V2.9

Grafana Labs is excited to announce the release of Loki 2.9.0 Here's a summary of new enhancements and important fixes.

For a full list of all changes and fixes, refer to the CHANGELOG.

Features and enhancements

• Structured metadata: The Structured Metadata feature, which was introduced as experimental in release 2.9.0, is generally available as of release 2.9.4.

• Query Language Improvements: Several improvements to the query language that speed up line parsing and regex matching. PR #8646, PR #8659, PR #8724, PR #8734, PR #8739, PR #8763, PR #8890, PR #8914

• Remote rule evaluation: Rule evaluation can now be handled by queriers to improve speed. PR #8744 PR #8848

• Multi-store Index support: Loki now supports reading/writing indexes to multiple object stores which enables the use of different storage buckets across periods for storing index. PR #7754, PR #7447

• New volume and volume_range endpoints: Two new endoints, index/volume and index/volume_range, have been added to Loki. They return aggregate volume information from the TSDB index for all streams matching a provided stream selector. This feature was introduced via multiple PRs, including PR #9988, PR #9966, PR #9833, PR #9832, PR #9776, PR #9762, PR #9704, PR #10248, PR #10099, PR #10076, PR #10047 and PR #10045

• New Storage Client: Add support for IBM cloud object storage as storage client. PR #8826

• Block queries by hash: Queries can now be blocked by a query hash. PR #8953

• logfmt stage improvements: logfmt parser now performs non-strict parsing by default which helps scan semi-structured log lines. PR #9626

• Deprecations

  • Legacy index and chunk stores that are not "single store" (such as tsdb, boltdb-shipper) are deprecated. These storage backends are Cassandra (cassandra), DynamoDB (aws, aws-dynamo), BigTable (bigtable, bigtable-hashed), GCP (gcp, gcp-columnkey), and gRPC (grpc). See Configure storage for more information.
  • The table-manager target is deprecated, because it is not used by "single store" implementations.
  • The -boltdb.shipper.compactor.* CLI flags are deprecated in favor of -compactor.*.
  • The -ingester.unordered-writes CLI flag is deprecated and will always default to true in the next major release.
  • For the full list of deprecations, see CHANGELOG.md

Bug fixes

2.9.17 (2025-11-07)

• deps: Bump Alpine version (#19732) (ffcd570).

2.9.16 (2025-11-05)

• WAL: Backport wal corruption fix to 2.9.x (#18229) (77fc888).
• deps: Upgrade Go and Alpine versions (#19703) (be0ac95).

2.9.15 (2025-06-09)

• ci: Pull in latest 2.9-specific release code (#18019) (7b805ba).
• deps: Update module golang.org/x/net to v0.38.0 [security] (release-2.9.x) (#17275) (6297508).

2.9.14 (2025-04-15)

• deps: Upgrade golang.org/x/oauth2 to 0.27.0 (#16960) (fb70d03).
• deps: Fix Loki CVEs for 2.9 (#17065) (5faccce).
• deps: Remove remaining replaces to fix CVEs for 2.9.x (#17095) (26fcedb).
• deps: Upgrade docker/docker used by 2.9.x (#17091) (914adec).
• deps: Upgrade k8s.io/api used by Loki 2.9.x (#17093) (0da39f4).
• deps: Upgrade packages used by docker/docker for 2.9.x (#17074) (2c8da3d).

2.9.13 (2025-03-12)

• deps: Loki 2.9.x Bump Alpine and Go versions (#16294) (f2deeb7).

2.9.12 (2025-02-13)

• deps: CVE updates for Loki 2.9.11 (#15647) (8447402).

2.9.11 (2024-12-04)

• docker: Update Docker to 23.0.15 (#14425).
• lamba-promtail: Lamba-promtail updates, some of which address CVEs(#14105).
• promtail: Switch Promtail base image from Debian to Ubuntu to fix critical security issues (#15195).
• storage: Fix bug in cache of the index object client(#10585).

2.9.10 (2024-08-09)

• Update dependencies versions to remove CVE (#13835) (567bef2).

2.9.9 (2024 -07-04)

• Ingester: Add ingester_chunks_flush_failures_total 12925.
• Ingester: Add backoff to flush op 13140.

2.9.8 (2024-05-03)

• deps: update module golang.org/x/net to v0.23.0 [security] (release-2.9.x) (#12865) (94e0029).

2.9.7 (2024-04-10)

• Bump go to 1.21.9 and build image to 0.33.1 (#12542) (efc4d2f)

2.9.6 (2024-03-21)

• Fixed Promtail failures connecting to local Loki installation (#12184) (8585e35).
• Fixed an issue when using IPv6 where IPv6 addresses were not properly joined with ports. Use net.JoinHostPort to support IPv6 addresses. (#10650) (#11870) (7def3b4).
• Updated google.golang.org/protobuf to v1.33.0 (#12269) (#12287) (3186520).

For a full list of all changes and fixes, refer to the CHANGELOG.

2.9.5 (2024-02-28)

• Bumped base images and Go dependencies to address CVEs (#12092) (eee3598).

For a full list of all changes and fixes, refer to the CHANGELOG.

2.9.4 (2024-01-24)

• Fixed a couple of data races that can cause panics due to concurrent read-write access of tenant configs.
• Fixed a bug in the log results cache.
• Fixed the cache to atomically check background cache size limit correctly.
• Fixed the discrepancy between the semantics of logs and metrics queries.
• Fixed promtail default scrape config causing CPU and memory load.
• Updated golang.org/x/crypto to v0.18.0.

For a full list of all changes and fixes, refer to the CHANGELOG.

2.9.3 (2023-12-11)

• Upgraded otelhttp from 0.40.0 -> 0.44.0 and base alpine image from 3.18.3 -> 3.18.5 to fix a few CVES (CVE-2023-45142, CVE-2022-21698, CVE-2023-5363).
• Fixed querying ingester for label values with a matcher (previously didn't respect the matcher).
• Ensured all lifecycler cfgs ref a valid IPv6 addr and port combination.

For a full list of all changes and fixes, refer to the CHANGELOG.

2.9.2 (2023-10-16)

• Upgraded go to v1.21.3, golang.org/x/net to v0.17.0 and grpc-go to v1.56.3 to patch CVE-2023-39325 / CVE-2023-44487

For a full list of all changes and fixes, refer to the CHANGELOG.

2.9.1 (2023-09-14)

• Updated Docker base images to mitigate security vulnerability CVE-2022-48174
• Fixed bugs in indexshipper (tsdb, boltdb-shipper) that could result in not showing all ingested logs in query results.

For a full list of all changes and fixes, refer to the CHANGELOG.