Update Prometheus dependencies (main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/client_golang	v1.22.0 -> v1.23.2
github.com/prometheus/common	v0.62.0 -> v0.67.4

---

Release Notes

prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common@​v0.66.1 by @​aknuds1 in #​1869
• [release-1.23] Cut v1.23.2 by @​aknuds1 in #​1870

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

• [release-1.23] Upgrade to prometheus/common v0.66 by @​aknuds1 in #​1866
• [release-1.23] Cut v1.23.1 by @​aknuds1 in #​1867

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0: - 2025-07-30

Compare Source

• [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #​1812
• [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #​1766
• [FEATURE] Add exemplars for native histograms #​1686
• [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #​1823
• [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #​1833
• [BUGFIX] exp/api: client prompt return on context cancellation #​1729

All Changes

* Update example test by @​SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1783 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1784 * build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1786 * chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1789 * build(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1790 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1791 * Add `WrapCollectorWith` and `WrapCollectorWithPrefix` by @​colega in https://github.com/prometheus/client_golang/pull/1766 * feat(github-actions): add Go file change detection to golangci-lint workflow by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1794 * chore(ci): Fix flaky tests by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1795 * build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1799 * test(registry): Add goleak-based goroutine leak detection by @​surinkim in https://github.com/prometheus/client_golang/pull/1797 * build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1806 * build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1804 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1809 * Add exemplars for native histograms by @​shivanthzen in https://github.com/prometheus/client_golang/pull/1686 * build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1807 * build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1805 * build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1808 * build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1800 * Update supported Go versions by @​SuperQ in https://github.com/prometheus/client_golang/pull/1812 * Cleaup Go modules by @​SuperQ in https://github.com/prometheus/client_golang/pull/1813 * fix: client prompt return on context cancellation by @​umegbewe in https://github.com/prometheus/client_golang/pull/1729 * Simplify buf binary install by @​SuperQ in https://github.com/prometheus/client_golang/pull/1814 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1815 * build(deps): bump the github-actions group with 5 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1817 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1821 * exp/api: Bubble up status code from writeResponse by @​saswatamcode in https://github.com/prometheus/client_golang/pull/1823 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1827 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1828 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1831 * Update runtime metrics for Go v1.23 and v1.24 by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1833 * Fix `errNotImplemented` reference by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1835 * build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1826 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1832 * Cut v1.23.0-rc.0 by @​vesari in https://github.com/prometheus/client_golang/pull/1837 * cut v1.23.0-rc.1 by @​vesari in https://github.com/prometheus/client_golang/pull/1842

New Contributors

• @​surinkim made their first contributihttps://github.com/prometheus/client_golang/pull/1797l/1797
• @​umegbewe made their first contributihttps://github.com/prometheus/client_golang/pull/1729l/1729
• @​aknuds1 made their first contributihttps://github.com/prometheus/client_golang/pull/1833l/1833

Full Changelog: prometheus/client_golang@v1.22.0...v1.23.0

prometheus/common (github.com/prometheus/common)

v0.67.4: / 2025-11-18

Compare Source

What's Changed

• chore: clean up golangci-lint configuration by @​mmorel-35 in #​782
• chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them by @​JorTurFer in #​864
• chore: Add omitempty tag to all config fields by @​JorTurFer in #​865

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3: / 2025-11-18

Compare Source

What's Changed

• Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @​JorTurFer in #​862
• Config: remove outdated comment about HTTP/2 issues by @​bboreham in #​863

New Contributors

• @​JorTurFer made their first contribution in #​862

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

v0.66.1

Compare Source

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

• Revert "Use github.com/grafana/regexp instead of regexp" by @​aknuds1 in #​835
• Move to supported version of yaml parser by @​dims in #​834
• Revert "Use go.uber.org/atomic instead of sync/atomic (#​825)" by @​aknuds1 in #​838

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

Compare Source

⚠️ Breaking Changes ⚠️

• A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

• model: add constants for type and unit labels. by @​bwplotka in #​801

• model.ValidationScheme: Support encoding as YAML by @​aknuds1 in #​799

• fix(promslog): always print time.Duration values as go duration strings by @​tjhop in #​798

• Add ValidationScheme methods IsValidMetricName and IsValidLabelName by @​aknuds1 in #​806

• Fix delimited proto not escaped correctly by @​thampiotr in #​809

• Decoder: Remove use of global name validation and add validation by @​ywwg in #​808

• ValidationScheme implements pflag.Value and json.Marshaler/Unmarshaler interfaces by @​juliusmh in #​807

• expfmt: Add NewTextParser function by @​aknuds1 in #​816

• Enable the godot linter by @​aknuds1 in #​821

• Enable usestdlibvars linter by @​aknuds1 in #​820

• Enable unconvert linter by @​aknuds1 in #​819

• Enable the fatcontext linter by @​aknuds1 in #​822

• Enable gocritic linter by @​aknuds1 in #​818

• Use go.uber.org/atomic instead of sync/atomic by @​aknuds1 in #​825

• Enable revive rule unused-parameter by @​aknuds1 in #​824

• Enable revive rules by @​aknuds1 in #​823

• Synchronize common files from prometheus/prometheus by @​prombot in #​802

• Synchronize common files from prometheus/prometheus by @​prombot in #​803

• Sync .golangci.yml with prometheus/prometheus by @​aknuds1 in #​817

• ci: update upload-actions by @​ywwg in #​814

• docs: fix typo in expfmt.Negotiate by @​wmcram in #​813

• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​800

• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​810

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /assets by @​dependabot[bot] in #​826

• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 by @​dependabot[bot] in #​830

• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​829

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​827

New Contributors

• @​aknuds1 made their first contribution in #​799
• @​thampiotr made their first contribution in #​809
• @​wmcram made their first contribution in #​813
• @​juliusmh made their first contribution in #​807

v0.65.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​789
• Remove otlptranslator package by @​ArthurSens in #​791
• feat(promslog): add Level() method to get slog.Level by @​tjhop in #​795
• feat: Support negative duration in new function ParseDurationAllowNegative by @​iamhalje in #​793

New Contributors

• @​iamhalje made their first contribution in #​793

Full Changelog: prometheus/common@v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in #​773
• Synchronize common files from prometheus/prometheus by @​prombot in #​774
• Synchronize common files from prometheus/prometheus by @​prombot in #​775
• Update Go by @​SuperQ in #​770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in #​779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in #​777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in #​776
• promslog: Use the default timezone (again) by @​beorn7 in #​739
• Synchronize common files from prometheus/prometheus by @​prombot in #​787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in #​784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in #​785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in #​786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in #​783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in #​788

New Contributors

• @​kakkoyun made their first contribution in #​779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

v0.63.0

Compare Source

What's Changed

• Making the map a public variable for promtheus-operator by @​dongjiang1989 in #​741
• setup ossf scorecard and codeql workflows by @​mmorel-35 in #​564
• feat(promslog): implement reserved keys, rename duplicates by @​tjhop in #​746
• Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in #​750
• Bump golang.org/x/net from 0.33.0 to 0.34.0 by @​dependabot in #​749
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @​dependabot in #​751
• promslog: Make AllowedLevel concurrency safe. by @​bwplotka in #​754
• Fix typo 'the an' by @​petern48 in #​752
• Synchronize common files from prometheus/prometheus by @​prombot in #​757
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot in #​756
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot in #​761
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in #​763
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @​dependabot in #​762
• model: Clarify the purpose of model.NameValidationScheme by @​ywwg in #​765
• Fix spelling mistake in godoc by @​grobinson-grafana in #​766
• Synchronize common files from prometheus/prometheus by @​prombot in #​767
• otlptranslator: Add dependency free package that translates OTLP data into Prometheus metric/label names by @​ArthurSens in #​768

New Contributors

• @​dongjiang1989 made their first contribution in #​741
• @​petern48 made their first contribution in #​752

Full Changelog: prometheus/common@v0.62.0...v0.63.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
github.com/prometheus/procfs	v0.15.1 -> v0.16.1

[luolanzone]

/test-all

[luolanzone]

/test-all