[PR #81] build(deps): bump the prod-minor-updates group across 1 directory with 2 updates #324

Open
opened 2026-05-08 12:11:53 -05:00 by GiteaMirror · 0 comments
Owner

📋 Pull Request Information

Original PR: https://github.com/fosrl/gerbil/pull/81
Author: @dependabot[bot]
Created: 5/3/2026
Status: 🔄 Open

Base: mainHead: dependabot/go_modules/prod-minor-updates-23e7362396


📝 Commits (1)

  • bcea04c build(deps): bump the prod-minor-updates group across 1 directory with 2 updates

📊 Changes

2 files changed (+37 additions, -24 deletions)

View changed files

📝 go.mod (+8 -8)
📝 go.sum (+29 -16)

📄 Description

Bumps the prod-minor-updates group with 2 updates in the / directory: github.com/prometheus/client_golang and golang.org/x/crypto.

Updates github.com/prometheus/client_golang from 1.20.5 to 1.23.2

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.23.2 - 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2

v1.23.1 - 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1

v1.23.0 - 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
  • [FEATURE] Add exemplars for native histograms #1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

... (truncated)

Commits

Updates golang.org/x/crypto from 0.49.0 to 0.50.0

Commits
  • 03ca0dc go.mod: update golang.org/x dependencies
  • 8400f4a ssh: respect signer's algorithm preference in pickSignatureAlgorithm
  • 81c6cb3 ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.

## 📋 Pull Request Information **Original PR:** https://github.com/fosrl/gerbil/pull/81 **Author:** [@dependabot[bot]](https://github.com/apps/dependabot) **Created:** 5/3/2026 **Status:** 🔄 Open **Base:** `main` ← **Head:** `dependabot/go_modules/prod-minor-updates-23e7362396` --- ### 📝 Commits (1) - [`bcea04c`](https://github.com/fosrl/gerbil/commit/bcea04c438c03193f421c3fe7e5e92a0647eb14e) build(deps): bump the prod-minor-updates group across 1 directory with 2 updates ### 📊 Changes **2 files changed** (+37 additions, -24 deletions) <details> <summary>View changed files</summary> 📝 `go.mod` (+8 -8) 📝 `go.sum` (+29 -16) </details> ### 📄 Description Bumps the prod-minor-updates group with 2 updates in the / directory: [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) and [golang.org/x/crypto](https://github.com/golang/crypto). Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.2 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.23.2 - 2025-09-05</h2> <p>This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.</p> <!-- raw HTML omitted --> <ul> <li>[release-1.23] Upgrade to prometheus/common@v0.66.1 by <a href="https://github.com/aknuds1"><code>@​aknuds1</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1869">prometheus/client_golang#1869</a></li> <li>[release-1.23] Cut v1.23.2 by <a href="https://github.com/aknuds1"><code>@​aknuds1</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1870">prometheus/client_golang#1870</a></li> </ul> <!-- raw HTML omitted --> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2">https://github.com/prometheus/client_golang/compare/v1.23.1...v1.23.2</a></p> <h2>v1.23.1 - 2025-09-04</h2> <p>This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.</p> <!-- raw HTML omitted --> <ul> <li>[release-1.23] Upgrade to prometheus/common v0.66 by <a href="https://github.com/aknuds1"><code>@​aknuds1</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1866">prometheus/client_golang#1866</a></li> <li>[release-1.23] Cut v1.23.1 by <a href="https://github.com/aknuds1"><code>@​aknuds1</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1867">prometheus/client_golang#1867</a></li> </ul> <!-- raw HTML omitted --> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1">https://github.com/prometheus/client_golang/compare/v1.23.0...v1.23.1</a></p> <h2>v1.23.0 - 2025-07-30</h2> <ul> <li>[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. <a href="https://redirect.github.com/prometheus/client_golang/issues/1812">#1812</a></li> <li>[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix <a href="https://redirect.github.com/prometheus/client_golang/issues/1766">#1766</a></li> <li>[FEATURE] Add exemplars for native histograms <a href="https://redirect.github.com/prometheus/client_golang/issues/1686">#1686</a></li> <li>[ENHANCEMENT] exp/api: Bubble up status code from writeResponse <a href="https://redirect.github.com/prometheus/client_golang/issues/1823">#1823</a></li> <li>[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 <a href="https://redirect.github.com/prometheus/client_golang/issues/1833">#1833</a></li> <li>[BUGFIX] exp/api: client prompt return on context cancellation <a href="https://redirect.github.com/prometheus/client_golang/issues/1729">#1729</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>1.23.2 / 2025-09-05</h2> <p>This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.</p> <h2>1.23.1 / 2025-09-04</h2> <p>This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.</p> <h2>1.23.0 / 2025-07-30</h2> <ul> <li>[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. <a href="https://redirect.github.com/prometheus/client_golang/issues/1812">#1812</a></li> <li>[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix <a href="https://redirect.github.com/prometheus/client_golang/issues/1766">#1766</a></li> <li>[FEATURE] Add exemplars for native histograms <a href="https://redirect.github.com/prometheus/client_golang/issues/1686">#1686</a></li> <li>[ENHANCEMENT] exp/api: Bubble up status code from writeResponse <a href="https://redirect.github.com/prometheus/client_golang/issues/1823">#1823</a></li> <li>[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 <a href="https://redirect.github.com/prometheus/client_golang/issues/1833">#1833</a></li> <li>[BUGFIX] exp/api: client prompt return on context cancellation <a href="https://redirect.github.com/prometheus/client_golang/issues/1729">#1729</a></li> </ul> <h2>1.22.0 / 2025-04-07</h2> <p>:warning: This release contains potential breaking change if you use experimental <code>zstd</code> support introduce in <a href="https://redirect.github.com/prometheus/client_golang/issues/1496">#1496</a> :warning:</p> <p>Experimental support for <code>zstd</code> on scrape was added, controlled by the request <code>Accept-Encoding</code> header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, <a href="https://redirect.github.com/golang/go/issues/62513">golang/go#62513</a> however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.</p> <p>e.g.:</p> <blockquote> <pre lang="go"><code>import ( _ &quot;github.com/prometheus/client_golang/prometheus/promhttp/zstd&quot; ) </code></pre> </blockquote> <ul> <li>[FEATURE] prometheus: Add new CollectorFunc utility <a href="https://redirect.github.com/prometheus/client_golang/issues/1724">#1724</a></li> <li>[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) <a href="https://redirect.github.com/prometheus/client_golang/issues/1738">#1738</a></li> <li>[FEATURE] api: <code>WithLookbackDelta</code> and <code>WithStats</code> options have been added to API client. <a href="https://redirect.github.com/prometheus/client_golang/issues/1743">#1743</a></li> <li>[CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. <a href="https://redirect.github.com/prometheus/client_golang/issues/1765">#1765</a></li> </ul> <h2>1.21.1 / 2025-03-04</h2> <ul> <li>[BUGFIX] prometheus: Revert of <code>Inc</code>, <code>Add</code> and <code>Observe</code> cumulative metric CAS optimizations (<a href="https://redirect.github.com/prometheus/client_golang/issues/1661">#1661</a>), causing regressions on low contention cases.</li> <li>[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.</li> </ul> <h2>1.21.0 / 2025-02-17</h2> <p>:warning: This release contains potential breaking change if you upgrade <code>github.com/prometheus/common</code> to 0.62+ together with client_golang. :warning:</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/client_golang/commit/8179a560819f2c64ef6ade70e6ae4c73aecaca3c"><code>8179a56</code></a> Cut v1.23.2 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1870">#1870</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/4142b5908bb6c8f5e412b72de5ea4b927d8c219d"><code>4142b59</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1869">#1869</a> from prometheus/arve/upgrade-common</li> <li><a href="https://github.com/prometheus/client_golang/commit/4ff40f0d918efc0f59701d13622913805c2425b4"><code>4ff40f0</code></a> Cut v1.23.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1867">#1867</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/989b0298944e64f88a54ac9c70cd8c8121f10bc9"><code>989b029</code></a> Upgrade to prometheus/common v0.66 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1866">#1866</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/e4b2208dd8cb6d1425f00250db842ec3c1e8749e"><code>e4b2208</code></a> Cut v1.23.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1848">#1848</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/d9492afd3a6f2e9782a7fc10363281bfd5b743bb"><code>d9492af</code></a> cut v1.23.0-rc.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1842">#1842</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/aeae8a0b4f54a8fa720d19b88638a2d048596f82"><code>aeae8a0</code></a> Cut v1.23.0-rc.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1837">#1837</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/b157309b723f0b8588ea604bb78dbbba196803f2"><code>b157309</code></a> Update common Prometheus files (<a href="https://redirect.github.com/prometheus/client_golang/issues/1832">#1832</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/a704e287f467b79744c30af996b7d710d4c6900d"><code>a704e28</code></a> build(deps): bump the github-actions group with 3 updates (<a href="https://redirect.github.com/prometheus/client_golang/issues/1826">#1826</a>)</li> <li><a href="https://github.com/prometheus/client_golang/commit/c7743110ad2c599de3d8c23682d978a12f9f36d1"><code>c774311</code></a> Fix errNotImplemented reference (<a href="https://redirect.github.com/prometheus/client_golang/issues/1835">#1835</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.20.5...v1.23.2">compare view</a></li> </ul> </details> <br /> Updates `golang.org/x/crypto` from 0.49.0 to 0.50.0 <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/crypto/commit/03ca0dcccbd37ba6be80adf74dde8d78a4d72817"><code>03ca0dc</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/crypto/commit/8400f4a938077a7a7817ab7d163d148e371b320b"><code>8400f4a</code></a> ssh: respect signer's algorithm preference in pickSignatureAlgorithm</li> <li><a href="https://github.com/golang/crypto/commit/81c6cb34a8fc386ed53293cd79e3c0c232ee7366"><code>81c6cb3</code></a> ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.49.0...v0.50.0">compare view</a></li> </ul> </details> <br /> Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore <dependency name> major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore <dependency name> minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore <dependency name>` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore <dependency name>` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore <dependency name> <ignore condition>` will remove the ignore condition of the specified dependency and ignore conditions </details> --- <sub>🔄 This issue represents a GitHub Pull Request. It cannot be merged through Gitea due to API limitations.</sub>
GiteaMirror added the pull-request label 2026-05-08 12:11:54 -05:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: github-starred/gerbil#324