chore(deps): update github.com/prometheus/common to v0.70.1

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/prometheus/common	v0.61.0 → v0.70.1

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.70.1

Compare Source

What's Changed

• Update CHANGELOG for v0.70.0 by @​roidelapluie in #​945
• config: clarify sensitive redirect headers match net/http by @​roidelapluie in #​924
• Synchronize common files from prometheus/prometheus by @​prombot in #​946
• build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @​dependabot[bot] in #​950
• build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @​dependabot[bot] in #​949
• build(deps): bump the codeql group with 4 updates by @​dependabot[bot] in #​948
• build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-x group across 1 directory by @​dependabot[bot] in #​947

Full Changelog: prometheus/common@v0.70.0...v0.70.1

v0.70.0

Compare Source

Enhancements

• route: add support for the QUERY HTTP method. #​932

Bugfixes

• config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #​929

Internal

• expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #​943
• Update Go dependencies. #​933 #​934
• Synchronize common files from prometheus/prometheus. #​923 #​927 #​930 #​937
• Update GitHub Actions. #​938 #​939 #​940 #​941 #​942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

v0.69.0

Compare Source

Security / behavior changes

• config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #​901 #​920 #​921
• config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #​925

Bugfixes

• expfmt: fix nil pointer panic when parsing empty braces {}. #​922
• model: fix Time.UnmarshalJSON for larger negative numbers. #​918

Performance

• model: reduce allocations in Time.UnmarshalJSON. #​918

Internal

• Synchronize common files from prometheus/prometheus. #​917
• Modernize Go. #​919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.68.1

Compare Source

What's Changed

• build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 by @​dependabot[bot] in #​903
• build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 by @​dependabot[bot] in #​914
• Synchronize common files from prometheus/prometheus by @​prombot in #​915

Full Changelog: prometheus/common@v0.68.0...v0.68.1

v0.68.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​873
• Synchronize common files from prometheus/prometheus by @​prombot in #​874
• build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @​dependabot[bot] in #​879
• build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @​dependabot[bot] in #​878
• Synchronize common files from prometheus/prometheus by @​prombot in #​875
• Synchronize common files from prometheus/prometheus by @​prombot in #​880
• Remove logic adding unit to metrics name by @​vesari in #​877
• Synchronize common files from prometheus/prometheus by @​prombot in #​881
• Update for Go 1.26 by @​SuperQ in #​883
• build(deps): bump golang.org/x/net from 0.49.0 to 0.51.0 by @​dependabot[bot] in #​882
• version: Add a slog helper by @​SuperQ in #​886
• Remove Arthur from maintainers list by @​ArthurSens in #​885
• Synchronize common files from prometheus/prometheus by @​prombot in #​895
• Synchronize common files from prometheus/prometheus by @​prombot in #​896
• config: change NewOAuth2RoundTripper to accept variadic HTTPClientOption by @​alliasgher in #​898
• config: guard against nil oauth2 credential in RoundTrip by @​alliasgher in #​897
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @​dependabot[bot] in #​890
• build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 by @​dependabot[bot] in #​891
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​892
• Move interface assertions to a test file by @​msiegen in #​839
• fix(http_config): fix client cert rotation when no CA is configured by @​machine424 in #​908
• Remove CircleCI by @​ArthurSens in #​910
• Fix: apply DialContextFunc to OAuth2 token-fetch transport by @​yuri-tceretian in #​911

New Contributors

• @​alliasgher made their first contribution in #​898
• @​msiegen made their first contribution in #​839
• @​machine424 made their first contribution in #​908
• @​yuri-tceretian made their first contribution in #​911

Full Changelog: prometheus/common@v0.67.5...v0.68.0

v0.67.5

Compare Source

What's Changed

• build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 by @​dependabot[bot] in #​871
• Synchronize common files from prometheus/prometheus by @​prombot in #​866
• build(deps): bump golang.org/x/net from 0.46.0 to 0.48.0 by @​dependabot[bot] in #​872
• build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @​dependabot[bot] in #​870

Full Changelog: prometheus/common@v0.67.4...v0.67.5

v0.67.4: / 2025-11-18

Compare Source

What's Changed

• chore: clean up golangci-lint configuration by @​mmorel-35 in #​782
• chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them by @​JorTurFer in #​864
• chore: Add omitempty tag to all config fields by @​JorTurFer in #​865

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3: / 2025-11-18

Compare Source

What's Changed

• Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @​JorTurFer in #​862
• Config: remove outdated comment about HTTP/2 issues by @​bboreham in #​863

New Contributors

• @​JorTurFer made their first contribution in #​862

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

v0.66.1

Compare Source

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

• Revert "Use github.com/grafana/regexp instead of regexp" by @​aknuds1 in #​835
• Move to supported version of yaml parser by @​dims in #​834
• Revert "Use go.uber.org/atomic instead of sync/atomic (#​825)" by @​aknuds1 in #​838

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

Compare Source

⚠️ Breaking Changes ⚠️

• A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

• model: add constants for type and unit labels. by @​bwplotka in #​801

• model.ValidationScheme: Support encoding as YAML by @​aknuds1 in #​799

• fix(promslog): always print time.Duration values as go duration strings by @​tjhop in #​798

• Add ValidationScheme methods IsValidMetricName and IsValidLabelName by @​aknuds1 in #​806

• Fix delimited proto not escaped correctly by @​thampiotr in #​809

• Decoder: Remove use of global name validation and add validation by @​ywwg in #​808

• ValidationScheme implements pflag.Value and json.Marshaler/Unmarshaler interfaces by @​juliusmh in #​807

• expfmt: Add NewTextParser function by @​aknuds1 in #​816

• Enable the godot linter by @​aknuds1 in #​821

• Enable usestdlibvars linter by @​aknuds1 in #​820

• Enable unconvert linter by @​aknuds1 in #​819

• Enable the fatcontext linter by @​aknuds1 in #​822

• Enable gocritic linter by @​aknuds1 in #​818

• Use go.uber.org/atomic instead of sync/atomic by @​aknuds1 in #​825

• Enable revive rule unused-parameter by @​aknuds1 in #​824

• Enable revive rules by @​aknuds1 in #​823

• Synchronize common files from prometheus/prometheus by @​prombot in #​802

• Synchronize common files from prometheus/prometheus by @​prombot in #​803

• Sync .golangci.yml with prometheus/prometheus by @​aknuds1 in #​817

• ci: update upload-actions by @​ywwg in #​814

• docs: fix typo in expfmt.Negotiate by @​wmcram in #​813

• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​800

• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​810

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /assets by @​dependabot[bot] in #​826

• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 by @​dependabot[bot] in #​830

• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​829

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​827

New Contributors

• @​aknuds1 made their first contribution in #​799
• @​thampiotr made their first contribution in #​809
• @​wmcram made their first contribution in #​813
• @​juliusmh made their first contribution in #​807

v0.65.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​789
• Remove otlptranslator package by @​ArthurSens in #​791
• feat(promslog): add Level() method to get slog.Level by @​tjhop in #​795
• feat: Support negative duration in new function ParseDurationAllowNegative by @​iamhalje in #​793

New Contributors

• @​iamhalje made their first contribution in #​793

Full Changelog: prometheus/common@v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in #​773
• Synchronize common files from prometheus/prometheus by @​prombot in #​774
• Synchronize common files from prometheus/prometheus by @​prombot in #​775
• Update Go by @​SuperQ in #​770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in #​779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in #​777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in #​776
• promslog: Use the default timezone (again) by @​beorn7 in #​739
• Synchronize common files from prometheus/prometheus by @​prombot in #​787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in #​784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in #​785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in #​786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in #​783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in #​788

New Contributors

• @​kakkoyun made their first contribution in #​779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

v0.63.0

Compare Source

What's Changed

• Making the map a public variable for promtheus-operator by @​dongjiang1989 in #​741
• setup ossf scorecard and codeql workflows by @​mmorel-35 in #​564
• feat(promslog): implement reserved keys, rename duplicates by @​tjhop in #​746
• Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in #​750
• Bump golang.org/x/net from 0.33.0 to 0.34.0 by @​dependabot in #​749
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @​dependabot in #​751
• promslog: Make AllowedLevel concurrency safe. by @​bwplotka in #​754
• Fix typo 'the an' by @​petern48 in #​752
• Synchronize common files from prometheus/prometheus by @​prombot in #​757
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot in #​756
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot in #​761
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in #​763
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @​dependabot in #​762
• model: Clarify the purpose of model.NameValidationScheme by @​ywwg in #​765
• Fix spelling mistake in godoc by @​grobinson-grafana in #​766
• Synchronize common files from prometheus/prometheus by @​prombot in #​767
• otlptranslator: Add dependency free package that translates OTLP data into Prometheus metric/label names by @​ArthurSens in #​768

New Contributors

• @​dongjiang1989 made their first contribution in #​741
• @​petern48 made their first contribution in #​752

Full Changelog: prometheus/common@v0.62.0...v0.63.0

v0.62.0

Compare Source

⚠️ This releases switches internal global to UTF8Validation from LegacyValidation. This is a breaking change, relaxing the validation. We don't intend to add more schemas and we have to have a global for unmarshalling interfaces, thus the change was made ⚠️

What's Changed

• Change default validation scheme to UTF8Validation by @​ywwg in #​724
• Remove deprecated promlog package by @​SuperQ in #​738
• Remove deprecated sigv4 module by @​SuperQ in #​737
• update links to openmetrics to reference the v1.0.0 release by @​dashpole in #​740
• Synchronize common files from prometheus/prometheus by @​prombot in #​742
• Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @​dependabot in #​744
• Bump golang.org/x/net from 0.32.0 to 0.33.0 by @​dependabot in #​743
• Synchronize common files from prometheus/prometheus by @​prombot in #​747
• http_config: Allow customizing TLS config and settings. by @​bwplotka in #​748

New Contributors

• @​dashpole made their first contribution in #​740

Full Changelog: prometheus/common@v0.61.0...v0.62.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "after 2pm on sunday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/prometheus/procfs v0.21.0
go: github.com/vareversat/digicert_exporter imports
	github.com/prometheus/common/promlog: cannot find module providing package github.com/prometheus/common/promlog
go: github.com/vareversat/digicert_exporter imports
	github.com/prometheus/common/promlog/flag: cannot find module providing package github.com/prometheus/common/promlog/flag