Update module github.com/prometheus/common to v0.67.4

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/common	v0.63.0 -> v0.67.4

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.67.4: / 2025-11-18

Compare Source

What's Changed

• chore: clean up golangci-lint configuration by @​mmorel-35 in #​782
• chore: 'omitempty' to Oauth2 fields with type Secret to avoid requiring them by @​JorTurFer in #​864
• chore: Add omitempty tag to all config fields by @​JorTurFer in #​865

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3: / 2025-11-18

Compare Source

What's Changed

• Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @​JorTurFer in #​862
• Config: remove outdated comment about HTTP/2 issues by @​bboreham in #​863

New Contributors

• @​JorTurFer made their first contribution in #​862

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

v0.66.1

Compare Source

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

• Revert "Use github.com/grafana/regexp instead of regexp" by @​aknuds1 in #​835
• Move to supported version of yaml parser by @​dims in #​834
• Revert "Use go.uber.org/atomic instead of sync/atomic (#​825)" by @​aknuds1 in #​838

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

Compare Source

⚠️ Breaking Changes ⚠️

• A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

• model: add constants for type and unit labels. by @​bwplotka in #​801

• model.ValidationScheme: Support encoding as YAML by @​aknuds1 in #​799

• fix(promslog): always print time.Duration values as go duration strings by @​tjhop in #​798

• Add ValidationScheme methods IsValidMetricName and IsValidLabelName by @​aknuds1 in #​806

• Fix delimited proto not escaped correctly by @​thampiotr in #​809

• Decoder: Remove use of global name validation and add validation by @​ywwg in #​808

• ValidationScheme implements pflag.Value and json.Marshaler/Unmarshaler interfaces by @​juliusmh in #​807

• expfmt: Add NewTextParser function by @​aknuds1 in #​816

• Enable the godot linter by @​aknuds1 in #​821

• Enable usestdlibvars linter by @​aknuds1 in #​820

• Enable unconvert linter by @​aknuds1 in #​819

• Enable the fatcontext linter by @​aknuds1 in #​822

• Enable gocritic linter by @​aknuds1 in #​818

• Use go.uber.org/atomic instead of sync/atomic by @​aknuds1 in #​825

• Enable revive rule unused-parameter by @​aknuds1 in #​824

• Enable revive rules by @​aknuds1 in #​823

• Synchronize common files from prometheus/prometheus by @​prombot in #​802

• Synchronize common files from prometheus/prometheus by @​prombot in #​803

• Sync .golangci.yml with prometheus/prometheus by @​aknuds1 in #​817

• ci: update upload-actions by @​ywwg in #​814

• docs: fix typo in expfmt.Negotiate by @​wmcram in #​813

• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​800

• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​810

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /assets by @​dependabot[bot] in #​826

• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 by @​dependabot[bot] in #​830

• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​829

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​827

New Contributors

• @​aknuds1 made their first contribution in #​799
• @​thampiotr made their first contribution in #​809
• @​wmcram made their first contribution in #​813
• @​juliusmh made their first contribution in #​807

v0.65.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​789
• Remove otlptranslator package by @​ArthurSens in #​791
• feat(promslog): add Level() method to get slog.Level by @​tjhop in #​795
• feat: Support negative duration in new function ParseDurationAllowNegative by @​iamhalje in #​793

New Contributors

• @​iamhalje made their first contribution in #​793

Full Changelog: prometheus/common@v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in #​773
• Synchronize common files from prometheus/prometheus by @​prombot in #​774
• Synchronize common files from prometheus/prometheus by @​prombot in #​775
• Update Go by @​SuperQ in #​770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in #​779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in #​777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in #​776
• promslog: Use the default timezone (again) by @​beorn7 in #​739
• Synchronize common files from prometheus/prometheus by @​prombot in #​787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in #​784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in #​785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in #​786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in #​783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in #​788

New Contributors

• @​kakkoyun made their first contribution in #​779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.6 -> 1.24.0
golang.org/x/crypto	v0.37.0 -> v0.43.0
golang.org/x/net	v0.39.0 -> v0.46.0
golang.org/x/oauth2	v0.29.0 -> v0.32.0
golang.org/x/sync	v0.13.0 -> v0.17.0
golang.org/x/sys	v0.32.0 -> v0.37.0
golang.org/x/term	v0.31.0 -> v0.36.0
golang.org/x/text	v0.24.0 -> v0.30.0
golang.org/x/tools	v0.32.0 -> v0.37.0
google.golang.org/protobuf	v1.36.6 -> v1.36.10

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign nirarg for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.