Skip to content

Commit 3bd679a

Browse files
build(deps): Bump github.com/prometheus/common from 0.70.1 to 0.71.0 (cometbft#6049)
Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.70.1 to 0.71.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.71.0</h2> <h2>What's Changed</h2> <ul> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/957">prometheus/common#957</a></li> <li>build(deps): bump the codeql group across 1 directory with 4 updates by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/955">prometheus/common#955</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/958">prometheus/common#958</a></li> <li>fix: use slog.DiscardHandler in promslog.NopLogger by <a href="https://github.com/FUSAKLA"><code>@​FUSAKLA</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/960">prometheus/common#960</a></li> <li>build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/956">prometheus/common#956</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/959">prometheus/common#959</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/961">prometheus/common#961</a></li> <li>feat: implement gauge and counter support for OpenMetrics 2.0 by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/894">prometheus/common#894</a></li> <li>fix: support exemplars with empty label sets in OpenMetrics 2.0 by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/965">prometheus/common#965</a></li> <li>model: sort label names without boxing them into sort.Interface by <a href="https://github.com/SoloJacobs"><code>@​SoloJacobs</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/963">prometheus/common#963</a></li> <li>expfmt: fix wildcard content negotiation regression for Negotiate and NegotiateIncludingOpenMetrics by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/966">prometheus/common#966</a></li> <li>expfmt: precompute parsed goautoneg.Accept for well-known Format constants by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/967">prometheus/common#967</a></li> <li>expfmt: format OpenMetrics 2.0 float values and validate units by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/969">prometheus/common#969</a></li> <li>fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/970">prometheus/common#970</a></li> <li>model: add Duration unit constants and conversion methods by <a href="https://github.com/locker95"><code>@​locker95</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/952">prometheus/common#952</a></li> <li>expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/971">prometheus/common#971</a></li> <li>expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version dispatch by <a href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/968">prometheus/common#968</a></li> <li>build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/977">prometheus/common#977</a></li> <li>build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/976">prometheus/common#976</a></li> <li>build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the golang-org-x group across 1 directory by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/975">prometheus/common#975</a></li> <li>Update dependabot config by <a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/common/pull/978">prometheus/common#978</a></li> <li>build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in /assets by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot] in <a href="https://redirect.github.com/prometheus/common/pull/979">prometheus/common#979</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SoloJacobs"><code>@​SoloJacobs</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/963">prometheus/common#963</a></li> <li><a href="https://github.com/locker95"><code>@​locker95</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/common/pull/952">prometheus/common#952</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.70.1...v0.71.0">https://github.com/prometheus/common/compare/v0.70.1...v0.71.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/9a4aff03c12e71d3fc29e32a4581deb8e456d88e"><code>9a4aff0</code></a> build(deps): bump github.com/stretchr/testify in /assets (<a href="https://redirect.github.com/prometheus/common/issues/979">#979</a>)</li> <li><a href="https://github.com/prometheus/common/commit/483bb89af907d42a3c325f23282fa3b1c4c67ca6"><code>483bb89</code></a> Update dependabot config (<a href="https://redirect.github.com/prometheus/common/issues/978">#978</a>)</li> <li><a href="https://github.com/prometheus/common/commit/d29e1ea01def6d50908dc912518133e193577b5b"><code>d29e1ea</code></a> build(deps): bump golang.org/x/net (<a href="https://redirect.github.com/prometheus/common/issues/975">#975</a>)</li> <li><a href="https://github.com/prometheus/common/commit/e531bd20ac7071e6d5b5f45b6e08f3f25dad3626"><code>e531bd2</code></a> build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (<a href="https://redirect.github.com/prometheus/common/issues/976">#976</a>)</li> <li><a href="https://github.com/prometheus/common/commit/bc3fc3ad4d80e5c06643e117646bdba83a558dfd"><code>bc3fc3a</code></a> build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (<a href="https://redirect.github.com/prometheus/common/issues/977">#977</a>)</li> <li><a href="https://github.com/prometheus/common/commit/15e9f455926d4cdc53810211b3df93df2998f50a"><code>15e9f45</code></a> expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version d...</li> <li><a href="https://github.com/prometheus/common/commit/0acfdb304839d46c9981d96c0b770825ebc02be9"><code>0acfdb3</code></a> expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 (...</li> <li><a href="https://github.com/prometheus/common/commit/eb72e277606be8f983700de05b0033639a88283a"><code>eb72e27</code></a> model: add Duration unit constants and conversion methods (<a href="https://redirect.github.com/prometheus/common/issues/952">#952</a>)</li> <li><a href="https://github.com/prometheus/common/commit/67b7d9032f36ff0b9b0f9a7f5f47fc9cf253b675"><code>67b7d90</code></a> fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition (<a href="https://redirect.github.com/prometheus/common/issues/970">#970</a>)</li> <li><a href="https://github.com/prometheus/common/commit/715ac360d4705b4232d4b4c64dc9a6edf9a97668"><code>715ac36</code></a> expfmt: format OpenMetrics 2.0 float values and validate units (<a href="https://redirect.github.com/prometheus/common/issues/969">#969</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.70.1...v0.71.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/common&package-manager=go_modules&previous-version=0.70.1&new-version=0.71.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent ed139b0 commit 3bd679a

2 files changed

Lines changed: 6 additions & 6 deletions

File tree

‎go.mod‎

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -33,7 +33,7 @@ require (
3333
github.com/pkg/errors v0.9.1
3434
github.com/prometheus/client_golang v1.24.1
3535
github.com/prometheus/client_model v0.6.2
36-
github.com/prometheus/common v0.70.1
36+
github.com/prometheus/common v0.71.0
3737
github.com/rcrowley/go-metrics v0.0.0-20250401214520-65e299d6c5c9
3838
github.com/rs/cors v1.11.1
3939
github.com/sasha-s/go-deadlock v0.3.9
@@ -44,7 +44,7 @@ require (
4444
github.com/supranational/blst v0.3.17
4545
github.com/syndtr/goleveldb v1.0.1-0.20210819022825-2ae1ddf74ef7
4646
golang.org/x/crypto v0.55.0
47-
golang.org/x/net v0.57.0
47+
golang.org/x/net v0.58.0
4848
golang.org/x/sync v0.22.0
4949
gonum.org/v1/gonum v0.17.0
5050
google.golang.org/grpc v1.82.1

‎go.sum‎

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -400,8 +400,8 @@ github.com/prometheus/client_golang v1.24.1/go.mod h1:F+oSRECHg4sse5ucfYpYDeIv/h
400400
github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA=
401401
github.com/prometheus/client_model v0.6.2 h1:oBsgwpGs7iVziMvrGhE53c/GrLUsZdHnqNwqPLxwZyk=
402402
github.com/prometheus/client_model v0.6.2/go.mod h1:y3m2F6Gdpfy6Ut/GBsUqTWZqCUvMVzSfMLjcu6wAwpE=
403-
github.com/prometheus/common v0.70.1 h1:1HvjP4D5oL3t8RsPlwxA9onvvStjtIHYE5XuuwOi/PY=
404-
github.com/prometheus/common v0.70.1/go.mod h1:VdFUQDMZK3VLkurFUVhia6uys/0suUp86TJz5qbJRhc=
403+
github.com/prometheus/common v0.71.0 h1:9KDAKb7Mj3HEVKyFCK6Dc/HIwlBzZIN2l7/lrHl3KK8=
404+
github.com/prometheus/common v0.71.0/go.mod h1:CLJ5H8TEsGX8bl31BdMkfhIZ+QmZ9tBPPotUxUbfcmk=
405405
github.com/prometheus/procfs v0.21.1 h1:GljZCt+zSTS+NZq88cyQ1LjZ+RCHp3uVuabBWA5+OJI=
406406
github.com/prometheus/procfs v0.21.1/go.mod h1:aB55Cww9pdSJVHk0hUf0inxWyyjPogFIjmHKYgMKmtY=
407407
github.com/quic-go/go-ossfuzz-seeds v0.1.0 h1:APacT+iIaNF6fd8AGEiN3bT/Jtkd2jz4v4TzM7MFjy0=
@@ -566,8 +566,8 @@ golang.org/x/net v0.9.0/go.mod h1:d48xBJpPfHeWQsugry2m+kC02ZBRGRgulfHnEXEuWns=
566566
golang.org/x/net v0.10.0/go.mod h1:0qNGK6F8kojg2nk9dLZ2mShWaEBan6FAoqfSigmmuDg=
567567
golang.org/x/net v0.14.0/go.mod h1:PpSgVXXLK0OxS0F31C1/tv6XNguvCrnXIDrFMspZIUI=
568568
golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY=
569-
golang.org/x/net v0.57.0 h1:K5+3DljvIuDG9/Jv9rvyMywYNFCQ9RSUY6OOTTkT+tE=
570-
golang.org/x/net v0.57.0/go.mod h1:KpXc8iv+r3XplLAG/f7Jsf9RPszJzdR0f58q9vGOuEU=
569+
golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
570+
golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
571571
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
572572
golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
573573
golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=

0 commit comments

Comments
 (0)