- - /api/v1/admin/tsdb/delete_series and /tags/delSeries endpoints now require POST only, fixing SSRF risk and breaking existing GET‑based scripts.
- - Multiple bug fixes: correct MetricsQL NaN handling, vmagent ignores HTTP proxy vars for Unix sockets, vmalert UI rule state badges, vmbackupmanager no longer crashes on restore‑state failures, stream aggregation sum errors fixed, and s...
- - Introduced vm_backup_errors_total{type="restoreState"} metric to monitor backup state restore failures.
v1.148.1
Official VictoriaMetrics changelog summary with source attribution, release tags, and community reactions.
Track this VictoriaMetrics release note alongside related changelog updates, risky changes, and weekly digest signals from the developer community.
Verify the original release note
Every summary should remain traceable to the original changelog or release source.
Follow this in context
Turn this VictoriaMetrics release note into a weekly digest for the tools you actually use.
Create digestMore VictoriaMetrics changelog updates
Enable multitenancy via headers by default for vmselect, vminsert and vmagent (default flag changed to true), which may break existing URL patterns.
Upgrade Go builder to Go1.26.6, addressing security issues in the runtime.
Upgrade Go builder from 1.26.5 to 1.26.6 for security patches.