrade to v2.1.2
otherin_tail: harden db offset restore across restart
otheroauth2: restore legacy context creation behavior
othernetwork: Handle baraketed ipv6 addresses
fixin_opentelemetry: fix tag routing issue
featurehttp_server: add settings for ingress queue
otherout_syslog: address invalid configurations on in syslog
fixinput_thread: replace raw read() with pipe abstraction to fix crash
otherworkflows: Windows docker insufficient disk space fix
otherhttp_client: enhance parser in timeouts and protocol parsing
featurein_ebpf: add tcp trace
otherrelease: update to 5.0.2
otherbuild: Detect version bump to permit "release: " prefix
otheraws: compression: arrow: Set up proper block size
fixdockerfiles: windows: fixed VS Build Tools installation
featureout_azure_blob: add path templating support comparable to s3
otheroauth2: harden token refresh parsing
fixout_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing
featurein_ebpf: Add vfs trace
featureagents: add initial AGENTS.md
othermoth: update banner to v5.0
othertests: runtime: Mark another port 4318 raced test case
othertests: CI test stabilization
otherworkflows: ensure 5.0 releases are handled
featureopentelemetry: add OTLP JSON and OTLP Proto helpers
otherrelease: update to 4.2.8
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]
fixout_stackdriver: fix payload parsing over-reads and null safety [Backport to 4.2]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 4.2]
otherrelease: update to 4.2.7
otherreleasse: Update version to v4.2.7 [4.2 branch]
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2]
otherlib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2]
otherin_forward: validate PING is a msgpack array in check_ping [Backport to 4.2]
otherout_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2]
othergzip: read magic number endian-safely in streaming decompressor [Backport to 4.2]
fixin_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2]
otherin_splunk: return Splunk HEC auth status codes [Backport to 4.2]
otherrelease: update to 4.2.6
otherworkflows: Windows docker insufficient disk space fix [Backport to 4.2]
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2]
fixout_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2]
featureparser: Add IANA time_zone support for native timestamps [Backport to 4.2]
otheroauth2: harden token refresh parsing [Backport to 4.2]
fixdockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2]
otherworkflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2]
otherout_stackdriver: backport codeowners change
othergithub: workflows: Process unit tests on 4.2 branch [Backport to 4.2]
othergithub: workflows: Specify OS configs explicitly [Backport to 4.2]
fixregex: Plug a regex literal crash [Backport to 4.2]
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2]
otherunicode: Use the correct maximum size of Cyrillic [Backport to 4.2]
otherout_forward: process type and length of pong strictly [Backport to 4.2]
featurenode_exporter_metrics: Add file path to error messages [Backport to 4.2]
otherout_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2]
othertests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2]
otherscheduler: Plug FD leaks on destroy [Backport to 4.2]
otherrelease: update to 4.2.5
featurepackaging: add support for Ubuntu 26.04 (backport to 4.2)
featurebackport: env: add bash-style default value operator :-
otherout_chronicle: Support label and namespace mapping [Backport to 4.2]
fixinput_thread: replace raw read() with pipe abstraction to fix crash [Backport to 4.2]
otheraws: compression: arrow: Set up proper block size [Backport to 4.2]
othernetwork: Handle braketed ipv6 addresses [backport to 4.2]
otherparser: Address wrong assignments of timezone at midnight [Backport to 4.2]
fixrouting: fix issue with missing input alias [Backport to 4.2]
otherout_influxdb: plug tag keys failure on out influxdb [Backport to 4.2]
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size [Backport to 4.2]
otherfilter_kubernetes: don't recycle connections in fetch_pod_service_map [Backport to 4.2]
fixin_tail: fix file append cleanup on failure [Backport to 4.2]
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak [Backport to 4.2]
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit [Backport to 4.2]
otherengine: ignore duplicate STOP to prevent shutdown spin [Backport to 4.2]
fixin_dummy: Use pre_run callback to fix crash path [Backport to 4.2]
breakingout_logdna: remove promoted known keys [Backport to 4.2]
fixcrypto: fix build with OPENSSL_NO_ENGINE [Backport to 4.2]
otherout_azure_logs_ingestion: Plug SEGV on termination [Backport to 4.2]
otherin_forward: handle unpacker allocation failure [Backport to 4.2]
othertests: runtime: wait for tail truncate output [Backport to 4.2]
otheravro: Handle int64 values correctly [Backport to 4.2]
fixmp: fixed count when empty data
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB [Backport to 4.2]
otherin_forward: validate array size before accessing message mode fields [Backport to 4.2]
fixin_syslog: fix integer overflow in octet-counting length parser [Backport to 4.2]
fixin_mqtt: fix OOB read from hardcoded remaining length overhead [Backport to 4.2]
otherzstd: cap buffer at max instead of aborting on overshoot [Backport to 4.2]
othersnappy: read frame length as 3 bytes to avoid OOB at boundary [Backport to 4.2]
otherin_elasticsearch: check map size before accessing first entry [Backport to 4.2]
otherdockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2]
fixfilter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2]
othermultiline: ml: Propagate metadata even if on exceptions [Backport to 4.2]
otherfilter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2]
otherworkflows: Suppress invalid glob patterns [Backport to 4.2]
fixprocessor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2]
otherhttp_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2]
breakinggithub: workflows: remove trivy cron workflow
fixavro: out_kafka: Fix specification errors in avro format [Backport to 4.2]
otherlib: monkey: upgrade to v1.8.8
otherengine: use effective post-processor counts for output metrics (v4.2)
otherrelease: Update to v4.2.4
otherrelease: update to 4.2.3
othercopyright: update year to 2026
fixfilter_kubernetes: fix parser annotation leak
othergithub: scripts: commit_linter: Handle bin prefix for fluent-bit.c
otherbin: Handle CONT signal properly under leaks command
otherfilter_wasm: Handle group metadata
fixcmake: kafka: fix OAuth Bearer detection on Windows
securitymaintenance: update branch and security EOL info
featuregithub: scripts: commit_prefix_check: add config format rules on linter
otherreadme: update active branch 4.2
otherout_opentelemetry: on HTTP/2, read and process gRPC status code
otherconfig_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2]
fixfilter_log_to_metrics: fix initialization and exception cleanup
otherout_stackdriver: clean up oauth2 cache lifecycle
otherfilter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport]
featurein_winevtlog: Add text format for event rendering [Backport to 4.2]
featurein_tail: Add skipped_lines counter [Backport to 4.2]
featurein_splunk: Implement handling remote addr feature [Backport to 4.2]
otheraws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport]
otherplugin_proxy: enable event_type specification for proxy plugins (4.2 Backport)
otherin_splunk: Plug memory issues [Backport to 4.2]
otherpackaging: script: Use rockylinux prefix on package testing script
otherrelease: update to 4.2.2
securitysecurity: Update supporting timeline
otherout_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests
featureaws: Implement simple_aggregation operation
otherout_kinesis_firehose: enable HTTP debugging for AWS client requests
featurehttp_client: add ipv6 bracket if missing from host address
otherlib: updates 20251223
otherrelease: update to 4.2.1
otherworkflows: Not to make latest on publishing 4.1 series on GitHub Relases
fixin_forward: fix connection release on pause memory corruption
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space
otherworkflows: bump actions/checkout from 5 to 6
featurein_opentelemetry: added five missing configuration option descriptions. Fixes #11191.
featureout_s3: implement retry_limit parameter
featurein_blob: added missing configuration descriptions. Fixes #11204.
featuretls: openssl: Implement flexible certstore loading on Windows
featurein_kubernetes_events: add support for configuring input upstream network setup
featureworkflows: add new commit linter tool
otherworkflows: bump actions/checkout from 4 to 6
otherworkflows: bump actions/setup-python from 5 to 6
otherdockerfile: Docker image to support large page sizes
otherdockerfile: update to Debian Trixie
otherin_elasticsearch: fixing missing config parameter description for http2. Fixes #11221.
fixin_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #11232.
otherin_forward: improve configuration parameter descriptions
othergithub: commit_linter: Make more flexibility for commit linter
otherbuild: prevent the toolchain from emitting an executable stack
fixin_forward: fix segfault and double-free in trace path handling
otherin_node_exporter_metrics: Increase buffer size to read /proc/stat correctly
featurein_http: added missing config parameter descriptions.
otherworkflows: bump peter-evans/create-pull-request from 7 to 8
fixout_flowcounter: Fix incorrect bytes calcuation
otherworkflows: bump actions/cache from 4 to 5
otherworkflows: bump actions/download-artifact from 6 to 7
otherworkflows: bump actions/upload-artifact from 5 to 6
othergithub: workflows: Clean up needless resources on GHA workers
featurein_ebpf: add three missing config option descriptions. Fixes #11221.
otherin_gpu_metrics: updated config parameters descriptions.
otherbuild: Tweak linker flags for zstd
otherin_winevtlog: Plug glitches of time offset for DST/STD switches
otherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
otherworkflows: Make not to be the latest release for 4.0 branch
otherbuild: bump to v4.2.0
securitysecurity: update versions and general info
featurehelp: add space for outputs and processors when generating schema.
otheropentelemetry: traces: unify JSON to ctrace encoder
featurerouting: add new routing mechanism for input plugins
othermp: extend cobj API to expose group metadata and attributes
featurein_node_exporter_metrics: add netstat linux collector
otherfstore: safe check on fsf file deletion
otherworkflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch
featurerouter: add conditional support for Logs
fixaws_credential_sts: internal: Fix unit test failures
otherworkflows: bump actions/upload-artifact from 4 to 5
otherworkflows: bump actions/download-artifact from 5 to 6
fixrouter_condition: Fix unconditional route check in routing
featureout_vivo_exporter: add versioned API endpoints
featurerouter: add contexts to conditional support for direct route paths
othersnap: Upgrade snap from core18 to core20
featuredoc-reports: add cncf audit report
otherchunks: extend metadata to support routing information (direct routes)
otherworkflows: bump helm/kind-action from 1.12.0 to 1.13.0
breakingdockerfile: removed unused DLLs from image for Windows Containers
fixkafka: fix cmake cross compile error
featurein_syslog: Add support for RFC 6587 octet-counting
featureout_s3: Add a NULL check for plugging SEGV on dry_run
featurepackaging: add missing SASL dependencies for Rocky/AlmaLinux
fixfix: Make TLS initialization thread-safe and idempotent using pthread_once
featuremotd: add 4.2 banner
featureout_http: Added PUT support
featurerouting: introduce metrics for unmatched (dropped) logs
featurein_tail: Implement long line truncation
featurepackaging: add -L flag to curl for redirect support
featurestorage: config: engine: Introduce dead letter queue
featureworkflows: staging-release: add v4.2
+13 more items in the release notesotherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
featurehelp: add space for outputs and processors when generating schema. [Backport to 4.1]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherfstore: safe check on fsf file deletion [Backport to 4.1]
otherwasm: Plug wasm heap leakages [Backport to 4.1]
featureout_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1]
fixin_forward: fix connection release on pause memory corruption [backport to 4.1]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.1]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.1]
otherrelease: update to 4.1.1
featureworkflows: windows: Add a testing flow with using ARM64 Windows runner
otherscripts: Handle two or more digits for patch version
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter
otherin_splunk: return correct error response for http/1 handler.
otherworkflows: bump ossf/scorecard-action from 2.4.2 to 2.4.3
featureopentelemetry: allow empty strings for TraceID and SpanID (logs)
otherworkflows: bump peter-evans/dockerhub-description from 4 to 5
featureworkflows: add sanity check for toolchains w/ CXX support
featurein_winevtlog: Implement trying to reconnect on cancel mechanism
otherreload: refactor watchdog to be preemptable on windows.
otherdocs: fix broken links
featurein_docker: add helper for container name parsing
featureout_opentelemetry: add configurable log resource limits
otherout_opentelemetry: no longer reallocates the http2 setting string
fixin_http: fix handling of URL encoded value
securityout_file: sanitize incoming Tag to prevent path traversal
otherrouter: use memchr() and tag length for matching tags
fixin_forward: Fix user authentication to align Fluentd's behavior
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup
otherin_calyptia_fleet: load configuration on initial startup.
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list.
otherworkflows: bump github/codeql-action from 3 to 4
fixout_es: fix elasticsearch output api key usage
otherrelease: Update version to 4.0.14
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list (backport of #10943).
featurehelp: add space for outputs and processors when generating schema.
fixin_tail: fix last_processed_bytes calculation [Backport to 4.0]
otherfstore: safe check on fsf file deletion [Backport to 4.0]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherwasm: Plug wasm heap leakages [Backport to 4.0]
fixin_forward: fix connection release on pause memory corruption [Backport to 4.0]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.0]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.0]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.0]
otherin_winevtlog: Plug glitches of time offset for DST/STD switches [Backport to 4.0]
otherrelease: Update version to v4.0.13
otherin_calyptia_fleet: load configuration on initial startup (backport #10996 to 4.0).
fixstorage: fix heap corruption in chunk sort parser [Backport to 4.0]
fixin_forward: Fix of handshaking on forward protocol [Backport to 4.0]
otherrelease: Update to v4.0.12
fixin_splunk: fix the invalid data format response when submitting valid data.
featureopentelemetry: allow empty strings for TraceID and SpanID (logs) [Backport to 4.0]
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter [Backport to 4.0]
otherout_opentelemetry: no longer reallocates the http2 setting string [Backport to 4.0]
fixlog_to_metrics: fix improper handling of record accessor context [Backport to 4.0]
featureout_opentelemetry: add configurable log resource limits [Backport to 4.0]
fixin_http: fix handling of URL encoded value [Backport to 4.0]
securityout_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0]
featurein_docker: add helper for container name parsing [Backport to 4.0]
featurereload: add a timeout mechanism and its based commits backporting [Backport to 4.0]
fixin_forward: Fix user authentication to align Fluentd's behavior [Backport to 4.0]
otherrouter: use memchr() and tag length for matching tags [Backport to 4.0]
otherreload: refactor watchdog to be preemptable on windows. [Backport to 4.0]
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup [Backport to 4.0]
otherrelease: Update version 4.0 [4.0 branch]
otherpackaging: support Alma/Rocky/CentOS 10 plus Debian Trixie/13 [Backport to 4.0]
otherinput: private plugins must use global event loop [Backport to 4.0]
fixtls: fix regression and proper shutdown [Backport to 4.0]
otherrelease: Update version to v4.0.10
fixin_splunk: fix the response when receiving empty payload - backport of 10800
featurein_event_type: implement pause/resume to stop timed collector.
otherworkflows: Install NSIS via chocolatey [Backport to 4.0]
otherin_winevtlog: Plug possible SEGV occurrence paths [Backport to 4.0]
otherlib: updates for cmetrics and monkey (v4.0 backport)
otherutils: relax proxy URL parsing
otherupstream: Move clearing TLS session from prepare phase to destroy phase [Backport to 4.0]
fixin_storage_backlog: fix use-after-free when segregating chunk [Backport to 4.0]
otherrelease: update to 4.0.9
fixin_tail: fix memory leak when using generic unicode conversion (backport #10781)
othercmake: explicitly disable FLB_UNICODE_ENCODER when FLB_USE_SIMDUTF is disabled. [Backport to 4.0]
otherpipe: Specify linger option for flb_pipes which is build on top of socketpairs on Windows [Backport to 4.0]
othercmake: backport #10778 and #10786 to 4.0.
fixengine: fix busy chunks on reload. [Backpoprt to 4.0]
breakingopentelemetry: remove enforcement of timestamp fields for logs (backport v4.0)
featurehttp_client: add response and read idle timeouts (backport v4.0)
fixhttp_client: fix incomplete error handling in flb_http_do() (backport v4.0)
fixopentelemetry: fix handling of numeric attributes (backport v4.0)
featuredownstream: implement pause and resume functionality [Backport to 4.0]
fixnetwork: fix strerror_r detection for musl [Backport to 4.0]
fixengine: fix endless loop on reload [backport to 4.0]
otherrelease: update to 4.0.8
otherinput_metrics: discard cmetrics with no series (backport v4.0)
featurein_node_exporter_metrics: add Linux sockstat collector (backport v4.0)
featurein_node_exporter_metrics: add Linux hwmon collector (backport v4.0)
fixpack: fix token count regression in JSON tokenizer and remove parser reset (backport 4.0)
otherin_kafka: improve offset commit timing to avoid data loss in edge cases (backport v4.0)
featurein_node_exporter_metrics: add new option 'path.rootfs' (backport v4.0)
featureout_azure_kusto: Added workload identity support (backport v4.0)
otherout_datadog: task_arn now correctly mapped to full arn (backport v4.0)
featureout_cloudwatch: add entity support and remove unnecessary log content (backport v4.0)
featureout_kinesis_firehose: introduce port parameter (backport v4.0)
otherdockerfiles: windows: update to ltsc 2025 and fix layers
featureout_es: add apikey to available auth types
otherlib: chunkio: update to 98988d25
otherin_calyptia_fleet: fleet config fetch ignores older-timestamped files
fixopentelemetry: logs: fix packaging length for trace_id and span_id (backport 4.0)
otherworkflows: Retrieve the actual target image with tag [Backport to 4.0]
featureworkflows: Add sudo for a cleanup step
otherrelease: update to 4.0.7
otherin_windows_exporter_metrics: Handle DST more precisely with dynamic timezone verison of functions [Backport to 4.0]
fixopentelemetry: general fixes for log handling [Backport to 4.0]
otherrelease: Update to 4.0.6 [4.0]
fixout_chronicle: Fix log_key detection mechanism [Backport 4.0]
otherfilter_aws: send entity attributes for telemetry association [Backport 4.0]
otherin_winevtlog: Handle Daylight saving time by using newer functions [Backport to 4.0]
otherin_windows_exporter_metrics: Follow windows_exporter prom names correctly and support connection_state metrics [Backport to 4.0]
otherlib: cmetrics: upgrade to v1.0.5 [Backport to 4.0]
featureoutput: add Histogram Metric for end-to-end chunk latency [Backport to 4.0]
breakinginput: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0]
featurein_nginx_exporter_metrics: add scrape_interval option (default: 5s) [Backport to 4.0]
otherout_kafka: do not release config map properties [Backport to 4.0]
otheropentelemetry: utils: handle NULL type as empty strings [Backport to 4.0]
otherin_opentelemetry: handle NULL body in otlp_pack_any_value (fix #10674) [Backport to 4.0]
featurein_prometheus_textfile: new plugin to read .prom metric files [Backport to 4.0]
otherrelease: update to 4.0.5
fixworkflows: fix windows check for container image
otherout_file: Replace SHCreateDirectoryExA to work for recursive directories correctly
othernetwork: enable EDNS for DNS queries
fixpackaging: fix Debian buster repo issues [backport 4.0]
othertls: openssl: output: configurable certstore name [Backport 4.0]
otherpack: Handle UINT64_MAX value correctly in json packing [Backport 4.0]
otherin_windows_exporter_metrics: Extend metrics [Backport 4.0]
otherin_syslog: do batching to reduce ring buffer pressure under load [v4.0]
otheraws: restore IMDS timeouts after upstream_set in EC2 provider [v4.0]
featureoutput: add new net.proxy_env_ignore option [v4.0]
otherrelease: update to 4.0.4
otherworkflows: bump ossf/scorecard-action from 2.4.1 to 2.4.2
otherinstall: update install script to handle Rocky/Alma repos now
fixhash_table: fix leak in case insensitive and add unit tests
otherio: on network connect exceptions, invalidate file descriptor
featureconfig: implement storage inheritance option
otherlib: luajit: only require a C compiler
otherlog_event_decoder: validate memory allocation
fixfilter_modify: fix leaks on exceptions
fixupstream: fix connection count when net.max_worker_connections is set
featurefilter_lua: add groups metadata and body support
otherlib: lwrb: build it as a static lib instead of an interface
othermultiline: release unpacked contexts on exceptions
fixprocessor_content_modifier: fix leak on JSON conversion and data type
fixout_opentelemetry: fix leaks on exceptions
featurehttp_server: add new API to configure the maximum buffer size
fixin_calyptia_fleet: fix memory leak in get_fleet_id_from_header.
fixout_opentelemetry: fix handling of retry status (fix #10481)
otherin_splunk: continue with the next token if length of auth header vs token doesn't match
featureconfig_format: yaml: add detailed error message on bad format
otherin_calyptia_fleet: report the configuration version.
otherdockerfile: Enable default SIMD support in Docker
featurekafka: add support for AWS MSK IAM authentication
featureupstream: prioritize the reuse of connections instead of establishing new ones
fixprocessor_sampling: fix stale span references in registry
featureunicode: defs: conv: Implement conversion rules of character encodings
fixin_calyptia_fleet: fix init error mem leaks.
featurerecord_accessor: add support for binary values and references
featurenetwork: add new net.backlog property to set somaxconn in the process listeners
fixnetwork: general fixes for failure states
featureopentelemetry: new abstraction to handle OTLP data
fixprocessor_sql: record_accessor: stream_processor: Fix yylex() function signatures
featurefilter_lua: add support to access groups and metadata
fixout_opentelemetry: fix logic for grouping when using resource_id/scope_id
fixdownstream: fix check of accept timeout
fixout_cloudwatch_logs: fix strcasestr _GNU_SOURCE
fixreload: fix handling hot reload when reload failure
featurein_kafka: add enable_auto_commit option for Kafka consumer
fixout_opentelemetry: fix behavior of record attributes handling
deprecatedworkflows: deprecate windows-2019
+16 more items in the release notesfeaturepackaging: add AlmaLinux and RockyLinux builds
breakingin_node_exporter: removed unnecessary optimization that caused crash
fixhttp_client: fix muti part http2 request not working
otherbackport to v.3.2 -- in_tail: make read_from_head after the initial discovery optional
otherwasm: Enable reference types feature on wasm
fixengine: fix segfault in flb_config_init error case
otherin_opentelemetry: Configurable logs_body_key
otherrelease: update to 4.0.3
otherin_winevtlog: Support remote access of winevtlog
otherout_opensearch: Prevent a SIGSEGV when ctx->index is NULL
featurefilter_parser: add record accessor support in parser filter
otherbuild: ci: tune MSVC flags, modify ci caching
otherstrptime: Support some of abbriviated timezone strings for GNU extensions
otherlib: upgrade libraries 20250522
othergo: plugin_proxy: error on plugin initialization errors
fixgzip: fix handling of concatenated payloads
othersimdutf_connector: in_tail: skip UTF-16/UTF-8 BOM
otherlog: expose internal logging call counts as internal metrics
otherin_exec_wasi: change wasm_runtime_call_wasm to wasm_application_execute_main to support latest version of tinygo
featureout_azure_blob: added buffering to azure blob
featureengine: add input grace period and check pending chunks on shutdown
otherin_forward: Check return values from mutex functions
otherlib: miniz: only require a C compiler
featureapi: proxy: custom: Implement APIs for custom Go plugins
fixprocessor_sampling: tail: fix spans reconcile processes
otherout_es: Prevent a SIGSEGV when ctx->index is NULL
otherconfig: error configure_plugins_type on invalid properties
otherbuild: Detect msgpack-c and msgpack-c to be valid msgpack library
fixinput: fixed threaded input processor initialization
featureutils: if flb_utils_write_str uses SIMD, add missing highbit_set check() detection
featureout_azure_kusto: support for otel log schema
othertest: stream_processor: Plug a SEGV for macOS
fixgzip: fix decompressor memset usage
fixin_tcp: fix parsed bytes to include separator length
otherin_http: validate memory allocation and fix object type on tag key
fixout_azure_kusto: fix segfault when log level is debug or trace
otherin_opentelemetry: handle exception on unsupported compress format
fixin_forward: fix handling of connections and memory on exceptions
breakingpackaging: remove older Ubuntu targets from smoke test
otherrelease: update to 4.0.2
othertests: internal: fuzzers: split cmetrics decoding
securitysecurity: update policy for 4.0 release series
fixout_azure_kusto: fixed double free
otherlib: ctraces: upgrade to v0.6.5
otherbuild: use the system provided libmsgpack and libsqlite3 if found
otherbuild: only compile simdutf if there is CXX support
featureengine: added conditional to avoid re-scheduling conflict
featurepack: add support for metadata and group info in JSON log
otherprocessor: fail on startup when invalid processors are configured
othersimd: Use __riscv_vsetvl_eXXm1 function to get the actual width of RVV instructions
fixopentelemetry: fix handling of schemaUrl in resource and scope
fixsystemd: build: fix service startup failure when using IMDSv2
featureinput: add missing options to input_global_properties.
otherbin: config: Provide windows.maxstdio option for increasing I/O limit on Windows
otherlib: update CMetrics and CTraces
otherlib: cmetrics: upgrade to v1.0.2
otherout_splunk: Change attaching priority for HEC token
otherrelease: update to 4.0.1
fixplugin_proxy: fixed memory leak
featureout_azure_kusto: added buffering fixes
featurein_storage_backlog: added missing routing mask initialization
fixconfig: yaml: fix double-free from freeing state before cleanup on exit.
otherci, dockefile: frozen version of CMake
otherdockerfile: Windows Containers image Fluent Bit NMake build
otherinput_chunk: routes_mask is not initialized (#10223)
otherlib: dependency updates
otherpipeline: inputs: podman_metrics: use after free fix
fixout_azure_blob: fixed double free
otherin_tail: make read_from_head after the initial discovery optional
fixin_tail: fix disposal order to prevent use after free
othertests: internal: fuzzers: extend ctrace fuzzer
fixopentelemetry: fix support for schema_url in opentelemetry plugins.
fixout_oracle_log_analytics: fix use-after-free on flush failure
fixmp: fix flb_mp_accessor_keys_remove for sibling keys removal
otherci: CMake upgrade in code analysis script
fixconfig_format: fix SEGV from missing return check
fixconf: parsers: fix istio-envoy-proxy parser regex
featurestackdriver: add cloud_logging_base_url
featurelib: monkey: add missing files
featurereadme: add swym logo to fluentbit_users.png
featurelog: added a new management signal to overcome a dedadlock
breakingworkflows: remove qemu usage
featurein_opentelemetry: add support for OpenTelemetry JSON traces
featurezstd: introduce zstd compression support in Fluent Bit (cleanup)
featurein_opentelemetry: refactor Logs handling and add support for gRPC message compression
featureconditionals: add NOT_REGEX operator to conditional processing
featurein_http: add compression handling support for gzip, snappy and zstd
featureout_http: add zstd and snappy compression
featureCODEOWNERS: add AWS code-owners for AWS-related files
featureconditionals: add GTE and LTE operators
securitysecurity update: CVE-2024-50608 and CVE-2024-50609
featureinternal: test: conditional: Add Byte-Order-Mark(BOM) for non western Windows environments
featurefilter_kubernetes: add owner references information into record.
featurezstd: add support for compressed unknown size
featurera: add support for direct array access notation
featureout_splunk: added otlp metadata support
featurefilter_modifier: added missing log event encoder and decoder disposal
featureinput_thread: added missing sanity check
featureout_loki: add stuctured_metadata_map_keys
featurein_opentelemetry: logs: add missing checks for resource and scope
breakingworkflows: remove invalid sync directory
featureinput_chunk: check return values when calculating found chunks for new space.
featureaws: add support for EKS Pod Identity
featureprocessor_sampling: new trace sampling processor
featurecustom: add support for net properties to custom plugins.
featureinput: add support for upstream configuration for input client plugins.
featureout_exit: add time_count (seconds) and record_count parameters for out_exit.
featuretls: add support for setting min/max TLS version and cipher list
featuretask_map: added task map scaling
featureout_azure_kusto: azure managed identity support added
featureprocessor: add conditional processing support for logs
featureprocessor_labels: add support for record accessor in values
featureenv: add support to set environment variable content from a file
featuresimdutf: simdutf_connector: in_tail: Implement UTF-16LE/UTF-16BE encoder
featuresimd: riscv: implement RVV intrinsics
featuresystemd: build: Add sethostname workaround for AmazonLinux2
featurepipe: add flb_pipe_error
+63 more items in the release notesotherrelease: update to 3.2.10
fixrecord_accesor: fix return value for flb_ra_get_kv_pair when get_ra_parser fails (Backport)
featureaws: add support for EKS Pod Identity
fixprocessor: fix missing read_groups flags for log event decoder (backport for 3.2)
otherout_splunk: when packing OTel metadata, include resource attributes (backport 3.2)
otherci: update version to 3.2.9
featurefilter_modifier: added missing log event encoder and decoder disposal
otherhttp_server_http1: updated the request size measurement function
featureinput_thread: added missing sanity check (backport)
featureout_loki: add stuctured_metadata_map_keys (3.2.x Backport)
featurein_opentelemetry: logs: add missing checks for resource and scope (backport 3.2)
otherout_opentelemetry: restored old group meta record processing mechanism (backport)
otherout_opentelemetry: switch config property 'http2' default to 'off' (backport 3.2)
featureout_splunk: added otlp metadata support (backport 3.2)
fixin_opentelemetry: fix handling of status code in JSON traces (backport 3.2)
featurelog: added a new management signal to overcome a deadlock
featurestackdriver: add cloud_logging_base_url (#9779)
fixin_kubernetes_events: fix sqldb cleanup (backport to v3.2)
othertests: in_kubernetes_events: backport flake test fix from #9877.
otherhttp input layer: parser realloc fixes (#9970)
otheropentelemetry: backports from git master
featurein_http: add compression handling support for gzip, snappy and zstd (backport v3.2)
otherinput_chunk: log plugin alias instead of plugin name if exists. - backport to 3.2
featureout_http: add support for zstd and snappy compression (backport for v3.2)
securitysecurity update: CVE-2024-50608 and CVE-2024-50609 (v3.2)
otherworkflows: pin QEMU version for Raspbian only
otherci: update to version 3.2.7
otherrelease: update to 3.2.6
fixworkflows: fix debug image manifest
fixin_opentelemetry: fix finalization of group for gRPC payload (backport for v3.2)
otherin_tail: reintroduced the old ignore_older behavior as opt-in
breakingworkflows: remove qemu usage
otherrelease: update to 3.2.5
other3.2: lib: monkey files
fixpack: fix missing scientific notation in JSON parser [Backport 3.2]
otherbackports: v3.2 20240108
otherpackage: distro: dockerfiles: Install libcurl development package for oauthoicd on rdkafka [Backport 3.2]
otherworkflows: increase size of container builders
breakingworkflows: remove s390x and armv7 platforms for container builds
otherworkflows: split into per-arch container builds
otherrelease: update to 3.2.4
otherworkflows: bump helm/kind-action from 1.11.0 to 1.12.0
featureinternal: add conditionals evaluation API
fixin_systemd: fix memory leak
fixRegression fix: Selects docker image target fpr local-build-all.sh
otherrelease: update to 3.2.3
otherout_calyptia: retry agent registration on flush callback
fixcmake: fix UNICODE-escaped characters on aarch64
fixfilter_parser: fix reserve data and preserve key handling
fixprometheus_remote_write: Fix a typo in configuration
otherwasm: Plug a resource leak on exception (CID 508177)
othercalyptia: generate machine id for fleet agents
otherlib: wasm-micro-runtime: Bump up wasm-micro-runtime to v1.3.3
otherin_winevtlog: Use correct flag for EvtRender
fixin_process_exporter_metrics: Fix error logic when directory cannot be…
fixFix a typo in out opentelemetry plugin
otherin_systemd: Process enumerated data as cfl_kvlist(s) at first
featurecfl_record_accessor: cfl_ra_key: Implement generic CFL based record accessor
otherhttp_server: hs: Handle IPv4 and IPv6 addresses
otherin_forward: Support empty_shared_key parameter
otherutils: Detect machine_id corruption and fill out a dummy value
otherbuild: Use signed char in RISC-V 64bit
otherupdate fluentbit_users.png
otherdocs: update deployment details
otherin_forward: Recreate connection when resumed
otherutf8: enhancements for handling of multibyte sequences
featureopentelemetry: add Logs metadata support for JSON payload
othercfl_record_accessor: Plug resource leaks (CID 516097)
otherplugin: Detect config format and use a proper loader
otherworkflows: bump helm/kind-action from 1.10.0 to 1.11.0
otherlib: update cprofiles and c-ares libraries
otherworkflows: resolve ubuntu 24 packaging problems
featureplugin_proxy: Allow to execute flush callback on Golang side during hot-reloading
otherrelease: update to 3.2.2
featuresignv4: added missing length calculation (CID 514601)
featurehttp_client: added missing exit path (CID 514596, 514571)
featurehttp_common: added missing initializers (CID 514594, 514583)
featureout_opentelemetry: added missing result checks and fixed leaks (CID 514593)
fixhttp_client: fixed potential memory corruption (CID 514587)
featurehttp_client: added missing exit path (CID 514585)
fixhttp_common: moved initializers to correct a bug introduced in PR 9608
otherci: extended CI script to pass test for flb_utils_get_machine_id
otherin_forward: Plug a resource leak on exception (CID 508064)
othernode_exporter_metrics: Use real_path for complaining on glob error
otherplugin: Plug a use-after-free issue (CID 514582)
otherhttp_client: assorted HTTP/2 related fixes
fixout_azure_kusto : fix multiple files tail issue and timeout issue
otherin_opentelemetry: Propogate tag in http2 metrics and trace handlers
otherprocessor_labels: Process operations for output purposed contexts of metrics instead of the original one
otherfilter_lua: expose env variables in FLB_ENV Lua table
othercustom_calyptia: honour collector interval in secs and nano secs.
fixout_stackdriver bug fix: return cached token when current_timestamp is less than cached_expiration
featurehttp_client: out_es: lib: implement http client response testing mechanism
otherin_http: use 'tag_key' option when json array is received
fixnetwork: fix IPV6 handling for accepting connections
otherconfig_format: windows: Handle static config on windows correctly
otherci: support 3.2 releases as latest version
otherRetrieve Kubernetes pod IP address if it is set in status.podIP
othertests: runtime: kubernetes: fixes tests after addition of pod_ip
otherin_ebpf: Prepare build directory for building eBPF objects
otherin_splunk: splunk token validation must be case-insensitive
otherin_ebpf: Handle debian like systems' signal probes
securitysecurity: supported versions now are 3.1.x and 3.2.x
breakingtls: removed alpn selector requirement
otherupdate: bump version to v3.2.1
otherbuild: bump to v3.2 series
otherworkflows: bump peter-evans/create-pull-request from 6 to 7
otherworkflows: linux: Compile and execute internal test on non-amd64 platforms Linux
featureengine: added missing explicit cast (CID 508212)
fixin_elasticsearch: fixed potential issue caused by ingored reallocation (CID 508180)
featureinput: added missing initializer (CID 508207)
fixout_opentelemetry: fixed memory leaks (CID 508192)
othertests: internal: signv4: uncommented code that caused a leak (CID 508181)
fixin_elasticsearch: fixed memory leak (CID 507822)
otherout_influxdb: Handle signed/unsigned integer as influx's integer of that representation
fixin_calyptia_fleet: fixed memory leaks (CID 508187)
otherout_http: Request timed out(408) to be treated as retry
othertests: internal: signv4: fixed leak (CID 508222)
featurefilter_log_to_metrics: Add timer callback for emitting metrics
fixin_calyptia_fleet: fix 'unable to find fleet by name'.
fixfilter_multiline: Reset group metadata buf on flush - Fixes 9262,8925,9337,8567
featurelib: fluent-otel-proto: update generated files and add profiling support
fixreload: do not call flb_stop when flb_start fails to avoid crash on RHEL/CentOS.
featurecore: signal blob implementation
featurein_opentelemetry: add tag_from_uri support to http2 codepath
featuremotd: add missing null character
featurelib: monkey: upgrade to v1.8.1 (add support for HTTP/1.1 chunked transfer encoding)
fixtests/internal: fix use-after-free for input_chunks test input_chunk_dropping_chunks.
fixout_azure_blob: fixed blob endpoint tracking
featuresimd: add new SIMD support for JSON escaping
featureprocessor_content_modifier: add support for Metrics processing
fixinput_chunk: fix input plugin metrics not counting records re-emitted by filters downstream
securitytls: macos load system certificates using security framework.
fixin_forward: fixed incorrect shared key length in authentication
featurefilter_multiline: Add functionality to use as processor
featureoutput: allow records size 0 on flb event type logs processor
featureprocessor_opentelemetry_envelope: add support for Metrics
fixin_calyptia_fleet: fix registering agent after first invocation.
featurefilter: Add dropped_bytes_total / drop_bytes metrics
featureout_datadog: custom added ability ot set custom HTTP headers
featureout_kinesis_streams: add custom port support for Kinesis output plugin
featuremetrics_exporter: add support for filter metrics inside processors
fixfix: ARES_OPT_TRIES must be set to update opt.tries
featureout_kafka: Introduce raw_log_key to write a single value to kafka
fixlib: cprofiles: fixed incorrect check
+31 more items in the release notesfeaturein_opentelemetry: add tag_from_uri support to http2 codepath
fixin_http: fix parsing of root JSON object
otherout_opentelemetry: metrics handling fixes (backport for v3.1)
fixin_forward: fixed incorrect shared key length in authentication
fixin_calyptia_fleet: fix 'unable to find fleet by name'.
other3.1: backport fixes 2024-09-26
fixreload: do not call flb_stop when flb_start fails and fix crash on RHEL
otherupstream: Improve error message for misconfigured HTTP_PROXY variable - Backport to 3.1
featureengine: added missing explicit cast (CID 508212)
othertests: internal: signv4: fixed leak (CID 508222)
othertests: internal: signv4: uncommented code that caused a leak (CID 508181)
fixin_elasticsearch: fixed potential issue caused by ingored reallocation (CID 508180)
fixin_elasticsearch: fixed memory leak (CID 507822)
otherrelease: update to 3.1.8
fixout_opentelemetry: fixed memory leaks (CID 508192)
fixin_calyptia_fleet: fixed memory leaks (CID 508187)
featureinput: added missing initializer (CID 508207)
otherout_splunk: Extend retrying HTTP status code [Backport 3.1]
otherout_http: Request timed out(408) to be treated as retry [Backport 3.1]
otherout_influxdb: Handle signed/unsigned integer as influx's integer of that representation [Backport 3.1]
otherbackport: PR #9338 to 3.1
other3.1: lib: upgrade cmetrics to v0.9.6
otherrelease: update to 3.1.7
othertests: in_http: replaced the failure trigger mechanism
fixfilter_aws: fixed group metadata fetch issue and addressed (CID 507941)
fixout_opensearch: fixed a wrong data type used for a boolean option
fixout_stackdriver: fixed a wrong data type used for two boolean options
fixfilter_tensorflow: fixed a wrong data type used for a boolean option
fixin_nginx_exporter_metrics: fixed a wrong data type used for an option
fixin_opentelemetry: fixed a wrong data type used for an option
fixin_proc: fixed a wrong data type used for three options
fixout_es: fixed a wrong data type used for an option
fixnetwork: fixed a wrong data type used for an option
othertests: config_map: fixed a wrong data type used for an option
otherin_dummy: switched property types to match the config_map
otherin_head: switched the type of buf_size to match the config_map
otherin_elasticsearch: Store log_encoder pointer (CID 508245)
otherout_opensearch: Plug a use-after-free issue (CID 508013)
otherin_event_type: Plug a resource leak on exception (CID 507968)
otherout_chronicle: Plug a resource leak on exception (CID 508008)
fixcore: fix configuration type cast issue on big endian systems
othercore: support configurable event loop mechanism
otherin_emitter: Plug a possible resource leak on exception (CID 508193)
fixfilter_logs_to_metrics: fixed memory corruption issue
featureupstream_ha: added environment variable support
fixcore: fixed the data type used for booleans
otherin_winevtlog: Skip to translate SID for capability SIDs
breakingoutput: Remove a needless calling of flb_output_instance_destroy() (CID 507809)
fixcore: fixes for reports provided by Coverity 20240826
fixin_elasticsearch: Fix string in http response code 400
fixin_winevtlog: out_s3: Fix windows build failures
fixout_azure_blob: fixed double free (CID 508656)
fixin_collectd: fixed out of bounds read
fixout_stackdriver: fixed a memory leak (CID 508244)
fixin_node_exporter_metrics: fixed possible invalid dereference (CID 508238)
featurereload: added appropriate type cast (CID 508209)
fixcoverity: fixes for 20240829
fixin_event_type: fixed two leaks (CID 508227)
fixcore: fixed memory leaks (CID 508230)
fixfilter_multiline: fixed memory leak (CID 508221)
fixfilter_alter_size: fixed memory leak (CID 508216)
fixcoverity: fixes as of 20240830 (CID 507960)
+16 more items in the release notesotherrelease: update to 3.1.6
featurefilter_parser: added debug message (CID 508252)
otherpack: do not multiply out_size by realloc_size
featurestackdriver: Add latency metric for write log entries HTTP request.
fixin_forward: fixed two leaks
otherupstream_ha: upstream_node: process verify hostname on HA settings
othercoverity: report as of 20240813
otherin_kubernetes_events: Use time_t for time(NULL) returned value (CID 507947)
fixin_exec_wasi: Fix resource leak on exception (CID 508347)
otherMake Time_System_Timezone properly detect daylight savings
fixout_prometheus_exporter: Fix dead code notified from coverity (CID 508348)
otherin_forward: Plug a resource leak (CID 508219)
otherin_http: Content-Type rejected for application/json when encoding value is present.
featurein_statsd: Implement metrics type of ingestion way
otherrelease: update to 3.1.5
otherworkflows: bump ossf/scorecard-action from 2.3.3 to 2.4.0
otherout_s3: Plug memory leaks on gzipped buffers during the swapping contents
otherlib: c-ares: ugprade to v1.32.3
fixin_kubernetes_events: fix k8s events end of stream deadlock
fixworkflows: Fix CentOS7 build failure for EPEL
featurefilter_log_to_metrics: add new option 'discard_logs'
othernode_exporter_metrics: Align the collecting metrics of unit statuses
otherin_forward: Use full width of gzip header for checking whether concatenated or not
otherout_oracle_log_analytics: minor fixes
otherworkflows: update unstable nightly builds for 3.0
otherlib: cfl: upgrade to v0.5.2
fixin_mqtt: added buffer size setting and fixed a leak
otherlib: library updates
fixaws_util: fix leading zeros in time_key strings
fixout_opensearch: fixed wrong payload buffer usage for traces
otherbuild: use the system provided LuaJIT if found
otherwindows: build: Enable kafka plugins on Windows
otherout_prometheus_exporter: Handle multiply concatenated metrics type of events
fixcore: fixes for issues reported by Coverity
otherwasm: in_exec_wasi: filter_wasm: Make configurable for wasm heap and stack sizes
othercore: memory alignment feature addition
otherrelease: update to 3.1.4
otherout_stdout: Consume entire metrics type of buffers
featurelog_to_metrics: allow custom namespace and subsystem
otherinput_chunk: do not exit if cannot release old chunks
fixout_datadog: fix typo for dd_hostname documentation
otherrelease: update to 3.1.3
fixout_datadog: fix default message key remapping
fixmetrics: fix handling of old metric names (fix #9086)
fixcore and plugins: fix compiler warnings
otherin_winevtlog: Retrieve messages of forwarded events correctly
otherlib: ctraces: upgrade to v0.5.2
otherin_splunk: Process strict check for credentials
fixin_splunk: Fix handlings for content type when http2 is off
otherrelease: update to 3.1.2
fixpackaing: test: centos7: Fix packaging test
otherdocs: add user logos
othercmake: Correctly fetch FLB_GIT_HASH from signed commit
otherout_opentelemetry: restore manual parsing for log record fields (fix #9071)
featurein_tail: Add option file_cache_advise to reduce file cache usage
featurefilter_log_to_metric: Add emitter alias and mem buf limit
fixflb_input: Config parsing order fixed for storage.pause_on_chunks_overlimit
featurein_forward: Add plugin pause/resume mechanism
otherrelease: update to 3.1.1
featureluajit-cmake: Add git repository existence check
othercmake: build: Revive missing plugin definitions
otherrelease: update to 3.0.7
featurein_prometheus_scrape: add User-Agent HTTP header (#8880)
othertests: internal: log: use milliseconds to do time comparisons for cache timeout.
othertests/runtime/in_podman_metrics: refactor iteration of counters to use cfl_list from #8844.
otherout_cloudwatch_logs: support log_group_class option
otherin_http: respond accordingly to requests that produce errors.
otherout_calyptia: move debug payload to debug level.
othertests: rutime: out_http: simplify and make the in_http test more robust.
otherin_splunk: Store HEC token on enabled HTTP2 and raw endpoints
featurein_splunk: Add switch for storing in metadata or records and handle multiple tokens on in splunk
otherin_kubernetes_events: refactor time check to use struct flb_time.
fixFix GCC 14.1 build issues
otherin_systemd: Move one record back after skipping to the end
fixhttp_server: api: v1: traces: fix finding inputs by alias.
fixin_winevtlog: Fix threshold condition to avoid unnecessary warning
otherdockerfile: update to bookworm base image
fixCMakeLists.txt: fix build with ninja
featureprocessor_metrics_selector: Implement delete by label value operation
featurecore: add log groups support and full OTLP OTLP
fixout_opentelemetry: fix handling of multiple scopes
breakingworkflows: remove AppVeyor from release workflow
fixin_opentelemetry: opentelemetry_prot: Fix string in http response code 400
fixin_prometheus_remote_write: prom_rw_prot: Fix string in http response code 400
fixin_splunk: splunk_prot: Fix string in http response code 400.
featureprocessor_content_modifier: add support for OTel Logs Resource and Scopes
fixin_docker: fix memory leak caused by conversion error
featureprocessor_opentelemetry_envelope: new processor to package non OTel Logs content as OTel
featureout_loki: allow sending unquoted strings
featureparser: add new option time_system_timezone (copy of #8164)
featureout_datadog: Add support for setting a static hostname
featureAdded parser for Linux kernel netfilter firewall log
breakingout_splunk: remove raw endpoint
fixhttp_server and downstream: fix keepalive issues
fixtls: openssl: fix handling of noisy non TLS errors
fixdockerfile: packaging: Fix build check for centos-7 and failures of package creations
securitylib: nghttp2: backport upstream security fix
featureout_gelf: test: Implement injecting tag capability
featureout_loki: add support for structured metadata
fixin_syslog: Fix double free when no parser is set
featureout_loki: Add http_buffer_max_size option and handle HTTP 5xx errors
+31 more items in the release notesotherrelease: update to 3.0.7
featurein_prometheus_scrape: add User-Agent HTTP header (#8880)
othertests: internal: log: use milliseconds to do time comparisons for cache timeout.
othertests/runtime/in_podman_metrics: refactor iteration of counters to use cfl_list from #8844.
otherout_cloudwatch_logs: support log_group_class option
otherin_http: respond accordingly to requests that produce errors.
otherout_calyptia: move debug payload to debug level.
othertests: rutime: out_http: simplify and make the in_http test more robust.
otherin_splunk: Store HEC token on enabled HTTP2 and raw endpoints
featurein_splunk: Add switch for storing in metadata or records and handle multiple tokens on in splunk
otherin_kubernetes_events: refactor time check to use struct flb_time.
fixFix GCC 14.1 build issues
otherin_systemd: Move one record back after skipping to the end
fixhttp_server: api: v1: traces: fix finding inputs by alias.
fixin_winevtlog: Fix threshold condition to avoid unnecessary warning
otherdockerfile: update to bookworm base image
otherlib: cmetrics: upgrade to v0.9.1
fixCMakeLists.txt: fix build with ninja
featureprocessor_metrics_selector: Implement delete by label value operation
otherdockerfiles: windows: Update to use vcpkg instead of chocolatey
otherrelease: update to 3.0.6
featurepackaging: add build support for ubuntu 24.04 noble numbat
otherout_stackdriver: Support writing to textPayload field of Cloud Logging LogEntry.
fixout_splunk: fix metadata bug that affects splunk_token behavior (fix #8867)
fixcore: Fix crash when running dry