Loki v3.7.8 released on 17-09-2026
Loki v3.7.8 is out now. It delivers multiple high-severity gRPC security fixes (updating google.golang.org/grpc to v1.83.2 and v1.83.1 in some modules) and a set of dependency security updates to close known vulnerabilities.
See the Loki GitHub releases page for full details and the compare link for the exact changes: Loki releases on GitHub.
What’s in this release
- High-severity gRPC fixes: google.golang.org/grpc updated to v1.83.2 (and v1.83.1 in some modules); changes touch pkg/push and other release-3.7.x areas to remediate reported GRPC vulnerabilities.
- Dependency security upgrades: github.com/containerd/containerd/v2 → v2.2.8 (MEDIUM); golang.org/x/net → v0.56.0; golang.org/x/crypto → v0.56.0 (UNKNOWN severity classifications).
- Security-focused bug-fix patch with no new user-facing features; intended to close known issues in transitive modules (compare v3.7.7…v3.7.8).
Upgrade notes
- No user-facing breaking changes are recorded for this patch. Recommended action: upgrade production deployments to v3.7.8, rebuild images or vendor modules as appropriate, and follow your normal testing and staging process.
- If the update causes problems, consider reverting to v3.7.7 and report any issues on the project’s GitHub so maintainers can investigate.
Share your experience or any issues you encounter when upgrading to v3.7.8 in the comments.
