chore(deps): update module github.com/prometheus/common to v0.67.3

[renovate[bot]]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/common	v0.62.0 -> v0.67.3

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.67.3: / 2025-11-18

Compare Source

What's Changed

• Support JWT Profile for Authorization Grant (RFC 7523 3.1) by @​JorTurFer in #​862
• Config: remove outdated comment about HTTP/2 issues by @​bboreham in #​863

New Contributors

• @​JorTurFer made their first contribution in #​862

Full Changelog: https://github.com/prometheus/common/compare/v0.67.2...v0.67.3

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

v0.66.1

Compare Source

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

• Revert "Use github.com/grafana/regexp instead of regexp" by @​aknuds1 in #​835
• Move to supported version of yaml parser by @​dims in #​834
• Revert "Use go.uber.org/atomic instead of sync/atomic (#​825)" by @​aknuds1 in #​838

Full Changelog: https://github.com/prometheus/common/compare/v1.20.99...v0.66.1

v0.66.0

Compare Source

⚠️ Breaking Changes ⚠️

• A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".

What's Changed

• model: add constants for type and unit labels. by @​bwplotka in #​801

• model.ValidationScheme: Support encoding as YAML by @​aknuds1 in #​799

• fix(promslog): always print time.Duration values as go duration strings by @​tjhop in #​798

• Add ValidationScheme methods IsValidMetricName and IsValidLabelName by @​aknuds1 in #​806

• Fix delimited proto not escaped correctly by @​thampiotr in #​809

• Decoder: Remove use of global name validation and add validation by @​ywwg in #​808

• ValidationScheme implements pflag.Value and json.Marshaler/Unmarshaler interfaces by @​juliusmh in #​807

• expfmt: Add NewTextParser function by @​aknuds1 in #​816

• Enable the godot linter by @​aknuds1 in #​821

• Enable usestdlibvars linter by @​aknuds1 in #​820

• Enable unconvert linter by @​aknuds1 in #​819

• Enable the fatcontext linter by @​aknuds1 in #​822

• Enable gocritic linter by @​aknuds1 in #​818

• Use go.uber.org/atomic instead of sync/atomic by @​aknuds1 in #​825

• Enable revive rule unused-parameter by @​aknuds1 in #​824

• Enable revive rules by @​aknuds1 in #​823

• Synchronize common files from prometheus/prometheus by @​prombot in #​802

• Synchronize common files from prometheus/prometheus by @​prombot in #​803

• Sync .golangci.yml with prometheus/prometheus by @​aknuds1 in #​817

• ci: update upload-actions by @​ywwg in #​814

• docs: fix typo in expfmt.Negotiate by @​wmcram in #​813

• build(deps): bump golang.org/x/net from 0.40.0 to 0.41.0 by @​dependabot[bot] in #​800

• build(deps): bump golang.org/x/net from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​810

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in /assets by @​dependabot[bot] in #​826

• build(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 by @​dependabot[bot] in #​830

• build(deps): bump golang.org/x/net from 0.42.0 to 0.43.0 by @​dependabot[bot] in #​829

• build(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 by @​dependabot[bot] in #​827

New Contributors

• @​aknuds1 made their first contribution in #​799
• @​thampiotr made their first contribution in #​809
• @​wmcram made their first contribution in #​813
• @​juliusmh made their first contribution in #​807

v0.65.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​789
• Remove otlptranslator package by @​ArthurSens in #​791
• feat(promslog): add Level() method to get slog.Level by @​tjhop in #​795
• feat: Support negative duration in new function ParseDurationAllowNegative by @​iamhalje in #​793

New Contributors

• @​iamhalje made their first contribution in #​793

Full Changelog: https://github.com/prometheus/common/compare/v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in #​773
• Synchronize common files from prometheus/prometheus by @​prombot in #​774
• Synchronize common files from prometheus/prometheus by @​prombot in #​775
• Update Go by @​SuperQ in #​770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in #​779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in #​777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in #​776
• promslog: Use the default timezone (again) by @​beorn7 in #​739
• Synchronize common files from prometheus/prometheus by @​prombot in #​787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in #​784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in #​785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in #​786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in #​783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in #​788

New Contributors

• @​kakkoyun made their first contribution in #​779

Full Changelog: https://github.com/prometheus/common/compare/v0.63.0...v0.64.0

v0.63.0

Compare Source

What's Changed

• Making the map a public variable for promtheus-operator by @​dongjiang1989 in #​741
• setup ossf scorecard and codeql workflows by @​mmorel-35 in #​564
• feat(promslog): implement reserved keys, rename duplicates by @​tjhop in #​746
• Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in #​750
• Bump golang.org/x/net from 0.33.0 to 0.34.0 by @​dependabot in #​749
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @​dependabot in #​751
• promslog: Make AllowedLevel concurrency safe. by @​bwplotka in #​754
• Fix typo 'the an' by @​petern48 in #​752
• Synchronize common files from prometheus/prometheus by @​prombot in #​757
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot in #​756
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot in #​761
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in #​763
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @​dependabot in #​762
• model: Clarify the purpose of model.NameValidationScheme by @​ywwg in #​765
• Fix spelling mistake in godoc by @​grobinson-grafana in #​766
• Synchronize common files from prometheus/prometheus by @​prombot in #​767
• otlptranslator: Add dependency free package that translates OTLP data into Prometheus metric/label names by @​ArthurSens in #​768

New Contributors

• @​dongjiang1989 made their first contribution in #​741
• @​petern48 made their first contribution in #​752

Full Changelog: https://github.com/prometheus/common/compare/v0.62.0...v0.63.0

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate[bot]]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 10 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22 -> 1.24.0
github.com/alecthomas/units	v0.0.0-20211218093645-b94a6e3cc137 -> v0.0.0-20240927000941-0f3dac36c52b
github.com/google/uuid	v1.3.0 -> v1.6.0
github.com/prometheus/client_model	v0.6.1 -> v0.6.2
golang.org/x/crypto	v0.32.0 -> v0.43.0
golang.org/x/net	v0.33.0 -> v0.46.0
golang.org/x/oauth2	v0.24.0 -> v0.32.0
golang.org/x/sync	v0.10.0 -> v0.17.0
golang.org/x/sys	v0.30.0 -> v0.37.0
golang.org/x/text	v0.21.0 -> v0.30.0
google.golang.org/protobuf	v1.36.5 -> v1.36.10

[sonarqubecloud[bot]]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud