Go Daily Digest — 2026-06-18
Prometheus 3.5.4 / 2026-06-17 — Prometheus
This release fixes multiple security issues. [SECURITY] STACKIT SD: Fix secrets being exposed in plaintext via /-/config endpoint. Thanks to @August829 and @Phaxma for reporting. GHSA-39j6-789q-qxvh #18650 [SECURITY] Dependencies: Bump golang.org/x/net to v0.55.0 and OpenTelemetry to v1.43.0 to fix reported CVEs (GO-2026-5026, GO-2026-4918, GO-2026-4985). #18934 [SECURITY] UI: Bump mantine-ui dependencies (react-router-dom, vitest, vite, postcss) to their patched versions to resolve security…
Prometheus v0.305.4 — Prometheus
v0.305.4
Terraform v1.16.0-alpha20260617 — Terraform
1.16.0-alpha20260617 (June 17, 2026) NEW FEATURES: Store PlannedPrivate data for providers (#37986) New store block in terraform_data that can handle ephemeral and sensitive values (#38298) Providers can now use nested blocks as computed values (#38305) import: add support for import blocks inside modules (#38352) We now produce builds for Linux s390x (zLinux) (#38384) workspace: The workspace list command can now produce machine-readable output when supplied with the -json flag (#38397)…