Tempo v2.10.6 released on 08-06-2026
Tempo v2.10.6 is out now. Operators should roll this release into their environments to pick up upstream security fixes in several critical dependencies and to align build toolchains.
See the release notes on Tempo’s GitHub for full details and instructions before upgrading.
What’s in this release
- Security dependency updates: apache/thrift bumped to v0.23.0, golang.org/x/crypto to v0.52.0, and golang.org/x/net to v0.55.0 to pick up upstream security fixes.
- Build toolchain moved to Go 1.26.3; build-and-deploy pipelines that compile Tempo from source should align to Go 1.26.3 to match official binaries.
- Breaking change: the OpenCensus receiver has been removed from the distributor; systems still sending traces via OpenCensus must migrate ingestion to supported protocols (for example OTLP via the OpenTelemetry Collector or Tempo native receivers).
- Prometheus updated to v0.311.3 and OpenTelemetry Collector dependencies bumped to v1.52, along with related transitive libraries (dskit and others); validate observability and integration points for any behavioural or metrics changes.
Upgrade notes
- OpenCensus receiver removal is a breaking change — migrate ingestion to OTLP or native Tempo receivers and plan migration testing before upgrading.
- If building from source, update your pipelines to use Go 1.26.3 to avoid subtle incompatibilities with official binaries.
Share any issues or notes from your upgrade and migration testing on the project’s GitHub or community channels.
