This brings prometheus up to the latest LTS release. Changes since then: 2.37.2: [BUGFIX] TSDB: Fix 'invalid magic number 0' error on Prometheus startup. [BUGFIX] Agent: Fix validation of flag options and prevent WAL from growing more than desired.
2.37.3: [BUGFIX] Update our regexp library to fix upstream CVE-2022-41715. [BUGFIX] TSDB: Turn off isolation for Head compaction to fix a memory leak. 2.37.4: [SECURITY] Fix basic authentication bypass vulnerability (CVE-2022-46146). Seems to work so far for my test setup. What is not working is the version / build info. My assumption is that the -X ldflags do not work with vendored builds. Maybe some golang expert has an idea. -- :wq Claudio Index: Makefile =================================================================== RCS file: /cvs/ports/sysutils/prometheus/Makefile,v retrieving revision 1.17 diff -u -p -r1.17 Makefile --- Makefile 8 Nov 2022 11:17:11 -0000 1.17 +++ Makefile 29 Nov 2022 13:17:07 -0000 @@ -1,10 +1,9 @@ COMMENT = systems monitoring and alerting toolkit -V = 2.37.1 +V = 2.37.4 GH_ACCOUNT = prometheus GH_PROJECT = prometheus GH_TAGNAME = v${V} -REVISION = 0 CATEGORIES = sysutils Index: distinfo =================================================================== RCS file: /cvs/ports/sysutils/prometheus/distinfo,v retrieving revision 1.7 diff -u -p -r1.7 distinfo --- distinfo 13 Sep 2022 10:35:55 -0000 1.7 +++ distinfo 29 Nov 2022 13:17:28 -0000 @@ -1,6 +1,6 @@ -SHA256 (prometheus-2.37.1.tar.gz) = 8ON5hpfzQ7HDQqqPWdF5inLdZyBwHVX1KR6gMQsUI7Y= -SHA256 (prometheus-vendor-2.37.1.tar.gz) = JeQkPS5dpt8n5f0JmJ+ZvSPAvpcQ7j8LbVWj5dJ5hLQ= -SHA256 (prometheus-web-ui-2.37.1.tar.gz) = Uu9uO0lk79k7nu4Yx/wo+tv4FVu5nl+TUSF1w8vUoaM= -SIZE (prometheus-2.37.1.tar.gz) = 6049188 -SIZE (prometheus-vendor-2.37.1.tar.gz) = 11627435 -SIZE (prometheus-web-ui-2.37.1.tar.gz) = 4333534 +SHA256 (prometheus-2.37.4.tar.gz) = gIP1R9TjewtfeusIL9ScOyRegGSqzG6g667+bRWKpNI= +SHA256 (prometheus-vendor-2.37.4.tar.gz) = UCoi3XIpdjwmUVrAb9wWzvDpMYj41vOXirbrIBPxk0E= +SHA256 (prometheus-web-ui-2.37.4.tar.gz) = TA/pT8Q0b46eVUrqrgG4omZ84EKZm5vEG/7VKd2nzDQ= +SIZE (prometheus-2.37.4.tar.gz) = 6048871 +SIZE (prometheus-vendor-2.37.4.tar.gz) = 11625254 +SIZE (prometheus-web-ui-2.37.4.tar.gz) = 4332951