- Admin /api/v1/admin/tsdb/delete_series and /tags/delSeries endpoints now require POST only, breaking existing GET usage.
- Security hardening to prevent SSRF‑based data deletion by enforcing POST method.
- vmbackupmanager no longer crashes on startup when restore state fails; logs error, retries, and adds restoreState failure metric.
v1.136.15
Official VictoriaMetrics changelog summary with source attribution, release tags, and community reactions.
Track this VictoriaMetrics release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this VictoriaMetrics release note into a weekly digest for the tools you actually use.
Create digestMore VictoriaMetrics changelog updates
Enable multitenancy via headers by default for vmselect, vminsert and vmagent (default flag changed to true), which may break existing URL patterns.
Upgrade Go builder to Go1.26.6, addressing security issues in the runtime.
Upgrade Go builder from 1.26.5 to 1.26.6 for security patches.