Update cr.fluentbit.io/fluent/fluent-bit Docker tag to v4.2.4

[govuk-ci]

This PR contains the following updates:

Package	Update	Change
cr.fluentbit.io/fluent/fluent-bit	minor	4.1.1 → 4.2.4

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

fluent/fluent-bit (cr.fluentbit.io/fluent/fluent-bit)

v4.2.4: Fluent Bit 4.2.4

Compare Source

https://fluentbit.io/announcements/v4.2.4/

What's Changed

• dockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2] by @​cosmo0920 in #​11481
• filter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2] by @​cosmo0920 in #​11493
• multiline: ml: Propagate metadata even if on exceptions [Backport to 4.2] by @​cosmo0920 in #​11494
• filter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2] by @​cosmo0920 in #​11514
• workflows: Suppress invalid glob patterns [Backport to 4.2] by @​cosmo0920 in #​11522
• processor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2] by @​cosmo0920 in #​11542
• http_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2] by @​cosmo0920 in #​11581
• github: workflows: remove trivy cron workflow by @​edsiper in #​11599
• avro: out_kafka: Fix specification errors in avro format [Backport to 4.2] by @​cosmo0920 in #​11615
• lib: monkey: upgrade to v1.8.8 by @​edsiper in #​11693
• engine: use effective post-processor counts for output metrics (v4.2) by @​edsiper in #​11519
• release: Update to v4.2.4 by @​cosmo0920 in #​11694

Full Changelog: fluent/fluent-bit@v4.2.3...v4.2.4

v4.2.3: Fluent Bit 4.2.3

Compare Source

https://fluentbit.io/announcements/v4.2.3/

What's Changed

• release: update to 4.2.3 by @​github-actions[bot] in #​11310
• copyright: update year to 2026 by @​edsiper in #​11325
• filter_kubernetes: fix parser annotation leak by @​erain in #​11333
• github: scripts: commit_linter: Handle bin prefix for fluent-bit.c by @​cosmo0920 in #​11336
• bin: Handle CONT signal properly under leaks command by @​cosmo0920 in #​11335
• filter_wasm: Handle group metadata by @​cosmo0920 in #​11305
• cmake: kafka: fix OAuth Bearer detection on Windows by @​bp-cheng in #​11294
• maintenance: update branch and security EOL info by @​edsiper in #​11339
• github: scripts: commit_prefix_check: add config format rules on linter by @​cosmo0920 in #​11346
• readme: update active branch 4.2 by @​edsiper in #​11348
• out_opentelemetry: on HTTP/2, read and process gRPC status code by @​edsiper in #​11347
• config_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2] by @​cosmo0920 in #​11363
• filter_log_to_metrics: fix initialization and exception cleanup by @​edsiper in #​11428
• out_stackdriver: clean up oauth2 cache lifecycle by @​edsiper in #​11429
• filter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport] by @​ShelbyZ in #​11445
• in_winevtlog: Add text format for event rendering [Backport to 4.2] by @​cosmo0920 in #​11466
• in_tail: Add skipped_lines counter [Backport to 4.2] by @​cosmo0920 in #​11467
• in_splunk: Implement handling remote addr feature [Backport to 4.2] by @​cosmo0920 in #​11465
• aws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport] by @​ShelbyZ in #​11423
• plugin_proxy: enable event_type specification for proxy plugins (4.2 Backport) by @​jmccormick7 in #​11241
• in_splunk: Plug memory issues [Backport to 4.2] by @​cosmo0920 in #​11475

New Contributors

• @​bp-cheng made their first contribution in #​11294

Full Changelog: fluent/fluent-bit@v4.2.2...v4.2.3

v4.2.2: Fluent Bit 4.2.2

Compare Source

https://fluentbit.io/announcements/v4.2.2/

What's Changed

• packaging: script: Use rockylinux prefix on package testing script by @​cosmo0920 in #​11297
• release: update to 4.2.2 by @​github-actions[bot] in #​11296
• security: Update supporting timeline by @​cosmo0920 in #​11300
• out_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests by @​ShelbyZ in #​11159
• aws: Implement simple_aggregation operation by @​ShelbyZ in #​11284
• out_kinesis_firehose: enable HTTP debugging for AWS client requests by @​runderwo in #​11015
• http_client: add ipv6 bracket if missing from host address by @​ShelbyZ in #​11181
• lib: updates 2025122 by @​edsiper in #​11309

New Contributors

• @​ShelbyZ made their first contribution in #​11159

Full Changelog: fluent/fluent-bit@v4.2.1...v4.2.2

v4.2.1: Fluent Bit 4.2.1

Compare Source

https://fluentbit.io/announcements/v4.2.1/

What's Changed

• release: update to 4.2.1 by @​github-actions[bot] in #​11154
• workflows: Not to make latest on publishing 4.1 series on GitHub Relases by @​cosmo0920 in #​11166
• in_forward: fix connection release on pause memory corruption by @​sparrc in #​11114
• workflows: Remove unused tools from unit-tests workflow for extending available disk space by @​cosmo0920 in #​11184
• workflows: bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​11190
• in_opentelemetry: added five missing configuration option descriptions. Fixes #​11191. by @​eschabell in #​11192
• out_s3: implement retry_limit parameter by @​shadowshot-x in #​10825
• in_blob: added missing configuration descriptions. Fixes #​11204. by @​eschabell in #​11206
• tls: openssl: Implement flexible certstore loading on Windows by @​cosmo0920 in #​11200
• in_kubernetes_events: add support for configuring input upstream network setup by @​slab-msft in #​11188
• workflows: add new commit linter tool by @​edsiper in #​11245
• workflows: bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​11248
• workflows: bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​11249
• dockerfile: Docker image to support large page sizes by @​mlsorensen in #​11164
• dockerfile: update to Debian Trixie by @​patrick-stephens in #​11006
• in_elasticsearch: fixing missing config parameter description for http2. Fixes #​11221. by @​eschabell in #​11226
• in_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #​11232. by @​eschabell in #​11233
• in_forward: improve configuration parameter descriptions by @​eschabell in #​11235
• github: commit_linter: Make more flexibility for commit linter by @​cosmo0920 in #​11251
• build: prevent the toolchain from emitting an executable stack by @​edsiper in #​11258
• in_forward: fix segfault and double-free in trace path handling by @​edsiper in #​11257
• in_node_exporter_metrics: Increase buffer size to read /proc/stat correctly by @​piwai in #​11253
• in_http: added missing config parameter descriptions. by @​eschabell in #​11240
• workflows: bump peter-evans/create-pull-request from 7 to 8 by @​dependabot[bot] in #​11275
• out_flowcounter: Fix incorrect bytes calcuation by @​cosmo0920 in #​11259
• workflows: bump actions/cache from 4 to 5 by @​dependabot[bot] in #​11281
• workflows: bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in #​11290
• workflows: bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​11289
• github: workflows: Clean up needless resources on GHA workers by @​cosmo0920 in #​11288
• in_ebpf: add three missing config option descriptions. Fixes #​11221. by @​eschabell in #​11222
• in_gpu_metrics: updated config parameters descriptions. by @​eschabell in #​11237
• build: Tweak linker flags for zstd by @​cosmo0920 in #​11111
• in_winevtlog: Plug glitches of time offset for DST/STD switches by @​cosmo0920 in #​11291

New Contributors

• @​slab-msft made their first contribution in #​11188
• @​mlsorensen made their first contribution in #​11164
• @​piwai made their first contribution in #​11253

Full Changelog: fluent/fluent-bit@v4.2.0...v4.2.1

v4.2.0: Fluent Bit 4.2.0

Compare Source

https://fluentbit.io/announcements/v4.2.0/

What's Changed

• release: update to 4.1.2 by @​github-actions[bot] in #​11005
• reload: fix race between watchdog start and setting async cancellation by @​stoksc in #​11012
• storage: fix heap corruption in chunk sort parser by @​cosmo0920 in #​11017
• in_calyptia_fleet: add support for net.* properties for the upstream connection. by @​pwhelan in #​10998
• in_forward: fix username parsing by @​edsiper in #​11026
• in_forward: Fix incorrect user auth sequence by @​cosmo0920 in #​11028
• workflows: Make not to be the latest release for 4.0 branch by @​cosmo0920 in #​10993
• build: bump to v4.2.0 by @​edsiper in #​11037
• security: update versions and general info by @​edsiper in #​11038
• help: add space for outputs and processors when generating schema. by @​pwhelan in #​11020
• opentelemetry: traces: unify JSON to ctrace encoder by @​edsiper in #​11042
• routing: add new routing mechanism for input plugins by @​edsiper in #​11041
• mp: extend cobj API to expose group metadata and attributes by @​edsiper in #​11043
• in_node_exporter_metrics: add netstat linux collector by @​edsiper in #​11052
• fstore: safe check on fsf file deletion by @​edsiper in #​11050
• workflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch by @​cosmo0920 in #​11062
• router: add conditional support for Logs by @​edsiper in #​11055
• aws_credential_sts: internal: Fix unit test failures by @​cosmo0920 in #​11077
• workflows: bump actions/upload-artifact from 4 to 5 by @​dependabot[bot] in #​11075
• workflows: bump actions/download-artifact from 5 to 6 by @​dependabot[bot] in #​11074
• router_condition: Fix unconditional route check in routing by @​cosmo0920 in #​11087
• out_vivo_exporter: add versioned API endpoints by @​edsiper in #​11040
• router: add contexts to conditional support for direct route paths by @​edsiper in #​11091
• snap: Upgrade snap from core18 to core20 by @​cosmo0920 in #​11069
• doc-reports: add cncf audit report by @​DavidKorczynski in #​11056
• chunks: extend metadata to support routing information (direct routes) by @​edsiper in #​11097
• workflows: bump helm/kind-action from 1.12.0 to 1.13.0 by @​dependabot[bot] in #​11100
• CODEOWNERS: update AWS maintainers and cleanup by @​edsiper in #​11109
• dockerfile: removed unused DLLs from image for Windows Containers by @​mabrarov in #​10233
• kafka: fix cmake cross compile error by @​ThomasDevoogdt in #​9600
• build: workflows: Add a rules for checking incompatible types strictly by @​cosmo0920 in #​10655
• tls: openssl: output: Handle certificates thumbprints by @​cosmo0920 in #​11009
• in_syslog: Add support for RFC 6587 octet-counting by @​cosmo0920 in #​11035
• wasm: Plug wasm heap leakages by @​cosmo0920 in #​11076
• scheduler: engine: output_thread: Plug macOS abort on dry-run by @​cosmo0920 in #​11099
• router: extend router interface to support metrics (v3) by @​edsiper in #​11108
• out_s3: Add a NULL check for plugging SEGV on dry_run by @​cosmo0920 in #​11117
• build: Add workdir option for the default registration of Windows service by @​cosmo0920 in #​11124
• packaging: add missing SASL dependencies for Rocky/AlmaLinux by @​patrick-stephens in #​11127
• fix: Make TLS initialization thread-safe and idempotent using pthread_once by @​ThomasBrady in #​11090
• out_opensearch: release aws signature a retry or error happens by @​edsiper in #​11140
• routing: extend input name resolution for safer direct route paths by @​edsiper in #​11141
• motd: add 4.2 banner by @​edsiper in #​11142
• org: update organization status change by @​edsiper in #​11143
• out_http: Plug a NULL dereference by @​cosmo0920 in #​11034
• out_http: Added PUT support by @​nicknezis in #​10882
• routing: introduce metrics for unmatched (dropped) logs by @​edsiper in #​11144
• in_tail: Implement long line truncation by @​cosmo0920 in #​11059
• in_systemd: always reset cursor before iterating fields by @​edsiper in #​11073
• packaging: add -L flag to curl for redirect support by @​sakshitposting-irl in #​11137
• storage: config: engine: Introduce dead letter queue by @​cosmo0920 in #​11000
• filter_kubernetes: use service account issuer to detect EKS env (compiler fix) by @​edsiper in #​11146
• workflows: staging-release: add v4.2 by @​edsiper in #​11153

New Contributors

• @​nicknezis made their first contribution in #​10882
• @​sakshitposting-irl made their first contribution in #​11137

Full Changelog: fluent/fluent-bit@v4.1.1...v4.2.0

v4.1.2: Fluent Bit 4.1.2

Compare Source

https://fluentbit.io/announcements/v4.1.2/

What's Changed

• release: update to 4.1.2 by @​github-actions[bot] in #​11005
• reload: fix race between watchdog start and setting async cancellation by @​stoksc in #​11012
• storage: fix heap corruption in chunk sort parser by @​cosmo0920 in #​11017
• in_calyptia_fleet: add support for net.* properties for the upstream connection. by @​pwhelan in #​10998
• in_forward: fix username parsing by @​edsiper in #​11026
• in_forward: Fix incorrect user auth sequence by @​cosmo0920 in #​11028
• help: add space for outputs and processors when generating schema. [Backport to 4.1] by @​cosmo0920 in #​11066
• tests: internal: aws_credentials_sts: fix unit test (timestamps) by @​cosmo0920 in #​11086
• fstore: safe check on fsf file deletion [Backport to 4.1] by @​cosmo0920 in #​11061
• wasm: Plug wasm heap leakages [Backport to 4.1] by @​cosmo0920 in #​11119
• out_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1] by @​cosmo0920 in #​11123
• in_forward: fix connection release on pause memory corruption [backport to 4.1] by @​sparrc in #​11179
• in_opentelemetry: added five missing configuration option descriptions [backport 4.1] by @​eschabell in #​11194
• workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] by @​cosmo0920 in #​11264
• out_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1] by @​cosmo0920 in #​11261
• in_forward: fix segfault and double-free in trace path handling [Backport to 4.1] by @​cosmo0920 in #​11267

Full Changelog: fluent/fluent-bit@v4.1.1...v4.1.2

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[AgaDufrat]

[Platform Support rota] Converting to Draft and adding to the Backlog so it can be worked on during a sprint.