build(deps): bump github/codeql-action from 4.35.3 to 4.36.1

Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.36.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](e46ed2cbd0...87557b9c84) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
app/vmctl: fix edit link in vmctl's README
2026-06-23 18:48:03 +03:00 · 2026-06-23 04:12:53 +00:00 · 2026-06-22 18:01:23 +03:00 · 2026-06-22 16:10:30 +03:00 · 2026-06-22 16:06:51 +03:00 · 2026-06-22 13:54:40 +02:00
38 changed files with 194 additions and 685 deletions
--- a/.github/workflows/codeql-analysis-go.yml
+++ b/.github/workflows/codeql-analysis-go.yml
@@ -54,14 +54,14 @@ jobs:
          restore-keys: go-artifacts-${{ runner.os }}-codeql-analyze-${{ steps.go.outputs.go-version }}-

      - name: Initialize CodeQL
-        uses: github/codeql-action/init@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
+        uses: github/codeql-action/init@87557b9c84dde89fdd9b10e88954ac2f4248e463  # v4.36.1
        with:
          languages: go

      - name: Autobuild
-        uses: github/codeql-action/autobuild@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
+        uses: github/codeql-action/autobuild@87557b9c84dde89fdd9b10e88954ac2f4248e463  # v4.36.1

      - name: Perform CodeQL Analysis
-        uses: github/codeql-action/analyze@e46ed2cbd01164d986452f91f178727624ae40d7  # v4.35.3
+        uses: github/codeql-action/analyze@87557b9c84dde89fdd9b10e88954ac2f4248e463  # v4.36.1
        with:
          category: 'language:go'
--- a/app/victoria-metrics/main.go
+++ b/app/victoria-metrics/main.go
@@ -41,12 +41,6 @@ var (
 		"limit is reached; see also -search.maxQueryDuration")
 )

-// custom api help links [["/api","doc"]] without http.pathPrefix.
-var customAPIPathList = [][]string{
-	{"/graph/explore", "explore metrics grafana page"},
-	{"/graph/d/prometheus-advanced/advanced-data-exploration", "PMM grafana dashboard"},
-}
-
 func getDefaultMaxConcurrentRequests() int {
 	// A single request can saturate all the CPU cores, so there is no sense
 	// in allowing higher number of concurrent requests - they will just contend
@@ -154,10 +148,6 @@ func requestHandler(w http.ResponseWriter, r *http.Request) bool {
 			{"api/v1/status/active_queries", "active queries"},
 			{"-/reload", "reload configuration"},
 		})
-		for _, p := range customAPIPathList {
-			p, doc := p[0], p[1]
-			fmt.Fprintf(w, "<a href=%q>%s</a> - %s<br/>", p, p, doc)
-		}
 		return true
 	}
 	if vminsert.RequestHandler(w, r) {
--- a/app/vmctl/README.md
+++ b/app/vmctl/README.md
@@ -1,3 +1,3 @@
 See vmctl docs [here](https://docs.victoriametrics.com/victoriametrics/vmctl/).

-vmctl docs can be edited at [docs/vmctl.md](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/victoriametrics/vmctl.md).
+vmctl docs can be edited at [docs/vmctl.md](https://github.com/VictoriaMetrics/VictoriaMetrics/blob/master/docs/victoriametrics/vmctl/vmctl.md).
--- a/app/vmselect/netstorage/netstorage.go
+++ b/app/vmselect/netstorage/netstorage.go
@@ -17,7 +17,6 @@ import (

 	"github.com/VictoriaMetrics/VictoriaMetrics/app/vmselect/searchutil"
 	"github.com/VictoriaMetrics/VictoriaMetrics/app/vmstorage"
-	"github.com/VictoriaMetrics/VictoriaMetrics/app/vmstorage/promdb"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/bytesutil"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/cgroup"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/fasttime"
@@ -321,21 +320,14 @@ func (rss *Results) runParallel(qt *querytracer.Tracer, f func(rs *Result, worke
 }

 var (
-	rowsReadPerSeries            = metrics.NewHistogram(`vm_rows_read_per_series`)
-	rowsReadPerQuery             = metrics.NewHistogram(`vm_rows_read_per_query`)
-	seriesReadPerQuery           = metrics.NewHistogram(`vm_series_read_per_query`)
-	seriesPrometheusReadPerQuery = metrics.NewHistogram(`vm_promdb_series_read_per_query`)
+	rowsReadPerSeries  = metrics.NewHistogram(`vm_rows_read_per_series`)
+	rowsReadPerQuery   = metrics.NewHistogram(`vm_rows_read_per_query`)
+	seriesReadPerQuery = metrics.NewHistogram(`vm_series_read_per_query`)
 )

 type packedTimeseries struct {
 	metricName string
 	brs        []blockRef
-	pd         *promData
-}
-
-type promData struct {
-	values     []float64
-	timestamps []int64
 }

 type unpackWork struct {
@@ -439,21 +431,9 @@ func (pts *packedTimeseries) Unpack(dst *Result, tbf *tmpBlocksFile, tr storage.
 		putSortBlocksHeap(sbh)
 		return err
 	}
-	if pts.pd != nil {
-		// Add data from Prometheus to dst.
-		// It usually has smaller timestamps than the data from sbs, so put it first.
-		dst.Values = append(dst.Values, pts.pd.values...)
-		dst.Timestamps = append(dst.Timestamps, pts.pd.timestamps...)
-	}
-	dedupInterval := storage.GetDedupInterval(tr.MinTimestamp)
+	dedupInterval := storage.GetDedupInterval()
 	mergeSortBlocks(dst, sbh, dedupInterval)
 	putSortBlocksHeap(sbh)
-	if pts.pd != nil {
-		if !sort.IsSorted(dst) {
-			sort.Sort(dst)
-		}
-		pts.pd = nil
-	}
 	return nil
 }

@@ -562,27 +542,6 @@ func (pts *packedTimeseries) unpackTo(dst []*sortBlock, tbf *tmpBlocksFile, tr s
 	return dst, firstErr
 }

-// sort.Interface implementation for Result
-
-// Len implements sort.Interface
-func (r *Result) Len() int {
-	return len(r.Timestamps)
-}
-
-// Less implements sort.Interface
-func (r *Result) Less(i, j int) bool {
-	timestamps := r.Timestamps
-	return timestamps[i] < timestamps[j]
-}
-
-// Swap implements sort.Interface
-func (r *Result) Swap(i, j int) {
-	timestamps := r.Timestamps
-	values := r.Values
-	timestamps[i], timestamps[j] = timestamps[j], timestamps[i]
-	values[i], values[j] = values[j], values[i]
-}
-
 func getSortBlock() *sortBlock {
 	v := sbPool.Get()
 	if v == nil {
@@ -809,15 +768,6 @@ func LabelNames(qt *querytracer.Tracer, sq *storage.SearchQuery, maxLabelNames i
 	if err != nil {
 		return nil, fmt.Errorf("error during labels search on time range: %w", err)
 	}
-
-	// Merge labels obtained from Prometheus storage.
-	promLabels, err := promdb.GetLabelNamesOnTimeRange(sq.GetTimeRange(), deadline)
-	if err != nil {
-		return nil, fmt.Errorf("cannot obtain labels from Prometheus storage: %w", err)
-	}
-	qt.Printf("get %d label names from Prometheus storage", len(promLabels))
-	labels = mergeStrings(labels, promLabels)
-
 	// Sort labels like Prometheus does
 	sort.Strings(labels)
 	qt.Printf("sort %d labels", len(labels))
@@ -876,44 +826,14 @@ func LabelValues(qt *querytracer.Tracer, labelName string, sq *storage.SearchQue
 	}
 	labelValues, err := vmstorage.VMSelectAPI.LabelValues(qt, sq, labelName, maxLabelValues, deadline.Deadline())
 	if err != nil {
-		return nil, fmt.Errorf("error during label values search on time range: %w", err)
+		return nil, fmt.Errorf("error during label values search on time range for labelName=%q: %w", labelName, err)
 	}
-
-	// Merge label values obtained from Prometheus storage.
-	promLabelValues, err := promdb.GetLabelValuesOnTimeRange(labelName, sq.GetTimeRange(), deadline)
-	if err != nil {
-		return nil, fmt.Errorf("cannot obtain label values on time range for %q from Prometheus storage: %w", labelName, err)
-	}
-	qt.Printf("get %d label values from Prometheus storage", len(promLabelValues))
-	labelValues = mergeStrings(labelValues, promLabelValues)
-
 	// Sort labelValues like Prometheus does
 	sort.Strings(labelValues)
 	qt.Printf("sort %d label values", len(labelValues))
 	return labelValues, nil
 }

-func mergeStrings(a, b []string) []string {
-	if len(a) == 0 {
-		return b
-	}
-	if len(b) == 0 {
-		return a
-	}
-	m := make(map[string]struct{}, len(a)+len(b))
-	for _, s := range a {
-		m[s] = struct{}{}
-	}
-	for _, s := range b {
-		m[s] = struct{}{}
-	}
-	result := make([]string, 0, len(m))
-	for s := range m {
-		result = append(result, s)
-	}
-	return result
-}
-
 // GetMetricsMetadata returns time series metric names metadata for the given args
 func GetMetricsMetadata(qt *querytracer.Tracer, limit int, metricName string) ([]*metricsmetadata.Row, error) {
 	qt = qt.NewChild("get metrics metadata: limit=%d, metric_name=%q", limit, metricName)
@@ -1273,26 +1193,6 @@ func ProcessSearchQuery(qt *querytracer.Tracer, sq *storage.SearchQuery, deadlin
 	}
 	qt.Printf("fetch unique series=%d, blocks=%d, samples=%d, bytes=%d", len(m), blocksRead, samples, tbf.Len())

-	// Fetch data from promdb.
-	pm := make(map[string]*promData)
-	err = promdb.VisitSeries(sq, deadline, func(metricName []byte, values []float64, timestamps []int64) {
-		pd := pm[string(metricName)]
-		if pd == nil {
-			if _, ok := m[string(metricName)]; !ok {
-				orderedMetricNames = append(orderedMetricNames, string(metricName))
-			}
-			pd = &promData{}
-			pm[string(metricName)] = pd
-		}
-		pd.values = append(pd.values, values...)
-		pd.timestamps = append(pd.timestamps, timestamps...)
-	})
-	if err != nil {
-		putTmpBlocksFile(tbf)
-		vmstorage.PutSearch(sr)
-		return nil, fmt.Errorf("error when searching in Prometheus data: %w", err)
-	}
-	seriesPrometheusReadPerQuery.Update(float64(len(pm)))
 	var rss Results
 	rss.tr = sq.GetTimeRange()
 	rss.deadline = deadline
@@ -1301,7 +1201,6 @@ func ProcessSearchQuery(qt *querytracer.Tracer, sq *storage.SearchQuery, deadlin
 		pts[i] = packedTimeseries{
 			metricName: metricName,
 			brs:        brssPool[m[metricName]].brs,
-			pd:         pm[metricName],
 		}
 	}
 	rss.packedTimeseries = pts
--- a/app/vmstorage/main.go
+++ b/app/vmstorage/main.go
@@ -10,7 +10,6 @@ import (
 	"strings"
 	"time"

-	"github.com/VictoriaMetrics/VictoriaMetrics/app/vmstorage/promdb"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/fasttime"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/flagutil"
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/fs"
@@ -102,9 +101,6 @@ var (

 	metadataStorageSize = flagutil.NewBytes("storage.maxMetadataStorageSize", 0, "Overrides max size for metrics metadata entries in-memory storage. "+
 		"If set to 0 or a negative value, defaults to 1% of allowed memory.")
-
-	downsamplingPeriods = flagutil.NewArrayString("downsampling.period", "Comma-separated downsampling periods in the format 'offset:period'. For example, '30d:10m' instructs "+
-		"to leave a single sample per 10 minutes for samples older than 30 days. See https://docs.victoriametrics.com/#downsampling for details")
 )

 func DataPath() string {
@@ -113,12 +109,7 @@ func DataPath() string {

 // Init initializes vmstorage.
 func Init(vmselectMaxConcurrentRequests int, resetCacheIfNeeded func(mrs []storage.MetricRow)) {
-
-	err := storage.SetDownsamplingPeriods(*downsamplingPeriods, *minScrapeInterval)
-	if err != nil {
-		logger.Fatalf("cannot parse -downsampling.period: %s", err)
-	}
-
+	storage.SetDedupInterval(*minScrapeInterval)
 	storage.SetDataFlushInterval(*inmemoryDataFlushInterval)
 	storage.LegacySetRetentionTimezoneOffset(*retentionTimezoneOffset)
 	storage.SetFreeDiskSpaceLimit(minFreeDiskSpaceBytes.N)
@@ -173,8 +164,6 @@ func Init(vmselectMaxConcurrentRequests int, resetCacheIfNeeded func(mrs []stora
 	logger.Infof("successfully opened storage %q in %.3f seconds; partsCount: %d; blocksCount: %d; rowsCount: %d; sizeBytes: %d",
 		*storageDataPath, time.Since(startTime).Seconds(), partsCount, blocksCount, rowsCount, sizeBytes)

-	promdb.Init(retentionPeriod.Milliseconds())
-
 	// register storage metrics
 	storageMetrics = metrics.NewSet()
 	storageMetrics.RegisterMetricsWriter(vmStorage.writeStorageMetrics)
@@ -212,7 +201,6 @@ func Stop() {

 	logger.Infof("gracefully closing the storage at %s", *storageDataPath)
 	startTime := time.Now()
-	promdb.MustClose()
 	vmStorage.Stop()
 	logger.Infof("successfully closed the storage in %.3f seconds", time.Since(startTime).Seconds())

--- a/app/vmstorage/promdb/promdb.go
+++ b/app/vmstorage/promdb/promdb.go
@@ -1,268 +0,0 @@
-package promdb
-
-import (
-	"context"
-	"flag"
-	"fmt"
-	"log/slog"
-	"time"
-
-	"github.com/oklog/ulid/v2"
-	"github.com/prometheus/prometheus/model/labels"
-	promstorage "github.com/prometheus/prometheus/storage"
-	"github.com/prometheus/prometheus/tsdb"
-	"github.com/prometheus/prometheus/tsdb/chunkenc"
-
-	"github.com/VictoriaMetrics/VictoriaMetrics/app/vmselect/searchutil"
-	"github.com/VictoriaMetrics/VictoriaMetrics/lib/logger"
-	"github.com/VictoriaMetrics/VictoriaMetrics/lib/storage"
-)
-
-var prometheusDataPath = flag.String("prometheusDataPath", "", "Optional path to readonly historical Prometheus data")
-
-var prometheusRetentionMsecs int64
-
-// Init must be called after flag.Parse and before using the package.
-//
-// See also MustClose.
-func Init(retentionMsecs int64) {
-	if promDB != nil {
-		logger.Fatalf("BUG: promdb.Init is called multiple times without promdb.MustClose call")
-	}
-	prometheusRetentionMsecs = retentionMsecs
-	if *prometheusDataPath == "" {
-		return
-	}
-	l := slog.New(slog.Default().Handler())
-	opts := tsdb.DefaultOptions()
-	opts.RetentionDuration = retentionMsecs
-
-	// Set max block duration to 10% of retention period or 31 days
-	// according to https://prometheus.io/docs/prometheus/latest/storage/#compaction
-	maxBlockDuration := int64((31 * 24 * time.Hour) / time.Millisecond)
-	if maxBlockDuration > retentionMsecs/10 {
-		maxBlockDuration = retentionMsecs / 10
-	}
-	if maxBlockDuration < opts.MinBlockDuration {
-		maxBlockDuration = opts.MinBlockDuration
-	}
-	opts.MaxBlockDuration = maxBlockDuration
-
-	// Custom delete function is needed, because Prometheus by default doesn't delete
-	// blocks outside the retention if no new blocks are created with samples with the current timestamps.
-	// See https://github.com/prometheus/prometheus/blob/997bb7134fcfd7279f250e183e78681e48a56aff/tsdb/db.go#L1116
-	opts.BlocksToDelete = func(blocks []*tsdb.Block) map[ulid.ULID]struct{} {
-		m := make(map[ulid.ULID]struct{})
-		minRetentionTime := time.Now().Unix()*1000 - retentionMsecs
-		for _, block := range blocks {
-			meta := block.Meta()
-			// delete block marked for deletion by compaction code.
-			if meta.Compaction.Deletable {
-				m[meta.ULID] = struct{}{}
-				continue
-			}
-			if block.MaxTime() < minRetentionTime {
-				m[meta.ULID] = struct{}{}
-			}
-		}
-		return m
-	}
-	pdb, err := tsdb.Open(*prometheusDataPath, l, nil, opts, nil)
-	if err != nil {
-		logger.Panicf("FATAL: cannot open Prometheus data at -prometheusDataPath=%q: %s", *prometheusDataPath, err)
-	}
-	promDB = pdb
-	logger.Infof("successfully opened historical Prometheus data at -prometheusDataPath=%q with retentionMsecs=%d", *prometheusDataPath, retentionMsecs)
-}
-
-// MustClose must be called on graceful shutdown.
-//
-// Package functionality cannot be used after this call.
-func MustClose() {
-	if *prometheusDataPath == "" {
-		return
-	}
-	if promDB == nil {
-		logger.Panicf("BUG: promdb.MustClose is called without promdb.Init call")
-	}
-	if err := promDB.Close(); err != nil {
-		logger.Panicf("FATAL: cannot close promDB: %s", err)
-	}
-	promDB = nil
-	logger.Infof("successfully closed historical Prometheus data at -prometheusDataPath=%q", *prometheusDataPath)
-}
-
-var promDB *tsdb.DB
-
-// GetLabelNamesOnTimeRange returns label names.
-func GetLabelNamesOnTimeRange(tr storage.TimeRange, deadline searchutil.Deadline) ([]string, error) {
-	if *prometheusDataPath == "" {
-		return nil, nil
-	}
-	d := time.Unix(int64(deadline.Deadline()), 0)
-	ctx, cancel := context.WithDeadline(context.Background(), d)
-	defer cancel()
-	q, err := promDB.Querier(tr.MinTimestamp, tr.MaxTimestamp)
-	if err != nil {
-		return nil, err
-	}
-	defer mustCloseQuerier(q)
-
-	names, _, err := q.LabelNames(ctx, nil)
-	// Make full copy of names, since they cannot be used after q is closed.
-	names = copyStringsWithMemory(names)
-	return names, err
-}
-
-// GetLabelValuesOnTimeRange returns values for the given labelName on the given tr.
-func GetLabelValuesOnTimeRange(labelName string, tr storage.TimeRange, deadline searchutil.Deadline) ([]string, error) {
-	if *prometheusDataPath == "" {
-		return nil, nil
-	}
-	d := time.Unix(int64(deadline.Deadline()), 0)
-	ctx, cancel := context.WithDeadline(context.Background(), d)
-	defer cancel()
-	q, err := promDB.Querier(tr.MinTimestamp, tr.MaxTimestamp)
-	if err != nil {
-		return nil, err
-	}
-	defer mustCloseQuerier(q)
-
-	values, _, err := q.LabelValues(ctx, labelName, nil)
-	// Make full copy of values, since they cannot be used after q is closed.
-	values = copyStringsWithMemory(values)
-	return values, err
-}
-
-func copyStringsWithMemory(a []string) []string {
-	result := make([]string, len(a))
-	for i, s := range a {
-		result[i] = string(append([]byte{}, s...))
-	}
-	return result
-}
-
-// SeriesVisitor is called by VisitSeries for each matching time series.
-//
-// The caller shouldn't hold references to metricName, values and timestamps after returning.
-type SeriesVisitor func(metricName []byte, values []float64, timestamps []int64)
-
-// VisitSeries calls f for each series found in the pdb.
-func VisitSeries(sq *storage.SearchQuery, deadline searchutil.Deadline, f SeriesVisitor) error {
-	if *prometheusDataPath == "" {
-		return nil
-	}
-	d := time.Unix(int64(deadline.Deadline()), 0)
-	ctx, cancel := context.WithDeadline(context.Background(), d)
-	defer cancel()
-	minTime, maxTime := getSearchTimeRange(sq)
-	q, err := promDB.Querier(minTime, maxTime)
-	if err != nil {
-		return err
-	}
-	defer mustCloseQuerier(q)
-	var seriesSet []promstorage.SeriesSet
-	for _, tf := range sq.TagFilterss {
-		ms, err := convertTagFiltersToMatchers(tf)
-		if err != nil {
-			return fmt.Errorf("cannot convert tag filters to matchers: %w", err)
-		}
-		s := q.Select(ctx, false, nil, ms...)
-		seriesSet = append(seriesSet, s)
-	}
-	ss := promstorage.NewMergeSeriesSet(seriesSet, 0, promstorage.ChainedSeriesMerge)
-	var (
-		mn         storage.MetricName
-		metricName []byte
-		values     []float64
-		timestamps []int64
-	)
-	var it chunkenc.Iterator
-	for ss.Next() {
-		s := ss.At()
-		convertPromLabelsToMetricName(&mn, s.Labels())
-		metricName = mn.SortAndMarshal(metricName[:0])
-		values = values[:0]
-		timestamps = timestamps[:0]
-		it = s.Iterator(it)
-		for {
-			typ := it.Next()
-			if typ == chunkenc.ValNone {
-				break
-			}
-			if typ != chunkenc.ValFloat {
-				// Skip unsupported values
-				continue
-			}
-			ts, v := it.At()
-			values = append(values, v)
-			timestamps = append(timestamps, ts)
-		}
-		if err := it.Err(); err != nil {
-			return fmt.Errorf("error when iterating Prometheus series: %w", err)
-		}
-		f(metricName, values, timestamps)
-	}
-	return ss.Err()
-}
-
-func getSearchTimeRange(sq *storage.SearchQuery) (int64, int64) {
-	maxTime := sq.MaxTimestamp
-	minTime := sq.MinTimestamp
-	minRetentionTime := time.Now().Unix()*1000 - prometheusRetentionMsecs
-	if maxTime < minRetentionTime {
-		maxTime = minRetentionTime
-	}
-	if minTime < minRetentionTime {
-		minTime = minRetentionTime
-	}
-	return minTime, maxTime
-}
-
-func convertPromLabelsToMetricName(dst *storage.MetricName, ls labels.Labels) {
-	dst.Reset()
-	ls.Range(func(label labels.Label) {
-		if label.Name == "__name__" {
-			dst.MetricGroup = append(dst.MetricGroup[:0], label.Value...)
-		} else {
-			dst.AddTag(label.Name, label.Value)
-		}
-	})
-}
-
-func convertTagFiltersToMatchers(tfs []storage.TagFilter) ([]*labels.Matcher, error) {
-	ms := make([]*labels.Matcher, 0, len(tfs))
-	for _, tf := range tfs {
-		var mt labels.MatchType
-		if tf.IsNegative {
-			if tf.IsRegexp {
-				mt = labels.MatchNotRegexp
-			} else {
-				mt = labels.MatchNotEqual
-			}
-		} else {
-			if tf.IsRegexp {
-				mt = labels.MatchRegexp
-			} else {
-				mt = labels.MatchEqual
-			}
-		}
-		key := string(tf.Key)
-		if key == "" {
-			key = "__name__"
-		}
-		value := string(tf.Value)
-		m, err := labels.NewMatcher(mt, key, value)
-		if err != nil {
-			return nil, err
-		}
-		ms = append(ms, m)
-	}
-	return ms, nil
-}
-
-func mustCloseQuerier(q promstorage.Querier) {
-	if err := q.Close(); err != nil {
-		logger.Panicf("FATAL: cannot close querier: %s", err)
-	}
-}
--- a/deployment/docker/compose-vm-cluster.yml
+++ b/deployment/docker/compose-vm-cluster.yml
@@ -3,7 +3,7 @@ services:
  #  It scrapes targets defined in --promscrape.config
  #  And forward them to --remoteWrite.url
  vmagent:
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    depends_on:
      - "vmauth"
    ports:
@@ -42,14 +42,14 @@ services:
  # vmstorage shards. Each shard receives 1/N of all metrics sent to vminserts,
  # where N is number of vmstorages (2 in this case).
  vmstorage-1:
-    image: victoriametrics/vmstorage:v1.145.0-cluster
+    image: victoriametrics/vmstorage:v1.146.0-cluster
    volumes:
      - strgdata-1:/storage
    command:
      - "--storageDataPath=/storage"
    restart: always
  vmstorage-2:
-    image: victoriametrics/vmstorage:v1.145.0-cluster
+    image: victoriametrics/vmstorage:v1.146.0-cluster
    volumes:
      - strgdata-2:/storage
    command:
@@ -59,7 +59,7 @@ services:
  # vminsert is ingestion frontend. It receives metrics pushed by vmagent,
  # pre-process them and distributes across configured vmstorage shards.
  vminsert-1:
-    image: victoriametrics/vminsert:v1.145.0-cluster
+    image: victoriametrics/vminsert:v1.146.0-cluster
    depends_on:
      - "vmstorage-1"
      - "vmstorage-2"
@@ -68,7 +68,7 @@ services:
      - "--storageNode=vmstorage-2:8400"
    restart: always
  vminsert-2:
-    image: victoriametrics/vminsert:v1.145.0-cluster
+    image: victoriametrics/vminsert:v1.146.0-cluster
    depends_on:
      - "vmstorage-1"
      - "vmstorage-2"
@@ -80,7 +80,7 @@ services:
  # vmselect is a query fronted. It serves read queries in MetricsQL or PromQL.
  # vmselect collects results from configured `--storageNode` shards.
  vmselect-1:
-    image: victoriametrics/vmselect:v1.145.0-cluster
+    image: victoriametrics/vmselect:v1.146.0-cluster
    depends_on:
      - "vmstorage-1"
      - "vmstorage-2"
@@ -90,7 +90,7 @@ services:
      - "--vmalert.proxyURL=http://vmalert:8880"
    restart: always
  vmselect-2:
-    image: victoriametrics/vmselect:v1.145.0-cluster
+    image: victoriametrics/vmselect:v1.146.0-cluster
    depends_on:
      - "vmstorage-1"
      - "vmstorage-2"
@@ -105,7 +105,7 @@ services:
  # read requests from Grafana, vmui, vmalert among vmselects.
  # It can be used as an authentication proxy.
  vmauth:
-    image: victoriametrics/vmauth:v1.145.0
+    image: victoriametrics/vmauth:v1.146.0
    depends_on:
      - "vmselect-1"
      - "vmselect-2"
@@ -119,7 +119,7 @@ services:

  # vmalert executes alerting and recording rules
  vmalert:
-    image: victoriametrics/vmalert:v1.145.0
+    image: victoriametrics/vmalert:v1.146.0
    depends_on:
      - "vmauth"
    ports:
--- a/deployment/docker/compose-vm-single.yml
+++ b/deployment/docker/compose-vm-single.yml
@@ -3,7 +3,7 @@ services:
  #  It scrapes targets defined in --promscrape.config
  #  And forward them to --remoteWrite.url
  vmagent:
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    depends_on:
      - "victoriametrics"
    ports:
@@ -18,7 +18,7 @@ services:
  # VictoriaMetrics instance, a single process responsible for
  # storing metrics and serve read requests.
  victoriametrics:
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0
    ports:
      - 8428:8428
      - 8089:8089
@@ -59,7 +59,7 @@ services:

  # vmalert executes alerting and recording rules
  vmalert:
-    image: victoriametrics/vmalert:v1.145.0
+    image: victoriametrics/vmalert:v1.146.0
    depends_on:
      - "victoriametrics"
      - "alertmanager"
--- a/deployment/docker/vmanomaly/vmanomaly-integration/compose.yml
+++ b/deployment/docker/vmanomaly/vmanomaly-integration/compose.yml
@@ -1,6 +1,6 @@
 services:
  vmagent:
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    depends_on:
      - "victoriametrics"
    ports:
@@ -14,7 +14,7 @@ services:
    restart: always

  victoriametrics:
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0
    ports:
      - 8428:8428
    volumes:
@@ -40,7 +40,7 @@ services:
    restart: always

  vmalert:
-    image: victoriametrics/vmalert:v1.145.0
+    image: victoriametrics/vmalert:v1.146.0
    depends_on:
      - "victoriametrics"
    ports:
--- a/docs/Makefile
+++ b/docs/Makefile
@@ -32,6 +32,17 @@ docs-image:
 		--platform $(DOCKER_PLATFORM) \
 		vmdocs

+docs-check-links: docs-image
+	rm -rf vmdocs/public
+	docker run \
+		--rm \
+		--platform $(DOCKER_PLATFORM) \
+		-v ./vmdocs:/opt/docs \
+		$(shell for d in ./docs/*/; do printf ' -v %s:/opt/docs/content/%s' "$${d}" "$$(basename $${d})"; done) \
+		--entrypoint /bin/sh \
+		vmdocs-docker-package \
+			-c "yarn install && hugo --minify && yarn run check-links"
+
 docs-debug: docs docs-image
 	docker run \
 		--rm \
--- a/docs/anomaly-detection/guides/guide-vmanomaly-vmalert/README.md
+++ b/docs/anomaly-detection/guides/guide-vmanomaly-vmalert/README.md
@@ -10,9 +10,9 @@ sitemap:

 - To use *vmanomaly*, part of the enterprise package, a license key is required. Obtain your key [here](https://victoriametrics.com/products/enterprise/trial/) for this tutorial or for enterprise use.
 - In the tutorial, we'll be using the following VictoriaMetrics components:
-  -  [VictoriaMetrics Single-Node](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) (v1.145.0)
-  -  [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/) (v1.145.0)
-  -  [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) (v1.145.0)
+  -  [VictoriaMetrics Single-Node](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) (v1.146.0)
+  -  [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/) (v1.146.0)
+  -  [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) (v1.146.0)
 - [Grafana](https://grafana.com/) (v12.2.0)
 - [Docker](https://docs.docker.com/get-docker/) and [Docker Compose](https://docs.docker.com/compose/)
 - [Node exporter](https://github.com/prometheus/node_exporter#node-exporter) (v1.9.1) and [Alertmanager](https://prometheus.io/docs/alerting/latest/alertmanager/) (v0.28.1)
@@ -323,7 +323,7 @@ Let's wrap it all up together into the `docker-compose.yml` file.
 services:
  vmagent:
    container_name: vmagent
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    depends_on:
      - "victoriametrics"
    ports:
@@ -340,7 +340,7 @@ services:

  victoriametrics:
    container_name: victoriametrics
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0
    ports:
      - 8428:8428
    volumes:
@@ -373,7 +373,7 @@ services:

  vmalert:
    container_name: vmalert
-    image: victoriametrics/vmalert:v1.145.0
+    image: victoriametrics/vmalert:v1.146.0
    depends_on:
      - "victoriametrics"
    ports:
--- a/docs/guides/grafana-vmauth-openid-configuration/README.md
+++ b/docs/guides/grafana-vmauth-openid-configuration/README.md
@@ -240,23 +240,23 @@ vmagent will write data into VictoriaMetrics single-node and cluster (with tenan
 # compose.yaml
 services:
  vmsingle:
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0

  vmstorage:
-    image: victoriametrics/vmstorage:v1.145.0-cluster
+    image: victoriametrics/vmstorage:v1.146.0-cluster

  vminsert:
-    image: victoriametrics/vminsert:v1.145.0-cluster
+    image: victoriametrics/vminsert:v1.146.0-cluster
    command:
      - -storageNode=vmstorage:8400

  vmselect:
-    image: victoriametrics/vmselect:v1.145.0-cluster
+    image: victoriametrics/vmselect:v1.146.0-cluster
    command:
      - -storageNode=vmstorage:8401

  vmagent:
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    volumes:
      - ./scrape.yaml:/etc/vmagent/config.yaml
    command:
@@ -308,7 +308,7 @@ Now add the vmauth service to `compose.yaml`:
 # compose.yaml
 services:
  vmauth:
-    image: docker.io/victoriametrics/vmauth:v1.145.0
+    image: docker.io/victoriametrics/vmauth:v1.146.0
    ports:
      - 8427:8427
    volumes:
--- a/docs/guides/vmagent-openid-configuration/README.md
+++ b/docs/guides/vmagent-openid-configuration/README.md
@@ -155,15 +155,15 @@ These services will store and query the metrics scraped by vmagent.
 # compose.yaml
 services:
  vmstorage:
-    image: victoriametrics/vmstorage:v1.145.0-cluster
+    image: victoriametrics/vmstorage:v1.146.0-cluster

  vminsert:
-    image: victoriametrics/vminsert:v1.145.0-cluster
+    image: victoriametrics/vminsert:v1.146.0-cluster
    command:
      - -storageNode=vmstorage:8400

  vmselect:
-    image: victoriametrics/vmselect:v1.145.0-cluster
+    image: victoriametrics/vmselect:v1.146.0-cluster
    command:
      - -storageNode=vmstorage:8401
    ports:
@@ -196,7 +196,7 @@ Add the vmauth service to `compose.yaml`:
 # compose.yaml
 services:
  vmauth:
-    image: victoriametrics/vmauth:v1.145.0-enterprise
+    image: victoriametrics/vmauth:v1.146.0-enterprise
    ports:
      - 8427:8427
    volumes:
@@ -251,7 +251,7 @@ Add the vmagent service to `compose.yaml` with OAuth2 configuration:
 # compose.yaml
 services:
  vmagent:
-    image: victoriametrics/vmagent:v1.145.0
+    image: victoriametrics/vmagent:v1.146.0
    volumes:
      - ./scrape.yaml:/etc/vmagent/config.yaml
    command:
--- a/docs/guides/vmalert-datasource-managed-alerts-grafana/README.md
+++ b/docs/guides/vmalert-datasource-managed-alerts-grafana/README.md
@@ -107,7 +107,7 @@ The final piece is the Docker Compose file. This ties all the services together
 # compose.yml
 services:
  victoriametrics:
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0
    command:
      - "--storageDataPath=/victoria-metrics-data"
      - "--selfScrapeInterval=10s"
@@ -128,7 +128,7 @@ services:
      - ./alertmanager.yml:/etc/alertmanager/alertmanager.yml:ro

  vmalert:
-    image: victoriametrics/vmalert:v1.145.0
+    image: victoriametrics/vmalert:v1.146.0
    depends_on:
      - victoriametrics
      - alertmanager
--- a/docs/victoriametrics/Quick-Start.md
+++ b/docs/victoriametrics/Quick-Start.md
@@ -61,9 +61,9 @@ Download the newest available [VictoriaMetrics release](https://docs.victoriamet
 from [DockerHub](https://hub.docker.com/r/victoriametrics/victoria-metrics) or [Quay](https://quay.io/repository/victoriametrics/victoria-metrics?tab=tags):

 ```sh
-docker pull victoriametrics/victoria-metrics:v1.145.0
+docker pull victoriametrics/victoria-metrics:v1.146.0
 docker run -it --rm -v `pwd`/victoria-metrics-data:/victoria-metrics-data -p 8428:8428 \
- victoriametrics/victoria-metrics:v1.145.0 --selfScrapeInterval=5s -storageDataPath=victoria-metrics-data
+ victoriametrics/victoria-metrics:v1.146.0 --selfScrapeInterval=5s -storageDataPath=victoria-metrics-data
 ```

 _For Enterprise images, see [this link](https://docs.victoriametrics.com/victoriametrics/enterprise/#docker-images)._
--- a/docs/victoriametrics/changelog/CHANGELOG.md
+++ b/docs/victoriametrics/changelog/CHANGELOG.md
@@ -28,10 +28,9 @@ See also [LTS releases](https://docs.victoriametrics.com/victoriametrics/lts-rel

 ## [v1.146.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.146.0)

-Release candidate
+Released at 2026-06-22

 * FEATURE: all VictoriaMetrics components: add `-http.header.disableServerHostname` command-line flag for disabling the `X-Server-Hostname` HTTP response header. See [#11067](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11067). Thanks to @zasdaym for contribution.
-* FEATURE: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): log calls to [/api/v1/admin/tsdb/delete_series](https://docs.victoriametrics.com/victoriametrics/url-examples/#apiv1admintsdbdelete_series) API handler. This should help to identify events of metrics deletion from the database. See [#11104](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11104).
 * FEATURE: [vmctl](https://docs.victoriametrics.com/victoriametrics/vmctl/): add `-vm-headers` and `-vm-bearer-token` flags for authenticating requests to the VictoriaMetrics import destination. The flags are available in `opentsdb`, `influx`, `remote-read`, `prometheus`, `mimir`, and `thanos` vmctl sub-commands. See [#8897](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/8897).
 * FEATURE: [vmui](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#vmui): add the `last` value to graph legend statistics. See [#10759](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10759).
 * FEATURE: [stream aggregation](https://docs.victoriametrics.com/victoriametrics/stream-aggregation/): expose `vm_streamaggr_dedup_dropped_samples_total` to allow tracking dropped old samples during [deduplication](https://docs.victoriametrics.com/victoriametrics/stream-aggregation/#deduplication).
@@ -293,6 +292,25 @@ It enables back `Discovered targets` debug UI by default.
 * BUGFIX: `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): properly apply `extra_filters[]` filter when querying `vm_account_id` or `vm_project_id` labels via [multitenant](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/#multitenancy) request for `/api/v1/label/…/values` API. Before, `extra_filters` was ignored. See [#10503](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10503).
 * BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): revert the use of rollup result cache for [instant queries](https://docs.victoriametrics.com/keyConcepts.html#instant-query) that contain [`rate`](https://docs.victoriametrics.com/MetricsQL.html#rate) function with a lookbehind window larger than `-search.minWindowForInstantRollupOptimization`. The cache usage was removed since [v1.132.0](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.132.0). See [#10098](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/10098#issuecomment-3895011084) for more details.

+## [v1.136.12](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.136.12)
+
+Released at 2026-06-19
+
+**v1.136.x is a line of [LTS releases](https://docs.victoriametrics.com/victoriametrics/lts-releases/). It contains important up-to-date bugfixes for [VictoriaMetrics enterprise](https://docs.victoriametrics.com/victoriametrics/enterprise/).
+All these fixes are also included in [the latest community release](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/latest).
+The v1.136.x line will be supported for at least 12 months since [v1.136.0](https://docs.victoriametrics.com/victoriametrics/changelog/#v11360) release**
+
+* BUGFIX: [stream aggregation](https://docs.victoriametrics.com/victoriametrics/stream-aggregation/): fix issue with producing aggregated samples with identical timestamps between flushes. See [#10808](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10808).
+* BUGFIX: [vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/): fix potential corruption of remote-write metadata `Unit` values. See [#11120](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11120). Thanks for @fxrlv for the contribution.
+* BUGFIX: [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/),[vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/),[vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): fix rare unbounded shutdown delay when config reload takes longer than `-configCheckInterval`. See [#11107](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11107). Thanks to @PleasingFungus for contribution.
+* BUGFIX: [vmbackup](https://docs.victoriametrics.com/vmbackup/), [vmbackupmanager](https://docs.victoriametrics.com/victoriametrics/vmbackupmanager/): do not fail backup list if directory is absent while using `fs://` destination to align with other protocols. See [6c3c548d](https://github.com/VictoriaMetrics/VictoriaMetrics/commit/6c3c548ddb0385b749e731f52276f130e2a4e4a8)
+* BUGFIX: [vmctl](https://docs.victoriametrics.com/victoriametrics/vmctl/): push metrics to configured `-pushmetrics.url` on shutdown when migration fails. Previously, metrics were not pushed if vmctl exited with an error. See [#11081](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11081). Thanks to @zasdaym for contribution.
+* BUGFIX: [vmrestore](https://docs.victoriametrics.com/victoriametrics/vmrestore/): disallow restoring parts outside the configured `-storageDataPath` directory. See [710c920d](https://github.com/VictoriaMetrics/VictoriaMetrics/commit/710c920d6083327042a309e449fae4383617d817).
+* BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): fix corrupted metrics metadata when a response contains multiple rows. See [#11115](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11115). Thanks for @fxrlv for the contribution.
+* BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): properly escape `metricFamilyName` at metrics metadata response. See [#11129](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11129). Thanks for @fxrlv for the contribution.
+* BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): correctly apply long tenant filters. Previously, such filters could be truncated, causing tenants to be matched incorrectly. See [#11096](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11096). Thanks for @fxrlv for the contribution.
+* BUGFIX: [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) and `vmstorage` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): prevent more cases of panic during directory deletion on `NFS`-based mounts. See [#11060](https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11060).
+
 ## [v1.136.11](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.136.11)

 Released at 2026-06-05
@@ -654,6 +672,20 @@ See changes [here](https://docs.victoriametrics.com/victoriametrics/changelog/ch

 See changes [here](https://docs.victoriametrics.com/victoriametrics/changelog/changelog_2025/#v11230)

+## [v1.122.25](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.122.25)
+
+Released at 2026-06-19
+
+**v1.122.x is a line of [LTS releases](https://docs.victoriametrics.com/victoriametrics/lts-releases/). It contains important up-to-date bugfixes for [VictoriaMetrics enterprise](https://docs.victoriametrics.com/victoriametrics/enterprise/).
+All these fixes are also included in [the latest community release](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/latest).
+The v1.122.x line will be supported for at least 12 months since [v1.122.0](https://docs.victoriametrics.com/victoriametrics/changelog/#v11220) release**
+
+* BUGFIX: [stream aggregation](https://docs.victoriametrics.com/victoriametrics/stream-aggregation/): fix issue with producing aggregated samples with identical timestamps between flushes. See [#10808](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/10808).
+* BUGFIX: [vmalert](https://docs.victoriametrics.com/victoriametrics/vmalert/),[vmauth](https://docs.victoriametrics.com/victoriametrics/vmauth/),[vmagent](https://docs.victoriametrics.com/victoriametrics/vmagent/) and [vmsingle](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/): fix rare unbounded shutdown delay when config reload takes longer than `-configCheckInterval`. See [#11107](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11107). Thanks to @PleasingFungus for contribution.
+* BUGFIX: `vmselect` in [VictoriaMetrics cluster](https://docs.victoriametrics.com/victoriametrics/cluster-victoriametrics/): fix corrupted metrics metadata when a response contains multiple rows. See [#11115](https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11115). Thanks for @fxrlv for the contribution.
+* BUGFIX: [vmbackup](https://docs.victoriametrics.com/vmbackup/), [vmbackupmanager](https://docs.victoriametrics.com/victoriametrics/vmbackupmanager/): do not fail backup list if directory is absent while using `fs://` destination to align with other protocols. See [6c3c548d](https://github.com/VictoriaMetrics/VictoriaMetrics/commit/6c3c548ddb0385b749e731f52276f130e2a4e4a8)
+* BUGFIX: [vmrestore](https://docs.victoriametrics.com/victoriametrics/vmrestore/): disallow restoring parts outside the configured `-storageDataPath` directory. See [710c920d](https://github.com/VictoriaMetrics/VictoriaMetrics/commit/710c920d6083327042a309e449fae4383617d817).
+
 ## [v1.122.24](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/tag/v1.122.24)

 Released at 2026-06-05
--- a/docs/victoriametrics/enterprise.md
+++ b/docs/victoriametrics/enterprise.md
@@ -121,7 +121,7 @@ It is allowed to run Enterprise components in [cases listed here](https://docs.v
 Binary releases of Enterprise components are available at [the releases page for VictoriaMetrics](https://github.com/VictoriaMetrics/VictoriaMetrics/releases/latest),
 [the releases page for VictoriaLogs](https://github.com/VictoriaMetrics/VictoriaLogs/releases/latest)
 and [the releases page for VictoriaTraces](https://github.com/VictoriaMetrics/VictoriaTraces/releases/latest).
-Enterprise binaries and packages have `enterprise` suffix in their names. For example, `victoria-metrics-linux-amd64-v1.145.0-enterprise.tar.gz`.
+Enterprise binaries and packages have `enterprise` suffix in their names. For example, `victoria-metrics-linux-amd64-v1.146.0-enterprise.tar.gz`.

 In order to run binary release of Enterprise component, please download the `*-enterprise.tar.gz` archive for your OS and architecture
 from the corresponding releases page and unpack it. Then run the unpacked binary.
@@ -139,8 +139,8 @@ For example, the following command runs VictoriaMetrics Enterprise binary with t
 obtained at [this page](https://victoriametrics.com/products/enterprise/trial/):

 ```sh
-wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.145.0/victoria-metrics-linux-amd64-v1.145.0-enterprise.tar.gz
-tar -xzf victoria-metrics-linux-amd64-v1.145.0-enterprise.tar.gz
+wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.146.0/victoria-metrics-linux-amd64-v1.146.0-enterprise.tar.gz
+tar -xzf victoria-metrics-linux-amd64-v1.146.0-enterprise.tar.gz
 ./victoria-metrics-prod -license=BASE64_ENCODED_LICENSE_KEY
 ```

@@ -155,7 +155,7 @@ Alternatively, VictoriaMetrics Enterprise license can be stored in the file and
 It is allowed to run Enterprise components in [cases listed here](https://docs.victoriametrics.com/victoriametrics/enterprise/#valid-cases-for-victoriametrics-enterprise).

 Docker images for Enterprise components are available at [VictoriaMetrics Docker Hub](https://hub.docker.com/u/victoriametrics) and [VictoriaMetrics Quay](https://quay.io/organization/victoriametrics).
-Enterprise docker images have `enterprise` suffix in their names. For example, `victoriametrics/victoria-metrics:v1.145.0-enterprise`.
+Enterprise docker images have `enterprise` suffix in their names. For example, `victoriametrics/victoria-metrics:v1.146.0-enterprise`.

 In order to run Docker image of VictoriaMetrics Enterprise component, it is required to provide the license key via the command-line
 flag as described in the [binary-releases](https://docs.victoriametrics.com/victoriametrics/enterprise/#binary-releases) section.
@@ -165,13 +165,13 @@ Enterprise license key can be obtained at [this page](https://victoriametrics.co
 For example, the following command runs VictoriaMetrics Enterprise Docker image with the specified license key:

 ```sh
-docker run --name=victoria-metrics victoriametrics/victoria-metrics:v1.145.0-enterprise -license=BASE64_ENCODED_LICENSE_KEY
+docker run --name=victoria-metrics victoriametrics/victoria-metrics:v1.146.0-enterprise -license=BASE64_ENCODED_LICENSE_KEY
 ```

 Alternatively, the license code can be stored in the file and then referred via `-licenseFile` command-line flag:

 ```sh
-docker run --name=victoria-metrics -v /vm-license:/vm-license  victoriametrics/victoria-metrics:v1.145.0-enterprise -licenseFile=/path/to/vm-license
+docker run --name=victoria-metrics -v /vm-license:/vm-license  victoriametrics/victoria-metrics:v1.146.0-enterprise -licenseFile=/path/to/vm-license
 ```

 Example docker-compose configuration:
@@ -181,7 +181,7 @@ version: "3.5"
 services:
  victoriametrics:
    container_name: victoriametrics
-    image: victoriametrics/victoria-metrics:v1.145.0
+    image: victoriametrics/victoria-metrics:v1.146.0
    ports:
      - 8428:8428
    volumes:
@@ -213,7 +213,7 @@ is used to provide the license key in plain-text:
 ```yaml
 server:
  image:
-    tag: v1.145.0-enterprise
+    tag: v1.146.0-enterprise

 license:
  key: {BASE64_ENCODED_LICENSE_KEY}
@@ -224,7 +224,7 @@ In order to provide the license key via existing secret, the following values fi
 ```yaml
 server:
  image:
-    tag: v1.145.0-enterprise
+    tag: v1.146.0-enterprise

 license:
  secret:
@@ -274,7 +274,7 @@ spec:
  license:
    key: {BASE64_ENCODED_LICENSE_KEY}
  image:
-    tag: v1.145.0-enterprise
+    tag: v1.146.0-enterprise
 ```

 In order to provide the license key via an existing secret, the following custom resource is used:
@@ -291,7 +291,7 @@ spec:
      name: vm-license
      key: license
  image:
-    tag: v1.145.0-enterprise
+    tag: v1.146.0-enterprise
 ```

 Example secret with license key:
@@ -342,7 +342,7 @@ Builds are available for amd64 and arm64 architectures.

 Example archive:

-`victoria-metrics-linux-amd64-v1.145.0-enterprise.tar.gz`
+`victoria-metrics-linux-amd64-v1.146.0-enterprise.tar.gz`

 Includes:

@@ -351,7 +351,7 @@ Includes:

 Example Docker image:

-`victoriametrics/victoria-metrics:v1.145.0-enterprise-fips` – uses the FIPS-compatible binary and based on `scratch` image.
+`victoriametrics/victoria-metrics:v1.146.0-enterprise-fips` – uses the FIPS-compatible binary and based on `scratch` image.

 ## What Happens to Licensed Components When a License Expires

--- a/docs/victoriametrics/goals.md
+++ b/docs/victoriametrics/goals.md
@@ -16,7 +16,7 @@ aliases:
 1. The main goal - **to help users and [clients](https://docs.victoriametrics.com/victoriametrics/enterprise/) using VictoriaMetrics products in the most efficient way**.
 1. Fixing bugs in the essential functionality of VictoriaMetrics components. Small usability bugs are usually the most annoying,
   so they **must be fixed first**. Bugs, which affect a small number of users at some rare edge cases, can be fixed later.
-1. Improving [public docs for VictoriaMetrics products](https://docs.victoriametrics.com).
+1. Improving [public docs for VictoriaMetrics products](https://docs.victoriametrics.com),
   so users could find answers to their questions via Google or any other AI-powered web search without the need
   to ask these questions at our [support channels](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#community-and-contributions).
 1. Simplifying usage of VictoriaMetrics products without breaking backwards compatibility, so users could regularly
--- a/docs/victoriametrics/scrape_config_examples.md
+++ b/docs/victoriametrics/scrape_config_examples.md
@@ -35,8 +35,8 @@ scrape_configs:
 After you created the `scrape.yaml` file, download and unpack [single-node VictoriaMetrics](https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/) to the same directory:

 ```sh
-wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.145.0/victoria-metrics-linux-amd64-v1.145.0.tar.gz
-tar xzf victoria-metrics-linux-amd64-v1.145.0.tar.gz
+wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.146.0/victoria-metrics-linux-amd64-v1.146.0.tar.gz
+tar xzf victoria-metrics-linux-amd64-v1.146.0.tar.gz
 ```

 Then start VictoriaMetrics and instruct it to scrape targets defined in `scrape.yaml` and save scraped metrics
@@ -150,8 +150,8 @@ Then start [single-node VictoriaMetrics](https://docs.victoriametrics.com/victor

 ```yaml
 # Download and unpack single-node VictoriaMetrics
-wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.145.0/victoria-metrics-linux-amd64-v1.145.0.tar.gz
-tar xzf victoria-metrics-linux-amd64-v1.145.0.tar.gz
+wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.146.0/victoria-metrics-linux-amd64-v1.146.0.tar.gz
+tar xzf victoria-metrics-linux-amd64-v1.146.0.tar.gz

 # Run single-node VictoriaMetrics with the given scrape.yaml
 ./victoria-metrics-prod -promscrape.config=scrape.yaml
--- a/docs/victoriametrics/victoria_metrics_common_flags.md
+++ b/docs/victoriametrics/victoria_metrics_common_flags.md
@@ -275,6 +275,10 @@ See the docs at https://docs.victoriametrics.com/victoriametrics/
     Optional name of the cluster. If multiple vmagent clusters scrape the same targets, then each cluster must have unique name in order to properly de-duplicate samples received from these clusters. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info
  -promscrape.cluster.replicationFactor int
     The number of members in the cluster, which scrape the same targets. If the replication factor is greater than 1, then the deduplication must be enabled at remote storage side. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info (default 1)
+  -promscrape.cluster.shardByLabels array
+     Optional list of target labels, which will be used for sharding targets among cluster members if -promscrape.cluster.membersCount is greater than 1. If none of the specified labels are found in a target, then all the target labels will be used for sharding. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info
+     Supports an array of values separated by comma or specified via multiple flags.
+     Each array item can contain comma inside single-quoted or double-quoted string, {}, [] and () braces.
  -promscrape.config string
     Optional path to Prometheus config file with 'scrape_configs' section containing targets to scrape. The path can point to local file and to http url. See https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#how-to-scrape-prometheus-exporters-such-as-node-exporter for details
  -promscrape.config.dryRun
@@ -486,13 +490,13 @@ See the docs at https://docs.victoriametrics.com/victoriametrics/
  -search.maxTSDBStatusTopNSeries int
     The maximum value of 'topN' argument that can be passed to /api/v1/status/tsdb API. This option allows limiting memory usage. See https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#tsdb-stats (default 1000)
  -search.maxTagKeys int
-     The maximum number of tag keys returned from /api/v1/labels . See also -search.maxLabelsAPISeries and -search.maxLabelsAPIDuration (default 100000)
+     The maximum number of tag keys returned per search. See also -search.maxLabelsAPISeries and -search.maxLabelsAPIDuration (default 100000)
  -search.maxTagValueSuffixesPerSearch int
     The maximum number of tag value suffixes returned from /metrics/find (default 100000)
  -search.maxTagValues int
-     The maximum number of tag values returned from /api/v1/label/<label_name>/values . See also -search.maxLabelsAPISeries and -search.maxLabelsAPIDuration (default 100000)
+     The maximum number of tag values returned per search. See also -search.maxLabelsAPISeries and -search.maxLabelsAPIDuration (default 100000)
  -search.maxUniqueTimeseries int
-     The maximum number of unique time series, which can be selected during /api/v1/query and /api/v1/query_range queries. This option allows limiting memory usage. When set to zero, the limit is automatically calculated based on -search.maxConcurrentRequests (inversely proportional) and memory available to the process (proportional).
+     The maximum number of unique time series, which can be scanned during every query. This allows protecting against heavy queries, which select unexpectedly high number of series. When set to zero, the limit is automatically calculated based on -search.maxConcurrentRequests (inversely proportional) and memory available to the process (proportional). See also -search.max* command-line flags at vmselect
  -search.maxWorkersPerQuery int
     The maximum number of CPU cores a single query can use. The default value should work good for most cases. The flag can be set to lower values for improving performance of big number of concurrently executed queries. The flag can be set to bigger values for improving performance of heavy queries, which scan big number of time series (>10K) and/or big number of samples (>100M). There is no sense in setting this flag to values bigger than the number of CPU cores available on the system (default netstorage.defaultMaxWorkersPerQuery())
  -search.minStalenessInterval duration
--- a/docs/victoriametrics/vmagent_common_flags.md
+++ b/docs/victoriametrics/vmagent_common_flags.md
@@ -240,6 +240,10 @@ See the docs at https://docs.victoriametrics.com/victoriametrics/vmagent/ .
     Optional name of the cluster. If multiple vmagent clusters scrape the same targets, then each cluster must have unique name in order to properly de-duplicate samples received from these clusters. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info
  -promscrape.cluster.replicationFactor int
     The number of members in the cluster, which scrape the same targets. If the replication factor is greater than 1, then the deduplication must be enabled at remote storage side. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info (default 1)
+  -promscrape.cluster.shardByLabels array
+     Optional list of target labels, which will be used for sharding targets among cluster members if -promscrape.cluster.membersCount is greater than 1. If none of the specified labels are found in a target, then all the target labels will be used for sharding. See https://docs.victoriametrics.com/victoriametrics/vmagent/#scraping-big-number-of-targets for more info
+     Supports an array of values separated by comma or specified via multiple flags.
+     Each array item can contain comma inside single-quoted or double-quoted string, {}, [] and () braces.
  -promscrape.config string
     Optional path to Prometheus config file with 'scrape_configs' section containing targets to scrape. The path can point to local file and to http url. See https://docs.victoriametrics.com/victoriametrics/single-server-victoriametrics/#how-to-scrape-prometheus-exporters-such-as-node-exporter for details
  -promscrape.config.dryRun
@@ -435,6 +439,10 @@ See the docs at https://docs.victoriametrics.com/victoriametrics/vmagent/ .
     Optional HTTP headers to send with each request to the corresponding -remoteWrite.url. For example, -remoteWrite.headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding -remoteWrite.url. Multiple headers must be delimited by '^^': -remoteWrite.headers='header1:value1^^header2:value2'
     Supports an array of values separated by comma or specified via multiple flags.
     Each array item can contain comma inside single-quoted or double-quoted string, {}, [] and () braces.
+  -remoteWrite.inmemoryQueues array
+     The number of additional workers per each -remoteWrite.url, which send only recently ingested data from the in-memory queue, while the file-based queue at -remoteWrite.tmpDataPath is drained by workers configured via -remoteWrite.queues. This reduces delivery lag for fresh samples when the file-based queue contains a backlog accumulated during remote storage outages. (default 0)
+     Supports array of values separated by comma or specified via multiple flags.
+     Empty values are set to default value.
  -remoteWrite.keepDanglingQueues
     Keep persistent queues contents at -remoteWrite.tmpDataPath in case there are no matching -remoteWrite.url. Useful when -remoteWrite.url is changed temporarily and persistent queue files will be needed later on.
  -remoteWrite.label array
--- a/docs/victoriametrics/vmctl/vmctl.md
+++ b/docs/victoriametrics/vmctl/vmctl.md
@@ -34,9 +34,9 @@ vmctl command-line tool is available as:

 Download and unpack vmctl:
 ```sh
-wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.145.0/vmutils-darwin-arm64-v1.145.0.tar.gz
+wget https://github.com/VictoriaMetrics/VictoriaMetrics/releases/download/v1.146.0/vmutils-darwin-arm64-v1.146.0.tar.gz

-tar xzf vmutils-darwin-arm64-v1.145.0.tar.gz
+tar xzf vmutils-darwin-arm64-v1.146.0.tar.gz
 ```

 Once binary is unpacked, see the full list of supported modes by running the following command:
--- a/docs/victoriametrics/vmctl/vmctl_influx_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_influx_flags.md
@@ -46,9 +46,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/docs/victoriametrics/vmctl/vmctl_mimir_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_mimir_flags.md
@@ -42,9 +42,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/docs/victoriametrics/vmctl/vmctl_opentsdb_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_opentsdb_flags.md
@@ -41,9 +41,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/docs/victoriametrics/vmctl/vmctl_prometheus_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_prometheus_flags.md
@@ -34,9 +34,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/docs/victoriametrics/vmctl/vmctl_remote-read_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_remote-read_flags.md
@@ -49,9 +49,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/docs/victoriametrics/vmctl/vmctl_thanos_flags.md
+++ b/docs/victoriametrics/vmctl/vmctl_thanos_flags.md
@@ -34,9 +34,13 @@ OPTIONS:
      Should be the same as --httpListenAddr value for single-node version or vminsert component. 
      When importing into the clustered version do not forget to set additionally --vm-account-id flag. 
      Please note, that vmctl performs initial readiness check for the given address by checking /health endpoint. (default: "http://localhost:8428")
-   --vm-user value        VictoriaMetrics username for basic auth [$VM_USERNAME]
-   --vm-password value    VictoriaMetrics password for basic auth [$VM_PASSWORD]
-   --vm-account-id value  AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
+   --vm-user value      VictoriaMetrics username for basic auth [$VM_USERNAME]
+   --vm-password value  VictoriaMetrics password for basic auth [$VM_PASSWORD]
+   --vm-headers value   Optional HTTP headers to send with each request to the corresponding destination address. 
+      For example, --vm-headers='My-Auth:foobar' would send 'My-Auth: foobar' HTTP header with every request to the corresponding destination address. 
+      Multiple headers must be delimited by '^^': --vm-headers='header1:value1^^header2:value2'
+   --vm-bearer-token value  Optional bearer auth token to use for the corresponding --vm-addr
+   --vm-account-id value    AccountID is an arbitrary 32-bit integer identifying namespace for data ingestion (aka tenant). 
      AccountID is required when importing into the clustered version of VictoriaMetrics. 
      It is possible to set it as accountID:projectID, where projectID is also arbitrary 32-bit integer. 
      If projectID isn't set, then it equals to 0
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	github.com/VictoriaMetrics/easyproto v1.2.0
 	github.com/VictoriaMetrics/fastcache v1.13.3
 	github.com/VictoriaMetrics/metrics v1.44.0
-	github.com/VictoriaMetrics/metricsql v0.87.1
+	github.com/VictoriaMetrics/metricsql v0.87.2
 	github.com/aws/aws-sdk-go-v2 v1.42.0
 	github.com/aws/aws-sdk-go-v2/config v1.32.25
 	github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.22.27
--- a/go.sum
+++ b/go.sum
@@ -52,20 +52,16 @@ github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapp
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.57.0/go.mod h1:YqwkQPrWSC7+byyc1VlKbWLBF5JsW5IoL6xUkemYSXk=
 github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY=
 github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU=
-github.com/VictoriaMetrics/VictoriaLogs v1.50.1-0.20260415124154-6b7a6357aec0 h1:2x1Tszv41PnCdSMumEtejz/On1RQ45kHQ+hhKT53sOk=
-github.com/VictoriaMetrics/VictoriaLogs v1.50.1-0.20260415124154-6b7a6357aec0/go.mod h1:fQtmzaSUL+HJmHozeAKmnTJTOMBT+vBccv/VWQEwhUQ=
 github.com/VictoriaMetrics/VictoriaLogs v1.121.1-0.20260616132739-c901a1e31cb3 h1:3eP8RRZitbga5EYiQ3IANrMPxpBwMAX4VA6akDaXwpU=
 github.com/VictoriaMetrics/VictoriaLogs v1.121.1-0.20260616132739-c901a1e31cb3/go.mod h1:H4sDxcvk6OmC6zOt++IlDyrwfbn4F1eSLwMpR+kpRt8=
 github.com/VictoriaMetrics/easyproto v1.2.0 h1:FJT9uNXA2isppFuJErbLqD306KoFlehl7Wn2dg/6oIE=
 github.com/VictoriaMetrics/easyproto v1.2.0/go.mod h1:QlGlzaJnDfFd8Lk6Ci/fuLxfTo3/GThPs2KH23mv710=
 github.com/VictoriaMetrics/fastcache v1.13.3 h1:rBabE0iIxcqKEMCwUmwHZ9dgEqXerg8FRbRDUvC7OVc=
 github.com/VictoriaMetrics/fastcache v1.13.3/go.mod h1:hHXhl4DA2fTL2HTZDJFXWgW0LNjo6B+4aj2Wmng3TjU=
-github.com/VictoriaMetrics/metrics v1.43.2 h1:+8pIQEGwchKS5CYFyvv3LKvNXGi7baZ9hmIV4RHqibY=
-github.com/VictoriaMetrics/metrics v1.43.2/go.mod h1:xDM82ULLYCYdFRgQ2JBxi8Uf1+8En1So9YUwlGTOqTc=
 github.com/VictoriaMetrics/metrics v1.44.0 h1:Fr8yqQSV+ZfYaDD/anqk1E8e9YPgfleSleJmAI0M0Tw=
 github.com/VictoriaMetrics/metrics v1.44.0/go.mod h1:xDM82ULLYCYdFRgQ2JBxi8Uf1+8En1So9YUwlGTOqTc=
-github.com/VictoriaMetrics/metricsql v0.87.1 h1:GdIblCDgXsrBJcBSDtFT8SLK7P+QHijdQmcr4L/f0Go=
-github.com/VictoriaMetrics/metricsql v0.87.1/go.mod h1:d4EisFO6ONP/HIGDYTAtwrejJBBeKGQYiRl095bS4QQ=
+github.com/VictoriaMetrics/metricsql v0.87.2 h1:7OsrcDBWREWKqqpnFyIUEOM4FNv2qHvCoww2GYz3Tc0=
+github.com/VictoriaMetrics/metricsql v0.87.2/go.mod h1:d4EisFO6ONP/HIGDYTAtwrejJBBeKGQYiRl095bS4QQ=
 github.com/VividCortex/ewma v1.2.0 h1:f58SaIzcDXrSy3kWaHNvuJgJ3Nmz59Zji6XoJR/q1ow=
 github.com/VividCortex/ewma v1.2.0/go.mod h1:nz4BbCtbLyFDeC9SUHbtcT5644juEuWfUAUnGx7j5l4=
 github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b h1:mimo19zliBX/vSQ6PWWSL9lK8qwHozUj03+zLoEB8O0=
--- a/lib/storage/block.go
+++ b/lib/storage/block.go
@@ -163,8 +163,7 @@ func (b *Block) deduplicateSamplesDuringMerge() {
 		// Nothing to dedup.
 		return
 	}
-	maxTimestamp := srcTimestamps[len(srcTimestamps)-1]
-	dedupInterval := GetDedupInterval(maxTimestamp)
+	dedupInterval := GetDedupInterval()
 	if dedupInterval <= 0 {
 		// Deduplication is disabled.
 		return
--- a/lib/storage/dedup.go
+++ b/lib/storage/dedup.go
@@ -1,11 +1,29 @@
 package storage

 import (
+	"time"
+
 	"github.com/VictoriaMetrics/VictoriaMetrics/lib/decimal"
 )

+// SetDedupInterval sets the deduplication interval, which is applied to raw samples during data ingestion and querying.
+//
+// De-duplication is disabled if dedupInterval is 0.
+//
+// This function must be called before initializing the storage.
+func SetDedupInterval(dedupInterval time.Duration) {
+	globalDedupInterval = dedupInterval.Milliseconds()
+}
+
+// GetDedupInterval returns the dedup interval in milliseconds, which has been set via SetDedupInterval.
+func GetDedupInterval() int64 {
+	return globalDedupInterval
+}
+
+var globalDedupInterval int64
+
 func isDedupEnabled() bool {
-	return len(downsamplingPeriods) > 0
+	return globalDedupInterval > 0
 }

 // DeduplicateSamples removes samples from src* if they are closer to each other than dedupInterval in milliseconds.
--- a/lib/storage/downsampling.go
+++ b/lib/storage/downsampling.go
@@ -1,123 +0,0 @@
-package storage
-
-import (
-	"fmt"
-	"sort"
-	"strings"
-	"time"
-
-	"github.com/VictoriaMetrics/VictoriaMetrics/lib/fasttime"
-	"github.com/VictoriaMetrics/metricsql"
-)
-
-// SetDownsamplingPeriods configures downsampling.
-//
-// The function must be called before opening or creating any storage.
-func SetDownsamplingPeriods(periods []string, dedupInterval time.Duration) error {
-	dsps, err := parseDownsamplingPeriods(periods)
-	if err != nil {
-		return err
-	}
-	dedupIntervalMs := dedupInterval.Milliseconds()
-	if dedupIntervalMs > 0 {
-		if len(dsps) > 0 && dsps[len(dsps)-1].Offset == 0 {
-			return fmt.Errorf("-dedup.minScrapeInterval=%s cannot be used if -downsampling.period=%s contains zero offset", dedupInterval, periods)
-		}
-		// Deduplication is a special case of downsampling with zero offset.
-		dsps = append(dsps, DownsamplingPeriod{
-			Offset:   0,
-			Interval: dedupIntervalMs,
-		})
-	}
-	downsamplingPeriods = dsps
-	return nil
-}
-
-// DownsamplingPeriod describes downsampling period
-type DownsamplingPeriod struct {
-	// Offset in milliseconds from the current time when the downsampling with the given interval must be applied
-	Offset int64
-	// Interval for downsampling - only a single sample is left per each interval
-	Interval int64
-}
-
-// String implements interface
-func (dsp DownsamplingPeriod) String() string {
-	offset := time.Duration(dsp.Offset) * time.Millisecond
-	interval := time.Duration(dsp.Interval) * time.Millisecond
-	return fmt.Sprintf("%s:%s", offset, interval)
-}
-
-func (dsp *DownsamplingPeriod) parse(s string) error {
-	idx := strings.Index(s, ":")
-	if idx <= 0 {
-		return fmt.Errorf("incorrect format for downsampling period: %s, want `offset:interval` format", s)
-	}
-	offsetStr, intervalStr := s[:idx], s[idx+1:]
-	interval, err := metricsql.DurationValue(intervalStr, 0)
-	if err != nil {
-		return fmt.Errorf("incorrect interval: %s format for downsampling interval: %s err: %w", intervalStr, s, err)
-	}
-	offset, err := metricsql.DurationValue(offsetStr, 0)
-	if err != nil {
-		return fmt.Errorf("incorrect duration: %s format for downsampling offset: %s err: %w", offsetStr, s, err)
-	}
-	dsp.Interval = interval
-	dsp.Offset = offset
-	// sanity check
-	if offset > 0 && interval > offset {
-		return fmt.Errorf("downsampling interval=%d cannot exceed offset=%d", dsp.Interval, dsp.Offset)
-	}
-	return nil
-}
-
-var downsamplingPeriods []DownsamplingPeriod
-
-// GetDedupInterval returns dedup interval, which must be applied to samples with the given timestamp.
-func GetDedupInterval(timestamp int64) int64 {
-	dsp := getDownsamplingPeriod(timestamp)
-	return dsp.Interval
-}
-
-// getDownsamplingPeriod returns downsampling period, which must be used for the given timestamp
-func getDownsamplingPeriod(timestamp int64) DownsamplingPeriod {
-	offset := int64(fasttime.UnixTimestamp())*1000 - timestamp
-	for _, dsp := range downsamplingPeriods {
-		if offset >= dsp.Offset {
-			return dsp
-		}
-	}
-	return DownsamplingPeriod{}
-}
-
-func parseDownsamplingPeriods(periods []string) ([]DownsamplingPeriod, error) {
-	if len(periods) == 0 {
-		return nil, nil
-	}
-	var dsps []DownsamplingPeriod
-	for _, period := range periods {
-		var dsp DownsamplingPeriod
-		if err := dsp.parse(period); err != nil {
-			return nil, fmt.Errorf("cannot parse downsampling period %q: %w", period, err)
-		}
-		dsps = append(dsps, dsp)
-	}
-	sort.Slice(dsps, func(i, j int) bool {
-		return dsps[i].Offset > dsps[j].Offset
-	})
-	dspPrev := dsps[0]
-	// sanity checks.
-	for _, dsp := range dsps[1:] {
-		if dspPrev.Interval <= dsp.Interval {
-			return nil, fmt.Errorf("prev downsampling interval %d must be bigger than the next interval %d", dspPrev.Interval, dsp.Interval)
-		}
-		if dspPrev.Offset == dsp.Offset {
-			return nil, fmt.Errorf("duplicate downsampling offset: %d", dsp.Offset)
-		}
-		if dspPrev.Interval%dsp.Interval != 0 {
-			return nil, fmt.Errorf("downsamping intervals must be multiples; prev: %d, current: %d", dspPrev.Interval, dsp.Interval)
-		}
-		dspPrev = dsp
-	}
-	return dsps, nil
-}
--- a/lib/storage/downsampling_test.go
+++ b/lib/storage/downsampling_test.go
@@ -1,62 +0,0 @@
-package storage
-
-import (
-	"strings"
-	"testing"
-)
-
-func TestParseDownsamplingPeriodsFailure(t *testing.T) {
-	f := func(name string, src []string) {
-		t.Helper()
-		t.Run(name, func(t *testing.T) {
-			if _, err := parseDownsamplingPeriods(src); err == nil {
-				t.Fatalf("want fail for input: %s", strings.Join(src, ","))
-			}
-		})
-	}
-	f("empty duration", []string{"15d"})
-	f("empty interval", []string{":1m"})
-	f("incorrect duration decrease", []string{"30d:15h", "60d:1h"})
-	f("duplicate offset", []string{"30d:15h", "30d:1h"})
-	f("duplicate interval", []string{"60d:1h", "30d:1h"})
-	f("not multiple intervals", []string{"90d:12h", "60:9h", "30d:7h"})
-}
-
-func TestParseDownsamplingPeriodsSuccess(t *testing.T) {
-	f := func(name string, src []string, expected []DownsamplingPeriod) {
-		t.Helper()
-		t.Run(name, func(t *testing.T) {
-			dsps, err := parseDownsamplingPeriods(src)
-			if err != nil {
-				t.Fatalf("cannot parse downsampling configuration for: %s, err: %s", strings.Join(src, ","), err)
-			}
-			assertDownsamplingPeriods(t, expected, dsps)
-		})
-	}
-	f("one period", []string{"30d:1m"}, []DownsamplingPeriod{
-		{Offset: 30 * 24 * 3600 * 1000, Interval: 60 * 1000},
-	})
-	f("three periods", []string{"15d:30s", "30d:1m", "60d:15m"}, []DownsamplingPeriod{
-		{Offset: 60 * 24 * 3600 * 1000, Interval: 15 * 60 * 1000},
-		{Offset: 30 * 24 * 3600 * 1000, Interval: 60 * 1000},
-		{Offset: 15 * 24 * 3600 * 1000, Interval: 30 * 1000},
-	})
-	f("with the same divider periods", []string{"15d:1m", "30d:7m", "60d:14m", "90d:28m"}, []DownsamplingPeriod{
-		{Offset: 90 * 24 * 3600 * 1000, Interval: 28 * 60 * 1000},
-		{Offset: 60 * 24 * 3600 * 1000, Interval: 14 * 60 * 1000},
-		{Offset: 30 * 24 * 3600 * 1000, Interval: 7 * 60 * 1000},
-		{Offset: 15 * 24 * 3600 * 1000, Interval: 60 * 1000},
-	})
-}
-
-func assertDownsamplingPeriods(t *testing.T, want, got []DownsamplingPeriod) {
-	t.Helper()
-	if len(want) != len(got) {
-		t.Fatalf("len mismatch, want: %d, got: %d", len(want), len(got))
-	}
-	for i := 0; i < len(want); i++ {
-		if want[i] != got[i] {
-			t.Fatalf("want period: %s, got period: %s, idx: %d", want[i], got[i], i)
-		}
-	}
-}
--- a/lib/storage/metric_name.go
+++ b/lib/storage/metric_name.go
@@ -400,12 +400,6 @@ func (mn *MetricName) String() string {
 	return fmt.Sprintf("%s{%s}", mnCopy.MetricGroup, tagsStr)
 }

-// SortAndMarshal sorts mn tags and then marshals them to dst.
-func (mn *MetricName) SortAndMarshal(dst []byte) []byte {
-	mn.sortTags()
-	return mn.Marshal(dst)
-}
-
 // Marshal appends marshaled mn to dst and returns the result.
 //
 // mn.sortTags must be called before calling this function
--- a/lib/storage/partition.go
+++ b/lib/storage/partition.go
@@ -1374,7 +1374,7 @@ func (pt *partition) releasePartsToMerge(pws []*partWrapper) {
 }

 func (pt *partition) isFinalDedupNeeded() bool {
-	dedupInterval := GetDedupInterval(pt.tr.MaxTimestamp)
+	dedupInterval := GetDedupInterval()

 	pws := pt.GetParts(nil, false)
 	minDedupInterval := getMinDedupInterval(pws)
@@ -1610,7 +1610,7 @@ func (pt *partition) mergePartsInternal(dstPartPath string, bsw *blockStreamWrit
 		return nil, fmt.Errorf("cannot merge %d parts to %s: %w", len(bsrs), dstPartPath, err)
 	}
 	if dstPartPath != "" {
-		ph.MinDedupInterval = GetDedupInterval(ph.MaxTimestamp)
+		ph.MinDedupInterval = GetDedupInterval()
 		ph.MustWriteMetadata(dstPartPath)
 	}
 	return &ph, nil
--- a/vendor/github.com/VictoriaMetrics/metricsql/transform.go
+++ b/vendor/github.com/VictoriaMetrics/metricsql/transform.go
@@ -74,7 +74,6 @@ var transformFuncs = map[string]bool{
 	"rand":                       true,
 	"rand_exponential":           true,
 	"rand_normal":                true,
-	"range":                      true,
 	"range_avg":                  true,
 	"range_first":                true,
 	"range_last":                 true,
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -146,7 +146,7 @@ github.com/VictoriaMetrics/fastcache
 # github.com/VictoriaMetrics/metrics v1.44.0
 ## explicit; go 1.24.0
 github.com/VictoriaMetrics/metrics
-# github.com/VictoriaMetrics/metricsql v0.87.1
+# github.com/VictoriaMetrics/metricsql v0.87.2
 ## explicit; go 1.24.2
 github.com/VictoriaMetrics/metricsql
 github.com/VictoriaMetrics/metricsql/binaryop
Author	SHA1	Message	Date
dependabot[bot]	92a6440a00	build(deps): bump github/codeql-action from 4.35.3 to 4.36.1 Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.3 to 4.36.1. - [Release notes](https://github.com/github/codeql-action/releases) - [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md) - [Commits](`e46ed2cbd0...87557b9c84`) --- updated-dependencies: - dependency-name: github/codeql-action dependency-version: 4.36.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-23 04:12:53 +00:00
Max Kotliar	d3641394d9	app/vmctl: fix edit link in vmctl's README	2026-06-22 18:01:23 +03:00
Pablo (Tomas) Fernandez	53a8f4bd47	docs: add `docs-check-links` target to docs Makefile (#11121 ) We have a `check-links` target in the vmdocs repository. This is a good start but it only detects broken links after changes in docs are merged into master in this repository. It would be nice to have a way to check the documentation in this repository (before creating a PR for instance). This PR introduces a `docs-check-links` target to the docs/Makefile. This lets us see if we have any new broken links in the current branch/PR before merging into main. Pros: - We can preview changes in docs before merging to master - No new tools/big changes required, only add a new target to the Makefile - Once we fix all links, we could add a GH Actions check Cons: - You need access to the vmdocs repo for this target to work - Running the check in GH Actions could be potentially complex because it needs to clone vmdocs, build the container, etc If this seems like a good idea, I could add the same check to the other repos (VL, VT, etc). PR https://github.com/VictoriaMetrics/VictoriaMetrics/pull/11121	2026-06-22 16:10:30 +03:00
Max Kotliar	2b256952c9	go.mod: update metricsql pacakge v0.87.2 reverts range() function support (PR: https://github.com/VictoriaMetrics/metricsql/pull/76) Reason given in https://github.com/VictoriaMetrics/VictoriaMetrics/issues/11028#issuecomment-4728207220	2026-06-22 16:06:51 +03:00
Aliaksandr Valialkin	12086e75de	docs/victoriametrics/goals.md: typo fix: replace the dot with a comma	2026-06-22 13:54:40 +02:00
f41gh7	d426575622	docs: update flags with actual v1.146.0 binaries Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:12:38 +02:00
f41gh7	a76b1ce0e3	docs: bump version to v1.146.0 Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:10:24 +02:00
f41gh7	5f49fb7f31	deplyoment/docker: bump version to v1.146.0 Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:09:55 +02:00
f41gh7	80d1104fca	update changelog Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:08:23 +02:00
f41gh7	ae59c2624c	docs: forward port LTS v1.122.25 changelog to upstream Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:06:02 +02:00
f41gh7	4661f69d9f	docs: forward port LTS v1.136.12 changelog to upstream Signed-off-by: f41gh7 <nik@victoriametrics.com>	2026-06-22 13:05:43 +02:00