Grafana Mimir provides horizontally scalable, highly available, multi-tenant, long-term storage for Prometheus.
Find a file
Alexander Weaver 37be1f6ac7
Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231)
#### What this PR does

Addresses https://pkg.go.dev/vuln/GO-2026-4341.

#### Which issue(s) this PR fixes or relates to

n/a

#### Checklist

- [ ] Tests updated.
- [ ] Documentation added.
- [x] `CHANGELOG.md` updated - the order of entries should be
`[CHANGE]`, `[FEATURE]`, `[ENHANCEMENT]`, `[BUGFIX]`. If changelog entry
is not needed, please add the `changelog-not-needed` label to the PR.
- [ ]
[`about-versioning.md`](https://github.com/grafana/mimir/blob/main/docs/sources/mimir/configure/about-versioning.md)
updated with experimental features.

<!-- CURSOR_SUMMARY -->
---

> [!NOTE]
> **Low Risk**
> Primarily a patch-level Go version bump and build tooling updates;
risk is limited to potential CI/build or runtime regressions from the
toolchain change.
> 
> **Overview**
> Upgrades the project’s Go toolchain from `1.25.5` to `1.25.6` to
address **CVE-2025-61726**.
> 
> This updates the `go.mod` Go version, the `mimir-build-image` base
image, the vendoring workflow’s `setup-go` version, and the `Makefile`
build-image tag; it also adds a corresponding `CHANGELOG.md` entry.
> 
> <sup>Written by [Cursor
Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit
5d85bf9e8c. This will update automatically
on new commits. Configure
[here](https://cursor.com/dashboard?tab=bugbot).</sup>
<!-- /CURSOR_SUMMARY -->

---------

Co-authored-by: alexweav <alexweav@users.noreply.github.com>
2026-02-03 12:53:47 -06:00
.config/go Remove Go telemetry from git repository, ignore it. (#9122) 2024-08-28 07:50:45 +02:00
.github Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231) 2026-02-03 12:53:47 -06:00
cmd Add -memberlist.rejoin-seed-nodes support (#14208) 2026-01-30 18:27:41 +01:00
development chore(deps): update alpine docker tag to v3.23.3 (main) (#14212) 2026-02-02 14:07:43 +01:00
docs docs: typo in contributing guidelines (#14225) 2026-02-03 17:52:11 +01:00
images Update logo image to be less jagged (#1484) 2022-03-15 14:05:49 +00:00
integration Remote execution: add support in query-frontends for evaluating multiple nodes in a single remote execution request (#14001) 2026-01-23 11:47:29 +11:00
mimir-build-image Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231) 2026-02-03 12:53:47 -06:00
operations fix(mimir-distributed): include image.registry in kafka statefulset (#14211) 2026-02-03 13:23:37 +01:00
packaging chore(deps): update debian:13 docker digest to 5cf544f (main) (#14075) 2026-01-19 07:39:11 +01:00
pkg [main] Update mimir-prometheus to 0d05c9113f4a (#14223) 2026-02-03 17:24:44 +00:00
tools Remove the -target=flusher support (#14032) 2026-01-23 13:23:02 +00:00
vendor [main] Update mimir-prometheus to 0d05c9113f4a (#14223) 2026-02-03 17:24:44 +00:00
.gitattributes Exclude vendor/ from PR size (#2229) 2020-03-09 12:00:15 +01:00
.gitconfig Rename prometheus-private to mimir-prometheus (#843) 2022-01-21 15:55:07 +00:00
.gitignore [release-3.0] Remove standalone mimir-continuous-test binary and image (#13114) 2025-10-23 16:16:43 -04:00
.golangci.yml mimirpb: copy custom values and ensure via exhaustruct (#13849) 2025-12-18 15:17:42 +01:00
.lintignore Remove old website (#1135) 2022-02-09 15:44:34 +01:00
.prettierignore Move the mimir-distributed helm chart into the mimir repository (#1925) 2022-05-30 11:02:02 +02:00
ADOPTERS.md Update ADOPTERS.md (#9620) 2024-10-15 09:31:57 +02:00
AGENTS.md Reconcile agent instructions (#14207) 2026-01-30 17:21:55 +01:00
CHANGELOG.md Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231) 2026-02-03 12:53:47 -06:00
CLAUDE.md Reconcile agent instructions (#14207) 2026-01-30 17:21:55 +01:00
CODE_OF_CONDUCT.md Fix code of conduct (#922) 2022-01-27 15:36:57 +01:00
CODEOWNERS codeowners: kick grafanabot out (#11194) 2025-04-11 07:46:16 -04:00
CONTRIBUTING.md fixes link (#1476) 2022-03-14 17:06:57 +01:00
go.mod Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231) 2026-02-03 12:53:47 -06:00
go.sum [main] Update mimir-prometheus to 0d05c9113f4a (#14223) 2026-02-03 17:24:44 +00:00
GOVERNANCE.md Updates governance to reflect special handling for Grafana Cloud Hosted Metrics engineers 2026-01-21 18:13:34 +01:00
LICENSE Apply standard Grafana Labs governance and license (#22) 2021-08-05 14:40:22 +02:00
LICENSING.md Change license for operations folder to Apache2. (#5753) 2023-08-22 12:27:49 +02:00
MAINTAINERS.md Remove dimitarvdimitrov from the maintainers list (#13870) 2025-12-22 14:57:25 +00:00
Makefile Upgrade Go to 1.25.6 due to CVE-2025-61726 (#14231) 2026-02-03 12:53:47 -06:00
Makefile.local.example Push all images to Docker Hub (#1204) 2022-02-16 16:27:05 +00:00
README.md Fix broken link in readme, and add redirect to docs. (#6115) 2023-09-25 09:51:02 +02:00
RELEASE.md Remove GEM mentions from release documentation (#13255) 2025-10-30 12:43:44 +01:00
renovate.json5 renovate: add custom manager to watch for distroless docker image in Makefile (#14197) 2026-01-30 11:22:47 +01:00
VERSION 3.0.2 - update version and changelog (#13910) 2026-01-02 13:52:03 +08:00

Grafana Mimir

Grafana Mimir logo

Grafana Mimir is an open source software project that provides a scalable long-term storage for Prometheus. Some of the core strengths of Grafana Mimir include:

  • Easy to install and maintain: Grafana Mimirs extensive documentation, tutorials, and deployment tooling make it quick to get started. Using its monolithic mode, you can get Grafana Mimir up and running with just one binary and no additional dependencies. Once deployed, the best-practice dashboards, alerts, and runbooks packaged with Grafana Mimir make it easy to monitor the health of the system.
  • Massive scalability: You can run Grafana Mimir's horizontally-scalable architecture across multiple machines, resulting in the ability to process orders of magnitude more time series than a single Prometheus instance. Internal testing shows that Grafana Mimir handles up to 1 billion active time series.
  • Global view of metrics: Grafana Mimir enables you to run queries that aggregate series from multiple Prometheus instances, giving you a global view of your systems. Its query engine extensively parallelizes query execution, so that even the highest-cardinality queries complete with blazing speed.
  • Cheap, durable metric storage: Grafana Mimir uses object storage for long-term data storage, allowing it to take advantage of this ubiquitous, cost-effective, high-durability technology. It is compatible with multiple object store implementations, including AWS S3, Google Cloud Storage, Azure Blob Storage, OpenStack Swift, as well as any S3-compatible object storage.
  • High availability: Grafana Mimir replicates incoming metrics, ensuring that no data is lost in the event of machine failure. Its horizontally scalable architecture also means that it can be restarted, upgraded, or downgraded with zero downtime, which means no interruptions to metrics ingestion or querying.
  • Natively multi-tenant: Grafana Mimirs multi-tenant architecture enables you to isolate data and queries from independent teams or business units, making it possible for these groups to share the same cluster. Advanced limits and quality-of-service controls ensure that capacity is shared fairly among tenants.

Migrating to Grafana Mimir

If you're migrating to Grafana Mimir, refer to the following documents:

Deploying Grafana Mimir

For information about how to deploy Grafana Mimir, refer to Deploy Grafana Mimir.

Getting started

If youre new to Grafana Mimir, read the Get started guide.

Before deploying Grafana Mimir in a production environment, read:

  1. An overview of Grafana Mimirs architecture
  2. Configure Grafana Mimir
  3. Run Grafana Mimir in production

Documentation

Refer to the following links to access Grafana Mimir documentation:

Contributing

To contribute to Grafana Mimir, refer to Contributing to Grafana Mimir.

Join the Grafana Mimir discussion

If you have any questions or feedback regarding Grafana Mimir, join the Grafana Mimir Discussion. Alternatively, consider joining the monthly Grafana Mimir Community Call.

Your feedback is always welcome, and you can also share it via the #mimir Slack channel.

License

Grafana Mimir is distributed under AGPL-3.0-only.