This commit adds `@ <timestamp>` modifier as per this design doc: https://docs.google.com/document/d/1uSbD3T2beM-iX4-Hp7V074bzBRiRNlqUdcWP6JTDQSs/edit.

An example query:

```
rate(process_cpu_seconds_total[1m]) 
  and
topk(7, rate(process_cpu_seconds_total[1h] @ 1234))
```

which ranks based on last 1h rate and w.r.t. unix timestamp 1234 but actually plots the 1m rate.
Signed-off-by: NGanesh Vernekar <cs15btech11018@iith.ac.in>

Fix a typo in docs/configuration/configuration.md

Signed-off-by: NHu Shuai <hus.fnst@cn.fujitsu.com>

Enforce SECURITY.md updates

Add SECURITY.md to the enforced repo sync updates.
Signed-off-by: NBen Kochie <superq@gmail.com>

Add CodeQL Security Scanning

https: Add example configuration file

* test: cleanup tempdir for TestBlockWriter
Signed-off-by: NLi Zhijian <lizhijian@cn.fujitsu.com>

* test: cleanup tempdir for TestLogPartialWrite
Signed-off-by: NLi Zhijian <lizhijian@cn.fujitsu.com>

Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

Update exporter-toolkit to 0.5.0

Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

* fix: remove pre-2.21 tmp blocks on start
Signed-off-by: NNguyen Le Vu Long <vulongvn98@gmail.com>

* fix: commenting
Signed-off-by: NNguyen Le Vu Long <vulongvn98@gmail.com>

* Add SECURITY.md file
Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

Signed-off-by: NGuangwen Feng <fenggw-fnst@cn.fujitsu.com>

* Reload tsdb blocks every minute
Signed-off-by: NArthurSens <arthursens2005@gmail.com>

* Proteced tsdb with mutex locks
Signed-off-by: NArthurSens <arthursens2005@gmail.com>

* tsdb: Expose total number of label pairs in head
Signed-off-by: NNguyen Le Vu Long <vulongvn98@gmail.com>

* fix: add comment for NumLabelPairs
Signed-off-by: NNguyen Le Vu Long <vulongvn98@gmail.com>

* fix: remove comment
Signed-off-by: NNguyen Le Vu Long <vulongvn98@gmail.com>

Merge release branch back into master after 2.24.0 is done

Cut final v2.24.0

Signed-off-by: Nbeorn7 <beorn@grafana.com>

Fix golint issue caused by typo

Signed-off-by: NGuangwen Feng <fenggw-fnst@cn.fujitsu.com>

Merge release back (or forward?) into master.

prevent adding empty target when CNAME is encountered

K8s SD: add endpoints labels metadata

Signed-off-by: NMatt Berther <mattberther@users.noreply.github.com>

Add https to navbar and fix link in it

Signed-off-by: NGanesh Vernekar <cs15btech11018@iith.ac.in>

Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

mixin: Scope grafana config

In its current form this configuration clashes in one of the most widely
used configurations (kube-prometheus). This patch scopes the
configuration to prevent this.
Signed-off-by: NFrederic Branczyk <fbranczyk@gmail.com>

Cut v2.24.0-rc.0

This happens against the explicit objection of the release shepherd.
Signed-off-by: Nbeorn7 <beorn@grafana.com>

Signed-off-by: Nbeorn7 <beorn@grafana.com>

Signed-off-by: Nbeorn7 <beorn@grafana.com>

Signed-off-by: Nbeorn7 <beorn@grafana.com>

Update  React dependencies prior to v2.24 release

* Backfilling: optimize for non-consecutive blocks

When you have missing data for > 2 hours, you spend a lot of time
re-reading the complete file. It is not optimal.

This introduces a fastpath for this scenario.

Next, we do parse the metric even when we know we will not use it, based
on its timestamp. This only computes the metric when we know its
timestamp is right.
Signed-off-by: NJulien Pivotto <roidelapluie@inuits.eu>

Signed-off-by: Nbeorn7 <beorn@grafana.com>