Prometheus Changelog
Prometheus — Observability product updates and releases, tracked on megachangelog.
Announcement3.14.0
Prometheus v3.14.0
Release of Prometheus version 3.14.0.
releasemonitoringprometheus
Announcement0.314.0-rc.0
v0.314.0-rc.0
Release candidate for version 0.314.0.
release-candidateprometheus
Announcement3.13.2
Prometheus v3.13.2
Version 3.13.2 of Prometheus released with bug fixes and improvements.
releasemonitoringprometheus
Fix3.13.1
TSDB: Fix head-chunk cache returning wrong samples or spurious errors after truncation
Fixed a bug where the TSDB head-chunk cache could return samples from the wrong chunk or produce spurious not-found errors in range queries after head-chunk truncation.
tsdbbugfixcachestability
Security3.5.5
UI: Bump sanitize-html to fix CVE-2026-53606
Updated sanitize-html dependency to v2.17.5 to address a security vulnerability in the UI.
securityuidependenciescve
Announcement3.13.0-rc.0
Prometheus 3.13.0-rc.0
Prometheus 3.13.0-rc.0 includes security fixes for XSS vulnerabilities and credential forwarding on redirects, major PromQL enhancements with new scalar functions and native histogram support, experimental search API endpoints, performance optimizations across labels and TSDB, and numerous bug fixes across discovery, scraping, and query evaluation.
securitypromqlperformancetsdbapi
Announcement3.13.0
Prometheus 3.13.0 LTS Release
Long Term Support release with major security fixes including XSS vulnerability patch, breaking API changes for credential forwarding on redirects and pagination token generation, plus experimental search endpoints, native histogram improvements, and performance optimizations across TSDB, PromQL, and storage systems.
ltssecurityapiperformancepromql
Announcement3.13.0-rc.1
Prometheus 3.13.0-rc.1
Release candidate for Prometheus 3.13.0 featuring security fixes for XSS vulnerabilities, API improvements including SHA-256 for rule pagination and experimental search endpoints, PromQL enhancements with new functions and native histogram support, and numerous bug fixes and performance improvements including TSDB optimizations and reduced memory allocations.
securityapipromqltsdbperformance
Announcement0.313.0-rc.1
v0.313.0-rc.1
Release candidate 0.313.0 for Prometheus monitoring system.
releasecandidatemonitoring
Security3.5.4
Version 3.5.4 - Multiple Security Fixes
This release addresses multiple security vulnerabilities including plaintext secret exposure in STACKIT SD configuration endpoint, CVE fixes in Go and OpenTelemetry dependencies, and security patches in UI framework dependencies. Container images are now also published to GitHub Container Registry.
securitydependenciescontainerdisclosure
Announcement3.12.0
Prometheus 3.12.0 — Security fixes, PromQL features, and TSDB performance
This release addresses two security vulnerabilities in remote-write and STACKIT service discovery, introduces new experimental PromQL functions (start, end, range, step) with start timestamp support, and optimizes TSDB performance through constant-time head chunk lookup and improved mmap operations. Includes support for DigitalOcean and Outscale service discovery, new web UI for time series deletion, and numerous bug fixes.
securityperformancepromqlservice-discoverytsdb
Announcement0.312.0-rc.0
v0.312.0-rc.0
Release candidate 0 for version 0.312.0 of Prometheus.
releasercprometheus
Announcement3.12.0-rc.0
Prometheus 3.12.0-rc.0: Security fixes, PromQL enhancements, and TSDB optimizations
This release addresses two security vulnerabilities (remote-write snappy decompression DoS and STACKIT secret exposure), introduces new PromQL experimental functions and start timestamp support, optimizes TSDB performance with constant-time head chunk lookup, and adds service discovery for DigitalOcean and Outscale along with UI improvements for time series management.
securitypromqltsdbservice-discoveryperformance
Security3.11.3
3.11.3 — Multiple security issues fixed
This release addresses three critical security vulnerabilities: an OAuth client_secret exposure in AzureAD remote write configuration, a snappy-compressed request handling issue in remote-read, and a stored XSS vulnerability in the old UI heatmap chart. All issues have been patched and coordinated disclosure credits have been provided.
securityvulnerabilityoauthxsscve
Security3.5.3
Security release: OAuth, snappy decode, and XSS fixes
This release addresses four security vulnerabilities: AzureAD OAuth client_secret exposure in config endpoint, snappy decompression limits in remote-write/read, and a stored XSS in the legacy UI heatmap charts. All issues have been responsibly disclosed and assigned CVE identifiers.
securityoauthxssremote-writeremote-read
Announcement0.311.3
Prometheus v0.311.3
Version 0.311.3 of Prometheus released with general maintenance and stability updates.
prometheusreleasemonitoring
Update0.305.3
Version 0.305.3
A patch release with bug fixes and stability improvements.
releasepatchstability
Security3.11.2
Prometheus 3.11.2
This release fixes a stored XSS vulnerability in the Prometheus web UI that could be triggered via crafted metric names and label values in tooltips and the metrics explorer. It also adds a health_filter field to Consul SD for Health API filtering and fixes a bug where the filter parameter was incorrectly applied.
securityxssuiconsulbugfix
Security3.5.2
Fix stored XSS via unescaped metric names and labels in web UI
This release patches a stored XSS vulnerability (CVE-2026-40179) that could be triggered through crafted metric names and label values in the Prometheus web UI tooltips and metrics explorer. Additionally, regex performance is improved by removing unnecessary Simplify calls.
securityxssuicveperformance
Sign up to see more
23 more changes from Prometheus. Sign up to read the whole changelog.
Sign up freeGitHub or email — no card needed.