3.0.6

What's Changed

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (release-3.0) by @renovate-sh-app[bot] in #14917
• [3.0] Upgrade to Go 1.25.9 by @tcard in #15043
• Update deps to address vulnerabilities by @tcard in #15048

Full Changelog: mimir-3.0.5...mimir-3.0.6

2.17.10

What's Changed

• chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] (release-2.17) by @renovate-sh-app[bot] in #14918
• [release 2.17] Backport of ruler: Fix rule expressions with leading newlines failing to parse by @zenador in #15032
• [2.17] Upgrade to Go 1.25.9 by @tcard in #15042
• [2.17] Update deps to address vulnerabilities by @tcard in #15050

Full Changelog: mimir-2.17.9...mimir-2.17.10

2.17.9

This release contains 2 PRs from 1 authors. Thank you!

Changelog

2.17.9

Grafana Mimir

• [BUGFIX] Update to Go v1.25.8 to address CVE-2026-27142, CVE-2026-27139, CVE-2026-25679, CVE-2026-27138, CVE-2026-27137. #14908

All changes in this release: mimir-2.17.8...mimir-2.17.9

2.17.8

This release contains 4 PRs from 3 authors. Thank you!

Changelog

2.17.8

Grafana Mimir

• [BUGFIX] Update module google.golang.org/grpc to v1.79.3 to address CVE-2026-33186 #14762

All changes in this release: mimir-2.17.7...mimir-2.17.8

3.0.5

This release contains 3 PRs from 3 authors. Thank you!

Changelog

3.0.5

Grafana Mimir

• [BUGFIX] Update to google.golang.org/grpc to address CVE-2026-33186. #14761

All changes in this release: mimir-3.0.4...mimir-3.0.5

3.0.4

This release contains 4 contributions from 2 authors. Thank you!

Changelog

3.0.4

Grafana Mimir

• [BUGFIX] Update module go.opentelemetry.io/otel/sdk to v1.40.0 to address CVE-2026-24051. #14431
• [BUGFIX] Update to Go v1.25.8 to address CVE-2026-27142, CVE-2026-27139, CVE-2026-25679, CVE-2026-27138, CVE-2026-27137. #14623

All changes in this release: mimir-3.0.3...mimir-3.0.4

2.17.7

This release contains 3 PRs from 2 authors. Thank you!

Changelog

2.17.7

Grafana Mimir

• [BUGFIX] Update go.opentelemetry.io/otel/sdk to v1.40.0 to address CVE-2026-24051 #14432

All changes in this release: mimir-2.17.6...mimir-2.17.7

3.0.3

This release contains 9 PRs from 3 authors. Thank you!

Changelog

3.0.3

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14242 #14254
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14245

All changes in this release: mimir-3.0.2...mimir-3.0.3

2.17.6

This release contains 8 PRs from 3 authors. Thank you!

Changelog

2.17.6

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14243 #14255
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14246

All changes in this release: mimir-2.17.5...mimir-2.17.6

3.0.3-rc.0

This release contains 7 PRs from 3 authors. Thank you!

Changelog

3.0.3-rc.0

Grafana Mimir

• [BUGFIX] Update to Go v1.25.7 to address CVE-2025-61726. #14242 #14254
• [BUGFIX] Ruler: Add path traversal checks when parsing namespaces and groups, which prevents namespace and group name from containing non-local paths. #14245

All changes in this release: mimir-3.0.2...mimir-3.0.3-rc.0