Grafana Loki 3.6.6 → 3.7.7
20 releases · 7 breaking changes · 2 security fixes · 0 advisories fixed
2security7breaking0deprecated119feature82fix
Breaking changes
- breaking operator: switch default for OpenShift stream labels () in 3.7.3
- breaking engine: Make scheduler aware of total compute capacity () in 3.7.0
- breaking parsed labels should not override structured metadata () in 3.7.0
- breaking engine: Share worker threads across all scheduler connections () in 3.7.0
- breaking operator: consolidate image build workflows and improve documentation () in 3.6.12
- breaking move the Loki UI to a Grafana Plugin () in 3.6.12
- breaking operator: CI publishing image strategy () in 3.6.12
Security changes
- security security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (b318f28) in 3.7.4
- security security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (fc478e1) in 3.6.13
Every release in between
featureAdd flag to ignore missing chunks during deletion of logs with line filter [release-3.7.x] () (7a40404)
fixsecurity/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.2.5 [SECURITY] (release-3.7.x) () (07cd1f0)
fixsecurity/UNKNOWN/: Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] (release-3.7.x) () (9d1c9ee)
fixsecurity/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (release-3.7.x) () (1d5e027)
fixstorage: Pre-compute SHA-256 to avoid aws-chunked on PutObject [release-3.7.x] () (3d6f245)
fixqueryrange: Preserve sketch in MergeLabels [release-3.7.x] () (d48329d)
fixBuild deb/rpm packages again in the release workflow () (6f49272)
fixci: Disable docker plugin publishing on release-3.7.x () (6095f71)
fixingester: Fix flush race in ingester [release-3.7.x] () (ff152dc)
fixsecurity/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (11c4b29)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (1e3108e)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module go.opentelemetry.io/otel to v1.42.0 [SECURITY] (release-3.7.x) () (28917d3)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) () (5d2b9d4)
fixsecurity/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (8d71c59)
fixsecurity/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (941b557)
fixsecurity/UNKNOWN/: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) () (2347a9a)
fixsecurity/UNKNOWN/: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (release-3.7.x) () (f290af0)
fixci: Fix zizmor findings for operator-images in Loki 3.7 () (abc1186)
fixci: Helm CI warning fix () (7389428)
fixci: Re-enable docker plugin publishing () (28f44a8)
fixcompactor: Fix delete request when using Thanos objstore client with filesystem backend [release-3.7.x] () (dd6fdb5)
fixdeps: Update module charm.land/bubbletea/v2 to v2.0.7 (release-3.7.x) () (e11f935)
fixdeps: Update module charm.land/lipgloss/v2 to v2.0.4 (release-3.7.x) () (10213c2)
fixdeps: Update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 (release-3.7.x) () (3daf198)
fixdeps: Update module github.com/aws/smithy-go to v1.27.3 (release-3.7.x) () (1f6a191)
fixdeps: Update module github.com/baidubce/bce-sdk-go to v0.9.270 (release-3.7.x) () (103ccd8)
fixdeps: Update module github.com/coder/quartz to v0.3.1 (release-3.7.x) () (3509e31)
fixdeps: Update module github.com/IBM/ibm-cos-sdk-go to v1.14.1 (release-3.7.x) () (d0abe72)
fixdeps: Update module github.com/klauspost/compress to v1.18.6 (release-3.7.x) () (327da7c)
fixdeps: Update module github.com/pierrec/lz4/v4 to v4.1.27 (release-3.7.x) () (6b3297f)
fixdeps: Update module github.com/shirou/gopsutil/v4 to v4.26.5 (release-3.7.x) () (cb7f17d)
fixsecurity/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.7.x) () (6d8f1b5)
securitysecurity/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (b318f28)
fixsecurity/HIGH/: Update module github.com/apache/thrift to v0.24.0 [SECURITY] (release-3.7.x) () (36eb5f7)
fixsecurity/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) () (dd7a124)
fixsecurity/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.7.x) () (6fa6165)
fixstorage: Fix index filename issue with legacy S3 client and chunk_delimiter () (0eca83c)
breakingoperator: switch default for OpenShift stream labels ()
featureadd bloom filter to cache known streams for ExceedsLimits requests () (f5440a3)
featureadd builder pool to logsobj package () (8a68101)
featureadd case-insensitive regex optimization () (f6a6a4f)
featureAdd config to delegate stream limits check to limits-service only () (ba119f6)
featureadd flush manager to control data object flush lifecycle () (c169ce3)
featureadd GroupConsumer to kafkav2 package () (5ad60ee)
featureAdd results cache to thor query engine () (6ef3827)
featureAdd SubstringInsensitive compute fn () (9c03192)
featureAlign start time when the query is received () (8e18f10)
featureallow the initial offset to be set in the starting phase () (93f4bdf)
featureBatch records before writing to sinks () (f083618)
featurebench: add simulated object storage latency to LogQL benchmarks () (5102ed0)
featurebuild: Move to Go 1.26 () (4fb960c)
featureclose the records chan when consumer terminates () (c3d0de9)
featuredataobj-compactor: add a planner for compaction of data objects () (7f1450d)
featuredon't shuffle shard if shard factor is 1 () (7ac1d16)
featureearly goldfish correlation ID generation with X-Loki-Goldfish-ID header () (e90e4a6)
featureengine: Dedupe entries when building final result () (e95137a)
featureenginev2: Implement IsMember compute function () (a28d8b4)
featureenginev2: Implement regexp compute function () (7b8d51b)
featureenginev2: Implement substr compute function () (9740619)
featurehelm: Add common labels to all resources () (dc21099)
featurehelm: allow customization of write, read and backend PDB () (9f653b1)
featurehelm: finalize chart fork () (33f7a1b)
featurehelm: Memcached: allow to override CPU in the auto-computed resource mode () (3886548)
featureIntroduce a rate batcher to batch rate updates () (b9a0a15)
featurelimits: Add emptiness check to prepare for multiAZ () (4eeb70c)
featureloki-query-engine: instrument query-engine with runtime/trace () (a7c75a6)
featureloki: allow disabling cache for query_range requests () (1242aa5)
featureoperator: add option to customize gateway server cert () (3c8b9e8)
featureoperator: switch default for OpenShift stream labels () (61ec040)
featureoperator: Update Loki operand to v3.6.5 () (d81e977)
featureoperator: update metrics authentication to remove dependency on kube-rbac-proxy () (2de6e79)
featureput kotel behind a flag () (f8e2d64)
featurequery-engine: Omit labels with empty values () (5c17103)
featurerefactor frontend cache, add metrics, filter out cached streams () (a63f0c3)
featurerelease 3.7 () (21d5b59)
featureRemove Promtail support (backport k299) () (939d15f)
featurereset the consumption lag gauge after 1 minute of idle period () (f1d0cdf)
+195 more items in the release notesfixCVEs in release 3.7.x () (bb4c5d8)
fixdeps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (release-3.7.x) () (7bc9450)
fixFix ruler panic related to unset validation scheme (backport release-3.7.x) () (cf65729)
fixstorage: attach SHA-256 checksum on PutObject for Object Lock buckets () (7df13d9)
fixUpgrade Go and gRPC versions on 3.7.x () (2c8fff2)
breakingengine: Make scheduler aware of total compute capacity ()
breakingparsed labels should not override structured metadata ()
breakingengine: Share worker threads across all scheduler connections ()
featureability to send query context for limit enforcement () (1a66d2d)
featureadd downscalePermittedFunc to check downscale is permitted () (c0c27b3)
featureadd gauge to track in-flight bytes () (23ef8ec)
featureadd histogram loki_dataobj_consumer_flush_duration_seconds () (5a5e90e)
featureadd loki health command () (ef69cfd)
featureadd metric to track flush failures () (ed4f27e)
featureAdd new dataobj builder flush criteria () (498656b)
featureAdd partition state to consumption lag metric () (91d4eb6)
featureadd prepare downscale handler () (677b2ec)
featureadd processed records metric () (333da73)
featureadd race tolerance to query-tee () (014520a)
featureAdd resolved policy to blocked and enforced label error () (48d13d1)
featureadd segmentation keys and resolver () (c853f2c)
featureadd support for cancelation to copy and sort () (6a8b879)
featureAdd support for storing chunk deletion markers in object storage instead of local disk () (856c11d)
featureadd support for UpdateRates RPC to distributors () (9018886)
featureAdd UpdateRates RPC, update rates from the frontend, return no-op in the service () (e173cf4)
featurecanary: Support passing arbitrary set of labels to use for the query () (993b3ae)
featurecheck partition state in parallel () (b8536aa)
featureClient side index gateway shuffle sharding () (326c7d1)
featuredataobj-consumer add processed bytes metric () (fba0c5d)
featuredecouple dataobj consumers from the reader service () (c3e909d)
featuredisambiguate metadata for better scans () (66fd9d8)
featuredon't tee unsampled queries () (b975e48)
featureenable racing in the querytee () (23948c4)
featureEnable support for max, min, max_over_time, min_over_time for new engine () (b9a51f0)
featureengine: add regexp parser support for log queries () (5663f9c)
featureengine: delegate metastore queries to engine () (3a74fe7)
featureengine: implement strict and keepEmpty logfmt parsing () (01cab53)
featuregoldfish: add endpoints for serving stored results () (e17ae2d)
featuregoldfish: mv comparison_status to db, add stats endpoint () (c22e05c)
featureHandle state change lock in prepare downscale () (de092da)
featurehelm: nameOverride now passed through helm tpl function. () (7f56fd2)
featurehelm: Add ability to toggle grpclb port for query frontend service () (9c4f022)
featurehelm: Add startupProbe to distributor () (5b76589)
featurehelm: allow configuration of service trafficDistribution parameter () (55f95e3)
featurehelm: allow set topologySpreadConstraints on singleBinary () (265601f)
+226 more items in the release notesfixsecurity: Bump Go to 1.26.10 [SECURITY] (release-3.6.x) () (de41836)
fixdeps: Update dependencies related to otel for 3.6 () (603de5a)
fixsecurity/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [SECURITY] (release-3.6.x) () (3e7c0ed)
fixsecurity/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 [SECURITY] (release-3.6.x) () (ad5a87c)
fixsecurity: Bump Go to 1.26.9 [SECURITY] (release-3.6.x) () (c969f5c)
fixsecurity/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.6.x) () (d8d78f6)
fixsecurity/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.6.x) () (6d21d6b)
fixsecurity/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.6.x) () (ed9df58)
fixsecurity/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.6.x) () (ee0ef56)
fixsecurity/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.0.12 [SECURITY] (release-3.6.x) () (7fa1224)
fixsecurity/UNKNOWN/: Update module golang.org/x/crypto to v0.55.0 [SECURITY] (release-3.6.x) () (85b2d4f)
fixsecurity/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.6.x) () (57bc922)
fixsecurity/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (release-3.6.x) () (c08bf30)
featureAdd flag to ignore missing chunks during deletion of logs with line filter [release-3.6.x] () (b87159f)
fixsecurity/UNKNOWN/: Update module go.etcd.io/etcd/client/pkg/v3 to v3.5.33 [SECURITY] (release-3.6.x) () (bf4b367)
fixstorage: Pre-compute SHA-256 to avoid aws-chunked on PutObject [release-3.6.x] () (0a29895)
fixqueryrange: Preserve sketch in MergeLabels [release-3.6.x] () (20087cd)
fixBackport WAL replay hang fix to release-3.6.x () () (355e2f3)
fixci: Backport deb/rpm packaging fix to release-3.6.x () () (d7ee4de)
fixsecurity/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) () (a6cc2e5)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) () (a71c910)
fixsecurity/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) () (59970a9)
fixsecurity/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) () (8308a12)
fixci: Fix zizmor findings for operator-images in Loki 3.6 () (050f742)
fixci: Helm CI warning fix () (4bc2586)
fixsecurity/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.6.x) () (692f2b1)
securitysecurity/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (fc478e1)
fixsecurity/HIGH/pkg/push: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (70f75b7)
fixsecurity/HIGH/: Update golang.org/x/net, golang.org/x/text and google.golang.org/grpc [SECURITY] (70f75b7)
fixsecurity/UNKNOWN/cmd/chunks-inspect: Update go toolchain directive to v1.25.12 [SECURITY] (release-3.6.x) () (b327439)
fixsecurity/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (70f75b7)
fixsecurity/UNKNOWN/pkg/push: Update module golang.org/x/text to v0.39.0 [SECURITY] (70f75b7)
fixsecurity/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.6.x) () (697bd83)
fixsecurity: Backport security updates to release-3.6.x () (70f75b7)
fixUpdate objstore to include fix for GCS Exists () (87383d8)
breakingoperator: consolidate image build workflows and improve documentation ()
breakingmove the Loki UI to a Grafana Plugin ()
breakingoperator: CI publishing image strategy ()
featureadd json parsing stage to v2 engine () (aec34ed)
featureadd logfmt parse support to the v2 query engine () (ccb4549)
featureadd loki health command (backport release-3.6.x) () (dfdbe2a)
featureadd p50, p95 and p99 section sizes per tenant () (cb3b74a)
featureadd p50, p95 and p99 sections per tenant to stats () (d256df4)
featureadd rules check for namespace and group () () (7733ab1)
featurebuild multi-tenant data objects () (f60f818)
featurecapture logs drilldown flag in query samples () (cb3f2ad)
featureChange how analytics proxy works () (82d25df)
featurecompactor-hs: add a metric to track the number of jobs left to conclude ongoing unit of work () (9e0f50c)
featuredeletion: return request ID in response header () (6e6e8a9)
featuredrilldown config endpoint () (52b5d95)
featureengine: More aggregations for the new query engine () (1474ede)
featureengine: Prefetch inputs of Merge pipeline concurrently () (f50c87f)
featurefluentd: Add 'compress gzip' setting to fluentd plugin () (1cda925)
featuregoldfish: improve query performance with indexes and paritions () (89509de)
featurehelm: Add startupProbe to memcached () (f799e9b)
featurehelm: Add startupProbe to memcached exporter () (901e574)
featurehelm: add configurable livenessProbe to single binary StatefulSet () (18b8995)
featurehelm: add dnsconfig to all missing resources () (ed68531)
featurehelm: Add health probes to gateway component () (82aa322)
featurehelm: Add health probes to loki in backend () (10441c8)
featurehelm: add more specificity to affinity and topology spread constraints () () (0819e48)
featurehelm: add replicas to loki-canary deployment () (c9d7d76)
featurehelm: add support for custom alert rule annotations () (2df5197)
featurehelm: allow extraObjects as dict () (6a953bb)
featurehelm: Only delete PVC on statefulset deletion, not scaling () (0cead58)
featurehelm: use named ports for memcached services targetports () (6a5be7e)
featureimplement unwrap as a projection () (3ce6fa2)
featureimplement volume-based pattern filtering () (71e2e01)
featurelogcli: add --log.level parameter () (77c18d9)
featureloki-mixin: allow disabling thanos dashboard and fix dashboard's file name () (cadc824)
featuremove the Loki UI to a Grafana Plugin () (3a1e5ad)
featureoperator: Add alert LokiIngesterFlushFailureRateCritical () (66ebc5a)
featureoperator: Add warning alert for when LokiStack is not getting ready () (c47fe46)
featureoperator: deploy network policies with LokiStack () (6e6f61f)
featureoperator: s3 validation reject endpoints that contain a URL path () (f6ef4d8)
+130 more items in the release notesfixCVEs in release 3.6.x () (1fe3b6d)
fixdeps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (release-3.6.x) () (11c1d07)
fixdeps: update module go.opentelemetry.io/otel/sdk to v1.43.0 [security] (release-3.6.x) () (47fb29e)
fixstorage: attach SHA-256 checksum on PutObject for Object Lock buckets () (2a7c34c)
fixBackporting 19989 into 3.6 () (0f56890)
featureUpgrade go.opentelemetry.io/otel/sdk from v1.38.0 to v1.40.0 () (d1ab148)
featureUpgrade Go to 1.25.8 (release-3.6.x) () (10d2666)
featureUpgrade Go used by querytee/promtail to 3.6 () (41a4e0c)
featureUse different debian version for fluent-bit () (138c391)
fixdeps: update module github.com/buger/jsonparser to v1.1.2 [security] (release-3.6.x) () (3185466)
fixdeps: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (release-3.6.x) () (d267ad3)
fixdeps: update module google.golang.org/grpc to v1.79.3 [security] (release-3.6.x) () (87dff41)
fixalloc: set a limit on preallocations (backport release-3.6.x) () (7e1daf3)