This release fixes issues for SREs watching stability and regressions.
✓ No known CVEs patched in this version
Topics
+10 more
Affected surfaces
ReleasePort's take
Moderate signalTelegraf v1.38.4 improves Windows agent startup observability and fixes concurrent-access issues across multiple input plugins. Includes dependency updates and minor feature additions.
Why it matters: Fixes resolve Windows startup logging gaps and prevent data races in high-throughput inputs. Apply at next maintenance window; no breaking changes required.
Summary
AI summaryLog Windows service startup errors, create missing log‑file directory on start, and reset secret‑counter on reload.
Changes in this release
| Type | Severity | Summary | CVE |
|---|---|---|---|
| Feature | Medium |
Support byte arrays in decoding Support byte arrays in decoding Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Expose explicit cache sample and page fields Expose explicit cache sample and page fields Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Feature | Medium |
Return errors from write factory Return errors from write factory Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump cloud.google.com/go/bigquery to 1.77.0 Bump cloud.google.com/go/bigquery to 1.77.0 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump cloud.google.com/go/monitoring to 1.28.0 Bump cloud.google.com/go/monitoring to 1.28.0 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump github.com/Azure/azure-kusto-go to 1.2.2 Bump github.com/Azure/azure-kusto-go to 1.2.2 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump github.com/Azure/go-ntlmssp to 0.1.1 Bump github.com/Azure/go-ntlmssp to 0.1.1 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump github.com/ClickHouse/clickhouse-go/v2 to 2.46.0 Bump github.com/ClickHouse/clickhouse-go/v2 to 2.46.0 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump github.com/Masterminds/semver/v3 to 3.5.0 Bump github.com/Masterminds/semver/v3 to 3.5.0 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump github.com/apache/thrift to 0.23.1-0.20260429145742-d2acd3c49e58 Bump github.com/apache/thrift to 0.23.1-0.20260429145742-d2acd3c49e58 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump go.step.sm/crypto to 0.77.9 Bump go.step.sm/crypto to 0.77.9 Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Dependency | Medium |
Bump various other dependencies (see full list) Bump various other dependencies (see full list) Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Performance | Medium |
Lock stats cache before reading Lock stats cache before reading Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Performance | Medium |
Reconnect transparently when TCP peer closes connection Reconnect transparently when TCP peer closes connection Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Log Windows service startup errors to configured logger Log Windows service startup errors to configured logger Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Ensure log-file directory exists Ensure log-file directory exists Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Reset secret-counter on reload Reset secret-counter on reload Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Honor host path environment variables on Linux Honor host path environment variables on Linux Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Acquire lock before saving shard consumers Acquire lock before saving shard consumers Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Disable auto-reconnect to fix session flood Disable auto-reconnect to fix session flood Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Enforce string type for vendor and product IDs Enforce string type for vendor and product IDs Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Bugfix | Medium |
Handle public GCP service account keys correctly Handle public GCP service account keys correctly Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Make Close safe to call multiple times Make Close safe to call multiple times Source: llm_adapter@2026-05-21 Confidence: high |
— |
| Refactor | Medium |
Repair CI after go-hue v1.2.0 upgrade Repair CI after go-hue v1.2.0 upgrade Source: llm_adapter@2026-05-21 Confidence: high |
— |
Full changelog
v1.38.4 [2026-05-11]
Bugfixes
- #18816
agentLog Windows service startup errors to configured logger - #18818
agentMake sure the log-file directory exists - #18839
agentReset secret-counter on reload - #18827
common.adxMake Close safe to call multiple times - #18825
common.opcuaSupport byte arrays in decoding - #18682
inputs.diskioHonor host path environment variables on Linux - #18878
inputs.dockerLock stats cache before reading - #18778
inputs.huebridgeRepair CI after go-hue v1.2.0 upgrade - #18875
inputs.kinesis_consumerAcquire lock before saving shard consumers - #18820
inputs.lustre2Expose explicit cache sample and page fields - #18813
inputs.opcuaDisable auto-reconnect to fix session flood - #18626
inputs.upsdEnforce string type for vendor and product IDs - #18774
outputs.graylogReconnect transparently when TCP peer closes connection - #18821
outputs.timestreamReturn errors from write factory - #18785
secretstores.googlecloudHandle public GCP service account keys correctly
Dependency Updates
- #18843
depsBump cloud.google.com/go/bigquery from 1.76.0 to 1.77.0 - #18754
depsBump cloud.google.com/go/monitoring from 1.26.0 to 1.27.0 - #18844
depsBump cloud.google.com/go/monitoring from 1.27.0 to 1.28.0 - #18770
depsBump cloud.google.com/go/pubsub/v2 from 2.5.1 to 2.6.0 - #18751
depsBump cloud.google.com/go/storage from 1.62.0 to 1.62.1 - #18802
depsBump github.com/Azure/azure-kusto-go from 0.16.1 to 1.2.2 - #18766
depsBump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 - #18789
depsBump github.com/Azure/go-ntlmssp from 0.1.0 to 0.1.1 - #18855
depsBump github.com/ClickHouse/clickhouse-go/v2 from 2.45.0 to 2.46.0 - #18847
depsBump github.com/IBM/nzgo/v12 from 12.0.11 to 12.0.12 - #18797
depsBump github.com/IBM/sarama from 1.47.0 to 1.48.0 - #18854
depsBump github.com/Masterminds/semver/v3 from 3.4.0 to 3.5.0 - #18768
depsBump github.com/SAP/go-hdb from 1.16.5 to 1.16.6 - #18852
depsBump github.com/SAP/go-hdb from 1.16.6 to 1.16.7 - #18762
depsBump github.com/alitto/pond/v2 from 2.7.0 to 2.7.1 - #18853
depsBump github.com/apache/arrow-go/v18 from 18.5.2 to 18.6.0 - #18758
depsBump github.com/apache/iotdb-client-go from 1.3.5 to 1.3.7 - #18877
depsBump github.com/apache/thrift from 0.22.0 to 0.23.1-0.20260429145742-d2acd3c49e58 - #18752
depsBump github.com/aws/smithy-go from 1.24.3 to 1.25.0 - #18795
depsBump github.com/aws/smithy-go from 1.25.0 to 1.25.1 - #18809
depsBump github.com/bluenviron/gomavlib/v3 from 3.3.0 to 3.3.1 - #18812
depsBump github.com/emiago/sipgo from 1.3.0 to 1.3.1 - #18845
depsBump github.com/go-sql-driver/mysql from 1.9.3 to 1.10.0 - #18756
depsBump github.com/hashicorp/consul/api from 1.34.0 to 1.34.1 - #18801
depsBump github.com/hashicorp/consul/api from 1.34.1 to 1.34.2 - #18781
depsBump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 - #18803
depsBump github.com/jedib0t/go-pretty/v6 from 6.7.9 to 6.7.10 - #18841
depsBump github.com/klauspost/compress from 1.18.5 to 1.18.6 - #18800
depsBump github.com/leodido/go-syslog/v4 from 4.4.0 to 4.5.0 - #18850
depsBump github.com/microsoft/go-mssqldb from 1.9.8 to 1.10.0 - #18765
depsBump github.com/moby/moby/api from 1.54.1 to 1.54.2 - #18753
depsBump github.com/moby/moby/client from 0.4.0 to 0.4.1 - #18755
depsBump github.com/nats-io/nats-server/v2 from 2.12.6 to 2.12.7 - #18811
depsBump github.com/nats-io/nats-server/v2 from 2.12.7 to 2.12.8 - #18857
depsBump github.com/nats-io/nats-server/v2 from 2.12.8 to 2.14.0 - #18772
depsBump github.com/nats-io/nats.go from 1.50.0 to 1.51.0 - #18763
depsBump github.com/pborman/ansi from 1.0.0 to 1.1.0 - #18799
depsBump github.com/prometheus/prometheus from 0.311.2 to 0.311.3 - #18810
depsBump github.com/rabbitmq/amqp091-go from 1.10.0 to 1.11.0 - #18856
depsBump github.com/redis/go-redis/v9 from 9.18.0 to 9.19.0 - #18842
depsBump github.com/shirou/gopsutil/v4 from 4.26.3 to 4.26.4 - #18742
depsBump github.com/tdrn-org/go-hue from 0.3.0 to 1.2.0 - #18757
depsBump github.com/tinylib/msgp from 1.6.3 to 1.6.4 - #18796
depsBump github.com/vmware/govmomi from 0.53.0 to 0.53.1 - #18769
depsBump go.opentelemetry.io/collector/pdata from 1.55.0 to 1.56.0 - #18851
depsBump go.opentelemetry.io/collector/pdata from 1.56.0 to 1.57.0 - #18804
depsBump go.step.sm/crypto from 0.77.2 to 0.77.7 - #18846
depsBump go.step.sm/crypto from 0.77.7 to 0.77.9 - #18767
depsBump google.golang.org/api from 0.275.0 to 0.276.0 - #18848
depsBump google.golang.org/api from 0.276.0 to 0.277.0 - #18849
depsBump google.golang.org/grpc from 1.80.0 to 1.81.0 - #18760
depsBump k8s.io/api from 0.35.3 to 0.35.4 - #18759
depsBump k8s.io/client-go from 0.35.3 to 0.35.4 - #18798
depsBump k8s.io/client-go from 0.35.4 to 0.36.0 - #18771
depsBump modernc.org/sqlite from 1.48.2 to 1.49.1 - #18807
depsBump modernc.org/sqlite from 1.49.1 to 1.50.0 - #18764
depsBump software.sslmate.com/src/go-pkcs12 from 0.7.0 to 0.7.1 - #18750
depsBump the aws-sdk-go-v2 group across 1 directory with 11 updates - #18840
depsBump the aws-sdk-go-v2 group with 11 updates - #18794
depsBump the aws-sdk-go-v2 group with 2 updates - #18749
depsBump tj-actions/changed-files from 47.0.5 to 47.0.6
Packages
Arch | Platform | Package | SHA256
---| --- | --- | ---
arm64 | CentOS | telegraf-1.38.4-1.aarch64.rpm | 5257397a47090d7fc13f555ef6ba6776a633286c5f9ccbaece60fba5abbe40c9
armel | CentOS | telegraf-1.38.4-1.armel.rpm | 4fff77b63a64969d3e1b333cbeae0bfd2feee07198bf0e752c13c57b8b2a78a7
armv6hl | CentOS | telegraf-1.38.4-1.armv6hl.rpm | abb61b71241d750756fccc6dd92785850e780133c348a2719885cec5ac9ce364
i386 | CentOS | telegraf-1.38.4-1.i386.rpm | c806e6cc8ed8a0e242d705414e9d407744be6e7f0f8baf78d8f922ea4dfed38d
unknown | CentOS | telegraf-1.38.4-1.loongarch64.rpm | cc40c100379219000b145ac5d1d8f36795f439162ab2accb23aea594a06ba9d1
ppc64le | CentOS | telegraf-1.38.4-1.ppc64le.rpm | 31d4757b31cde05f18b8de6e1a37fe8efaf8827be7957196eddd3e305b923c24
riscv64 | CentOS | telegraf-1.38.4-1.riscv64.rpm | df3cb118998ce4b2b892e1b2a2b28cd89c07146391adf76b1bfec549e58eaad5
s390x | CentOS | telegraf-1.38.4-1.s390x.rpm | 7c09fbd538180b98c8e5fab69fb7cbeffdb750d97ccb0a05dcea23ce3290b482
amd64 | CentOS | telegraf-1.38.4-1.x86_64.rpm | bbd9fb9cc2c7fe09182f19c40361087a7a7a8a6ee3a837fd640f116349a93ad0
amd64 | macOS | telegraf-1.38.4_darwin_amd64.dmg | 3ca2d44109cd7a9ab58439ed7bc18deacfff13d835492f1032f094ff3686a6ba
amd64 | macOS | telegraf-1.38.4_darwin_amd64.tar.gz | aeabfecf1e9c2c5877c7ac3d1a339ce04d70980d0298dbb38d4b89fdef023433
arm64 | macOS | telegraf-1.38.4_darwin_arm64.dmg | cb1bd855f5129afe4f75d42fc3c15f5cb96ff593c7b6bb764bf30cc91360e21e
arm64 | macOS | telegraf-1.38.4_darwin_arm64.tar.gz | 9cd0e42122aeb4bcf7034a73a9215d53f9cb986ad40d03f5b17c719a639cf56a
amd64 | FreeBSD | telegraf-1.38.4_freebsd_amd64.tar.gz | a48821945036c47fcba05f2b5b3b2c4632c36bd5ccbc140a92927337384aed75
armv7 | FreeBSD | telegraf-1.38.4_freebsd_armv7.tar.gz | 2f04d0dcaa2913a146040fb1457bf9d7c0f0b8c56dd80600a87bef85f8fc657f
i386 | FreeBSD | telegraf-1.38.4_freebsd_i386.tar.gz | a33d5fe44a57336a3e27771e4913db59ea37bd3175f9b00e02acf2248cd47ae9
amd64 | Linux | telegraf-1.38.4_linux_amd64.tar.gz | 81857e9745ebf26e058b6fdc27b9b2c210fd1fe61e57d7fad3d4bb9131f60041
arm64 | Linux | telegraf-1.38.4_linux_arm64.tar.gz | 88799a83cc33856577a1740ae43b4ea6644dc5308167e48e67b245f3bcabecc5
armel | Linux | telegraf-1.38.4_linux_armel.tar.gz | cf94a4a11f16a9aedba31522adc6aeb69fdc74fe631a7263c695edb9c1316986
armhf | Linux | telegraf-1.38.4_linux_armhf.tar.gz | 67993b080b014523d6b9d666ff12797de0002a2feea6caeb08b8fa972c8fcde1
i386 | Linux | telegraf-1.38.4_linux_i386.tar.gz | c981a77f44e9a5835ecd296f0f96cd4d153e400ee1937db134e853251afd535b
loong64 | Linux | telegraf-1.38.4_linux_loong64.tar.gz | 55189c8b7fc2b8bf6eff34fc9ecc69870e5d7f20cffb0601a8d77a742a410047
mips | Linux | telegraf-1.38.4_linux_mips.tar.gz | 1497adb17d07b2893ae20c163ecf1ae454182272e784483542848fb4eff34c7b
mipsel | Linux | telegraf-1.38.4_linux_mipsel.tar.gz | 0bf613755b063f038e284df1645a6e78858e339df24e3d991d92f66f7ee97780
ppc64le | Linux | telegraf-1.38.4_linux_ppc64le.tar.gz | beccb4070ec4713c5db2a8f06f1b9aa26f5282fed417a53433926d060327aea2
riscv64 | Linux | telegraf-1.38.4_linux_riscv64.tar.gz | 385b544c4b12c238244887458c03e6015aea58c9e5a059331ad1dd7a0b28db6e
s390x | Linux | telegraf-1.38.4_linux_s390x.tar.gz | e101bf19419a0e857b94b4665a67e7946437d1085d951104f6387a1c34d69bf9
amd64 | Windows | telegraf-1.38.4_windows_amd64.zip | 6c7878ec319471ac85b82443baec2f3fa5dbcf1b6e2da5d5cd2cbb60fff2bb45
arm64 | Windows | telegraf-1.38.4_windows_arm64.zip | a46b87b7df5a1dd2523eabf4e7d365c7c239e40250e2749a5cab1d2625e1615b
i386 | Windows | telegraf-1.38.4_windows_i386.zip | 7258032093cd878b6b6f553b6255652d4e92aeea7240b6c7116873b1a411c482
amd64 | Debian | telegraf_1.38.4-1_amd64.deb | e4cc07567e4f5975287c95258f04c895384f43b0f0dbe8c284b89ed28143e90a
arm64 | Debian | telegraf_1.38.4-1_arm64.deb | eb6bde66ef437180ba3774fe0829d7cf239390f37d1046421c8067a6dc268591
armel | Debian | telegraf_1.38.4-1_armel.deb | 001a53f4911ae547da97ad8b621d72699ab12a0ec9331b71ec7e4ac69c767ba0
armhf | Debian | telegraf_1.38.4-1_armhf.deb | dd8524881f8963f8f9a9d73765932e9d0771bd140eb2eba1e31af4c381f081b8
i386 | Debian | telegraf_1.38.4-1_i386.deb | 53476100dfc7d3bb4294f69919075ddd7d3ce928c375e90d0551769a36798f77
loong64 | Debian | telegraf_1.38.4-1_loong64.deb | b6ce12cf2fe7ce516d9af791325e182bd7335e2f2feafd6f1eb9fa46c3ca2681
mips | Debian | telegraf_1.38.4-1_mips.deb | 2906b0cdd0a297dc26484ade3e2ee706ac3b3c35f02ac168c808cfdd05fbacb5
mipsel | Debian | telegraf_1.38.4-1_mipsel.deb | 01aad27539a112b11c275f5aebe2fa3d46e5c94637967ba59344cb8c5693e28d
ppc64el | Debian | telegraf_1.38.4-1_ppc64el.deb | 21207e3b022a428003b06d9007acee958479fc139c6f62726bfd7c4c71d7d089
riscv64 | Debian | telegraf_1.38.4-1_riscv64.deb | 25697d4cb7d5ee148f6d8c42e70accb2bbf961cc85c042738910aa4a64223ff4
s390x | Debian | telegraf_1.38.4-1_s390x.deb | 877f4279358ae856923493fb0cbb2bbfc1f19db63160b667413723b06a773651
Weekly OSS security release digest.
The CVE patches and breaking changes that affected production tools this week. One email, every Sunday.
No spam, unsubscribe anytime.
Share this release
About Telegraf
Agent for collecting, processing, aggregating, and writing metrics, logs, and other arbitrary data.
Related context
Related tools
Beta — feedback welcome: [email protected]