chore(deps): update grafana/alloy docker tag to v1.19.2

[renovate]

This PR contains the following updates:

Package	Update	Change
grafana/alloy	minor	v1.17.1 → v1.19.2

---

Release Notes

grafana/alloy (grafana/alloy)

v1.19.2

Compare Source

v1.19.1

Compare Source

v1.19.0

Compare Source

v1.18.1

Compare Source

Bug Fixes 🐛

• Add nop receiver to OTel Engine [backport] (#​6755) (d7588f8) (@​blewis12)
• Backport dependency upgrades to address CVE's GO-2026-6061 & GO-2026-5970 (#​6836) (4c3e8a6) (@​blewis12, @​thampiotr)

Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.

v1.18.0

Compare Source

⚠ BREAKING CHANGES

• otelcol.receiver.otlp, otelcol.receiver.faro, otelcol.receiver.jaeger, otelcol.receiver.zipkin, otelcol.receiver.influxdb, otelcol.receiver.splunkhec, otelcol.receiver.datadog, and otelcol.extension.jaeger_remote_sampling now default to idle_timeout = "1m", read_header_timeout = "1m", and write_timeout = "30s" on their HTTP servers, matching upstream default. These were previously being defaulted to "0s". You can explicitly set them to "0s" to restore the previous behavior.
• otelcol.receiver.kafka and otelcol.exporter.kafka: resolve_canonical_bootstrap_servers_only is now a no-op and deprecated. The upstream migration from migration from sarama to `franz-go dropped the behavior. The argument still parses but no longer resolves bootstrap server addresses.
• otelcol.exporter.splunkhec — batcher block removed (upstream deletion in otel-contrib v0.151). Configs using it will fail to load. Migration: move the equivalent fields under sending_queue.batch (enabled → presence of the block; flush_timeout/sizer/min_size/max_size keep their names).

Features 🌟

• Add alloy.command to override the Alloy Helm container entrypoint (#​6509) (fea3056) (@​petewall)
• Add k8sleaderelector Extension and k8scluster Receiver to OTel Engine (#​6450) (24fc846) (@​blewis12, @​kgeckhart)
• Add OpAmp Extension to OTel Engine (#​6632) (a32e83b) (@​blewis12)
• Add otelcol.connector.signaltometrics component (#​6410) (887ca3f) (@​bradleypettit, @​clayton-cornell)
• database_observability.mysql: Collect mysql query error info (#​6675) (d63d9ff) (@​matthewnolf)
• database_observability.postgres: Emit op=error_message Loki entries with query fingerprint (#​6180) (377f1d0) (@​gaantunes)
• database_observability.sql_server: Add table_spec to schema_details collector (#​6641) (db801a6) (@​cristiangreco)
• database_observability.sql_server: Add scaffolding for sql_server schema_details collector (#​6624) (0cedb33) (@​cristiangreco)
• database_observability.sql_server: Scan all databases in schema_details collector (#​6672) (dd1eabe) (@​cristiangreco)
• discovery.aws: Add AWS unified service discovery component (#​6658) (25cb5f0) (@​kgeckhart)
• Expose HTTP server idle/read/read_header/write timeouts in OTel Components (#​6636) (7cc28ee) (@​kgeckhart)
• Helm Chart: Make service.externalTrafficPolicy avaliable (#​4511) (a987e33) (@​at-blacknight, @​kalleep)
• Inline config support for Alloy Otel Extension (#​6442) (53589bd) (@​x1unix)
• Make alloyengine extension OCB-able (#​6395) (b6c5b20) (@​jharvey10)
• metrics: Add native histogram support for self-monitoring metrics (#​6385) (6045de1) (@​Rishabh-1098git)
• otelcol.connector.spanmetrics: Expose include_collector_instance_id (#​6635) (ca46cb4) (@​kgeckhart)
• otelcol: Expose small v0.152/v0.153 upstream config field additions (#​6664) (f824237) (@​kgeckhart)
• prometheus.exporter.windows: Add time collector to the Windows exporter (#​6517) (6289603) (@​ptodev)
• prometheus.remote_write: Expose google_iam, round_robin_dns, and additional sigv4/azuread auth options (#​6637) (96dd5e0) (@​kgeckhart)
• pyroscope.ebpf: Add no_kernel_version_check argument (#​6475) (020d74c) (@​marcsanmi, @​clayton-cornell, @​dehaansa)
• pyroscope: Add scope labels to Alloy profiles (#​6569) (cb771b6) (@​korniltsev-grafanista)
• ui: Render pipeline graph via @​grafana/alloy-pipeline-graph (#​6566) (7772bf8) (@​fabienne-m, @​cursoragent)
• Upgrade Prometheus to v3.12.0 (GA) and OpenTelemetry Collector to v0.153.0 (#​6597) (118a5d1) (@​kgeckhart)
• Upgrade Prometheus to v3.12.0-rc.0, otel-contrib to v0.151.0, Loki to v3.7.1 (#​6240) (b4b6747) (@​kgeckhart)
• Upgrade to Beyla 3.22 (#​6452) (1cb72f6) (@​grcevski)

Bug Fixes 🐛

• Back off usage reporting on persistent failure instead of retrying every minute (#​6478) (0a1d139) (@​kgeckhart)
• Beyla glob parsing (#​6525) (beddf1b) (@​grcevski)
• Bump github.com/prometheus/procfs To Pull XFS Collector Fix (#​6630) (976726c) (@​blewis12)
• Bump moduledeps fixtures to go 1.26.4 (#​6521) (9d27acd) (@​thampiotr)
• ci: Only stamp BuildDate for release builds (#​6541) (59ed586), closes #​4266 (@​Churi12)
• database_observability.mysql: Simplify denylist in-memory map for explain_plans collector (#​6473) (18fe267) (@​cristiangreco)
• database_observability.postgres: Handle Postgres DSN with unix sockets (#​6463) (d065b84) (@​fridgepoet)
• database_observability.postgres: Update postgres collect intervals to match mysql (#​6639) (d55dee0) (@​rgeyer)
• database_observability/postgres: Route Windows builds to the nocgo fingerprint stub (#​6690) (5ec00a4) (@​gaantunes)
• database_observability: Explain-plan conditions now redact (7e8e72d) (@​jharvey10)
• deps: Update high-confidence go dependencies (#​6558) (bd61eeb), closes #​6547 (@​thampiotr)
• Don't emit error log when remotecfg is unused (#​6483) (d0f30ea) (@​kalleep)
• Ensure Alloy Logs Dashboard Accounts for New Native Histograms Options (#​6704) (5ab0b06) (@​blewis12)
• Ensure generate-otel-collector-distro runs "go mod tidy" after all generation steps (#​6640) (7b15c04) (@​blewis12)
• Fix typo in the pull request template (#​6676) (a473efe) (@​petewall)
• loki.process: Log logfmt decode failures at debug instead of error (#​6599) (66990eb) (@​mstumpfx)
• loki.process: Prevent data race for metircs (#​6519) (2ae1848) (@​kalleep)
• Make go mod tidy resilient to transient module-proxy failures (#​6491) (23e04c9) (@​kgeckhart)
• prometheus.exporter.cloudwatch: Stop forcing legacy metric-name validation process-wide (#​6616) (fabebf8) (@​kgeckhart)
• promethues.exporter.mongodb: Add currentop_slow_time argument (#​6539) (dd48729) (@​kalleep)
• pyroscope.ebpf: Skip empty build ID debug info uploads (#​6634) (580d0a1) (@​korniltsev-grafanista)
• Remove duplicate Time field in windows exporter (#​6633) (a97ec91) (@​kgeckhart)
• Remove extra bracketing of squid exporter host (#​6573) (4259b8f) (@​dehaansa)
• security/web/ui: Update web/ui vite to v7.3.5 [SECURITY] (#​6497) (d2bb8c0)
• Skip noop error log at collector registration (#​6543) (80968d4) (@​skl)
• Stabilize ServiceMonitor e2e target injection sequencing (#​6523) (cddef2d) (@​thampiotr)
• Stabilize Windows CI in Loki tests and static converter (#​6524) (7284c0d) (@​thampiotr)
• syntax: Release syntax 0.1.1 (#​6549) (c43e289)
• Upgrade homebrew-bump-formula action (#​6708) (69cd783) (@​x1unix)
• web/ui: Bump esbuild to 0.28.1 (#​6522) (a2b3981) (@​thampiotr)
• windows_service: Gracefully terminate alloy when service is stopped (#​6593) (d3969ba) (@​kalleep)
• windows: Allow non-admin service account to start Alloy (#​6627) (bef2f3d) (@​fabiiw05)

Upgrading

Read the release notes for specific instructions on upgrading from older versions:

Installation

Refer to our installation guide for how to install Grafana Alloy.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.