v3.7.8
Security and dependency updates addressing multiple vulnerabilities in gRPC, containerd, and crypto libraries. Updates include grpc to v1.83.2, containerd/v2 to v2.2.8, and several golang.org/x packages.
3.7.8 (2026-09-17)
Bug Fixes
- security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24433) (4d5dc2b)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#24328) (0a01797)
- security/HIGH/: Update module google.golang.org/grpc to v1.83.2 [SECURITY] (release-3.7.x) (#24429) (14b5da8)
- security/MEDIUM/: Update module github.com/containerd/containerd/v2 to v2.2.8 [SECURITY] (release-3.7.x) (#24460) (3e917f2)
- security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (release-3.7.x) (#23422) (41064da)
- security/UNKNOWN/pkg/push: Update module google.golang.org/grpc to v1.83.1 [SECURITY] (release-3.7.x) (#23416) (cd8e76d)
- security/UNKNOWN/: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (release-3.7.x) (#24335) (47149cb)
Source: original entry ↗
More from Grafana Loki
Follow Grafana Loki to get its new changes in your feed and email digest.
v3.6.18: Security and dependency updates
Updates Go to 1.26.9 and patches OpenTelemetry exporters (otlptrace gRPC and HTTP) to v1.45.0 to address security vulnerabilities and maintain dependency health.
operator: v0.12.0
Grafana Loki Operator v0.12.0 includes breaking changes requiring the schemas field in storage spec, new features for TLS compliance, telemetry recording, and schema expiration management, plus multiple bug fixes and security updates for critical vulnerabilities in gRPC and other dependencies.
v3.6.17 Security Updates
Security patch release addressing multiple high and medium severity vulnerabilities in dependencies including gRPC, containerd, and Go cryptographic libraries.