Bump github.com/VictoriaMetrics/VictoriaMetrics from 1.135.0 to 1.136.0

[dependabot]

Bumps github.com/VictoriaMetrics/VictoriaMetrics from 1.135.0 to 1.136.0.

Release notes

Sourced from github.com/VictoriaMetrics/VictoriaMetrics's releases.

v1.136.0

v1.136.0

Released at 2026-02-13

• SECURITY: upgrade Go builder from Go1.25.6 to Go1.26.0. See Go 1.26 release notes.

• SECURITY: upgrade base docker image (Alpine) from 3.23.2 to 3.23.3. See Alpine 3.23.3 release notes.

• FEATURE: dashboards/single, dashboards/cluster, dashboards/vmagent: add clickable source code links to the Logging rate panel in Drilldown. Users can use it to navigate directly to the source code location that generated those logs, making debugging and code exploration easier. See #10406.

• FEATURE: vmui: add Queries with most memory to execute section in Top Queries page of vmui. It can help users to find queries that consume most memory and potentially cause OOM. See #9330.

• FEATURE: vmui: make label value autocomplete context-aware by suggesting values only from series matching already selected label filters. See #9269.

• BUGFIX: all VictoriaMetrics components: respect default http client proxy env variables (HTTP_PROXY, HTTPS_PROXY, NO_PROXY). See #10385. Thanks to @​zane-deg for the contribution.

• BUGFIX: vmagent and vmsingle: properly expose kubernetes_sd discovery network dialer metrics vm_promscrape_discovery_kubernetes_conn_*. See #10382.

• BUGFIX: vmsingle: slightly reduce memory usage for metrics-metadata ingestion. See #10392.

• BUGFIX: VictoriaMetrics enterprise vmagent and vmsingle: introduce time‑based manual offset commit for kafka consumer to fix performance degradation with enabled manual commit. After this change, the consumer will commit partition offsets in batch per second to avoid high commit QPS on the Kafka broker. It's no longer recommended to set enable.auto.commit=true in -kafka.consumer.topic.options, as vmagent will automatically manage it. See #10395.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: fix vm_deduplicated_samples_total{type="select"} to correctly count deduplicated identical samples with the same timestamp and value. See #10400.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: properly prettify metricsql queries with regex. See metricsql#60. Thanks to @​freeseacher for the contribution.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: previously the Graphite render API used a fixed process timeout that could expire before long queries completed; now the timeout follows the query deadline, so users can extend it via -search.maxQueryDuration or the timeout argument in the query. See #8484.

• BUGFIX: vmsingle and vmstorage in VictoriaMetrics cluster: properly report last partition metrics at the end of current month. See #10387.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: avoid slow-path deduplication for time series with staleness markers. See #10384. Thanks to @​fxrlv for the contribution.

• BUGFIX: vmsingle, vminsert in VictoriaMetrics cluster and vmagent: ensure proper reset of buf size for OpenTelemetry ingestion, and allow flushing when buf size exceeds 4MiB. Previously, when a small number of requests carried a large volume of time series or labels, buf was over-expanded and recycled to the pool, resulting in excessive memory usage. See #10378.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: correctly display hierarchy of actions in query trace during index searches. Before, search within the specific index was placed out of scope in the trace. See #10459.

Commits

• 7386a35 docs/changelog: cut v1.136.0
• 6be2d89 app/vmselect: run make vmui-update
• e5c8581 lib/storage: optimize metricIDCache sharding (#10468)
• 14bc515 lib/storage: properly report metrics for the last partition
• 7db81d0 docs/changelog: chore tip before release
• ad62fe8 go.mod: update metricsql
• 40b85eb Makefile: rename integration-test to apptest (#10461)
• 88b2464 docs: simplify wording in the top section (#10451)
• e4221f9 docs: mention top query by memory usage
• d40696a Add restarts annotation to remaining dashboards (#10439)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)