Loki 3.4.2 is using Microsoft Azure Active Directory Authentication Library (ADAL)

Describe the bug
We see that the latest Loki 3.4.2 is using ADAL package (github.com/azure/go-autorest/autorest/adal) which has reached its end of life.

To Reproduce
Steps to reproduce the behavior:

  1. Please pull the image and check the package version of the reported ADAL package version in Docker Desktop. PFA the Sbom generated of the image.

Expected behavior
Fix from the upstream: use github.com/Azure/azure-sdk-for-go/sdk/azidentity instead. PFA

Technical Impact: learn.microsoft.com/en-us/entra/msal/dotnet/#migration-from-azure-active-directory-authentication-library-adal

Environment:
NA

Screenshots, Promtail config, or terminal output
Image
loki-3-4-2.json

Read more here: Source link