{{ message }}
Repository navigation
build(deps): bump github.com/prometheus/client_golang from 1.24.1 to 1.25.0 - #893
Merged
brainexe merged 1 commit intoOct 23, 2026
Conversation
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.24.1 to 1.25.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.25.0/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.24.1...v1.25.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-version: 1.25.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
brainexe
deleted the
dependabot/go_modules/github.com/prometheus/client_golang-1.25.0
branch
October 23, 2026 08:44
brainexe
added a commit
that referenced
this pull request
Oct 27, 2026
The plugins in ./plugins/ are own Go modules that pull in the core via a directory replace, so their go.mod has to list the versions selected by the root module. #893, #894 and #895 only bumped the root go.mod, which left the plugins behind and broke their CI jobs: golangci-lint: no go files to analyze: running `go mod tidy` may solve the problem govulncheck: go: updates to go.mod needed; to update it: go mod tidy Run `go mod tidy` in all plugin modules, which bumps github.com/prometheus/client_golang to v1.25.0, golang.org/x/text to v0.43.0 and - transitively - github.com/klauspost/compress to v1.20.1.
brainexe
added a commit
that referenced
this pull request
Oct 27, 2026
* test(jira): accept 401 response for not existing tickets The public Apache Jira used in the tests now answers with "You do not have the permission to see the specified issue." (401) instead of "Issue Does Not Exist" (404) for anonymous requests to a non existing ticket, which broke TestJiraSearch and TestWatchJira. Assert the forwarded API error via a regexp accepting both variants. * build(deps): tidy plugin modules after root dependency bumps The plugins in ./plugins/ are own Go modules that pull in the core via a directory replace, so their go.mod has to list the versions selected by the root module. #893, #894 and #895 only bumped the root go.mod, which left the plugins behind and broke their CI jobs: golangci-lint: no go files to analyze: running `go mod tidy` may solve the problem govulncheck: go: updates to go.mod needed; to update it: go mod tidy Run `go mod tidy` in all plugin modules, which bumps github.com/prometheus/client_golang to v1.25.0, golang.org/x/text to v0.43.0 and - transitively - github.com/klauspost/compress to v1.20.1. * ci(security): exclude ./examples/ from the gosec scan gosec walks the directory tree itself, so it also picks up the own Go modules below ./examples/. Those depend on the released slack-bot and have no go.sum checked in, so they can't be resolved from the root module and gosec reports them as "Golang errors": could not import github.com/innogames/slack-bot/v2/bot (invalid package name: "") That makes gosec exit 1 even though it finds 0 issues. The examples are compiled in the "Build examples" step of the test-extended job, so skipping them here loses no coverage.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github.com/prometheus/client_golang from 1.24.1 to 1.25.0.
Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
0d88875Cut v1.25.0 (#2164)e9946eeCut v1.25.0-rc.0 (#2154)de866d6Merge pull request #2152 from prometheus/dependabot/go_modules/api/prometheus...a37302fprometheus: fix modernize lint findings (#2151)a3fa380build(deps): bump google.golang.org/grpc9da3fccfix: updates for tsdb blocks handling (#1928)0ecb5c2api: match complete URL placeholders (#2136)2ad001aexp/api/remote: reset buffer before generic marshal (#2139)0db8d43promhttp: vary negotiated metrics responses (#2142)b1f9c7aMerge pull request #2144 from prometheus/dependabot/go_modules/exp/github.com...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)