Prometheus
Monitoring system
Prometheus 3.14 ships OCI service discovery and start-timestamp rate extrapolation
◆Recent moves
- 9d ago
3.13.3 / 2026-09-07
A security patch release for the 3.13 LTS track, bumping compress and golang crypto dependencies and fixing six bugs: a Docker Swarm SD panic, a silent regex label matcher bug in PromQL, CPU spin on shutdown in both scrape manager and alerting, and two TSDB correctness fixes for out-of-order queries and deleted series. Routine maintenance, but the TSDB fixes are consequential for correctness.
View source ↗ - 29d ago
3.14.0 / 2026-08-17
Prometheus 3.14.0 adds Oracle Cloud Infrastructure compute service discovery, promotes duration expressions to default (removing the feature flag), and introduces an experimental start_timestamp function that enables more accurate rate extrapolation from the scrape start rather than relying on extrapolation alone. The OTLP label collision warning is a useful operational addition for OTel ingestion setups. No behavioral regressions — a clean minor release.
View source ↗ - 1mo ago
Prometheus 3.14.0 Release Candidate
The 3.14.0 release candidate, equivalent in content to the GA. Notable only as the publication point for the 3.14 changelog before formal release. The RC itself carries the same changes as 3.14.0 GA.
View source ↗ - 1mo ago
3.13.2 / 2026-07-29
Security patch for the 3.13 LTS track, bumping golang text (CVE-2026-56852) and grpc dependencies, plus a PromQL preallocation fix. Dependency hygiene maintenance with no user-visible behavioral change.
View source ↗ - 2mo ago
3.13.1 / 2026-07-10
A TSDB correctness fix for a bug where the head-chunk cache could return samples from the wrong chunk or produce spurious not-found errors on range queries after head-chunk truncation. For teams running high-churn metrics, this bug could produce silently incorrect range query results — fixing it is a meaningful reliability improvement on the 3.13 LTS track.
View source ↗ - 2mo ago
3.5.5 / 2026-07-09
A security fix for the legacy 3.5 track, bumping the sanitize-html UI dependency to fix a cross-site scripting vulnerability (CVE-2026-53606). Purely a security maintenance release with no functional changes.
View source ↗