- Security updates: upgraded base Docker image to Alpine 3.19.0 and Go builder to Go 1.21.5.
- Bugfixes for vmagent (prevent fatal flush metainfo panic, proper ZSTD decoding, correct label handling in stream aggregation) and vmalert (sanitize label names before sending to Alertmanager).
- Fixed escaping of '<' characters in responses from the /federate endpoint.