Nikolay a29229a877 lib/promscrape: prevent unbounded scrape error body read ...

Previously, on non-200 HTTP status codes, lib/promscrape performed an
unbounded body read, which could potentially result in OOM.

This commit adds a maxScrapeSize limit to error response body reads,
protecting against malicious or misbehaving metrics endpoints.

2026-04-16 22:50:08 +02:00

..

appmetrics

lib/{osinfo,appmetrics}: Move vm_os_info metric code to lib/appmetrics package (#10776)

2026-04-09 18:32:47 +03:00

atomicutil

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

auth

…

awsapi

lib/awsapi: pre-populate credentials only for static creds without roleARN

2026-04-16 11:51:42 +02:00

backup

fix: prevent deadlock in vmrestore worker pool on context cancellation

2026-04-16 22:44:31 +02:00

blockcache

all: run go fix -minmax

2026-02-18 19:24:27 +01:00

bloomfilter

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

bufferedwriter

app/vmselect: properly cancel long running requests on client connection close

2025-01-29 16:09:32 +01:00

buildinfo

app/vmselect: encode application version into manifest (#9654)

2025-09-05 17:02:11 +02:00

bytesutil

all: run go fix -mapsloop

2026-02-18 18:17:20 +01:00

cgroup

lib/cgroup: properly set process_cpu_cores_available metric

2025-07-17 20:46:49 +02:00

chunkedbuffer

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

consistenthash

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

contextutil

…

decimal

all: run go fix -minmax

2026-02-18 19:24:27 +01:00

encoding

lib/encoding: fix integer overflow in UnmarshalBytes (#10629)

2026-03-11 11:42:49 +01:00

envflag

app/vmauth: allow buffering request body before proxying it to the backend

2026-01-26 03:02:32 +01:00

envtemplate

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

fastnum

all: run go fix -minmax

2026-02-18 19:24:27 +01:00

fasttime

deployment/docker/Makefile: update Go builder from Go1.25.7 to Go1.26.0

2026-02-11 17:35:56 +01:00

filestream

docs/victoriametrics/changelog/CHANGELOG.md: add a description for the change in the commit dd2d6807e4

2026-04-02 13:18:38 +02:00

flagutil

all: run go fix -slicescontains

2026-02-18 18:17:20 +01:00

formatutil

…

fs

lib/fs: restore async deletion of NFS folders

2026-03-27 09:51:27 +01:00

htmlcomponents

…

httpserver

lib/httpserver: fixes tests after 686c9a21ff

2026-03-05 16:12:29 +01:00

httputil

lib/httputl: fix failing to access http2 sd service by the shadow copy of http.DefaultTransport

2025-11-13 17:19:15 +01:00

influxutil

lib: rename lib/influxutils to lib/influxutil for the sake of consistency naming of *util packages

2025-03-26 17:38:25 +01:00

ingestserver

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

ioutil

lib/protoparser/protoparserutil: reduce memory usage in ReadUncompressedData() when processing big number of incoming connections

2026-01-17 15:49:53 +01:00

jwt

lib/jwt: support array claim values in match_claims

2026-03-26 10:23:43 +01:00

leveledbytebufferpool

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

logger

lib/logger: count both printed and suppressed logs at vm_log_messages_total metric

2026-01-25 17:43:20 +01:00

logstorage

lib/{logstorage,prefixfilter}: remove these packages, since they have been moved to https://github.com/VictoriaMetrics/VictoriaLogs/ repository

2025-07-07 03:25:25 +02:00

lrucache

lib/lrucache: remove shards (#10697)

2026-03-26 16:28:01 +01:00

memory

lib/memory: add validation for remaining system memory

2025-12-05 18:14:04 +01:00

mergeset

lib/storage, lib/mergeset: properly account inmemoryPart refCount

2026-03-17 10:54:08 +01:00

metricsql

…

netutil

lib/netutil: warn when IPv6 listen address is used without -enableTCP6 (#10640)

2026-03-18 21:01:55 +02:00

persistentqueue

all: run go fix -fmtappendf

2026-02-18 18:21:02 +01:00

procutil

spelling and grammar fixes via codespell (#8497)

2025-03-17 16:32:10 +01:00

promauth

lib/promauth: make username optional in basic_auth section

2026-03-26 02:18:37 -07:00

prommetadata

lib/prommetadata: enable metrics metadata ingestion and storing by default (#10489)

2026-02-19 18:45:44 +02:00

prompb

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

promrelabel

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

promscrape

lib/promscrape: prevent unbounded scrape error body read

2026-04-16 22:50:08 +02:00

promutil

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

protoparser

lib/protoparser/protoparserutil: fix encoding -> contentType in the description of the ReadUncompressedData function

2026-04-10 15:20:27 +02:00

proxy

all: run go fix -slicescontains

2026-02-18 18:17:20 +01:00

pushmetrics

lib/pushmetrics: allow enabling push metrics via config

2026-01-30 13:02:13 +02:00

querytracer

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

ratelimiter

Spelling and Markdown Standards

2025-08-18 22:46:34 +02:00

regexutil

lib/regexutil: prevent panic error parsing regexp: expression nests too deeply

2026-02-20 11:51:42 +01:00

slicesutil

lib/streamaggr: concurrently push timeseries to aggregators

2025-10-24 10:29:48 +02:00

snapshot

all: consistently start error fmt.Errorf() messages with small letter

2025-07-15 00:12:40 +02:00

storage

lib/storage: fixes data race at startFreeDiskSpaceWatcher

2026-04-10 08:33:49 +02:00

streamaggr

lib/streamaggr: run go fix -rangeint

2026-02-18 14:28:30 +01:00

stringsutil

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

syncwg

…

tenantmetrics

lib: run go fix -rangeint

2026-02-18 14:28:31 +01:00

timerpool

lib/timerpool: remove misleading panic

2026-02-25 19:45:12 +01:00

timeserieslimits

lib/prompb: Merge prompbmarshal logic into prompb

2025-07-31 01:04:11 +03:00

timeutil

lib/timeutil: introduce backoff timer struct (#10714)

2026-04-02 12:31:28 +02:00

uint64set

lib/uint64set: move set un/marshal methods from Storage to uint64set (#10521)

2026-02-24 11:15:49 +01:00

workingsetcache

all: spelling fixes in code comments (#10650)

2026-03-16 11:11:54 +01:00

writeconcurrencylimiter

lib/writeconcurrencylimiter: prevent deadlock at IncConcurrency

2026-04-10 19:35:59 +02:00