foosinn/hass-addons
1
0
Fork 0
Code Issues 1 Pull requests 1 Projects Releases Packages Wiki Activity Actions

chore(deps): update victoriametrics/victoria-metrics docker tag to v1.152.0 #63

Open
renovate wants to merge 1 commit from renovate-victoriametrics-victoria-metrics-1.x into main
pull from: renovate-victoriametrics-victoria-metrics-1.x
merge into: foosinn:main
Conversation 0 Commits 1 Files changed 1 +1 -1
renovate commented 2026-09-14 08:01:24 +00:00
Collaborator
Copy link

This PR contains the following updates:

Package Type Update Change
victoriametrics/victoria-metrics final minor v1.151.0-scratch → v1.152.0-scratch

Release Notes

VictoriaMetrics/VictoriaMetrics (victoriametrics/victoria-metrics)

v1.152.0

Compare Source

v1.152.0

Released at 2026-09-11

  • SECURITY: upgrade Go builder from Go1.26.6 to Go1.27.1. See Go 1.27 release notes.

  • SECURITY: vmauth: fix authorization bypass in JWT-based routing when match_claims values are used. See GHSA-f99m-22fh-qw96.

  • SECURITY: vmsingle and vmselect in VictoriaMetrics cluster: properly escape server-side errors returned by /metric-relabel-debug since they could contain parts of user input. This prevents XSS attacks on the /vmui/#/relabeling page. See GHSA-vw10j-rqhg-qff9.

  • FEATURE: vmauth: add the deny_paths option to url_map to reject a subset of paths matched by src_paths or other src_* options with 403 Forbidden (401 Unauthorized for anonymous requests) instead of enumerating every allowed path. See #​11452. Thanks to @​andriibeee for contribution.

  • FEATURE: alerts-health: split TooManyLogs alert into TooManyErrorLogs and TooManyLogs. TooManyLogs now covers only warn-level logs and aggregates them per job and instance. TooManyErrorLogs fires on error, fatal, and panic logs with per-location granularity, making it easier to identify the exact source of critical log messages. See #​11417.

  • FEATURE: vmui: show the range between the minimum and maximum values for each graph line in the legend. See #​11425. Thanks to @​umer901 for contribution.

  • BUGFIX: all VictoriaMetrics components: hide values passed to -pushmetrics.header in startup logs, /metrics, and /flags, since they can contain sensitive HTTP headers such as Authorization and API keys. See #​11545.

  • BUGFIX: vmsingle, vmagent and vminsert in VictoriaMetrics cluster: fix insert requests getting stuck after another insert request times out, causing clients to time out while waiting for a response. See VictoriaLogs#1743.

  • BUGFIX: vmselect in VictoriaMetrics cluster: apply the le filter at /api/v1/status/metric_names_stats after merging request counters from all vmstorage nodes. Previously, the endpoint could report actively queried metrics as unused when the local request counter was zero on one of the nodes. See #​11473. Thanks to @​missusk for contribution.

  • BUGFIX: vmagent: now MDX discards cardinality_estimate and cardinality_churn_ratio metrics exposed by vmestimator service. #​11501.

  • BUGFIX: vmselect in VictoriaMetrics cluster: allow access to /prometheus/api/v1/admin/tsdb/delete_series and graphite/tags/delSeries using only the corresponding -deleteAuthKey, even when -httpAuth.* is also configured, without additionally requiring -httpAuth.* credentials. See #​11512.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate CLI.

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [victoriametrics/victoria-metrics](https://github.com/VictoriaMetrics/VictoriaMetrics) | final | minor | `v1.151.0-scratch` → `v1.152.0-scratch` | --- ### Release Notes <details> <summary>VictoriaMetrics/VictoriaMetrics (victoriametrics/victoria-metrics)</summary> ### [`v1.152.0`](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.152.0) [Compare Source](https://github.com/VictoriaMetrics/VictoriaMetrics/compare/v1.151.0...v1.152.0) #### [v1.152.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.152.0) Released at 2026-09-11 - SECURITY: upgrade Go builder from Go1.26.6 to Go1.27.1. See [Go 1.27 release notes](https://go.dev/doc/go1.27). - SECURITY: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): fix authorization bypass in JWT-based routing when `match_claims` values are used. See [GHSA-f99m-22fh-qw96](https://github.com/VictoriaMetrics/VictoriaMetrics/security/advisories/GHSA-f99m-22fh-qw96). - SECURITY: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): properly escape server-side errors returned by `/metric-relabel-debug` since they could contain parts of user input. This prevents XSS attacks on the `/vmui/#/relabeling` page. See [GHSA-vw10j-rqhg-qff9](https://github.com/VictoriaMetrics/VictoriaMetrics/security/advisories/GHSA-vw9j-rqhg-qff9). - FEATURE: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): add the `deny_paths` option to `url_map` to reject a subset of paths matched by `src_paths` or other `src_*` options with `403 Forbidden` (`401 Unauthorized` for anonymous requests) instead of enumerating every allowed path. See [#&#8203;11452](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11452). Thanks to [@&#8203;andriibeee](https://github.com/andriibeee) for contribution. - FEATURE: [alerts-health](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/deployment/docker/rules/alerts-health.yml): split `TooManyLogs` alert into `TooManyErrorLogs` and `TooManyLogs`. `TooManyLogs` now covers only `warn`-level logs and aggregates them per job and instance. `TooManyErrorLogs` fires on `error`, `fatal`, and `panic` logs with per-location granularity, making it easier to identify the exact source of critical log messages. See [#&#8203;11417](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11417). - FEATURE: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): show the range between the minimum and maximum values for each graph line in the legend. See [#&#8203;11425](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11425). Thanks to [@&#8203;umer901](https://github.com/umer901) for contribution. - BUGFIX: all VictoriaMetrics components: hide values passed to `-pushmetrics.header` in startup logs, `/metrics`, and `/flags`, since they can contain sensitive HTTP headers such as `Authorization` and API keys. See [#&#8203;11545](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11545). - BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/), [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) and `vminsert` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): fix insert requests getting stuck after another insert request times out, causing clients to time out while waiting for a response. See [VictoriaLogs#1743](https://github.com/VictoriaMetrics/VictoriaLogs/issues/1743). - BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): apply the `le` filter at `/api/v1/status/metric_names_stats` after merging request counters from all `vmstorage` nodes. Previously, the endpoint could report actively queried metrics as unused when the local request counter was zero on one of the nodes. See [#&#8203;11473](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11473). Thanks to [@&#8203;missusk](https://github.com/missusk) for contribution. - BUGFIX: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): now [MDX](https://docs.victoriametrics.com/victoriametrics/vmagent/#monitoring-data-exchange) discards [cardinality\_estimate](https://docs.victoriametrics.com/victoriametrics/vmestimator/#cardinality-metrics) and `cardinality_churn_ratio` metrics exposed by [vmestimator](https://github.com/VictoriaMetrics/vmestimator) service. [#&#8203;11501](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11501). - BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): allow access to `/prometheus/api/v1/admin/tsdb/delete_series` and `graphite/tags/delSeries` using only the corresponding `-deleteAuthKey`, even when `-httpAuth.*` is also configured, without additionally requiring `-httpAuth.*` credentials. See [#&#8203;11512](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11512). </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC42NS41IiwidXBkYXRlZEluVmVyIjoiNDQuNjYuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOltdfQ==-->
renovate scheduled this pull request to auto merge when all checks succeed 2026-09-14 08:01:25 +00:00
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin renovate-victoriametrics-victoria-metrics-1.x:renovate-victoriametrics-victoria-metrics-1.x
git switch renovate-victoriametrics-victoria-metrics-1.x

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff renovate-victoriametrics-victoria-metrics-1.x
git switch renovate-victoriametrics-victoria-metrics-1.x
git rebase main
git switch main
git merge --ff-only renovate-victoriametrics-victoria-metrics-1.x
git switch renovate-victoriametrics-victoria-metrics-1.x
git rebase main
git switch main
git merge --no-ff renovate-victoriametrics-victoria-metrics-1.x
git switch main
git merge --squash renovate-victoriametrics-victoria-metrics-1.x
git switch main
git merge --ff-only renovate-victoriametrics-victoria-metrics-1.x
git switch main
git merge renovate-victoriametrics-victoria-metrics-1.x
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
foosinn/hass-addons!63
No description provided.