2025.2 Series Release Notes

21.0.1

セキュリティー上の問題

• Bug #2161276: Fixed a vulnerability where passing all_projects=false in alarm queries bypassed project scope filtering. Previously, the presence of all_projects in the query caused the project scoping logic to be skipped entirely, allowing non-admin users to list alarms from all projects. Queries with all_projects=false or without all_projects now correctly restrict results to the caller's project.

21.0.0

新機能

• Added collection of alarm evaluation counters. These show the number of times alarms were evaluated as alarm, ok and insufficient data per alarm. These counters are presented by the /v2/metrics API endpoint. This feature can be enabled or disabled with the [DEFAULT].enable_evaluation_results_metrics configuration option. It's disabled by default.

アップグレード時の注意

• The deprecated [DEFAULT] http_timeout option has been removed.

• Support for Python 3.9 has been removed. Now Python 3.10 is the minimum version supported.

廃止予定の機能

• Deprecate the prometheus_disable_rbac config option. The observabilityclient rbac feature isn't meant for services and will always be disabled from now on.

バグ修正

• [bug 2106029] Fix Prometheus type queries misusing observabilityclient rbac feature.