Fluent Bit 4.0.0 → 5.0.7
33 releases · 12 breaking changes · 7 security fixes · 0 advisories fixed
7security12breaking1deprecated108feature131fix
Breaking changes
- breaking CODEOWNERS: remove @braydonk and @jefferbrecht in 5.0.7
- breaking out_logdna: remove promoted known keys in 5.0.5
- breaking out_logdna: remove promoted known keys [Backport to 4.2] in 4.2.5
- breaking github: workflows: remove trivy cron workflow in 4.2.4
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space in 4.2.1
- breaking dockerfile: removed unused DLLs from image for Windows Containers in 4.2.0
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] in 4.1.2
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0] in 4.0.14
- breaking opentelemetry: remove enforcement of timestamp fields for logs (backport v4.0) in 4.0.9
- breaking input: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0] in 4.0.6
- breaking in_node_exporter: removed unnecessary optimization that caused crash in 4.0.3
- breaking packaging: remove older Ubuntu targets from smoke test in 4.0.2
Security changes
- security security: update policy for 5.0 and EOL 4.1 in 5.0.6
- security maintenance: update branch and security EOL info in 4.2.3
- security security: Update supporting timeline in 4.2.2
- security security: update versions and general info in 4.2.0
- security out_file: sanitize incoming Tag to prevent path traversal in 4.1.1
- security out_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0] in 4.0.12
- security security: update policy for 4.0 release series in 4.0.2
Deprecations
- deprecated workflows: deprecate windows-2019 in 4.0.4
Every release in between
otherrelease: update to 5.0.7
otherhttp_server: serialize worker teardown to prevent race conditions
fixhttp_server: fix libevent crash on connection drop
otherout_chronicle: Support label and namespace mapping
othertests: internal: fuzzers: avoid destroying active input fuzzer tasks
fixconfig_format: fix YAML variant cleanup on parser errors
otheravro: Handle int64 values correctly
othertests: runtime: Stabilize out_lib test case
otherin_elasticsearch: check map size before accessing first entry
fixsnappy: fix OOB reads in framed data parser
featurezstd: add 100 MB decompression size limit
fixin_mqtt: fix OOB read from hardcoded remaining length overhead
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB
otherin_forward: validate array size before accessing message mode fields
fixin_syslog: fix integer overflow in octet-counting length parser
fixout_stackdriver: fix multiple memory leaks and potential corruption
breakingCODEOWNERS: remove @braydonk and @jefferbrecht
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo
otherstorage: discard checksum corrupt chunks on startup
featureparser: Add IANA time_zone support for native timestamps
otherworkflows: pin all actions to SHA
otherout_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB
otherin_stdin: support stdin plugin on windows
featurein_ebpf: Implement dns trace
otherout_s3: Provide options for inactive chunks behavior
featureoauth: out_http: add user-agent option for oauth
fixin_tail: fix offset_key value multiplied by 8 on Windows 64-bit
otherhttp_client_http2: bracket IPv6 authority hosts
otherrelease: update to 5.0.6
featureenv: add bash-style default value operator :-
otherlib: cfl: upgrade to v0.7.1
otherout_kafka: partition OTLP logs by resource
fixsds: general fixes for sds_cat() usage
otherin_forward: handle unpacker allocation failure
othertests: prevent port binding failures in concurrent OTEL tests
otherengine: ignore duplicate STOP to prevent shutdown spin
otherout_azure_logs_ingestion: Plug SEGV on termination
featurepackaging: add support for Ubuntu 26.04
featureconfig: storage: Add total limit size of DLQ
otherhttp_server: harden listener and architecture
othertests: runtime: wait for tail truncate output
fixin_tail: fix file append cleanup on failure
otherin_tail: reconcile files after missed inotify events
othergithub: workflows: Restore ok-package-test trigger behavior
securitysecurity: update policy for 5.0 and EOL 4.1
fixsds: fix handling of cfl_sds return buffers after cfl upgrade
othertls: omit SNI for IP literal hosts
otherhttp_server: spawn internal server in threaded mode
otherin_node_exporter_metrics: Skip ipv6 metrics collection when disabled
breakingout_logdna: remove promoted known keys
featurein_ebpf: Implement exec trace
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak
featureaws: update support for additional regions
otherfilter_kubernetes: make memory growth rigidly on filter k8s
otherout_s3: Handle otlp JSON format
otherfilter_log_to_metrics: retry timer metric append
fixcrypto: fix build with OPENSSL_NO_ENGINE
otherscripts: enable working runtime tests
otheropentelemetry: preserve otlp log resource grouping
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit
fixout_forward: fix retain_metadata_in_forward_mode default value (true)
otherrelease: update to 5.0.5
otherlib: cmetrics: upgrade to v2.1.3
fixinput: fix threaded input conditional routing for logs
otherout_influxdb: plug tag keys failure on out influxdb
fixrouting: fix issue with missing input alias
otherrelease: update to 5.0.4
othertests: http_client_chunked: Plug SEGV occurence on macOS
featurein_http: add new /health endpoint
fixout_loki: fix 'occured' -> 'occurred' in comment
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size
fixin_dummy: Use pre_run callback to fix crash path
otherin_tail: drop redundant fstat() on event collection
otherml: ensure context is registered for REGEX type
otherin_forward: handle retain metadata in upstream conf
otherin_tcp: in_udp: Enhance of parser capabilities
otherhttp_client: Restore behavior for dummy http client
othertests: integration: introduce in-tree integration test suite
otherparser: Address wrong assignments of timezone at midnight
otherrelease: update to 5.0.3
otherworkflows: Unify steps of downloading built macOS packages
fixrecord accessor: fix CFL root-key matching and container translation
featureenv: add new extended format to handle environment variables
fixout_s3: fix retry_limit semantics and multipart upload memory leaks
otherlib: cmetrics: upgrade to v2.1.2
otherin_tail: harden db offset restore across restart
otheroauth2: restore legacy context creation behavior
othernetwork: Handle baraketed ipv6 addresses
fixin_opentelemetry: fix tag routing issue
featurehttp_server: add settings for ingress queue
otherout_syslog: address invalid configurations on in syslog
fixinput_thread: replace raw read() with pipe abstraction to fix crash
otherworkflows: Windows docker insufficient disk space fix
otherhttp_client: enhance parser in timeouts and protocol parsing
featurein_ebpf: add tcp trace
otherrelease: update to 5.0.2
otherbuild: Detect version bump to permit "release: " prefix
otheraws: compression: arrow: Set up proper block size
fixdockerfiles: windows: fixed VS Build Tools installation
featureout_azure_blob: add path templating support comparable to s3
otheroauth2: harden token refresh parsing
fixout_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing
featurein_ebpf: Add vfs trace
featureagents: add initial AGENTS.md
othermoth: update banner to v5.0
othertests: runtime: Mark another port 4318 raced test case
othertests: CI test stabilization
otherworkflows: ensure 5.0 releases are handled
featureopentelemetry: add OTLP JSON and OTLP Proto helpers
otherrelease: update to 4.2.8
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]
fixout_stackdriver: fix payload parsing over-reads and null safety [Backport to 4.2]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 4.2]
otherrelease: update to 4.2.7
otherreleasse: Update version to v4.2.7 [4.2 branch]
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2]
otherlib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2]
otherin_forward: validate PING is a msgpack array in check_ping [Backport to 4.2]
otherout_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2]
othergzip: read magic number endian-safely in streaming decompressor [Backport to 4.2]
fixin_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2]
otherin_splunk: return Splunk HEC auth status codes [Backport to 4.2]
otherrelease: update to 4.2.6
otherworkflows: Windows docker insufficient disk space fix [Backport to 4.2]
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2]
fixout_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2]
featureparser: Add IANA time_zone support for native timestamps [Backport to 4.2]
otheroauth2: harden token refresh parsing [Backport to 4.2]
fixdockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2]
otherworkflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2]
otherout_stackdriver: backport codeowners change
othergithub: workflows: Process unit tests on 4.2 branch [Backport to 4.2]
othergithub: workflows: Specify OS configs explicitly [Backport to 4.2]
fixregex: Plug a regex literal crash [Backport to 4.2]
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2]
otherunicode: Use the correct maximum size of Cyrillic [Backport to 4.2]
otherout_forward: process type and length of pong strictly [Backport to 4.2]
featurenode_exporter_metrics: Add file path to error messages [Backport to 4.2]
otherout_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2]
othertests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2]
otherscheduler: Plug FD leaks on destroy [Backport to 4.2]
otherrelease: update to 4.2.5
featurepackaging: add support for Ubuntu 26.04 (backport to 4.2)
featurebackport: env: add bash-style default value operator :-
otherout_chronicle: Support label and namespace mapping [Backport to 4.2]
fixinput_thread: replace raw read() with pipe abstraction to fix crash [Backport to 4.2]
otheraws: compression: arrow: Set up proper block size [Backport to 4.2]
othernetwork: Handle braketed ipv6 addresses [backport to 4.2]
otherparser: Address wrong assignments of timezone at midnight [Backport to 4.2]
fixrouting: fix issue with missing input alias [Backport to 4.2]
otherout_influxdb: plug tag keys failure on out influxdb [Backport to 4.2]
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size [Backport to 4.2]
otherfilter_kubernetes: don't recycle connections in fetch_pod_service_map [Backport to 4.2]
fixin_tail: fix file append cleanup on failure [Backport to 4.2]
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak [Backport to 4.2]
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit [Backport to 4.2]
otherengine: ignore duplicate STOP to prevent shutdown spin [Backport to 4.2]
fixin_dummy: Use pre_run callback to fix crash path [Backport to 4.2]
breakingout_logdna: remove promoted known keys [Backport to 4.2]
fixcrypto: fix build with OPENSSL_NO_ENGINE [Backport to 4.2]
otherout_azure_logs_ingestion: Plug SEGV on termination [Backport to 4.2]
otherin_forward: handle unpacker allocation failure [Backport to 4.2]
othertests: runtime: wait for tail truncate output [Backport to 4.2]
otheravro: Handle int64 values correctly [Backport to 4.2]
fixmp: fixed count when empty data
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB [Backport to 4.2]
otherin_forward: validate array size before accessing message mode fields [Backport to 4.2]
fixin_syslog: fix integer overflow in octet-counting length parser [Backport to 4.2]
fixin_mqtt: fix OOB read from hardcoded remaining length overhead [Backport to 4.2]
otherzstd: cap buffer at max instead of aborting on overshoot [Backport to 4.2]
othersnappy: read frame length as 3 bytes to avoid OOB at boundary [Backport to 4.2]
otherin_elasticsearch: check map size before accessing first entry [Backport to 4.2]
otherdockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2]
fixfilter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2]
othermultiline: ml: Propagate metadata even if on exceptions [Backport to 4.2]
otherfilter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2]
otherworkflows: Suppress invalid glob patterns [Backport to 4.2]
fixprocessor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2]
otherhttp_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2]
breakinggithub: workflows: remove trivy cron workflow
fixavro: out_kafka: Fix specification errors in avro format [Backport to 4.2]
otherlib: monkey: upgrade to v1.8.8
otherengine: use effective post-processor counts for output metrics (v4.2)
otherrelease: Update to v4.2.4
otherrelease: update to 4.2.3
othercopyright: update year to 2026
fixfilter_kubernetes: fix parser annotation leak
othergithub: scripts: commit_linter: Handle bin prefix for fluent-bit.c
otherbin: Handle CONT signal properly under leaks command
otherfilter_wasm: Handle group metadata
fixcmake: kafka: fix OAuth Bearer detection on Windows
securitymaintenance: update branch and security EOL info
featuregithub: scripts: commit_prefix_check: add config format rules on linter
otherreadme: update active branch 4.2
otherout_opentelemetry: on HTTP/2, read and process gRPC status code
otherconfig_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2]
fixfilter_log_to_metrics: fix initialization and exception cleanup
otherout_stackdriver: clean up oauth2 cache lifecycle
otherfilter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport]
featurein_winevtlog: Add text format for event rendering [Backport to 4.2]
featurein_tail: Add skipped_lines counter [Backport to 4.2]
featurein_splunk: Implement handling remote addr feature [Backport to 4.2]
otheraws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport]
otherplugin_proxy: enable event_type specification for proxy plugins (4.2 Backport)
otherin_splunk: Plug memory issues [Backport to 4.2]
otherpackaging: script: Use rockylinux prefix on package testing script
otherrelease: update to 4.2.2
securitysecurity: Update supporting timeline
otherout_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests
featureaws: Implement simple_aggregation operation
otherout_kinesis_firehose: enable HTTP debugging for AWS client requests
featurehttp_client: add ipv6 bracket if missing from host address
otherlib: updates 20251223
otherrelease: update to 4.2.1
otherworkflows: Not to make latest on publishing 4.1 series on GitHub Relases
fixin_forward: fix connection release on pause memory corruption
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space
otherworkflows: bump actions/checkout from 5 to 6
featurein_opentelemetry: added five missing configuration option descriptions. Fixes #11191.
featureout_s3: implement retry_limit parameter
featurein_blob: added missing configuration descriptions. Fixes #11204.
featuretls: openssl: Implement flexible certstore loading on Windows
featurein_kubernetes_events: add support for configuring input upstream network setup
featureworkflows: add new commit linter tool
otherworkflows: bump actions/checkout from 4 to 6
otherworkflows: bump actions/setup-python from 5 to 6
otherdockerfile: Docker image to support large page sizes
otherdockerfile: update to Debian Trixie
otherin_elasticsearch: fixing missing config parameter description for http2. Fixes #11221.
fixin_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #11232.
otherin_forward: improve configuration parameter descriptions
othergithub: commit_linter: Make more flexibility for commit linter
otherbuild: prevent the toolchain from emitting an executable stack
fixin_forward: fix segfault and double-free in trace path handling
otherin_node_exporter_metrics: Increase buffer size to read /proc/stat correctly
featurein_http: added missing config parameter descriptions.
otherworkflows: bump peter-evans/create-pull-request from 7 to 8
fixout_flowcounter: Fix incorrect bytes calcuation
otherworkflows: bump actions/cache from 4 to 5
otherworkflows: bump actions/download-artifact from 6 to 7
otherworkflows: bump actions/upload-artifact from 5 to 6
othergithub: workflows: Clean up needless resources on GHA workers
featurein_ebpf: add three missing config option descriptions. Fixes #11221.
otherin_gpu_metrics: updated config parameters descriptions.
otherbuild: Tweak linker flags for zstd
otherin_winevtlog: Plug glitches of time offset for DST/STD switches
otherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
otherworkflows: Make not to be the latest release for 4.0 branch
otherbuild: bump to v4.2.0
securitysecurity: update versions and general info
featurehelp: add space for outputs and processors when generating schema.
otheropentelemetry: traces: unify JSON to ctrace encoder
featurerouting: add new routing mechanism for input plugins
othermp: extend cobj API to expose group metadata and attributes
featurein_node_exporter_metrics: add netstat linux collector
otherfstore: safe check on fsf file deletion
otherworkflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch
featurerouter: add conditional support for Logs
fixaws_credential_sts: internal: Fix unit test failures
otherworkflows: bump actions/upload-artifact from 4 to 5
otherworkflows: bump actions/download-artifact from 5 to 6
fixrouter_condition: Fix unconditional route check in routing
featureout_vivo_exporter: add versioned API endpoints
featurerouter: add contexts to conditional support for direct route paths
othersnap: Upgrade snap from core18 to core20
featuredoc-reports: add cncf audit report
otherchunks: extend metadata to support routing information (direct routes)
otherworkflows: bump helm/kind-action from 1.12.0 to 1.13.0
breakingdockerfile: removed unused DLLs from image for Windows Containers
fixkafka: fix cmake cross compile error
featurein_syslog: Add support for RFC 6587 octet-counting
featureout_s3: Add a NULL check for plugging SEGV on dry_run
featurepackaging: add missing SASL dependencies for Rocky/AlmaLinux
fixfix: Make TLS initialization thread-safe and idempotent using pthread_once
featuremotd: add 4.2 banner
featureout_http: Added PUT support
featurerouting: introduce metrics for unmatched (dropped) logs
featurein_tail: Implement long line truncation
featurepackaging: add -L flag to curl for redirect support
featurestorage: config: engine: Introduce dead letter queue
featureworkflows: staging-release: add v4.2
+13 more items in the release notesotherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
featurehelp: add space for outputs and processors when generating schema. [Backport to 4.1]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherfstore: safe check on fsf file deletion [Backport to 4.1]
otherwasm: Plug wasm heap leakages [Backport to 4.1]
featureout_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1]
fixin_forward: fix connection release on pause memory corruption [backport to 4.1]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.1]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.1]
otherrelease: update to 4.1.1
featureworkflows: windows: Add a testing flow with using ARM64 Windows runner
otherscripts: Handle two or more digits for patch version
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter
otherin_splunk: return correct error response for http/1 handler.
otherworkflows: bump ossf/scorecard-action from 2.4.2 to 2.4.3
featureopentelemetry: allow empty strings for TraceID and SpanID (logs)
otherworkflows: bump peter-evans/dockerhub-description from 4 to 5
featureworkflows: add sanity check for toolchains w/ CXX support
featurein_winevtlog: Implement trying to reconnect on cancel mechanism
otherreload: refactor watchdog to be preemptable on windows.
otherdocs: fix broken links
featurein_docker: add helper for container name parsing
featureout_opentelemetry: add configurable log resource limits
otherout_opentelemetry: no longer reallocates the http2 setting string
fixin_http: fix handling of URL encoded value
securityout_file: sanitize incoming Tag to prevent path traversal
otherrouter: use memchr() and tag length for matching tags
fixin_forward: Fix user authentication to align Fluentd's behavior
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup
otherin_calyptia_fleet: load configuration on initial startup.
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list.
otherworkflows: bump github/codeql-action from 3 to 4
fixout_es: fix elasticsearch output api key usage
otherrelease: Update version to 4.0.14
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list (backport of #10943).
featurehelp: add space for outputs and processors when generating schema.
fixin_tail: fix last_processed_bytes calculation [Backport to 4.0]
otherfstore: safe check on fsf file deletion [Backport to 4.0]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherwasm: Plug wasm heap leakages [Backport to 4.0]
fixin_forward: fix connection release on pause memory corruption [Backport to 4.0]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.0]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.0]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.0]
otherin_winevtlog: Plug glitches of time offset for DST/STD switches [Backport to 4.0]
otherrelease: Update version to v4.0.13
otherin_calyptia_fleet: load configuration on initial startup (backport #10996 to 4.0).
fixstorage: fix heap corruption in chunk sort parser [Backport to 4.0]
fixin_forward: Fix of handshaking on forward protocol [Backport to 4.0]
otherrelease: Update to v4.0.12
fixin_splunk: fix the invalid data format response when submitting valid data.
featureopentelemetry: allow empty strings for TraceID and SpanID (logs) [Backport to 4.0]
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter [Backport to 4.0]
otherout_opentelemetry: no longer reallocates the http2 setting string [Backport to 4.0]
fixlog_to_metrics: fix improper handling of record accessor context [Backport to 4.0]
featureout_opentelemetry: add configurable log resource limits [Backport to 4.0]
fixin_http: fix handling of URL encoded value [Backport to 4.0]
securityout_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0]
featurein_docker: add helper for container name parsing [Backport to 4.0]
featurereload: add a timeout mechanism and its based commits backporting [Backport to 4.0]
fixin_forward: Fix user authentication to align Fluentd's behavior [Backport to 4.0]
otherrouter: use memchr() and tag length for matching tags [Backport to 4.0]
otherreload: refactor watchdog to be preemptable on windows. [Backport to 4.0]
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup [Backport to 4.0]
otherrelease: Update version 4.0 [4.0 branch]
otherpackaging: support Alma/Rocky/CentOS 10 plus Debian Trixie/13 [Backport to 4.0]
otherinput: private plugins must use global event loop [Backport to 4.0]
fixtls: fix regression and proper shutdown [Backport to 4.0]
otherrelease: Update version to v4.0.10
fixin_splunk: fix the response when receiving empty payload - backport of 10800
featurein_event_type: implement pause/resume to stop timed collector.
otherworkflows: Install NSIS via chocolatey [Backport to 4.0]
otherin_winevtlog: Plug possible SEGV occurrence paths [Backport to 4.0]
otherlib: updates for cmetrics and monkey (v4.0 backport)
otherutils: relax proxy URL parsing
otherupstream: Move clearing TLS session from prepare phase to destroy phase [Backport to 4.0]
fixin_storage_backlog: fix use-after-free when segregating chunk [Backport to 4.0]
otherrelease: update to 4.0.9
fixin_tail: fix memory leak when using generic unicode conversion (backport #10781)
othercmake: explicitly disable FLB_UNICODE_ENCODER when FLB_USE_SIMDUTF is disabled. [Backport to 4.0]
otherpipe: Specify linger option for flb_pipes which is build on top of socketpairs on Windows [Backport to 4.0]
othercmake: backport #10778 and #10786 to 4.0.
fixengine: fix busy chunks on reload. [Backpoprt to 4.0]
breakingopentelemetry: remove enforcement of timestamp fields for logs (backport v4.0)
featurehttp_client: add response and read idle timeouts (backport v4.0)
fixhttp_client: fix incomplete error handling in flb_http_do() (backport v4.0)
fixopentelemetry: fix handling of numeric attributes (backport v4.0)
featuredownstream: implement pause and resume functionality [Backport to 4.0]
fixnetwork: fix strerror_r detection for musl [Backport to 4.0]
fixengine: fix endless loop on reload [backport to 4.0]
otherrelease: update to 4.0.8
otherinput_metrics: discard cmetrics with no series (backport v4.0)
featurein_node_exporter_metrics: add Linux sockstat collector (backport v4.0)
featurein_node_exporter_metrics: add Linux hwmon collector (backport v4.0)
fixpack: fix token count regression in JSON tokenizer and remove parser reset (backport 4.0)
otherin_kafka: improve offset commit timing to avoid data loss in edge cases (backport v4.0)
featurein_node_exporter_metrics: add new option 'path.rootfs' (backport v4.0)
featureout_azure_kusto: Added workload identity support (backport v4.0)
otherout_datadog: task_arn now correctly mapped to full arn (backport v4.0)
featureout_cloudwatch: add entity support and remove unnecessary log content (backport v4.0)
featureout_kinesis_firehose: introduce port parameter (backport v4.0)
otherdockerfiles: windows: update to ltsc 2025 and fix layers
featureout_es: add apikey to available auth types
otherlib: chunkio: update to 98988d25
otherin_calyptia_fleet: fleet config fetch ignores older-timestamped files
fixopentelemetry: logs: fix packaging length for trace_id and span_id (backport 4.0)
otherworkflows: Retrieve the actual target image with tag [Backport to 4.0]
featureworkflows: Add sudo for a cleanup step
otherrelease: update to 4.0.7
otherin_windows_exporter_metrics: Handle DST more precisely with dynamic timezone verison of functions [Backport to 4.0]
fixopentelemetry: general fixes for log handling [Backport to 4.0]
otherrelease: Update to 4.0.6 [4.0]
fixout_chronicle: Fix log_key detection mechanism [Backport 4.0]
otherfilter_aws: send entity attributes for telemetry association [Backport 4.0]
otherin_winevtlog: Handle Daylight saving time by using newer functions [Backport to 4.0]
otherin_windows_exporter_metrics: Follow windows_exporter prom names correctly and support connection_state metrics [Backport to 4.0]
otherlib: cmetrics: upgrade to v1.0.5 [Backport to 4.0]
featureoutput: add Histogram Metric for end-to-end chunk latency [Backport to 4.0]
breakinginput: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0]
featurein_nginx_exporter_metrics: add scrape_interval option (default: 5s) [Backport to 4.0]
otherout_kafka: do not release config map properties [Backport to 4.0]
otheropentelemetry: utils: handle NULL type as empty strings [Backport to 4.0]
otherin_opentelemetry: handle NULL body in otlp_pack_any_value (fix #10674) [Backport to 4.0]
featurein_prometheus_textfile: new plugin to read .prom metric files [Backport to 4.0]
otherrelease: update to 4.0.5
fixworkflows: fix windows check for container image
otherout_file: Replace SHCreateDirectoryExA to work for recursive directories correctly
othernetwork: enable EDNS for DNS queries
fixpackaging: fix Debian buster repo issues [backport 4.0]
othertls: openssl: output: configurable certstore name [Backport 4.0]
otherpack: Handle UINT64_MAX value correctly in json packing [Backport 4.0]
otherin_windows_exporter_metrics: Extend metrics [Backport 4.0]
otherin_syslog: do batching to reduce ring buffer pressure under load [v4.0]
otheraws: restore IMDS timeouts after upstream_set in EC2 provider [v4.0]
featureoutput: add new net.proxy_env_ignore option [v4.0]
otherrelease: update to 4.0.4
otherworkflows: bump ossf/scorecard-action from 2.4.1 to 2.4.2
otherinstall: update install script to handle Rocky/Alma repos now
fixhash_table: fix leak in case insensitive and add unit tests
otherio: on network connect exceptions, invalidate file descriptor
featureconfig: implement storage inheritance option
otherlib: luajit: only require a C compiler
otherlog_event_decoder: validate memory allocation
fixfilter_modify: fix leaks on exceptions
fixupstream: fix connection count when net.max_worker_connections is set
featurefilter_lua: add groups metadata and body support
otherlib: lwrb: build it as a static lib instead of an interface
othermultiline: release unpacked contexts on exceptions
fixprocessor_content_modifier: fix leak on JSON conversion and data type
fixout_opentelemetry: fix leaks on exceptions
featurehttp_server: add new API to configure the maximum buffer size
fixin_calyptia_fleet: fix memory leak in get_fleet_id_from_header.
fixout_opentelemetry: fix handling of retry status (fix #10481)
otherin_splunk: continue with the next token if length of auth header vs token doesn't match
featureconfig_format: yaml: add detailed error message on bad format
otherin_calyptia_fleet: report the configuration version.
otherdockerfile: Enable default SIMD support in Docker
featurekafka: add support for AWS MSK IAM authentication
featureupstream: prioritize the reuse of connections instead of establishing new ones
fixprocessor_sampling: fix stale span references in registry
featureunicode: defs: conv: Implement conversion rules of character encodings
fixin_calyptia_fleet: fix init error mem leaks.
featurerecord_accessor: add support for binary values and references
featurenetwork: add new net.backlog property to set somaxconn in the process listeners
fixnetwork: general fixes for failure states
featureopentelemetry: new abstraction to handle OTLP data
fixprocessor_sql: record_accessor: stream_processor: Fix yylex() function signatures
featurefilter_lua: add support to access groups and metadata
fixout_opentelemetry: fix logic for grouping when using resource_id/scope_id
fixdownstream: fix check of accept timeout
fixout_cloudwatch_logs: fix strcasestr _GNU_SOURCE
fixreload: fix handling hot reload when reload failure
featurein_kafka: add enable_auto_commit option for Kafka consumer
fixout_opentelemetry: fix behavior of record attributes handling
deprecatedworkflows: deprecate windows-2019
+16 more items in the release notesfeaturepackaging: add AlmaLinux and RockyLinux builds
breakingin_node_exporter: removed unnecessary optimization that caused crash
fixhttp_client: fix muti part http2 request not working
otherbackport to v.3.2 -- in_tail: make read_from_head after the initial discovery optional
otherwasm: Enable reference types feature on wasm
fixengine: fix segfault in flb_config_init error case
otherin_opentelemetry: Configurable logs_body_key
otherrelease: update to 4.0.3
otherin_winevtlog: Support remote access of winevtlog
otherout_opensearch: Prevent a SIGSEGV when ctx->index is NULL
featurefilter_parser: add record accessor support in parser filter
otherbuild: ci: tune MSVC flags, modify ci caching
otherstrptime: Support some of abbriviated timezone strings for GNU extensions
otherlib: upgrade libraries 20250522
othergo: plugin_proxy: error on plugin initialization errors
fixgzip: fix handling of concatenated payloads
othersimdutf_connector: in_tail: skip UTF-16/UTF-8 BOM
otherlog: expose internal logging call counts as internal metrics
otherin_exec_wasi: change wasm_runtime_call_wasm to wasm_application_execute_main to support latest version of tinygo
featureout_azure_blob: added buffering to azure blob
featureengine: add input grace period and check pending chunks on shutdown
otherin_forward: Check return values from mutex functions
otherlib: miniz: only require a C compiler
featureapi: proxy: custom: Implement APIs for custom Go plugins
fixprocessor_sampling: tail: fix spans reconcile processes
otherout_es: Prevent a SIGSEGV when ctx->index is NULL
otherconfig: error configure_plugins_type on invalid properties
otherbuild: Detect msgpack-c and msgpack-c to be valid msgpack library
fixinput: fixed threaded input processor initialization
featureutils: if flb_utils_write_str uses SIMD, add missing highbit_set check() detection
featureout_azure_kusto: support for otel log schema
othertest: stream_processor: Plug a SEGV for macOS
fixgzip: fix decompressor memset usage
fixin_tcp: fix parsed bytes to include separator length
otherin_http: validate memory allocation and fix object type on tag key
fixout_azure_kusto: fix segfault when log level is debug or trace
otherin_opentelemetry: handle exception on unsupported compress format
fixin_forward: fix handling of connections and memory on exceptions
breakingpackaging: remove older Ubuntu targets from smoke test
otherrelease: update to 4.0.2
othertests: internal: fuzzers: split cmetrics decoding
securitysecurity: update policy for 4.0 release series
fixout_azure_kusto: fixed double free
otherlib: ctraces: upgrade to v0.6.5
otherbuild: use the system provided libmsgpack and libsqlite3 if found
otherbuild: only compile simdutf if there is CXX support
featureengine: added conditional to avoid re-scheduling conflict
featurepack: add support for metadata and group info in JSON log
otherprocessor: fail on startup when invalid processors are configured
othersimd: Use __riscv_vsetvl_eXXm1 function to get the actual width of RVV instructions
fixopentelemetry: fix handling of schemaUrl in resource and scope
fixsystemd: build: fix service startup failure when using IMDSv2
featureinput: add missing options to input_global_properties.
otherbin: config: Provide windows.maxstdio option for increasing I/O limit on Windows
otherlib: update CMetrics and CTraces
otherlib: cmetrics: upgrade to v1.0.2
otherout_splunk: Change attaching priority for HEC token
otherrelease: update to 4.0.1
fixplugin_proxy: fixed memory leak
featureout_azure_kusto: added buffering fixes
featurein_storage_backlog: added missing routing mask initialization
fixconfig: yaml: fix double-free from freeing state before cleanup on exit.
otherci, dockefile: frozen version of CMake
otherdockerfile: Windows Containers image Fluent Bit NMake build
otherinput_chunk: routes_mask is not initialized (#10223)
otherlib: dependency updates
otherpipeline: inputs: podman_metrics: use after free fix
fixout_azure_blob: fixed double free
otherin_tail: make read_from_head after the initial discovery optional
fixin_tail: fix disposal order to prevent use after free
othertests: internal: fuzzers: extend ctrace fuzzer
fixopentelemetry: fix support for schema_url in opentelemetry plugins.
fixout_oracle_log_analytics: fix use-after-free on flush failure
fixmp: fix flb_mp_accessor_keys_remove for sibling keys removal
otherci: CMake upgrade in code analysis script
fixconfig_format: fix SEGV from missing return check
fixconf: parsers: fix istio-envoy-proxy parser regex