SECCOMP-68058 Bump go and golang.org/x/crypto from v0.45.0 → v0.52.0

.circleci/config.yml

@@ -2,27 +2,28 @@
 version: 2.1
 
 orbs:
-  prometheus: prometheus/prometheus@0.16.0
+  prometheus: prometheus/prometheus@0.17.1
 
 executors:
   # This must match .promu.yml.
   golang:
     docker:
-    - image: cimg/go:1.18
+    - image: cimg/go:1.21
 
 jobs:
   test:
     executor: golang
 
     steps:
     - prometheus/setup_environment
+    - run: GOHOSTARCH=386 GOARCH=386 make test
     - run: make
     - prometheus/store_artifact:
         file: postgres_exporter
 
   integration:
     docker:
-    - image: cimg/go:1.18
+    - image: cimg/go:1.20
     - image: << parameters.postgres_image >>
       environment:
         POSTGRES_DB: circle_test
@@ -36,6 +37,8 @@ jobs:
     environment:
       DATA_SOURCE_NAME: 'postgresql://postgres:test@localhost:5432/circle_test?sslmode=disable'
       GOOPTS: '-v -tags integration'
+      CGO_ENABLED: 1
+      GOEXPERIMENT: boringcrypto
 
     steps:
     - checkout
@@ -56,11 +59,12 @@ workflows:
         matrix:
           parameters:
             postgres_image:
-            - circleci/postgres:10
             - circleci/postgres:11
             - circleci/postgres:12
             - circleci/postgres:13
-            - cimg/postgres:14.1
+            - cimg/postgres:14.9
+            - cimg/postgres:15.4
+            - cimg/postgres:16.0
     - prometheus/build:
         name: build
         parallelism: 3

.github/CODEOWNERS

@@ -0,0 +1,4 @@
+# Teams can be specified as code owners as well. Teams should
+# be identified in the format @org/team-name. Teams must have
+# explicit write access to the repository. In this example,
+* @sysdiglabs/promcat

.github/workflows/build.yaml

@@ -5,6 +5,12 @@ name: Build
 on:
   push:
     branches: [ build ]
+  workflow_dispatch:
+    inputs:
+      branch:
+        description: 'Branch you want to build'
+        required: true
+        default: 'build'
 
 # A workflow run is made up of one or more jobs that can run sequentially or in parallel
 jobs:
@@ -15,15 +21,24 @@ jobs:
         docker: ['scratch','ubi']
     # The type of runner that the job will run on
     runs-on: ubuntu-latest
+    env:
+      CGO_ENABLED: 1
+      GOEXPERIMENT: boringcrypto
     name: ${{ matrix.docker }}
     steps:
+    - name: Login to Quay.io
+      uses: docker/login-action@v2
+      with:
+        registry: quay.io
+        username: ${{ secrets.QUAY_UBI_READONLY_USERNAME }}
+        password: ${{ secrets.QUAY_UBI_READONLY_PASSWORD }}
     - name: build
-      uses: sysdiglabs/exporter-builder@v0.5
+      uses: sysdiglabs/exporter-builder@v1.2
       with:
         exporter: postgresql-exporter
-        artifactory_token: ${{ secrets.ARTI_TOKEN }}
-        artifactory_username: david.lorite@sysdig.com
+        artifactory_token: ${{ secrets.GAR_DEV_RW_JSON_KEY }}
+        artifactory_username: _json_key
         sysdig_secure_token: ${{ secrets.SYSDIG_SECURE_TOKEN }}
         tag_name: dev
         target: ${{ matrix.docker }}
-        repository: artifactory.internal.sysdig.com
+        repository: us-docker.pkg.dev

.github/workflows/golangci-lint.yml

@@ -1,3 +1,6 @@
+---
+# This action is synced from https://github.com/prometheus/prometheus
+version: 1
 name: golangci-lint
 on:
   push:
@@ -14,17 +17,20 @@ jobs:
   golangci:
     name: lint
     runs-on: ubuntu-latest
+    env:
+      CGO_ENABLED: 1
+      GOEXPERIMENT: boringcrypto
     steps:
       - name: Checkout repository
-        uses: actions/checkout@v3
+        uses: actions/checkout@v4
       - name: install Go
-        uses: actions/setup-go@v2
+        uses: actions/setup-go@v5
         with:
-          go-version: 1.18.x
+          go-version: 1.25.x
       - name: Install snmp_exporter/generator dependencies
         run: sudo apt-get update && sudo apt-get -y install libsnmp-dev
         if: github.repository == 'prometheus/snmp_exporter'
       - name: Lint
-        uses: golangci/golangci-lint-action@v3.2.0
+        uses: golangci/golangci-lint-action@v8
         with:
-          version: v1.45.2
+          version: v2.4.0

.github/workflows/push-dry-run.yaml

@@ -0,0 +1,29 @@
+name: Push Dry run
+
+# Controls when the action will run. Triggers the workflow on push or pull request
+# events but only for the master branch
+on:
+  workflow_dispatch:
+
+# A workflow run is made up of one or more jobs that can run sequentially or in parallel
+jobs:
+  # This workflow contains a single job called "build"
+  on-success:
+    # The type of runner that the job will run on
+    runs-on: tools-runner
+    steps:
+    - name: Trigger jenkins job to upload master to Quay.io
+      uses: sysdiglabs/jenkins-job-trigger-action@1.1.0
+      with:
+        jenkins_external_base_url: ${{ secrets.JENKINS_EXTERNAL_BASE_URL }}
+        jenkins_url: ${{ secrets.JENKINS_INTERNAL_URL }}
+        jenkins_user: ${{ secrets.JENKINS_BOT_API_USER }}
+        jenkins_token: ${{ secrets.JENKINS_BOT_API_TOKEN }}
+        job_timeout: "300"
+        job_name: "promcat/job/exporters/job/integrations-postgresql-exporter"
+        job_params: |
+          {
+            "DRY_RUN": "true",
+            "SCRATCH": "true",
+            "EXPORTER": "postgresql-exporter"
+          }

.github/workflows/push.yaml

@@ -12,12 +12,20 @@ jobs:
   # This workflow contains a single job called "build"
   on-success:
     # The type of runner that the job will run on
-    runs-on: ubuntu-latest
+    runs-on: tools-runner
     steps:
-    - name: Upload master to Quay.io
-      uses: fjogeleit/http-request-action@master
+    - name: Trigger jenkins job to upload master to Quay.io
+      uses: sysdiglabs/jenkins-job-trigger-action@1.1.0
       with:
-        url: 'https://sysdig-jenkins.internal.sysdig.com/view/Integrations/job/integrations-postgresql-exporter/buildWithParameters?token=${{ secrets.JENKINS_PROMCAT_LAUNCH_TOKEN }}&EXPORTER=postgresql-exporter&DRY_RUN=false'
-        method: 'POST'
-        username: david.lorite@sysdig.com
-        password: ${{ secrets.JENKINS_PROMCAT_API_TOKEN }}
+        jenkins_external_base_url: ${{ secrets.JENKINS_EXTERNAL_BASE_URL }}
+        jenkins_url: ${{ secrets.JENKINS_INTERNAL_URL }}
+        jenkins_user: ${{ secrets.JENKINS_BOT_API_USER }}
+        jenkins_token: ${{ secrets.JENKINS_BOT_API_TOKEN }}
+        job_timeout: "300"
+        job_name: "promcat/job/exporters/job/integrations-postgresql-exporter"
+        job_params: |
+          {
+            "DRY_RUN": "false",
+            "SCRATCH": "true",
+            "EXPORTER": "postgresql-exporter"
+          }

.github/workflows/release.yaml

@@ -13,12 +13,19 @@ jobs:
     - name: Release if tagged
       if: "!startswith(github.ref, 'refs/tags/v')"
       run: exit 78
+    - name: Login to Quay.io
+      uses: docker/login-action@v2
+      with:
+        registry: quay.io
+        username: ${{ secrets.QUAY_UBI_READONLY_USERNAME }}
+        password: ${{ secrets.QUAY_UBI_READONLY_PASSWORD }}
     - name: build
-      uses: sysdiglabs/exporter-builder@v0.4
+      uses: sysdiglabs/exporter-builder@v1.2
       with:
         exporter: postgresql-exporter
-        artifactory_token: ${{ secrets.ARTI_TOKEN }}
-        artifactory_username: david.lorite@sysdig.com
+        artifactory_token: ${{ secrets.GAR_DEV_RW_JSON_KEY }}
+        artifactory_username: _json_key
+        sysdig_secure_token: ${{ secrets.SYSDIG_SECURE_TOKEN }}
         tag_name: ${{ github.event.release.tag_name }}
         target: ${{ matrix.docker }}
-        repository: artifactory.internal.sysdig.com
+        repository: us-docker.pkg.dev

.golangci.yml

@@ -1,4 +1,9 @@
 ---
+linters:
+  enable:
+  - misspell
+  - revive
+
 issues:
   exclude-rules:
   - path: _test.go
@@ -7,4 +12,12 @@ issues:
 
 linters-settings:
   errcheck:
-    exclude: scripts/errcheck_excludes.txt
+    exclude-functions:
+      # Never check for logger errors.
+      - (github.com/go-kit/log.Logger).Log
+  revive:
+    rules:
+      # https://github.com/mgechev/revive/blob/master/RULES_DESCRIPTIONS.md#unused-parameter
+      - name: unused-parameter
+        severity: warning
+        disabled: true

.promu.yml

@@ -1,13 +1,13 @@
 go:
     # This must match .circle/config.yml.
-    version: 1.18
+    version: 1.21
+    cgo: true
 repository:
     path: github.com/prometheus-community/postgres_exporter
 build:
     binaries:
         - name: postgres_exporter
           path: ./cmd/postgres_exporter
-    flags: -a -tags 'netgo static_build'
     ldflags: |
         -X github.com/prometheus/common/version.Version={{.Version}}
         -X github.com/prometheus/common/version.Revision={{.Revision}}

.yamllint

@@ -20,9 +20,4 @@ rules:
       config/testdata/section_key_dup.bad.yml
   line-length: disable
   truthy:
-    ignore: |
-      .github/workflows/codeql-analysis.yml
-      .github/workflows/funcbench.yml
-      .github/workflows/fuzzing.yml
-      .github/workflows/prombench.yml
-      .github/workflows/golangci-lint.yml
+    check-keys: false

CHANGELOG.md

@@ -1,6 +1,66 @@
-## master / unreleased
+## 0.15.0 / 2023-10-27
 
-## 0.12.0-rc.0 / 2022-08-26
+* [ENHANCEMENT] Add 1kB and 2kB units #915
+* [BUGFIX] Add error log when probe collector creation fails #918
+* [BUGFIX] Fix test build failures on 32-bit arch #919
+* [BUGFIX] Adjust collector to use separate connection per scrape #936
+
+## 0.14.0 / 2023-09-11
+
+* [CHANGE] Add `state` label to pg_process_idle_seconds #862
+* [CHANGE] Change database connections to one per scrape #882 #902
+* [ENHANCEMENT] Add wal collector #858
+* [ENHANCEMENT] Add database_wraparound collector #834
+* [ENHANCEMENT] Add stat_activity_autovacuum collector #840
+* [ENHANCEMENT] Add stat_wal_receiver collector #844
+* [ENHANCEMENT] Add xlog_location collector #849
+* [ENHANCEMENT] Add statio_user_indexes collector #845
+* [ENHANCEMENT] Add long_running_transactions collector #836
+* [ENHANCEMENT] Add pg_stat_user_tables_size_bytes metric #904
+* [BUGFIX] Fix tests on 32-bit systems #857
+* [BUGFIX] Fix pg_stat_statements metrics on Postgres 13+ #874 #876
+* [BUGFIX] Fix pg_stat_database metrics for NULL stats_reset #877
+* [BUGFIX] Fix pg_replication_lag_seconds on Postgres 10+ when master is idle #895
+
+## 0.13.2 / 2023-07-21
+
+* [BUGFIX] Fix type issues on pg_postmaster metrics #828
+* [BUGFIX] Fix pg_replication collector instantiation #854
+* [BUGFIX] Fix pg_process_idle metrics #855
+
+## 0.13.1 / 2023-06-27
+
+* [BUGFIX] Make collectors not fail on null values #823
+
+## 0.13.0 / 2023-06-21
+
+BREAKING CHANGES:
+
+Please note, the following features are deprecated and may be removed in a future release:
+- `auto-discover-databases`
+- `extend.query-path`
+- `constantLabels`
+- `exclude-databases`
+- `include-databases`
+
+This exporter is meant to monitor PostgresSQL servers, not the user data/databases. If
+you need a generic SQL report exporter https://github.com/burningalchemist/sql_exporter
+is recommended.
+
+* [CHANGE] Adjust log level for collector startup #784
+* [CHANGE] Move queries from queries.yaml to collectors #801
+* [CHANGE] Deprecate extend queries feature #811
+* [CHANGE] Deprecate additional database features #815
+* [CHANGE] Convert pg_stat_database to new collector #685
+* [ENHANCEMENT] Supports alternate postgres:// prefix in URLs #787
+* [BUGFIX] Fix pg_setting different help values #771
+* [BUGFIX] Fix column type for pg_replication_slots #777
+* [BUGFIX] Fix pg_stat_database collector #809
+
+## 0.12.1 / 2023-06-12
+* [BUGFIX] Fix column type for pg_replication_slots #777
+
+## 0.12.0 / 2023-03-21
 
 BREAKING CHANGES:
 
@@ -10,7 +70,11 @@ PostgreSQL servers from a single exporter by passing the target via URL
 params. See the Multi-Target Support section of the README.
 
 * [CHANGE] Add multi-target support #618
+* [CHANGE] Add usename and application_name to pg_stat_activity metrics #673
+* [FEATURE] Add replication metrics from pg_replication_slots #747
 * [BUGFIX] Add dsn type for handling datasources #678
+* [BUGFIX] Add 64kB unit for postgres 15 #740
+* [BUGFIX] Add 4kB unit for postgres compiled with small blocks #699
 
 ## 0.11.1 / 2022-08-01
 

Dockerfile

@@ -1,29 +1,29 @@
-FROM golang:1.17.2 as base
+FROM golang:1.26.4 AS base
 ARG VERSION
 ARG GIT_COMMIT
 ARG DATE
 ARG TARGETARCH
 
 WORKDIR /go/src/github.com/prometheus-community/postgres_exporter
 
-FROM base as builder
-COPY go.mod go.sum ./
-RUN go mod download
-COPY cmd ./cmd
-COPY .promu.yml .promu.yml
-COPY Makefile Makefile
-COPY Makefile.common Makefile.common
+FROM base AS builder
+COPY . .
+
+ENV CGO_ENABLED=1
+ENV GOEXPERIMENT=boringcrypto
+
+RUN go mod tidy
 RUN make build
 RUN cp postgres_exporter /bin/postgres_exporter
 
-FROM scratch as scratch
+FROM scratch AS scratch
 COPY --from=builder /bin/postgres_exporter /bin/postgres_exporter
 EXPOSE     9187
 USER       59000:59000
 ENTRYPOINT [ "/bin/postgres_exporter" ]
 
-FROM quay.io/sysdig/sysdig-mini-ubi:1.3.1 as ubi
+FROM quay.io/sysdig/sysdig-stig-mini-ubi9:1.5.8 AS ubi
 COPY --from=builder /bin/postgres_exporter /bin/postgres_exporter
 EXPOSE     9187
 USER       59000:59000
-ENTRYPOINT [ "/bin/postgres_exporter" ]
+ENTRYPOINT [ "/bin/postgres_exporter" ]