Prometheus - v2.35.0

This Prometheus release is built with go1.18, which contains two noticeable changes related to TLS:

• TLS 1.0 and 1.1 disabled by default client-side.
  Prometheus users can override this with the min_version parameter of tls_config.

• Certificates signed with the SHA-1 hash function are rejected. This doesn't apply to self-signed root certificates.

• [CHANGE] TSDB: Delete *.tmp WAL files when Prometheus starts. #10317

• [CHANGE] promtool: Add new flag --lint (enabled by default) for the commands check rules and check config, resulting in a new exit code (3) for linter errors. #10435
• [FEATURE] Support for automatically setting the variable GOMAXPROCS to the container CPU limit. Enable with the flag --enable-feature=auto-gomaxprocs. #10498
• [FEATURE] PromQL: Extend statistics with total and peak number of samples in a query. Additionally, per-step statistics are available with --enable-feature=promql-per-step-stats and using stats=all in the query API.
  Enable with the flag --enable-feature=per-step-stats. #10369
• [ENHANCEMENT] Prometheus is built with Go 1.18. #10501
• [ENHANCEMENT] TSDB: more efficient sorting of postings read from WAL at startup. #10500
• [ENHANCEMENT] Azure SD: Add metric to track Azure SD failures. #10476
• [ENHANCEMENT] Azure SD: Add an optional resource_group configuration. #10365
• [ENHANCEMENT] Kubernetes SD: Support discovery.k8s.io/v1 EndpointSlice (previously only discovery.k8s.io/v1beta1 EndpointSlice was supported). #9570
• [ENHANCEMENT] Kubernetes SD: Allow attaching node metadata to discovered pods. #10080
• [ENHANCEMENT] OAuth2: Support for using a proxy URL to fetch OAuth2 tokens. #10492
• [ENHANCEMENT] Configuration: Add the ability to disable HTTP2. #10492
• [ENHANCEMENT] Config: Support overriding minimum TLS version. #10610
• [BUGFIX] Kubernetes SD: Explicitly include gcp auth from k8s.io. #10516
• [BUGFIX] Fix OpenMetrics parser to sort uppercase labels correctly. #10510
• [BUGFIX] UI: Fix scrape interval and duration tooltip not showing on target page. #10545
• [BUGFIX] Tracing/GRPC: Set TLS credentials only when insecure is false. #10592
• [BUGFIX] Agent: Fix ID collision when loading a WAL with multiple segments. #10587
• [BUGFIX] Remote-write: Fix a deadlock between Batch and flushing the queue. #10608