fix(deps): update module github.com/victoriametrics/victoriametrics to v1.139.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/VictoriaMetrics/VictoriaMetrics	v1.138.0 → v1.139.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

VictoriaMetrics/VictoriaMetrics (github.com/VictoriaMetrics/VictoriaMetrics)

v1.139.0

Compare Source

v1.139.0

Released at 2026-03-27

• FEATURE: vmui: show seriesCountByMetricName table when a label is in focus in the Cardinality Explorer. See #​10630. Thanks to @​Roshan1299 for the contribution.

• FEATURE: dashboards/unused-metrics: add a new dashboard for exploring stored metrics based on Caridnality Explorer and ingested metrics usage API. The dashboard requires Infinity Grafana plugin to be installed. See #​10617 for details.

• FEATURE: vmalert: add search parameter and pagination support in /api/v1/rules API. See #​10046.

• FEATURE: vmui: add default pagination to improve the Alerting Rules page experience when vmalert loads thousands of rules. See #​10046.

• FEATURE: all VictoriaMetrics components: log a warning when an IPv6 listen address (e.g. [::]:6969) is specified but -enableTCP6 is not set. Previously, the server silently listened on IPv4 only. See #​6858. Thanks to @​andriibeee for the contribution.

• FEATURE: vmauth: extend JWT claim matching with array claim values support. See #​10647. Thanks to @​andriibeee for the contribution.

• FEATURE: vmagent: allow specifying basic_auth in scrape configs without username. Previously this resulted in a config error. Now a warning is logged instead. See #​6956. Thanks to @​andriibeee for the contribution.

• FEATURE: vmagent and vmsingle: add support for negative buckets in OpenTelemetry ExponentialHistogram during ingestion. See #​9896-comment.

• FEATURE: vmrestore: Improve restore speed on linux systems by pre-allocating files and optimizing write path. This behavior can be disabled with -skipFilePreallocation. See #​10661. Thanks to @​BenNF for the contribution.

• FEATURE: vmagent: yandexcloud_sd_configs now supports folder_ids for limiting discovery to specific folders. See #​10623. Thanks to @​Br1an67 for the contribution.

• BUGFIX: vmselect in VictoriaMetrics cluster: retry RPC by dialing a new connection instead of reusing a pooled one when the previous attempt fails with io.EOF, broken pipe or reset by peer. This reduces query failures caused by stale connections to restarted vmstorage nodes. See #​10314

• BUGFIX: vmui: fix autocomplete dropdown not closing on the Raw Query page. See #​10665

• BUGFIX: vmauth: properly handle JWKS keys per RFC 7517 during OIDC discovery: skip keys with use=enc, reject use=sig keys with unsupported alg, and warn-skip keys with empty use that have unsupported alg. See #​10663. Thanks to @​andriibeee for the contribution.

• BUGFIX: vmsingle and vmselect in VictoriaMetrics cluster: enforce datasource_type=prometheus when proxying Grafana requests to vmalert. Grafana supports only prometheus and loki alerts. Without this fix, Grafana shows Error loading alerts when non-Prometheus alert types are returned. See victoriametrics-datasource#329.

• BUGFIX: vmagent: stop logging error-level messages when scraping targets that expose OpenMetrics info, gaugehistogram, stateset, or unknown metric types. These are valid OpenMetrics types and should be parsed without error. See #​10685. Thanks to @​tsarna for the contribution.

• BUGFIX: vmsingle and vmstorage in VictoriaMetrics cluster: prevent panic during directory deletion on NFS-based mounts. The bug was introduced in 83da33d8 and included in v1.123.0. See #​9842.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[cubic-dev-ai]

No issues found across 4 files