Prometheus
Prometheus · Go · Apache-2.0
Metrics store used by nearly every staking monitoring setup.
infra
Releases
32 releases
Prometheusv3.15.1
Why this rating
- security wording: "- [SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template."
Oct 21, 2026
Prometheusv3.13.5
Why this rating
- security wording: "- [SECURITY] Build with Go 1.26.10 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template."
Oct 21, 2026
Prometheusv3.13.4
Why this rating
- security wording: "- [SECURITY] UI: Update vulnerable npm dependencies. #19834"
Oct 2, 2026
Prometheusv3.15.0
Why this rating
- deprecation wording: "- [ENHANCEMENT] TSDB: Stabilize the XOR2 float chunk encoding. --enable-feature=xor2-encoding is deprecated; use storage.tsdb.chunk_encoding.floats: xor2 instead."
- performance wording: "- [ENHANCEMENT] scrape: stop all pools in parallel for faster shutdowns. #19295"
Sep 25, 2026
Prometheusv3.15.0-rc.1
Sep 22, 2026
Prometheusv3.15.0-rc.0
Why this rating
- deprecation wording: "- [ENHANCEMENT] TSDB: Stabilize the XOR2 float chunk encoding. --enable-feature=xor2-encoding is deprecated; use storage.tsdb.chunk_encoding.floats: xor2 instead."
- performance wording: "- [ENHANCEMENT] scrape: stop all pools in parallel for faster shutdowns. #19295"
Sep 14, 2026
Prometheusv3.13.3
Why this rating
- performance wording: "- [BUGFIX] Alerting: Fix 100% CPU usage on shutdown that could delay graceful shutdown and trigger timeout-based kills. #17859"
Sep 7, 2026
Prometheusv3.14.0
Why this rating
- deprecation wording: "Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major release. #19124"
- performance wording: "- [BUGFIX] Alerting: Fix 100% CPU usage on shutdown that could delay graceful shutdown and trigger timeout-based kills. #17859"
Aug 18, 2026
Prometheusv3.14.0-rc.0
Why this rating
- deprecation wording: "Other values still enable basic statistics but now return a deprecation warning; they will be rejected in the next major release. #19124"
- performance wording: "- [BUGFIX] Alerting: Fix 100% CPU usage on shutdown that could delay graceful shutdown and trigger timeout-based kills. #17859"
Aug 11, 2026
Prometheusv3.13.2
Why this rating
- security wording: "- [SECURITY] Bump golang.org/x/text to v0.39.0 (CVE-2026-56852) and google.golang.org/grpc to v1.82.1 (GHSA-hrxh-6v49-42gf). #19290 by @krajorama"
Jul 30, 2026
Prometheusv3.13.1
Jul 10, 2026
Prometheusv3.5.5
Why this rating
- security wording: "3.5.5 / 2026-07-09 This release is built with Go 1.25.12 and fixes a security issue in a UI dependency."
Jul 9, 2026
Prometheusv3.13.0-rc.0
Why this rating
- security wording: "- [SECURITY] UI: Bump sanitize-html to fix a cross-site scripting vulnerability (CVE-2026-44990). #18697"
- performance wording: "- [PERF] Labels: Add case-insensitive prefix matching to speed up evaluation of long case-insensitive regular expressions (up to ~2x faster). #18540"
Jul 9, 2026
Prometheusv3.13.0
Why this rating
- security wording: "- [SECURITY] UI: Bump sanitize-html to fix a cross-site scripting vulnerability (CVE-2026-44990). #18697"
- performance wording: "- [PERF] Labels: Add case-insensitive prefix matching to speed up evaluation of long case-insensitive regular expressions (up to ~2x faster). #18540"
Jul 1, 2026
Prometheusv3.13.0-rc.1
Why this rating
- security wording: "- [SECURITY] UI: Bump sanitize-html to fix a cross-site scripting vulnerability (CVE-2026-44990). #18697"
- performance wording: "- [PERF] Labels: Add case-insensitive prefix matching to speed up evaluation of long case-insensitive regular expressions (up to ~2x faster). #18540"
Jun 22, 2026
Prometheusv3.5.4
Why this rating
- security wording: "3.5.4 / 2026-06-17 This release fixes multiple security issues."
Jun 17, 2026
Prometheusv3.12.0
Why this rating
- security wording: "3.12.0 / 2026-05-28 This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp improvem…"
- performance wording: "3.12.0 / 2026-05-28 This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp improvem…"
May 28, 2026
Prometheusv3.12.0-rc.0
Why this rating
- security wording: "3.12.0-rc.0 / 2026-05-19 This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp imp…"
- performance wording: "3.12.0-rc.0 / 2026-05-19 This release contains security fixes, new features (especially around PromQL and Service Discovery), performance improvements in TSDB, Start Timestamp imp…"
May 19, 2026
Prometheusv3.11.3
Why this rating
- security wording: "3.11.3 / 2026-04-27 This release fixes mutiple security issues."
Apr 27, 2026
Prometheusv3.5.3
Why this rating
- security wording: "3.5.3 / 2026-04-27 This release fixes mutiple security issues."
Apr 27, 2026
Prometheusv3.11.2
Why this rating
- security wording: "3.11.2 / 2026-04-13 This release has a fix for a Stored XSS vulnerability that can be triggered via crafted metric names and label values in Prometheus web UI tooltips and metrics…"
Apr 13, 2026
Prometheusv3.5.2
Why this rating
- security wording: "3.5.2 / 2026-04-13 This release has a fix for a Stored XSS vulnerability that can be triggered via crafted metric names and label values in Prometheus web UI tooltips and metrics …"
Apr 13, 2026
Prometheusv3.11.1
Apr 7, 2026
Prometheusv3.11.0
Why this rating
- security wording: "- [ENHANCEMENT] Vultr SD: Upgrade govultr library from v2 to v3 for continued security patches and maintenance. #18347"
- deprecation wording: "- [CHANGE] Hetzner SD: The meta_hetzner_datacenter label is deprecated for the role robot but kept for backward compatibility, use the meta_hetzner_robot_datacenter label instead."
- performance wording: "- [FEATURE] TSDB: Add an experimental xor2-encoding feature flag for the new TSDB block float sample chunk encoding that is optimized for scraped data and allows encoding start ti…"
Apr 2, 2026
Prometheusv3.11.0-rc.0
Why this rating
- security wording: "- [ENHANCEMENT] Vultr SD: Upgrade govultr library from v2 to v3 for continued security patches and maintenance. #18347"
- deprecation wording: "- [CHANGE] Hetzner SD: The meta_hetzner_datacenter label is deprecated for the role robot but kept for backward compatibility, use the meta_hetzner_robot_datacenter label instead."
- performance wording: "- [FEATURE] TSDB: Add an experimental xor2-encoding feature flag for the new TSDB block float sample chunk encoding that is optimized for scraped data and allows encoding start ti…"
Mar 30, 2026
Prometheusv3.10.0
Why this rating
- performance wording: "- [PERF] PromQL: Improve performance of regex matchers like .*-.*-.*. #17707"
Feb 26, 2026
Prometheusv3.10.0-rc.1
Why this rating
- performance wording: "- [PERF] PromQL: Improve performance of regex matchers like .*-.*-.*. #17707"
Feb 20, 2026
Prometheusv3.5.1
Jan 22, 2026
Prometheusv3.9.1
Jan 7, 2026
Prometheusv3.9.0
Why this rating
- performance wording: "- [PERF] TSDB: Small optimizations to postings index. #17439"
Jan 7, 2026
Prometheusv3.9.0-rc.0
Why this rating
- performance wording: "- [PERF] TSDB: Small optimizations to postings index. #17439"
Dec 23, 2025
Prometheusv3.8.1
Dec 16, 2025