Tempo v3.1.1 released on 21-10-2026
Tempo v3.1.1 is out now. It’s a security-driven patch that updates the Go runtime to 1.27.3 to pick up upstream fixes for multiple vulnerabilities.
See the Tempo GitHub release and the linked issue/PR (#8148) for full details and assets: https://api.github.com/repos/grafana/tempo/releases/latest
What’s in this release
- Dependency update: Go runtime bumped to 1.27.3.
- Addresses 14 CVEs: CVE-2026-56857, CVE-2026-56866, CVE-2026-78659, CVE-2026-78660, CVE-2026-78663, CVE-2026-78667, CVE-2026-78669, CVE-2026-94439, CVE-2026-94440, CVE-2026-94448, CVE-2026-97030, CVE-2026-97031, CVE-2026-97032, CVE-2026-111943.
- Change recorded in issue/PR #8148 and attributed to contributor @mdisibio; classified as a patch/security release.
Upgrade notes
- Install or deploy Tempo v3.1.1 (published 2026-10-21). If you build from source, rebuild using Go 1.27.3 and roll the updated binaries or images into production.
- Validate the build in staging, monitor for any regressions after upgrade, and track the linked issue/PR for follow-ups.
Share any issues or your upgrade experience on the project’s GitHub issue tracker or in the comments.
