From f1abc03152c40a91143e0440244822bd8b6df39c Mon Sep 17 00:00:00 2001 From: "octo-sts[bot]" <157150467+octo-sts@users.noreply.github.com> Date: Fri, 13 Dec 2024 04:14:12 +0000 Subject: [PATCH] prometheus-3.0/3.0.1-r0: fix GHSA-v778-237x-gjrc --- prometheus-3.0.yaml | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/prometheus-3.0.yaml b/prometheus-3.0.yaml index ef80b9e0bdf..ecf9a0b22a7 100644 --- a/prometheus-3.0.yaml +++ b/prometheus-3.0.yaml @@ -1,7 +1,7 @@ package: name: prometheus-3.0 version: 3.0.1 - epoch: 0 + epoch: 1 description: The Prometheus monitoring system and time series database. copyright: - license: Apache-2.0 @@ -30,6 +30,10 @@ pipeline: with: patches: disable-pprof.patch + - uses: go/bump + with: + deps: golang.org/x/crypto@v0.31.0 + - runs: | GOLDFLAGS="-s -w -X github.com/prometheus/common/version.Version=${{package.version}} -X github.com/prometheus/common/version.Revision=WolfiLinux