Releases: grafana/loki
Releases · grafana/loki
Release list
v3.7.8
3.7.8 (2026-09-17)
Bug Fixes
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24433) (4d5dc2b)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#24328) (0a01797)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24429) (14b5da8)
- security/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.8 [SECURITY] (release-3.7.x) (#24460) (3e917f2)
- security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (release-3.7.x) (#23422) (41064da)
- security/UNKNOWN/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#23416) (cd8e76d)
- security/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.7.x) (#24335) (47149cb)
v3.6.17
3.6.17 (2026-09-09)
Bug Fixes
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.6.x) (#24330) (d8d78f6)
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.6.x) (#24444) (6d21d6b)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.6.x) (#24329) (ed9df58)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.6.x) (#24430) (ee0ef56)
- security/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.0.12 [SECURITY] (release-3.6.x) (#24461) (7fa1224)
- security/UNKNOWN/: Update module golang.org/x/crypto to v0.55.0 [SECURITY] (release-3.6.x) (#24256) (85b2d4f)
- security/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.6.x) (#24336) (57bc922)
- security/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (release-3.6.x) (#23963) (c08bf30)
v3.7.7
3.7.7 (2026-08-27)
Features
- Add flag to ignore missing chunks during deletion of logs with line filter [release-3.7.x] (#24233) (7a40404)
Bug Fixes
- security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.2.5 [SECURITY] (release-3.7.x) (#24097) (07cd1f0)
- security/UNKNOWN/: Update module go.etcd.io/etcd/client/pkg/v3 to v3.6.14 [SECURITY] (release-3.7.x) (#24061) (9d1c9ee)
- security/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (release-3.7.x) (#23962) (1d5e027)
- storage: Pre-compute SHA-256 to avoid aws-chunked on PutObject [release-3.7.x] (#24215) (3d6f245)
v3.6.16
operator: v0.11.0
0.11.0 (2026-08-18)
⚠ BREAKING CHANGES
- Remove support for experimental LogQL variants() queries (#23823)
Features
- operator: Enable multi-variant queries (#21009) (709e318)
- operator: Support private VPC S3 endpoints in endpoint validation (#22395) (394caef)
- operator: Watch object storage Services for NetworkPolicy updates and surface ports in status (#22436) (12822d5)
- Remove support for experimental LogQL variants() queries (#23823) (132e5f9)
Bug Fixes
- operator: Move telemetry recording rules to OpenShift bundle (#22814) (4632368)
- operator: Release leader lease on shutdown so upgrades are faster (#24042) (ee0d59d)
- operator: Use ruler remote_write clients key instead of deprecated client (#23455) (f5ddb02)
- security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (main) (#23608) (e1e4e0e)
- security/UNKNOWN/operator: Update module golang.org/x/net to v0.56.0 [SECURITY] (main) (#23388) (9362a5e)
- security/UNKNOWN/operator: Update module golang.org/x/text to v0.39.0 [SECURITY] (main) (#23389) (50589e1)
v3.7.6
v3.7.5
3.7.5 (2026-08-05)
Bug Fixes
- Build deb/rpm packages again in the release workflow (#23598) (6f49272)
- ci: Disable docker plugin publishing on release-3.7.x (#23440) (6095f71)
- ingester: Fix flush race in ingester [release-3.7.x] (#23682) (ff152dc)
- security/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23611) (11c4b29)
- security/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23612) (1e3108e)
- security/UNKNOWN/cmd/dataobj-inspect: Update module go.opentelemetry.io/otel to v1.42.0 [SECURITY] (release-3.7.x) (#23518) (28917d3)
- security/UNKNOWN/cmd/dataobj-inspect: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) (#23419) (5d2b9d4)
- security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23613) (8d71c59)
- security/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23610) (941b557)
- security/UNKNOWN/: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) (#23418) (2347a9a)
- security/UNKNOWN/: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (release-3.7.x) (#23405) (f290af0)
v3.6.15
v3.6.14
3.6.14 (2026-08-04)
Bug Fixes
- Backport WAL replay hang fix to release-3.6.x (#21176) (#23630) (355e2f3)
- ci: Backport deb/rpm packaging fix to release-3.6.x (#23680) (#23722) (d7ee4de)
- security/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23615) (a6cc2e5)
- security/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23616) (a71c910)
- security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23618) (59970a9)
- security/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23614) (8308a12)
v3.6.13
3.6.13 (2026-07-23)
Bug Fixes
- ci: Fix zizmor findings for operator-images in Loki 3.6 (#22821) (050f742)
- ci: Helm CI warning fix (#22606) (4bc2586)
- security/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.6.x) (#22694) (692f2b1)
- security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] (#23398) (fc478e1)
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (70f75b7)
- security/HIGH/: Update golang.org/x/net, golang.org/x/text and google.golang.org/grpc [SECURITY] (70f75b7)
- security/UNKNOWN/cmd/chunks-inspect: Update go toolchain directive to v1.25.12 [SECURITY] (release-3.6.x) (#23131) (b327439)
- security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (70f75b7)
- security/UNKNOWN/pkg/push: Update module golang.org/x/text to v0.39.0 [SECURITY] (70f75b7)
- security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.6.x) (#22479) (697bd83)
- security: Backport security updates to release-3.6.x (#23403) (70f75b7)
- Update objstore to include fix for GCS Exists (#23381) (87383d8)
