chore(release-3.7.x): Release 3.7.4

[loki-gh-app]

🤖 I have created a release beep boop

3.7.4

3.7.4 (2026-07-22)

Bug Fixes

• ci: Fix zizmor findings for operator-images in Loki 3.7 (#22820) (abc1186)
• ci: Helm CI warning fix (#22605) (7389428)
• ci: Re-enable docker plugin publishing (#22818) (28f44a8)
• compactor: Fix delete request when using Thanos objstore client with filesystem backend [release-3.7.x] (#22811) (dd6fdb5)
• deps: Update module charm.land/bubbletea/v2 to v2.0.7 (release-3.7.x) (#22768) (e11f935)
• deps: Update module charm.land/lipgloss/v2 to v2.0.4 (release-3.7.x) (#22769) (10213c2)
• deps: Update module github.com/aws/aws-sdk-go-v2/credentials to v1.19.24 (release-3.7.x) (#22776) (3daf198)
• deps: Update module github.com/aws/smithy-go to v1.27.3 (release-3.7.x) (#22795) (1f6a191)
• deps: Update module github.com/baidubce/bce-sdk-go to v0.9.270 (release-3.7.x) (#22783) (103ccd8)
• deps: Update module github.com/coder/quartz to v0.3.1 (release-3.7.x) (#22784) (3509e31)
• deps: Update module github.com/IBM/ibm-cos-sdk-go to v1.14.1 (release-3.7.x) (#22785) (d0abe72)
• deps: Update module github.com/klauspost/compress to v1.18.6 (release-3.7.x) (#22797) (327da7c)
• deps: Update module github.com/pierrec/lz4/v4 to v4.1.27 (release-3.7.x) (#22798) (6b3297f)
• deps: Update module github.com/shirou/gopsutil/v4 to v4.26.5 (release-3.7.x) (#22800) (cb7f17d)
• security/CRITICAL/clients/cmd/fluentd/docker: Update dependency fluentd to v1.19.3 [SECURITY] (release-3.7.x) (#22693) (6d8f1b5)
• security/HIGH/: Bump Go to 1.26.5 to address CVE-2026-39822 and CVE-2026-42505 [SECURITY] (#23393) (b318f28)
• security/HIGH/: Update module github.com/apache/thrift to v0.24.0 [SECURITY] (release-3.7.x) (#22767) (36eb5f7)
• security/UNKNOWN/pkg/push: Update module golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) (#22200) (dd7a124)
• security/UNKNOWN/: Update module github.com/containerd/containerd/v2 to v2.0.10 [SECURITY] (release-3.7.x) (#22478) (6fa6165)
• storage: Fix index filename issue with legacy S3 client and chunk_delimiter (#23165) (0eca83c)

---

Merging this PR will release the artifacts of b318f28

[jnewbigin]

Ready to release 3.7.4

[loki-gh-app]

The backport to main failed:

The process '/usr/bin/git' failed with exit code 1

To backport manually, run these commands in your terminal:

# Fetch latest updates from GitHub
git fetch
# Create a new branch
git switch --create backport-22778-to-main origin/main
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x 4a56b717151824e50b537764dbabc9e692f6c9ec

When the conflicts are resolved, stage and commit the changes:

git add . && git cherry-pick --continue

If you have the GitHub CLI installed:

# Push the branch to GitHub:
git push --set-upstream origin backport-22778-to-main
# Create the PR body template
PR_BODY=$(gh pr view 22778 --json body --template 'Backport 4a56b717151824e50b537764dbabc9e692f6c9ec from #22778{{ "\n\n---\n\n" }}{{ index . "body" }}')
# Create the PR on GitHub
echo "${PR_BODY}" | gh pr create --title 'chore(release-3.7.x): Release 3.7.4 (backport main)' --body-file - --label 'product-approved' --label 'autorelease: pending' --label 'backport' --base main --milestone main --web

Or, if you don't have the GitHub CLI installed (we recommend you install it!):

# Push the branch to GitHub:
git push --set-upstream origin backport-22778-to-main

# Create a pull request where the `base` branch is `main` and the `compare`/`head` branch is `backport-22778-to-main`.

# Remove the local backport branch
git switch main
git branch -D backport-22778-to-main

[loki-gh-app]

🤖 Release is at https://github.com/grafana/loki/releases/tag/untagged-958ecbe32afc0b94dc08 🌻