FEATURE: vmalert: add search parameter and pagination support in /api/v1/rules API. See #10046.
FEATURE: vmui: add default pagination to improve the Alerting Rules page experience when vmalert loads thousands of rules. See #10046.
FEATURE: all VictoriaMetrics components: log a warning when an IPv6 listen address (e.g. [::]:6969) is specified but -enableTCP6 is not set. Previously, the server silently listened on IPv4 only. See #6858. Thanks to @andriibeee for the contribution.
FEATURE: vmagent: allow specifying basic_auth in scrape configs without username. Previously this resulted in a config error. Now a warning is logged instead. See #6956. Thanks to @andriibeee for the contribution.
FEATURE: vmrestore: Improve restore speed on linux systems by pre-allocating files and optimizing write path. This behavior can be disabled with -skipFilePreallocation. See #10661. Thanks to @BenNF for the contribution.
BUGFIX: vmselect in VictoriaMetrics cluster: retry RPC by dialing a new connection instead of reusing a pooled one when the previous attempt fails with io.EOF, broken pipe or reset by peer. This reduces query failures caused by stale connections to restarted vmstorage nodes. See #10314
BUGFIX: vmui: fix autocomplete dropdown not closing on the Raw Query page. See #10665
BUGFIX: vmauth: properly handle JWKS keys per RFC 7517 during OIDC discovery: skip keys with use=enc, reject use=sig keys with unsupported alg, and warn-skip keys with empty use that have unsupported alg. See #10663. Thanks to @andriibeee for the contribution.
BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: enforce datasource_type=prometheus when proxying Grafana requests to vmalert. Grafana supports only prometheus and loki alerts. Without this fix, Grafana shows Error loading alerts when non-Prometheus alert types are returned. See victoriametrics-datasource#329.
BUGFIX: vmagent: stop logging error-level messages when scraping targets that expose OpenMetrics info, gaugehistogram, stateset, or unknown metric types. These are valid OpenMetrics types and should be parsed without error. See #10685. Thanks to @tsarna for the contribution.
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [victoriametrics/vmagent](https://github.com/VictoriaMetrics/VictoriaMetrics) | minor | `v1.138.0` → `v1.139.0` |
---
### Release Notes
<details>
<summary>VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)</summary>
### [`v1.139.0`](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.139.0)
[Compare Source](https://github.com/VictoriaMetrics/VictoriaMetrics/compare/v1.138.0...v1.139.0)
##### [v1.139.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.139.0)
Released at 2026-03-27
- FEATURE: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): show `seriesCountByMetricName` table when a label is in focus in the [Cardinality Explorer](https://docs.victoriametrics.com/victoriametrics/#cardinality-explorer). See [#​10630](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10630). Thanks to [@​Roshan1299](https://github.com/Roshan1299) for the contribution.
- FEATURE: [dashboards/unused-metrics](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/dashboards/unused-metrics.json): add a new dashboard for exploring stored metrics based on [Caridnality Explorer](https://docs.victoriametrics.com/victoriametrics/#cardinality-explorer) and [ingested metrics usage API](https://docs.victoriametrics.com/victoriametrics/#track-ingested-metrics-usage). The dashboard requires [Infinity Grafana plugin](https://grafana.com/grafana/plugins/yesoreyeram-infinity-datasource/) to be installed. See [#​10617](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10617) for details.
- FEATURE: [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/): add `search` parameter and pagination support in `/api/v1/rules` API. See [#​10046](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10046).
- FEATURE: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): add default pagination to improve the Alerting Rules page experience when vmalert loads thousands of rules. See [#​10046](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10046).
- FEATURE: all VictoriaMetrics components: log a warning when an IPv6 listen address (e.g. `[::]:6969`) is specified but `-enableTCP6` is not set. Previously, the server silently listened on IPv4 only. See [#​6858](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/6858). Thanks to [@​andriibeee](https://github.com/andriibeee) for the contribution.
- FEATURE: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): extend JWT [claim matching](https://docs.victoriametrics.com/victoriametrics/vmauth/#jwt-claim-matching) with array claim values support. See [#​10647](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10647). Thanks to [@​andriibeee](https://github.com/andriibeee) for the contribution.
- FEATURE: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): allow specifying `basic_auth` in scrape configs without `username`. Previously this resulted in a config error. Now a warning is logged instead. See [#​6956](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/6956). Thanks to [@​andriibeee](https://github.com/andriibeee) for the contribution.
- FEATURE: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): add support for negative buckets in [OpenTelemetry](https://docs.victoriametrics.com/victoriametrics/integrations/opentelemetry/) `ExponentialHistogram` during ingestion. See [#​9896-comment](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/9896#issuecomment-4037522985).
- FEATURE: [vmrestore](https://docs.victoriametrics.com/victoriametrics/vmrestore/): Improve restore speed on linux systems by pre-allocating files and optimizing write path. This behavior can be disabled with `-skipFilePreallocation`. See [#​10661](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10661/). Thanks to [@​BenNF](https://github.com/BenNF) for the contribution.
- FEATURE: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): [yandexcloud\_sd\_configs](https://docs.victoriametrics.com/victoriametrics/sd_configs/#yandexcloud_sd_configs) now supports `folder_ids` for limiting discovery to specific folders. See [#​10623](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10623). Thanks to [@​Br1an67](https://github.com/Br1an67) for the contribution.
- BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): retry RPC by dialing a new connection instead of reusing a pooled one when the previous attempt fails with `io.EOF`, `broken pipe` or `reset by peer`. This reduces query failures caused by stale connections to restarted vmstorage nodes. See [#​10314](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10314)
- BUGFIX: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): fix autocomplete dropdown not closing on the Raw Query page. See [#​10665](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10665)
- BUGFIX: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): properly handle JWKS keys per [RFC 7517](https://datatracker.ietf.org/doc/html/rfc7517#section-4.2) during [OIDC discovery](https://docs.victoriametrics.com/victoriametrics/vmauth/#oidc-discovery): skip keys with `use=enc`, reject `use=sig` keys with unsupported `alg`, and warn-skip keys with empty `use` that have unsupported `alg`. See [#​10663](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10663). Thanks to [@​andriibeee](https://github.com/andriibeee) for the contribution.
- BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): enforce `datasource_type=prometheus` when [proxying](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/#vmalert) Grafana requests to [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/). Grafana supports only `prometheus` and `loki` alerts. Without this fix, Grafana shows `Error loading alerts` when non-Prometheus alert types are returned. See [victoriametrics-datasource#329](https://github.com/VictoriaMetrics/victoriametrics-datasource/issues/329).
- BUGFIX: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): stop logging `error`-level messages when scraping targets that expose OpenMetrics `info`, `gaugehistogram`, `stateset`, or `unknown` metric types. These are valid [OpenMetrics](https://github.com/OpenObservability/OpenMetrics/blob/main/specification/OpenMetrics.md) types and should be parsed without error. See [#​10685](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10685). Thanks to [@​tsarna](https://github.com/tsarna) for the contribution.
- BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): prevent panic during directory deletion on `NFS`-based mounts. The bug was introduced in [83da33d8](https://github.com/VictoriaMetrics/VictoriaMetrics/commit/83da33d8cfe8352fd0022d05a8b6346ebb48420d) and included in [v1.123.0](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/victoriametrics/changelog/CHANGELOG_2025.md#v11230). See [#​9842](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/9842).
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTAiLCJ0YXJnZXRCcmFuY2giOiJtYXN0ZXIiLCJsYWJlbHMiOltdfQ==-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v1.138.0→v1.139.0Release Notes
VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)
v1.139.0Compare Source
v1.139.0
Released at 2026-03-27
FEATURE: vmui: show
seriesCountByMetricNametable when a label is in focus in the Cardinality Explorer. See #10630. Thanks to @Roshan1299 for the contribution.FEATURE: dashboards/unused-metrics: add a new dashboard for exploring stored metrics based on Caridnality Explorer and ingested metrics usage API. The dashboard requires Infinity Grafana plugin to be installed. See #10617 for details.
FEATURE: vmalert: add
searchparameter and pagination support in/api/v1/rulesAPI. See #10046.FEATURE: vmui: add default pagination to improve the Alerting Rules page experience when vmalert loads thousands of rules. See #10046.
FEATURE: all VictoriaMetrics components: log a warning when an IPv6 listen address (e.g.
[::]:6969) is specified but-enableTCP6is not set. Previously, the server silently listened on IPv4 only. See #6858. Thanks to @andriibeee for the contribution.FEATURE: vmauth: extend JWT claim matching with array claim values support. See #10647. Thanks to @andriibeee for the contribution.
FEATURE: vmagent: allow specifying
basic_authin scrape configs withoutusername. Previously this resulted in a config error. Now a warning is logged instead. See #6956. Thanks to @andriibeee for the contribution.FEATURE: vmagent and vmsingle: add support for negative buckets in OpenTelemetry
ExponentialHistogramduring ingestion. See #9896-comment.FEATURE: vmrestore: Improve restore speed on linux systems by pre-allocating files and optimizing write path. This behavior can be disabled with
-skipFilePreallocation. See #10661. Thanks to @BenNF for the contribution.FEATURE: vmagent: yandexcloud_sd_configs now supports
folder_idsfor limiting discovery to specific folders. See #10623. Thanks to @Br1an67 for the contribution.BUGFIX:
vmselectin VictoriaMetrics cluster: retry RPC by dialing a new connection instead of reusing a pooled one when the previous attempt fails withio.EOF,broken pipeorreset by peer. This reduces query failures caused by stale connections to restarted vmstorage nodes. See #10314BUGFIX: vmui: fix autocomplete dropdown not closing on the Raw Query page. See #10665
BUGFIX: vmauth: properly handle JWKS keys per RFC 7517 during OIDC discovery: skip keys with
use=enc, rejectuse=sigkeys with unsupportedalg, and warn-skip keys with emptyusethat have unsupportedalg. See #10663. Thanks to @andriibeee for the contribution.BUGFIX: vmsingle and
vmselectin VictoriaMetrics cluster: enforcedatasource_type=prometheuswhen proxying Grafana requests to vmalert. Grafana supports onlyprometheusandlokialerts. Without this fix, Grafana showsError loading alertswhen non-Prometheus alert types are returned. See victoriametrics-datasource#329.BUGFIX: vmagent: stop logging
error-level messages when scraping targets that expose OpenMetricsinfo,gaugehistogram,stateset, orunknownmetric types. These are valid OpenMetrics types and should be parsed without error. See #10685. Thanks to @tsarna for the contribution.BUGFIX: vmsingle and
vmstoragein VictoriaMetrics cluster: prevent panic during directory deletion onNFS-based mounts. The bug was introduced in 83da33d8 and included in v1.123.0. See #9842.Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.