Cut v2.33.5

Note that this bugfix release also includes the update of the
containerd/containerd dependency, with the only purpose of shutting up
security scanner spam. We usually do not decument dependency updates
in the CHANGELOG. In this case, it isn't even doing anything. I plan
to mention the update in the announcement mail.

Signed-off-by: beorn7 <beorn@grafana.com>

CHANGELOG.md

@@ -1,3 +1,9 @@
+## 2.33.5 / 2022-03-08
+
+The binaries published with this release are built with Go1.17.8 to avoid [CVE-2022-24921](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24921).
+
+* [BUGFIX] Remote-write: Fix deadlock between adding to queue and getting batch. #10395
+
 ## 2.33.4 / 2022-02-22
 
 * [BUGFIX] TSDB: Fix panic when m-mapping head chunks onto the disk. #10316

VERSION

@@ -1 +1 @@
-2.33.4
+2.33.5