build(deps): update quay.io/prometheus/prometheus docker tag to v3.10.0

[renovate]

This PR contains the following updates:

Package	Update	Change
quay.io/prometheus/prometheus	minor	3.7.3 → 3.10.0

---

Release Notes

prometheus/prometheus (quay.io/prometheus/prometheus)

v3.10.0

Compare Source

Prometheus now offers a distroless Docker image variant alongside the default
busybox image. The distroless variant provides enhanced security with a minimal
base image, uses UID/GID 65532 (nonroot) instead of nobody, and removes the
VOLUME declaration. Both variants are available with -busybox and -distroless
tag suffixes (e.g., prom/prometheus:latest-busybox, prom/prometheus:latest-distroless).
The busybox image remains the default with no suffix for backwards compatibility
(e.g., prom/prometheus:latest points to the busybox variant).

For users migrating existing named volumes from the busybox image to the distroless variant, the ownership can be adjusted with:

docker run --rm -v prometheus-data:/prometheus alpine chown -R 65532:65532 /prometheus

Then, the container can be started with the old volume with:

docker run -v prometheus-data:/prometheus prom/prometheus:latest-distroless

User migrating from bind mounts might need to ajust permissions too, depending on their setup.

• [CHANGE] Alerting: Add alertmanager dimension to following metrics: prometheus_notifications_dropped_total, prometheus_notifications_queue_capacity, prometheus_notifications_queue_length. #​16355
• [CHANGE] UI: Hide expanded alert annotations by default, enabling more information density on the /alerts page. #​17611
• [FEATURE] AWS SD: Add MSK Role. #​17600
• [FEATURE] PromQL: Add fill() / fill_left() / fill_right() binop modifiers for specifying default values for missing series. #​17644
• [FEATURE] Web: Add OpenAPI 3.2 specification for the HTTP API at /api/v1/openapi.yaml. #​17825
• [FEATURE] Dockerfile: Add distroless image variant using UID/GID 65532 and no VOLUME declaration. Busybox image remains default. #​17876
• [FEATURE] Web: Add on-demand wall time profiling under <URL>/debug/pprof/fgprof. #​18027
• [ENHANCEMENT] PromQL: Add more detail to histogram quantile monotonicity info annotations. #​15578
• [ENHANCEMENT] Alerting: Independent alertmanager sendloops. #​16355
• [ENHANCEMENT] TSDB: Experimental support for early compaction of stale series in the memory with configurable threshold stale_series_compaction_threshold in the config file. #​16929
• [ENHANCEMENT] Service Discovery: Service discoveries are now removable from the Prometheus binary through the Go build tag remove_all_sd and individual service discoveries can be re-added with the build tags enable_<sd name>_sd. Users can build a custom Prometheus with only the necessary SDs for a smaller binary size. #​17736
• [ENHANCEMENT] Promtool: Support promql syntax features promql-duration-expr and promql-extended-range-selectors. #​17926
• [PERF] PromQL: Avoid unnecessary label extraction in PromQL functions. #​17676
• [PERF] PromQL: Improve performance of regex matchers like .*-.*-.*. #​17707
• [PERF] OTLP: Add label caching for OTLP-to-Prometheus conversion to reduce allocations and improve latency. #​17860
• [PERF] API: Compute /api/v1/targets/relabel_steps in a single pass instead of re-running relabeling for each prefix. #​17969
• [PERF] tsdb: Optimize LabelValues intersection performance for matchers. #​18069
• [BUGFIX] PromQL: Prevent query strings containing only UTF-8 continuation bytes from crashing Prometheus. #​17735
• [BUGFIX] Web: Fix missing X-Prometheus-Stopping header for /-/ready endpoint in NotReady state. #​17795
• [BUGFIX] PromQL: Fix PromQL info() function returning empty results when filtering by a label that exists on both the input metric and target_info. #​17817
• [BUGFIX] TSDB: Fix a bug during exemplar buffer grow/shrink that could cause exemplars to be incorrectly discarded. #​17863
• [BUGFIX] UI: Fix broken graph display after page reload, due to broken Y axis min encoding/decoding. #​17869
• [BUGFIX] TSDB: Fix memory leaks in buffer pools by clearing reference fields (Labels, Histogram pointers, metadata strings) before returning buffers to pools. #​17879
• [BUGFIX] PromQL: info function: fix series without identifying labels not being returned. #​17898
• [BUGFIX] OTLP: Filter __name__ from OTLP attributes to prevent duplicate labels. #​17917
• [BUGFIX] TSDB: Fix division by zero when computing stale series ratio with empty head. #​17952
• [BUGFIX] OTLP: Fix potential silent data loss for sum metrics. #​17954
• [BUGFIX] PromQL: Fix smoothed interpolation across counter resets. #​17988
• [BUGFIX] PromQL: Fix panic with @ modifier on empty ranges. #​18020
• [BUGFIX] PromQL: Fix avg_over_time for a single native histogram. #​18058

v3.9.1

Compare Source

• [BUGFIX] Agent: fix crash shortly after startup from invalid type of object. #​17802
• [BUGFIX] Scraping: fix relabel keep/drop not working. #​17807

v3.9.0

Compare Source

• [CHANGE] Native Histograms are no longer experimental! Make the native-histogram feature flag a no-op. Use scrape_native_histograms config option instead. #​17528
• [CHANGE] API: Add maximum limit of 10,000 sets of statistics to TSDB status endpoint. #​17647
• [FEATURE] API: Add /api/v1/features for clients to understand which features are supported. #​17427
• [FEATURE] Promtool: Add start_timestamp field for unit tests. #​17636
• [FEATURE] Promtool: Add --format seriesjson option to tsdb dump to output just series labels in JSON format. #​13409
• [FEATURE] Add --storage.tsdb.delay-compact-file.path flag for better interoperability with Thanos. #​17435
• [FEATURE] UI: Add an option on the query drop-down menu to duplicate that query panel. #​17714
• [ENHANCEMENT]: TSDB: add flag --storage.tsdb.block-reload-interval to configure TSDB Block Reload Interval. #​16728
• [ENHANCEMENT] UI: Add graph option to start the chart's Y axis at zero. #​17565
• [ENHANCEMENT] Scraping: Classic protobuf format no longer requires the unit in the metric name. #​16834
• [ENHANCEMENT] PromQL, Rules, SD, Scraping: Add native histograms to complement existing summaries. #​17374
• [ENHANCEMENT] Notifications: Add a histogram prometheus_notifications_latency_histogram_seconds to complement the existing summary. #​16637
• [ENHANCEMENT] Remote-write: Add custom scope support for AzureAD authentication. #​17483
• [ENHANCEMENT] SD: add a config label with job name for most prometheus_sd_refresh metrics. #​17138
• [ENHANCEMENT] TSDB: New histogram prometheus_tsdb_sample_ooo_delta, the distribution of out-of-order samples in seconds. Collected for all samples, accepted or not. #​17477
• [ENHANCEMENT] Remote-read: Validate histograms received via remote-read. #​17561
• [PERF] TSDB: Small optimizations to postings index. #​17439
• [PERF] Scraping: Speed up relabelling of series. #​17530
• [PERF] PromQL: Small optimisations in binary operators. #​17524, #​17519.
• [BUGFIX] UI: PromQL autocomplete now shows the correct type and HELP text for OpenMetrics counters whose samples end in _total. #​17682
• [BUGFIX] UI: Fixed codemirror-promql incorrectly showing label completion suggestions after the closing curly brace of a vector selector. #​17602
• [BUGFIX] UI: Query editor no longer suggests a duration unit if one is already present after a number. #​17605
• [BUGFIX] PromQL: Fix some "vector cannot contain metrics with the same labelset" errors when experimental delayed name removal is enabled. #​17678
• [BUGFIX] PromQL: Fix possible corruption of PromQL text if the query had an empty ignoring() and non-empty grouping. #​17643
• [BUGFIX] PromQL: Fix resets/changes to return empty results for anchored selectors when all samples are outside the range. #​17479
• [BUGFIX] PromQL: Check more consistently for many-to-one matching in filter binary operators. #​17668
• [BUGFIX] PromQL: Fix collision in unary negation with non-overlapping series. #​17708
• [BUGFIX] PromQL: Fix collision in label_join and label_replace with non-overlapping series. #​17703
• [BUGFIX] PromQL: Fix bug with inconsistent results for queries with OR expression when experimental delayed name removal is enabled. #​17161
• [BUGFIX] PromQL: Ensure that rate/increase/delta of histograms results in a gauge histogram. #​17608
• [BUGFIX] PromQL: Do not panic while iterating over invalid histograms. #​17559
• [BUGFIX] TSDB: Reject chunk files whose encoded chunk length overflows int. #​17533
• [BUGFIX] TSDB: Do not panic during resolution reduction of invalid histograms. #​17561
• [BUGFIX] Remote-write Receive: Avoid duplicate labels when experimental type-and-unit-label feature is enabled. #​17546
• [BUGFIX] OTLP Receiver: Only write metadata to disk when experimental metadata-wal-records feature is enabled. #​17472

v3.8.1

Compare Source

• [BUGFIX] remote: Fix Remote Write receiver, so it does not send wrong response headers for v1 flow and cause Prometheus senders to emit false partial error log and metrics. #​17683

v3.8.0

Compare Source

• [CHANGE] Remote-write: Update receiving to 2.0-rc.4 spec. "created timestamp" (CT) is now called "start timestamp" (ST). #​17411
• [CHANGE] TSDB: Native Histogram Custom Bounds with a NaN threshold are now rejected. #​17287
• [FEATURE] OAuth2: support jwt-bearer grant-type (RFC7523 3.1). #​17592
• [FEATURE] Dockerfile: Add OpenContainers spec labels to Dockerfile. #​16483
• [FEATURE] SD: Add unified AWS service discovery for ec2, lightsail and ecs services. #​17406
• [FEATURE] Native histograms are now a stable, but optional feature, use the scrape_native_histograms config setting. #​17232 #​17315
• [FEATURE] UI: Support anchored and smoothed keyword in promql editor. #​17239
• [FEATURE] UI: Show detailed relabeling steps for each discovered target. #​17337
• [FEATURE] Alerting: Add urlQueryEscape to template functions. #​17403
• [FEATURE] Promtool: Add Remote-Write 2.0 support to promtool push metrics via the --protobuf_message flag. #​17417
• [ENHANCEMENT] Clarify the docs about handling negative native histograms. #​17249
• [ENHANCEMENT] Mixin: Add static UID to the remote-write dashboard. #​17256
• [ENHANCEMENT] PromQL: Reconcile mismatched NHCB bounds in Add and Sub. #​17278
• [ENHANCEMENT] Alerting: Add "unknown" state for alerting rules that haven't been evaluated yet. #​17282
• [ENHANCEMENT] Scrape: Allow simultaneous use of classic histogram → NHCB conversion and zero-timestamp ingestion. #​17305
• [ENHANCEMENT] UI: Add smoothed/anchored in explain. #​17334
• [ENHANCEMENT] OTLP: De-duplicate any target_info samples with the same timestamp for the same series. #​17400
• [ENHANCEMENT] Document use_fips_sts_endpoint in sigv4 config sections. #​17304
• [ENHANCEMENT] Document Prometheus Agent. #​14519
• [PERF] PromQL: Speed up parsing of variadic functions. #​17316
• [PERF] UI: Speed up alerts/rules/... pages by not rendering collapsed content. #​17485
• [PERF] UI: Performance improvement when getting label name and values in promql editor. #​17194
• [PERF] UI: Speed up /alerts for many firing alerts via virtual scrolling. #​17254
• [BUGFIX] PromQL: Fix slice indexing bug in info function on churning series. #​17199
• [BUGFIX] API: Reduce lock contention on /api/v1/targets. #​17306
• [BUGFIX] PromQL: Consistent handling of gauge vs. counter histograms in aggregations. #​17312
• [BUGFIX] TSDB: Allow NHCB with -Inf as the first custom value. #​17320
• [BUGFIX] UI: Fix duplicate loading of data from the API speed up rendering of some pages. #​17357
• [BUGFIX] Old UI: Fix createExpressionLink to correctly build /graph URLs so links from Alerts/Rules work again. #​17365
• [BUGFIX] PromQL: Avoid panic when parsing malformed info call. #​17379
• [BUGFIX] PromQL: Include histograms when enforcing sample_limit. #​17390
• [BUGFIX] Config: Fix panic if TLS CA file is absent. #​17418
• [BUGFIX] PromQL: Fix histogram_fraction for classic histograms and NHCB if lower bound is in the first bucket. #​17424

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.