Catalog / Loki

3.7.9

yesterdaysecurityfixedchangedOriginal notes

3.7.9 (2026-10-20)

Bug Fixes

  • deps: Update github.com/thanos-io/objstore digest to 72d3b9f (release-3.7.x) (#25389) (e7d6809)
  • deps: Update go4.org/netipx digest to 3075585 (release-3.7.x) (#25390) (24be2f4)
  • deps: Update k8s.io/utils digest to cf1189d (release-3.7.x) (#25391) (a5218df)
  • ingester: Concurrent WAL Append() calls could lead to inconsitent record order and irrecoverable WAL state (#25125) (72aa93e)
  • Limit request body size for ruler "CreateRuleGroup" API and LogQLAnalyzer API [release-3.7.x] (#24838) (6c6e9dc)
  • logql: Keep entries while stream accumulator has free room [release-3.7.x] (#24703) (4390fb1)
  • security/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc to v1.45.0 [SECURITY] (release-3.7.x) (#24614) (bab6de2)
  • security/LOW/: Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.45.0 [SECURITY] (release-3.7.x) (#24615) (7aee5f1)
  • security/LOW/: Update module go.opentelemetry.io/otel/sdk to v1.45.0 [SECURITY] (release-3.7.x) (#24616) (b787d9a)
  • security/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.9 [SECURITY] (release-3.7.x) (#24806) (bafb1b8)
  • security: Bump Go to 1.26.10 [SECURITY] (release-3.7.x) (#25458) (d3b4a2f)