Skip to content

build(deps): bump github.com/grafana/loki/v3 from 3.6.5 to 3.7.4 - #435

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/grafana/loki/v3-3.7.4
Open

build(deps): bump github.com/grafana/loki/v3 from 3.6.5 to 3.7.4#435
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/grafana/loki/v3-3.7.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 1, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/grafana/loki/v3 from 3.6.5 to 3.7.4.

Release notes

Sourced from github.com/grafana/loki/v3's releases.

v3.7.4

3.7.4 (2026-07-22)

Bug Fixes

  • ci: Fix zizmor findings for operator-images in Loki 3.7 (#22820) (abc1186)
  • ci: Helm CI warning fix (#22605) (7389428)
  • ci: Re-enable docker plugin publishing (#22818) (28f44a8)
  • compactor: Fix delete request when using Thanos objstore client with filesystem backend [release-3.7.x] (#22811) (dd6fdb5)
  • deps: Update module charm.land/bubbletea/v2 to v2.0.7 (release-3.7.x) (#22768) (e11f935)
  • deps: Update module charm.land/lipgloss/v2 to v2.0.4 (release-3.7.x) (#22769) (10213c2)
  • deps: Update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 (release-3.7.x) (#22776) (3daf198)
  • deps: Update module github.com/aws/smithy-go to v1.27.3 (release-3.7.x) (#22795) (1f6a191)
  • deps: Update module github.com/baidubce/bce-sdk-go to v0.9.270 (release-3.7.x) (#22783) (103ccd8)
  • deps: Update module github.com/coder/quartz to v0.3.1 (release-3.7.x) (#22784) (3509e31)
  • deps: Update module github.com/IBM/ibm-cos-sdk-go to v1.14.1 (release-3.7.x) (#22785) (d0abe72)
  • deps: Update module github.com/klauspost/compress to v1.18.6 (release-3.7.x) (#22797) (327da7c)
  • deps: Update module github.com/pierrec/lz4/v4 to v4.1.27 (release-3.7.x) (#22798) (6b3297f)
  • deps: Update module github.com/shirou/gopsutil/v4 to v4.26.5 (release-3.7.x) (#22800) (cb7f17d)
  • security/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.7.x) (#22693) (6d8f1b5)
  • security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] (#23393) (b318f28)
  • security/HIGH/: Update module github.com/apache/thrift to v0.24.0 [SECURITY] (release-3.7.x) (#22767) (36eb5f7)
  • security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) (#22200) (dd7a124)
  • security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.7.x) (#22478) (6fa6165)
  • storage: Fix index filename issue with legacy S3 client and chunk_delimiter (#23165) (0eca83c)

v3.7.3

3.7.3 (2026-06-24)

⚠ BREAKING CHANGES

  • operator: switch default for OpenShift stream labels (#21001)

Features

  • add bloom filter to cache known streams for ExceedsLimits requests (#20823) (f5440a3)
  • add builder pool to logsobj package (#21134) (8a68101)
  • add case-insensitive regex optimization (#20578) (f6a6a4f)
  • Add config to delegate stream limits check to limits-service only (#21007) (ba119f6)
  • add flush manager to control data object flush lifecycle (#20680) (c169ce3)
  • add GroupConsumer to kafkav2 package (#20748) (5ad60ee)
  • Add results cache to thor query engine (#20986) (6ef3827)
  • Add SubstringInsensitive compute fn (#20584) (9c03192)
  • Align start time when the query is received (#20967) (8e18f10)
  • allow the initial offset to be set in the starting phase (#20770) (93f4bdf)
  • Batch records before writing to sinks (#20821) (f083618)
  • bench: add simulated object storage latency to LogQL benchmarks (#20733) (5102ed0)
  • build: Move to Go 1.26 (#20988) (4fb960c)

... (truncated)

Changelog

Sourced from github.com/grafana/loki/v3's changelog.

Changelog

3.8.0 (2026-06-08)

⚠ BREAKING CHANGES

  • Remove support for BigTable/GCP storage backend (#21502)
  • Remove deprecated Cassandra storage backend (#21574)
  • Remove deprecated DynamoDB storage backend (#21601)
  • Remove deprecated gRPC storage backend (#21638)
  • Remove deprecated BoltDB storage backend for indexes (#21637)
  • ksonnet: Remove boltdb-shipper specific flags from lib (#21656)
  • Remove deprecated loki_log_messages_total metric (#21764)
  • Rename metric loki_log_flushes (#21765)
  • Remove deprecated allow_deletes configuration option (#21808)
  • Remove deprecated per-tenant setting unordered_writes (#21835)
  • Remove deprecated BoltDB Shipper storage backend (#21678)
  • Remove deprecated write dedupe cache (#22056)
  • Remove index read cache and index cache validity settings (#22066)

Features

  • Add a metric that reports when goldfish racing is enabled (#21376) (b48a70c)
  • Add caching node to dataobjscan node (#21246) (9ed2dd0)
  • Add limit on max buffered bytes in pattern-tee (#21855) (8c6c2ab)
  • add metric loki_distributor_dataobj_tee_estimate_rate_bytes (#21441) (cae9486)
  • add per-phase histogram metrics to engine worker pipeline (#21547) (c0a243b)
  • add stats and postings index sections with encoding abstraction (#21442) (8553815)
  • add time sharded estimate (#21463) (47e1e81)
  • Avoid executing tasks for which we have cached empty results (#21437) (fb6abe5)
  • Batch cache fetches in schedulers during task pruning (#21548) (f367374)
  • ci: Include linux/riscv64 Loki build in releases (#21597) (76e65d7)
  • clamp pointerscans to index start/end timeranges (#21534) (2e0a70d)
  • compactor: Reuse logsobj builder metrics (#22138) (bd6316d)
  • dataobj-compactor: Add CompactionMerge physical-plan node (#21844) (12c419b)
  • dataobj-compactor: Add compactor target skeleton, no-op coordinator stub (#21818) (4cd2cf1)
  • dataobj-compactor: Add dataobj-compactor-worker target scaffold (#21873) (3a3245b)
  • dataobj-compactor: Calculate compaction runs/jobs (#21845) (3dd8056)
  • dataobj-compactor: Compactor coordinator/planner main loop (#21973) (5790955)
  • dataobj-compactor: IndexMerge executor over postings + stats sections (#22233) (030dd44)
  • dataobj-inspect: support more section types (#21269) (286bca7)
  • dataobj/postings,stats: Add merge builders and row decoders (#22229) (03cd800)
  • dataobj: Add sort_schema config and feature flag (#21460) (30549ac)
  • dataobj: Implement sort schema (#21557) (a2c4884)
  • dataobj: Reduce postings indexing allocations via observe/aggregate pattern (#21610) (96a0574)
  • default loki-mixin dashboards to TSDB (#18732) (d5fa6f7)
  • distributor: Add produce latency histogram to dataobj-tee (#22068) (047870d)
  • engine/physicalpb: Add IndexMerge node marshalling (#22231) (b3e9265)
  • engine/workflow: Add dormant taskTypeCompaction admission lane (#21813) (4e9a034)

... (truncated)

Commits
  • b318f28 fix(security/HIGH/): Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026...
  • 1fe5dbf docs: Resolving conflicting topics (#23312) (#23335)
  • a28bb57 docs: Update Helm Reference file and Helm docs [release-3.7.x] (#23307)
  • dd6fdb5 fix(compactor): Fix delete request when using Thanos objstore client with fil...
  • 4d2aca7 test: De-flake TestPartitionReader_BasicFunctionality [release-3.7.x] (#23283)
  • dfa38bd chore: Bump Go to 1.26.5 [release-3.7.x] (#23279)
  • 0ea7cec chore(ci): Replace non-breaking space in workflow pin comments (#23265)
  • e67a238 docs: Backport 22486 (#23262)
  • 36eb5f7 fix(security/HIGH/): Update module github.com/apache/thrift to v0.24.0 [SECUR...
  • 0eca83c fix(storage): Fix index filename issue with legacy S3 client and `chunk_delim...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/grafana/loki/v3](https://github.com/grafana/loki) from 3.6.5 to 3.7.4.
- [Release notes](https://github.com/grafana/loki/releases)
- [Changelog](https://github.com/grafana/loki/blob/main/CHANGELOG.md)
- [Commits](grafana/loki@v3.6.5...v3.7.4)

---
updated-dependencies:
- dependency-name: github.com/grafana/loki/v3
  dependency-version: 3.7.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Development

Successfully merging this pull request may close these issues.

0 participants