Update cr.fluentbit.io/fluent/fluent-bit Docker tag to v5

[govuk-ci]

This PR contains the following updates:

Package	Update	Change
cr.fluentbit.io/fluent/fluent-bit	major	4.1.1 → 5.0.6

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

fluent/fluent-bit (cr.fluentbit.io/fluent/fluent-bit)

v5.0.6: Fluent Bit 5.0.6

Compare Source

https://fluentbit.io/announcements/v5.0.6/

What's Changed

• release: update to 5.0.6 by @​github-actions[bot] in #​11785
• env: add bash-style default value operator :- by @​benjaminmueggenburg-serato in #​11787
• lib: cfl: upgrade to v0.7.1 by @​edsiper in #​11795
• out_kafka: partition OTLP logs by resource by @​edsiper in #​11786
• sds: general fixes for sds_cat() usage by @​edsiper in #​11805
• in_forward: handle unpacker allocation failure by @​edsiper in #​11809
• tests: prevent port binding failures in concurrent OTEL tests by @​patrick-stephens in #​11808
• engine: ignore duplicate STOP to prevent shutdown spin by @​jinyongchoi in #​11747
• out_azure_logs_ingestion: Plug SEGV on termination by @​cosmo0920 in #​11800
• packaging: add support for Ubuntu 26.04 by @​patrick-stephens in #​11802
• config: storage: Add total limit size of DLQ by @​cosmo0920 in #​11796
• http_server: harden listener and architecture by @​edsiper in #​11742
• tests: runtime: wait for tail truncate output by @​edsiper in #​11810
• in_tail: fix file append cleanup on failure by @​sandy2008 in #​11749
• in_tail: reconcile files after missed inotify events by @​sandy2008 in #​11750
• github: workflows: Restore ok-package-test trigger behavior by @​cosmo0920 in #​11820
• security: update policy for 5.0 and EOL 4.1 by @​patrick-stephens in #​11818
• sds: fix handling of cfl_sds return buffers after cfl upgrade by @​edsiper in #​11813
• tls: omit SNI for IP literal hosts by @​edsiper in #​11827
• http_server: spawn internal server in threaded mode by @​edsiper in #​11811

New Contributors

• @​sandy2008 made their first contribution in #​11749

Full Changelog: fluent/fluent-bit@v5.0.5...v5.0.6

v5.0.5: Fluent Bit 5.0.5

Compare Source

https://fluentbit.io/announcements/v5.0.5/

What's Changed

• in_node_exporter_metrics: Skip ipv6 metrics collection when disabled by @​piwai in #​11773
• out_logdna: remove promoted known keys by @​lecaros in #​11755
• in_ebpf: Implement exec trace by @​cosmo0920 in #​11714
• filter_kubernetes: destroy TLS session to prevent SSL object leak by @​ShelbyZ in #​11730
• aws: update support for additional regions by @​ShelbyZ in #​11733
• filter_kubernetes: make memory growth rigidly on filter k8s by @​cosmo0920 in #​11731
• out_s3: Handle otlp JSON format by @​cosmo0920 in #​11762
• filter_log_to_metrics: retry timer metric append by @​edsiper in #​11774
• crypto: fix build with OPENSSL_NO_ENGINE by @​yselkowitz in #​11771
• scripts: enable working runtime tests by @​mabrarov in #​11724
• opentelemetry: preserve otlp log resource grouping by @​edsiper in #​11781
• filter_kubernetes: destroy upstream and TLS context on happy path exit by @​ShelbyZ in #​11738
• out_forward: fix retain_metadata_in_forward_mode default value (true) by @​edsiper in #​11756
• release: update to 5.0.5 by @​github-actions[bot] in #​11767
• lib: cmetrics: upgrade to v2.1.3 by @​edsiper in #​11780
• input: fix threaded input conditional routing for logs by @​edsiper in #​11783

New Contributors

• @​yselkowitz made their first contribution in #​11771

Full Changelog: fluent/fluent-bit@v5.0.4...v5.0.5

v5.0.4: Fluent Bit 5.0.4

Compare Source

https://fluentbit.io/announcements/v5.0.4/

What's Changed

• out_influxdb: plug tag keys failure on out influxdb by @​cosmo0920 in #​11722
• routing: fix issue with missing input alias by @​edsiper in #​11717
• release: update to 5.0.4 by @​github-actions[bot] in #​11712
• tests: http_client_chunked: Plug SEGV occurence on macOS by @​cosmo0920 in #​11711
• in_http: add new /health endpoint by @​edsiper in #​10020
• out_loki: fix 'occured' -> 'occurred' in comment by @​SAY-5 in #​11725
• utils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size by @​ashinde-ai in #​11727
• in_dummy: Use pre_run callback to fix crash path by @​cosmo0920 in #​11753
• in_tail: drop redundant fstat() on event collection by @​edsiper in #​11692
• ml: ensure context is registered for REGEX type by @​mirko-lazarevic in #​11231
• in_forward: handle retain metadata in upstream conf by @​cosmo0920 in #​11736
• in_tcp: in_udp: Enhance of parser capabilities by @​cosmo0920 in #​11705
• http_client: Restore behavior for dummy http client by @​cosmo0920 in #​11710

New Contributors

• @​SAY-5 made their first contribution in #​11725
• @​ashinde-ai made their first contribution in #​11727

Full Changelog: fluent/fluent-bit@v5.0.3...v5.0.4

v5.0.3: Fluent Bit 5.0.3

Compare Source

https://fluentbit.io/announcements/v5.0.3/

What's Changed

• tests: integration: introduce in-tree integration test suite by @​edsiper in #​11663
• parser: Address wrong assignments of timezone at midnight by @​cosmo0920 in #​11677
• release: update to 5.0.3 by @​github-actions[bot] in #​11659
• workflows: Unify steps of downloading built macOS packages by @​cosmo0920 in #​11666
• record accessor: fix CFL root-key matching and container translation by @​edsiper in #​11673
• env: add new extended format to handle environment variables by @​edsiper in #​10862
• out_s3: fix retry_limit semantics and multipart upload memory leaks by @​singholt in #​11669
• lib: cmetrics: upgrade to v2.1.2 by @​edsiper in #​11685
• in_tail: harden db offset restore across restart by @​edsiper in #​11691
• oauth2: restore legacy context creation behavior by @​edsiper in #​11662
• network: Handle baraketed ipv6 addresses by @​cosmo0920 in #​11676
• in_opentelemetry: fix tag routing issue by @​edsiper in #​11701
• http_server: add settings for ingress queue by @​edsiper in #​11704
• out_syslog: address invalid configurations on in syslog by @​cosmo0920 in #​11706
• input_thread: replace raw read() with pipe abstraction to fix crash by @​zshuang0316 in #​11623
• workflows: Windows docker insufficient disk space fix by @​mabrarov in #​11671
• http_client: enhance parser in timeouts and protocol parsing by @​edsiper in #​11686
• in_ebpf: add tcp trace by @​cosmo0920 in #​11646

Full Changelog: fluent/fluent-bit@v5.0.2...v5.0.3

v5.0.2: Fluent Bit 5.0.2

Compare Source

https://fluentbit.io/announcements/v5.0.2/

What's Changed

• release: update to 5.0.2 by @​github-actions[bot] in #​11636
• build: Detect version bump to permit "release: " prefix by @​cosmo0920 in #​11638
• aws: compression: arrow: Set up proper block size by @​cosmo0920 in #​11640
• dockerfiles: windows: fixed VS Build Tools installation by @​mabrarov in #​11643
• out_azure_blob: add path templating support comparable to s3 by @​nberlee in #​11178
• oauth2: harden token refresh parsing by @​erain in #​11618
• out_azure_kusto: fix SIGSEGV crashes, resource handle leaks, and HTTP buffer sizing by @​tanmaya-panda1 in #​11607
• in_ebpf: Add vfs trace by @​cosmo0920 in #​11568
• agents: add initial AGENTS.md by @​edsiper in #​11644

Full Changelog: fluent/fluent-bit@v5.0.1...v5.0.2

v5.0.1: Fluent Bit 5.0.1

Compare Source

https://fluentbit.io/announcements/v5.0.1/

What's Changed

• moth: update banner to v5.0 by @​edsiper in #​11628
• tests: runtime: Mark another port 4318 raced test case by @​cosmo0920 in #​11627
• tests: CI test stabilization by @​mabrarov in #​11625
• workflows: ensure 5.0 releases are handled by @​patrick-stephens in #​11631
• opentelemetry: add OTLP JSON and OTLP Proto helpers by @​edsiper in #​11624

Full Changelog: fluent/fluent-bit@v5.0.0...v5.0.1

v5.0.0

Compare Source

v4.2.4: Fluent Bit 4.2.4

Compare Source

https://fluentbit.io/announcements/v4.2.4/

What's Changed

• dockerfiles: Install minimum components and avoiding to use includeRecommended [Backport to 4.2] by @​cosmo0920 in #​11481
• filter_kubernetes: fix accidentally removed u in prefix [Backport to 4.2] by @​cosmo0920 in #​11493
• multiline: ml: Propagate metadata even if on exceptions [Backport to 4.2] by @​cosmo0920 in #​11494
• filter_log_to_metrics: Use pre-allocated slots of memory for labels [Backport to 4.2] by @​cosmo0920 in #​11514
• workflows: Suppress invalid glob patterns [Backport to 4.2] by @​cosmo0920 in #​11522
• processor_content_modifier: fix OTEL scope autogenerated key leak [Backport to 4.2] by @​cosmo0920 in #​11542
• http_server: enforce buffer_max_size for HTTP/2 request bodies [Backport to 4.2] by @​cosmo0920 in #​11581
• github: workflows: remove trivy cron workflow by @​edsiper in #​11599
• avro: out_kafka: Fix specification errors in avro format [Backport to 4.2] by @​cosmo0920 in #​11615
• lib: monkey: upgrade to v1.8.8 by @​edsiper in #​11693
• engine: use effective post-processor counts for output metrics (v4.2) by @​edsiper in #​11519
• release: Update to v4.2.4 by @​cosmo0920 in #​11694

Full Changelog: fluent/fluent-bit@v4.2.3...v4.2.4

v4.2.3: Fluent Bit 4.2.3

Compare Source

https://fluentbit.io/announcements/v4.2.3/

What's Changed

• release: update to 4.2.3 by @​github-actions[bot] in #​11310
• copyright: update year to 2026 by @​edsiper in #​11325
• filter_kubernetes: fix parser annotation leak by @​erain in #​11333
• github: scripts: commit_linter: Handle bin prefix for fluent-bit.c by @​cosmo0920 in #​11336
• bin: Handle CONT signal properly under leaks command by @​cosmo0920 in #​11335
• filter_wasm: Handle group metadata by @​cosmo0920 in #​11305
• cmake: kafka: fix OAuth Bearer detection on Windows by @​bp-cheng in #​11294
• maintenance: update branch and security EOL info by @​edsiper in #​11339
• github: scripts: commit_prefix_check: add config format rules on linter by @​cosmo0920 in #​11346
• readme: update active branch 4.2 by @​edsiper in #​11348
• out_opentelemetry: on HTTP/2, read and process gRPC status code by @​edsiper in #​11347
• config_format: cf_yaml: Align the behavior of dirname against POSIX [Backport to 4.2] by @​cosmo0920 in #​11363
• filter_log_to_metrics: fix initialization and exception cleanup by @​edsiper in #​11428
• out_stackdriver: clean up oauth2 cache lifecycle by @​edsiper in #​11429
• filter_kubernetes: Adjust cleanup ordering to avoid use-after-free [4.2 backport] by @​ShelbyZ in #​11445
• in_winevtlog: Add text format for event rendering [Backport to 4.2] by @​cosmo0920 in #​11466
• in_tail: Add skipped_lines counter [Backport to 4.2] by @​cosmo0920 in #​11467
• in_splunk: Implement handling remote addr feature [Backport to 4.2] by @​cosmo0920 in #​11465
• aws: switch AWS Endpoints for European Souvereign Cloud [4.2 backport] by @​ShelbyZ in #​11423
• plugin_proxy: enable event_type specification for proxy plugins (4.2 Backport) by @​jmccormick7 in #​11241
• in_splunk: Plug memory issues [Backport to 4.2] by @​cosmo0920 in #​11475

New Contributors

• @​bp-cheng made their first contribution in #​11294

Full Changelog: fluent/fluent-bit@v4.2.2...v4.2.3

v4.2.2: Fluent Bit 4.2.2

Compare Source

https://fluentbit.io/announcements/v4.2.2/

What's Changed

• packaging: script: Use rockylinux prefix on package testing script by @​cosmo0920 in #​11297
• release: update to 4.2.2 by @​github-actions[bot] in #​11296
• security: Update supporting timeline by @​cosmo0920 in #​11300
• out_cloudwatch_logs: increase MAX_EVENT_LEN to 1MB with tests by @​ShelbyZ in #​11159
• aws: Implement simple_aggregation operation by @​ShelbyZ in #​11284
• out_kinesis_firehose: enable HTTP debugging for AWS client requests by @​runderwo in #​11015
• http_client: add ipv6 bracket if missing from host address by @​ShelbyZ in #​11181
• lib: updates 2025122 by @​edsiper in #​11309

New Contributors

• @​ShelbyZ made their first contribution in #​11159

Full Changelog: fluent/fluent-bit@v4.2.1...v4.2.2

v4.2.1: Fluent Bit 4.2.1

Compare Source

https://fluentbit.io/announcements/v4.2.1/

What's Changed

• release: update to 4.2.1 by @​github-actions[bot] in #​11154
• workflows: Not to make latest on publishing 4.1 series on GitHub Relases by @​cosmo0920 in #​11166
• in_forward: fix connection release on pause memory corruption by @​sparrc in #​11114
• workflows: Remove unused tools from unit-tests workflow for extending available disk space by @​cosmo0920 in #​11184
• workflows: bump actions/checkout from 5 to 6 by @​dependabot[bot] in #​11190
• in_opentelemetry: added five missing configuration option descriptions. Fixes #​11191. by @​eschabell in #​11192
• out_s3: implement retry_limit parameter by @​shadowshot-x in #​10825
• in_blob: added missing configuration descriptions. Fixes #​11204. by @​eschabell in #​11206
• tls: openssl: Implement flexible certstore loading on Windows by @​cosmo0920 in #​11200
• in_kubernetes_events: add support for configuring input upstream network setup by @​slab-msft in #​11188
• workflows: add new commit linter tool by @​edsiper in #​11245
• workflows: bump actions/checkout from 4 to 6 by @​dependabot[bot] in #​11248
• workflows: bump actions/setup-python from 5 to 6 by @​dependabot[bot] in #​11249
• dockerfile: Docker image to support large page sizes by @​mlsorensen in #​11164
• dockerfile: update to Debian Trixie by @​patrick-stephens in #​11006
• in_elasticsearch: fixing missing config parameter description for http2. Fixes #​11221. by @​eschabell in #​11226
• in_exec_wasi: fix config key typo 'bool' to 'oneshot'. Fixes #​11232. by @​eschabell in #​11233
• in_forward: improve configuration parameter descriptions by @​eschabell in #​11235
• github: commit_linter: Make more flexibility for commit linter by @​cosmo0920 in #​11251
• build: prevent the toolchain from emitting an executable stack by @​edsiper in #​11258
• in_forward: fix segfault and double-free in trace path handling by @​edsiper in #​11257
• in_node_exporter_metrics: Increase buffer size to read /proc/stat correctly by @​piwai in #​11253
• in_http: added missing config parameter descriptions. by @​eschabell in #​11240
• workflows: bump peter-evans/create-pull-request from 7 to 8 by @​dependabot[bot] in #​11275
• out_flowcounter: Fix incorrect bytes calcuation by @​cosmo0920 in #​11259
• workflows: bump actions/cache from 4 to 5 by @​dependabot[bot] in #​11281
• workflows: bump actions/download-artifact from 6 to 7 by @​dependabot[bot] in #​11290
• workflows: bump actions/upload-artifact from 5 to 6 by @​dependabot[bot] in #​11289
• github: workflows: Clean up needless resources on GHA workers by @​cosmo0920 in #​11288
• in_ebpf: add three missing config option descriptions. Fixes #​11221. by @​eschabell in #​11222
• in_gpu_metrics: updated config parameters descriptions. by @​eschabell in #​11237
• build: Tweak linker flags for zstd by @​cosmo0920 in #​11111
• in_winevtlog: Plug glitches of time offset for DST/STD switches by @​cosmo0920 in #​11291

New Contributors

• @​slab-msft made their first contribution in #​11188
• @​mlsorensen made their first contribution in #​11164
• @​piwai made their first contribution in #​11253

Full Changelog: fluent/fluent-bit@v4.2.0...v4.2.1

v4.2.0: Fluent Bit 4.2.0

Compare Source

https://fluentbit.io/announcements/v4.2.0/

What's Changed

• release: update to 4.1.2 by @​github-actions[bot] in #​11005
• reload: fix race between watchdog start and setting async cancellation by @​stoksc in #​11012
• storage: fix heap corruption in chunk sort parser by @​cosmo0920 in #​11017
• in_calyptia_fleet: add support for net.* properties for the upstream connection. by @​pwhelan in #​10998
• in_forward: fix username parsing by @​edsiper in #​11026
• in_forward: Fix incorrect user auth sequence by @​cosmo0920 in #​11028
• workflows: Make not to be the latest release for 4.0 branch by @​cosmo0920 in #​10993
• build: bump to v4.2.0 by @​edsiper in #​11037
• security: update versions and general info by @​edsiper in #​11038
• help: add space for outputs and processors when generating schema. by @​pwhelan in #​11020
• opentelemetry: traces: unify JSON to ctrace encoder by @​edsiper in #​11042
• routing: add new routing mechanism for input plugins by @​edsiper in #​11041
• mp: extend cobj API to expose group metadata and attributes by @​edsiper in #​11043
• in_node_exporter_metrics: add netstat linux collector by @​edsiper in #​11052
• fstore: safe check on fsf file deletion by @​edsiper in #​11050
• workflows: Handle 4.1 branches events and fix type inference errors for 4.0 branch by @​cosmo0920 in #​11062
• router: add conditional support for Logs by @​edsiper in #​11055
• aws_credential_sts: internal: Fix unit test failures by @​cosmo0920 in #​11077
• workflows: bump actions/upload-artifact from 4 to 5 by @​dependabot[bot] in #​11075
• workflows: bump actions/download-artifact from 5 to 6 by @​dependabot[bot] in #​11074
• router_condition: Fix unconditional route check in routing by @​cosmo0920 in #​11087
• out_vivo_exporter: add versioned API endpoints by @​edsiper in #​11040
• router: add contexts to conditional support for direct route paths by @​edsiper in #​11091
• snap: Upgrade snap from core18 to core20 by @​cosmo0920 in #​11069
• doc-reports: add cncf audit report by @​DavidKorczynski in #​11056
• chunks: extend metadata to support routing information (direct routes) by @​edsiper in #​11097
• workflows: bump helm/kind-action from 1.12.0 to 1.13.0 by @​dependabot[bot] in #​11100
• CODEOWNERS: update AWS maintainers and cleanup by @​edsiper in #​11109
• dockerfile: removed unused DLLs from image for Windows Containers by @​mabrarov in #​10233
• kafka: fix cmake cross compile error by @​ThomasDevoogdt in #​9600
• build: workflows: Add a rules for checking incompatible types strictly by @​cosmo0920 in #​10655
• tls: openssl: output: Handle certificates thumbprints by @​cosmo0920 in #​11009
• in_syslog: Add support for RFC 6587 octet-counting by @​cosmo0920 in #​11035
• wasm: Plug wasm heap leakages by @​cosmo0920 in #​11076
• scheduler: engine: output_thread: Plug macOS abort on dry-run by @​cosmo0920 in #​11099
• router: extend router interface to support metrics (v3) by @​edsiper in #​11108
• out_s3: Add a NULL check for plugging SEGV on dry_run by @​cosmo0920 in #​11117
• build: Add workdir option for the default registration of Windows service by @​cosmo0920 in #​11124
• packaging: add missing SASL dependencies for Rocky/AlmaLinux by @​patrick-stephens in #​11127
• fix: Make TLS initialization thread-safe and idempotent using pthread_once by @​ThomasBrady in #​11090
• out_opensearch: release aws signature a retry or error happens by @​edsiper in #​11140
• routing: extend input name resolution for safer direct route paths by @​edsiper in #​11141
• motd: add 4.2 banner by @​edsiper in #​11142
• org: update organization status change by @​edsiper in #​11143
• out_http: Plug a NULL dereference by @​cosmo0920 in #​11034
• out_http: Added PUT support by @​nicknezis in #​10882
• routing: introduce metrics for unmatched (dropped) logs by @​edsiper in #​11144
• in_tail: Implement long line truncation by @​cosmo0920 in #​11059
• in_systemd: always reset cursor before iterating fields by @​edsiper in #​11073
• packaging: add -L flag to curl for redirect support by @​sakshitposting-irl in #​11137
• storage: config: engine: Introduce dead letter queue by @​cosmo0920 in #​11000
• filter_kubernetes: use service account issuer to detect EKS env (compiler fix) by @​edsiper in #​11146
• workflows: staging-release: add v4.2 by @​edsiper in #​11153

New Contributors

• @​nicknezis made their first contribution in #​10882
• @​sakshitposting-irl made their first contribution in #​11137

Full Changelog: fluent/fluent-bit@v4.1.1...v4.2.0

v4.1.2: Fluent Bit 4.1.2

Compare Source

https://fluentbit.io/announcements/v4.1.2/

What's Changed

• release: update to 4.1.2 by @​github-actions[bot] in #​11005
• reload: fix race between watchdog start and setting async cancellation by @​stoksc in #​11012
• storage: fix heap corruption in chunk sort parser by @​cosmo0920 in #​11017
• in_calyptia_fleet: add support for net.* properties for the upstream connection. by @​pwhelan in #​10998
• in_forward: fix username parsing by @​edsiper in #​11026
• in_forward: Fix incorrect user auth sequence by @​cosmo0920 in #​11028
• help: add space for outputs and processors when generating schema. [Backport to 4.1] by @​cosmo0920 in #​11066
• tests: internal: aws_credentials_sts: fix unit test (timestamps) by @​cosmo0920 in #​11086
• fstore: safe check on fsf file deletion [Backport to 4.1] by @​cosmo0920 in #​11061
• wasm: Plug wasm heap leakages [Backport to 4.1] by @​cosmo0920 in #​11119
• out_s3: Add a NULL check for plugging SEGV on dry_run [Backport to 4.1] by @​cosmo0920 in #​11123
• in_forward: fix connection release on pause memory corruption [backport to 4.1] by @​sparrc in #​11179
• in_opentelemetry: added five missing configuration option descriptions [backport 4.1] by @​eschabell in #​11194
• workflows: Remove unused tools from unit-tests workflow for extending available disk space [Backport to 4.1] by @​cosmo0920 in #​11264
• out_flowcounter: Fix incorrect bytes calcuation [Backport to 4.1] by @​cosmo0920 in #​11261
• in_forward: fix segfault and double-free in trace path handling [Backport to 4.1] by @​cosmo0920 in #​11267

Full Changelog: fluent/fluent-bit@v4.1.1...v4.1.2

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.