fix: update observability stack versions for security (#99)

* fix: update observability stack versions for security fixes

- Prometheus: v2.48.0 → v2.55.1 (fixes docker/crypto vulnerabilities)
- Grafana: 10.2.2 → 11.4.0 (addresses CVEs in older version)
- Loki: 2.9.3 → 3.3.2 (security patches)
- cAdvisor: v0.47.2 → v0.51.0 (updated dependencies)
- Redis Exporter: v1.55.0 → v1.67.0 (latest stable)

* fix: update Vector pipeline test for newer Vector versions

- Updated test to check for multiple startup log patterns
- Added fallback check for healthy container status
- Supports both old 'Vector has started' and new 'component_type=docker_logs' messages

Author: NormB

.env.example

@@ -25,12 +25,12 @@ PGBOUNCER_VERSION=latest
 FORGEJO_VERSION=1.21.11-0
 
 # Observability Stack:
-PROMETHEUS_VERSION=v2.48.0
-GRAFANA_VERSION=10.2.2
-LOKI_VERSION=2.9.3
+PROMETHEUS_VERSION=v2.55.1
+GRAFANA_VERSION=11.4.0
+LOKI_VERSION=3.3.2
 VECTOR_VERSION=0.50.0-debian
-CADVISOR_VERSION=v0.47.2
-REDIS_EXPORTER_VERSION=v1.55.0
+CADVISOR_VERSION=v0.51.0
+REDIS_EXPORTER_VERSION=v1.67.0
 
 # ===========================================================================
 # HashiCorp Vault Configuration (Secrets Management & PKI)

tests/test-observability.sh

@@ -233,14 +233,21 @@ test_vector_pipeline() {
         return 1
     fi
 
-    # Check Vector logs for pipeline initialization
-    if docker logs dev-vector 2>&1 | grep -q "Vector has started"; then
+    # Check Vector logs for pipeline initialization (supports both old and new Vector versions)
+    if docker logs dev-vector 2>&1 | grep -qE "(Vector has started|Started watching for container logs|component_type=docker_logs)"; then
         # Check if Vector is processing logs
         local log_count=$(docker logs dev-vector 2>&1 | wc -l)
         success "Vector pipeline active (container running, $log_count log lines)"
         return 0
     fi
 
+    # Also check if container is healthy as a fallback
+    if docker inspect --format='{{.State.Health.Status}}' dev-vector 2>/dev/null | grep -q "healthy"; then
+        local log_count=$(docker logs dev-vector 2>&1 | wc -l)
+        success "Vector pipeline active (container healthy, $log_count log lines)"
+        return 0
+    fi
+
     fail "Vector pipeline test failed" "Vector pipeline"
     return 1
 }