feat(container): update image mirror.gcr.io/prompp/prompp ( 0.7.11 ➔ 0.8.0 )

[robot-rosey]

This PR contains the following updates:

Package	Update	Change
mirror.gcr.io/prompp/prompp	minor	0.7.11 → 0.8.0

---

Configuration

📅 Schedule: (in timezone America/Chicago)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate.

[robot-rosey]

--- kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: observability/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

+++ kubernetes/apps/observability/kube-prometheus-stack/app Kustomization: observability/kube-prometheus-stack HelmRelease: observability/kube-prometheus-stack

@@ -143,13 +143,13 @@

                   values:
                   - k8s-04
         externalUrl: https://prometheus...PLACEHOLDER_INTERNAL_SECRET_DOMAIN..
         image:
           registry: mirror.gcr.io
           repository: prompp/prompp
-          tag: 0.7.11
+          tag: 0.8.0
         podMonitorSelectorNilUsesHelmValues: false
         probeSelectorNilUsesHelmValues: false
         resources:
           limits:
             memory: 2000Mi
           requests:

[robot-rosey]

--- HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

+++ HelmRelease: observability/kube-prometheus-stack Prometheus: observability/kube-prometheus-stack

@@ -17,13 +17,13 @@

     alertmanagers:
     - namespace: observability
       name: kube-prometheus-stack-alertmanager
       port: http-web
       pathPrefix: /
       apiVersion: v2
-  image: mirror.gcr.io/prompp/prompp:0.7.11
+  image: mirror.gcr.io/prompp/prompp:0.8.0
   imagePullPolicy: IfNotPresent
   version: v2.55.1
   externalUrl: https://prometheus...PLACEHOLDER_INTERNAL_SECRET_DOMAIN..
   paused: false
   replicas: 1
   shards: 1

[clanker-claude]

prompp/prompp (Deckhouse Prom++): v0.7.11 → v0.8.0

Verdict: Safe to merge

No breaking changes. This upgrade contains security patches and performance improvements with no impact on this repository.

Security fixes (worth prioritizing):

• CVE-2026-42154: remote-read snappy DoS vulnerability
• CVE-2026-42151: Azure AD client_secret redaction issue
• Stored XSS in React web UI
• OpenTelemetry PATH hijacking (CVE mitigation)
• Go 1.26.4 security update
• grpc, golang.org/x/net, ws package dependency updates

Range-vector interval behavior change (low risk):

• Prom++ v0.8.0 changed range-vector calculations from closed intervals to left-open, right-closed intervals. May cause subtle numeric shifts in dashboards using range queries. The existing PrometheusRule expressions in this repo use only instant vectors, so they are unaffected.

No usage of new PromQL functions:

• Custom functions added in v0.7.7–v0.8.0 (op_defined, op_replace_nan, op_smoothie, op_zero_if_none, op_top) are not used in this repository.

Prometheus version override remains compatible:

• This repo pins prometheusSpec.version: v2.55.1 to suppress the unsupported Prometheus version error. Prom++ v0.8.0 is based on Prometheus 3.0 and the override continues to work.

New features available for future adoption:

• jemalloc arena pool metrics (prompp_common_jemalloc_arena_pool_*) exported automatically if the feature flag is enabled
• Instant-query optimization and Shrink QEB on head rotation are feature-flagged and off by default

Sources consulted:

• https://github.com/deckhouse/prompp/releases/tag/v0.8.0
• https://github.com/deckhouse/prompp/releases/tag/v0.7.11
• https://hub.docker.com/r/prompp/prompp/tags