Loki | v3.7.9

Loki v3.7.9 released on 20-10-2026


Loki v3.7.9 is out now. It delivers security-sensitive dependency updates and a Go toolchain bump, fixes a concurrent ingester WAL bug that could produce irrecoverable WAL state, and adds request-size limits for certain APIs to improve stability.

See the release on the project’s GitHub for full details, commits and downloads.

What’s in this release

  • Security updates: OpenTelemetry exporters and SDK bumped to v1.45.0, containerd updated to v2.2.9, and the Go toolchain bumped to 1.26.10 (flagged as SECURITY changes).
  • Ingester WAL fix: a concurrency issue where concurrent WAL Append() calls could produce inconsistent record ordering and an irrecoverable WAL state has been resolved (see issue #25125).
  • API and query stability: limits on request body size for the ruler CreateRuleGroup and LogQLAnalyzer APIs to prevent oversized payloads; LogQL streaming accumulator behaviour adjusted so entries are retained while accumulator has free room; several dependency digests refreshed.

Upgrade notes

  • No API-breaking changes are listed in the release notes; upgrade your deployments to the v3.7.9 binaries and ensure builds use Go 1.26.10 where applicable to pick up the security fixes.
  • If you need to roll back, reverting to v3.7.8 may reintroduce the ingester WAL concurrency bug—verify WAL integrity after any revert.

Share your experience or report issues on the project’s GitHub issue tracker so others can see the impact and any edge cases you encounter.

Related posts

Tempo | v3.1.1

Tempo v3 1 1 security release: Go 1 27 3 runtime update addresses 14 CVEs, upgrade and rebuild custom binaries then deploy immediately

Loki | v3.7.9

Loki v3 7 9: security dependency upgrades and Go 1 26 10, ingester WAL concurrency fix preventing data loss, API request size limits, LogQL accumulator fix

Grafana | v13.3.0

Grafana v13 3 0: security fixes for 10 CVEs, major alerting and Import to GMA updates, Git Sync robustness, UI and plugin fixes, breaking config rename