Prometheus 3.12.0: STACKIT secret leak and decompression DoS fixed
Prometheus 3.12.0 (released May 28) patches two security issues: STACKIT service discovery exposed credentials in plaintext via the config endpoint, and remote write receivers had no limit on snappy decompression size.