v1.136.20

v1.136.20

Released at 2026-10-09

v1.136.x is a line of LTS releases. It contains important up-to-date bugfixes for VictoriaMetrics enterprise.
All these fixes are also included in the latest community release.
The v1.136.x line will be supported for at least 12 months since v1.136.0 release

• SECURITY: upgrade Go builder from Go1.26.8 to Go1.26.9. See the list of issues addressed in Go1.26.9.

• BUGFIX: all VictoriaMetrics components: correctly configure TCP keep-alive active probes. See #11695.

• BUGFIX: all VictoriaMetrics components: properly match regexps that start with an alternation or a character class and continue with .*foo.* or .+foo.+, for example (a|b).*foo.*. Previously the leading part was ignored when matching relabeling regex and if filters and stream aggregation match filters, so such rules matched more series than intended. See #11712. Thanks to @dblackdblack for contribution.

• BUGFIX: stream aggregation: properly add timeseries for increase, increase_prometheus, total and total_prometheus aggregation functions when enable_windows: true is set. See #11707. Thanks to @Hoipang for contribution.

• BUGFIX: vmalert: keep using notifiers from the previously applied notifier configuration file if the updated config fails to start, for example due to a temporary service discovery error, and retry applying it on the next reload. Previously, vmalert stopped the old notifiers before starting the new ones, so a failed reload left vmalert with no or only some notifiers, and alert notifications were silently not delivered until the file changed or vmalert restarted. See #11645.

• BUGFIX: vmalert: copy alert labels before applying alert_relabel_configs from the notifier configuration file, preventing different alertmanagers from affecting each other's labels. See #11676.

• BUGFIX: vmauth: fixes rare data corruption on HTTP request retries. See #11508.

• BUGFIX: vmselect in VictoriaMetrics cluster: add missing accountID, projectID and multiTenant fields to topByAvgMemoryUsage results at /api/v1/status/top_queries. See #11640.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: properly execute group_left(...) and group_right(..) queries when the join is then combined with another selector. See #11490.

• BUGFIX: vmsingle and vmstorage in VictoriaMetrics cluster: prevent possible crash with cannot decompress zstd data... panic on darwin, windows, freebsd, openbsd, linux/arm, linux/ppc64le, linux/386, linux/s390x, and -pure builds. The linux/amd64 and linux/arm64 builds are not affected. See #11683.

• BUGFIX: vmsingle: properly apply -streamAggr.enableWindows command-line flag to stream aggregation rules. Previously, the flag was ignored by aggregation rules defined in -streamAggr.config and was applied only during config validation with -dryRun and to the standalone deduplication configured via -streamAggr.dedupInterval. See #11717.

• BUGFIX: vmui: prevent overriding the serverUrl, tenantId, theme, and isDarkTheme settings via query parameters. See #11485.

• BUGFIX: vmbackup and vmbackupmanager: add -s3SkipTaggingDirective command-line flag for S3-compatible storage that rejects the x-amz-tagging-directive and x-amz-tagging headers. See #11562.