Update module github.com/prometheus/common to v0.69.0 #30

Merged

Doridian merged 1 commit from renovate/github.com-prometheus-common-0.x into main

2026-06-18 14:12:58 -07:00

MaidFox commented

2026-06-18 14:11:59 -07:00

Member

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/common	`v0.68.1` → `v0.69.0`

Release Notes

prometheus/common (github.com/prometheus/common)

`v0.69.0`

Compare Source

Security / behavior changes

config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921
config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

expfmt: fix nil pointer panic when parsing empty braces {}. #922
model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

model: reduce allocations in Time.UnmarshalJSON. #918

Internal

Synchronize common files from prometheus/prometheus. #917
Modernize Go. #919

Full Changelog: https://github.com/prometheus/common/compare/v0.68.1...v0.69.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/prometheus/common](https://github.com/prometheus/common) | `v0.68.1` → `v0.69.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fcommon/v0.69.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fcommon/v0.68.1/v0.69.0?slim=true) | --- ### Release Notes <details> <summary>prometheus/common (github.com/prometheus/common)</summary> ### [`v0.69.0`](https://github.com/prometheus/common/blob/HEAD/CHANGELOG.md#v0690--2026-06-17) [Compare Source](https://github.com/prometheus/common/compare/v0.68.1...v0.69.0) ##### Security / behavior changes - **config: credentials are no longer forwarded across cross-host redirects.** When `FollowRedirects` is enabled, the HTTP client now strips `Authorization`, `Cookie`, `Proxy-Authorization` and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's `net/http` behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. [#901](https://github.com/prometheus/common/issues/901) [#920](https://github.com/prometheus/common/issues/920) [#921](https://github.com/prometheus/common/issues/921) - config: `LoadHTTPConfigFile` now resolves relative file paths (e.g. `*_file` credentials, `http_headers` files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. [#925](https://github.com/prometheus/common/issues/925) ##### Bugfixes - expfmt: fix nil pointer panic when parsing empty braces `{}`. [#922](https://github.com/prometheus/common/issues/922) - model: fix `Time.UnmarshalJSON` for larger negative numbers. [#918](https://github.com/prometheus/common/issues/918) ##### Performance - model: reduce allocations in `Time.UnmarshalJSON`. [#918](https://github.com/prometheus/common/issues/918) ##### Internal - Synchronize common files from prometheus/prometheus. [#917](https://github.com/prometheus/common/issues/917) - Modernize Go. [#919](https://github.com/prometheus/common/issues/919) **Full Changelog**: <https://github.com/prometheus/common/compare/v0.68.1...v0.69.0> </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://github.com/renovatebot/renovate).

MaidFox added 1 commit

2026-06-18 14:11:59 -07:00

Update module github.com/prometheus/common to v0.69.0

Nix check / check-nix (pull_request) Successful in 1m45s

Details

Docker check and push / release (pull_request) Successful in 1m57s

Details

Go check / check-go (pull_request) Successful in 1m57s

Details

1eeb786480