Prometheus 3.5.4
← All Prometheus releases · Searchable index of all 403 changes
Changelog
| PR / issue | Type | Description |
|---|---|---|
| #18650 | Security | STACKIT SD: Fix secrets being exposed in plaintext via /-/config endpoint. Thanks to and for reporting. GHSA-39j6-789q-qxvh |
| #18934 | Security | Dependencies: Bump golang.org/x/net to v0.55.0 and OpenTelemetry to v1.43.0 to fix reported CVEs (GO-2026-5026, GO-2026-4918, GO-2026-4985). |
| #18935 | Security | UI: Bump mantine-ui dependencies (react-router-dom, vitest, vite, postcss) to their patched versions to resolve security advisories. |
| #18792 | Enhancement | Release: Container images are now also published to the GitHub Container Registry (ghcr.io). |
Reproduced from the official Prometheus 3.5.4 release notes. Last checked 7 Jul 2026, 21:23 UTC.