Fluent Bit 4.2.5 → 5.0.11
14 releases · 2 breaking changes · 1 security fix · 0 advisories fixed
1security2breaking0deprecated24feature38fix
Breaking changes
- breaking CODEOWNERS: remove @braydonk and @jefferbrecht in 5.0.7
- breaking out_logdna: remove promoted known keys in 5.0.5
Security changes
- security security: update policy for 5.0 and EOL 4.1 in 5.0.6
Every release in between
otherrelease: update to 5.0.11
fixin_winevtlog: fix crash when all channels are missing and ignore_missing_channels is enabled [Backport to 5.0]
otherpackaging: distros: centos: Enable kafka input/output plugins for Stream 9/10 [Backport to 5.0]
otherpackaging: distros: almalinux: rockylinux: Install zlib-devel correctly [Backport to 5.0]
othergithub: workflows: Use cmake 4.2 and minimum policy [Backport to 5.0]
otherworkflows: bump docker/login-action from 4.3.0 to 4.4.0
otherrelease: update to 5.0.10
featurein_node_exporter_metrics: Add a capability to adjust log level w/ error paths [Backport to 5.0]
othergithub: workflows: Enable unit testing on 5.0 branch [Backport to 5.0]
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 5.0]
othertls: yield downstream read retries to the event loop [Backport to 5.0]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 5.0]
othertls: openssl: preserve syscall error details (5.0)
othergithub: workflows: Update release workflow for 5.1 development cycle [Backport to 5.0]
otherbackport: apply selected maintenance fixes to 5.0
otherworkflows: bump azure/setup-helm from 5.0.0 to 5.0.1
otherworkflows: bump actions/setup-python from 6.2.0 to 6.3.0
otherworkflows: bump actions/cache from 5.0.5 to 6.0.0
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches
otherworkflows: bump actions/cache/restore from 6.0.0 to 6.1.0
otherworkflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0
otherworkflows: bump actions/cache/save from 6.0.0 to 6.1.0
otherrelease: update to 5.0.9
featurein_windows_exporter_metrics: Implement user-defined performance counters w/ PDH
othertests: runtime: Try to address test hang
otherworkflows: bump docker/build-push-action from 7.2.0 to 7.3.0
otherworkflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0
otherin_forward: validate PING is a msgpack array in check_ping
otherfilter_kubernetes: Attach k8s metadata for internal logs
featurein_ebpf: Implement openssl trace
othertests: runtime: Use more concrete matchers for assertions
otherin_tail: Another attempt to plug segv on in tail
otherfilter_write_tag: in_emitter: Mitigate data loss on multiline
otherworkflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0
otherworkflows: bump docker/login-action from 4.2.0 to 4.3.0
otherworkflows: bump docker/metadata-action from 6.1.0 to 6.2.0
otherworkflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3
otherout_cloudwatch_logs: Plug SEGV on not found error
otherlib: librdkafka: Upgrade to v2.15.0
otherin_ebpf: Generate mostly monotonic event id for increasing traceability
otherin_splunk: return Splunk HEC auth status codes
otherout_forward: align secure forward handshake and chunk ack with protocol spec
fixout_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV)
fixout_stackdriver: fix payload parsing over-reads and null safety
othercodeowners: update @jeffluoo to @JeffLuoo
othergzip: skip FCOMMENT terminator in streaming decompressor
fixin_forward: fix 100% CPU hang and connection teardown use-after-free
otherbuild fixes: out_stackdriver int64_t line var, gzip endian-safe magic check
otherrelease: update to 5.0.8
othergithub: workflows: Adjust permissions to make efficient package/integration tests
othergithub: workflows: Specify OS configs explicitly
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses
fixregex: Plug a regex literal crash
otherout_forward: process type and length of pong strictly
otherunicode: Use the correct maximum size of Cyrillic
otheropentelemetry: render unset AnyValue in OTLP JSON
fixstorage: fix stale chunks handling on limits
otherworkflows: bump actions/checkout from 6.0.3 to 7.0.0
featurein_ebpf: Implement sched trace
otherin_tail: Plug timer lifecycle glitches on progress check
otherin_winevtlog: Handle structured xml query as separated subscriptions
otheraws: error_reporter: Plug SEGV occurrences on cloudwatch logs
fixin_tail: fix out-of-bounds read in unesc_ends_with_nl
fixconfig_format: fix caller-owned parse failure cleanup
otherworkflows: bump softprops/action-gh-release from 3.0.0 to 3.0.1
otherworkflows: bump github/codeql-action from 4.36.1 to 4.36.2
otherscheduler: Plug FD leaks on destroy
otherdockefile: Install libxxhash0 on builder image
otherworkflows: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0
otherworkflows: bump reviewdog/action-hadolint from 1.50.5 to 1.51.0
otherout_loki: Handle loki tenant_id_key properly
otherout_cloudwatch_logs: Ensure escaping backslashes on cloudwatch API requests' body
othertests: runtime: Try to eliminate flakyness on CI load
fixin_tail: fix ignore_active_older_files to re-check mtime on aged-out files
otheraws: catch auth errors on XML responses
otherout_azure_blob: correctly handle successful Delete Blob responses
featurenode_exporter_metrics: Add file path to error messages
otherout_es/out_opensearch: sanitize bulk action metadata
fixopentelemetry: fix JSON histogram bounds handling
otherlib: cmetrics: upgrade to v2.1.5
otherrelease: update to 5.0.7
otherhttp_server: serialize worker teardown to prevent race conditions
fixhttp_server: fix libevent crash on connection drop
otherout_chronicle: Support label and namespace mapping
othertests: internal: fuzzers: avoid destroying active input fuzzer tasks
fixconfig_format: fix YAML variant cleanup on parser errors
otheravro: Handle int64 values correctly
othertests: runtime: Stabilize out_lib test case
otherin_elasticsearch: check map size before accessing first entry
fixsnappy: fix OOB reads in framed data parser
featurezstd: add 100 MB decompression size limit
fixin_mqtt: fix OOB read from hardcoded remaining length overhead
otherin_collectd: reject parts with length < 4 and fix null-terminator OOB
otherin_forward: validate array size before accessing message mode fields
fixin_syslog: fix integer overflow in octet-counting length parser
fixout_stackdriver: fix multiple memory leaks and potential corruption
breakingCODEOWNERS: remove @braydonk and @jefferbrecht
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo
otherstorage: discard checksum corrupt chunks on startup
featureparser: Add IANA time_zone support for native timestamps
otherworkflows: pin all actions to SHA
otherout_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB
otherin_stdin: support stdin plugin on windows
featurein_ebpf: Implement dns trace
otherout_s3: Provide options for inactive chunks behavior
featureoauth: out_http: add user-agent option for oauth
fixin_tail: fix offset_key value multiplied by 8 on Windows 64-bit
otherhttp_client_http2: bracket IPv6 authority hosts
otherrelease: update to 5.0.6
featureenv: add bash-style default value operator :-
otherlib: cfl: upgrade to v0.7.1
otherout_kafka: partition OTLP logs by resource
fixsds: general fixes for sds_cat() usage
otherin_forward: handle unpacker allocation failure
othertests: prevent port binding failures in concurrent OTEL tests
otherengine: ignore duplicate STOP to prevent shutdown spin
otherout_azure_logs_ingestion: Plug SEGV on termination
featurepackaging: add support for Ubuntu 26.04
featureconfig: storage: Add total limit size of DLQ
otherhttp_server: harden listener and architecture
othertests: runtime: wait for tail truncate output
fixin_tail: fix file append cleanup on failure
otherin_tail: reconcile files after missed inotify events
othergithub: workflows: Restore ok-package-test trigger behavior
securitysecurity: update policy for 5.0 and EOL 4.1
fixsds: fix handling of cfl_sds return buffers after cfl upgrade
othertls: omit SNI for IP literal hosts
otherhttp_server: spawn internal server in threaded mode
otherin_node_exporter_metrics: Skip ipv6 metrics collection when disabled
breakingout_logdna: remove promoted known keys
featurein_ebpf: Implement exec trace
otherfilter_kubernetes: destroy TLS session to prevent SSL object leak
featureaws: update support for additional regions
otherfilter_kubernetes: make memory growth rigidly on filter k8s
otherout_s3: Handle otlp JSON format
otherfilter_log_to_metrics: retry timer metric append
fixcrypto: fix build with OPENSSL_NO_ENGINE
otherscripts: enable working runtime tests
otheropentelemetry: preserve otlp log resource grouping
otherfilter_kubernetes: destroy upstream and TLS context on happy path exit
fixout_forward: fix retain_metadata_in_forward_mode default value (true)
otherrelease: update to 5.0.5
otherlib: cmetrics: upgrade to v2.1.3
fixinput: fix threaded input conditional routing for logs
otherout_influxdb: plug tag keys failure on out influxdb
fixrouting: fix issue with missing input alias
otherrelease: update to 5.0.4
othertests: http_client_chunked: Plug SEGV occurence on macOS
featurein_http: add new /health endpoint
fixout_loki: fix 'occured' -> 'occurred' in comment
fixutils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size
fixin_dummy: Use pre_run callback to fix crash path
otherin_tail: drop redundant fstat() on event collection
otherml: ensure context is registered for REGEX type
otherin_forward: handle retain metadata in upstream conf
otherin_tcp: in_udp: Enhance of parser capabilities
otherhttp_client: Restore behavior for dummy http client
othertests: integration: introduce in-tree integration test suite
otherparser: Address wrong assignments of timezone at midnight
otherrelease: update to 5.0.3
otherworkflows: Unify steps of downloading built macOS packages
fixrecord accessor: fix CFL root-key matching and container translation
featureenv: add new extended format to handle environment variables
fixout_s3: fix retry_limit semantics and multipart upload memory leaks
otherlib: cmetrics: upgrade to v2.1.2
otherin_tail: harden db offset restore across restart
otheroauth2: restore legacy context creation behavior
othernetwork: Handle baraketed ipv6 addresses
fixin_opentelemetry: fix tag routing issue
featurehttp_server: add settings for ingress queue
otherout_syslog: address invalid configurations on in syslog
fixinput_thread: replace raw read() with pipe abstraction to fix crash
otherworkflows: Windows docker insufficient disk space fix
otherhttp_client: enhance parser in timeouts and protocol parsing
featurein_ebpf: add tcp trace
otherrelease: update to 5.0.2
otherbuild: Detect version bump to permit "release: " prefix
otheraws: compression: arrow: Set up proper block size
fixdockerfiles: windows: fixed VS Build Tools installation
featureout_azure_blob: add path templating support comparable to s3
otheroauth2: harden token refresh parsing
fixout_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing
featurein_ebpf: Add vfs trace
featureagents: add initial AGENTS.md
othermoth: update banner to v5.0
othertests: runtime: Mark another port 4318 raced test case
othertests: CI test stabilization
otherworkflows: ensure 5.0 releases are handled
featureopentelemetry: add OTLP JSON and OTLP Proto helpers
otherrelease: update to 4.2.8
otherin_winevtlog: Enrich EventData key-value map if enabled [Backport to 4.2]
fixout_stackdriver: fix payload parsing over-reads and null safety [Backport to 4.2]
otheravro: out_kakfa: handle empty map even if avro schema defines map type [Backport to 4.2]
otherrelease: update to 4.2.7
otherreleasse: Update version to v4.2.7 [4.2 branch]
othergithub: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2]
otherlib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2]
otherin_forward: validate PING is a msgpack array in check_ping [Backport to 4.2]
otherout_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2]
othergzip: read magic number endian-safely in streaming decompressor [Backport to 4.2]
fixin_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2]
otherin_splunk: return Splunk HEC auth status codes [Backport to 4.2]
otherrelease: update to 4.2.6
otherworkflows: Windows docker insufficient disk space fix [Backport to 4.2]
othertime: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2]
fixout_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2]
featureparser: Add IANA time_zone support for native timestamps [Backport to 4.2]
otheroauth2: harden token refresh parsing [Backport to 4.2]
fixdockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2]
otherworkflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2]
otherout_stackdriver: backport codeowners change
othergithub: workflows: Process unit tests on 4.2 branch [Backport to 4.2]
othergithub: workflows: Specify OS configs explicitly [Backport to 4.2]
fixregex: Plug a regex literal crash [Backport to 4.2]
otherin_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2]
otherunicode: Use the correct maximum size of Cyrillic [Backport to 4.2]
otherout_forward: process type and length of pong strictly [Backport to 4.2]
featurenode_exporter_metrics: Add file path to error messages [Backport to 4.2]
otherout_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2]
othertests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2]
otherscheduler: Plug FD leaks on destroy [Backport to 4.2]