chore(deps): bump github.com/prometheus/client_golang from 1.19.1 to 1.20.0 #723
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.19.1 to 1.20.0. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.20.0) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
WalkthroughThe recent updates to the Changes
Poem
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: .coderabbit.yaml
Review profile: CHILL
Files ignored due to path filters (1)
go.sumis excluded by!**/*.sum
Files selected for processing (1)
- go.mod (7 hunks)
Additional comments not posted (13)
go.mod (13)
48-48: Verify the impact of metric changes ingit.luolix.top/prometheus/client_golang.The update from
v1.19.1tov1.20.0includes the removal ofgo_memstat_lookups_totaland the addition of new metrics. Ensure that your monitoring setup is updated to reflect these changes.Verification successful
No usage of removed metric
go_memstat_lookups_totalfound.The search did not find any usage of the
go_memstat_lookups_totalmetric in the codebase, indicating that its removal in the update tov1.20.0should not impact your monitoring setup. However, please manually verify that there are no other related issues due to the update.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Check for usage of the removed metric `go_memstat_lookups_total`. # Test: Search for the removed metric in the codebase. Expect: No usage of the removed metric. rg --type go 'go_memstat_lookups_total'Length of output: 39
87-87: Verify the impact of updates incloud.google.com/go/compute/metadata.The version update from
v0.2.3tov0.3.0may include bug fixes or new features. Verify if any breaking changes affect the application.
256-256: Verify the impact of updates ingit.luolix.top/prometheus/procfs.The version update from
v0.13.0tov0.15.1may include bug fixes or new features. Verify if any breaking changes affect the application.Verification successful
No direct usage of
github.com/prometheus/procfsfound in the codebase.The dependency is marked as indirect, and no direct references were found in the codebase. This suggests that the update from
v0.13.0tov0.15.1is unlikely to have a direct impact. However, consider verifying transitive dependencies that might rely on this package to ensure no indirect issues arise.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Check for breaking changes in `github.com/prometheus/procfs`. # Test: Search for usage of `github.com/prometheus/procfs` in the codebase. Expect: No breaking changes. rg --type go 'github.com/prometheus/procfs'Length of output: 43
255-255: Verify the impact of updates ingit.luolix.top/prometheus/common.The version update from
v0.52.2tov0.55.0may include bug fixes or new features. Verify if any breaking changes affect the application.
300-300: Verify the impact of updates ingolang.org/x/sys.The version update from
v0.19.0tov0.22.0may include bug fixes or new features. Verify if any breaking changes affect the application.
296-296: Verify the impact of updates ingolang.org/x/crypto.The version update from
v0.22.0tov0.24.0may include bug fixes or new features. Verify if any breaking changes affect the application.Verification successful
No direct usage of
golang.org/x/cryptofound.The
golang.org/x/cryptopackage is not directly imported in the codebase. Since it is marked as an indirect dependency, its update fromv0.22.0tov0.24.0is unlikely to have a direct impact. However, if there are concerns about indirect usage, a manual review of dependencies might be necessary.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Check for breaking changes in `golang.org/x/crypto`. # Test: Search for usage of `golang.org/x/crypto` in the codebase. Expect: No breaking changes. rg --type go 'golang.org/x/crypto'Length of output: 34
Script:
#!/bin/bash # Description: Check for indirect dependencies or usage of `golang.org/x/crypto`. # Test: List all Go dependencies to see if `golang.org/x/crypto` is indirectly used. go list -m all | grep 'golang.org/x/crypto'Length of output: 113
Script:
#!/bin/bash # Description: Search for import statements of `golang.org/x/crypto` in Go files. # Test: Use ripgrep to find import statements of `golang.org/x/crypto` in Go files. rg --type go 'import.*golang.org/x/crypto'Length of output: 44
213-213: Verify the impact of updates ingit.luolix.top/klauspost/compress.The version update from
v1.17.7tov1.17.9may include bug fixes or new features. Verify if any breaking changes affect the application.
59-59: Verify the impact of updates ingolang.org/x/net.The version update from
v0.24.0tov0.26.0may include bug fixes or new features. Verify if any breaking changes affect the application.
301-301: Verify the impact of updates ingolang.org/x/term.The version update from
v0.19.0tov0.21.0may include bug fixes or new features. Verify if any breaking changes affect the application.
302-302: Verify the impact of updates ingolang.org/x/text.The version update from
v0.14.0tov0.16.0may include bug fixes or new features. Verify if any breaking changes affect the application.Verification successful
No direct usage of
golang.org/x/textfound in the codebase.The package
golang.org/x/textis not directly imported in the codebase, suggesting that it is used as an indirect dependency. The update fromv0.14.0tov0.16.0should not impact the codebase directly, but ensure that any indirect dependencies using it are compatible with this version.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Check for breaking changes in `golang.org/x/text`. # Test: Search for usage of `golang.org/x/text` in the codebase. Expect: No breaking changes. rg --type go 'golang.org/x/text'Length of output: 32
Script:
#!/bin/bash # Description: Find which dependencies import `golang.org/x/text`. # Test: List all Go modules in the codebase that import `golang.org/x/text`. go list -m all | grep 'golang.org/x/text'Length of output: 111
Script:
#!/bin/bash # Description: Search for import statements of `golang.org/x/text` in Go files. # Test: Find all import statements of `golang.org/x/text`. rg --type go 'import "golang.org/x/text"' -A 5Length of output: 48
298-298: Verify the impact of updates ingolang.org/x/oauth2.The version update from
v0.18.0tov0.21.0may include bug fixes or new features. Verify if any breaking changes affect the application.Verification successful
Indirect Dependency Update for
golang.org/x/oauth2The update from version
v0.18.0tov0.21.0is unlikely to impact the application directly, as it is an indirect dependency. However, reviewing the changelog or release notes for versionv0.21.0is recommended to ensure no critical changes affect other dependencies.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Check for breaking changes in `golang.org/x/oauth2`. # Test: Search for usage of `golang.org/x/oauth2` in the codebase. Expect: No breaking changes. rg --type go 'golang.org/x/oauth2'Length of output: 34
Script:
#!/bin/bash # Find which direct dependencies require `golang.org/x/oauth2`. go mod graph | grep 'golang.org/x/oauth2' # Check for recent changes in the `go.mod` file related to `golang.org/x/oauth2`. git log -p -L '/golang.org\/x\/oauth2/',/^$/ -- go.modLength of output: 221
Script:
#!/bin/bash # Search for dependencies in go.mod that might require `golang.org/x/oauth2`. grep -A 5 'require (' go.mod # Check for changes related to `golang.org/x/oauth2` in the go.mod file. git log -p go.mod | grep -A 5 'golang.org/x/oauth2'Length of output: 1026
62-62: Verify the impact of updates ingoogle.golang.org/protobuf.The version update from
v1.33.0tov1.34.2may include bug fixes or new features. Verify if any breaking changes affect the application.
304-304: Verify the impact of updates ingolang.org/x/tools.The version update from
v0.20.0tov0.21.1-0.20240508182429-e35e4ccd0d2dmay include bug fixes or new features. Verify if any breaking changes affect the application.
|
Superseded by #728. |
dependabot
bot
deleted the
dependabot/go_modules/github.com/prometheus/client_golang-1.20.0
branch
Bumps github.com/prometheus/client_golang from 1.19.1 to 1.20.0.
Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
... (truncated)
Commits
73b811cCut 1.20.0 release. (#1580)7ce5089gocollector: Attach original runtime/metrics metric name to help. (#1578)062300eRemove go_memstat_lookups_total; added runtime/metrics calculation to memstat...aa3c00dUpdate common Prometheus files (#1576)3ad2722Add default Go runtime metrics for /gc/gogc:percent, /gc/gomemlimit:bytes, /s...0715727Update common Prometheus files (#1573)3634bd9ci: daggerize test and lint pipelines (#1534)28b5e6eMerge pull request #1572 from prometheus/repo_sync8e18075Update common Prometheus files46f77a9Merge pull request #1571 from prometheus/dependabot/github_actions/github-act...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit