Prometheus 3.13.4 / 2026-09-29 — Prometheus

[SECURITY] Bump google.golang.org/grpc to v1.83.1 to fix HTTP/2 DATA frame fragmentation memory exhaustion (GO-2026-6348). #19834 [SECURITY] UI: Update vulnerable npm dependencies. #19834 [BUGFIX] Agent: Ignore unknown WAL record types to allow rolling back from newer versions. #19814 [BUGFIX] Federation: Fix corruption of float native histograms. #19679 [BUGFIX] Scrape: Fix failing scrapes of protobuf float histograms with zero sample, zero and bucket counts, such as the result of recording…

Terraform v1.16.5 — Terraform

1.16.5 (September 30, 2026) BUG FIXES: Fixed a crash that happens when a tainted instance state is seen without a valid status (#39287) resource-identity: fixed an issue where resource identity could be nil during delete (#39285)