Update Note 1:vmsingle and vmagent: default value of the flag -promscrape.dropOriginalLabels changed from true to false.
It enables back Discovered targets debug UI by default.
FEATURE: vmbackup: can now copy backups between different storage backends, such as from s3 to local disk or gcs to s3. See #10401. Thanks to @BenNF for the contribution.
FEATURE: vmauth: add JWT token authentication support with signature verification based on provided public_keys. Read more about configuration in JWT Token auth proxy documentation. See #10445.
FEATURE: vmauth: support dynamic rewriting of upstream URLs and request headers using placeholders populated from JWT vm_access claim fields. This allows routing requests to the correct tenant backend without maintaining a separate user config entry per tenant. Read more in JWT claim-based request templating documentation. See #10492.
FEATURE: all VictoriaMetrics components: expose process_cpu_seconds_total, process_resident_memory_bytes, and other process-level metrics when running on macOS. See metrics#75.
FEATURE: dashboards/vmauth: add Request body buffering duration panel to the Troubleshooting section. This panel shows the time spent buffering incoming client request bodies, helping identify slow client uploads and potential concurrency issues. The panel is only available when -requestBufferSize is non-zero. See #10309.
FEATURE: vmagent and vmsingle: reduce CPU and memory usage when -promscrape.dropOriginalLabels command-line flag is set. See #9952.
FEATURE: vmsingle and vmselect in VictoriaMetrics cluster: decode UTF-8 label names in the label/<name>/values API according to the Prometheus API specifications. See #10446. Thanks to @utrack for the contribution.
FEATURE: vmsingle and vmstorage in VictoriaMetrics cluster: increase default value for -storage.minFreeDiskSpaceBytes flag from 10M to 100M to reduce risk of panics under high ingestion on small disks. See #9561.
FEATURE: vmagent and vmsingle: improve InfluxDB ingestion parsing error message when a closing quote is missing for a quoted field value, by adding a hint that this may be caused by a raw newline (\n) inside the quoted field value. See #10067. Thanks to @hklhai for the contribution.
FEATURE: MetricsQL: add histogram_fraction function to calculate the fraction of buckets falling between lowerLe and upperLe. See #5346.
FEATURE: dashboards/alert-statistics: add job and instance filters to the VictoriaMetrics - Alert statistics dashboard. This allows users running multiple independent vmalert instances to filter and analyze alerts statistics per specific instance, making it easier to identify issues in a particular vmalert deployment. See #10549.
FEATURE: alerts: use $externalURL instead of localhost in the alerting rules. This should improve usability of the rules if $externalURL is correctly configured, without need to update rules annotations. See #10508. Thanks to @sias32 for the contribution.
FEATURE: all VictoriaMetrics components: publish SPDX SBOM attestations for container images on docker.io and quay.io. See SECURITY.md and #10474. Thanks to @smuda for the contribution.
BUGFIX: all VictoriaMetrics components: return gzip-compressed response instead of zstd-compressed response to the client if Accept-Encoding request header contains both gzip and zstd. This is needed because some clients and proxies improperly handle zstd-compressed responses. See #10535.
BUGFIX: vmagent and vmsingle: properly check expired client certificate during mTLS requests. See #10393.
BUGFIX: vmsingle and vmstorage in VictoriaMetrics cluster: prevent panic error parsing regexp: expression nests too deeply triggered by large repetition ranges in regex, for example {"__name__"=~"a{0,1000}"}. See VictoriaLogs#1112.
BUGFIX: vmui: fix escaping for label names with special characters. See #10485.
BUGFIX: vmstorage in VictoriaMetrics cluster: properly apply extra_filters[] filter when querying vm_account_id or vm_project_id labels via multitenant request for /api/v1/label/…/values API. Before, extra_filters was ignored. See #10503.
BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: revert the use of rollup result cache for instant queries that contain rate function with a lookbehind window larger than -search.minWindowForInstantRollupOptimization. The cache usage was removed since v1.132.0. See #10098 for more details.
Configuration
📅Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [victoriametrics/vmagent](https://github.com/VictoriaMetrics/VictoriaMetrics) | minor | `v1.136.0` → `v1.137.0` |
---
### Release Notes
<details>
<summary>VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)</summary>
### [`v1.137.0`](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.137.0)
[Compare Source](https://github.com/VictoriaMetrics/VictoriaMetrics/compare/v1.136.0...v1.137.0)
##### [v1.137.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.137.0)
Released at 2026-02-27
**Update Note 1:** [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): default value of the flag `-promscrape.dropOriginalLabels` changed from `true` to `false`.
It enables back `Discovered targets` debug UI by default.
- FEATURE: [vmbackup](https://docs.victoriametrics.com/vmbackup/): can now copy backups between different storage backends, such as from s3 to local disk or gcs to s3. See [#​10401](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10401). Thanks to [@​BenNF](https://github.com/BenNF) for the contribution.
- FEATURE: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): add JWT token authentication support with signature verification based on provided `public_keys`. Read more about configuration in [JWT Token auth proxy](https://docs.victoriametrics.com/victoriametrics/vmauth/#jwt-token-auth-proxy) documentation. See [#​10445](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10445).
- FEATURE: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): support dynamic rewriting of upstream URLs and request headers using placeholders populated from JWT `vm_access` claim fields. This allows routing requests to the correct tenant backend without maintaining a separate user config entry per tenant. Read more in [JWT claim-based request templating](https://docs.victoriametrics.com/victoriametrics/vmauth/#jwt-claim-based-request-templating) documentation. See [#​10492](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10492).
- FEATURE: all VictoriaMetrics components: expose `process_cpu_seconds_total`, `process_resident_memory_bytes`, and other process-level metrics when running on macOS. See [metrics#75](https://github.com/VictoriaMetrics/metrics/issues/75).
- FEATURE: [dashboards/vmauth](https://grafana.com/grafana/dashboards/21394): add `Request body buffering duration` panel to the `Troubleshooting` section. This panel shows the time spent buffering incoming client request bodies, helping identify slow client uploads and potential concurrency issues. The panel is only available when `-requestBufferSize` is non-zero. See [#​10309](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10309).
- FEATURE: [vmagent](https://docs.victoriametrics.com/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): reduce CPU and memory usage when `-promscrape.dropOriginalLabels` command-line flag is set. See [#​9952](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/9952).
- FEATURE: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/), [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/), `vminsert` and `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): enable [ingestion](https://docs.victoriametrics.com/victoriametrics/vmagent/#metric-metadata) and in-memory [storage](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#metrics-metadata) of metrics metadata by default. Metadata ingestion can be disabled with `-enableMetadata=false`. See [#​2974](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/2974).
- FEATURE: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): decode UTF-8 label names in the `label/<name>/values` API according to the Prometheus API specifications. See [#​10446](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10446). Thanks to [@​utrack](https://github.com/utrack) for the contribution.
- FEATURE: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): increase default value for `-storage.minFreeDiskSpaceBytes` flag from 10M to 100M to reduce risk of panics under high ingestion on small disks. See [#​9561](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/9561).
- FEATURE: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): improve [InfluxDB ingestion](https://docs.victoriametrics.com/victoriametrics/integrations/influxdb/) parsing error message when a closing quote is missing for a quoted field value, by adding a hint that this may be caused by a raw newline (`\n`) inside the quoted field value. See [#​10067](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10067). Thanks to [@​hklhai](https://github.com/hklhai) for the contribution.
- FEATURE: [MetricsQL](https://docs.victoriametrics.com/victoriametrics/metricsql/): add [histogram\_fraction](https://docs.victoriametrics.com/victoriametrics/metricsql/#histogram_fraction) function to calculate the fraction of buckets falling between lowerLe and upperLe. See [#​5346](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/5346).
- FEATURE: [dashboards/alert-statistics](https://grafana.com/grafana/dashboards/24553): add `job` and `instance` filters to the `VictoriaMetrics - Alert statistics` dashboard. This allows users running multiple independent [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/) instances to filter and analyze alerts statistics per specific instance, making it easier to identify issues in a particular vmalert deployment. See [#​10549](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10549).
- FEATURE: [dashboards/alert-statistics](https://grafana.com/grafana/dashboards/24553): add a link to a specific alerting rule on the table of firing alerts. See [#​10508](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10508). Thanks to [@​sias32](https://github.com/sias32) for the contribution.
- FEATURE: [alerts](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/deployment/docker/rules): use `$externalURL` instead of `localhost` in the alerting rules. This should improve usability of the rules if `$externalURL` is correctly configured, without need to update rules annotations. See [#​10508](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10508). Thanks to [@​sias32](https://github.com/sias32) for the contribution.
- FEATURE: all VictoriaMetrics components: publish [SPDX](https://spdx.dev/) SBOM attestations for container images on `docker.io` and `quay.io`. See [SECURITY.md](https://docs.victoriametrics.com/victoriametrics/security/) and [#​10474](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10474). Thanks to [@​smuda](https://github.com/smuda) for the contribution.
- BUGFIX: all VictoriaMetrics components: return gzip-compressed response instead of zstd-compressed response to the client if `Accept-Encoding` request header contains both `gzip` and `zstd`. This is needed because some clients and proxies improperly handle zstd-compressed responses. See [#​10535](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10535).
- BUGFIX: [vmagent](https://docs.victoriametrics.com/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): properly check expired client certificate during mTLS requests. See [#​10393](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10393).
- BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): prevent panic `error parsing regexp: expression nests too deeply` triggered by large repetition ranges in regex, for example `{"__name__"=~"a{0,1000}"}`. See [VictoriaLogs#1112](https://github.com/VictoriaMetrics/VictoriaLogs/issues/1112).
- BUGFIX: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): fix escaping for label names with special characters. See [#​10485](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10485).
- BUGFIX: `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): properly search tenants for [multitenant](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/#multitenancy) query request. See [#​10422](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10422).
- BUGFIX: `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): properly apply `extra_filters[]` filter when querying `vm_account_id` or `vm_project_id` labels via [multitenant](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/#multitenancy) request for `/api/v1/label/…/values` API. Before, `extra_filters` was ignored. See [#​10503](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10503).
- BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): revert the use of rollup result cache for [instant queries](https://docs.victoriametrics.com/keyConcepts.html#instant-query) that contain [`rate`](https://docs.victoriametrics.com/MetricsQL.html#rate) function with a lookbehind window larger than `-search.minWindowForInstantRollupOptimization`. The cache usage was removed since [v1.132.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.132.0). See [#​10098](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10098#issuecomment-3895011084) for more details.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40OC41IiwidXBkYXRlZEluVmVyIjoiNDMuNDguNSIsInRhcmdldEJyYW5jaCI6Im1hc3RlciIsImxhYmVscyI6W119-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v1.136.0→v1.137.0Release Notes
VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)
v1.137.0Compare Source
v1.137.0
Released at 2026-02-27
Update Note 1: vmsingle and vmagent: default value of the flag
-promscrape.dropOriginalLabelschanged fromtruetofalse.It enables back
Discovered targetsdebug UI by default.FEATURE: vmbackup: can now copy backups between different storage backends, such as from s3 to local disk or gcs to s3. See #10401. Thanks to @BenNF for the contribution.
FEATURE: vmauth: add JWT token authentication support with signature verification based on provided
public_keys. Read more about configuration in JWT Token auth proxy documentation. See #10445.FEATURE: vmauth: support dynamic rewriting of upstream URLs and request headers using placeholders populated from JWT
vm_accessclaim fields. This allows routing requests to the correct tenant backend without maintaining a separate user config entry per tenant. Read more in JWT claim-based request templating documentation. See #10492.FEATURE: all VictoriaMetrics components: expose
process_cpu_seconds_total,process_resident_memory_bytes, and other process-level metrics when running on macOS. See metrics#75.FEATURE: dashboards/vmauth: add
Request body buffering durationpanel to theTroubleshootingsection. This panel shows the time spent buffering incoming client request bodies, helping identify slow client uploads and potential concurrency issues. The panel is only available when-requestBufferSizeis non-zero. See #10309.FEATURE: vmagent and vmsingle: reduce CPU and memory usage when
-promscrape.dropOriginalLabelscommand-line flag is set. See #9952.FEATURE: vmagent, vmsingle,
vminsertandvmstoragein VictoriaMetrics cluster: enable ingestion and in-memory storage of metrics metadata by default. Metadata ingestion can be disabled with-enableMetadata=false. See #2974.FEATURE: vmsingle and
vmselectin VictoriaMetrics cluster: decode UTF-8 label names in thelabel/<name>/valuesAPI according to the Prometheus API specifications. See #10446. Thanks to @utrack for the contribution.FEATURE: vmsingle and
vmstoragein VictoriaMetrics cluster: increase default value for-storage.minFreeDiskSpaceBytesflag from 10M to 100M to reduce risk of panics under high ingestion on small disks. See #9561.FEATURE: vmagent and vmsingle: improve InfluxDB ingestion parsing error message when a closing quote is missing for a quoted field value, by adding a hint that this may be caused by a raw newline (
\n) inside the quoted field value. See #10067. Thanks to @hklhai for the contribution.FEATURE: MetricsQL: add histogram_fraction function to calculate the fraction of buckets falling between lowerLe and upperLe. See #5346.
FEATURE: dashboards/alert-statistics: add
jobandinstancefilters to theVictoriaMetrics - Alert statisticsdashboard. This allows users running multiple independent vmalert instances to filter and analyze alerts statistics per specific instance, making it easier to identify issues in a particular vmalert deployment. See #10549.FEATURE: dashboards/alert-statistics: add a link to a specific alerting rule on the table of firing alerts. See #10508. Thanks to @sias32 for the contribution.
FEATURE: alerts: use
$externalURLinstead oflocalhostin the alerting rules. This should improve usability of the rules if$externalURLis correctly configured, without need to update rules annotations. See #10508. Thanks to @sias32 for the contribution.FEATURE: all VictoriaMetrics components: publish SPDX SBOM attestations for container images on
docker.ioandquay.io. See SECURITY.md and #10474. Thanks to @smuda for the contribution.BUGFIX: all VictoriaMetrics components: return gzip-compressed response instead of zstd-compressed response to the client if
Accept-Encodingrequest header contains bothgzipandzstd. This is needed because some clients and proxies improperly handle zstd-compressed responses. See #10535.BUGFIX: vmagent and vmsingle: properly check expired client certificate during mTLS requests. See #10393.
BUGFIX: vmsingle and
vmstoragein VictoriaMetrics cluster: prevent panicerror parsing regexp: expression nests too deeplytriggered by large repetition ranges in regex, for example{"__name__"=~"a{0,1000}"}. See VictoriaLogs#1112.BUGFIX: vmui: fix escaping for label names with special characters. See #10485.
BUGFIX:
vmstoragein VictoriaMetrics cluster: properly search tenants for multitenant query request. See #10422.BUGFIX:
vmstoragein VictoriaMetrics cluster: properly applyextra_filters[]filter when queryingvm_account_idorvm_project_idlabels via multitenant request for/api/v1/label/…/valuesAPI. Before,extra_filterswas ignored. See #10503.BUGFIX: vmsingle and
vmselectin VictoriaMetrics cluster: revert the use of rollup result cache for instant queries that containratefunction with a lookbehind window larger than-search.minWindowForInstantRollupOptimization. The cache usage was removed since v1.132.0. See #10098 for more details.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.