What prometheus-operator/prometheus-operator shipped
Written by FoxPlug from the repository's own releases; not affiliated with Prometheus-operator. Paste your own repository in the box below and FoxPlug writes the same weekly update for your product. This page is an automatic summary of the releases, pull requests and commits in github.com/prometheus-operator/prometheus-operator; Prometheus-operator did not write it and does not use or endorse FoxPlug. Every line links to the change it describes.
Get a weekly update like this for your product, free
Week of September 28, 2026
What shipped
- PrometheusAgent now reconciles ServiceMonitor status bindings, handling invalid resources, multiple agents, and cleaning up stale bindings on deselection or agent deletion. Pull request #8860
- PrometheusAgent now reconciles PodMonitor status bindings with support for invalid resources and stale binding cleanup on deselection or agent deletion. Pull request #8859
- AlertmanagerConfig now includes finalizers on Alertmanager resources and performs binding garbage collection when configs are deselected or Alertmanager is deleted. Pull request #8843
- Fixed AlertmanagerConfig conversion webhook that was failing when email receivers did not set optional threading fields. Pull request #8858
- Added botToken support for Telegram in Alertmanager global config custom resources. Pull request #8403
- Updated Kubernetes dependencies to v0.37.1. Pull request #8857
- Enhanced Webhook test cases in Alertmanager config with improved test coverage. Pull request #8769
- Split and expanded email validation test cases for Alertmanager config. Pull request #8837
- Simplified detection logic for the StatusForConfigurationResources feature gate. Pull request #8862
Why it matters
This week brought improvements to status binding reconciliation for PrometheusAgent across ServiceMonitor and PodMonitor resources, bringing feature parity with existing Prometheus reconciliation patterns. AlertmanagerConfig also gained missing lifecycle management features including finalizers and binding cleanup. Several bug fixes and test enhancements ensure better reliability when converting and validating alerting configurations.
Changelog entry
- [FEATURE] PrometheusAgent reconciles ServiceMonitor status bindings including invalid resources and stale binding cleanup Pull request #8860
- [FEATURE] PrometheusAgent reconciles PodMonitor status bindings with stale binding cleanup support Pull request #8859
- [FEATURE] AlertmanagerConfig now includes finalizers and binding garbage collection on deselection and deletion Pull request #8843
- [FIX] AlertmanagerConfig conversion webhook no longer fails on email receivers without optional threading field Pull request #8858
- [FEATURE] Added botToken support for Telegram in Alertmanager global config custom resources Pull request #8403
- [CHORE] Updated Kubernetes dependencies to v0.37.1 Pull request #8857
- [TEST] Enhanced Webhook test cases in Alertmanager config Pull request #8769
- [TEST] Expanded email validation test coverage for Alertmanager config Pull request #8837
- [CHORE] Simplified StatusForConfigurationResources feature gate detection Pull request #8862
This week: PrometheusAgent now reconciles ServiceMonitor and PodMonitor status bindings, AlertmanagerConfig gains finalizers and binding cleanup, and fixes for email receiver conversion. Kubernetes dependencies updated to v0.37.1.
Prometheus-operator this week: PrometheusAgent now fully reconciles ServiceMonitor and PodMonitor status bindings with proper cleanup, AlertmanagerConfig implements the missing finalizer and binding garbage collection pattern, email receiver conversion webhook issues resolved, and Telegram botToken support added to Alertmanager global config. Kubernetes dependencies updated to v0.37.1.
Week of September 21, 2026
What shipped
- Version 0.94.1 released with a bugfix restoring update permission on finalizer subresources in the operator's ClusterRole, required by OwnerReferencesPermissionEnforcement when blockOwnerDeletion is set. Release
- RBAC permissions adjusted to scope down default permissions granted to the Prometheus operator service account, granting write permissions on Pods based on repair policy and read permissions on Nodes only when kubelet controller is enabled. Pull request #8828
- ThanosRuler remote-write version filtering fixed to correctly remove unsupported fields from generated configuration instead of just reporting them as ignored. Pull request #8813
- AlertmanagerConfig status subresource now updated during Alertmanager reconciliations. Pull request #8261
- URL validation added for RocketChat receiver configuration fields loaded from secrets, validating
api_url,title_link, andicon_url. Pull request #8224 - URL validation added for PagerDuty receiver configurations loaded from Alertmanager secrets. Pull request #8221
- Validation added for clientAuthType. Pull request #8823
- MS Teams V2 custom resource test cases for Alertmanager Config split into separate test cases. Pull request #8715
- Prometheus LTS latest version updated to v3.13.3. Pull request #8836
Why it matters
Version 0.94.1 fixes critical RBAC issues that affected finalizer operations and makes permissions more restrictive. Several validation improvements for remote write and receiver configurations enhance reliability and security of alerting configurations.
Changelog entry
- [BUGFIX] Restore update permission on finalizer subresources in the operator's ClusterRole, required by OwnerReferencesPermissionEnforcement when blockOwnerDeletion is set. Release
- [CHANGE] Adjust RBAC permissions to scope down default permissions, grant write on Pods based on repair policy, grant read on Nodes only when kubelet controller is enabled. Pull request #8828
- [BUGFIX] Fix ThanosRuler remote-write version filtering to correctly remove unsupported fields from generated configuration. Pull request #8813
- [FEATURE] Update AlertmanagerConfig status subresource during Alertmanager reconciliations. Pull request #8261
- [FEATURE] Add URL validation for RocketChat receiver configuration fields in secrets. Pull request #8224
- [FEATURE] Add URL validation for PagerDuty receiver configurations in secrets. Pull request #8221
- [FEATURE] Add validation for clientAuthType. Pull request #8823
- [CHANGE] Update Prometheus LTS latest version to v3.13.3. Pull request #8836
Prometheus-operator 0.94.1 is out. This release fixes RBAC permissions for finalizers and continues improving validation for alerting receivers and remote write configurations.
Prometheus-operator 0.94.1 is now available. This release addresses RBAC permission scoping for the operator service account, fixes ThanosRuler remote-write field filtering, and adds URL validation for alerting receivers. Updates include improved status handling for AlertmanagerConfigs and enhanced permission controls based on repair policies.
Week of September 14, 2026
What shipped
- Topology sharding now reports unbalanced configurations in the Reconciled condition when the number of shards is not a multiple of the number of zones. Pull request #8670
- Added govulncheck workflow to detect vulnerabilities in dependencies. Pull request #8824
- Enabled unused and whitespace linters in the golangci-lint configuration. Pull request #8827
- Added test verification for TLS connections to Alertmanager. Pull request #8821
- Fixed grammar in PrometheusRule developer documentation. Pull request #8817
Why it matters
The week focused on improving code quality and testing coverage. Topology sharding now provides better visibility into configuration issues, while new linting checks and vulnerability scanning help catch problems earlier in development.
Changelog entry
- Topology sharding now reports unbalanced configurations in Reconciled condition when shards is not a multiple of zone count Pull request #8670
- Added govulncheck workflow for vulnerability detection Pull request #8824
- Enabled unused and whitespace linters in golangci-lint Pull request #8827
- Added TLS connection verification tests for Alertmanager Pull request #8821
This week: topology sharding reports unbalanced configurations, govulncheck workflow added for vulnerability detection, unused and whitespace linters enabled, TLS connection tests for Alertmanager, and documentation grammar fixes.
This week in prometheus-operator: Topology sharding now reports unbalanced configurations in the Reconciled condition when shard counts don't align with zone counts. We added govulncheck workflow for vulnerability detection and enabled additional linters for code quality. TLS connection verification tests for Alertmanager were introduced, and documentation improvements continue.