build(deps): Bump github.com/prometheus/client_golang from 1.18.0 to 1.20.2 #2597
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.18.0 to 1.20.2. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.18.0...v1.20.2) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
WalkthroughThe Changes
Sequence Diagram(s)sequenceDiagram
participant A as Application
participant B as Prometheus Client
participant C as OAuth2
participant D as New Dependency
A->>B: Request Metrics
B-->>A: Return Metrics
A->>C: Authenticate User
C-->>A: Return Token
A->>D: Use New Feature
D-->>A: Return Feature Response
Poem
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Files ignored due to path filters (1)
go.sumis excluded by!**/*.sum
Files selected for processing (1)
- go.mod (6 hunks)
Additional comments not posted (7)
go.mod (7)
175-175: Verify compatibility with the new version.The
github.com/prometheus/client_modeldependency has been updated fromv0.5.0tov0.6.1. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
165-165: Verify compatibility with the new dependency.The
github.com/munnerz/goautonegdependency has been added as a new indirect dependency. Ensure that the new dependency does not introduce any conflicts.Run the following script to verify the usage of this dependency:
Verification successful
Dependency is correctly managed as a transitive dependency.
The
github.com/munnerz/goautonegdependency is listed in thego.sumfile, confirming its status as a transitive dependency. There is no direct usage in the codebase, indicating that it is managed correctly by Go's module system without introducing conflicts.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify the usage of `github.com/munnerz/goautoneg` in the codebase. # Test: Search for the usage of the dependency. Expect: No conflicts. rg --type go 'github.com/munnerz/goautoneg'Length of output: 43
Script:
#!/bin/bash # Check if `github.com/munnerz/goautoneg` is listed in the go.sum file, indicating it's a transitive dependency. rg 'github.com/munnerz/goautoneg' go.sumLength of output: 271
146-146: Verify compatibility with the new version.The
github.com/klauspost/compressdependency has been updated fromv1.17.2tov1.17.9. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
176-176: Verify compatibility with the new version.The
github.com/prometheus/commondependency has been updated fromv0.45.0tov0.55.0. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
177-177: Verify compatibility with the new version.The
github.com/prometheus/procfsdependency has been updated fromv0.12.0tov0.15.1. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
210-210: Verify compatibility with the new version.The
golang.org/x/oauth2dependency has been updated fromv0.20.0tov0.21.0. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
Verification successful
No direct usage of
golang.org/x/oauth2found in the codebase.The
golang.org/x/oauth2dependency is marked as "indirect" and is not directly used in the codebase. The update to versionv0.21.0should not affect the codebase directly. Ensure that any packages relying on this dependency are compatible with the update.
golang.org/x/oauth2is confirmed ingo.sumbut not directly used in the codebase.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify the usage of `golang.org/x/oauth2` in the codebase. # Test: Search for the usage of the dependency. Expect: No breaking changes. rg --type go 'golang.org/x/oauth2'Length of output: 34
Script:
#!/bin/bash # Check for the presence of `golang.org/x/oauth2` in go.sum rg 'golang.org/x/oauth2' go.sum # Search for any indirect usage of `golang.org/x/oauth2` in the codebase rg 'oauth2' --type goLength of output: 2934
26-26: Verify compatibility with the new version.The
github.com/prometheus/client_golangdependency has been updated fromv1.18.0tov1.20.2. Ensure that the new version is compatible with the existing codebase.Run the following script to verify the usage of this dependency:
Verification successful
Compatibility with the new version is likely maintained.
The
github.com/prometheus/client_golangdependency update fromv1.18.0tov1.20.2involves the use ofprometheus.DefaultRegistererincmd/umeed/cmd/app_creator.go. This is a standard usage pattern, and no breaking changes are expected. However, reviewing the release notes for any specific changes related toDefaultRegistereris recommended.
- File:
cmd/umeed/cmd/app_creator.go- Usage:
wasmkeeper.WithVMCacheMetrics(prometheus.DefaultRegisterer)Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify the usage of `github.com/prometheus/client_golang` in the codebase. # Test: Search for the usage of the dependency. Expect: No breaking changes. rg --type go 'github.com/prometheus/client_golang'Length of output: 129
Script:
#!/bin/bash # Extract and review the relevant code sections in `cmd/umeed/cmd/app_creator.go` where `github.com/prometheus/client_golang/prometheus` is used. rg --type go --context 5 'github.com/prometheus/client_golang/prometheus' cmd/umeed/cmd/app_creator.goLength of output: 562
Script:
#!/bin/bash # Search for the usage of Prometheus-related functions or features in `cmd/umeed/cmd/app_creator.go`. rg --type go 'prometheus\.' cmd/umeed/cmd/app_creator.goLength of output: 149
|
This pr is braking the build process |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/go_modules/github.com/prometheus/client_golang-1.20.2
branch
Bumps github.com/prometheus/client_golang from 1.18.0 to 1.20.2.
Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
67121dcMerge pull request #1596 from mrueg/fix-uncompressed-content-header187acd4Cut 1.20.2f7f8f3afix: Unset Content-Encoding header when uncompressed2254d6cMerge pull request #1587 from prometheus/fix-processcollector4a15d05Cut 1.20.1f2dd7b3Use pedantic registry in other places too, to double check.261fe84bugfix: Pass network metrics to processCollector's Describe() function5bf3341Use NewPedanticRegistry in Process' Collector tests73b811cCut 1.20.0 release. (#1580)7ce5089gocollector: Attach original runtime/metrics metric name to help. (#1578)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit