Prometheus v3.13.2 released on 30-07-2026
Prometheus v3.13.2 is out now. Operators and anyone running Prometheus on constrained disks should upgrade to get patched dependencies (golang.org/x/text v0.39.0 — CVE-2026-56852; google.golang.org/grpc v1.82.1 — GHSA-hrxh-6v49-42gf) and a PromQL stability fix that prevents SIGBUS crashes when the data disk becomes full.
See the full changelog on GitHub at https://github.com/prometheus/prometheus/compare/v3.13.1…v3.13.2 and the release metadata at https://api.github.com/repos/prometheus/prometheus/releases/latest for details and download links.
What’s in this release
- Security: bump golang.org/x/text to v0.39.0 to address CVE-2026-56852 (PR #19290).
- Security: bump google.golang.org/grpc to v1.82.1 to address GHSA-hrxh-6v49-42gf (PR #19290).
- Bugfix: PromQL now preallocates the active query tracker file to avoid SIGBUS crashes when the data disk is full (PR #19289).
Upgrade notes
- No breaking changes are reported in this patch; upgrade to v3.13.2 to include the security and stability fixes.
- If a rollback is required, revert to v3.13.1 (see the changelog comparison linked above).
Share your upgrade experience or any issues you encounter so others can benefit.
