[fix][sec] Upgrade prometheus client_golang to v1.12.2 to fix CVE-2022-21698

[ericsyh]

Fixes #xyz

Master Issue: #xyz

PIP: #xyz

Motivation

Prometheus client_golang v1.11.1 is impacted by the CVE-2022-21698

Modifications

Upgrade the Prometheus client_golang to v1.12.2

Verifying this change

• Make sure that the change passes the CI checks.

(Please pick either of the following options)

This change is a trivial rework / code cleanup without any test coverage.

(or)

This change is already covered by existing tests, such as (please describe tests).

(or)

This change added tests and can be verified as follows:

(example:)

• Added integration tests for end-to-end deployment with large payloads (10MB)
• Extended integration test for recovery after broker failure

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

• Dependencies (add or upgrade a dependency)
• The public API
• The schema
• The default values of configurations
• The threading model
• The binary protocol
• The REST endpoints
• The admin CLI options
• The metrics
• Anything that affects deployment

Documentation

• doc
• doc-required
• doc-not-needed
• doc-complete

Matching PR in forked repository

PR in forked repository:

My local repo CI result:
https://github.com/ericsyh/pulsar/pull/2

[ericsyh]

@codelipenghui @freeznet PTAL

[codecov-commenter]

Codecov Report

Merging #20579 (acea6c7) into master (3069464) will increase coverage by 41.08%.
The diff coverage is n/a.

@@              Coverage Diff              @@
##             master   #20579       +/-   ##
=============================================
+ Coverage     31.93%   73.01%   +41.08%     
- Complexity    11776    31978    +20202     
=============================================
  Files          1498     1867      +369     
  Lines        114571   138636    +24065     
  Branches      12422    15231     +2809     
=============================================
+ Hits          36583   101220    +64637     
+ Misses        73149    29383    -43766     
- Partials       4839     8033     +3194     

Flag	Coverage Δ
inttests	24.15% <ø> (?)
systests	24.96% <ø> (?)
unittests	72.31% <ø> (+40.38%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

see 1552 files with indirect coverage changes

[tisonkun]

Merging...

Thank you!

I wonder what versions are expected to be cherry-picked.

[ericsyh]

Merging...

Thank you!

I wonder what versions are expected to be cherry-picked.

I think 3.0, 2.11, and 2.10 active branches should cherry-pick this PR.