NO-JIRA: Upgrade Prometheus to 3.11.2

[machine424]

• upgrade to 3.11.2
• Also bring back MON-4245: chore(image): reduce binary size by excluding unused SD deps #251 with the new Make service discoveries removable through build tags prometheus/prometheus#17736 (locally the size moved from 145M to 76M)

---

TODO:

• only build mantime NO-JIRA: Upgrade Prometheus to 3.11.2 #305 (comment)

[openshift-ci-robot]

@machine424: This pull request explicitly references no jira issue.

Details

In response to this:

• upgrade to 3.11.2
• Also bring back MON-4245: chore(image): reduce binary size by excluding unused SD deps #251 with the new Make service discoveries removable through build tags prometheus/prometheus#17736 (locally the size moved from 145M to 76M)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 8fa3afd1-ea8f-4e43-8b84-b89e3899f532

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: machine424

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [machine424]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[jan--f]

I added a switch to exclude the react ui: prometheus@6a9866e

Should we set BUILD_UI=mantine? Maybe that avoids some js CVE reports...or at least allows us to close them without much investigation.

[machine424]

opened yaml/go-yaml#339 so we don't have to hack around (let's see if my hack would work) go.yaml.in/yaml/v4 vendoring to make ci/prow/verify-deps pass.

also opened openshift/release#78351 to adjust our vendor job.

I added a switch to exclude the react ui: prometheus@6a9866e

Should we set BUILD_UI=mantine? Maybe that avoids some js CVE reports...or at least allows us to close them without much investigation.

Cool, should have missed that. I can take care of that here.

[openshift-ci]

@machine424: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-agnostic-cmo	421c3ab	link	true	/test e2e-agnostic-cmo
ci/prow/vendor	421c3ab	link	true	/test vendor

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.