Grafana Loki 3.7.2 → 3.7.9
7 releases · 1 breaking change · 1 security fix · 0 advisories fixed
1security1breaking0deprecated40feature53fix
Breaking changes
- breaking operator: switch default for OpenShift stream labels () in 3.7.3
Security changes
- security security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (b318f28) in 3.7.4
Every release in between
fixdeps: Update github.com/thanos-io/objstore digest to 72d3b9f (release-3.7.x) () (e7d6809)
fixdeps: Update go4.org/netipx digest to 3075585 (release-3.7.x) () (24be2f4)
fixdeps: Update k8s.io/utils digest to cf1189d (release-3.7.x) () (a5218df)
fixingester: Concurrent WAL Append() calls could lead to inconsitent record order and irrecoverable WAL state () (72aa93e)
fixLimit request body size for ruler "CreateRuleGroup" API and LogQLAnalyzer API [release-3.7.x] () (6c6e9dc)
fixlogql: Keep entries while stream accumulator has free room [release-3.7.x] () (4390fb1)
fixsecurity/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [SECURITY] (release-3.7.x) () (bab6de2)
fixsecurity/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 [SECURITY] (release-3.7.x) () (7aee5f1)
fixsecurity/LOW/: Update module go.opentelemetry.io/otel/sdk to v1.45.0 [SECURITY] (release-3.7.x) () (b787d9a)
fixsecurity/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.9 [SECURITY] (release-3.7.x) () (bafb1b8)
fixsecurity: Bump Go to 1.26.10 [SECURITY] (release-3.7.x) () (d3b4a2f)
fixsecurity/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) () (4d5dc2b)
fixsecurity/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) () (0a01797)
fixsecurity/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) () (14b5da8)
fixsecurity/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.8 [SECURITY] (release-3.7.x) () (3e917f2)
fixsecurity/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (release-3.7.x) () (41064da)
fixsecurity/UNKNOWN/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) () (cd8e76d)
fixsecurity/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.7.x) () (47149cb)
featureAdd flag to ignore missing chunks during deletion of logs with line filter [release-3.7.x] () (7a40404)
fixsecurity/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.2.5 [SECURITY] (release-3.7.x) () (07cd1f0)
fixsecurity/UNKNOWN/: Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] (release-3.7.x) () (9d1c9ee)
fixsecurity/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (release-3.7.x) () (1d5e027)
fixstorage: Pre-compute SHA-256 to avoid aws-chunked on PutObject [release-3.7.x] () (3d6f245)
fixqueryrange: Preserve sketch in MergeLabels [release-3.7.x] () (d48329d)
fixBuild deb/rpm packages again in the release workflow () (6f49272)
fixci: Disable docker plugin publishing on release-3.7.x () (6095f71)
fixingester: Fix flush race in ingester [release-3.7.x] () (ff152dc)
fixsecurity/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (11c4b29)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (1e3108e)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module go.opentelemetry.io/otel to v1.42.0 [SECURITY] (release-3.7.x) () (28917d3)
fixsecurity/UNKNOWN/cmd/dataobj-inspect: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) () (5d2b9d4)
fixsecurity/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (8d71c59)
fixsecurity/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) () (941b557)
fixsecurity/UNKNOWN/: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) () (2347a9a)
fixsecurity/UNKNOWN/: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (release-3.7.x) () (f290af0)
fixci: Fix zizmor findings for operator-images in Loki 3.7 () (abc1186)
fixci: Helm CI warning fix () (7389428)
fixci: Re-enable docker plugin publishing () (28f44a8)
fixcompactor: Fix delete request when using Thanos objstore client with filesystem backend [release-3.7.x] () (dd6fdb5)
fixdeps: Update module charm.land/bubbletea/v2 to v2.0.7 (release-3.7.x) () (e11f935)
fixdeps: Update module charm.land/lipgloss/v2 to v2.0.4 (release-3.7.x) () (10213c2)
fixdeps: Update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 (release-3.7.x) () (3daf198)
fixdeps: Update module github.com/aws/smithy-go to v1.27.3 (release-3.7.x) () (1f6a191)
fixdeps: Update module github.com/baidubce/bce-sdk-go to v0.9.270 (release-3.7.x) () (103ccd8)
fixdeps: Update module github.com/coder/quartz to v0.3.1 (release-3.7.x) () (3509e31)
fixdeps: Update module github.com/IBM/ibm-cos-sdk-go to v1.14.1 (release-3.7.x) () (d0abe72)
fixdeps: Update module github.com/klauspost/compress to v1.18.6 (release-3.7.x) () (327da7c)
fixdeps: Update module github.com/pierrec/lz4/v4 to v4.1.27 (release-3.7.x) () (6b3297f)
fixdeps: Update module github.com/shirou/gopsutil/v4 to v4.26.5 (release-3.7.x) () (cb7f17d)
fixsecurity/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.7.x) () (6d8f1b5)
securitysecurity/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] () (b318f28)
fixsecurity/HIGH/: Update module github.com/apache/thrift to v0.24.0 [SECURITY] (release-3.7.x) () (36eb5f7)
fixsecurity/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) () (dd7a124)
fixsecurity/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.7.x) () (6fa6165)
fixstorage: Fix index filename issue with legacy S3 client and chunk_delimiter () (0eca83c)
breakingoperator: switch default for OpenShift stream labels ()
featureadd bloom filter to cache known streams for ExceedsLimits requests () (f5440a3)
featureadd builder pool to logsobj package () (8a68101)
featureadd case-insensitive regex optimization () (f6a6a4f)
featureAdd config to delegate stream limits check to limits-service only () (ba119f6)
featureadd flush manager to control data object flush lifecycle () (c169ce3)
featureadd GroupConsumer to kafkav2 package () (5ad60ee)
featureAdd results cache to thor query engine () (6ef3827)
featureAdd SubstringInsensitive compute fn () (9c03192)
featureAlign start time when the query is received () (8e18f10)
featureallow the initial offset to be set in the starting phase () (93f4bdf)
featureBatch records before writing to sinks () (f083618)
featurebench: add simulated object storage latency to LogQL benchmarks () (5102ed0)
featurebuild: Move to Go 1.26 () (4fb960c)
featureclose the records chan when consumer terminates () (c3d0de9)
featuredataobj-compactor: add a planner for compaction of data objects () (7f1450d)
featuredon't shuffle shard if shard factor is 1 () (7ac1d16)
featureearly goldfish correlation ID generation with X-Loki-Goldfish-ID header () (e90e4a6)
featureengine: Dedupe entries when building final result () (e95137a)
featureenginev2: Implement IsMember compute function () (a28d8b4)
featureenginev2: Implement regexp compute function () (7b8d51b)
featureenginev2: Implement substr compute function () (9740619)
featurehelm: Add common labels to all resources () (dc21099)
featurehelm: allow customization of write, read and backend PDB () (9f653b1)
featurehelm: finalize chart fork () (33f7a1b)
featurehelm: Memcached: allow to override CPU in the auto-computed resource mode () (3886548)
featureIntroduce a rate batcher to batch rate updates () (b9a0a15)
featurelimits: Add emptiness check to prepare for multiAZ () (4eeb70c)
featureloki-query-engine: instrument query-engine with runtime/trace () (a7c75a6)
featureloki: allow disabling cache for query_range requests () (1242aa5)
featureoperator: add option to customize gateway server cert () (3c8b9e8)
featureoperator: switch default for OpenShift stream labels () (61ec040)
featureoperator: Update Loki operand to v3.6.5 () (d81e977)
featureoperator: update metrics authentication to remove dependency on kube-rbac-proxy () (2de6e79)
featureput kotel behind a flag () (f8e2d64)
featurequery-engine: Omit labels with empty values () (5c17103)
featurerefactor frontend cache, add metrics, filter out cached streams () (a63f0c3)
featurerelease 3.7 () (21d5b59)
featureRemove Promtail support (backport k299) () (939d15f)
featurereset the consumption lag gauge after 1 minute of idle period () (f1d0cdf)
+195 more items in the release notes