- - maxLabelsPerTimeseries, maxLabelNameLen and maxLabelValueLen flags now drop series that exceed limits and expose new reason metrics; vmagent and single‑node/vminsert honor these limits.
- - Docker service discovery defaults to matching the first network and adds support for linked networks, with corresponding flags for vmagent and single‑node deployments.
- - Security upgrades: Go builder updated to 1.23.4 and Alpine base image to 3.21.0; plus a batch of bug fixes across components (deduplication, vmauth routing, vmalert templating, backup scheduling, query parsing, UI interactions).