Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/grafana/loki from 1.6.2-0.20231017135925-990ac685e6a6 to 6.7.8+incompatible in /charts/chainlink-cluster #11422

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 30, 2023

Bumps github.com/grafana/loki from 1.6.2-0.20231017135925-990ac685e6a6 to 6.7.8+incompatible.

Release notes

Sourced from github.com/grafana/loki's releases.

v2.9.2

This is release v2.9.2 of Loki.

Notable changes:

Patches CVE-2023-39325 / CVE-2023-44487 by upgrading go to v1.21.3, golang.org/x/net to v0.17.0 and grpc-go to v1.56.3.

For a full list of changes, please refer to the CHANGELOG!

Installation:

The components of Loki are currently distributed in plain binary form and as Docker container images. Choose what fits your use-case best.

Docker container:

$ docker pull "grafana/loki:2.9.2"
$ docker pull "grafana/promtail:2.9.2"

Binary

We provide pre-compiled binary executables for the most common operating systems and architectures. Choose from the assets below for the application and architecture matching your system. Example for Loki on the linux operating system and amd64 architecture:

$ curl -O -L "https://github.com/grafana/loki/releases/download/v2.9.2/loki-linux-amd64.zip"
# extract the binary
$ unzip "loki-linux-amd64.zip"
# make sure it is executable
$ chmod a+x "loki-linux-amd64"

v2.9.1

This is release v2.9.1 of Loki.

Notable changes:

This release contains a patch for a vulnerability and bug fixes for the "single store" storage (tsdb and boltdb-shipper).

  • Updated all Docker base images to Alpine 3.18.3 to mitigate CVE-2022-48174 (#10573 )
  • Fix a race condition in the table cache of the indexshipper (#10586 )
  • Fix a bug in the cache of the object storage client of the indexshipper that could manifest in missing results when querying logs older than what is kept on the ingester. (#10585 )

Installation:

The components of Loki are currently distributed in plain binary form and as Docker container images. Choose what fits your use-case best.

Docker container:

</tr></table> 

... (truncated)

Changelog

Sourced from github.com/grafana/loki's changelog.

Main/Unreleased

All Changes

Loki

Enhancements
  • 11243 kavirajk: Inflight-logging: Add extra metadata to inflight requests logging.
  • 11110 MichelHollands: Change the default of the metrics-namespace flag to 'loki'.
  • 11086 kandrew5: Helm: Allow topologySpreadConstraints
  • 11003 MichelHollands: Add the metrics-namespace flag to change the namespace of metrics currently using cortex as namespace.
  • 10096 aschleck: Storage: Allow setting a constant prefix for all created keys
  • 11038 kavirajk: Remove already deprecated store.max-look-back-period.
  • 10906 kavirajk: Support Loki ruler to notify WAL writes to remote storage.
  • 10613 ngc4579: Helm: allow GrafanaAgent tolerations
  • 10295 changhyuni: Storage: remove signatureversionv2 from s3.
  • 10140 dannykopping: Dynamic client-side throttling to avoid object storage rate-limits (GCS only)
  • 10302 ashwanthgoli: Removes already deprecated -querier.engine.timeout CLI flag and corresponding YAML setting as well as the querier.query_timeout YAML setting.
  • 10308 bboreham Tracing: elide small traces for Stats call.
  • 10373 jeschkies Shard avg_over_time range aggregations.
  • 10377 shantanualsi Remove deprecated config -s3.sse-encryption in favor or -s3.sse.* settings.
  • 10378 shantanualsi Remove deprecated ruler.wal-cleaer.period
  • 10380 shantanualsi Remove experimental.ruler.enable-api in favour of ruler.enable-api
  • 10395 shantanualshi Remove deprecated split_queries_by_interval and forward_headers_list configuration options in the query_range section
  • 10456 dannykopping Add loki_distributor_ingester_append_timeouts_total metric, remove loki_distributor_ingester_append_failures_total metric
  • 10534 chaudum Remove configuration use_boltdb_shipper_as_backup
  • 10620 ashwanthgoli Enable embedded cache if no other cache is explicitly enabled.
  • 10655 chaudum Remove legacy ingester shutdown handler /ingester/flush_shutdown.
  • 10709 chaudum/salvacorts Remove ingester.max-transfer-retries configuration option in favor of using the WAL.
  • 10736 ashwanthgoli Deprecate write dedupe cache as this is not required by the newer single store indexes (tsdb and boltdb-shipper).
  • 10693 ashwanthgoli Embedded cache: Updates the metric prefix from querier_cache_ to loki_embeddedcache_ and removes duplicate metrics.
  • 10840 ashwanthgoli Removes shared_store and shared_store_key_prefix from tsdb, boltdb shipper and compactor configs and their corresponding CLI flags.
  • 10793 ashwanthgoli Config: Better configuration defaults to provide a better experience for users out of the box.
  • 10785 ashwanthgoli Config: Removes querier.worker-parallelism and updates default value of querier.max-concurrent to 4.
  • 10733 shantanualsi Add support for case-insensitive logql funtions
  • 10727 sandeepsukhani Native otlp ingestion support
  • 11051 Refactor to not use global logger in modules
  • 10956 jeschkies do not wrap requests but send pure Protobuf from frontend v2 via scheduler to querier when -frontend.encoding=protobuf.
Fixes
  • 11074 hainenber Fix panic in lambda-promtail due to mishandling of empty DROP_LABELS env var.
  • 11195 canuteson Generate tsdb_shipper storage_config even if using_boltdb_shipper is false
Changes
  • 10366 shantanualsi Upgrade thanos objstore, dskit and other modules
  • 10451 shantanualsi Upgrade thanos objstore
  • 10814 shantanualsi,kaviraj Upgrade prometheus to v0.47.1 and dskit
  • 10959 slim-bean introduce a backoff wait on subquery retries.

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot requested a review from a team as a code owner November 30, 2023 13:10
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 30, 2023
@dependabot dependabot bot force-pushed the dependabot/go_modules/charts/chainlink-cluster/github.com/grafana/loki-6.7.8incompatible branch from 48ec114 to f3d8e94 Compare December 11, 2023 21:34
Bumps [github.com/grafana/loki](https://github.com/grafana/loki) from 1.6.2-0.20231017135925-990ac685e6a6 to 6.7.8+incompatible.
- [Release notes](https://github.com/grafana/loki/releases)
- [Changelog](https://github.com/grafana/loki/blob/main/CHANGELOG.md)
- [Commits](https://github.com/grafana/loki/commits)

---
updated-dependencies:
- dependency-name: github.com/grafana/loki
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/charts/chainlink-cluster/github.com/grafana/loki-6.7.8incompatible branch from f3d8e94 to 933e696 Compare December 11, 2023 23:05
Copy link
Contributor

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.

@github-actions github-actions bot added Stale and removed Stale labels Feb 10, 2024
Copy link
Contributor

This PR is stale because it has been open 60 days with no activity. Remove stale label or comment or this will be closed in 7 days.

@github-actions github-actions bot added the Stale label Apr 15, 2024
@github-actions github-actions bot closed this Apr 24, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 24, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/go_modules/charts/chainlink-cluster/github.com/grafana/loki-6.7.8incompatible branch April 24, 2024 00:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code Stale
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants