Prometheus 3.15.0 → 3.16.0

2 releases · 1 breaking change · 3 security fixes · 0 advisories fixed

3security1breaking1deprecated6feature32fix

Is 3.15.0 affected?

Breaking changes

breaking [ENHANCEMENT] promtool: Add --allow-incompatible-block-duration so users can specify any max-block-duration instead of being restricted to the default Prometheus block durations. #19363 in 3.16.0

Security changes

security [SECURITY] Container images: Update CA certificates to distrust "emSign ECC Root CA - G3" and "Comodo AAA Services root" following the compromise of eMudhra intermediate CA private keys. in 3.15.1
security [SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template. in 3.15.1
security [SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617). in 3.15.1

Deprecations

deprecated [CHANGE] Remote write: Stop exposing the deprecated prometheus_remote_storage_metadata_total, prometheus_remote_storage_metadata_failed_total, prometheus_remote_storage_metadata_retried_total, and prometheus_remote_storage_metadata_bytes_total metrics for Remote Write 2.0 queues. #20080 in 3.16.0

Every release in between

3.16.0 Nov 5, 2026 Release notes ↗

deprecated[CHANGE] Remote write: Stop exposing the deprecated prometheus_remote_storage_metadata_total, prometheus_remote_storage_metadata_failed_total, prometheus_remote_storage_metadata_retried_total, and prometheus_remote_storage_metadata_bytes_total metrics for Remote Write 2.0 queues. #20080

feature[FEATURE] API: Allow overriding PromQL Start Timestamp processing on a per-query basis using the X-Prometheus-Use-Start-Timestamps HTTP header. #19066

feature[FEATURE] PromQL: Add experimental integral() function for computing integral-over-time of range vectors behind the --enable-feature=promql-experimental-functions flag. #14440

feature[FEATURE] PromQL: Add experimental query cost estimation, actual cost reporting, and configurable execution limits, enabled with --enable-feature=query-cost. #20028

feature[FEATURE] PromQL: Allow unquoted Unicode letters and dots behind a feature flag #20162

feature[ENHANCEMENT] Remote Read: Add native histogram prometheus_remote_read_handler_gate_wait_duration_seconds to measure concurrency-gate wait duration, including requests canceled while waiting. #18355

feature[ENHANCEMENT] Remote Write: Add experimental flag convert_nhcb_to_classic to convert NHCB to classic histograms for external systems that dont support NHCBs. #17205

breaking[ENHANCEMENT] promtool: Add --allow-incompatible-block-duration so users can specify any max-block-duration instead of being restricted to the default Prometheus block durations. #19363

fix[BUGFIX] Remote read: Abort failed streaming responses without writing duplicate headers or appending plain-text errors to the protobuf stream #19749

fix[BUGFIX] TSDB: Fix loss of out-of-order samples when a WAL checkpoint drops a series record that the out-of-order write-behind log still needs #19737

fix[BUGFIX] TSDB: Fix queries that seek within a head chunk returning samples committed after the query started #19854

fix[BUGFIX] TSDB: Preserve mapped chunks when WAL replay merges multiple references for the same series, preventing missing out-of-order samples and duplicate in-order chunks after restart #19805

fix[BUGFIX] Fix auto-reload logic to reload after reverting a failed configuration change #19838

fix[BUGFIX] API: Do not match metric family metadata for doubled _total and _info suffixes in experimental search API. #19910

fix[BUGFIX] API: Reject timeout and lookback_delta values that overflow int64 instead of turning them into a negative duration #19658

fix[BUGFIX] API: Resolve metric family metadata for suffixed metric names in search results, in experimental search API. #19824

fix[BUGFIX] AWS SD: Describe each ElastiCache cluster once instead of twice for clusters that are not replication group members. #19434

fix[BUGFIX] Build: Allow installing promtool with version-suffixed go install commands #19754

fix[BUGFIX] Discovery: Fix a panic in Azure service discovery when a VM tag has a null value. #19755

fix[BUGFIX] Federation: fix corruption of float native histograms. #19679

fix[BUGFIX] Fix ts_of_last_over_time for samples before the Unix epoch. #19828

fix[BUGFIX] Histograms: Fix ConvertNHCBToClassic inflating classic bucket counts for integer native histograms whose spans have gaps. #19659

fix[BUGFIX] Logging: Preserve rule and TSDB block values in JSON logs. #19572

fix[BUGFIX] OTLP receiver: Drop exemplars with timestamps more than 10 minutes in the future instead of storing them and blocking subsequent exemplars for that series. #19812

fix[BUGFIX] OTLP: Count only out-of-order exemplars in prometheus_api_otlp_out_of_order_exemplars_total, not every rejected exemplar. #20030

fix[BUGFIX] OTLP: Do not drop exemplars that have a trace_id or span_id filtered attribute in addition to a trace or span ID. The trace context now takes precedence over the colliding attribute, as required by the OpenTelemetry specification. #20004

fix[BUGFIX] OTLP: Do not emit le="+Inf" twice when a histogram's explicit bounds end at +Inf, and warn about the bound. #19425

fix[BUGFIX] OTLP: Stop dropping exemplars that arrive out of timestamp order within a data point. #20029

fix[BUGFIX] OpenMetrics 2.0: Attach histogram exemplars to matching classic _bucket series and preserve them when scraping both native and classic histograms. #20020

fix[BUGFIX] PromQL: Avoid intermediate overflow in rad() and deg() conversions. #19901

fix[BUGFIX] PromQL: Consistently ignore and drop type and unit labels in without aggregations, absent(), info(), and binary operator fill matching. #19986

fix[BUGFIX] PromQL: Do not panic when printing the partial AST returned alongside a parse error. #19797

fix[BUGFIX] PromQL: Drop type and unit in binary operations so they are transparent to users, similar to how name is handled. #18680

fix[BUGFIX] PromQL: Fix ==, !=, changes() and count_values on native histograms giving wrong results inside histogram_count(), histogram_sum() and histogram_avg(). #20024

fix[BUGFIX] PromQL: Fix histogram_fraction returning wrong results for native histograms with custom buckets when a bucket boundary is exactly 0. #19657

fix[BUGFIX] PromQL: Fix histogram_quantile and histogram_quantiles interpolating within the wrong bucket for native histograms whose sum is NaN. #19973

fix[BUGFIX] PromQL: Fix lexing of subqueries whose range is a duration keyword expression, e.g. foo[range():1s]. #19729

fix[BUGFIX] PromQL: Fix warning and error locations for duration expressions min_of and max_of. #19742

fix[BUGFIX] PromQL: Ignore NaN classic histogram bucket boundaries in histogram_quantile, histogram_quantiles and histogram_fraction and return correct value instead of NaN if there are normal buckets. #20057

fix[BUGFIX] PromQL: Preserve infinite values at exact quantile ranks. #19899

+45 more items in the release notes

3.15.1 Oct 21, 2026 Release notes ↗

security[SECURITY] Container images: Update CA certificates to distrust "emSign ECC Root CA - G3" and "Comodo AAA Services root" following the compromise of eMudhra intermediate CA private keys.

security[SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template.

security[SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617).