Prometheus
v3.13.3ObservabilitySep 7, 2026
A maintenance release with security-related dependency updates and correctness fixes across shutdown handling, query matching, service discovery, and TSDB reliability. No configuration or default changes are stated.
Action needed (1)
securityhighSecurity updates for
github.andcom/klauspost/compress golang.org/x/crypto The release updates
github.to v1.18.7 for GO-2026-5841 andcom/klauspost/compress golang.to v0.55.0 for GO-2026-6303.org/x/crypto
All 7 other recorded changesfixes 7
fixes (7)
- - [BUGFIX] Docker SD: Fix panic in Docker Swarm service discovery when a service runs as a plugin or network-attachment. #19102
- - [BUGFIX] PromQL: Fix case-insensitive regex label matchers silently dropping matching values. #19167
- - [BUGFIX] Scrape: Fix scrape manager spinning at 100% CPU on shutdown. #19149
- - [BUGFIX] Alerting: Fix 100% CPU usage on shutdown that could delay graceful shutdown and trigger timeout-based kills. #17859
- - [BUGFIX] TSDB: Fix out-of-order queries blocking compaction for hours, causing memory usage to grow. #19013
- - [BUGFIX] TSDB: Fix deleted series causing missing samples and errors after restart. #19140
- - [BUGFIX] TSDB: Fix goroutine and file handle leaks when Prometheus fails to open a corrupt TSDB. On Windows, the leaked directory handle also prevented TSDB directory removal. #18291
Add Prometheus to your stack
A weekly email arrives when a release needs action. Like the security patches in this release.