v1.52.1

Released at 2026-10-02

v1.52.x is a line of LTS releases. It contains important up-to-date bugfixes for VictoriaLogs enterprise.
All these fixes are also included in the latest community release.
The v1.52.x line will be supported for at least 12 months since v1.52.0 release

• SECURITY: upgrade Go builder from Go1.26.5 to Go1.26.8. See the list of issues addressed in Go1.26.6, Go1.26.7 and Go1.26.8.

• SECURITY: deletion API: restrict the /delete/run_task endpoint to the POST method only in order to prevent some SSRF-based log deletion attacks. See #1635.

• BUGFIX: Loki data ingestion: properly ignore structured metadata with empty values in protobuf requests. Previously, valid requests containing structured metadata with empty values were rejected. See #1757.

• BUGFIX: metrics: prevent vl_streams_created_total from decreasing when an old daily partition is removed. The metric now increases until restart, so Prometheus increase() no longer reports false spikes after old partitions are deleted. See #1461.

• BUGFIX: syslog data ingestion and unpack_syslog pipe: prevent a panic when an incomplete RFC5424 structured data parameter ends immediately after =. This could occur both when ingesting syslog messages and when parsing already stored messages with unpack_syslog. See #1786.

• BUGFIX: syslog data ingestion: rename the misspelled vl_udp_reqests_total metric to vl_udp_requests_total, so it matches the docs.

• BUGFIX: cluster version (vlinsert): now drains buffered logs to vlstorage nodes on graceful shutdown instead of dropping them, bounded by the new -insert.drainTimeout command-line flag (default 5s). See #1572.

• BUGFIX: cluster version: evenly spread rerouted data across available vlstorage nodes. Previously, healthy nodes adjacent to unavailable nodes in the -storageNode list could receive much more data, resulting in uneven resource usage. See #1548.

• BUGFIX: cluster version: properly cancel queries already running on vlstorage when the corresponding query is canceled or times out on vlselect. Previously, vlstorage could fail to detect the disconnected vlselect, causing these queries to continue running and waste CPU and disk IO. See #1672.

• BUGFIX: data ingestion and querying: properly handle logs containing duplicate stream field names. Previously, v1.52.0 could panic when ingesting such logs in single-node VictoriaLogs, drop them during ingestion in VictoriaLogs cluster, or panic when querying such data written by earlier releases. See #1603 and #1604.

• BUGFIX: LogsQL: fix week_range[Sun,Sun] filter when it is used inside the filter pipe. Previously, it could fail to match rows on Sunday. See #1335.

• BUGFIX: LogsQL: properly execute queries returning the last N logs (such as queries ending with | sort by (_time desc) limit N) when they contain pipes writing to the _time field, such as math ... as _time, replace (...) at _time or extract "<_time>". Previously such queries could fail with the missing _time field in the query results error or return logs in the wrong order when they were executed on wide time ranges. See #1727.

• BUGFIX: LogsQL: fix sort by (_time) limit N returning logs out of order when the query pipeline included pipes like unpack_json that overwrite _time. See #1360.

• BUGFIX: LogsQL: fix a crash when the math pipe contains a quoted constant such as "2025-01-01T00:00:00Z", and the query is executed with the limit query arg (the web UI always sets it) or via live tailing.

• BUGFIX: web UI: render only inline Markdown links with explicit http or https destinations, such as [text](https://example.com), as clickable links in log messages. Bare URLs, autolinks, reference-style links, links using other schemes, and images are rendered as plain text. See #1470.

• BUGFIX: File Collector: ignore permission denied error when trying to find a rotated log file from previous runs during startup. Previously, vlagent failed with non-zero error code if it couldn't open a file in the same directory as log file. See #1796.

• BUGFIX: File Collector: properly set the file field for logs collected from multiple files matching the same -fileCollector.glob when -fileCollector.extraFields is set. Previously, depending on the number of extra fields, logs from one file could be stored with the file field and the log stream of another file. See #1818.

• BUGFIX: File Collector: incomplete last log lines are no longer joined with the first line of the rotated file. They are dropped with a warning instead. This matches the behavior of other log collectors. See #1819.

• BUGFIX: File Collector: drop the incomplete last log line with a warning when the log file is deleted. Previously, vlagent treated this case as a bug and panicked. See #1552.