Prometheus v3.5.4

This release is a critical security update that patches secret leakage in the STACKIT service discovery provider and addresses several CVEs across the Go and UI dependency stacks. It also expands distribution by publishing official images to ghcr.io.

Fixed plaintext secret exposure in STACKIT Service Discovery — Prevents unauthorized users or automated scrapers from harvesting sensitive service discovery credentials, which is critical for maintaining infrastructure security.

Critical security patches for Go dependencies and UI libraries — Protects the Prometheus runtime and web interface from known vulnerabilities (CVEs) in core networking and UI libraries, ensuring the monitoring dashboard remains secure against browser-based attacks.

Official container images now available on GitHub Container Registry (ghcr.io) — Provides a more reliable alternative for pulling Prometheus images, improving CI/CD stability for teams who want to avoid Docker Hub rate limits or need a backup registry.