Fluent Bit 4.2.7

https://fluentbit.io/announcements/v4.2.7/

What's Changed

• release: update to 4.2.7 by @github-actions[bot] in #12005
• releasse: Update version to v4.2.7 [4.2 branch] by @cosmo0920 in #12015
• github: workflows: Use semver and timestamp suffixes to distinguish branches [Backport to 4.2] by @cosmo0920 in #12017
• lib: librdkafka: Upgrade to v2.15.0 [Backport to 4.2] by @cosmo0920 in #12050
• in_forward: validate PING is a msgpack array in check_ping [Backport to 4.2] by @cosmo0920 in #12051
• out_forward: align secure forward handshake and chunk ack with protocol spec [Backport to 4.2] by @cosmo0920 in #12052
• gzip: read magic number endian-safely in streaming decompressor [Backport to 4.2] by @cosmo0920 in #12056
• in_forward: fix 100% CPU hang and connection teardown use-after-free [Backport to 4.2] by @cosmo0920 in #12053
• in_splunk: return Splunk HEC auth status codes [Backport to 4.2] by @cosmo0920 in #12071

Full Changelog: v4.2.6...v4.2.7

Fluent Bit 5.0.9

https://fluentbit.io/announcements/v5.0.9/

What's Changed

• workflows: bump azure/setup-helm from 5.0.0 to 5.0.1 by @dependabot[bot] in #11997
• workflows: bump actions/setup-python from 6.2.0 to 6.3.0 by @dependabot[bot] in #11996
• workflows: bump actions/cache from 5.0.5 to 6.0.0 by @dependabot[bot] in #11995
• github: workflows: Use semver and timestamp suffixes to distinguish branches by @cosmo0920 in #12016
• workflows: bump actions/cache/restore from 6.0.0 to 6.1.0 by @dependabot[bot] in #12011
• workflows: bump crazy-max/ghaction-chocolatey from 4.0.0 to 4.1.0 by @dependabot[bot] in #12012
• workflows: bump actions/cache/save from 6.0.0 to 6.1.0 by @dependabot[bot] in #12013
• release: update to 5.0.9 by @cosmo0920 in #12018
• in_windows_exporter_metrics: Implement user-defined performance counters w/ PDH by @cosmo0920 in #12006
• tests: runtime: Try to address test hang by @cosmo0920 in #12000
• workflows: bump docker/build-push-action from 7.2.0 to 7.3.0 by @dependabot[bot] in #12031
• workflows: bump docker/setup-qemu-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #12030
• in_forward: validate PING is a msgpack array in check_ping by @saddamr3e in #12034
• filter_kubernetes: Attach k8s metadata for internal logs by @cosmo0920 in #11998
• in_ebpf: Implement openssl trace by @cosmo0920 in #11793
• tests: runtime: Use more concrete matchers for assertions by @cosmo0920 in #12014
• in_tail: Another attempt to plug segv on in tail by @cosmo0920 in #12010
• filter_write_tag: in_emitter: Mitigate data loss on multiline by @cosmo0920 in #12029
• workflows: bump docker/setup-buildx-action from 4.1.0 to 4.2.0 by @dependabot[bot] in #12041
• workflows: bump docker/login-action from 4.2.0 to 4.3.0 by @dependabot[bot] in #12040
• workflows: bump docker/metadata-action from 6.1.0 to 6.2.0 by @dependabot[bot] in #12039
• workflows: bump github/codeql-action/upload-sarif from 4.36.2 to 4.36.3 by @dependabot[bot] in #12038
• out_cloudwatch_logs: Plug SEGV on not found error by @cosmo0920 in #11983
• lib: librdkafka: Upgrade to v2.15.0 by @cosmo0920 in #12028
• in_ebpf: Generate mostly monotonic event id for increasing traceability by @cosmo0920 in #12002
• in_splunk: return Splunk HEC auth status codes by @lecaros in #12043
• out_forward: align secure forward handshake and chunk ack with protocol spec by @edsiper in #12037
• out_stackdriver: fix multi-worker resource-metadata data race (SIGSEGV) by @erain in #12023
• out_stackdriver: fix payload parsing over-reads and null safety by @erain in #12022
• codeowners: update @JeffLuoo to @JeffLuoo by @JeffLuoo in #11941
• gzip: skip FCOMMENT terminator in streaming decompressor by @saddamr3e in #11969
• in_forward: fix 100% CPU hang and connection teardown use-after-free by @edsiper in #12044
• build fixes: out_stackdriver int64_t line var, gzip endian-safe magic check by @edsiper in #12045

Full Changelog: v5.0.8...v5.0.9

Fluent Bit 4.2.6

https://fluentbit.io/announcements/v4.2.6/

What's Changed

• release: update to 4.2.6 by @github-actions[bot] in #11907
• workflows: Windows docker insufficient disk space fix [Backport to 4.2] by @cosmo0920 in #11906
• time: time_tz: Handle conversion rules of windows and IANA tzinfo [Back port to 4.2] by @cosmo0920 in #11911
• out_stackdriver: fix multiple memory leaks and potential corruption [Backport to 4.2] by @baizhenyu in #11916
• parser: Add IANA time_zone support for native timestamps [Backport to 4.2] by @cosmo0920 in #11919
• oauth2: harden token refresh parsing [Backport to 4.2] by @baizhenyu in #11923
• dockerfiles: windows: fixed VS Build Tools installation [Backport to 4.2] by @cosmo0920 in #11920
• workflows: Windows Docker insufficient disk space fix (2nd attempt) [Backport to 4.2] by @cosmo0920 in #11927
• out_stackdriver: backport codeowners change by @braydonk in #11921
• github: workflows: Process unit tests on 4.2 branch [Backport to 4.2] by @cosmo0920 in #11932
• github: workflows: Specify OS configs explicitly [Backport to 4.2] by @cosmo0920 in #11935
• regex: Plug a regex literal crash [Backport to 4.2] by @cosmo0920 in #11946
• in_windows_exporter_metrics: Plug bitwise glitches on 32bit oses [Backport to 4.2] by @cosmo0920 in #11947
• unicode: Use the correct maximum size of Cyrillic [Backport to 4.2] by @cosmo0920 in #11929
• out_forward: process type and length of pong strictly [Backport to 4.2] by @cosmo0920 in #11949
• node_exporter_metrics: Add file path to error messages [Backport to 4.2] by @cosmo0920 in #11992
• out_es/out_opensearch: sanitize bulk action metadata [Backport to 4.2] by @cosmo0920 in #11993
• tests: runtime: Try to eliminate flakyness on CI load [Backport to 4.2] by @cosmo0920 in #11994
• scheduler: Plug FD leaks on destroy [Backport to 4.2] by @cosmo0920 in #12001

Full Changelog: v4.2.5...v4.2.6

Fluent Bit 5.0.8

https://fluentbit.io/announcements/v5.0.8/

What's Changed

• release: update to 5.0.8 by @github-actions[bot] in #11924
• github: workflows: Adjust permissions to make efficient package/integration tests by @cosmo0920 in #11936
• github: workflows: Specify OS configs explicitly by @cosmo0920 in #11934
• in_windows_exporter_metrics: Plug bitwise glitches on 32bit oses by @cosmo0920 in #11940
• regex: Plug a regex literal crash by @cosmo0920 in #11938
• out_forward: process type and length of pong strictly by @cosmo0920 in #11945
• unicode: Use the correct maximum size of Cyrillic by @cosmo0920 in #11928
• opentelemetry: render unset AnyValue in OTLP JSON by @edsiper in #11943
• storage: fix stale chunks handling on limits by @edsiper in #11632
• workflows: bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot[bot] in #11965
• in_ebpf: Implement sched trace by @cosmo0920 in #11743
• in_tail: Plug timer lifecycle glitches on progress check by @cosmo0920 in #11956
• in_winevtlog: Handle structured xml query as separated subscriptions by @cosmo0920 in #11957
• aws: error_reporter: Plug SEGV occurrences on cloudwatch logs by @cosmo0920 in #11966
• in_tail: fix out-of-bounds read in unesc_ends_with_nl by @saddamr3e in #11952
• config_format: fix caller-owned parse failure cleanup by @edsiper in #11955
• workflows: bump softprops/action-gh-release from 3.0.0 to 3.0.1 by @dependabot[bot] in #11976
• workflows: bump github/codeql-action from 4.36.1 to 4.36.2 by @dependabot[bot] in #11975
• scheduler: Plug FD leaks on destroy by @cosmo0920 in #11977
• dockefile: Install libxxhash0 on builder image by @cosmo0920 in #11980
• workflows: bump aquasecurity/trivy-action from 0.35.0 to 0.36.0 by @dependabot[bot] in #11982
• workflows: bump reviewdog/action-hadolint from 1.50.5 to 1.51.0 by @dependabot[bot] in #11981
• out_loki: Handle loki tenant_id_key properly by @cosmo0920 in #11832
• out_cloudwatch_logs: Ensure escaping backslashes on cloudwatch API requests' body by @cosmo0920 in #11933
• tests: runtime: Try to eliminate flakyness on CI load by @cosmo0920 in #11984
• in_tail: fix ignore_active_older_files to re-check mtime on aged-out files by @zshuang0316 in #11890
• aws: catch auth errors on XML responses by @antoniomrfranco in #11891
• out_azure_blob: correctly handle successful Delete Blob responses by @Vaibhav-C-S in #11925
• node_exporter_metrics: Add file path to error messages by @rossigee in #11839
• out_es/out_opensearch: sanitize bulk action metadata by @edsiper in #11967
• opentelemetry: fix JSON histogram bounds handling by @edsiper in #11989
• lib: cmetrics: upgrade to v2.1.5 by @edsiper in #11990

New Contributors

• @saddamr3e made their first contribution in #11952
• @antoniomrfranco made their first contribution in #11891
• @Vaibhav-C-S made their first contribution in #11925
• @rossigee made their first contribution in #11839

Full Changelog: v5.0.7...v5.0.8

Fluent Bit 5.0.7

https://fluentbit.io/announcements/v5.0.7/

What's Changed

• release: update to 5.0.7 by @github-actions[bot] in #11834
• http_server: serialize worker teardown to prevent race conditions by @cosmo0920 in #11845
• http_server: fix libevent crash on connection drop by @cosmo0920 in #11843
• out_chronicle: Support label and namespace mapping by @cosmo0920 in #11836
• tests: internal: fuzzers: avoid destroying active input fuzzer tasks by @edsiper in #11850
• config_format: fix YAML variant cleanup on parser errors by @edsiper in #11857
• avro: Handle int64 values correctly by @cosmo0920 in #11883
• tests: runtime: Stabilize out_lib test case by @cosmo0920 in #11888
• in_elasticsearch: check map size before accessing first entry by @TristanInSec in #11856
• snappy: fix OOB reads in framed data parser by @TristanInSec in #11855
• zstd: add 100 MB decompression size limit by @TristanInSec in #11854
• in_mqtt: fix OOB read from hardcoded remaining length overhead by @TristanInSec in #11853
• in_collectd: reject parts with length < 4 and fix null-terminator OOB by @TristanInSec in #11849
• in_forward: validate array size before accessing message mode fields by @TristanInSec in #11851
• in_syslog: fix integer overflow in octet-counting length parser by @TristanInSec in #11852
• out_stackdriver: fix multiple memory leaks and potential corruption by @baizhenyu in #11879
• CODEOWNERS: remove @braydonk and @jefferbrecht by @braydonk in #11909
• time: time_tz: Handle conversion rules of windows and IANA tzinfo by @cosmo0920 in #11903
• storage: discard checksum corrupt chunks on startup by @edsiper in #11886
• parser: Add IANA time_zone support for native timestamps by @cosmo0920 in #11913
• workflows: pin all actions to SHA by @patrick-stephens in #11908
• out_kinesis_streams: increase PUT_RECORDS_PAYLOAD_SIZE to 10MB by @ShelbyZ in #11848
• in_stdin: support stdin plugin on windows by @cosmo0920 in #11821
• in_ebpf: Implement dns trace by @cosmo0920 in #11735
• out_s3: Provide options for inactive chunks behavior by @cosmo0920 in #11816
• oauth: out_http: add user-agent option for oauth by @rja5 in #11830
• in_tail: fix offset_key value multiplied by 8 on Windows 64-bit by @zshuang0316 in #11893
• http_client_http2: bracket IPv6 authority hosts by @edsiper in #11922

New Contributors

• @TristanInSec made their first contribution in #11856
• @rja5 made their first contribution in #11830

Full Changelog: v5.0.6...v5.0.7

Fluent Bit 4.2.5

https://fluentbit.io/announcements/v4.2.5/

What's Changed

• release: update to 4.2.5 by @github-actions[bot] in #11697
• packaging: add support for Ubuntu 26.04 (backport to 4.2) by @patrick-stephens in #11803
• backport: env: add bash-style default value operator :- by @benjaminmueggenburg-serato in #11806
• out_chronicle: Support label and namespace mapping [Backport to 4.2] by @cosmo0920 in #11837
• input_thread: replace raw read() with pipe abstraction to fix crash [Backport to 4.2] by @cosmo0920 in #11860
• aws: compression: arrow: Set up proper block size [Backport to 4.2] by @cosmo0920 in #11861
• network: Handle braketed ipv6 addresses [backport to 4.2] by @cosmo0920 in #11862
• parser: Address wrong assignments of timezone at midnight [Backport to 4.2] by @cosmo0920 in #11863
• routing: fix issue with missing input alias [Backport to 4.2] by @cosmo0920 in #11864
• out_influxdb: plug tag keys failure on out influxdb [Backport to 4.2] by @cosmo0920 in #11865
• utils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size [Backport to 4.2] by @cosmo0920 in #11866
• filter_kubernetes: don't recycle connections in fetch_pod_service_map [Backport to 4.2] by @cosmo0920 in #11867
• in_tail: fix file append cleanup on failure [Backport to 4.2] by @cosmo0920 in #11871
• filter_kubernetes: destroy TLS session to prevent SSL object leak [Backport to 4.2] by @cosmo0920 in #11868
• filter_kubernetes: destroy upstream and TLS context on happy path exit [Backport to 4.2] by @cosmo0920 in #11869
• engine: ignore duplicate STOP to prevent shutdown spin [Backport to 4.2] by @cosmo0920 in #11870
• in_dummy: Use pre_run callback to fix crash path [Backport to 4.2] by @cosmo0920 in #11872
• out_logdna: remove promoted known keys [Backport to 4.2] by @cosmo0920 in #11873
• crypto: fix build with OPENSSL_NO_ENGINE [Backport to 4.2] by @cosmo0920 in #11874
• out_azure_logs_ingestion: Plug SEGV on termination [Backport to 4.2] by @cosmo0920 in #11875
• in_forward: handle unpacker allocation failure [Backport to 4.2] by @cosmo0920 in #11881
• tests: runtime: wait for tail truncate output [Backport to 4.2] by @cosmo0920 in #11882
• avro: Handle int64 values correctly [Backport to 4.2] by @cosmo0920 in #11892
• mp: fixed count when empty data by @edsiper in #11894
• in_collectd: reject parts with length < 4 and fix null-terminator OOB [Backport to 4.2] by @cosmo0920 in #11896
• in_forward: validate array size before accessing message mode fields [Backport to 4.2] by @cosmo0920 in #11897
• in_syslog: fix integer overflow in octet-counting length parser [Backport to 4.2] by @cosmo0920 in #11898
• in_mqtt: fix OOB read from hardcoded remaining length overhead [Backport to 4.2] by @cosmo0920 in #11899
• zstd: cap buffer at max instead of aborting on overshoot [Backport to 4.2] by @cosmo0920 in #11900
• snappy: read frame length as 3 bytes to avoid OOB at boundary [Backport to 4.2] by @cosmo0920 in #11901
• in_elasticsearch: check map size before accessing first entry [Backport to 4.2] by @cosmo0920 in #11902

Full Changelog: v4.2.4...v4.2.5

Fluent Bit 5.0.6

https://fluentbit.io/announcements/v5.0.6/

What's Changed

• release: update to 5.0.6 by @github-actions[bot] in #11785
• env: add bash-style default value operator :- by @benjaminmueggenburg-serato in #11787
• lib: cfl: upgrade to v0.7.1 by @edsiper in #11795
• out_kafka: partition OTLP logs by resource by @edsiper in #11786
• sds: general fixes for sds_cat() usage by @edsiper in #11805
• in_forward: handle unpacker allocation failure by @edsiper in #11809
• tests: prevent port binding failures in concurrent OTEL tests by @patrick-stephens in #11808
• engine: ignore duplicate STOP to prevent shutdown spin by @jinyongchoi in #11747
• out_azure_logs_ingestion: Plug SEGV on termination by @cosmo0920 in #11800
• packaging: add support for Ubuntu 26.04 by @patrick-stephens in #11802
• config: storage: Add total limit size of DLQ by @cosmo0920 in #11796
• http_server: harden listener and architecture by @edsiper in #11742
• tests: runtime: wait for tail truncate output by @edsiper in #11810
• in_tail: fix file append cleanup on failure by @sandy2008 in #11749
• in_tail: reconcile files after missed inotify events by @sandy2008 in #11750
• github: workflows: Restore ok-package-test trigger behavior by @cosmo0920 in #11820
• security: update policy for 5.0 and EOL 4.1 by @patrick-stephens in #11818
• sds: fix handling of cfl_sds return buffers after cfl upgrade by @edsiper in #11813
• tls: omit SNI for IP literal hosts by @edsiper in #11827
• http_server: spawn internal server in threaded mode by @edsiper in #11811

New Contributors

• @sandy2008 made their first contribution in #11749

Full Changelog: v5.0.5...v5.0.6

Fluent Bit 5.0.5

https://fluentbit.io/announcements/v5.0.5/

What's Changed

• in_node_exporter_metrics: Skip ipv6 metrics collection when disabled by @piwai in #11773
• out_logdna: remove promoted known keys by @lecaros in #11755
• in_ebpf: Implement exec trace by @cosmo0920 in #11714
• filter_kubernetes: destroy TLS session to prevent SSL object leak by @ShelbyZ in #11730
• aws: update support for additional regions by @ShelbyZ in #11733
• filter_kubernetes: make memory growth rigidly on filter k8s by @cosmo0920 in #11731
• out_s3: Handle otlp JSON format by @cosmo0920 in #11762
• filter_log_to_metrics: retry timer metric append by @edsiper in #11774
• crypto: fix build with OPENSSL_NO_ENGINE by @yselkowitz in #11771
• scripts: enable working runtime tests by @mabrarov in #11724
• opentelemetry: preserve otlp log resource grouping by @edsiper in #11781
• filter_kubernetes: destroy upstream and TLS context on happy path exit by @ShelbyZ in #11738
• out_forward: fix retain_metadata_in_forward_mode default value (true) by @edsiper in #11756
• release: update to 5.0.5 by @github-actions[bot] in #11767
• lib: cmetrics: upgrade to v2.1.3 by @edsiper in #11780
• input: fix threaded input conditional routing for logs by @edsiper in #11783

New Contributors

• @yselkowitz made their first contribution in #11771

Full Changelog: v5.0.4...v5.0.5

Fluent Bit 5.0.4

https://fluentbit.io/announcements/v5.0.4/

What's Changed

• out_influxdb: plug tag keys failure on out influxdb by @cosmo0920 in #11722
• routing: fix issue with missing input alias by @edsiper in #11717
• release: update to 5.0.4 by @github-actions[bot] in #11712
• tests: http_client_chunked: Plug SEGV occurence on macOS by @cosmo0920 in #11711
• in_http: add new /health endpoint by @edsiper in #10020
• out_loki: fix 'occured' -> 'occurred' in comment by @SAY-5 in #11725
• utils: fix integer divide-by-zero on Windows x64 in bytes_to_human_readable_size by @ashinde-ai in #11727
• in_dummy: Use pre_run callback to fix crash path by @cosmo0920 in #11753
• in_tail: drop redundant fstat() on event collection by @edsiper in #11692
• ml: ensure context is registered for REGEX type by @mirko-lazarevic in #11231
• in_forward: handle retain metadata in upstream conf by @cosmo0920 in #11736
• in_tcp: in_udp: Enhance of parser capabilities by @cosmo0920 in #11705
• http_client: Restore behavior for dummy http client by @cosmo0920 in #11710

New Contributors

• @SAY-5 made their first contribution in #11725
• @ashinde-ai made their first contribution in #11727

Full Changelog: v5.0.3...v5.0.4

Fluent Bit 5.0.3

https://fluentbit.io/announcements/v5.0.3/

What's Changed

• tests: integration: introduce in-tree integration test suite by @edsiper in #11663
• parser: Address wrong assignments of timezone at midnight by @cosmo0920 in #11677
• release: update to 5.0.3 by @github-actions[bot] in #11659
• workflows: Unify steps of downloading built macOS packages by @cosmo0920 in #11666
• record accessor: fix CFL root-key matching and container translation by @edsiper in #11673
• env: add new extended format to handle environment variables by @edsiper in #10862
• out_s3: fix retry_limit semantics and multipart upload memory leaks by @singholt in #11669
• lib: cmetrics: upgrade to v2.1.2 by @edsiper in #11685
• in_tail: harden db offset restore across restart by @edsiper in #11691
• oauth2: restore legacy context creation behavior by @edsiper in #11662
• network: Handle baraketed ipv6 addresses by @cosmo0920 in #11676
• in_opentelemetry: fix tag routing issue by @edsiper in #11701
• http_server: add settings for ingress queue by @edsiper in #11704
• out_syslog: address invalid configurations on in syslog by @cosmo0920 in #11706
• input_thread: replace raw read() with pipe abstraction to fix crash by @zshuang0316 in #11623
• workflows: Windows docker insufficient disk space fix by @mabrarov in #11671
• http_client: enhance parser in timeouts and protocol parsing by @edsiper in #11686
• in_ebpf: add tcp trace by @cosmo0920 in #11646

Full Changelog: v5.0.2...v5.0.3