- Blog /
- VictoriaMetrics August 2026 Ecosystem Updates

August is a month when things typically quiet down. At VictoriaMetrics, however, we kept up the pace. This month saw two VictoriaMetrics releases, vmanomaly updates, a new Tech Talk, and great blog posts from the VictoriaMetrics team you might have missed:
This release addresses five security advisories. We recommend upgrading if you’re running a vulnerable version, especially for deployments using -httpAuth.username and -httpAuth.password flags for access control.
Affected versions are:
-httpAuth.username and -httpAuth.password flags. Versions v1.151.0, v1.148.3, and v1.136.17 are not affected by this vulnerability.vm_app_prev_shutdown_unclean metric reports whether the previous shutdown was clean. It’s exposed by vmsingle, vmstorage, vmselect, and vmagent, making it easier to spot crashes or forced restarts.This version is impacted by an HTTP Basic Auth bypass vulnerability. We recommend upgrading to v.1.151.0.
--enableMultitenancyViaHeaders. VictoriaMetrics now accepts tenant IDs through HTTP headers without extra configuration, aligning multi-tenancy configuration with VictoriaLogs and VictoriaTraces.-search.maxConcurrentRequests now scales with the number of available CPU cores instead of stopping at a fixed maximum of 16./api/v1/query and /api/v1/query_range return 400 Bad Request instead of 422 for invalid parameters, matching Prometheus behavior.The new vmanomaly release adds to the new features shipped during the 2nd quarter of 2026.
We recommend upgrading directly to v1.30.4, as v1.30.3 can fail inference for Temporal Envelope checkpoints created by v1.130.0 to v1.30.2. vmanomaly v1.30.4 fixes compatibility issues in all multivariate Temporal Envelope checkpoints. Before a stateful rollout, run --dryRun or use the MCP/skills compatibility checks to catch issues early. See the migration guide for details.
v1.30.4 fixes two regressions in v1.30.3
v1.30.3 highlights
batch_max_series and batch_max_bytes to split large forecast outputs, reducing HTTP and serialization overhead./vmui, /metrics, and other query-server endpoints.Custom model users: Automated compatibility checks don’t cover custom Python code, dependencies, or serialized state. If you maintain a custom many-to-one model that relies only on is_multivariate = True, you now need to explicitly declare topology = ModelTopology.MANY_TO_ONE. Built-in multivariate models remain compatible without changes.
If you’re running v1.29.1 or newer, you can upgrade directly. For older versions, use the migration guide and run a dry run first, or let the skills and MCP server automate backward-compatibility checks.
reader.workers setting gives you more predictable resource usage during data reads.settings.native_threads_per_worker setting reduces CPU contention, memory pressure, and fit latency.fit_every cycle.vmoperator compatibility ahead: the next vmoperator release adds typed spec.reader.workers support and recognizes query-level detection direction and deviation guardrails in VMAnomalyConfig. Note that settings.native_threads_per_worker stays part of the raw vmanomaly configuration and isn’t exposed as a typed operator field.
In August, Tech Talk is back with an AI-assisted issue troubleshooting demo. This time, Palmersheim and co-founder Roman Khavronenko ran AI agents on VictoriaMetrics, VictoriaLogs, VictoriaTraces, and vmanomaly using the VictoriaMetrics Agent Skills and MCP servers to troubleshoot incidents.
JetBrains organized a launch party for Go v1.27, and Jesus Espino was invited to give a talk on the Go Select Statement. Check out the recording below if you missed the talk.
That’s it for August. Back with more next month.
VictoriaMetrics July updates bring a new LTS release, vmestimator, and a set of improvements across the stack that make operations simpler and observability more practical.
Take a look at what we shipped in the first half of 2026 across VictoriaMetrics: metrics, logs, traces, and cloud,with improvements in performance, scalability, and usability.
May 2026 VictoriaMetrics release roundup: v1.144.0 brings 15 bug fixes and 9 UX improvements for reliability and observability, while v1.143.0 adds native Prometheus histogram ingestion support across vmagent, vmsingle, and vminsert. Also includes the first LTS release for VictoriaMetrics Operator.
VictoriaMetrics April 2026 release round‑up: heads up about critical VictoriaMetrics bugfixes in v1.141.0–v1.142.0, and explore new VictoriaLogs features including Splunk ingestion and advanced LogsQL tooling.