2.17.9

This release contains 2 PRs from 1 authors. Thank you!

Changelog

2.17.9

Grafana Mimir

• [BUGFIX] Update to Go v1.25.8 to address CVE-2026-27142, CVE-2026-27139, CVE-2026-25679, CVE-2026-27138, CVE-2026-27137. #14908

All changes in this release: mimir-2.17.8...mimir-2.17.9

2.17.8

This release contains 4 PRs from 3 authors. Thank you!

Changelog

2.17.8

Grafana Mimir

• [BUGFIX] Update module google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 #14762

All changes in this release: mimir-2.17.7...mimir-2.17.8

3.0.5

This release contains 3 PRs from 3 authors. Thank you!

Changelog

3.0.5

Grafana Mimir

• [BUGFIX] Update to google.golang.org/grpc to address CVE-2026-33186. #14761

All changes in this release: mimir-3.0.4...mimir-3.0.5

3.0.4

This release contains 4 contributions from 2 authors. Thank you!

Changelog

3.0.4

Grafana Mimir

• [BUGFIX] Update module go.opentelemetry.io/otel/sdk to v1.40.0 to address CVE-2026-24051. #14431
• [BUGFIX] Update to Go v1.25.8 to address CVE-2026-27142, CVE-2026-27139, CVE-2026-25679, CVE-2026-27138, CVE-2026-27137. #14623

All changes in this release: mimir-3.0.3...mimir-3.0.4

2.17.7

This release contains 3 PRs from 2 authors. Thank you!

Changelog

2.17.7

Grafana Mimir

• [BUGFIX] Update go.opentelemetry.io/otel/sdk to v1.40.0 to address CVE-2026-24051 #14432

All changes in this release: mimir-2.17.6...mimir-2.17.7

3.0.3

This release contains 9 PRs from 3 authors. Thank you!

Changelog

3.0.3

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14242 #14254
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14245

All changes in this release: mimir-3.0.2...mimir-3.0.3

2.17.6

This release contains 8 PRs from 3 authors. Thank you!

Changelog

2.17.6

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14243 #14255
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14246

All changes in this release: mimir-2.17.5...mimir-2.17.6

3.0.3-rc.0

This release contains 7 PRs from 3 authors. Thank you!

Changelog

3.0.3-rc.0

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14242 #14254
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14245

All changes in this release: mimir-3.0.2...mimir-3.0.3-rc.0

2.17.6-rc.0

This release contains 7 PRs from 3 authors. Thank you!

Changelog

2.17.6-rc.0

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14243 #14255
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14246

All changes in this release: mimir-2.17.5...mimir-2.17.6-rc.0

2.17.5

This release contains 8 PRs from 5 authors. Thank you!

Changelog

2.17.5

Grafana Mimir

• [BUGFIX] Distributor: Calculate WriteResponseStats before validation and PushWrappers. This prevents clients using Remote-Write 2.0 from seeing a diff in written samples, histograms and exemplars. #12682 #14144
• [BUGFIX] Distributor: Fix issue where distributors didn't send custom values of native histograms. #13849 #14145
• [BUGFIX] Distributor: Fix metric metadata of type Unknown being silently dropped from RW2 requests. #12461 #14150
• [BUGFIX] Ingester: Query all ingesters when shuffle sharding is disabled. #14041

All changes in this release: mimir-2.17.4...mimir-2.17.5