Tempo v3.0.3 released on 13-08-2026
Tempo v3.0.3 is out now. It tightens security with several dependency upgrades and updates the MCP-served documentation so runtime behaviour and docs align.
See the project’s GitHub release notes for full details and steps for upgrading.
What’s in this release
- Core dependency upgrades to harden against known vulnerabilities: Go 1.26.5, google.golang.org/grpc v1.82.1, golang.org/x/net v0.56.0, golang.org/x/text v0.39.0 and go.opentelemetry.io/otel v1.44.0 (addresses multiple CVEs and supply-chain advisories; see #7726).
- Configuration and API docs added to the MCP server: docs://config/overview and docs://config/reference, plus updated TraceQL and metrics documentation so served docs match current capabilities (see #7521 and #7375).
- Fix for build/version reporting: version information is now read from a top-level VERSION file instead of the most recently created git tag, correcting –version, the build-info metric and /api/status/buildinfo (see #7469).
Upgrade notes
- If you build from source or produce custom binaries, ensure a top-level VERSION file is present so the correct build version is reported.
- Release notes do not include rollback-specific instructions; revert to a previous release tag if you need to roll back.
Share any comments on your upgrade experience — the project’s issue tracker or community channels are the usual places for feedback.
