From bfac961c8cc623557a421512a99def1e3784c61e Mon Sep 17 00:00:00 2001
From: Marian Hammer <marian.hammer@meetwise.com>
Date: Thu, 19 Jan 2023 13:02:02 +0100
Subject: [PATCH] prometheus: 2.40.3 -> 2.41.0

prometheus 2.40.x is out of support since 12/2022 therefore the update to 2.41.0

between those two releases security critical patches have been added both to
prometheus codebase and upstream dependecies, see:
  * 2.40.6 / 2022-12-09
    https://github.com/prometheus/prometheus/pull/11690
      [SECURITY] Security upgrade from go and upstream dependencies that include
      security fixes to the net/http and os packages. #11691

  *  2.40.4 / 2022-11-29
    https://github.com/advisories/GHSA-7rg2-cxvp-9p7p
    https://github.com/advisories/GHSA-4v48-4q5m-8vx4
      [SECURITY] Fix basic authentication bypass vulnerability
      (CVE-2022-46146) GHSA-4v48-4q5m-8vx4
---
 pkgs/servers/monitoring/prometheus/default.nix | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/pkgs/servers/monitoring/prometheus/default.nix b/pkgs/servers/monitoring/prometheus/default.nix
index 2d2439b4c234..ade935f16d04 100644
--- a/pkgs/servers/monitoring/prometheus/default.nix
+++ b/pkgs/servers/monitoring/prometheus/default.nix
@@ -31,10 +31,10 @@
 }:
 
 let
-  version = "2.40.3";
+  version = "2.41.0";
   webUiStatic = fetchurl {
     url = "https://github.com/prometheus/prometheus/releases/download/v${version}/prometheus-web-ui-${version}.tar.gz";
-    sha256 = "sha256-dvMts9uJNLSp8Qho+yKMLPTy/1c2RgfeEn3UQLIZNc4=";
+    sha256 = "sha256-0EFeAuhQUu+4TCoHsWHTbWTGJLjS37POacP1K42sGqI=";
   };
 in
 buildGoModule rec {
@@ -45,10 +45,10 @@ buildGoModule rec {
     rev = "v${version}";
     owner = "prometheus";
     repo = "prometheus";
-    sha256 = "sha256-Jg8loH0Sji1MmDXUnMtvLTHjNGmkrzZApxvpe2+OqtU=";
+    sha256 = "sha256-J3KDN02m639bUGrnUrqeCLferrqIHaJ2VEBjIqfm/GY=";
   };
 
-  vendorSha256 = "sha256-aRVoEgP84ITQ1D0PsFVJUKH/Uin7s80iQCwzgrfpjoM=";
+  vendorSha256 = "sha256-4Of1euBp5Lka6Bb2UJYUQuRa7t2/B1HaXCWSOqCASYw=";
 
   excludedPackages = [ "documentation/prometheus-mixin" ];