3.10.0 / 2026-02-24
2026-03-04T21:28:38Z•a9a40cd02d335636909305ccffea62911dd59f3748d1b656722c83455ffc537d
LTSalertingcontainer-securitydependency-updatedistrolessdockermetricsnon-rootpermissionsprometheusreleasevolume-migration
What happened
Prometheus 3.10.0 introduces a distroless container image variant (prom/prometheus:<tag>-distroless) alongside the existing busybox variant (busybox remains the default tag). The distroless image reduces attack surface and runs as non‑root (UID/GID 65532) and removes the VOLUME declaration. Migration notes: for named Docker volumes, change ownership before switching images (example: docker run --rm -v prometheus-data:/prometheus alpine chown -R 65532:65532 /prometheus) and then start prom/prometheus:latest-distroless; bind mounts may need manual permission adjustments. Additional changes in 3.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- prometheus_prometheus_releases
- Record identifier
- a9a40cd02d335636909305ccffea62911dd59f3748d1b656722c83455ffc537d
- Enrichment time
- 2026-03-04T21:28:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.