Security update for golang-github-prometheus-prometheus

This update for golang-github-prometheus-prometheus to version 3.5.3 fixes the following issues: Security issues fixed: CVE-2026-42151: AzureAD remote write: Fixed OAuth clientsecret being exposed in plaintext via /-/config endpoint bsc1263986 CVE-2026-42154: Remote-read: Reject snappy-compressed...

GHSA-X4RX-4GW3-53P4 vulnerabilities

Vulnerabilities for packages: cg, telegraf, zot, spire-server, syft, grype-fips, nerdctl, kargo, openfga, zarf, beats-fips, aws-otel-collector-fips, opentelemetry-collector, cadvisor-fips, trufflehog-fips, buildah, opentelemetry-collector-fips, k9s-fips, splunk-otel-collector-fips, trivy-fips,...