Loki v3.7.8 released on 17-09-2026
Loki v3.7.8 is out now. It delivers critical gRPC security fixes that address HIGH‑severity issues affecting push-related code paths and general gRPC usage.
Operators and maintainers should upgrade promptly; see the project’s GitHub release page for the full changelog and linked advisories.
What’s in this release
- google.golang.org/grpc bumped to v1.83.1 / v1.83.2 to resolve HIGH‑severity gRPC security issues (affecting pkg/push and core modules).
- github.com/containerd/containerd/v2 upgraded to v2.2.8 (MEDIUM) as a security-focused dependency bump.
- golang.org/x/net and golang.org/x/crypto updated to v0.56.0 (UNKNOWN) alongside other dependency security upgrades to harden networking and cryptography surfaces.
Upgrade notes
- Upgrade to v3.7.8 promptly: rebuild and redeploy images that include Loki, run integration tests (especially push/ingest paths and any gRPC clients), and verify compatibility with downstream gRPC versions.
- If you need to roll back, redeploy a prior Loki build and ensure CI locks module versions; scan your environment for usages of the updated modules and monitor the release URL for follow-up advisories.
Share your experience with the upgrade and report any issues or regressions on the project’s GitHub issue tracker or discussion channels.
