nordic-dev.net/nixpkgs
nordic-dev.net/nixpkgs
2
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-02-23 04:25:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

prometheus: 2.40.3 -> 2.41.0

Browse Source 
prometheus 2.40.x is out of support since 12/2022 therefore the update to 2.41.0

between those two releases security critical patches have been added both to
prometheus codebase and upstream dependecies, see:
  * 2.40.6 / 2022-12-09
    https://github.com/prometheus/prometheus/pull/11690
      [SECURITY] Security upgrade from go and upstream dependencies that include
      security fixes to the net/http and os packages. #11691

  *  2.40.4 / 2022-11-29
    https://github.com/advisories/GHSA-7rg2-cxvp-9p7p
    https://github.com/advisories/GHSA-4v48-4q5m-8vx4
      [SECURITY] Fix basic authentication bypass vulnerability
      (CVE-2022-46146) GHSA-4v48-4q5m-8vx4
This commit is contained in:
Marian Hammer 2023-01-19 13:02:02 +01:00
parent 0e5442a3bb
commit bfac961c8c
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
pkgs/servers/monitoring/prometheus/default.nix
View File

@ -31,10 +31,10 @@
}:
let
version = "2.40.3";
version = "2.41.0";
webUiStatic = fetchurl {
url = "https://github.com/prometheus/prometheus/releases/download/v${version}/prometheus-web-ui-${version}.tar.gz";
sha256 = "sha256-dvMts9uJNLSp8Qho+yKMLPTy/1c2RgfeEn3UQLIZNc4=";
sha256 = "sha256-0EFeAuhQUu+4TCoHsWHTbWTGJLjS37POacP1K42sGqI=";
};
in
buildGoModule rec {
@ -45,10 +45,10 @@ buildGoModule rec {
rev = "v${version}";
owner = "prometheus";
repo = "prometheus";
sha256 = "sha256-Jg8loH0Sji1MmDXUnMtvLTHjNGmkrzZApxvpe2+OqtU=";
sha256 = "sha256-J3KDN02m639bUGrnUrqeCLferrqIHaJ2VEBjIqfm/GY=";
};
vendorSha256 = "sha256-aRVoEgP84ITQ1D0PsFVJUKH/Uin7s80iQCwzgrfpjoM=";
vendorSha256 = "sha256-4Of1euBp5Lka6Bb2UJYUQuRa7t2/B1HaXCWSOqCASYw=";
excludedPackages = [ "documentation/prometheus-mixin" ];