RATATOSKRATATOSK
Sign in

Releases

AI-analyzed release notes for CNCF graduated and incubating projects.

URGENCY
AllAction neededCheck if affectedPlan ahead
KIND
AllSecurityBreakingDeprecated
Category
AllAI & MLCI/CD & App DeliveryKubernetes CoreNetworking & MessagingObservabilityOrchestration & ManagementProvisioning & RuntimeSecurityStorage & Data
Prometheusv3.14.0ObservabilityAug 18, 2026
ACTION 1CHECK 1PLAN 1OTHER 39View full analysis

A maintenance release with an API deprecation, operator-visible removals and default changes, new capabilities, performance improvements, and correctness fixes across discovery, PromQL, TSDB, and other components. No security advisories or explicitly described security vulnerabilities are included.

Action needed (1)

  • breakingDefault support for PromQL duration expressions

    Duration expressions are enabled by default in PromQL. The promql-duration-expr feature flag is now a no-op.

Check if affected (1)

  • breakingThe __meta_hetzner_datacenter label, removed

    Applies if you use hcloud targets.

Plan ahead (1)

  • deprecatedThe stats query parameter, deprecated for other valuesremoval date not announced

    Applies if you set stats to a value other than true or all.

Source ↗
Jaegerv2.20.0ObservabilityJul 20, 2026
ACTION 1CHECK 3PLAN 1OTHER 27View full analysis

A release with backend compatibility removals, forced migrations, new configuration and CLI capabilities, and correctness fixes across storage, extensions, and related components. It does not disclose security advisories or security-specific flaws.

Action needed (1)

  • breakingTemplate creation through esclient

    Template creation moves to esclient, and legacy mapping rendering is retired.

Check if affected (3)

  • breakingSupport for elasticsearch v6, removed

    Applies if you use elasticsearch v6.

  • breakingThe jaegermcp extension, merged into jaegerquery

    Applies if you use the jaegermcp extension.

  • breakingExpired stable feature gates, removed

    Applicability is not stated in the release notes.

Plan ahead (1)

  • deprecatedThe legacy flag, deprecated

    Applies if you use legacy flag.

Source ↗
Prometheusv3.13.0ObservabilityJul 1, 2026
ACTION 2CHECK 2OTHER 37View full analysis

A long-term support release with security-related dependency updates, PromQL changes, new APIs and configuration controls, and bug fixes. It also replaces a shipped license artifact and includes performance improvements.

Action needed (2)

  • securitycriticalThe sanitize-html dependency update

    The UI updates sanitize-html to address a cross-site scripting vulnerability, identified as CVE-2026-44990.

  • breakingThe third-party license artifact

    Third-party npm dependency licenses are embedded in the Prometheus binary and served at /assets/third-party-licenses.txt. This replaces the npm_licenses.tar.bz2 archive previously shipped in release tarballs and container images.

Check if affected (2)

  • securitymediumRedirect credential forwarding

    Applies if you use scraping, remote read/write, alerting, or service discovery.

  • breakingPromQL duration-expression function names

    Applies if you enable experimental-duration-expr and use min() and max().

Source ↗
Jaegerv2.19.0ObservabilityJun 3, 2026
ACTION 1OTHER 15View full analysis

This release adds API and storage capabilities, updates API query naming and defaults, and includes correctness fixes. No security advisories or security-specific fixes are disclosed.

Action needed (1)

  • breakingThe searchdepth default in the trace-summaries endpoint

    The default for searchdepth changed in the trace-summaries endpoint.

Source ↗
Prometheusv3.12.0ObservabilityMay 28, 2026
ACTION 1CHECK 3OTHER 45View full analysis

A feature and maintenance release with new operator-facing APIs, discovery integrations, feature flags, configuration options, and UI capabilities. It also addresses disclosed security issues, correctness and performance problems, and validation or constraint behavior.

Action needed (1)

  • breakingConcurrent fgprof profile rejection

    The API rejects concurrent fgprof profiles.

Check if affected (3)

  • securityRemote Write decoded-length constraint

    Applies if you use Remote Write.

  • securityPlaintext secret exposure in STACKIT SD

    Applies if you use STACKIT SD.

  • breakingDecompressed body-size limit for OTLP write requests

    Applies if you use OTLP.

Source ↗
Jaegerv2.18.0ObservabilityMay 13, 2026
ACTION 2OTHER 23View full analysis

A release with breaking removals, API and metric changes, bug corrections, and experimental capabilities. It also adds storage, MCP, UI, and tracing functionality, with no security advisories or security-specific fixes disclosed.

Action needed (2)

  • breakingThe min step api in metricstore, removed

    The min step api was removed from metricstore in this release.

  • breakingThe non-standard health MCP tool, removed

    The non-standard health MCP tool was removed from jaegermcp in this release.

Source ↗
Cortexv1.21.0ObservabilityApr 27, 2026
ACTION 1CHECK 1PLAN 3OTHER 81View full analysis

A feature and maintenance release that adds Store Gateway, federation, overrides, caching, metric, and query capabilities while graduating several experimental features. It also changes defaults and configuration names, updates dependencies, and fixes correctness, memory, panic, and data-corruption defects.

Action needed (1)

  • breakingThe blocks storage bucket index default

    Blocks storage now enables the bucket index by default through -blocks-storage.bucket-store.bucket-index.enabled. Disabling it with -blocks-storage.bucket-store.bucket-index.enabled=false is not recommended for production.

Check if affected (1)

  • breakingThe Distributor type and unit label flag

    Applies if you configure either -distributor.enable-type-and-unit-labels or -distributor.otlp.enable-type-and-unit-labels for remote write v2 and OTLP requests.

Plan ahead (3)

  • breakingThe Ruler API flag rename

    Applies if you configure -experimental.ruler.enable-api.

  • breakingThe Alertmanager API flag rename

    Applies if you configure -experimental.alertmanager.enable-api.

  • breakingThe Users Scanner user index update configuration

    Applies if you configure either -*.users-scanner.user-index.cleanup-interval or clean_up_interval.

Source ↗
OpenCostv1.120.0ObservabilityApr 13, 2026
ACTION 1OTHER 26View full analysis

A maintenance release with dependency updates, defect corrections, expanded compatibility, and new integrations and configuration capabilities. An existing configuration source is replaced, so affected operators need to update their configuration.

Action needed (1)

  • breakingProvider configuration replaced by cloud-integration.json

    The provider config is no longer used, and configuration is read from cloud-integration.json instead. Operators using the replaced configuration source need to update their configuration.

Source ↗
Jaegerv2.16.0ObservabilityMar 7, 2026
ACTION 1CHECK 2OTHER 5View full analysis

A release with breaking configuration and API changes, a Go 1.25.7 requirement, new capabilities, and bug and performance fixes. No security advisories or security-specific fixes are identified.

Action needed (1)

  • breakingGo 1.25.7 requirement

    The codebase now requires Go 1.25.7, with Go version consistency enforced across the codebase.

Check if affected (2)

  • breakingLegacy response format of the remote sampling endpoint, removed

    Applies if you use the remote sampling endpoint.

  • breakingtraces.topic renamed to traces.topics

    Applies if you configure traces.topic.

Source ↗
Jaegerv2.15.1ObservabilityFeb 9, 2026
ACTION 1OTHER 2View full analysis

This release removes a deprecated v1 adapter wrapper and changes the default span kind in API v3 operations. The remaining release notes do not describe distinct operator-facing changes.

Action needed (1)

  • breakingDeprecated protofromtraces wrapper removal

    The deprecated protofromtraces wrapper has been removed from v1adapter.

Source ↗
Prometheusv3.9.0ObservabilityJan 7, 2026
ACTION 1CHECK 1OTHER 34View full analysis

This release updates histogram collection and TSDB behavior while adding capabilities across the API, PromQL, storage, and UI. It also includes fixes for query handling, storage validation, receivers, and interface behavior.

Action needed (1)

  • breakingA 10,000-set limit for the TSDB status endpoint

    The TSDB status endpoint now limits responses to a maximum of 10,000 sets of statistics.

Check if affected (1)

  • breakingThe native-histogram feature flag has no effect

    Applies if you set scrape_native_histograms to collect Native Histogram samples from exporters.

Source ↗
Browse by month
Aug 2026Jul 2026Jun 2026May 2026Apr 2026Mar 2026Feb 2026Jan 2026Dec 2025Nov 2025Oct 2025Sep 2025Aug 2025Jul 2025Jun 2025May 2025Apr 2025Mar 2025Feb 2025Jan 2025Dec 2024Nov 2024Oct 2024Sep 2024Aug 2024Jul 2024Jun 2024May 2024Apr 2024Mar 2024Feb 2024Jan 2024Dec 2023Nov 2023Oct 2023Sep 2023