What openobserve/openobserve shipped
Generated by FoxPlug from public activity — not affiliated with Openobserve.
Week of September 14, 2026
What shipped
- Released v1.0.3 with backported fixes for OTLP series identity, PromQL operations, and merge job handling. Release
- Fixed PromQL metrics index to return no data instead of crashing when a selector matches no series in an already-merged hour. Pull request #14660
- Moved cipher key permission checks into a single helper to protect all search entry points that run caller-supplied SQL. Pull request #14654
- Added frontend caching layer built on TanStack Query so list pages and dashboard panels load from cache instead of refetching on every visit. Pull request #13642
- Replaced signup-moment community Slack invite with a day-2 follow-up and added a prompt to connect the first data source during onboarding. Pull request #14652
- Fixed OTLP gRPC handlers to properly acknowledge export failures instead of reporting them as success. Pull request #14653
- Fixed compactor to stream merged files to disk instead of buffering them in memory, reducing peak memory usage during compaction. Pull request #14593
- Escaped series names in PromQL chart tooltips to prevent HTML injection from metric label values. Pull request #14656
- Escaped query values in SQL chart tooltips to prevent HTML injection from Sankey node names, series names, and other data-derived strings. Pull request #14657
- Bounded HA queue retention to prevent NATS streams from filling with seconds-old messages and blocking new consumers. Pull request #14642
Why it matters
Multiple PromQL fixes restore correct behavior for absent_over_time, predict_linear, scalar, and range selectors. Security improvements protect against HTML injection in dashboards and enforce cipher key permissions consistently. Backend optimizations reduce memory usage during compaction and queue retention.
Changelog entry
- fix(promql): return no data when the metrics index prunes every file (#14660) Pull request #14660
- fix(search): check cipher key permissions on every query entry point (#14654) Pull request #14654
- fix(dashboards): escape series names in PromQL chart tooltips (#14656) Pull request #14656
- fix(dashboards): escape query values in SQL chart tooltips (#14657) Pull request #14657
- fix: stop acknowledging failed OTLP gRPC exports as success (#14653) Pull request #14653
- feat: Onboarding connect data popup with day-2 Slack invite follow-up (#14652) Pull request #14652
- fix: bound HA queue retention and update max_age on existing NATS streams (#14642) Pull request #14642
- fix(compactor): stream the merged file to disk instead of buffering it in memory (#14593) Pull request #14593
- feat: frontend caching layer built on TanStack Query (#13642) Pull request #13642
- fix: report absence when absent_over_time matches no series (#14611) Pull request #14611
- fix: answer an instant range selector with its whole window (#14618) Pull request #14612
- fix: require two samples before predict_linear predicts (#14612) Pull request #14612
- fix: make scalar() reduce to a scalar (#14619) Pull request #14619
v1.0.3 ships PromQL fixes for absent_over_time, predict_linear, scalar, and range selectors. HTML injection protection for dashboard tooltips. Compactor now streams merged files to disk. OTLP gRPC handlers properly acknowledge failures.
v1.0.3 brings critical PromQL corrections, dashboard security hardening, and compaction efficiency improvements. PromQL now correctly handles absent_over_time, predict_linear, scalar functions and range selectors. Dashboard tooltips are protected against HTML injection from metric labels and query values. The compactor streams merged files to disk instead of buffering, reducing peak memory. OTLP gRPC handlers now properly report export failures.