feat(Dependencies): Update prom/prometheus Docker tag to v3#272
Open
renovate[bot] wants to merge 1 commit intodevfrom
Open
feat(Dependencies): Update prom/prometheus Docker tag to v3#272renovate[bot] wants to merge 1 commit intodevfrom
renovate[bot] wants to merge 1 commit intodevfrom
Conversation
c5c7b51 to
462736d
Compare
462736d to
b69f810
Compare
b69f810 to
9f04c66
Compare
9f04c66 to
80318a2
Compare
80318a2 to
e2ccc4d
Compare
e2ccc4d to
17a68f3
Compare
17a68f3 to
74ce160
Compare
74ce160 to
db0e893
Compare
db0e893 to
35803b8
Compare
35803b8 to
71e95ae
Compare
71e95ae to
2ae995a
Compare
3860601 to
ab70a36
Compare
ab70a36 to
1fc0e03
Compare
1fc0e03 to
8007182
Compare
8007182 to
d65e9b9
Compare
d65e9b9 to
5212a6d
Compare
0cc273d to
b2b8c88
Compare
b2b8c88 to
a095f7c
Compare
e5d598b to
9a1b228
Compare
| datasource | package | from | to | | ---------- | --------------- | ------- | ------- | | docker | prom/prometheus | v2.48.0 | v3.11.2 |
9a1b228 to
cd3bc77
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.48.0→v3.11.2v2.48.0→v3.11.2Release Notes
prometheus/prometheus (prom/prometheus)
v3.11.2Compare Source
v3.11.1: 3.11.1 / 2026-04-07Compare Source
insecure: true. #18469v3.11.0: 3.11.0 / 2026-04-02Compare Source
__meta_hetzner_datacenterlabel is deprecated for the rolerobotbut kept for backward compatibility, use the__meta_hetzner_robot_datacenterlabel instead. For the rolehcloud, the label is deprecated and will stop working after the 1 July 2026. #17850__meta_hetzner_hcloud_datacenter_locationand__meta_hetzner_hcloud_datacenter_location_network_zonelabels are deprecated, use the__meta_hetzner_hcloud_locationand__meta_hetzner_hcloud_location_network_zonelabels instead. #17850prometheus_sd_last_update_timestamp_secondsmetric to track the last time a service discovery update was sent to consumers. #18194__meta_kubernetes_pod_deployment_name,__meta_kubernetes_pod_cronjob_nameand__meta_kubernetes_pod_job_name, respectively. #17774</and>/operators for trimming observations from native histograms. #17904histogram_quantilesvariadic function for computing multiple quantiles at once. #17285storage.tsdb.retention.percentageconfiguration to configure the maximum percent of disk usable for TSDB storage. #18080fast-startupfeature flag that writes aseries_state.jsonfile to the WAL directory to track active series state across restarts. #18303st-storagefeature flag. When enabled, Prometheus stores ingested start timestamps (ST, previously called Created Timestamp) from scrape or OTLP in the TSDB and Agent WAL, and exposes them via Remote Write 2. #18062xor2-encodingfeature flag for the new TSDB block float sample chunk encoding that is optimized for scraped data and allows encoding start timestamps. #18062external_idsupport for sigv4. #17916first_over_timeandts_of_first_over_timePromQL functions. #18318KahanAdd. #18252endpointoption, a regression from the AWS SDK v2 migration. #18133client_idis empty. #18323*DualStackEndpointSlices policies. #18192prometheus_remote_storage_sent_batch_duration_secondsmeasuring before the request was sent. #18214use-uncached-iofeature flag is set on unsupported environments. #18219v3.10.0: 3.10.0 / 2026-02-24Compare Source
Prometheus now offers a distroless Docker image variant alongside the default
busybox image. The distroless variant provides enhanced security with a minimal
base image, uses UID/GID 65532 (nonroot) instead of nobody, and removes the
VOLUME declaration. Both variants are available with
-busyboxand-distrolesstag suffixes (e.g.,
prom/prometheus:latest-busybox,prom/prometheus:latest-distroless).The busybox image remains the default with no suffix for backwards compatibility
(e.g.,
prom/prometheus:latestpoints to the busybox variant).For users migrating existing named volumes from the busybox image to the distroless variant, the ownership can be adjusted with:
Then, the container can be started with the old volume with:
User migrating from bind mounts might need to ajust permissions too, depending on their setup.
alertmanagerdimension to following metrics:prometheus_notifications_dropped_total,prometheus_notifications_queue_capacity,prometheus_notifications_queue_length. #16355/alertspage. #17611fill()/fill_left()/fill_right()binop modifiers for specifying default values for missing series. #17644/api/v1/openapi.yaml. #17825<URL>/debug/pprof/fgprof. #18027stale_series_compaction_thresholdin the config file. #16929remove_all_sdand individual service discoveries can be re-added with the build tagsenable_<sd name>_sd. Users can build a custom Prometheus with only the necessary SDs for a smaller binary size. #17736promql-duration-exprandpromql-extended-range-selectors. #17926.*-.*-.*. #17707/api/v1/targets/relabel_stepsin a single pass instead of re-running relabeling for each prefix. #17969X-Prometheus-Stoppingheader for/-/readyendpoint inNotReadystate. #17795info()function returning empty results when filtering by a label that exists on both the input metric andtarget_info. #17817__name__from OTLP attributes to prevent duplicate labels. #17917@modifier on empty ranges. #18020avg_over_timefor a single native histogram. #18058v3.9.1: 3.9.1 / 2026-01-07Compare Source
v3.9.0: 3.9.0 / 2026-01-06Compare Source
Note for users of Native Histograms
In version 3.9, Native Histograms is no longer experimental, and the feature flag
native-histogramhas no effect. You must now turn onthe config setting
scrape_native_histogramsto collect Native Histogram samples from exporters.Changelog
native-histogramfeature flag a no-op. Usescrape_native_histogramsconfig option instead. #17528start_timestampfield for unit tests. #17636--format seriesjsonoption totsdb dumpto output just series labels in JSON format. #13409--storage.tsdb.delay-compact-file.pathflag for better interoperability with Thanos. #17435--storage.tsdb.block-reload-intervalto configure TSDB Block Reload Interval. #16728prometheus_notifications_latency_histogram_secondsto complement the existing summary. #16637configlabel with job name for mostprometheus_sd_refreshmetrics. #17138prometheus_tsdb_sample_ooo_delta, the distribution of out-of-order samples in seconds. Collected for all samples, accepted or not. #17477_total. #17682ignoring()and non-empty grouping. #17643rate/increase/deltaof histograms results in a gauge histogram. #17608v3.8.1: 3.8.1 / 2025-12-16Compare Source
v3.8.0: 3.8.0 / 2025-11-28Compare Source
Note for users of Native Histograms
This is the first release with Native Histograms as a stable feature. However, scraping Native Histograms has to be activated explicitly via the
scrape_native_histogramsconfig setting (newly introduced in this release). To ease the transition, the--enable-feature=native-histogramsflag is not a complete no-op in this release, but changes the default value ofscrape_native_histogramstotrue. In the next release (v3.9), the feature flag will be a complete no-op, and the default value ofscrape_native_histogramswill always befalse. If you have been using the feature flag so far, the recommended course of action is the following:scrape_native_histogramstotruein all relevant scrape configs. (There is a global and a per-scrape-config version ofscrape_native_histograms, allowing granular control if needed. It is a good idea to also setscrape_native_histogramsexplicitly tofalsewhere you do not want to scrape Native Histograms. In this way, you do not depend on the default value of the setting anymore.)Changelog
scrape_native_histogramsconfig setting. #17232 #17315promtool push metricsvia the--protobuf_messageflag. #17417AddandSub. #17278target_infosamples with the same timestamp for the same series. #17400use_fips_sts_endpointinsigv4config sections. #17304/api/v1/targets. #17306infocall. #17379histogram_fractionfor classic histograms and NHCB if lower bound is in the first bucket. #17424v3.7.3: 3.7.3 / 2025-10-29Compare Source
-web.external-urlif-web.route-prefixis configured, which was introduced in #17240. #17389check configwould fail when--lint=noneflag was set. #17399 #17414v3.7.2: 3.7.2 / 2025-10-22Compare Source
labelmapaction validation with the legacy metric name validation scheme. #17372anchoredandsmoothedare used as metric names and label names. #17353smoothed/anchoredmodifier. #17354v3.7.1: 3.7.1 / 2025-10-16Compare Source
key_to label name when translating an OTel attribute name starting with a single underscore, and keep multiple consecutive underscores in label name when translating an OTel attribute name. This reverts the breaking changes introduced in 3.7.0. #17344v3.7.0: 3.7.0 / 2025-10-15Compare Source
Warning
We discovered a breaking change in the OTLP endpoint: OpenTelemetry attribute names starting with underscore, for example
_attrib, are no longer automatically translated tokey_attrib. Please use 3.7.1 instead for OTLP ingestion.Changelog
prometheus_remote_storage_samples_in_total, useprometheus_wal_watcher_records_read_total{type="samples"}andprometheus_remote_storage_samples_dropped_totalinstead,prometheus_remote_storage_histograms_in_total, useprometheus_wal_watcher_records_read_total{type=~".*histogram_samples"}andprometheus_remote_storage_histograms_dropped_totalinstead,prometheus_remote_storage_exemplars_in_total, useprometheus_wal_watcher_records_read_total{type="exemplars"}andprometheus_remote_storage_exemplars_dropped_totalinstead,prometheus_remote_storage_highest_timestamp_in_seconds, use the more accurateprometheus_remote_storage_queue_highest_timestamp_secondsinstead in dashboards and alerts to properly account for relabeling and for more accuracy. #17065promql-extended-range-selectors. #16457first_over_time(...)andts_of_first_over_time(...)behind feature flagexperimental-promql-functions. #16963 #17021type-and-unit-labelsfeature flag is enabled. #17033created-timestamp-zero-ingestionfeature flag is enabled. #16951ALERTSandALERTS_FOR_STATE. #17064replaceactions, etc.) within aalertmanager_config.alert_relabel_configsblock is now scoped correctly and no longer yields altered alerts to subsequent blocks. #17063metadata-wal-recordsexperimental feature for native histograms with custom buckets (NHCB) in protobuf scraping. #17156histogram_quantile(). #16794info()function on churning series. #17135400instead of5xxfor wrongly formatted Native Histograms. #17210Failed to calculate size of \"wal\" direrror logs during WAL clean-up. #17006-web.external-urlif-web.route-prefixis configured. #17240v3.6.0: 3.6.0 / 2025-09-17Compare Source
step(), andmin()andmax()on durations, behind feature flagpromql-duration-expr. #16777/v1/status/tsdb/blocksendpoint exposing metadata about loaded blocks. #16695toDuration()andnow()functions. #16619UnderscoreEscapingWithoutSuffixesstrategy viaotlp.translation_strategy. #16849otlp.promote_scope_metadata. #16878__type__and__unit__labels when feature flagtype-and-unit-labelsis enabled. #16630Query page settings. #16901_count/_sum/_bucketsuffixes. #16910prometheus_tsdb_head_stale_seriesmetric. #16925target_infosamples between the earliest and latest samples per resource. #16737NaNis passed as parameter totopk(),bottomk(),limitk()andlimit_ratio(). #16725rate()andincrease()on histograms when feature flagtype-and-unit-labelsis enabled. #16915slicelabelsbuilds. #16946created-timestamp-zero-ingestionis enabled. #16332v3.5.2: 3.5.2 / 2026-04-13Compare Source
This release has a fix for a Stored XSS vulnerability that can be triggered via crafted metric names and label values in Prometheus web UI tooltips and metrics explorer. Thanks to Duc Anh Nguyen from TinyxLab for reporting it.
v3.5.1: 3.5.1 / 2026-01-07Compare Source
This is the current "Long Term Support" release.
No code changes since 3.5.0, just some dependency updates:
v3.5.0: 3.5.0 / 2025-07-14Compare Source
3.5 is a Long Term Support (LTS) release; see release https://prometheus.io/docs/introduction/release-cycle/
There are a number of new features, and no known breaking changes in this release:
type-and-unit-labels. #16228 #16632 #16718 #16743ts_of_(min|max|last)_over_time, behind feature flagexperimental-promql-functions. #16722 #16733always_scrape_classic_histogramsto scrape a classic histogram even if it is also exposed as native. #16452promote_all_resource_attributesandignore_resource_attributes. #16426label_selectorto filter servers. #16512quantileandtopk. #16404keep_dropped_targetsoption. #16604/rulespage. #16605/targetspage. #16567histogramStatsIteratorwhere possible. #16686/targetspage. #16589last_over_time. #16744histogram_fractionorhistogram_quantileif classic and native histograms are present at the same timestamp. #16552[1001ms]to[1s]and similar. #16478histogram_countandhistogram_sum. #16682avgaggregation andavg_over_time. #16569 #16773Vary: Originheader to responses to avoid cache poisoning. #16008client_idto suppport system assigned managed identity. #16421otlp:block is unset. #16693v3.4.2: 3.4.2 / 2025-06-26Compare Source
otlp:Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about these updates again.
This PR was generated by Mend Renovate. View the repository job log.