Build updated thanos-0.33

Signed-off-by: Steve Garf <[email protected]>

thanos-0.32.yaml → thanos.yaml

@@ -1,13 +1,13 @@
 package:
-  name: thanos-0.32
-  version: 0.32.5
-  epoch: 4
+  name: thanos
+  version: 0.33.0
+  epoch: 0
   description: Highly available Prometheus setup with long term storage capabilities.
   copyright:
     - license: Apache-2.0
   dependencies:
     provides:
-      - thanos=0.32.999
+      - thanos=0.33.999
 
 environment:
   contents:
@@ -21,7 +21,7 @@ environment:
 pipeline:
   - uses: git-checkout
     with:
-      expected-commit: 750e8a94eed5226cd4562117295d540a968c163c
+      expected-commit: 0f025f1ff97826a632435ba8fdcb9e3bc248bb27
       repository: https://github.com/thanos-io/thanos
       tag: v${{package.version}}
 
@@ -30,22 +30,12 @@ pipeline:
       deps: golang.org/x/[email protected] golang.org/x/[email protected]
 
   - runs: |
-      # Mitigate CVE-2023-39325 and CVE-2023-3978
-      go get golang.org/x/[email protected]
-
       # Mitigate GHSA-m425-mq94-257g
       go mod edit -dropreplace=google.golang.org/grpc
       go get google.golang.org/[email protected]
       go mod edit -replace github.com/sercand/kuberesolver=github.com/sercand/kuberesolver/[email protected]
 
-      # Mitigate GHSA-rcjv-mgp8-qvmr (These are interrelated Go modules.)
-      go get go.opentelemetry.io/contrib/instrumentation/net/http/[email protected]
-      go mod edit -droprequire=go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
-      go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected]
-      go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/[email protected]
-
       go mod tidy
-
       make build
 
   - runs: |
@@ -58,4 +48,4 @@ update:
   github:
     identifier: thanos-io/thanos
     strip-prefix: v
-    tag-filter: v0.32.
+    tag-filter: v0.33.