3.13.1 / 2026-07-10
This is a bugfix release for 3.13 LTS. - [BUGFIX] TSDB: Fix the head-chunk cache returning samples from the wrong chunk, or spurious not-found errors, to range queries after head-chunk truncation. #19134
10.07.2026Prometheus
Metrik toplama ve uyarı sistemi
Sürüm geçmişi
3.5.5 / 2026-07-09
This release is built with Go 1.25.12 and fixes a security issue in a UI dependency. - [SECURITY] UI: Bump `sanitize-html` to v2.17.5 to fix CVE-2026-53606. #19060
09.07.20263.13.0-rc.0 / 2026-06-18
- [SECURITY] UI: Bump `sanitize-html` to fix a cross-site scripting vulnerability (CVE-2026-44990). #18697 - [CHANGE] API: Use SHA-256 instead of SHA-1 to generate rule group pagination tokens. #18927 - [CHANGE] HTTP clients: Credentials (Authorization header, basic auth, beare
09.07.20263.13.0 / 2026-07-01
This is a Long Term Support [LTS](https://prometheus.io/docs/introduction/release-cycle/) release. - [SECURITY] UI: Bump `sanitize-html` to fix a cross-site scripting vulnerability (CVE-2026-44990). #18697 - [CHANGE] UI: Third-party npm dependency licenses are now embedded in
01.07.20263.13.0-rc.1 / 2026-06-22
Release notes of the 3.13-rc.1 release: The 3.13.0-rc.0 release was only partially successful due to the migration from NPM to PNPM and subsequent CI issues, so most of the changes in this release candidate are CI/build-related. The only user-facing change is: - [CHANGE] UI
22.06.20263.5.4 / 2026-06-17
This release fixes multiple security issues. - [SECURITY] STACKIT SD: Fix secrets being exposed in plaintext via `/-/config` endpoint. Thanks to @August829 and @Phaxma for reporting. GHSA-39j6-789q-qxvh #18650 - [SECURITY] Dependencies: Bump `golang.org/x/net` to v0.55.0 and
17.06.20263.12.0 / 2026-05-28
This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp improvements and numerous bug fixes. Thanks to all contributors! ## Key Highlights * **Security**: Two security vulnerab
28.05.20263.12.0-rc.0 / 2026-05-19
This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp improvements and numerous bug fixes. Thanks to all contributors! ## Key Highlights * **Security**: Two security vulnerab
19.05.20263.11.3 / 2026-04-27
This release fixes mutiple security issues. We would like to thank the following people for the responsible disclosures: - Shadowbyte (4c1dr3aper) - Charlie Lewis for the Remote-Read snappy decode vulnerability. - Brett Gervasoni for the AzureAD OAuth `client_secret` vulnera
27.04.20263.5.3 / 2026-04-27
This release fixes mutiple security issues. We would like to thank the following people for the responsible disclosures: - Shadowbyte (4c1dr3aper) - Charlie Lewis for the Remote-Read snappy decode vulnerability. - Brett Gervasoni for the AzureAD OAuth `client_secret` vulnera
27.04.2026