grafana/alloy v1.19.0

on GitHub

1.19.0 (2026-08-21)

⚠ BREAKING CHANGES

• prometheus.operator.servicemonitors: prometheus.operator.servicemonitors now rejects ServiceMonitor endpoints that reference local files through bearerTokenFile, tlsConfig.caFile, tlsConfig.certFile, or tlsConfig.keyFile by default. Set allow_arbitrary_file_access = true to preserve the previous behavior for trusted ServiceMonitor authors.
• The memory_limiter processor's internal telemetry metrics were renamed upstream in OpenTelemetry Collector v0.155.0 to carry a memory_limiter prefix
• Remove the prometheus.write.queue component (#6814)

Features 🌟

• Add ability to exempt lines matching a configured regex pattern from loki.process stage.luhn (#6608) (2e0748d) (@nathwill, @thampiotr)
• Add opamp supervisor (#6815) (e891e30) (@x1unix, @jharvey10, @blewis12)
• Add start_timestamp_zero_ingestion to Prometheus metric components (#6610) (1a9ed95) (@madaraszg-tulip)
• beyla.ebpf: Run Beyla as a subprocess (#6695) (61ec3d2) (@rafaelroquetto)
• Binary Alloy Homebrew Formula (#6723) (024d224) (@x1unix)
• Bump otel to v0.158.0 and prometheus to v3.13.2 (#6842) (aef2e8b) (@blewis12, @clayton-cornell)
• Check imports of inline Alloy config in OTel mode (#6677) (fda0449) (@x1unix, @clayton-cornell)
• database_observability.mysql: Add support for clustering mode (#6775) (0cfa960) (@matthewnolf)
• database_observability.postgres: Add user, pid, and sqlstate fields to op=error_message (#6770) (73e29dc) (@gaantunes)
• database_observability.postgres: Emit op=query_association_v2 carrying query_fingerprint (#6297) (75239d0) (@gaantunes)
• database_observability.sql_server: Add query_details collector (#6788) (cec31b2) (@cristiangreco)
• database_observability.sql_server: Add query_metrics collector (#6743) (35babfd) (@cristiangreco)
• database_observability.sql_server: Support csp metadata for SQL Server (#6689) (24c7207) (@cristiangreco, @clayton-cornell)
• discovery.azure: Add "sdk_auth" and "workload_identity" auth options (#6671) (9fa8b51) (@ptodev)
• Expose experimental OTel supervisor (#6903) (936c177) (@devzl)
• Expose new kafka receiver/exporter knobs after upgrade to v0.158.0 (#6868) (88601cb) (@blewis12, @clayton-cornell)
• loki.process: Add stage.split_json to split top-level JSON arrays (#6823) (7bdd3dd) (@DeeGeeGit, @thampiotr)
• loki.secretfilter: Promote loki.secretfilter to public preview (#6724) (4053610) (@kleimkuhler)
• otelcol.receiver.prometheus: Return stable refs (#6822) (4633351) (@kgeckhart)
• otelcol: Add otelcol.processor.redaction (#6647) (ea35e8a) (@andreacappadona17)
• Part 2 - Expose knobs for OTel v0.158.0 upgrade (#6876) (397acb1) (@blewis12, @clayton-cornell)
• Part 3 - Expose knobs for OTel v0.158.0 upgrade - add exposed_headers to otel http config (#6889) (c42f0c4) (@blewis12)
• Part 4 - Expose knobs for Prometheus 3.13.2 & OTel v0.158.0 upgrade (#6890) (8a877bf) (@blewis12)
• prometheus.exporter.mssql: Add a new max_connection_lifetime config attribute (#6700) (5286dd6) (@ptodev)
• prometheus.operator: Add missing native histogram scrape for parity with scrape (#6406) (368f772) (@blamas)
• prometheus.operator: Expose bodySizeLimit and enableCompression (#6657) (8fa09a1) (@kgeckhart)
• pyroscope.java: Add tlab profiling config option for TLAB-based allocation events (#6754) (b955613) (@github-hamza-bouqal)
• pyroscope.java: Update async-profiler binaries to v4.5 (#6739) (9b8aa87) (@korniltsev-grafanista)
• pyroscope.write: Add retry_on_http_429 endpoint option (#6763) (bcd909d) (@Churi12)
• pyroscope: Support span context propagation from OBI (including Beyla component) (#6298) (24d66d0) (@simonswine)

Bug Fixes 🐛

• Add nop receiver to OTel Engine (#6751) (8b7703c) (@blewis12)
• beyla.ebpf: Remove wrong native_histograms config attribute (#6086) (99074ba) (@fstab)
• beyla: Unix socket name could be too long (#6905) (bb7d902) (@skl)
• Clashing cross compilation env variables when building/generating alloy (#6793) (0c7af36) (@blewis12)
• database_observability.postgres: Restore cgo SQL fingerprinting on Windows (#6746) (bc33331) (@gaantunes)
• database_observability.postgres: Roll back op=query_association_v2, fold fingerprint into op=query_association (#6745) (40e8f1e) (@gaantunes)
• database_observability.postgres: Use of defer in explain_plans collector (#6819) (9935420) (@cristiangreco)
• dependencies: Upgrade golang.org/x/text to v0.39.0 (#6744) (105ecf6) (@thampiotr)
• discovery.relabel: Use the underlying string of secret target values (#6605) (171aea1) (@Churi12, @kalleep)
• fmt: Do not write a file if no formatter changes are needed (#6871) (a7696d5) (@thampiotr)
• Harden the configmap reloader container (#6780) (e49e090) (@petewall)
• loki.process: Return errors from metric registration instead of panicking (#6078) (a388da5) (@boinger)
• loki.source.docker: Respect label changes (#6818) (d0525a9) (@kalleep)
• loki.source.docker: Restart tailers when config changes (#6826) (eb7f3ef) (@kalleep)
• loki.source.docker: Stop tailer when container no longer exists (#6309) (44f0377) (@JanMikes)
• loki.source.file, loki.source.journal: Fail loudly on unreadable legacy positions file (#6750) (2425b8a) (@allocsys)
• loki.source.windowsevent: Use octal notation for file permissions (#6077) (789140d) (@boinger)
• mixin: Fix overlapping panels and inconsistent selector application for loki and OTel Engine (#6947) (66ebea8) (@kgeckhart)
• otelcol.exporter.loadbalancing: Change default Kubernetes resolver timeout to 1m (#6702) (d425ad9) (@TylerHelmuth)
• prometheus.fanout: Correct series-ref handling on the unmapped fanout path (#6821) (2edaaab) (@kgeckhart)
• prometheus.operator.servicemonitors: Sync ServiceMonitor permission semantics with upstream (2eeaa3e) (@jharvey10, @blewis12)
• prometheus.receive_http: Eliminate free-port race in tests (#6827) (37b652c) (@kgeckhart)
• prometheus: Reduce metadata pipeline allocation overhead (#6698) (1fef867) (@BominRahmani)
• security/HIGH/internal/web/ui: Update npm dependency react-router to v7.18.2 [SECURITY] (#6848) (d78bd74)
• security/UNKNOWN/tools: Update module golang.org/x/mod to v0.40.0 [SECURITY] (#6888) (231c259)
• security/UNKNOWN/: Update module golang.org/x/mod to v0.40.0 [SECURITY] (#6886) (6e397ea) (@dehaansa)
• security/UNKNOWN/: Update module google.golang.org/grpc to v1.82.1 [SECURITY] (#6735) (bffcf59) (@blewis12)
• ui: Move legends to bottom (#6851) (546c65f) (@veenoise)
• Upgrade go-re2 to v1.12.0 to allow MemoryDenyWriteExecute=true with loki.secretfilter (#6737) (f34140a) (@locker95)
• Use default upstream config for vcenter receiver (#6918) (107a9eb) (@blewis12)

Chores

• Remove the prometheus.write.queue component (#6814) (b168d0e) (@kgeckhart)

Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.