Dear Prometheans,
Prometheus 3.5.5 is available. This release is built with Go 1.25.12 and fixes a security issue in a UI dependency.
- [SECURITY] UI: Bump sanitize-html to v2.17.5 to fix CVE-2026-53606. #19060
Note that the 3.5 LTS line reaches end of life this July. We recommend that users upgrade to Prometheus 3.13, the current LTS release, to keep receiving bug fixes and security updates.
See the full changelog and downloads:
https://github.com/prometheus/prometheus/releases/tag/v3.5.5Enjoy.
Julien @roidelapluie