operator: v0.11.0

0.11.0 (2026-08-18)

⚠ BREAKING CHANGES

• Remove support for experimental LogQL variants() queries (#23823)

Features

• operator: Enable multi-variant queries (#21009) (709e318)
• operator: Support private VPC S3 endpoints in endpoint validation (#22395) (394caef)
• operator: Watch object storage Services for NetworkPolicy updates and surface ports in status (#22436) (12822d5)
• Remove support for experimental LogQL variants() queries (#23823) (132e5f9)

Bug Fixes

• operator: Move telemetry recording rules to OpenShift bundle (#22814) (4632368)
• operator: Release leader lease on shutdown so upgrades are faster (#24042) (ee0d59d)
• operator: Use ruler remote_write clients key instead of deprecated client (#23455) (f5ddb02)
• security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (main) (#23608) (e1e4e0e)
• security/UNKNOWN/operator: Update module golang.org/x/net to v0.56.0 [SECURITY] (main) (#23388) (9362a5e)
• security/UNKNOWN/operator: Update module golang.org/x/text to v0.39.0 [SECURITY] (main) (#23389) (50589e1)

v3.7.6

3.7.6 (2026-08-05)

Bug Fixes

• queryrange: Preserve sketch in MergeLabels [release-3.7.x] (#23770) (d48329d)

v3.7.5

3.7.5 (2026-08-05)

Bug Fixes

• Build deb/rpm packages again in the release workflow (#23598) (6f49272)
• ci: Disable docker plugin publishing on release-3.7.x (#23440) (6095f71)
• ingester: Fix flush race in ingester [release-3.7.x] (#23682) (ff152dc)
• security/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23611) (11c4b29)
• security/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23612) (1e3108e)
• security/UNKNOWN/cmd/dataobj-inspect: Update module go.opentelemetry.io/otel to v1.42.0 [SECURITY] (release-3.7.x) (#23518) (28917d3)
• security/UNKNOWN/cmd/dataobj-inspect: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) (#23419) (5d2b9d4)
• security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23613) (8d71c59)
• security/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.7.x) (#23610) (941b557)
• security/UNKNOWN/: Update module golang.org/x/text to v0.39.0 [SECURITY] (release-3.7.x) (#23418) (2347a9a)
• security/UNKNOWN/: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (release-3.7.x) (#23405) (f290af0)

v3.6.15

3.6.15 (2026-08-05)

Bug Fixes

• queryrange: Preserve sketch in MergeLabels [release-3.6.x] (#23771) (20087cd)

v3.6.14

3.6.14 (2026-08-04)

Bug Fixes

• Backport WAL replay hang fix to release-3.6.x (#21176) (#23630) (355e2f3)
• ci: Backport deb/rpm packaging fix to release-3.6.x (#23680) (#23722) (d7ee4de)
• security/UNKNOWN/cmd/chunks-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23615) (a6cc2e5)
• security/UNKNOWN/cmd/dataobj-inspect: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23616) (a71c910)
• security/UNKNOWN/operator: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23618) (59970a9)
• security/UNKNOWN/: Update module github.com/klauspost/compress to v1.18.7 [SECURITY] (release-3.6.x) (#23614) (8308a12)

v3.6.13

3.6.13 (2026-07-23)

Bug Fixes

• ci: Fix zizmor findings for operator-images in Loki 3.6 (#22821) (050f742)
• ci: Helm CI warning fix (#22606) (4bc2586)
• security/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.6.x) (#22694) (692f2b1)
• security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] (#23398) (fc478e1)
• security/HIGH/pkg/push: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (70f75b7)
• security/HIGH/: Update golang.org/x/net, golang.org/x/text and google.golang.org/grpc [SECURITY] (70f75b7)
• security/UNKNOWN/cmd/chunks-inspect: Update go toolchain directive to v1.25.12 [SECURITY] (release-3.6.x) (#23131) (b327439)
• security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.56.0 [SECURITY] (70f75b7)
• security/UNKNOWN/pkg/push: Update module golang.org/x/text to v0.39.0 [SECURITY] (70f75b7)
• security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.6.x) (#22479) (697bd83)
• security: Backport security updates to release-3.6.x (#23403) (70f75b7)
• Update objstore to include fix for GCS Exists (#23381) (87383d8)

v3.7.4

3.7.4 (2026-07-22)

Bug Fixes

• ci: Fix zizmor findings for operator-images in Loki 3.7 (#22820) (abc1186)
• ci: Helm CI warning fix (#22605) (7389428)
• ci: Re-enable docker plugin publishing (#22818) (28f44a8)
• compactor: Fix delete request when using Thanos objstore client with filesystem backend [release-3.7.x] (#22811) (dd6fdb5)
• deps: Update module charm.land/bubbletea/v2 to v2.0.7 (release-3.7.x) (#22768) (e11f935)
• deps: Update module charm.land/lipgloss/v2 to v2.0.4 (release-3.7.x) (#22769) (10213c2)
• deps: Update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 (release-3.7.x) (#22776) (3daf198)
• deps: Update module github.com/aws/smithy-go to v1.27.3 (release-3.7.x) (#22795) (1f6a191)
• deps: Update module github.com/baidubce/bce-sdk-go to v0.9.270 (release-3.7.x) (#22783) (103ccd8)
• deps: Update module github.com/coder/quartz to v0.3.1 (release-3.7.x) (#22784) (3509e31)
• deps: Update module github.com/IBM/ibm-cos-sdk-go to v1.14.1 (release-3.7.x) (#22785) (d0abe72)
• deps: Update module github.com/klauspost/compress to v1.18.6 (release-3.7.x) (#22797) (327da7c)
• deps: Update module github.com/pierrec/lz4/v4 to v4.1.27 (release-3.7.x) (#22798) (6b3297f)
• deps: Update module github.com/shirou/gopsutil/v4 to v4.26.5 (release-3.7.x) (#22800) (cb7f17d)
• security/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.7.x) (#22693) (6d8f1b5)
• security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] (#23393) (b318f28)
• security/HIGH/: Update module github.com/apache/thrift to v0.24.0 [SECURITY] (release-3.7.x) (#22767) (36eb5f7)
• security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) (#22200) (dd7a124)
• security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.7.x) (#22478) (6fa6165)
• storage: Fix index filename issue with legacy S3 client and chunk_delimiter (#23165) (0eca83c)

v3.7.3

3.7.3 (2026-06-24)

⚠ BREAKING CHANGES

• operator: switch default for OpenShift stream labels (#21001)

Features

• add bloom filter to cache known streams for ExceedsLimits requests (#20823) (f5440a3)
• add builder pool to logsobj package (#21134) (8a68101)
• add case-insensitive regex optimization (#20578) (f6a6a4f)
• Add config to delegate stream limits check to limits-service only (#21007) (ba119f6)
• add flush manager to control data object flush lifecycle (#20680) (c169ce3)
• add GroupConsumer to kafkav2 package (#20748) (5ad60ee)
• Add results cache to thor query engine (#20986) (6ef3827)
• Add SubstringInsensitive compute fn (#20584) (9c03192)
• Align start time when the query is received (#20967) (8e18f10)
• allow the initial offset to be set in the starting phase (#20770) (93f4bdf)
• Batch records before writing to sinks (#20821) (f083618)
• bench: add simulated object storage latency to LogQL benchmarks (#20733) (5102ed0)
• build: Move to Go 1.26 (#20988) (4fb960c)
• close the records chan when consumer terminates (#20761) (c3d0de9)
• dataobj-compactor: add a planner for compaction of data objects (#20527) (7f1450d)
• don't shuffle shard if shard factor is 1 (#21190) (7ac1d16)
• early goldfish correlation ID generation with X-Loki-Goldfish-ID header (#21155) (e90e4a6)
• engine: Dedupe entries when building final result (#21034) (e95137a)
• enginev2: Implement IsMember compute function (#20689) (a28d8b4)
• enginev2: Implement regexp compute function (#20642) (7b8d51b)
• enginev2: Implement substr compute function (#20641) (9740619)
• helm: Add common labels to all resources (#20269) (dc21099)
• helm: allow customization of write, read and backend PDB (#16871) (9f653b1)
• helm: finalize chart fork (#21166) (33f7a1b)
• helm: Memcached: allow to override CPU in the auto-computed resource mode (#20767) (3886548)
• Introduce a rate batcher to batch rate updates (#20784) (b9a0a15)
• limits: Add emptiness check to prepare for multiAZ (#20927) (4eeb70c)
• loki-query-engine: instrument query-engine with runtime/trace (#21000) (a7c75a6)
• loki: allow disabling cache for query_range requests (#21112) (1242aa5)
• operator: add option to customize gateway server cert (#20325) (3c8b9e8)
• operator: switch default for OpenShift stream labels (#21001) (61ec040)
• operator: Update Loki operand to v3.6.5 (#20696) (d81e977)
• operator: update metrics authentication to remove dependency on kube-rbac-proxy (#20853) (2de6e79)
• put kotel behind a flag (#20933) (f8e2d64)
• query-engine: Omit labels with empty values (#21173) (5c17103)
• refactor frontend cache, add metrics, filter out cached streams (#20860) (a63f0c3)
• release 3.7 (#21270) (21d5b59)
• Remove Promtail support (backport k299) (#21248) (939d15f)
• reset the consumption lag gauge after 1 minute of idle period (#20616) (f1d0cdf)
• separate metastore events and offsets from flushes (#20605) (cb938d0)
• Update references to v3.7.0 (backport k299) (#21274) (3361de2)
• Update to go 1.25.7 (#20694) (3a6ba0d)
• use stream sharding within segment subrings (#21181) (2def797)
• V2 query engine limits (#20549) (7151be7)

Bug Fixes

• Add build tags to Promtail build commands (#19989) (5596bdc)
• alloc: set a limit on preallocations (#20891) (9525e53)
• allow blocking multiple query hashes (#21103) (4c645c6)
• backoff if no records returned, instead of at least one error (#20747) (eab506d)
• broken get and replace for s3 client (#21163) ([e6abd15](h...

v3.6.12

3.6.12 (2026-06-24)

⚠ BREAKING CHANGES

• operator: consolidate image build workflows and improve documentation (#19395)
• move the Loki UI to a Grafana Plugin (#19390)
• operator: CI publishing image strategy (#19365)

Features

• add json parsing stage to v2 engine (#19240) (aec34ed)
• add logfmt parse support to the v2 query engine (#18931) (ccb4549)
• add loki health command (backport release-3.6.x) (#20590) (dfdbe2a)
• add p50, p95 and p99 section sizes per tenant (#19054) (cb3b74a)
• add p50, p95 and p99 sections per tenant to stats (#19044) (d256df4)
• add rules check for namespace and group (#20437) (#20463) (7733ab1)
• build multi-tenant data objects (#19034) (f60f818)
• capture logs drilldown flag in query samples (#19242) (cb3f2ad)
• Change how analytics proxy works (#19098) (82d25df)
• compactor-hs: add a metric to track the number of jobs left to conclude ongoing unit of work (#19506) (9e0f50c)
• deletion: return request ID in response header (#19444) (6e6e8a9)
• drilldown config endpoint (#19028) (52b5d95)
• engine: More aggregations for the new query engine (#19350) (1474ede)
• engine: Prefetch inputs of Merge pipeline concurrently (#19039) (f50c87f)
• fluentd: Add 'compress gzip' setting to fluentd plugin (#18995) (1cda925)
• goldfish: improve query performance with indexes and paritions (#19023) (89509de)
• helm: Add startupProbe to memcached (#19166) (f799e9b)
• helm: Add startupProbe to memcached exporter (#19165) (901e574)
• helm: add configurable livenessProbe to single binary StatefulSet (#19072) (18b8995)
• helm: add dnsconfig to all missing resources (#18903) (ed68531)
• helm: Add health probes to gateway component (#18545) (82aa322)
• helm: Add health probes to loki in backend (#18548) (10441c8)
• helm: add more specificity to affinity and topology spread constraints (#17404) (#19061) (0819e48)
• helm: add replicas to loki-canary deployment (#19095) (c9d7d76)
• helm: add support for custom alert rule annotations (#19193) (2df5197)
• helm: allow extraObjects as dict (#13252) (6a953bb)
• helm: Only delete PVC on statefulset deletion, not scaling (#19097) (0cead58)
• helm: use named ports for memcached services targetports (#18990) (6a5be7e)
• implement unwrap as a projection (#19409) (3ce6fa2)
• implement volume-based pattern filtering (#18838) (71e2e01)
• logcli: add --log.level parameter (#19136) (77c18d9)
• loki-mixin: allow disabling thanos dashboard and fix dashboard's file name (#18749) (cadc824)
• move the Loki UI to a Grafana Plugin (#19390) (3a1e5ad)
• operator: Add alert LokiIngesterFlushFailureRateCritical (#18698) (66ebc5a)
• operator: Add warning alert for when LokiStack is not getting ready (#19258) (c47fe46)
• operator: deploy network policies with LokiStack (#19099) (6e6f61f)
• operator: s3 validation reject endpoints that contain a URL path (#19356) (f6ef4d8)
• operator: Update Loki operand to v3.5.4 (#19122) (155972e)
• operator: Update Loki operand to v3.5.5 (#19187) (743929b)
• per policy overridable stream limits (#18994) (af257fd)
• prepare Loki 3.6 (ab8e800)
• querytee: Add workflow_dispatch for querytee-images workflow (#19541) (4216f68)
• remove tenant topic tee (#19082) (a03e86c)
• single-binary: delete statefulset if volumeClaimTemplates changes (#19217) (da4240d)
• Update to go 1.25.7 (#20694) (#20717) (1967a6a)
• Upgrade go.opentelemetry.io/otel/sdk from v1.38.0 to v1.40.0 (#21115) (d1ab148)
• Upgrade Go to 1.25.8 (release-3.6.x) (#21240) ([10d2666](https://github.c...

operator: v0.10.2

0.10.2 (2026-06-09)

Features

• operator: Add passthrough-gateway component (#20382) (bf06e45)
• operator: Introduce passthrough tenancy (#20573) (ca8aac8)
• operator: Update ServiceMonitors to use serviceDiscoveryRole: EndpointSlice (#21731) (d3a12c7)

Bug Fixes

• operator: Add STS support in Azure secret creation script (#20833) (a9f11d6)
• operator: Fix import for yaml v4 (#22159) (4b37810)
• operator: Fix RemoteWriteAuthType CEL validation in RulerConfig (#21677) (50e5873)
• operator: Redistribute ingester resources for 1x.extra-small and 1x.small to support 3 replicas (#21717) (3bca03f)
• operator: Replace local pkg/push dependency with published module (#21679) (752874f)
• operator: Ruler doesn't evaluate rules due to use_thanos_objstore (#21713) (d0b1ea0)
• operator: Use thanos objstore CA flags for S3 and Swift storage (#22123) (2433c87)