Commit f8d17e8
authored
![pulumi-renovate[bot]](https://avatars.githubusercontent.com/u/21992475?v=4&size=40){kind=avatar}
Update module github.com/prometheus/common to v0.70.1 (#222)
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/prometheus/common](https://redirect.github.com/prometheus/common)
| `v0.67.5` → `v0.70.1` |
|
|
---
### Release Notes
<details>
<summary>prometheus/common (github.com/prometheus/common)</summary>
###
[`v0.70.1`](https://redirect.github.com/prometheus/common/releases/tag/v0.70.1)
[Compare
Source](https://redirect.github.com/prometheus/common/compare/v0.70.0...v0.70.1)
#### What's Changed
- Update CHANGELOG for v0.70.0 by
[@​roidelapluie](https://redirect.github.com/roidelapluie) in
[#​945](https://redirect.github.com/prometheus/common/pull/945)
- config: clarify sensitive redirect headers match net/http by
[@​roidelapluie](https://redirect.github.com/roidelapluie) in
[#​924](https://redirect.github.com/prometheus/common/pull/924)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​946](https://redirect.github.com/prometheus/common/pull/946)
- build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​950](https://redirect.github.com/prometheus/common/pull/950)
- build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​949](https://redirect.github.com/prometheus/common/pull/949)
- build(deps): bump the codeql group with 4 updates by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​948](https://redirect.github.com/prometheus/common/pull/948)
- build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the
golang-org-x group across 1 directory by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​947](https://redirect.github.com/prometheus/common/pull/947)
**Full Changelog**:
<prometheus/common@v0.70.0...v0.70.1>
###
[`v0.70.0`](https://redirect.github.com/prometheus/common/blob/HEAD/CHANGELOG.md#v0700--2026-07-10)
[Compare
Source](https://redirect.github.com/prometheus/common/compare/v0.69.0...v0.70.0)
##### Enhancements
- route: add support for the QUERY HTTP method.
[#​932](https://redirect.github.com/prometheus/common/issues/932)
##### Bugfixes
- config: fix `TLSVersion.String()` printing a pointer address instead
of the numeric version for unknown TLS versions.
[#​929](https://redirect.github.com/prometheus/common/issues/929)
##### Internal
- expfmt: add `BenchmarkConvertMetricFamily` comparing the Prometheus
text and OpenMetrics 1.0 encoders.
[#​943](https://redirect.github.com/prometheus/common/issues/943)
- Update Go dependencies.
[#​933](https://redirect.github.com/prometheus/common/issues/933)
[#​934](https://redirect.github.com/prometheus/common/issues/934)
- Synchronize common files from prometheus/prometheus.
[#​923](https://redirect.github.com/prometheus/common/issues/923)
[#​927](https://redirect.github.com/prometheus/common/issues/927)
[#​930](https://redirect.github.com/prometheus/common/issues/930)
[#​937](https://redirect.github.com/prometheus/common/issues/937)
- Update GitHub Actions.
[#​938](https://redirect.github.com/prometheus/common/issues/938)
[#​939](https://redirect.github.com/prometheus/common/issues/939)
[#​940](https://redirect.github.com/prometheus/common/issues/940)
[#​941](https://redirect.github.com/prometheus/common/issues/941)
[#​942](https://redirect.github.com/prometheus/common/issues/942)
**Full Changelog**:
<prometheus/common@v0.69.0...v0.70.0>
###
[`v0.69.0`](https://redirect.github.com/prometheus/common/blob/HEAD/CHANGELOG.md#v0700--2026-07-10)
[Compare
Source](https://redirect.github.com/prometheus/common/compare/v0.68.1...v0.69.0)
##### Enhancements
- route: add support for the QUERY HTTP method.
[#​932](https://redirect.github.com/prometheus/common/issues/932)
##### Bugfixes
- config: fix `TLSVersion.String()` printing a pointer address instead
of the numeric version for unknown TLS versions.
[#​929](https://redirect.github.com/prometheus/common/issues/929)
##### Internal
- expfmt: add `BenchmarkConvertMetricFamily` comparing the Prometheus
text and OpenMetrics 1.0 encoders.
[#​943](https://redirect.github.com/prometheus/common/issues/943)
- Update Go dependencies.
[#​933](https://redirect.github.com/prometheus/common/issues/933)
[#​934](https://redirect.github.com/prometheus/common/issues/934)
- Synchronize common files from prometheus/prometheus.
[#​923](https://redirect.github.com/prometheus/common/issues/923)
[#​927](https://redirect.github.com/prometheus/common/issues/927)
[#​930](https://redirect.github.com/prometheus/common/issues/930)
[#​937](https://redirect.github.com/prometheus/common/issues/937)
- Update GitHub Actions.
[#​938](https://redirect.github.com/prometheus/common/issues/938)
[#​939](https://redirect.github.com/prometheus/common/issues/939)
[#​940](https://redirect.github.com/prometheus/common/issues/940)
[#​941](https://redirect.github.com/prometheus/common/issues/941)
[#​942](https://redirect.github.com/prometheus/common/issues/942)
**Full Changelog**:
<prometheus/common@v0.69.0...v0.70.0>
###
[`v0.68.1`](https://redirect.github.com/prometheus/common/blob/HEAD/CHANGELOG.md#v0690--2026-06-17)
[Compare
Source](https://redirect.github.com/prometheus/common/compare/v0.68.0...v0.68.1)
##### Security / behavior changes
- **config: credentials are no longer forwarded across cross-host
redirects.** When `FollowRedirects` is enabled, the HTTP client now
strips `Authorization`, `Cookie`, `Proxy-Authorization` and other
sensitive headers, and skips basic-auth, bearer-token and OAuth2
credentials, when a redirect points to a different host. This aligns
with Go's `net/http` behavior. Callers that relied on credentials being
sent to a redirect target on another host will need to target that host
directly.
[#​901](https://redirect.github.com/prometheus/common/issues/901)
[#​920](https://redirect.github.com/prometheus/common/issues/920)
[#​921](https://redirect.github.com/prometheus/common/issues/921)
- config: `LoadHTTPConfigFile` now resolves relative file paths (e.g.
`*_file` credentials, `http_headers` files) against the config file's
own directory instead of its parent directory. Configs that worked
around the old behavior by prefixing paths with the config's directory
name must drop that prefix.
[#​925](https://redirect.github.com/prometheus/common/issues/925)
##### Bugfixes
- expfmt: fix nil pointer panic when parsing empty braces `{}`.
[#​922](https://redirect.github.com/prometheus/common/issues/922)
- model: fix `Time.UnmarshalJSON` for larger negative numbers.
[#​918](https://redirect.github.com/prometheus/common/issues/918)
##### Performance
- model: reduce allocations in `Time.UnmarshalJSON`.
[#​918](https://redirect.github.com/prometheus/common/issues/918)
##### Internal
- Synchronize common files from prometheus/prometheus.
[#​917](https://redirect.github.com/prometheus/common/issues/917)
- Modernize Go.
[#​919](https://redirect.github.com/prometheus/common/issues/919)
**Full Changelog**:
<prometheus/common@v0.68.1...v0.69.0>
###
[`v0.68.0`](https://redirect.github.com/prometheus/common/releases/tag/v0.68.0)
[Compare
Source](https://redirect.github.com/prometheus/common/compare/v0.67.5...v0.68.0)
#### What's Changed
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​873](https://redirect.github.com/prometheus/common/pull/873)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​874](https://redirect.github.com/prometheus/common/pull/874)
- build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​879](https://redirect.github.com/prometheus/common/pull/879)
- build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​878](https://redirect.github.com/prometheus/common/pull/878)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​875](https://redirect.github.com/prometheus/common/pull/875)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​880](https://redirect.github.com/prometheus/common/pull/880)
- Remove logic adding unit to metrics name by
[@​vesari](https://redirect.github.com/vesari) in
[#​877](https://redirect.github.com/prometheus/common/pull/877)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​881](https://redirect.github.com/prometheus/common/pull/881)
- Update for Go 1.26 by
[@​SuperQ](https://redirect.github.com/SuperQ) in
[#​883](https://redirect.github.com/prometheus/common/pull/883)
- build(deps): bump golang.org/x/net from 0.49.0 to 0.51.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​882](https://redirect.github.com/prometheus/common/pull/882)
- version: Add a slog helper by
[@​SuperQ](https://redirect.github.com/SuperQ) in
[#​886](https://redirect.github.com/prometheus/common/pull/886)
- Remove Arthur from maintainers list by
[@​ArthurSens](https://redirect.github.com/ArthurSens) in
[#​885](https://redirect.github.com/prometheus/common/pull/885)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​895](https://redirect.github.com/prometheus/common/pull/895)
- Synchronize common files from prometheus/prometheus by
[@​prombot](https://redirect.github.com/prombot) in
[#​896](https://redirect.github.com/prometheus/common/pull/896)
- config: change NewOAuth2RoundTripper to accept variadic
HTTPClientOption by
[@​alliasgher](https://redirect.github.com/alliasgher) in
[#​898](https://redirect.github.com/prometheus/common/pull/898)
- config: guard against nil oauth2 credential in RoundTrip by
[@​alliasgher](https://redirect.github.com/alliasgher) in
[#​897](https://redirect.github.com/prometheus/common/pull/897)
- build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​890](https://redirect.github.com/prometheus/common/pull/890)
- build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​891](https://redirect.github.com/prometheus/common/pull/891)
- build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by
[@​dependabot](https://redirect.github.com/dependabot)\[bot] in
[#​892](https://redirect.github.com/prometheus/common/pull/892)
- Move interface assertions to a test file by
[@​msiegen](https://redirect.github.com/msiegen) in
[#​839](https://redirect.github.com/prometheus/common/pull/839)
- fix(http\_config): fix client cert rotation when no CA is configured
by [@​machine424](https://redirect.github.com/machine424) in
[#​908](https://redirect.github.com/prometheus/common/pull/908)
- Remove CircleCI by
[@​ArthurSens](https://redirect.github.com/ArthurSens) in
[#​910](https://redirect.github.com/prometheus/common/pull/910)
- Fix: apply DialContextFunc to OAuth2 token-fetch transport by
[@​yuri-tceretian](https://redirect.github.com/yuri-tceretian) in
[#​911](https://redirect.github.com/prometheus/common/pull/911)
#### New Contributors
- [@​alliasgher](https://redirect.github.com/alliasgher) made
their first contribution in
[#​898](https://redirect.github.com/prometheus/common/pull/898)
- [@​msiegen](https://redirect.github.com/msiegen) made their
first contribution in
[#​839](https://redirect.github.com/prometheus/common/pull/839)
- [@​machine424](https://redirect.github.com/machine424) made
their first contribution in
[#​908](https://redirect.github.com/prometheus/common/pull/908)
- [@​yuri-tceretian](https://redirect.github.com/yuri-tceretian)
made their first contribution in
[#​911](https://redirect.github.com/prometheus/common/pull/911)
**Full Changelog**:
<prometheus/common@v0.67.5...v0.68.0>
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- At any time (no schedule defined)
- Automerge
- Monday through Friday (`* * * * 1-5`)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->
Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>1 parent 8d40663 commit f8d17e8
2 files changed
Lines changed: 6 additions & 7 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
180 | 180 | | |
181 | 181 | | |
182 | 182 | | |
183 | | - | |
| 183 | + | |
184 | 184 | | |
185 | | - | |
| 185 | + | |
186 | 186 | | |
187 | 187 | | |
188 | 188 | | |
| |||
239 | 239 | | |
240 | 240 | | |
241 | 241 | | |
242 | | - | |
243 | 242 | | |
244 | 243 | | |
245 | 244 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
3852 | 3852 | | |
3853 | 3853 | | |
3854 | 3854 | | |
3855 | | - | |
3856 | | - | |
| 3855 | + | |
| 3856 | + | |
3857 | 3857 | | |
3858 | 3858 | | |
3859 | 3859 | | |
| |||
3869 | 3869 | | |
3870 | 3870 | | |
3871 | 3871 | | |
3872 | | - | |
3873 | | - | |
| 3872 | + | |
| 3873 | + | |
3874 | 3874 | | |
3875 | 3875 | | |
3876 | 3876 | | |
| |||
0 commit comments