Commit Graph

2901 Commits

Author SHA1 Message Date
Simon Pasquier 5d306d21c9
Merge pull request #3488 from prometheus/update-changelog-0.26
Add a `[SECURITY]` to the changelog and update CVE-2023-40577
2023-08-25 14:42:07 +02:00
gotjosh 7b9dba6afa
Add a `[SECURITY]` to the changelog and update CVE-2023-40577
Some users have been vocal about the security fix not visible enough in the changelog, it seems like prometheus uses [SECURITY] to disclose these and I think it's a good practice.

A copy of #3487 but for the release branch of 0.26

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-25 11:20:52 +01:00
gotjosh fea2ca46b5
Cut 0.26 (#3478)
* Cut 0.26

Release version 0.26 of the Alertmanager
---------

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-23 19:05:17 +01:00
Simon Pasquier 466b843163
Merge pull request from GHSA-v86x-5fm3-5p7j
Check the validity of the generatorURL field
2023-08-23 17:20:04 +02:00
Simon Pasquier 236ce26e55 Check the validity of the generatorURL field
The Source button should only be displayed if the link starts by
'http://' or 'https://'.

Signed-off-by: Simon Pasquier <spasquie@redhat.com>
2023-08-23 15:32:32 +02:00
gotjosh 0f80a72ee2
Fix year in 0.26.0-rc.0 entry (#3468) (#3475)
Signed-off-by: Leonardo Taccari <leot@NetBSD.org>
Co-authored-by: Leonardo Taccari <iamleot@gmail.com>
2023-08-23 14:14:20 +01:00
gotjosh 3ea2f24586
Release: fix the version formatting (#3467)
It should be <major>.<minor>.<patch>-rc.<candidate>

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-17 16:35:19 +01:00
gotjosh 3f7401af58
Revert "Release: Fix version format (#3465)" (#3466)
This reverts commit b3e3c89a60.

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-17 16:24:42 +01:00
gotjosh b3e3c89a60
Release: Fix version format (#3465)
Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-17 15:50:30 +01:00
gotjosh a0375ae9cd
Cut v0.26.0 rc.0 (#3447)
* Cut v0.26.0 rc.0

Signed-off-by: gotjosh <josue.abreu@gmail.com>

* pr feedback

Signed-off-by: gotjosh <josue.abreu@gmail.com>

* fix the release date

Signed-off-by: gotjosh <josue.abreu@gmail.com>

---------

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-17 15:04:19 +01:00
George Robinson e1e59925cc
Update docs for slack_config (#3455)
This commit updates the docs for slack_config with usage for both
Incoming webhooks and Bot tokens.

Signed-off-by: George Robinson <george.robinson@grafana.com>
2023-08-10 11:02:12 +01:00
Anton Tolchanov 94625df2b2
Treat error response payloads from Slack as errors (#3121)
As described in the "More error types" section below, Slack API can return
errors with a 200 response code:
https://slack.dev/node-slack-sdk/web-api#handle-errors

This change adds parsing of API response to extract error messages.

Signed-off-by: Anton Tolchanov <anton@tailscale.com>
2023-08-10 10:59:13 +01:00
dependabot[bot] 16cb095653
Bump github.com/benbjohnson/clock from 1.3.3 to 1.3.5 (#3434)
Bumps [github.com/benbjohnson/clock](https://github.com/benbjohnson/clock) from 1.3.3 to 1.3.5.
- [Release notes](https://github.com/benbjohnson/clock/releases)
- [Commits](https://github.com/benbjohnson/clock/compare/v1.3.3...v1.3.5)

---
updated-dependencies:
- dependency-name: github.com/benbjohnson/clock
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 11:14:17 +01:00
dependabot[bot] 3c8e6faf1f
Bump github.com/go-openapi/errors from 0.20.3 to 0.20.4 (#3413)
Bumps [github.com/go-openapi/errors](https://github.com/go-openapi/errors) from 0.20.3 to 0.20.4.
- [Commits](https://github.com/go-openapi/errors/compare/v0.20.3...v0.20.4)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/errors
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 11:00:47 +01:00
dependabot[bot] 7a4ad5ba88
Bump github.com/stretchr/testify from 1.8.2 to 1.8.4 (#3414)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.2 to 1.8.4.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](https://github.com/stretchr/testify/compare/v1.8.2...v1.8.4)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 11:00:20 +01:00
dependabot[bot] e31c1a7532
Bump github.com/aws/aws-sdk-go from 1.44.234 to 1.44.317 (#3448)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.234 to 1.44.317.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.44.234...v1.44.317)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 10:59:46 +01:00
rongyi b22dc1d5e0
if 9093/9094 port is in use, test case will fail (#3320)
* Update test

Signed-off-by: rongyi <rongyi@onchain.com>

* Change port to uint16

Signed-off-by: rongyi <rongyi@onchain.com>

* Update testcase

Signed-off-by: rongyi <rongyi@onchain.com>

* make testcase pass

Signed-off-by: rongyi <rongyi@onchain.com>

---------

Signed-off-by: rongyi <rongyi@onchain.com>
2023-08-07 12:31:05 +01:00
George Robinson 638f41c215
Log the GroupKey and alerts in retry (#3438)
This commit updates notify.go to log the GroupKey and fingerprints
of an alert at the debug level, and just the GroupKey at the
warning level should the notify attempt fail.

Signed-off-by: George Robinson <george.robinson@grafana.com>
2023-08-07 11:31:28 +01:00
Simon Pasquier 5626bd4a94
Merge pull request #3443 from simonpasquier/fix-panic
cluster: fix panic when `tls_client_config` is empty
2023-08-07 11:21:48 +02:00
Simon Pasquier 84f8f4e620
Update email assets after #3420 (#3440)
* Add template/email.tmpl to the clean target

The change ensures that all assets can be regenerated from scratch in
the CI.

Signed-off-by: Simon Pasquier <spasquie@redhat.com>

* Update email assets after #3420

Signed-off-by: Simon Pasquier <spasquie@redhat.com>

---------

Signed-off-by: Simon Pasquier <spasquie@redhat.com>
2023-08-04 14:42:18 +01:00
Simon Pasquier aea6204d58 cluster: fix panic when `tls_client_config` is empty
Closes #3403

Signed-off-by: Simon Pasquier <spasquie@redhat.com>
2023-08-04 14:29:06 +02:00
Simon Pasquier 130b8b6761
Merge pull request #3439 from prometheus/fix-mixin
CI: Pin the mixtool version in CircleCI and update the golang CircleCI orb
2023-08-04 09:17:26 +02:00
Simon Pasquier e5771e2c93
Merge pull request #3405 from grobinson-grafana/grobinson/fix-docs
Fix example matchers in docs
2023-08-03 17:55:36 +02:00
gotjosh 4c9bc820e2
update the circleCI go orb
Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-03 16:40:44 +01:00
gotjosh 07b89eb117
Mixin: Pin the mixtool version in CircleCI
In mixtool, the tip of master broke for our mixin - I have managed to trace it down and opened a PR (see https://github.com/grafana/dashboard-linter/pull/143) but for now, let's pin the version to make sure our CI is not affected.

Signed-off-by: gotjosh <josue.abreu@gmail.com>
2023-08-03 16:15:26 +01:00
Alvin Lin 7411e5436a
Update email.html to use "https://schema.org" instead of "https://schema.org" (#3420)
According to schema.org's faq both https and http are fine, but https is preferred going forward: https://schema.org/docs/faq.html#19

Why am I making this change? To make some security code scanner happy :)

Signed-off-by: Alvin Lin <alvinlin123@gmail.com>
2023-08-03 09:33:32 +01:00
Simon Pasquier 487db1383b
Merge pull request #3412 from prometheus/dependabot/go_modules/github.com/prometheus/common-0.44.0
Bump github.com/prometheus/common from 0.42.0 to 0.44.0
2023-07-03 15:47:43 +02:00
dependabot[bot] 68349af5e7
Bump github.com/prometheus/common from 0.42.0 to 0.44.0
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.42.0 to 0.44.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Commits](https://github.com/prometheus/common/compare/v0.42.0...v0.44.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-01 15:37:45 +00:00
Simon Pasquier 11e0edb1d2
Merge pull request #3411 from kellinm/build-with-go-1-20
Build with Go 1.20
2023-06-30 11:04:05 +02:00
Kellin 0bc3fd69df Build with Go 1.20
- Start using Go 1.20 toolchain to build
- Remove deprecated reference to updating .travis.yml

Signed-off-by: Kellin <kellin@retromud.org>
2023-06-29 17:50:47 -04:00
George Robinson eaac8b7b2e Fix example matchers in docs
Signed-off-by: George Robinson <george.robinson@grafana.com>
2023-06-22 10:52:25 +01:00
Simon Pasquier a85979e19d
Merge pull request #3398 from prometheus/repo_sync
Synchronize common files from prometheus/prometheus
2023-06-19 11:26:16 +02:00
prombot 0c40862059 Update common Prometheus files
Signed-off-by: prombot <prometheus-team@googlegroups.com>
2023-06-17 17:49:02 +00:00
Simon Pasquier 90a8acd276
Merge pull request #3247 from maheshvidhyadharan/fix-pagerduty-image-config-field-name
fixing the field name for pagerduty image_config
2023-06-09 15:30:32 +02:00
Mahesh Vidhyadharan 2f3a4b0f10 fixing the field name for pagerduty image_config as per code https://pkg.go.dev/github.com/prometheus/alertmanager/config\#PagerdutyImage
Signed-off-by: Mahesh Vidhyadharan <mahesh.vidhyadharan@steel-eye.com>
2023-06-09 15:24:33 +02:00
George Robinson 229ecb7e9a
Log a warning when repeat_interval is less than group_interval (#3389)
* Log a warning when repeat_interval is less than group_interval

This commit updates Alertmanager to log a warning when
repeat_interval is less than group_interval for an individual route.

When repeat_interval is less than group_interval, the earliest
a notification can be sent again is the next time the aggregation
group is flushed, and this happens at each group_interval.

Signed-off-by: George Robinson <george.robinson@grafana.com>
---------

Signed-off-by: George Robinson <george.robinson@grafana.com>
Co-authored-by: gotjosh <josue.abreu@gmail.com>
2023-06-08 22:58:24 +02:00
Jack d10f21f38c
Add msteams (#3324)
* Add msteams

Signed-off-by: Jack Zhang <jack4zhang@gmail.com>
---------
Signed-off-by: Jack Zhang <jack4zhang@gmail.com>
Signed-off-by: Jack <jack4zhang@gmail.com>
2023-06-08 11:27:56 -04:00
George Robinson 9f683fc4e7
Document difference between tab and newline in tests (#3383)
Signed-off-by: George Robinson <george.robinson@grafana.com>
2023-06-07 13:32:48 -04:00
Simon Pasquier 83304da507
Merge pull request #3374 from prometheus/dependabot/go_modules/github.com/prometheus/exporter-toolkit-0.10.0
Bump github.com/prometheus/exporter-toolkit from 0.9.1 to 0.10.0
2023-06-02 11:29:33 +02:00
dependabot[bot] d366342edc
Bump github.com/prometheus/exporter-toolkit from 0.9.1 to 0.10.0
Bumps [github.com/prometheus/exporter-toolkit](https://github.com/prometheus/exporter-toolkit) from 0.9.1 to 0.10.0.
- [Release notes](https://github.com/prometheus/exporter-toolkit/releases)
- [Changelog](https://github.com/prometheus/exporter-toolkit/blob/master/CHANGELOG.md)
- [Commits](https://github.com/prometheus/exporter-toolkit/compare/v0.9.1...v0.10.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/exporter-toolkit
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-02 09:20:21 +00:00
Simon Pasquier a4575b2c01
Merge pull request #3375 from prometheus/dependabot/go_modules/github.com/prometheus/client_golang-1.15.1
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
2023-06-02 11:19:38 +02:00
Simon Pasquier 2a02f60357
Merge pull request #3377 from prometheus/dependabot/go_modules/github.com/go-openapi/runtime-0.26.0
Bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0
2023-06-02 11:19:25 +02:00
Simon Pasquier ecba72cbb1
Merge pull request #3376 from prometheus/dependabot/go_modules/go.uber.org/atomic-1.11.0
Bump go.uber.org/atomic from 1.10.0 to 1.11.0
2023-06-02 11:10:26 +02:00
Simon Pasquier 56f3e83e51
Merge pull request #3378 from prometheus/dependabot/go_modules/github.com/cenkalti/backoff/v4-4.2.1
Bump github.com/cenkalti/backoff/v4 from 4.2.0 to 4.2.1
2023-06-02 11:05:40 +02:00
Simon Pasquier d61fcf7b44
Merge pull request #3373 from prometheus/dependabot/go_modules/golang.org/x/net-0.10.0
Bump golang.org/x/net from 0.8.0 to 0.10.0
2023-06-02 11:05:22 +02:00
dependabot[bot] a60ef9dd40
Bump github.com/cenkalti/backoff/v4 from 4.2.0 to 4.2.1
Bumps [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) from 4.2.0 to 4.2.1.
- [Commits](https://github.com/cenkalti/backoff/compare/v4.2.0...v4.2.1)

---
updated-dependencies:
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 15:58:36 +00:00
dependabot[bot] 6d2c5726b6
Bump github.com/go-openapi/runtime from 0.25.0 to 0.26.0
Bumps [github.com/go-openapi/runtime](https://github.com/go-openapi/runtime) from 0.25.0 to 0.26.0.
- [Release notes](https://github.com/go-openapi/runtime/releases)
- [Commits](https://github.com/go-openapi/runtime/compare/v0.25.0...v0.26.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 15:58:32 +00:00
dependabot[bot] bdf8fc6b75
Bump go.uber.org/atomic from 1.10.0 to 1.11.0
Bumps [go.uber.org/atomic](https://github.com/uber-go/atomic) from 1.10.0 to 1.11.0.
- [Release notes](https://github.com/uber-go/atomic/releases)
- [Changelog](https://github.com/uber-go/atomic/blob/master/CHANGELOG.md)
- [Commits](https://github.com/uber-go/atomic/compare/v1.10.0...v1.11.0)

---
updated-dependencies:
- dependency-name: go.uber.org/atomic
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 15:58:26 +00:00
dependabot[bot] 1b976820a1
Bump github.com/prometheus/client_golang from 1.15.0 to 1.15.1
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.0 to 1.15.1.
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 15:58:20 +00:00
dependabot[bot] f856cf01cd
Bump golang.org/x/net from 0.8.0 to 0.10.0
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.10.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.10.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-06-01 15:58:10 +00:00