[SECURITY] Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI.
[CHANGE] Telegram Integration: api_url is now optional. #2981
[CHANGE] Telegram Integration: ParseMode default is now HTML instead of MarkdownV2. #2981
[CHANGE] Webhook Integration: url is now marked as a secret. It will no longer show up in the logs as clear-text. #3228
[CHANGE] Metrics: New label reason for alertmanager_notifications_failed_total metric to indicate the type of error of the alert delivery. #3094#3307
[FEATURE] Clustering: New flag --cluster.label, to help to block any traffic that is not meant for the cluster. #3354
[FEATURE] Integrations: Add Microsoft Teams as a supported integration. #3324
[ENHANCEMENT] Telegram Integration: Support bot_token_file for loading this secret from a file. #3226
[ENHANCEMENT] Webhook Integration: Support url_file for loading this secret from a file. #3223
[ENHANCEMENT] Webhook Integration: Leading and trailing white space is now removed for the contents of url_file. #3363
[ENHANCEMENT] Pushover Integration: Support options device and sound (sound was previously supported but undocumented). #3318
[ENHANCEMENT] Pushover Integration: Support user_key_file and token_file for loading this secret from a file. #3200
[ENHANCEMENT] Slack Integration: Support errors wrapped in successful (HTTP status code 200) responses. #3121
[ENHANCEMENT] API: Add CORS and Cache-Control HTTP headers to all version 2 API routes. #3195
[ENHANCEMENT] UI: Receiver name is now visible as part of the alerts page. #3289
[ENHANCEMENT] Templating: Better default text when using {{ .Annotations }} and {{ .Labels }}. #3256
[ENHANCEMENT] Templating: Introduced a new function trimSpace which removes leading and trailing white spaces. #3223
[ENHANCEMENT] CLI: amtool silence query now supports the --id flag to query an individual silence. #3241
[ENHANCEMENT] Metrics: Introduced alertmanager_nflog_maintenance_total and alertmanager_nflog_maintenance_errors_total to monitor maintenance of the notification log. #3286
[ENHANCEMENT] Metrics: Introduced alertmanager_silences_maintenance_total and alertmanager_silences_maintenance_errors_total to monitor maintenance of silences. #3285
[ENHANCEMENT] Logging: Log GroupKey and alerts on alert delivery when using debug mode. #3438
[BUGFIX] Configuration: Empty list of receivers and inhibit_rules would cause the alertmanager to crash. #3209
[BUGFIX] Templating: Fixed a race condition when using the title function. It is now race-safe. #3278
[BUGFIX] API: Fixed duplicate receiver names in the api/v2/receivers API endpoint. #3338
[BUGFIX] API: Attempting to delete a silence now returns the correct status code, 404 instead of 500. #3352
[BUGFIX] Clustering: Fixes a panic when tls_client_config is empty. #3443
0.26.0-rc.0 / 2023-08-17
[CHANGE] Telegram Integration: api_url is now optional. #2981
[CHANGE] Telegram Integration: ParseMode default is now HTML instead of MarkdownV2. #2981
[CHANGE] Webhook Integration: url is now marked as a secret. It will no longer show up in the logs as clear-text. #3228
[CHANGE] Metrics: New label reason for alertmanager_notifications_failed_total metric to indicate the type of error of the alert delivery. #3094#3307
[FEATURE] Clustering: New flag --cluster.label, to help to block any traffic that is not meant for the cluster. #3354
[FEATURE] Integrations: Add Microsoft Teams as a supported integration. #3324
[ENHANCEMENT] Telegram Integration: Support bot_token_file for loading this secret from a file. #3226
[ENHANCEMENT] Webhook Integration: Support url_file for loading this secret from a file. #3223
[ENHANCEMENT] Webhook Integration: Leading and trailing white space is now removed for the contents of url_file. #3363
[ENHANCEMENT] Pushover Integration: Support options device and sound (sound was previously supported but undocumented). #3318
[ENHANCEMENT] Pushover Integration: Support user_key_file and token_file for loading this secret from a file. #3200
[ENHANCEMENT] Slack Integration: Support errors wrapped in successful (HTTP status code 200) responses. #3121
[ENHANCEMENT] API: Add CORS and Cache-Control HTTP headers to all version 2 API routes. #3195
[ENHANCEMENT] UI: Receiver name is now visible as part of the alerts page. #3289
[ENHANCEMENT] Templating: Better default text when using {{ .Annotations }} and {{ .Labels }}. #3256
[ENHANCEMENT] Templating: Introduced a new function trimSpace which removes leading and trailing white spaces. #3223
[ENHANCEMENT] CLI: amtool silence query now supports the --id flag to query an individual silence. #3241
[ENHANCEMENT] Metrics: Introduced alertmanager_nflog_maintenance_total and alertmanager_nflog_maintenance_errors_total to monitor maintenance of the notification log. #3286
[ENHANCEMENT] Metrics: Introduced alertmanager_silences_maintenance_total and alertmanager_silences_maintenance_errors_total to monitor maintenance of silences. #3285
[ENHANCEMENT] Logging: Log GroupKey and alerts on alert delivery when using debug mode. #3438
[BUGFIX] Configuration: Empty list of receivers and inhibit_rules would cause the alertmanager to crash. #3209
[SECURITY] Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI. CVE-2023-40577
[CHANGE] Telegram Integration: api_url is now optional. #2981
[CHANGE] Telegram Integration: ParseMode default is now HTML instead of MarkdownV2. #2981
[CHANGE] Webhook Integration: url is now marked as a secret. It will no longer show up in the logs as clear-text. #3228
[CHANGE] Metrics: New label reason for alertmanager_notifications_failed_total metric to indicate the type of error of the alert delivery. #3094#3307
[FEATURE] Clustering: New flag --cluster.label, to help to block any traffic that is not meant for the cluster. #3354
[FEATURE] Integrations: Add Microsoft Teams as a supported integration. #3324
[ENHANCEMENT] Telegram Integration: Support bot_token_file for loading this secret from a file. #3226
[ENHANCEMENT] Webhook Integration: Support url_file for loading this secret from a file. #3223
[ENHANCEMENT] Webhook Integration: Leading and trailing white space is now removed for the contents of url_file. #3363
[ENHANCEMENT] Pushover Integration: Support options device and sound (sound was previously supported but undocumented). #3318
[ENHANCEMENT] Pushover Integration: Support user_key_file and token_file for loading this secret from a file. #3200
[ENHANCEMENT] Slack Integration: Support errors wrapped in successful (HTTP status code 200) responses. #3121
[ENHANCEMENT] API: Add CORS and Cache-Control HTTP headers to all version 2 API routes. #3195
[ENHANCEMENT] UI: Receiver name is now visible as part of the alerts page. #3289
[ENHANCEMENT] Templating: Better default text when using {{ .Annotations }} and {{ .Labels }}. #3256
[ENHANCEMENT] Templating: Introduced a new function trimSpace which removes leading and trailing white spaces. #3223
[ENHANCEMENT] CLI: amtool silence query now supports the --id flag to query an individual silence. #3241
[ENHANCEMENT] Metrics: Introduced alertmanager_nflog_maintenance_total and alertmanager_nflog_maintenance_errors_total to monitor maintenance of the notification log. #3286
[ENHANCEMENT] Metrics: Introduced alertmanager_silences_maintenance_total and alertmanager_silences_maintenance_errors_total to monitor maintenance of silences. #3285
[ENHANCEMENT] Logging: Log GroupKey and alerts on alert delivery when using debug mode. #3438
[BUGFIX] Configuration: Empty list of receivers and inhibit_rules would cause the alertmanager to crash. #3209
[BUGFIX] Templating: Fixed a race condition when using the title function. It is now race-safe. #3278
[BUGFIX] API: Fixed duplicate receiver names in the api/v2/receivers API endpoint. #3338
[BUGFIX] API: Attempting to delete a silence now returns the correct status code, 404 instead of 500. #3352
[BUGFIX] Clustering: Fixes a panic when tls_client_config is empty. #3443
[BUGFIX] Fix stored XSS via the /api/v1/alerts endpoint in the Alertmanager UI.
0.25.0 / 2022-12-22
[CHANGE] Change the default parse_mode value from MarkdownV2 to HTML for Telegram. #2981
[CHANGE] Make api_url field optional for Telegram. #2981
[CHANGE] Use CanonicalMIMEHeaderKey instead of TitleCasing for email headers. #3080
[CHANGE] Reduce the number of notification logs broadcasted between peers by expiring them after (2 * repeat interval). #2982
[FEATURE] Add proxy_url support for OAuth2 in HTTP client configuration. #3010
[FEATURE] Reload TLS certificate and key from disk when updated. #3168
[ENHANCEMENT] Add --web.systemd-socket flag to systemd socket activation listeners instead of port listeners (Linux only). #3140
[ENHANCEMENT] Add enable_http2 support in HTTP client configuration. #3010
[ENHANCEMENT] Add min_version support to select the minimum TLS version in HTTP client configuration. #3010
[ENHANCEMENT] Add max_version support to select the maximum TLS version in HTTP client configuration. #3168
[ENHANCEMENT] Emit warning logs when truncating messages in notifications. #3145
[ENHANCEMENT] Add --data.maintenance-interval flag to define the interval between the garbage collection and snapshotting to disk of the silences and the notification logs. #2849
[ENHANCEMENT] Support HEAD method for the /-/healty and /-/ready endpoints. #3039
[ENHANCEMENT] Truncate messages with the … ellipsis character instead of the 3-dots string .... #3072
[ENHANCEMENT] Add support for reading global and local SMTP passwords from files. #3038
[ENHANCEMENT] Add Location support to time intervals. #2782
... (truncated)
Commits
d7b4f0c Merge pull request #3479 from prometheus/cut-0.26-main
c238d88 Fast Forward the main branch to align with 0.26
b8f6039 Check the validity of the generatorURL field
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/prometheus/alertmanager from 0.24.0 to 0.26.0.
Release notes
Sourced from github.com/prometheus/alertmanager's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/alertmanager's changelog.
... (truncated)
Commits
d7b4f0c
Merge pull request #3479 from prometheus/cut-0.26-mainc238d88
Fast Forward themain
branch to align with 0.26b8f6039
Check the validity of the generatorURL field6fe1a24
Fix year in 0.26.0-rc.0 entry (#3468)3ea2f24
Release: fix the version formatting (#3467)3f7401a
Revert "Release: Fix version format (#3465)" (#3466)b3e3c89
Release: Fix version format (#3465)a0375ae
Cut v0.26.0 rc.0 (#3447)e1e5992
Update docs for slack_config (#3455)94625df
Treat error response payloads from Slack as errors (#3121)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show