Loki v3.7.4 released on 24-07-2026
Loki v3.7.4 is out now. Maintainers, operators and downstream packagers benefit from CI, release and packaging fixes alongside security and dependency updates that reduce CI warnings and restore Docker plugin publishing.
See the Loki GitHub release notes for full details and upgrade guidance.
What’s in this release
- CI and release hygiene fixes: resolved zizmor findings for operator-images, fixed a Helm CI warning, and re-enabled Docker plugin publishing.
- Security hardening and toolchain bump: Go upgraded to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505; fluentd bumped to v1.19.3 for the fluentd Docker client; several third-party modules updated for security fixes.
- Storage and compactor fixes: compactor delete-request bug with the Thanos objstore client on filesystem backends fixed, and an index filename issue affecting legacy S3 clients when using chunk_delimiter resolved.
Upgrade notes
- Security and toolchain changes: operators should prioritise upgrading to v3.7.4 and rebuild any custom Loki images so they include the updated Go runtime and patched dependencies; consult the GitHub release for exact dependency versions.
- Rollback: no breaking changes are listed in the release notes; to revert if necessary, redeploy the previous v3.7.3 artifacts and configurations.
Share your experience upgrading to v3.7.4 on the project’s GitHub issues or discussion pages so maintainers and other users can learn from any problems or successes.
