Data

Tools

Indexes

Applications

Experiments

Dependabot

An open index of dependabot pull requests across open source projects.

Bump the go_modules group across 1 directory with 7 updates

Open
Number: #1
Type: Pull Request
State: Open
Author: dependabot[bot] dependabot[bot]
Association: None
Comments: 0
Created: May 14, 2025 at 07:13 PM UTC
(about 1 year ago)
Updated: May 14, 2025 at 07:13 PM UTC
(about 1 year ago)
Labels:
dependencies go
Description:

Bumps the go_modules group with 3 updates in the / directory: gopkg.in/yaml.v3, github.com/go-git/go-git/v5 and github.com/prometheus/client_golang.

Updates gopkg.in/yaml.v3 from 3.0.0-20200313102051-9f266ea9e77c to 3.0.0

Updates github.com/go-git/go-git/v5 from 5.2.0 to 5.13.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.13.0

What's Changed

... (truncated)

Commits
  • 94bd4af Merge pull request #1261 from BeChris/issue680
  • 8b7f5ba Merge pull request #1262 from go-git/dependabot/go_modules/github.com/elazarl...
  • 41d80a0 build: bump github.com/elazarl/goproxy
  • 4998140 git: worktree_commit, sanitize author and commiter name and email before crea...
  • 9049625 Merge pull request #1260 from go-git/dependabot/github_actions/github/codeql-...
  • dae48b4 build: bump github/codeql-action from 3.27.9 to 3.28.0
  • 7d6fbc2 Merge pull request #1220 from BeChris/accept_uppercase_hexa_in_pktline_length
  • 62a77b7 plumbing: Fix invalid reference name error while cloning branches containing ...
  • 5e11196 plumbing: format/pktline, accept upercase hexadecimal value as pktline length...
  • 65f5e1a Merge pull request #1256 from go-git/dependabot/go_modules/golang-org-232a611e2d
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.6.0 to 1.11.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

1.11.1 / 2022-02-15

What's Changed

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.11.0...v1.11.1

v1.11.0 / 2021-06-07

  • [CHANGE] Add new collectors package. #862
  • [CHANGE] prometheus.NewExpvarCollector is deprecated, use collectors.NewExpvarCollector instead. #862
  • [CHANGE] prometheus.NewGoCollector is deprecated, use collectors.NewGoCollector instead. #862
  • [CHANGE] prometheus.NewBuildInfoCollector is deprecated, use collectors.NewBuildInfoCollector instead. #862
  • [FEATURE] Add new collector for database/sql#DBStats. #866
  • [FEATURE] API client: Add exemplars API support. #861
  • [ENHANCEMENT] API client: Add newer fields to Rules API. #855
  • [ENHANCEMENT] API client: Add missing fields to Targets API. #856

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.10.0...v1.11.0

1.10.0 / 2021-03-18

  • [CHANGE] Minimum required Go version is now 1.13.
  • [CHANGE] API client: Add matchers to LabelNames and LabesValues. #828
  • [FEATURE] API client: Add buildinfo call. #841
  • [BUGFIX] Fix build on riscv64. #833

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

1.22.0 / 2025-04-07

:warning: This release contains potential breaking change if you use experimental zstd support introduce in #1496 :warning:

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
  • [CHANGE] :warning: promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

  • [BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.
  • [BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

:warning: This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. :warning:

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

  • [BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583
  • [BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687
  • [ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665
  • [ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661
  • [CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712
  • [CHANGE] Add support for Go 1.23. #1602
  • [FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715
  • [FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513
  • [FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408
  • [FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

1.20.5 / 2024-10-15

  • [BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input.

... (truncated)

Commits

Updates golang.org/x/crypto from 0.0.0-20201002170205-7f63de1d35b0 to 0.31.0

Commits

Updates golang.org/x/net from 0.0.0-20201224014010-6772e930b67b to 0.33.0

Commits

Updates golang.org/x/sys from 0.0.0-20210112080510-489259a85091 to 0.28.0

Commits

Updates google.golang.org/protobuf from 1.25.0 to 1.26.0-rc.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.
Pull Request Statistics
Commits:
1
Files Changed:
2
Additions:
+128
Deletions:
-60
Package Dependencies
Package:
golang.org/x/crypto
Ecosystem:
go
Version Change:
0.0.0-20201002170205-7f63de1d35b0 → 0.31.0
Update Type:
Minor
Package:
golang.org/x/net
Ecosystem:
go
Version Change:
0.0.0-20201224014010-6772e930b67b → 0.33.0
Update Type:
Minor
Package:
github.com/go-git/go-git/v5
Ecosystem:
go
Version Change:
5.2.0 → 5.13.0
Update Type:
Minor
Package:
google.golang.org/protobuf
Ecosystem:
go
Version Change:
1.25.0 → 1.26.0-rc.1
Update Type:
Minor
Package:
golang.org/x/sys
Ecosystem:
go
Version Change:
0.0.0-20210112080510-489259a85091 → 0.28.0
Update Type:
Minor
Package:
github.com/prometheus/client_golang
Ecosystem:
go
Version Change:
1.6.0 → 1.11.1
Update Type:
Minor
Package:
gopkg.in/yaml.v3
Ecosystem:
go
Version Change:
3.0.0-20200313102051-9f266ea9e77c → 3.0.0
Security Advisories
Uncontrolled Resource Consumption in promhttp
GHSA-cg3q-j54f-5p7p CVE-2022-21698 HIGH
This is the Go client library for Prometheus. It has two separate parts, one for instrumenting application code, and one for creating clients that talk to the Prometheus HTTP API. client_golang is ...
Actions
View on GitHub View Repository All Dependabot PRs
Technical Details
ID: 1037381
UUID: 2520144433
Node ID: PR_kwDONtX7c86WNlox
Host: GitHub
Repository: https-gitcom/enhancements
Merge State: Unknown