- Upgrade base Docker image to Alpine 3.19.0 and Go builder to Go 1.21.5 for security patches
- Fix vmalert to sanitize label names before sending alerts, avoiding Alertmanager validation errors
- Correctly escape '<' characters in responses from the /federate endpoint