build(deps): bump github.com/grafana/loki/v3 from 3.6.5 to 3.7.3

[dependabot]

Bumps github.com/grafana/loki/v3 from 3.6.5 to 3.7.3.

Release notes

Sourced from github.com/grafana/loki/v3's releases.

v3.7.3

3.7.3 (2026-06-24)

⚠ BREAKING CHANGES

• operator: switch default for OpenShift stream labels (#21001)

Features

• add bloom filter to cache known streams for ExceedsLimits requests (#20823) (f5440a3)
• add builder pool to logsobj package (#21134) (8a68101)
• add case-insensitive regex optimization (#20578) (f6a6a4f)
• Add config to delegate stream limits check to limits-service only (#21007) (ba119f6)
• add flush manager to control data object flush lifecycle (#20680) (c169ce3)
• add GroupConsumer to kafkav2 package (#20748) (5ad60ee)
• Add results cache to thor query engine (#20986) (6ef3827)
• Add SubstringInsensitive compute fn (#20584) (9c03192)
• Align start time when the query is received (#20967) (8e18f10)
• allow the initial offset to be set in the starting phase (#20770) (93f4bdf)
• Batch records before writing to sinks (#20821) (f083618)
• bench: add simulated object storage latency to LogQL benchmarks (#20733) (5102ed0)
• build: Move to Go 1.26 (#20988) (4fb960c)
• close the records chan when consumer terminates (#20761) (c3d0de9)
• dataobj-compactor: add a planner for compaction of data objects (#20527) (7f1450d)
• don't shuffle shard if shard factor is 1 (#21190) (7ac1d16)
• early goldfish correlation ID generation with X-Loki-Goldfish-ID header (#21155) (e90e4a6)
• engine: Dedupe entries when building final result (#21034) (e95137a)
• enginev2: Implement IsMember compute function (#20689) (a28d8b4)
• enginev2: Implement regexp compute function (#20642) (7b8d51b)
• enginev2: Implement substr compute function (#20641) (9740619)
• helm: Add common labels to all resources (#20269) (dc21099)
• helm: allow customization of write, read and backend PDB (#16871) (9f653b1)
• helm: finalize chart fork (#21166) (33f7a1b)
• helm: Memcached: allow to override CPU in the auto-computed resource mode (#20767) (3886548)
• Introduce a rate batcher to batch rate updates (#20784) (b9a0a15)
• limits: Add emptiness check to prepare for multiAZ (#20927) (4eeb70c)
• loki-query-engine: instrument query-engine with runtime/trace (#21000) (a7c75a6)
• loki: allow disabling cache for query_range requests (#21112) (1242aa5)
• operator: add option to customize gateway server cert (#20325) (3c8b9e8)
• operator: switch default for OpenShift stream labels (#21001) (61ec040)
• operator: Update Loki operand to v3.6.5 (#20696) (d81e977)
• operator: update metrics authentication to remove dependency on kube-rbac-proxy (#20853) (2de6e79)
• put kotel behind a flag (#20933) (f8e2d64)
• query-engine: Omit labels with empty values (#21173) (5c17103)
• refactor frontend cache, add metrics, filter out cached streams (#20860) (a63f0c3)
• release 3.7 (#21270) (21d5b59)
• Remove Promtail support (backport k299) (#21248) (939d15f)
• reset the consumption lag gauge after 1 minute of idle period (#20616) (f1d0cdf)
• separate metastore events and offsets from flushes (#20605) (cb938d0)

... (truncated)

Changelog

Sourced from github.com/grafana/loki/v3's changelog.

3.7.3 (2026-06-23)

Bug Fixes

• ci: Remove test checking for nfpm vars, like main (#22501) (5f48f39)
• ci: Use latest workflow definitions for 3.7.x (#22496) (0bed459)
• security/HIGH/cmd/dataobj-inspect: Update module go.opentelemetry.io/otel to v1.41.0 [SECURITY] (release-3.7.x) (#22188) (dc8f4de)
• security/HIGH/: Update module github.com/containerd/containerd/v2 to v2.0.9 [SECURITY] (release-3.7.x) (#22187) (365c7e9)
• security/UNKNOWN/cmd/chunks-inspect: Update go toolchain directive to v1.25.11 [SECURITY] (release-3.7.x) (#22192) (d5d7a54)
• security/UNKNOWN/cmd/dataobj-inspect: Update go module directive to v1.25.11 [SECURITY] (release-3.7.x) (#22184) (6b77fa9)
• security/UNKNOWN/cmd/dataobj-inspect: Update security cmd/dataobj-inspect golang.org/x/sys to v0.44.0 [SECURITY] (release-3.7.x) (#22193) (707bcf7)
• security/UNKNOWN/pkg/push: Update go toolchain directive to v1.25.11 [SECURITY] (release-3.7.x) (#22199) (9ea02bf)
• security/UNKNOWN/: Update security golang.org/x/crypto to v0.52.0 [SECURITY] (release-3.7.x) (#22189) (6383bfe)
• security/UNKNOWN/: Update security golang.org/x/net to v0.55.0 [SECURITY] (release-3.7.x) (#22190) (3d93fb8)
• security/UNKNOWN/: Update security golang.org/x/sys to v0.44.0 [SECURITY] (release-3.7.x) (#22191) (3379538)

3.7.2 (2026-05-13)

Bug Fixes

• CVEs in release 3.7.x (#21771) (bb4c5d8)
• deps: update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [security] (release-3.7.x) (#21457) (7bc9450)
• Fix ruler panic related to unset validation scheme (backport release-3.7.x) (#21401) (cf65729)
• storage: attach SHA-256 checksum on PutObject for Object Lock buckets (#21849) (7df13d9)

3.7.1 (2026-03-26)

Bug Fixes

• Upgrade Go and gRPC versions on 3.7.x (#21282) (2c8fff2)

3.7.0 (2026-03-26)

⚠ BREAKING CHANGES

• engine: Make scheduler aware of total compute capacity (#19876)
• parsed labels should not override structured metadata (#19991)
• engine: Share worker threads across all scheduler connections (#20229)

Features

• ability to send query context for limit enforcement (#19900) (1a66d2d)
• add downscalePermittedFunc to check downscale is permitted (#20171) (c0c27b3)
• add gauge to track in-flight bytes (#20091) (23ef8ec)
• add histogram loki_dataobj_consumer_flush_duration_seconds (#20304) (5a5e90e)
• add loki health command (#20313) (ef69cfd)

... (truncated)

Commits

• 82cdcdc fix(ci): prepare release 3.7.3
• 4f664f7 chore: Publish release images to the GAR mirror, skip docker plugin (#22549)
• b57510d chore: Bump loki-release for the publish mkdir fix (#22540)
• 74ade75 chore: Bump loki-release to pick up github-release fix (#22537)
• 3584391 fix(ci): Log into dockerhub (#22528)
• 42c5158 fix(ci): Use latest version of loki-release for capital letter support (#22520)
• 74453b0 chore(release-3.7.x): Release 3.7.3 (#22306)
• 5f48f39 fix(ci): Remove test checking for nfpm vars, like main (#22501)
• 0bed459 fix(ci): Use latest workflow definitions for 3.7.x (#22496)
• b77b808 chore: Bump Go to 1.26.4 [release-3.7.x] (#22459)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)