chore: bump github.com/prometheus/common from 0.63.0 to 0.68.1 by dependabot[bot] · Pull Request #772 · officialmofabs/codeserver

dependabot · 2026-06-08T11:09:48Z

Bumps github.com/prometheus/common from 0.63.0 to 0.68.1.

Release notes

Sourced from github.com/prometheus/common's releases.

v0.68.1

What's Changed

build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 by @dependabot[bot] in prometheus/common#903

build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 by @dependabot[bot] in prometheus/common#914

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#915

Full Changelog: prometheus/common@v0.68.0...v0.68.1

v0.68.0

What's Changed

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#873

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#874

build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @dependabot[bot] in prometheus/common#879

build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @dependabot[bot] in prometheus/common#878

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#875

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#880

Remove logic adding unit to metrics name by @vesari in prometheus/common#877

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#881

Update for Go 1.26 by @SuperQ in prometheus/common#883

build(deps): bump golang.org/x/net from 0.49.0 to 0.51.0 by @dependabot[bot] in prometheus/common#882

version: Add a slog helper by @SuperQ in prometheus/common#886

Remove Arthur from maintainers list by @ArthurSens in prometheus/common#885

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#895

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#896

config: change NewOAuth2RoundTripper to accept variadic HTTPClientOption by @alliasgher in prometheus/common#898

config: guard against nil oauth2 credential in RoundTrip by @alliasgher in prometheus/common#897

build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @dependabot[bot] in prometheus/common#890

build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 by @dependabot[bot] in prometheus/common#891

build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @dependabot[bot] in prometheus/common#892

Move interface assertions to a test file by @msiegen in prometheus/common#839

fix(http_config): fix client cert rotation when no CA is configured by @machine424 in prometheus/common#908

Remove CircleCI by @ArthurSens in prometheus/common#910

Fix: apply DialContextFunc to OAuth2 token-fetch transport by @yuri-tceretian in prometheus/common#911

New Contributors

@alliasgher made their first contribution in prometheus/common#898

@msiegen made their first contribution in prometheus/common#839

@machine424 made their first contribution in prometheus/common#908

@yuri-tceretian made their first contribution in prometheus/common#911

Full Changelog: prometheus/common@v0.67.5...v0.68.0

v0.67.5

What's Changed

build(deps): bump golang.org/x/oauth2 from 0.32.0 to 0.34.0 by @dependabot[bot] in prometheus/common#871

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#866

build(deps): bump golang.org/x/net from 0.46.0 to 0.48.0 by @dependabot[bot] in prometheus/common#872

build(deps): bump google.golang.org/protobuf from 1.36.10 to 1.36.11 by @dependabot[bot] in prometheus/common#870

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.67.2 / 2025-10-28

What's Changed

config: Fix panic in tlsRoundTripper when CA file is absent by @ndk in prometheus/common#792

Cleanup linting issues by @SuperQ in prometheus/common#860

New Contributors

@ndk made their first contribution in prometheus/common#792

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1 / 2025-10-07

What's Changed

Remove VERSION file to avoid Go conflict error in prometheus/common#853

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

Create CHANGELOG.md for easier communication of library changes, especially possible breaking changes. by @ywwg in prometheus/common#833

model: New test for validation with dots by @m1k1o in prometheus/common#759

expfmt: document NewTextParser as required by @burgerdev in prometheus/common#842

expfmt: Add support for float histograms and gauge histograms by @beorn7 in prometheus/common#843

Updated minimum Go version to 1.24.0, updated Go dependecies by @SuperQ in prometheus/common#849

New Contributors

@m1k1o made their first contribution in prometheus/common#759

@burgerdev made their first contribution in prometheus/common#842

Full Changelog: prometheus/common@v0.66.1...v0.67.0

v0.66.1 / 2025-09-05

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Revert "Use github.com/grafana/regexp instead of regexp" by @aknuds1 in prometheus/common#835

Move to supported version of yaml parser by @dims in prometheus/common#834

Revert "Use go.uber.org/atomic instead of sync/atomic (#825)" by @aknuds1 in prometheus/common#838

Full Changelog: prometheus/common@v1.20.99...v0.66.1

... (truncated)

Commits

2120573 Update common Prometheus files (#915)
228386a build(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#914)
b8c88b4 build(deps): bump golang.org/x/net from 0.52.0 to 0.53.0 (#903)
1e0ae83 config: apply DialContextFunc to OAuth2 token-fetch transport (#911)
b51d01b Remove CircleCI (#910)
0f3c348 Merge pull request #908 from machine424/ttlsco
732a9cf fix(http_config): fix client cert rotation when no CA is configured
ce9215c Move interface assertions to a test file (#839)
1ba5ed7 build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 (#892)
8f8ada6 build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 (#891)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.63.0 to 0.68.1. - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.63.0...v0.68.1) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-version: 0.68.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

cloudflare-workers-and-pages · 2026-06-08T11:09:57Z

Deploying with Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Updated (UTC)
❌ Deployment failed View logs	codeserver	`af3cb5c`	Jun 08 2026, 11:10 AM

socket-security · 2026-06-08T11:10:27Z

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Package	Supply Chain Security	Vulnerability
golang/golang.org/x/oauth2@v0.29.0 ⏵ v0.36.0	⁺¹
golang/golang.org/x/crypto@v0.39.0 ⏵ v0.51.0	⁺¹	⁺³
golang/golang.org/x/net@v0.41.0 ⏵ v0.55.0		⁺²
golang/golang.org/x/tools@v0.33.0 ⏵ v0.44.0
golang/google.golang.org/protobuf@v1.36.6 ⏵ v1.36.11	⁺¹
golang/golang.org/x/text@v0.26.0 ⏵ v0.37.0
golang/github.com/prometheus/client_model@v0.6.1 ⏵ v0.6.2
golang/github.com/prometheus/common@v0.63.0 ⏵ v0.68.1
golang/golang.org/x/sys@v0.33.0 ⏵ v0.45.0
golang/github.com/stretchr/testify@v1.10.0 ⏵ v1.11.1	⁺¹
golang/golang.org/x/mod@v0.25.0 ⏵ v0.35.0
golang/golang.org/x/sync@v0.15.0 ⏵ v0.20.0
golang/golang.org/x/term@v0.32.0 ⏵ v0.43.0	⁺¹

View full report

socket-security · 2026-06-08T11:10:28Z

Warning

Review the following alerts detected in dependencies.

According to your organization's Security Policy, it is recommended to resolve "Warn" alerts. Learn more about Socket for GitHub.

Action	Severity	Alert (click "▶" to expand/collapse)
Warn		Obfuscated code: golang `golang.org/x/tools` is 90.0% likely obfuscated Confidence: 0.90 Location: Package overview From: go.mod → `golang/golang.org/x/tools@v0.44.0` ℹ Read more on: This package \| This alert \| What is obfuscated code? Next steps: Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at `support@socket.dev`. Suggestion: Packages should not obfuscate their code. Consider not using packages with obfuscated code. Mark the package as acceptable risk. To ignore this alert only in this pull request, reply with the comment `@SocketSecurity ignore golang/golang.org/x/tools@v0.44.0`. You can also ignore all packages with `@SocketSecurity ignore-all`. To ignore an alert for all future pull requests, use Socket's Dashboard to change the triage state of this alert.

View full report

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 8, 2026

dependabot Bot mentioned this pull request Jun 8, 2026

chore: bump github.com/prometheus/common from 0.63.0 to 0.68.0 #762

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump github.com/prometheus/common from 0.63.0 to 0.68.1#772

chore: bump github.com/prometheus/common from 0.63.0 to 0.68.1#772
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/github.com/prometheus/common-0.68.1

dependabot Bot commented on behalf of github Jun 8, 2026

Uh oh!

cloudflare-workers-and-pages Bot commented Jun 8, 2026 •

edited

Loading

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 8, 2026

v0.68.1

What's Changed

v0.68.0

What's Changed

New Contributors

v0.67.5

What's Changed

Changelog

main / unreleased

What's Changed

v0.67.2 / 2025-10-28

What's Changed

New Contributors

v0.67.1 / 2025-10-07

What's Changed

v0.67.0 / 2025-10-07

What's Changed

New Contributors

v0.66.1 / 2025-09-05

What's Changed

Uh oh!

cloudflare-workers-and-pages Bot commented Jun 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Deploying with Cloudflare Workers

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

socket-security Bot commented Jun 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

cloudflare-workers-and-pages Bot commented Jun 8, 2026 •

edited

Loading