This release includes security fixes. Thanks to and for reporting it

What's Changed

* [BUGFIX] Backporting upgrade to go 1.22.7 to patch CVE-2024-34155, CVE-2024-34156, CVE-2024-34158 #6217 #6264

 

This release contains 230 contributions from 29 contributors. We also have 9 new contributors. Thank you all for the contributions!

Some notable changes release are:

• Experimental native histogram ingestion via -blocks-storage.tsdb.enable-native-histograms flag

• Support for filtering alerts on ListRules API

• Add query rejection mechanism to protect queries

• Introduce token bucket limiter to protect store gateway

• Implement ingester metadata API limits

• Remove -querier.query-store-for-labels-enabled flag

• Remove -querier.at-modifier-enabled flag

• Remove oltp_endpoint config

• ruler.evaluation-delay-duration mark as deprecated. Use ruler.query-offset

• -querier.max-outstanding-requests-per-tenant and -query-scheduler.max-outstanding-requests-per-tenant mark as deprecated. Use frontend.max-outstanding-requests-per-tenant