BUGFIX: vmauth: do not slow down requests with auth tokens if no users are configured. Previously, such requests were delayed by 2-3 seconds before being proxied to unauthorized_user, though there were no users to brute-force. This affected setups where one vmauth authenticates requests and proxies them to another vmauth with only unauthorized_user configured. The bug has been introduced in v1.154.0. See #11774.
Configuration
📅Schedule: (UTC)
Branch creation
At any time (no schedule defined)
Automerge
At any time (no schedule defined)
🚦Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕Ignore: Close this PR and you won't be reminded about this update again.
If you want to rebase/retry this PR, check this box
This PR contains the following updates:
| Package | Update | Change |
|---|---|---|
| [victoriametrics/vmagent](https://github.com/VictoriaMetrics/VictoriaMetrics) | patch | `v1.154.0` → `v1.154.1` |
---
### Release Notes
<details>
<summary>VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)</summary>
### [`v1.154.1`](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.154.1)
[Compare Source](https://github.com/VictoriaMetrics/VictoriaMetrics/compare/v1.154.0...v1.154.1)
##### [v1.154.1](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.154.1)
Released at 2026-10-19
- BUGFIX: [vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/): do not slow down requests with auth tokens if no `users` are configured. Previously, such requests were delayed by 2-3 seconds before being proxied to `unauthorized_user`, though there were no users to brute-force. This affected setups where one `vmauth` authenticates requests and proxies them to another `vmauth` with only `unauthorized_user` configured. The bug has been introduced in [v1.154.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.154.0). See [#​11774](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11774).
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xNzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE3My4wIiwidGFyZ2V0QnJhbmNoIjoibWFzdGVyIiwibGFiZWxzIjpbXX0=-->
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
This PR contains the following updates:
v1.154.0→v1.154.1Release Notes
VictoriaMetrics/VictoriaMetrics (victoriametrics/vmagent)
v1.154.1Compare Source
v1.154.1
Released at 2026-10-19
usersare configured. Previously, such requests were delayed by 2-3 seconds before being proxied tounauthorized_user, though there were no users to brute-force. This affected setups where onevmauthauthenticates requests and proxies them to anothervmauthwith onlyunauthorized_userconfigured. The bug has been introduced in v1.154.0. See #11774.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate CLI.