Fluent Bit 4.0.0 → 5.1.5
43 releases · 12 breaking changes · 10 security fixes · 0 advisories fixed
10security12breaking1deprecated150feature171fix
Breaking changes
- breaking CODEOWNERS: remove @braydonk and @jefferbrecht in 5.0.7
- breaking out_logdna: remove promoted known keys in 5.0.5
- breaking out_logdna: remove promoted known keys [Backport to 4.2] in 4.2.5
- breaking github: workflows: remove trivy cron workflow in 4.2.4
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space in 4.2.1
- breaking dockerfile: removed unused DLLs from image for Windows Containers in 4.2.0
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] in 4.1.2
- breaking workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0] in 4.0.14
- breaking opentelemetry: remove enforcement of timestamp fields for logs (backport v4.0) in 4.0.9
- breaking input: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0] in 4.0.6
- breaking in_node_exporter: removed unnecessary optimization that caused crash in 4.0.3
- breaking packaging: remove older Ubuntu targets from smoke test in 4.0.2
Security changes
- security security: harden input handling across core, http_server and plugins in 5.1.3
- security security: harden network input handling (part 2) in 5.1.3
- security security: harden record processing in core, filters and outputs in 5.1.3
- security security: update policy for 5.0 and EOL 4.1 in 5.0.6
- security maintenance: update branch and security EOL info in 4.2.3
- security security: Update supporting timeline in 4.2.2
- security security: update versions and general info in 4.2.0
- security out_file: sanitize incoming Tag to prevent path traversal in 4.1.1
- security out_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0] in 4.0.12
- security security: update policy for 4.0 release series in 4.0.2
Deprecations
- deprecated workflows: deprecate windows-2019 in 4.0.4
Every release in between
otherapi: v2: trace: plug leaks on trace requests with duplicated parameters
otherworkflows: bump ossf/scorecard-action from 2.4.4 to 2.5.0
otherworkflows: bump reviewdog/action-actionlint from 1.80.0 to 1.80.1
otherrelease: update to 5.1.5
othertests: runtime: out_http: push JSON format records together
otherrouter: apply input routes with a single input and output
fixout_cloudwatch_logs: fix log stream leak when group allocation fails
otherin_nginx_exporter_metrics: mitigate nginx plus response type confusion
otherlua: bound MessagePack reads when pushing values to Lua
otherin_forward: mitigate forward trace decoding bypasses
otherhttp_server: address cumulative bytes on http2 headers
otheropentelemetry: in_opentelemetry: log_event_encoder: mitigate otel attributes quadratic encoding expansion
otheroauth2_jwt: mitigate leaks on duplicated JWT members
featureout_chronicle: add support for the Chronicle API
otherhttp_client: out_loki: Mitigate crlf injection on HTTP headers
otherfilter_kubernetes: mitigate SEGV occurrences on using Use_Kubelet
featureout_http: add PATCH as an http method
otherout_stackdriver: out_bigquery: out_chronicle: conceal jwt token on debug logs
otherin_collectd: mitigate collectd unaligned type read
otherfilter_parser: free the previous parse buffer when Key_Name repeats
fixout_stackdriver: fix cacheHit copied from cacheLookup in httpRequest
othersnappy: decompression: mitigate checksum fault on snappy decompression
fixin_tail: fix missed copytruncate after cached size refresh
otherrelease: update to 5.1.4
othergithub: workflows: require publicly verified release metadata
otherworkflows: bump reviewdog/action-actionlint from 1.77.0 to 1.79.1
otherworkflows: bump reviewdog/action-shellcheck from 1.34.0 to 1.34.1
fixoutput: fix failing internal output tests
otherfilter_kubernetes: mitigate unbounded tag issue
otherin_opentelemetry: mitigate unbounded decompression of otlp gRPC
otherout_gelf: mitigate stuck issue on exceptions of UDP sockets
otherrewrite_tag: mitigate dropping metadata on rewrite tag
featuremp_preflight: in_forward: add object budget of unpacking msgpack objects
othertests: integration: cover hot reload with glob includes
fixstream_processor: fix operator precedence for logical operations
otherlib: flb_libco: upgrade to 1ae2c7f
otherlib: cfl: upgrade to v1.0.2
otherworkflows: bump helm/kind-action from 1.15.0 to 1.15.1
otherworkflows: bump azure/setup-kubectl from 5.1.0 to 5.2.0
otherlib: zstd: only require a C compiler
othertests: fix signv4 fixtures with raw request targets
otherpackaging: use archived Bullseye repositories
otherworkflows: bump github/codeql-action/upload-sarif from 4.38.2 to 4.38.3
otherripser.cpp: initialize temporary diameter entry
othermultiline: enforce multiline_buffer_limit for EQ and ENDSWITH types
fixfilter_kubernetes: fix uninitialized mem edge case
otherbuild: enable C++ before configuring zstd with MSVC
otherbuild: Enclose _C and _CXX and other variables with parentheses
otherworkflows: bump actions/download-artifact from 8.0.1 to 8.0.2
otherworkflows: bump actions/upload-artifact from 7.0.1 to 7.0.2
otherworkflows: bump reviewdog/action-actionlint from 1.79.1 to 1.80.0
otherworkflows: move Windows container storage to the build drive
otherrelease: update to 5.1.3
otherworkflows: bump reviewdog/action-actionlint from 1.73.3 to 1.73.4
othergithub: workflows: Mitigate order dependent issue for uploading task for Windows
otherdockerfile: upgrade base packages to remediate OS CVEs (#12284)
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.9 to 4.38.0
otherhttp: downstream: plug intermittent unfriendly logs
otherout_syslog: support RFC6578
othertests: runtime: Stabilize chronicle assertions with eliminating push races
othertests: runtime: Fix assertion failures on Ubuntu 26.04
otherin_opentelemetry: preserve signed 64-bit log body integers
otherworkflows: bump reviewdog/action-hadolint from 1.53.0 to 1.54.0
otherworkflows: bump reviewdog/action-shellcheck from 1.32.1 to 1.33.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.4 to 1.74.0
featureout_arvancloud_cloudlogs: add new output plugin for ArvanCloud CloudLogs
featurein_kubernetes_events: add sqlite indexes
otherbulk_search: es: opensearch: Acknowledge reasons of bulk failures
otheremitter: ml: plug data losses during multiline processing on shutdown
featureout_kafka: implement protobuf format of kafka schema registry support
fixinput_chunk: fix down chunk placement under storage backpressure
otherout_s3: mitigate SEGV/heap corruption
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly
othertests: fix CloudWatch event size regression coverage
othertests: runtime_shell: Add timeouts for runtime shell testing
fixout_gcs: fix networking and worker crashes, add total_file_size
otherout_opentelemetry: preserve failed log batch results
otherin_podman_metrics: do not abort startup when the initial scrape fails
fixopentelemetry: fix OTLP JSON trace status code interoperability
fixout_stackdriver: fix races on shared credentials
featuretls: add tls.crl_file support for certificate revocation checks
fixout_stackdriver: Fix service account regression
featureout_opentelemetry: add metric age cut-off filter
securitysecurity: harden input handling across core, http_server and plugins
fixin_syslog: fix fragile parsing on the first part of tcp frame
fixhttp_client: Fix a building failure on specifying FLB_AWS=Off
fixin_windows_exporter_metrics: fix collecting tcp metrics
securitysecurity: harden network input handling (part 2)
securitysecurity: harden record processing in core, filters and outputs
fixconfig_format: mitigate regression of absolute path of loading yaml config
fixopentelemetry: fix trace status validation and filesystem replay
+29 more items in the release notesotherworkflows: bump docker/setup-buildx-action from 4.2.0 to 4.3.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.1 to 1.73.2
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.6 to 4.37.7
otherworkflows: bump uraimo/run-on-arch-action from 3.1.0 to 3.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.7 to 4.37.8
featurein_node_exporter_metrics: Implement stat and thermal_zone for macOS
featureout_prometheus_remote_write: Add 1-hour cut-off for expiring staled metrics
featureout_splunk: add time_key support for the HEC event time
otherDockerfile: optimize layers
fixconfig: fix startup abort when log_level set via env and config
othertests: runtime: Plug a SEGV occurrence on macOS
featureout_gcs: add unify_tag option to buffer all tags into one file
otherlog: clamp the suppression length to what was written
featureout_gcs: implement parquet compressions
otherout_gcs: support application default credentials
fixin_winevtlog: Plug a crash path
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled
otherlog: make consistency for suppress log feature
otheres: opensearch: output: task: handle partial succeeded requests
othertests: runtime: Fix errors of incompatible types for in_ebpf tests
featurefilter_kubernetes: implement namespace exclude
otherin_systemd: support capturing with namespace
otherrelease: update to 5.1.2
otherworkflows: bump softprops/action-gh-release from 3.0.2 to 3.0.3
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.8 to 4.37.9
otherlib: cmetrics: update to v2.2.2
otherinput_chunk: input_log: in_storage_backlog: address underflowing / overflowing chunk limit size
otherout_azure_blob: Plug dangling pointers on exceptions
otherout_azure_kusto: stop logging federated and access tokens
featureout_gcs: add Workload Identity Federation support
otherwamrc: Build with LLVM-17
otherreload: preserve configuration path during hot reload
otherout_s3: Clean up orphaned chunks
otherconfig: config_format: address wrongly specified parameter on service section
otheraws: compression: validate valid columnar formats
featuremultiline: add built-in json parser for JSON multiline objects
otherengine: Plug a race on starting engine
othertests: integration: Adjust allocation patterns for Ubuntu 26.04
otherworkflows: bump helm/kind-action from 1.14.0 to 1.15.0
otherworkflows: bump reviewdog/action-actionlint from 1.73.2 to 1.73.3
+10 more items in the release notesotherpackaging: improve package index tree URLs for release listing
fixin_storage_backlog: Fix persistent chunks issues without matching routes on hot reloading
otherworkflows: bump ossf/scorecard-action from 2.4.3 to 2.4.4
otherworkflows: bump actions/stale from 10.4.0 to 11.0.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.3 to 4.37.4
otherworkflows: bump actions/checkout from 7.0.0 to 7.0.1
otherworkflows: bump reviewdog/action-shellcheck from 1.32.0 to 1.32.1
otherworkflows: bump reviewdog/action-actionlint from 1.73.0 to 1.73.1
otherworkflows: bump github/codeql-action/upload-sarif from 4.37.4 to 4.37.6
otherdownstream: invalidate TLS session before socket close
otherout_s3: Address underflow of buffer size on startup
othercompat: Ensure alignment of reading dword width
otherengine_dispatch: Address stale failed tasks on dispatch
fixin_node_exporter_metrics: fix incorrect pointer arithmetic in diskstats metric cache
otherinput_chunk: in_storage_backlog: Display evicted logs on dropping chunks
fixutils: fix SIMD boundary for JSON string encoding
otherstream_processor: sp_stream: Plug unfreed allocated memories on exceptions
featureout_logdna: add hostname as primary field and runtime tests
othermaintenance: update v5.1 stable status
othermotd: v5.1
otherrelease: update to 5.1.1
otherout_file: support timestamp placeholder
featureout_splunk: Add auto_extract_timestamp parameter
othertests: core_routes: Handle limit of rlimit's soft limit
featureplugin_proxy: add config map to the plugin registration
fixinput_chunk: fix storage limit eviction with 32 or more outputs
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherbuild: bump to v5.1 (dev)
otherskills: Extract skills from memory
otherin_opentelemetry: return not found for invalid endpoint
otherworkflows: bump actions/stale from 10.3.0 to 10.4.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.3 to 4.37.0
othertls: openssl: don't recycle a connection after peer close_notify
otherin_winevtlog: Enrich EventData key-value map if enabled
otherlib: cmetrics: upgrade to v2.2.0
fixthread_storage: Fix incorrectly to detect C TLS existence
fixin_forward: fix stale byte accounting when multiple frames share a buffer
otherlib: cfl: upgrade to v1.0.0
otheropentelemetry: reduce protobuf log allocation churn
otherin_gpu_metrics: Handle NVIDIA GPU metrics via NVML
otherlog_event_decoder: time: plug 2038 problem on timestamp
featurein_etw: Implement event tracing for windows input plugin
othertests: runtime: plugins: Enable to build and run runtime testcases on windows
otherlib: cmetrics: upgrade to v2.2.1
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths
featureout_s3: add format=parquet,arrow with selectable page compression codecs
featureconfig: engine: Implement adaptive flushing
featureout_gcs: Implement Google Cloud Storage(gcs) plugin
featurein_node_exporter_metrics: implement additional metrics (filesystem, EXT_* metrics, powersupplyclass) on node exporter metrics
featuredownstream: add coroutine-based event dispatch
featurein_podman_metrics: add per-container disk I/O metrics
fixin_process_exporter_metrics: Fix the reported RSS ram
featureconfig: fips: bin: Initial implementation to enable FIPS compliance
fixin_node_exporter_metrics: fix netstat file reads
featurein_tail: add Windows UTF-8 path encoding mode
featureout_kafka: Implement resolving registry of avro schema
fixout_s3: fix prefix match in log_key extraction
featurepackaging: add packages index generator and release CI
featureout_es: sds: Implement es upstream with sds view
featureout_file: add logs rotation feature
featurein_node_exporter_metrics: add timex linux collector
featuredockerignore: Add an entry not to collide type definition on package creations
featuremetrics: extend support for Tag metrics
featureinput: add pause/resume callbacks
fixoauth2: fix request body ownership on allocation failure
fixin_kubernetes_events: fix unsafe MessagePack field parsing
+58 more items in the release notesotherrelease: update to 5.0.11
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled [Backport to 5.0]
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10 [Backport to 5.0]
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly [Backport to 5.0]
othergithub: workflows: Use cmake 4.2 and minimum policy [Backport to 5.0]
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherrelease: update to 5.0.10
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths [Backport to 5.0]
othergithub: workflows: Enable unit testing on 5.0 branch [Backport to 5.0]
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 5.0]
othertls: yield downstream read retries to the event loop [Backport to 5.0]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 5.0]
othertls: openssl: preserve syscall error details (5.0)
othergithub: workflows: Update release workflow for 5.1 development cycle [Backport to 5.0]
otherbackport: apply selected maintenance fixes to 5.0
otherworkflows: bump azure/setup-helm from 5.0.0 to 5.0.1
otherworkflows: bump actions/setup-python from 6.2.0 to 6.3.0
otherworkflows: bump actions/cache from 5.0.5 to 6.0.0
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches
otherworkflows: bump actions/cache/restore from 6.0.0 to 6.1.0
otherworkflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0
otherworkflows: bump actions/cache/save from 6.0.0 to 6.1.0
otherrelease: update to 5.0.9
featurein_windows_exporter_metrics: Implement user-defined performance counters w/ PDH
othertests: runtime: Try to address test hang
otherworkflows: bump docker/build-push-action from 7.2.0 to 7.3.0
otherworkflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0
otherin_forward: validate PING is a msgpack array in check_ping
otherfilter_kubernetes: Attach k8s metadata for internal logs
featurein_ebpf: Implement openssl trace
othertests: runtime: Use more concrete matchers for assertions
otherin_tail: Another attempt to plug segv on in tail
otherfilter_write_tag: in_emitter: Mitigate data loss on multiline
otherworkflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0
otherworkflows: bump docker/login-action from 4.2.0 to 4.3.0
otherworkflows: bump docker/metadata-action from 6.1.0 to 6.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
otherout_cloudwatch_logs: Plug SEGV on not found error
otherlib: librdkafka: Upgrade to v2.15.0
otherin_ebpf: Generate mostly monotonic event id for increasing traceability
otherin_splunk: return Splunk HEC auth status codes
otherout_forward: align secure forward handshake and chunk ack with protocol spec
fixout_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV)
fixout_stackdriver: fix payload parsing over-reads and null safety
othercodeowners: update @jeffluoo to @JeffLuoo
othergzip: skip FCOMMENT terminator in streaming decompressor
fixin_forward: fix 100% CPU hang and connection teardown use-after-free
otherbuild fixes: out_stackdriver int64_t line var, gzip endian-safe magic check
otherrelease: update to 5.0.8
othergithub: workflows: Adjust permissions to make efficient package/integration tests
othergithub: workflows: Specify OS configs explicitly
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses
fixregex: Plug a regex literal crash
otherout_forward: process type and length of pong strictly
otherunicode: Use the correct maximum size of Cyrillic
otheropentelemetry: render unset AnyValue in OTLP JSON
fixstorage: fix stale chunks handling on limits
otherworkflows: bump actions/checkout from 6.0.3 to 7.0.0
featurein_ebpf: Implement sched trace
otherin_tail: Plug timer lifecycle glitches on progress check
otherin_winevtlog: Handle structured xml query as separated subscriptions
otheraws: error_reporter: Plug SEGV occurrences on cloudwatch logs
fixin_tail: fix out-of-bounds read in unesc_ends_with_nl
fixconfig_format: fix caller-owned parse failure cleanup
otherworkflows: bump softprops/action-gh-release from 3.0.0 to 3.0.1
otherworkflows: bump github/codeql-action from 4.36.1 to 4.36.2
otherscheduler: Plug FD leaks on destroy
otherdockefile: Install libxxhash0 on builder image
otherworkflows: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
otherworkflows: bump reviewdog/action-hadolint from 1.50.5 to 1.51.0
otherout_loki: Handle loki tenant_id_key properly
otherout_cloudwatch_logs: Ensure escaping backslashes on cloudwatch API requests' body
othertests: runtime: Try to eliminate flakyness on CI load
fixin_tail: fix ignore_active_older_files to re-check mtime on aged-out files
otheraws: catch auth errors on XML responses
otherout_azure_blob: correctly handle successful Delete Blob responses
featurenode_exporter_metrics: Add file path to error messages
otherout_es/out_opensearch: sanitize bulk action metadata
fixopentelemetry: fix JSON histogram bounds handling
otherlib: cmetrics: upgrade to v2.1.5
otherrelease: update to 5.0.7
otherhttp_server: serialize worker teardown to prevent race conditions
fixhttp_server: fix libevent crash on connection drop
otherout_chronicle: Support label and namespace mapping
othertests: internal: fuzzers: avoid destroying active input fuzzer tasks
fixconfig_format: fix YAML variant cleanup on parser errors
otheravro: Handle int64 values correctly
othertests: runtime: Stabilize out_lib test case
otherin_elasticsearch: check map size before accessing first entry
fixsnappy: fix OOB reads in framed data parser
featurezstd: add 100 MB decompression size limit
fixin_mqtt: fix OOB read from hardcoded remaining length overhead
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB
otherin_forward: validate array size before accessing message mode fields
fixin_syslog: fix integer overflow in octet-counting length parser
fixout_stackdriver: fix multiple memory leaks and potential corruption
breakingCODEOWNERS: remove @braydonk and @jefferbrecht
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo
otherstorage: discard checksum corrupt chunks on startup
featureparser: Add IANA time_zone support for native timestamps
otherworkflows: pin all actions to SHA
otherout_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB
otherin_stdin: support stdin plugin on windows
featurein_ebpf: Implement dns trace
otherout_s3: Provide options for inactive chunks behavior
featureoauth: out_http: add user-agent option for oauth
fixin_tail: fix offset_key value multiplied by 8 on Windows 64-bit
otherhttp_client_http2: bracket IPv6 authority hosts
otherrelease: update to 5.0.6
featureenv: add bash-style default value operator :-
otherlib: cfl: upgrade to v0.7.1
otherout_kafka: partition OTLP logs by resource
fixsds: general fixes for sds_cat() usage
otherin_forward: handle unpacker allocation failure
othertests: prevent port binding failures in concurrent OTEL tests
otherengine: ignore duplicate STOP to prevent shutdown spin
otherout_azure_logs_ingestion: Plug SEGV on termination
featurepackaging: add support for Ubuntu 26.04
featureconfig: storage: Add total limit size of DLQ
otherhttp_server: harden listener and architecture
othertests: runtime: wait for tail truncate output
fixin_tail: fix file append cleanup on failure
otherin_tail: reconcile files after missed inotify events
othergithub: workflows: Restore ok-package-test trigger behavior
securitysecurity: update policy for 5.0 and EOL 4.1
fixsds: fix handling of cfl_sds return buffers after cfl upgrade
othertls: omit SNI for IP literal hosts
otherhttp_server: spawn internal server in threaded mode
otherin_node_exporter_metrics: Skip ipv6 metrics collection when disabled
breakingout_logdna: remove promoted known keys
featurein_ebpf: Implement exec trace
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak
featureaws: update support for additional regions
otherfilter_kubernetes: make memory growth rigidly on filter k8s
otherout_s3: Handle otlp JSON format
otherfilter_log_to_metrics: retry timer metric append
fixcrypto: fix build with OPENSSL_NO_ENGINE
otherscripts: enable working runtime tests
otheropentelemetry: preserve otlp log resource grouping
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit
fixout_forward: fix retain_metadata_in_forward_mode default value (true)
otherrelease: update to 5.0.5
otherlib: cmetrics: upgrade to v2.1.3
fixinput: fix threaded input conditional routing for logs
otherout_influxdb: plug tag keys failure on out influxdb
fixrouting: fix issue with missing input alias
otherrelease: update to 5.0.4
othertests: http_client_chunked: Plug SEGV occurence on macOS
featurein_http: add new /health endpoint
fixout_loki: fix 'occured' -> 'occurred' in comment
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size
fixin_dummy: Use pre_run callback to fix crash path
otherin_tail: drop redundant fstat() on event collection
otherml: ensure context is registered for REGEX type
otherin_forward: handle retain metadata in upstream conf
otherin_tcp: in_udp: Enhance of parser capabilities
otherhttp_client: Restore behavior for dummy http client
othertests: integration: introduce in-tree integration test suite
otherparser: Address wrong assignments of timezone at midnight
otherrelease: update to 5.0.3
otherworkflows: Unify steps of downloading built macOS packages
fixrecord accessor: fix CFL root-key matching and container translation
featureenv: add new extended format to handle environment variables
fixout_s3: fix retry_limit semantics and multipart upload memory leaks
otherlib: cmetrics: upgrade to v2.1.2
otherin_tail: harden db offset restore across restart
otheroauth2: restore legacy context creation behavior
othernetwork: Handle baraketed ipv6 addresses
fixin_opentelemetry: fix tag routing issue
featurehttp_server: add settings for ingress queue
otherout_syslog: address invalid configurations on in syslog
fixinput_thread: replace raw read() with pipe abstraction to fix crash
otherworkflows: Windows docker insufficient disk space fix
otherhttp_client: enhance parser in timeouts and protocol parsing
featurein_ebpf: add tcp trace
otherrelease: update to 5.0.2
otherbuild: Detect version bump to permit "release: " prefix
otheraws: compression: arrow: Set up proper block size
fixdockerfiles: windows: fixed VS Build Tools installation
featureout_azure_blob: add path templating support comparable to s3
otheroauth2: harden token refresh parsing
fixout_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing
featurein_ebpf: Add vfs trace
featureagents: add initial AGENTS.md
othermoth: update banner to v5.0
othertests: runtime: Mark another port 4318 raced test case
othertests: CI test stabilization
otherworkflows: ensure 5.0 releases are handled
featureopentelemetry: add OTLP JSON and OTLP Proto helpers
otherrelease: update to 4.2.8
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]
fixout_stackdriver: fix payload parsing over-reads and null safety [Backport to 4.2]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 4.2]
otherrelease: update to 4.2.7
otherreleasse: Update version to v4.2.7 [4.2 branch]
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2]
otherlib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2]
otherin_forward: validate PING is a msgpack array in check_ping [Backport to 4.2]
otherout_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2]
othergzip: read magic number endian-safely in streaming decompressor [Backport to 4.2]
fixin_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2]
otherin_splunk: return Splunk HEC auth status codes [Backport to 4.2]
otherrelease: update to 4.2.6
otherworkflows: Windows docker insufficient disk space fix [Backport to 4.2]
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2]
fixout_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2]
featureparser: Add IANA time_zone support for native timestamps [Backport to 4.2]
otheroauth2: harden token refresh parsing [Backport to 4.2]
fixdockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2]
otherworkflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2]
otherout_stackdriver: backport codeowners change
othergithub: workflows: Process unit tests on 4.2 branch [Backport to 4.2]
othergithub: workflows: Specify OS configs explicitly [Backport to 4.2]
fixregex: Plug a regex literal crash [Backport to 4.2]
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2]
otherunicode: Use the correct maximum size of Cyrillic [Backport to 4.2]
otherout_forward: process type and length of pong strictly [Backport to 4.2]
featurenode_exporter_metrics: Add file path to error messages [Backport to 4.2]
otherout_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2]
othertests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2]
otherscheduler: Plug FD leaks on destroy [Backport to 4.2]
otherrelease: update to 4.2.5
featurepackaging: add support for Ubuntu 26.04 (backport to 4.2)
featurebackport: env: add bash-style default value operator :-
otherout_chronicle: Support label and namespace mapping [Backport to 4.2]
fixinput_thread: replace raw read() with pipe abstraction to fix crash [Backport to 4.2]
otheraws: compression: arrow: Set up proper block size [Backport to 4.2]
othernetwork: Handle braketed ipv6 addresses [backport to 4.2]
otherparser: Address wrong assignments of timezone at midnight [Backport to 4.2]
fixrouting: fix issue with missing input alias [Backport to 4.2]
otherout_influxdb: plug tag keys failure on out influxdb [Backport to 4.2]
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size [Backport to 4.2]
otherfilter_kubernetes: don't recycle connections in fetch_pod_service_map [Backport to 4.2]
fixin_tail: fix file append cleanup on failure [Backport to 4.2]
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak [Backport to 4.2]
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit [Backport to 4.2]
otherengine: ignore duplicate STOP to prevent shutdown spin [Backport to 4.2]
fixin_dummy: Use pre_run callback to fix crash path [Backport to 4.2]
breakingout_logdna: remove promoted known keys [Backport to 4.2]
fixcrypto: fix build with OPENSSL_NO_ENGINE [Backport to 4.2]
otherout_azure_logs_ingestion: Plug SEGV on termination [Backport to 4.2]
otherin_forward: handle unpacker allocation failure [Backport to 4.2]
othertests: runtime: wait for tail truncate output [Backport to 4.2]
otheravro: Handle int64 values correctly [Backport to 4.2]
fixmp: fixed count when empty data
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB [Backport to 4.2]
otherin_forward: validate array size before accessing message mode fields [Backport to 4.2]
fixin_syslog: fix integer overflow in octet-counting length parser [Backport to 4.2]
fixin_mqtt: fix OOB read from hardcoded remaining length overhead [Backport to 4.2]
otherzstd: cap buffer at max instead of aborting on overshoot [Backport to 4.2]
othersnappy: read frame length as 3 bytes to avoid OOB at boundary [Backport to 4.2]
otherin_elasticsearch: check map size before accessing first entry [Backport to 4.2]
otherdockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2]
fixfilter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2]
othermultiline: ml: Propagate metadata even if on exceptions [Backport to 4.2]
otherfilter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2]
otherworkflows: Suppress invalid glob patterns [Backport to 4.2]
fixprocessor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2]
otherhttp_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2]
breakinggithub: workflows: remove trivy cron workflow
fixavro: out_kafka: Fix specification errors in avro format [Backport to 4.2]
otherlib: monkey: upgrade to v1.8.8
otherengine: use effective post-processor counts for output metrics (v4.2)
otherrelease: Update to v4.2.4
otherrelease: update to 4.2.3
othercopyright: update year to 2026
fixfilter_kubernetes: fix parser annotation leak
othergithub: scripts: commit_linter: Handle bin prefix for fluent-bit.c
otherbin: Handle CONT signal properly under leaks command
otherfilter_wasm: Handle group metadata
fixcmake: kafka: fix OAuth Bearer detection on Windows
securitymaintenance: update branch and security EOL info
featuregithub: scripts: commit_prefix_check: add config format rules on linter
otherreadme: update active branch 4.2
otherout_opentelemetry: on HTTP/2, read and process gRPC status code
otherconfig_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2]
fixfilter_log_to_metrics: fix initialization and exception cleanup
otherout_stackdriver: clean up oauth2 cache lifecycle
otherfilter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport]
featurein_winevtlog: Add text format for event rendering [Backport to 4.2]
featurein_tail: Add skipped_lines counter [Backport to 4.2]
featurein_splunk: Implement handling remote addr feature [Backport to 4.2]
otheraws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport]
otherplugin_proxy: enable event_type specification for proxy plugins (4.2 Backport)
otherin_splunk: Plug memory issues [Backport to 4.2]
otherpackaging: script: Use rockylinux prefix on package testing script
otherrelease: update to 4.2.2
securitysecurity: Update supporting timeline
otherout_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests
featureaws: Implement simple_aggregation operation
otherout_kinesis_firehose: enable HTTP debugging for AWS client requests
featurehttp_client: add ipv6 bracket if missing from host address
otherlib: updates 20251223
otherrelease: update to 4.2.1
otherworkflows: Not to make latest on publishing 4.1 series on GitHub Relases
fixin_forward: fix connection release on pause memory corruption
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space
otherworkflows: bump actions/checkout from 5 to 6
featurein_opentelemetry: added five missing configuration option descriptions. Fixes #11191.
featureout_s3: implement retry_limit parameter
featurein_blob: added missing configuration descriptions. Fixes #11204.
featuretls: openssl: Implement flexible certstore loading on Windows
featurein_kubernetes_events: add support for configuring input upstream network setup
featureworkflows: add new commit linter tool
otherworkflows: bump actions/checkout from 4 to 6
otherworkflows: bump actions/setup-python from 5 to 6
otherdockerfile: Docker image to support large page sizes
otherdockerfile: update to Debian Trixie
otherin_elasticsearch: fixing missing config parameter description for http2. Fixes #11221.
fixin_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #11232.
otherin_forward: improve configuration parameter descriptions
othergithub: commit_linter: Make more flexibility for commit linter
otherbuild: prevent the toolchain from emitting an executable stack
fixin_forward: fix segfault and double-free in trace path handling
otherin_node_exporter_metrics: Increase buffer size to read /proc/stat correctly
featurein_http: added missing config parameter descriptions.
otherworkflows: bump peter-evans/create-pull-request from 7 to 8
fixout_flowcounter: Fix incorrect bytes calcuation
otherworkflows: bump actions/cache from 4 to 5
otherworkflows: bump actions/download-artifact from 6 to 7
otherworkflows: bump actions/upload-artifact from 5 to 6
othergithub: workflows: Clean up needless resources on GHA workers
featurein_ebpf: add three missing config option descriptions. Fixes #11221.
otherin_gpu_metrics: updated config parameters descriptions.
otherbuild: Tweak linker flags for zstd
otherin_winevtlog: Plug glitches of time offset for DST/STD switches
otherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
otherworkflows: Make not to be the latest release for 4.0 branch
otherbuild: bump to v4.2.0
securitysecurity: update versions and general info
featurehelp: add space for outputs and processors when generating schema.
otheropentelemetry: traces: unify JSON to ctrace encoder
featurerouting: add new routing mechanism for input plugins
othermp: extend cobj API to expose group metadata and attributes
featurein_node_exporter_metrics: add netstat linux collector
otherfstore: safe check on fsf file deletion
otherworkflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch
featurerouter: add conditional support for Logs
fixaws_credential_sts: internal: Fix unit test failures
otherworkflows: bump actions/upload-artifact from 4 to 5
otherworkflows: bump actions/download-artifact from 5 to 6
fixrouter_condition: Fix unconditional route check in routing
featureout_vivo_exporter: add versioned API endpoints
featurerouter: add contexts to conditional support for direct route paths
othersnap: Upgrade snap from core18 to core20
featuredoc-reports: add cncf audit report
otherchunks: extend metadata to support routing information (direct routes)
otherworkflows: bump helm/kind-action from 1.12.0 to 1.13.0
breakingdockerfile: removed unused DLLs from image for Windows Containers
fixkafka: fix cmake cross compile error
featurein_syslog: Add support for RFC 6587 octet-counting
featureout_s3: Add a NULL check for plugging SEGV on dry_run
featurepackaging: add missing SASL dependencies for Rocky/AlmaLinux
fixfix: Make TLS initialization thread-safe and idempotent using pthread_once
featuremotd: add 4.2 banner
featureout_http: Added PUT support
featurerouting: introduce metrics for unmatched (dropped) logs
featurein_tail: Implement long line truncation
featurepackaging: add -L flag to curl for redirect support
featurestorage: config: engine: Introduce dead letter queue
featureworkflows: staging-release: add v4.2
+13 more items in the release notesotherrelease: update to 4.1.2
fixreload: fix race between watchdog start and setting async cancellation
fixstorage: fix heap corruption in chunk sort parser
featurein_calyptia_fleet: add support for net.* properties for the upstream connection.
fixin_forward: fix username parsing
fixin_forward: Fix incorrect user auth sequence
featurehelp: add space for outputs and processors when generating schema. [Backport to 4.1]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherfstore: safe check on fsf file deletion [Backport to 4.1]
otherwasm: Plug wasm heap leakages [Backport to 4.1]
featureout_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1]
fixin_forward: fix connection release on pause memory corruption [backport to 4.1]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.1]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.1]
otherrelease: update to 4.1.1
featureworkflows: windows: Add a testing flow with using ARM64 Windows runner
otherscripts: Handle two or more digits for patch version
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter
otherin_splunk: return correct error response for http/1 handler.
otherworkflows: bump ossf/scorecard-action from 2.4.2 to 2.4.3
featureopentelemetry: allow empty strings for TraceID and SpanID (logs)
otherworkflows: bump peter-evans/dockerhub-description from 4 to 5
featureworkflows: add sanity check for toolchains w/ CXX support
featurein_winevtlog: Implement trying to reconnect on cancel mechanism
otherreload: refactor watchdog to be preemptable on windows.
otherdocs: fix broken links
featurein_docker: add helper for container name parsing
featureout_opentelemetry: add configurable log resource limits
otherout_opentelemetry: no longer reallocates the http2 setting string
fixin_http: fix handling of URL encoded value
securityout_file: sanitize incoming Tag to prevent path traversal
otherrouter: use memchr() and tag length for matching tags
fixin_forward: Fix user authentication to align Fluentd's behavior
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup
otherin_calyptia_fleet: load configuration on initial startup.
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list.
otherworkflows: bump github/codeql-action from 3 to 4
fixout_es: fix elasticsearch output api key usage
otherrelease: Update version to 4.0.14
fixengine: fix memory leaks with parse error handling in parse_string_map_to_list (backport of #10943).
featurehelp: add space for outputs and processors when generating schema.
fixin_tail: fix last_processed_bytes calculation [Backport to 4.0]
otherfstore: safe check on fsf file deletion [Backport to 4.0]
othertests: internal: aws_credentials_sts: fix unit test (timestamps)
otherwasm: Plug wasm heap leakages [Backport to 4.0]
fixin_forward: fix connection release on pause memory corruption [Backport to 4.0]
featurein_opentelemetry: added five missing configuration option descriptions [backport 4.0]
breakingworkflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.0]
fixout_flowcounter: Fix incorrect bytes calcuation [Backport to 4.0]
fixin_forward: fix segfault and double-free in trace path handling [Backport to 4.0]
otherin_winevtlog: Plug glitches of time offset for DST/STD switches [Backport to 4.0]
otherrelease: Update version to v4.0.13
otherin_calyptia_fleet: load configuration on initial startup (backport #10996 to 4.0).
fixstorage: fix heap corruption in chunk sort parser [Backport to 4.0]
fixin_forward: Fix of handshaking on forward protocol [Backport to 4.0]
otherrelease: Update to v4.0.12
fixin_splunk: fix the invalid data format response when submitting valid data.
featureopentelemetry: allow empty strings for TraceID and SpanID (logs) [Backport to 4.0]
otherin_emitter: in_forward: Ensure ring buffer on threaded mode in emitter [Backport to 4.0]
otherout_opentelemetry: no longer reallocates the http2 setting string [Backport to 4.0]
fixlog_to_metrics: fix improper handling of record accessor context [Backport to 4.0]
featureout_opentelemetry: add configurable log resource limits [Backport to 4.0]
fixin_http: fix handling of URL encoded value [Backport to 4.0]
securityout_file: sanitize incoming Tag to prevent path traversal [Backport to 4.0]
featurein_docker: add helper for container name parsing [Backport to 4.0]
featurereload: add a timeout mechanism and its based commits backporting [Backport to 4.0]
fixin_forward: Fix user authentication to align Fluentd's behavior [Backport to 4.0]
otherrouter: use memchr() and tag length for matching tags [Backport to 4.0]
otherreload: refactor watchdog to be preemptable on windows. [Backport to 4.0]
fixin_http: in_splunk: in_elasticsearch: fix tag_key lookup [Backport to 4.0]
otherrelease: Update version 4.0 [4.0 branch]
otherpackaging: support Alma/Rocky/CentOS 10 plus Debian Trixie/13 [Backport to 4.0]
otherinput: private plugins must use global event loop [Backport to 4.0]
fixtls: fix regression and proper shutdown [Backport to 4.0]
otherrelease: Update version to v4.0.10
fixin_splunk: fix the response when receiving empty payload - backport of 10800
featurein_event_type: implement pause/resume to stop timed collector.
otherworkflows: Install NSIS via chocolatey [Backport to 4.0]
otherin_winevtlog: Plug possible SEGV occurrence paths [Backport to 4.0]
otherlib: updates for cmetrics and monkey (v4.0 backport)
otherutils: relax proxy URL parsing
otherupstream: Move clearing TLS session from prepare phase to destroy phase [Backport to 4.0]
fixin_storage_backlog: fix use-after-free when segregating chunk [Backport to 4.0]
otherrelease: update to 4.0.9
fixin_tail: fix memory leak when using generic unicode conversion (backport #10781)
othercmake: explicitly disable FLB_UNICODE_ENCODER when FLB_USE_SIMDUTF is disabled. [Backport to 4.0]
otherpipe: Specify linger option for flb_pipes which is build on top of socketpairs on Windows [Backport to 4.0]
othercmake: backport #10778 and #10786 to 4.0.
fixengine: fix busy chunks on reload. [Backpoprt to 4.0]
breakingopentelemetry: remove enforcement of timestamp fields for logs (backport v4.0)
featurehttp_client: add response and read idle timeouts (backport v4.0)
fixhttp_client: fix incomplete error handling in flb_http_do() (backport v4.0)
fixopentelemetry: fix handling of numeric attributes (backport v4.0)
featuredownstream: implement pause and resume functionality [Backport to 4.0]
fixnetwork: fix strerror_r detection for musl [Backport to 4.0]
fixengine: fix endless loop on reload [backport to 4.0]
otherrelease: update to 4.0.8
otherinput_metrics: discard cmetrics with no series (backport v4.0)
featurein_node_exporter_metrics: add Linux sockstat collector (backport v4.0)
featurein_node_exporter_metrics: add Linux hwmon collector (backport v4.0)
fixpack: fix token count regression in JSON tokenizer and remove parser reset (backport 4.0)
otherin_kafka: improve offset commit timing to avoid data loss in edge cases (backport v4.0)
featurein_node_exporter_metrics: add new option 'path.rootfs' (backport v4.0)
featureout_azure_kusto: Added workload identity support (backport v4.0)
otherout_datadog: task_arn now correctly mapped to full arn (backport v4.0)
featureout_cloudwatch: add entity support and remove unnecessary log content (backport v4.0)
featureout_kinesis_firehose: introduce port parameter (backport v4.0)
otherdockerfiles: windows: update to ltsc 2025 and fix layers
featureout_es: add apikey to available auth types
otherlib: chunkio: update to 98988d25
otherin_calyptia_fleet: fleet config fetch ignores older-timestamped files
fixopentelemetry: logs: fix packaging length for trace_id and span_id (backport 4.0)
otherworkflows: Retrieve the actual target image with tag [Backport to 4.0]
featureworkflows: Add sudo for a cleanup step
otherrelease: update to 4.0.7
otherin_windows_exporter_metrics: Handle DST more precisely with dynamic timezone verison of functions [Backport to 4.0]
fixopentelemetry: general fixes for log handling [Backport to 4.0]
otherrelease: Update to 4.0.6 [4.0]
fixout_chronicle: Fix log_key detection mechanism [Backport 4.0]
otherfilter_aws: send entity attributes for telemetry association [Backport 4.0]
otherin_winevtlog: Handle Daylight saving time by using newer functions [Backport to 4.0]
otherin_windows_exporter_metrics: Follow windows_exporter prom names correctly and support connection_state metrics [Backport to 4.0]
otherlib: cmetrics: upgrade to v1.0.5 [Backport to 4.0]
featureoutput: add Histogram Metric for end-to-end chunk latency [Backport to 4.0]
breakinginput: remove second close on collector timer during destruction to avoid double-closing [Backport to 4.0]
featurein_nginx_exporter_metrics: add scrape_interval option (default: 5s) [Backport to 4.0]
otherout_kafka: do not release config map properties [Backport to 4.0]
otheropentelemetry: utils: handle NULL type as empty strings [Backport to 4.0]
otherin_opentelemetry: handle NULL body in otlp_pack_any_value (fix #10674) [Backport to 4.0]
featurein_prometheus_textfile: new plugin to read .prom metric files [Backport to 4.0]
otherrelease: update to 4.0.5
fixworkflows: fix windows check for container image
otherout_file: Replace SHCreateDirectoryExA to work for recursive directories correctly
othernetwork: enable EDNS for DNS queries
fixpackaging: fix Debian buster repo issues [backport 4.0]
othertls: openssl: output: configurable certstore name [Backport 4.0]
otherpack: Handle UINT64_MAX value correctly in json packing [Backport 4.0]
otherin_windows_exporter_metrics: Extend metrics [Backport 4.0]
otherin_syslog: do batching to reduce ring buffer pressure under load [v4.0]
otheraws: restore IMDS timeouts after upstream_set in EC2 provider [v4.0]
featureoutput: add new net.proxy_env_ignore option [v4.0]
otherrelease: update to 4.0.4
otherworkflows: bump ossf/scorecard-action from 2.4.1 to 2.4.2
otherinstall: update install script to handle Rocky/Alma repos now
fixhash_table: fix leak in case insensitive and add unit tests
otherio: on network connect exceptions, invalidate file descriptor
featureconfig: implement storage inheritance option
otherlib: luajit: only require a C compiler
otherlog_event_decoder: validate memory allocation
fixfilter_modify: fix leaks on exceptions
fixupstream: fix connection count when net.max_worker_connections is set
featurefilter_lua: add groups metadata and body support
otherlib: lwrb: build it as a static lib instead of an interface
othermultiline: release unpacked contexts on exceptions
fixprocessor_content_modifier: fix leak on JSON conversion and data type
fixout_opentelemetry: fix leaks on exceptions
featurehttp_server: add new API to configure the maximum buffer size
fixin_calyptia_fleet: fix memory leak in get_fleet_id_from_header.
fixout_opentelemetry: fix handling of retry status (fix #10481)
otherin_splunk: continue with the next token if length of auth header vs token doesn't match
featureconfig_format: yaml: add detailed error message on bad format
otherin_calyptia_fleet: report the configuration version.
otherdockerfile: Enable default SIMD support in Docker
featurekafka: add support for AWS MSK IAM authentication
featureupstream: prioritize the reuse of connections instead of establishing new ones
fixprocessor_sampling: fix stale span references in registry
featureunicode: defs: conv: Implement conversion rules of character encodings
fixin_calyptia_fleet: fix init error mem leaks.
featurerecord_accessor: add support for binary values and references
featurenetwork: add new net.backlog property to set somaxconn in the process listeners
fixnetwork: general fixes for failure states
featureopentelemetry: new abstraction to handle OTLP data
fixprocessor_sql: record_accessor: stream_processor: Fix yylex() function signatures
featurefilter_lua: add support to access groups and metadata
fixout_opentelemetry: fix logic for grouping when using resource_id/scope_id
fixdownstream: fix check of accept timeout
fixout_cloudwatch_logs: fix strcasestr _GNU_SOURCE
fixreload: fix handling hot reload when reload failure
featurein_kafka: add enable_auto_commit option for Kafka consumer
fixout_opentelemetry: fix behavior of record attributes handling
deprecatedworkflows: deprecate windows-2019
+16 more items in the release notesfeaturepackaging: add AlmaLinux and RockyLinux builds
breakingin_node_exporter: removed unnecessary optimization that caused crash
fixhttp_client: fix muti part http2 request not working
otherbackport to v.3.2 -- in_tail: make read_from_head after the initial discovery optional
otherwasm: Enable reference types feature on wasm
fixengine: fix segfault in flb_config_init error case
otherin_opentelemetry: Configurable logs_body_key
otherrelease: update to 4.0.3
otherin_winevtlog: Support remote access of winevtlog
otherout_opensearch: Prevent a SIGSEGV when ctx->index is NULL
featurefilter_parser: add record accessor support in parser filter
otherbuild: ci: tune MSVC flags, modify ci caching
otherstrptime: Support some of abbriviated timezone strings for GNU extensions
otherlib: upgrade libraries 20250522
othergo: plugin_proxy: error on plugin initialization errors
fixgzip: fix handling of concatenated payloads
othersimdutf_connector: in_tail: skip UTF-16/UTF-8 BOM
otherlog: expose internal logging call counts as internal metrics
otherin_exec_wasi: change wasm_runtime_call_wasm to wasm_application_execute_main to support latest version of tinygo
featureout_azure_blob: added buffering to azure blob
featureengine: add input grace period and check pending chunks on shutdown
otherin_forward: Check return values from mutex functions
otherlib: miniz: only require a C compiler
featureapi: proxy: custom: Implement APIs for custom Go plugins
fixprocessor_sampling: tail: fix spans reconcile processes
otherout_es: Prevent a SIGSEGV when ctx->index is NULL
otherconfig: error configure_plugins_type on invalid properties
otherbuild: Detect msgpack-c and msgpack-c to be valid msgpack library
fixinput: fixed threaded input processor initialization
featureutils: if flb_utils_write_str uses SIMD, add missing highbit_set check() detection
featureout_azure_kusto: support for otel log schema
othertest: stream_processor: Plug a SEGV for macOS
fixgzip: fix decompressor memset usage
fixin_tcp: fix parsed bytes to include separator length
otherin_http: validate memory allocation and fix object type on tag key
fixout_azure_kusto: fix segfault when log level is debug or trace
otherin_opentelemetry: handle exception on unsupported compress format
fixin_forward: fix handling of connections and memory on exceptions
breakingpackaging: remove older Ubuntu targets from smoke test
otherrelease: update to 4.0.2
othertests: internal: fuzzers: split cmetrics decoding
securitysecurity: update policy for 4.0 release series
fixout_azure_kusto: fixed double free
otherlib: ctraces: upgrade to v0.6.5
otherbuild: use the system provided libmsgpack and libsqlite3 if found
otherbuild: only compile simdutf if there is CXX support
featureengine: added conditional to avoid re-scheduling conflict
featurepack: add support for metadata and group info in JSON log
otherprocessor: fail on startup when invalid processors are configured
othersimd: Use __riscv_vsetvl_eXXm1 function to get the actual width of RVV instructions
fixopentelemetry: fix handling of schemaUrl in resource and scope
fixsystemd: build: fix service startup failure when using IMDSv2
featureinput: add missing options to input_global_properties.
otherbin: config: Provide windows.maxstdio option for increasing I/O limit on Windows
otherlib: update CMetrics and CTraces
otherlib: cmetrics: upgrade to v1.0.2
otherout_splunk: Change attaching priority for HEC token
otherrelease: update to 4.0.1
fixplugin_proxy: fixed memory leak
featureout_azure_kusto: added buffering fixes
featurein_storage_backlog: added missing routing mask initialization
fixconfig: yaml: fix double-free from freeing state before cleanup on exit.
otherci, dockefile: frozen version of CMake
otherdockerfile: Windows Containers image Fluent Bit NMake build
otherinput_chunk: routes_mask is not initialized (#10223)
otherlib: dependency updates
otherpipeline: inputs: podman_metrics: use after free fix
fixout_azure_blob: fixed double free
otherin_tail: make read_from_head after the initial discovery optional
fixin_tail: fix disposal order to prevent use after free
othertests: internal: fuzzers: extend ctrace fuzzer
fixopentelemetry: fix support for schema_url in opentelemetry plugins.
fixout_oracle_log_analytics: fix use-after-free on flush failure
fixmp: fix flb_mp_accessor_keys_remove for sibling keys removal
otherci: CMake upgrade in code analysis script
fixconfig_format: fix SEGV from missing return check
fixconf: parsers: fix istio-envoy-proxy parser regex