RATATOSKRATATOSK
Sign in

Prometheus

v3.13.4Observability
Oct 2, 2026

ACTION 2OTHER 3

A security-focused maintenance release updates a vulnerable Go dependency and refreshes UI npm dependencies. It also includes fixes for rollback compatibility, native histogram corruption, and failing scrapes.

Action needed (2)

  • securityhighgoogle.golang.org/grpc update for GO-2026-6348

    The release updates google.golang.org/grpc to v1.83.1 to fix HTTP/2 DATA frame fragmentation memory exhaustion associated with GO-2026-6348.

  • securityUI npm dependency updates

    The UI updates vulnerable npm dependencies.

All 3 other recorded changesfixes 3

fixes (3)

  • - [BUGFIX] Agent: Ignore unknown WAL record types to allow rolling back from newer versions. #19814
  • - [BUGFIX] Federation: Fix corruption of float native histograms. #19679
  • - [BUGFIX] Scrape: Fix failing scrapes of protobuf float histograms with zero sample, zero and bucket counts, such as the result of recording rate(x[1m]) over a constant histogram. #19682
Add Prometheus to your stack

A weekly email arrives when a release needs action. Like the security patches in this release.

Add to stack →
Official release note ↗All Prometheus releases →