deps:chore - update module github.com/prometheus/client_golang to v1.25.0 by renovate[bot] · Pull Request #206 · ZupIT/horusec-devkit

renovate · 2025-11-01T01:42:18Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/client_golang	`v1.12.1` → `v1.25.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

prometheus/client_golang (github.com/prometheus/client_golang)

`v1.25.0`

Compare Source

⚠️ This release raises the minimum required Go version to 1.26 and includes breaking API changes in api/prometheus/v1 (see the [CHANGE] entries below). ⚠️

1.25.0 / 2026-10-07

[CHANGE] Minimum required Go version is now 1.26, only the two latest Go versions (1.26 and 1.27) are supported from now on. #2138
[CHANGE] api/prometheus/v1: Query, QueryRange, Series, LabelNames, and LabelValues now return Infos annotations in addition to Warnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and of api.Client's Do/DoGetFallback; custom API client implementations must be updated. #1963
[CHANGE] api/prometheus/v1: Rework TSDBBlocks result types to align with the Prometheus server's tsdb.BlockMeta: TSDBBlocksResult now contains Blocks []TSDBBlockMeta directly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta, TSDBBlockStats, TSDBBlockMetaCompaction), stat fields are uint64 with omitempty tags, and the optional compaction parents field is included. #1928
[FEATURE] testutil: Add GatherAndFormat to encode a subset of metrics from a Gatherer. #2091
[FEATURE] promhttp: Add HandlerOpts.AcceptedFormats to customize the formats negotiated from the incoming Accept header, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146
[ENHANCEMENT] promhttp: Negotiated metrics responses now include a Vary header. #2142
[ENHANCEMENT] prometheus: Regenerate the default runtime collector metrics for Go 1.25 and Go 1.26. #2090, #2095
[ENHANCEMENT] testutil: Finalize OpenMetrics output in GatherAndFormat and CollectAndFormat (terminating # EOF). #2125
[BUGFIX] api: Match complete URL path placeholders only; a :foo argument no longer substitutes inside :foobar. #2136
[BUGFIX] exp/api/remote: Reset the pooled buffer before generic proto marshaling, preventing corrupted remote-write payloads. #2139
[BUGFIX] testutil/promlint: Fix "mibi" unit prefix to "mebi". #2135

What's changed

What's Changed

fix: Remove unneeded and broken CI badge by @bwplothttps://github.com/prometheus/client_golang/pull/2057l/2057
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2060l/2060
build(deps): bump the codeql group with 4 updates by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2066l/2066
build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2071l/2071
build(deps): bump golang.org/x/sys from 0.46.0 to 0.47.0 in the golang-org-x group across 1 directory by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2069l/2069
build(deps): bump github.com/klauspost/compress from 1.19.0 to 1.19.1 in /exp by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2072l/2072
build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 in /exp by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2073l/2073
build(deps): bump github.com/prometheus/common from 0.69.0 to 0.70.1 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2070l/2070
build(deps): bump google.golang.org/grpc from 1.79.3 to 1.82.1 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2075l/2075
Pin GitHub Actions by @Supehttps://github.com/prometheus/client_golang/pull/2074l/2074
build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2067l/2067
promhttp: fix panic on requests with nil URL by @SAYhttps://github.com/prometheus/client_golang/pull/2065l/2065
Return info annotations in addition to warnings in the API by @zenadhttps://github.com/prometheus/client_golang/pull/1963l/1963
build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2082l/2082
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2084l/2084
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2086l/2086
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2088l/2088
Regenerate Go collector runtime metrics for Go 1.25 and Go 1.26 by @bwplothttps://github.com/prometheus/client_golang/pull/2090l/2090
go.mod: remove obsolete exclude rule by @thaJezthttps://github.com/prometheus/client_golang/pull/2077l/2077
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2093l/2093
README: document the OpenTelemetry OTLP push bridge by @mvanhohttps://github.com/prometheus/client_golang/pull/1987l/1987
docs: add AGENTS.md contributor and maintainer guide by @bwplothttps://github.com/prometheus/client_golang/pull/2056l/2056
testutil: add GatherAndFormat helper by @wieghttps://github.com/prometheus/client_golang/pull/2091l/2091
build(deps): bump the codeql group with 4 updates by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2101l/2101
build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2097l/2097
build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2098l/2098
build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 in /exp by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2099l/2099
build(deps): bump github.com/klauspost/compress from 1.19.1 to 1.19.2 in /exp by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2100l/2100
build(deps): bump github.com/prometheus/procfs from 0.21.1 to 0.22.0 in the prometheus group across 1 directory by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2096l/2096
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2102l/2102
chore: Update metrics for new Go version by @github-actions[bohttps://github.com/prometheus/client_golang/pull/2095l/2095
Benchmark json-iter, stdlib json and json/v2 by @liggihttps://github.com/prometheus/client_golang/pull/2107l/2107
build(deps): bump google.golang.org/grpc from 1.83.1 to 1.83.2 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2112l/2112
RuleGroup: use stdlib for json decoding, optimize decoding by @liggihttps://github.com/prometheus/client_golang/pull/2109l/2109
Modernize micro benchmarks: b.Loop and key=value case names by @radiancedhttps://github.com/prometheus/client_golang/pull/2114l/2114
QueryResult: use stdlib for envelope decoding by @liggihttps://github.com/prometheus/client_golang/pull/2110l/2110
Use stdlib to decode apiResult envelope by @liggihttps://github.com/prometheus/client_golang/pull/2111l/2111
Improve linting by @Supehttps://github.com/prometheus/client_golang/pull/2115l/2115
Delete unused custom json-iterator marshaling by @liggihttps://github.com/prometheus/client_golang/pull/2121l/2121
Simplify apiClientImpl#Do error path by @liggihttps://github.com/prometheus/client_golang/pull/2120l/2120
testutil: finalize OpenMetrics output by @ajavanhttps://github.com/prometheus/client_golang/pull/2125l/2125
build(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2124l/2124
Synchronize common files from prometheus/prometheus by @prombhttps://github.com/prometheus/client_golang/pull/2116l/2116
prometheus: fix revive indent-error-flow lint on Darwin by @bwplothttps://github.com/prometheus/client_golang/pull/2131l/2131
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.34.0 to 1.45.0 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2123l/2123
Combine envelope/inner apiResponse decoding, switch to stdlib json by @liggihttps://github.com/prometheus/client_golang/pull/2118l/2118
build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.34.0 to 1.45.0 in /tutorials/whatsup by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2122l/2122
testutil/promlint: fix "mibi" unit prefix to "mebi" by @ZainnQureshhttps://github.com/prometheus/client_golang/pull/2135l/2135
all: update prometheus/common to v0.72.0 and apply modernize fixes by @bwplothttps://github.com/prometheus/client_golang/pull/2138l/2138
limit json-iterator use to Go 1.26 by @liggihttps://github.com/prometheus/client_golang/pull/2128l/2128
promhttp: add AcceptedFormats option to customize format negotiation by @bwplothttps://github.com/prometheus/client_golang/pull/2146l/2146
build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.1 by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2143l/2143
build(deps): bump the codeql group with 4 updates by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2145l/2145
build(deps): bump github.com/klauspost/compress from 1.19.2 to 1.20.1 in /exp by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2144l/2144
promhttp: vary negotiated metrics responses by @lowgahttps://github.com/prometheus/client_golang/pull/2142l/2142
exp/api/remote: reset pooled buffer before generic marshal by @lowgahttps://github.com/prometheus/client_golang/pull/2139l/2139
api: match complete URL placeholders by @lowgahttps://github.com/prometheus/client_golang/pull/2136l/2136
fix: updates for tsdb blocks handling by @tjhhttps://github.com/prometheus/client_golang/pull/1928l/1928
prometheus: fix modernize lint findings by @kakkoyhttps://github.com/prometheus/client_golang/pull/2151l/2151
build(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.2 in /api/prometheus/v1/paritytest by @dependabot[bohttps://github.com/prometheus/client_golang/pull/2152l/2152
Cut v1.25.0-rc.0 by @kakkoyhttps://github.com/prometheus/client_golang/pull/2154l/2154
Cut v1.25.0 by @kakkoyhttps://github.com/prometheus/client_golang/pull/2164l/2164

New Contributors

@SAY-5 made their first contributihttps://github.com/prometheus/client_golang/pull/2065l/2065
@zenador made their first contributihttps://github.com/prometheus/client_golang/pull/1963l/1963
@thaJeztah made their first contributihttps://github.com/prometheus/client_golang/pull/2077l/2077
@mvanhorn made their first contributihttps://github.com/prometheus/client_golang/pull/1987l/1987
@wieghx made their first contributihttps://github.com/prometheus/client_golang/pull/2091l/2091
@radianceded made their first contributihttps://github.com/prometheus/client_golang/pull/2114l/2114
@ajavanma made their first contributihttps://github.com/prometheus/client_golang/pull/2125l/2125
@ZainnQureshii made their first contributihttps://github.com/prometheus/client_golang/pull/2135l/2135
@lowgame made their first contributihttps://github.com/prometheus/client_golang/pull/2142l/2142

Full Changelog: prometheus/client_golang@v1.24.1...v1.25.0

`v1.24.1`: / 2026-07-23

Compare Source

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

`v1.24.0`: - 2026-07-20

Compare Source

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862
[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051
[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843
[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850
[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855
[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942
[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392
[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902
[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969
[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925
[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856
[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896
[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895
[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890
[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860
[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885
[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961
[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991
[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005
[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030
[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971
[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889
[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917
[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

All commits

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in #1839
build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in #1838
prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in #1844
Fix doc typo by @torrca in #1849
Merge release-1.23 into main by @vesari in #1851
build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in #1852
Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in #1850
remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in #1855
feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in #1846
feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in #1856
Support matchers in rules API by @jotak in #1843
Use prometheus/common.expfmt.NewTextParser by @aknuds1 in #1859
Merge release-1.23 into main by @aknuds1 in #1861
chore: Drop support for <go1.22 by @mrueg in #1862
collectors/version: Allow custom additional labels by @mrueg in #1860
build(deps): bump github.com/prometheus/common from 0.65.0 to 0.66.0 by @ywwg in #1865
Sync release-1.23 into main by @aknuds1 in #1868
Sync main with release-1.23 by @aknuds1 in #1871
chore: clean up golangci-lint configuration by @mmorel-35 in #1802
build(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 by @dependabot[bot] in #1880
build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.9 in /exp by @dependabot[bot] in #1882
build(deps): bump github.com/prometheus/common from 0.65.0 to 0.66.1 in /exp by @dependabot[bot] in #1883
build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #1881
Fix typo in remote api err msg by @SungJin1212 in #1878
chore: Update metrics for new Go version by @github-actions[bot] in #1864
Add RetryCallBack to remote_api.go by @pipiland2612 in #1888
bug(remote_write): Fix compression buffer pooling by @fpetkovski in #1889
Change RetryCallBack initialized by @pipiland2612 in #1890
Fix CI bug by @pipiland2612 in #1892
Use cloned http.DefaultTransport. issue-1857 by @karthikkondapally in #1885
Public backoff config to allow usage of WithAPIBackoff by @pipiland2612 in #1895
Clarify exp library stability by @pipiland2612 in #1894
feat: add support for /status/tsdb/blocks endpoint by @tjhop in #1896
minor refactor of replaceInvalidRune() in bridge.go by @karthikkondapally in #1897
build(deps): bump github.com/prometheus/procfs from 0.17.0 to 0.19.2 by @dependabot[bot] in #1903
build(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 by @dependabot[bot] in #1906
build(deps): bump golang.org/x/sys from 0.35.0 to 0.37.0 by @dependabot[bot] in #1904
build(deps): bump github.com/prometheus/common from 0.66.1 to 0.67.2 by @dependabot[bot] in #1907
build(deps): bump github.com/klauspost/compress from 1.18.0 to 1.18.1 in /exp by @dependabot[bot] in #1911
build(deps): bump google.golang.org/protobuf from 1.36.9 to 1.36.10 in /exp by @dependabot[bot] in #1909
build(deps): bump github.com/prometheus/common from 0.66.1 to 0.67.2 in /exp by @dependabot[bot] in #1910
build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #1908
chore(ci): Add CRLF detection and fix targets to prevent CRLF contamination by @kakkoyun in #1898
chore(ci): Use stable names for CI steps by @kakkoyun in #1914
build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2 by @dependabot[bot] in #1920
build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.4 by @dependabot[bot] in #1921
build(deps): bump golang.org/x/sys from 0.37.0 to 0.38.0 by @dependabot[bot] in #1922
build(deps): bump github.com/prometheus/common from 0.67.2 to 0.67.4 in /exp by @dependabot[bot] in #1923
build(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.2 in /exp by @dependabot[bot] in #1924
build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #1919
feat: expose Desc error through public Err() method by @duricanikolic in #1902
Allow /metrics handler output filtering via name[] query param by @colega in #1925
Prevent OOM from malformed snappy payloads by validating decoded length by @makasim in #1917
Ensure remote write v2 headers cannot be returned on v1 requests by @kgeckhart in #1927
build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in #1932
build(deps): bump golang.org/x/sys from 0.38.0 to 0.39.0 by @dependabot[bot] in #1933
build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 in /exp by @dependabot[bot] in #1935
build(deps): bump the github-actions group with 5 updates by @dependabot[bot] in #1934
promhttp/zstd: add unit tests for zstd writer registration by @90ashish in #1929
feat(collector): add Go 1.26 new runtime metrics by @kakkoyun in #1942
build(deps): bump github.com/prometheus/common from 0.67.4 to 0.67.5 in /exp by @dependabot[bot] in #1948
build(deps): bump the github-actions group with 4 updates by @dependabot[bot] in #1946
build(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 by @dependabot[bot] in #1944
build(deps): bump golang.org/x/sys from 0.39.0 to 0.40.0 by @dependabot[bot] in #1945
build(deps): bump github.com/klauspost/compress from 1.18.2 to 1.18.3 in /exp by @dependabot[bot] in #1947
chore(test): bump 1.25, tests with synctest and check not panic by @manute in #1950
build(deps): bump github.com/prometheus/procfs from 0.19.2 to 0.20.1 by @dependabot[bot] in #1954
build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by @dependabot[bot] in #1957
build(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 by @dependabot[bot] in #1955
build(deps): bump go.opentelemetry.io/otel/sdk from 1.34.0 to 1.40.0 in /tutorials/whatsup by @dependabot[bot] in #1959
build(deps): bump github.com/prometheus/common from 0.67.4 to 0.67.5 by @dependabot[bot] in #1956
build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #1958
chore(collectors/go): generate the tests after new metric by @kakkoyun in #1962
Remove Arthur from the list of maintainers by @ArthurSens in #1964
build(deps): bump google.golang.org/grpc from 1.69.4 to 1.79.3 in /tutorials/whatsup by @dependabot[bot] in #1965
fix: recover from collector panic and return error in Gather by @Saflaski in #1961
prometheus: clarify MetricVec delete semantics in godoc by @Retr0-XD in #1967
build(deps): bump golang.org/x/sys from 0.41.0 to 0.42.0 by @dependabot[bot] in #1973
build(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 by @dependabot[bot] in #1974
build(deps): bump github.com/klauspost/compress from 1.18.4 to 1.18.5 in /exp by @dependabot[bot] in #1976
Optionally add OM unit by @vesari in #1392
fix: respect context cancellation in httpClient.Do by @pedrampdd in #1971
build(deps): bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 in /tutorials/whatsup by @dependabot[bot] in #1978
Synchronize common files from prometheus/prometheus by @prombot in #1977
Synchronize common files from prometheus/prometheus by @prombot in #1980
examples: add native histogram usage example by @thegdsks in #1981
chore(ci): add macOS, Windows and arm64 test runners by @kakkoyun in #1968
prometheus: honor PidFn on windows and darwin by @Retr0-XD in #1966
Synchronize common files from prometheus/prometheus by @prombot in #1984
Synchronize common files from prometheus/prometheus by @prombot in #1985
promhttp: implement WithXFromContext in terms of WithXFromRequest by @tie in #1863
Synchronize common files from prometheus/prometheus by @prombot in #1988
Fix bug unit cpu-seconds not a suffix of metric go_cpu_classes_gc_mark_assist_cpu_seconds by @vesari in #1991
build(deps): bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #1993
build(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @dependabot[bot] in #1992
build(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 in /exp by @dependabot[bot] in #1995
exp/api/remote: limit request body size in SnappyDecodeMiddleware by @roidelapluie in #1996
Synchronize common files from prometheus/prometheus by @prombot in #2001
build(deps): bump the github-actions group across 1 directory with 4 updates by @dependabot[bot] in #1994
ci(update-go-versions): declare permissions for the monthly chore PR by @arpitjain099 in #2003
docs: fix godoc indentation and typos in timer.go and wrap.go by @immanuwell in #2009
ci: harden actions/checkout with persist-credentials: false by @roidelapluie in #2011
fix(registry): prevent file descriptor leak in WriteToTextfile by @ProjectMutilation in #2010
Synchronize common files from prometheus/prometheus by @prombot in #2008
promhttp: add regression test for concurrent map writes (#1274) by @pedrampdd in #2000
build(deps): bump github.com/prometheus/common from 0.67.6-0.20260224092343-e4c38a0aea47 to 0.68.0 by @dependabot[bot] in #2015
build(deps): bump the github-actions group with 2 updates by @dependabot[bot] in #2016
build(deps): bump golang.org/x/sys from 0.43.0 to 0.45.0 by @dependabot[bot] in #2014
build(deps): bump github.com/prometheus/common from 0.67.5 to 0.68.0 in /exp by @dependabot[bot] in #2017
promhttp: fix grammar in exemplar option doc comments by @s3onghyun in #2023
fix: use keyed fields in SamplePair struct literals in api_test.go by @immanuwell in #2012
refactor: replace interface{} with any (Go 1.18+) by @MD-Mushfiqur123 in #2021
Synchronize common files from prometheus/prometheus by @prombot in #2013
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.69.0 by @dependabot[bot] in #2025
build(deps): bump github.com/prometheus/common from 0.68.0 to 0.69.0 in /exp by @dependabot[bot] in #2027
build(deps): bump golang.org/x/sys from 0.45.0 to 0.46.0 by @dependabot[bot] in #2026
Synchronize common files from prometheus/prometheus by @prombot in #2028
build(deps): bump github.com/prometheus/procfs from 0.20.1 to 0.21.0 by @dependabot[bot] in #2033
build(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 by @dependabot[bot] in #2036
build(deps): bump github.com/prometheus/procfs from 0.21.0 to 0.21.1 by @dependabot[bot] in #2035
build(deps): bump github.com/klauspost/compress from 1.18.6 to 1.18.7 in /exp by @dependabot[bot] in #2038
Synchronize common files from prometheus/prometheus by @prombot in #2041
fix(api): fall back to GET on forbidden POSTs by @immanuwell in #2030
build(deps): bump golang.org/x/net from 0.48.0 to 0.55.0 in /tutorials/whatsup by @dependabot[bot] in #2042
build(deps): bump the github-actions group across 1 directory with 5 updates by @dependabot[bot] in #2043
chores: remove example Dockerfile and container_description.yaml by @bwplotka in #2044
Update dependabot config by @SuperQ in #2046
build(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 in /exp by @dependabot[bot] in #2048
build(deps): bump github.com/klauspost/compress from 1.18.7 to 1.19.0 by @dependabot[bot] in #2047
promhttp: don't panic when instrumenting with non-exemplar observers by @spor3006 in #2005
Replace deprecated model.NameValidationScheme with explicit UTF8Validation by @kakkoyun in #2051
test: fix two flaky tests (darwin start_time regex, memstats HeapReleased drift) by @kakkoyun in #2050
fix: correct typos in comments and test error messages by @maxtaran2010 in #2049
examples: improve simple main.go example by @dhanudhanushree in #1999
Synchronize common files from prometheus/prometheus by @prombot in #2055
feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather calls by @kakkoyun in #1969
build(deps): update all Go dependencies in all go.mod files by @bwplotka in #2059
Cut v1.24.0-rc.0 by @bwplotka in #2058

New Contributors

@xieyuschen made their first contributihttps://github.com/prometheus/client_golang/pull/1844l/1844
@torrca made their first contributihttps://github.com/prometheus/client_golang/pull/1849l/1849
@yshngg made their first contributihttps://github.com/prometheus/client_golang/pull/1850l/1850
@jotak made their first contributihttps://github.com/prometheus/client_golang/pull/1843l/1843
@SungJin1212 made their first contributihttps://github.com/prometheus/client_golang/pull/1878l/1878
@github-actions[bot] made their first contributihttps://github.com/prometheus/client_golang/pull/1864l/1864
@pipiland2612 made their first contributihttps://github.com/prometheus/client_golang/pull/1888l/1888
@fpetkovski made their first contributihttps://github.com/prometheus/client_golang/pull/1889l/1889
@karthikkondapally made their first contributihttps://github.com/prometheus/client_golang/pull/1885l/1885
@tjhop made their first contributihttps://github.com/prometheus/client_golang/pull/1896l/1896
@duricanikolic made their first contributihttps://github.com/prometheus/client_golang/pull/1902l/1902
@makasim made their first contributihttps://github.com/prometheus/client_golang/pull/1917l/1917
@kgeckhart made their first contributihttps://github.com/prometheus/client_golang/pull/1927l/1927
@90ashish made their first contributihttps://github.com/prometheus/client_golang/pull/1929l/1929
@manute made their first contributihttps://github.com/prometheus/client_golang/pull/1950l/1950
@Saflaski made their first contributi[https://github.com/fix: recover from collector panic and return error in Gather prometheus/client_golang#1961](https://redirect.github.com/prometheus/client_

❗ Important

✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "every weekend"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2025-11-01T01:42:19Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

13 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.17` -> `1.23.0`
`github.com/stretchr/testify`	`v1.7.0` -> `v1.11.1`
`golang.org/x/crypto`	`v0.0.0-20220214200702-86341886e292` -> `v0.41.0`
`google.golang.org/protobuf`	`v1.27.1` -> `v1.36.8`
`github.com/cespare/xxhash/v2`	`v2.1.2` -> `v2.3.0`
`github.com/prometheus/client_model`	`v0.2.0` -> `v0.6.2`
`github.com/prometheus/common`	`v0.32.1` -> `v0.66.1`
`github.com/prometheus/procfs`	`v0.7.3` -> `v0.16.1`
`github.com/stretchr/objx`	`v0.3.0` -> `v0.5.2`
`golang.org/x/net`	`v0.0.0-20220114011407-0dd24b26b47d` -> `v0.43.0`
`golang.org/x/sys`	`v0.0.0-20220114195835-da31bd327af9` -> `v0.35.0`
`golang.org/x/text`	`v0.3.7` -> `v0.28.0`
`golang.org/x/tools`	`v0.1.8` -> `v0.35.0`
`gopkg.in/yaml.v3`	`v3.0.0-20210107192922-496545a6307b` -> `v3.0.1`

ghost · 2025-11-01T01:43:55Z

PR Summary

This Pull Request updates the Go module and dependency files to modernize the project’s dependency set. The main focus is on upgrading the Go version and several key dependencies, which brings improvements in compatibility, security, and features. These changes are essential for keeping the project up-to-date and secure, but they may also introduce breaking changes that require careful review.

Changed Files and Their Summaries

1. `go.mod`

Summary:
- Updated Go version from 1.17 to 1.23.0.
- Upgraded several dependencies, including:
  - github.com/prometheus/client_golang: v1.12.1 → v1.23.2
  - github.com/stretchr/testify: v1.7.0 → v1.11.1
  - golang.org/x/crypto: v0.0.0-20220214200702-86341886e292 → v0.41.0
  - google.golang.org/protobuf: v1.27.1 → v1.36.8
  - And others.
- Added new indirect dependencies (e.g., github.com/munnerz/goautoneg, go.yaml.in/yaml/v2).
- These updates modernize the codebase for better compatibility, security, and features.
Security Concerns:
- Upgrading dependencies generally improves security by including patches for known vulnerabilities.
- Attention: Major version upgrades (e.g., Go 1.17 → 1.23.0) may introduce breaking changes or new, unknown vulnerabilities.
- Recommendation: Review the changelogs of all upgraded dependencies for breaking changes or new security advisories.

2. `go.sum`

Summary:
- Updated to reflect new dependency versions and added modules from go.mod.
- New checksums were added for upgraded and newly introduced dependencies, ensuring integrity verification.
Security Concerns:
- No direct security concerns, as go.sum only contains cryptographic hashes for dependency verification.
- Attention: Ensure that the hashes match the intended versions to prevent supply chain attacks.

Security Advice & Points of Attention

Review Dependency Changelogs:
Carefully check the release notes and changelogs for all upgraded dependencies, especially those with major version jumps, for any breaking changes or new security advisories.
Test Thoroughly:
Since the Go version and several core libraries have been upgraded, run all tests and validate application behavior in staging before deploying to production.
Supply Chain Integrity:
Confirm that all new checksums in go.sum correspond to trusted sources to mitigate supply chain risks.

In summary:
This PR brings your project up-to-date with the latest Go version and dependency updates, which is beneficial for long-term maintenance and security. However, it is crucial to review all changes carefully for compatibility and potential new issues before merging.
This is an AI-generated summary, which may be innacurate.
This aims only to assist human reviewers, and does not replace code reviews in any way.
Use responsibly and please submit any feedback to this form.

renovate · 2025-12-15T14:48:12Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

13 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.17` -> `1.26.0`
`github.com/google/uuid`	`v1.3.0` -> `v1.6.0`
`github.com/stretchr/testify`	`v1.7.0` -> `v1.12.1`
`golang.org/x/crypto`	`v0.0.0-20220214200702-86341886e292` -> `v0.57.0`
`google.golang.org/protobuf`	`v1.27.1` -> `v1.36.12`
`github.com/cespare/xxhash/v2`	`v2.1.2` -> `v2.3.0`
`github.com/prometheus/client_model`	`v0.2.0` -> `v0.6.3`
`github.com/prometheus/common`	`v0.32.1` -> `v0.72.0`
`github.com/prometheus/procfs`	`v0.7.3` -> `v0.22.0`
`github.com/stretchr/objx`	`v0.3.0` -> `v0.5.3`
`golang.org/x/net`	`v0.0.0-20220114011407-0dd24b26b47d` -> `v0.59.0`
`golang.org/x/sys`	`v0.0.0-20220114195835-da31bd327af9` -> `v0.48.0`
`golang.org/x/text`	`v0.3.7` -> `v0.42.0`
`golang.org/x/tools`	`v0.1.8` -> `v0.49.0`

ghost · 2026-05-02T01:12:54Z

⛔ Snyk checks have failed. 11 issues have been found so far.

Status	Scan Engine	Critical	High	Total (11)
⛔	Open Source Security	1	10	11 issues
✅	Licenses	0	0	0 issues
✅	Code Security	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

snyk-io · 2026-07-04T01:32:05Z

⛔ Snyk checks have failed. 11 issues have been found so far.

Status	Scan Engine	Critical	High	Total (11)
⛔	Open Source Security	1	10	11 issues
✅	Licenses	0	0	0 issues
✅	Code Security	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

…25.0 Signed-off-by: Renovate Bot <bot@renovateapp.com>

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.23.2~~ deps:chore - update module github.com/prometheus/client_golang to v1.23.2 - autoclosed Apr 30, 2026

renovate Bot closed this Apr 30, 2026

renovate Bot deleted the renovate/github.com-prometheus-client_golang-1.x branch April 30, 2026 11:29

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.23.2 - autoclosed~~ deps:chore - update module github.com/prometheus/client_golang to v1.23.2 May 2, 2026

renovate Bot reopened this May 2, 2026

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch 2 times, most recently from 7b855a4 to 3a0cf8b Compare May 2, 2026 01:11

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.23.2~~ deps:chore - update module github.com/prometheus/client_golang to v1.23.2 - autoclosed Jul 3, 2026

renovate Bot closed this Jul 3, 2026

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.23.2 - autoclosed~~ deps:chore - update module github.com/prometheus/client_golang to v1.23.2 Jul 4, 2026

renovate Bot reopened this Jul 4, 2026

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch 2 times, most recently from 3a0cf8b to e6b8f62 Compare July 4, 2026 01:31

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch from e6b8f62 to 274989c Compare July 20, 2026 20:56

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.23.2~~ deps:chore - update module github.com/prometheus/client_golang to v1.24.0 Jul 20, 2026

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch from 274989c to a1d0644 Compare July 24, 2026 12:16

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.24.0~~ deps:chore - update module github.com/prometheus/client_golang to v1.24.1 Jul 24, 2026

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.24.1~~ deps:chore - update module github.com/prometheus/client_golang to v1.24.1 - autoclosed Aug 28, 2026

renovate Bot closed this Aug 28, 2026

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.24.1 - autoclosed~~ deps:chore - update module github.com/prometheus/client_golang to v1.24.1 Aug 29, 2026

renovate Bot reopened this Aug 29, 2026

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch 2 times, most recently from a1d0644 to 02908bf Compare August 29, 2026 16:29

deps:chore - update module github.com/prometheus/client_golang to v1.…

d9487b8

…25.0 Signed-off-by: Renovate Bot <bot@renovateapp.com>

renovate Bot force-pushed the renovate/github.com-prometheus-client_golang-1.x branch from 02908bf to d9487b8 Compare October 8, 2026 18:11

renovate Bot changed the title ~~deps:chore - update module github.com/prometheus/client_golang to v1.24.1~~ deps:chore - update module github.com/prometheus/client_golang to v1.25.0 Oct 8, 2026

Navigation Menu

Repository navigation

deps:chore - update module github.com/prometheus/client_golang to v1.25.0 - #206

deps:chore - update module github.com/prometheus/client_golang to v1.25.0#206
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/github.com-prometheus-client_golang-1.x

renovate Bot commented Nov 1, 2025 •

edited

Loading

Uh oh!

renovate Bot commented Nov 1, 2025

Uh oh!

ghost commented Nov 1, 2025 •

edited by ghost

Loading

Uh oh!

renovate Bot commented Dec 15, 2025 •

edited

Loading

Uh oh!

ghost commented May 2, 2026 •

edited by ghost

Loading

Uh oh!

snyk-io Bot commented Jul 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Nov 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.25.0

1.25.0 / 2026-10-07

What's Changed

New Contributors

v1.24.1: / 2026-07-23

What's Changed

v1.24.0: - 2026-07-20

Changes

New Contributors

Configuration

Uh oh!

renovate Bot commented Nov 1, 2025

ℹ Artifact update notice

File name: go.mod

Uh oh!

ghost commented Nov 1, 2025 • edited by ghost Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

PR Summary

Changed Files and Their Summaries

1. go.mod

2. go.sum

Security Advice & Points of Attention

Uh oh!

renovate Bot commented Dec 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

ghost commented May 2, 2026 • edited by ghost Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⛔ Snyk checks have failed. 11 issues have been found so far.

Uh oh!

snyk-io Bot commented Jul 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⛔ Snyk checks have failed. 11 issues have been found so far.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

renovate Bot commented Nov 1, 2025 •

edited

Loading

`v1.25.0`

`v1.24.1`: / 2026-07-23

`v1.24.0`: - 2026-07-20

ghost commented Nov 1, 2025 •

edited by ghost

Loading

1. `go.mod`

2. `go.sum`

renovate Bot commented Dec 15, 2025 •

edited

Loading

ghost commented May 2, 2026 •

edited by ghost

Loading

snyk-io Bot commented Jul 4, 2026 •

edited

Loading