Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent by dependabot[bot] · Pull Request #5117 · aws/amazon-ecs-agent

dependabot · 2026-08-31T00:04:06Z

Bumps github.com/prometheus/common from 0.66.1 to 0.71.0.

Release notes

Sourced from github.com/prometheus/common's releases.

v0.71.0

What's Changed

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#957

build(deps): bump the codeql group across 1 directory with 4 updates by @dependabot[bot] in prometheus/common#955

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#958

fix: use slog.DiscardHandler in promslog.NopLogger by @FUSAKLA in prometheus/common#960

build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @dependabot[bot] in prometheus/common#956

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#959

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#961

feat: implement gauge and counter support for OpenMetrics 2.0 by @dashpole in prometheus/common#894

fix: support exemplars with empty label sets in OpenMetrics 2.0 by @dashpole in prometheus/common#965

model: sort label names without boxing them into sort.Interface by @SoloJacobs in prometheus/common#963

expfmt: fix wildcard content negotiation regression for Negotiate and NegotiateIncludingOpenMetrics by @dashpole in prometheus/common#966

expfmt: precompute parsed goautoneg.Accept for well-known Format constants by @dashpole in prometheus/common#967

expfmt: format OpenMetrics 2.0 float values and validate units by @dashpole in prometheus/common#969

fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition by @dashpole in prometheus/common#970

model: add Duration unit constants and conversion methods by @locker95 in prometheus/common#952

expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 by @dashpole in prometheus/common#971

expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version dispatch by @dashpole in prometheus/common#968

build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @dependabot[bot] in prometheus/common#977

build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @dependabot[bot] in prometheus/common#976

build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/common#975

Update dependabot config by @SuperQ in prometheus/common#978

build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in /assets by @dependabot[bot] in prometheus/common#979

New Contributors

@SoloJacobs made their first contribution in prometheus/common#963

@locker95 made their first contribution in prometheus/common#952

Full Changelog: prometheus/common@v0.70.1...v0.71.0

v0.70.1

What's Changed

Update CHANGELOG for v0.70.0 by @roidelapluie in prometheus/common#945

config: clarify sensitive redirect headers match net/http by @roidelapluie in prometheus/common#924

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#946

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/common#950

build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in prometheus/common#949

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#948

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/common#947

Full Changelog: prometheus/common@v0.70.0...v0.70.1

v0.70.0

What's Changed

config: fix TLSVersion.String() printing pointer address by @s3onghyun in prometheus/common#929

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in prometheus/common#933

Manually go mod tidy by @SuperQ in prometheus/common#934

... (truncated)

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

route: add support for the QUERY HTTP method. #932

Bugfixes

config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943

Update Go dependencies. #933 #934

Synchronize common files from prometheus/prometheus. #923 #927 #930 #937

Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

v0.69.0 / 2026-06-17

Security / behavior changes

config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921

config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

expfmt: fix nil pointer panic when parsing empty braces {}. #922

model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

model: reduce allocations in Time.UnmarshalJSON. #918

Internal

Synchronize common files from prometheus/prometheus. #917

Modernize Go. #919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.67.2 / 2025-10-28

... (truncated)

Commits

9a4aff0 build(deps): bump github.com/stretchr/testify in /assets (#979)
483bb89 Update dependabot config (#978)
d29e1ea build(deps): bump golang.org/x/net (#975)
e531bd2 build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 (#976)
bc3fc3a build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 (#977)
15e9f45 expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version d...
0acfdb3 expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 (...
eb72e27 model: add Duration unit constants and conversion methods (#952)
67b7d90 fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition (#970)
715ac36 expfmt: format OpenMetrics 2.0 float values and validate units (#969)
Additional commits viewable in compare view

singholt · 2026-09-15T14:57:30Z

@dependabot recreate

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.66.1 to 0.71.0. - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.66.1...v0.71.0) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-version: 0.70.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 31, 2026

dependabot Bot requested a review from a team as a code owner August 31, 2026 00:04

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 31, 2026

TheanLim added the bot/test label Aug 31, 2026

amazon-ecs-bot removed the bot/test label Aug 31, 2026

TheanLim changed the title ~~Bump github.com/prometheus/common from 0.66.1 to 0.70.1 in /ecs-agent~~ Bump github.com/prometheus/common from 0.66.1 to 0.70.1 in /ecs-agent and /agent Aug 31, 2026

TheanLim enabled auto-merge (squash) September 1, 2026 00:16

TheanLim previously approved these changes Sep 1, 2026

View reviewed changes

mye956 previously approved these changes Sep 1, 2026

View reviewed changes

TheanLim dismissed stale reviews from mye956 and themself via c38bfbf September 1, 2026 18:44

TheanLim force-pushed the dependabot/go_modules/ecs-agent/dev/github.com/prometheus/common-0.70.1 branch from c38bfbf to 64d5fe3 Compare September 1, 2026 18:46

TheanLim added the bot/test label Sep 1, 2026

amazon-ecs-bot removed the bot/test label Sep 1, 2026

singholt disabled auto-merge September 15, 2026 14:57

dependabot Bot changed the title ~~Bump github.com/prometheus/common from 0.66.1 to 0.70.1 in /ecs-agent and /agent~~ Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent Sep 15, 2026

dependabot Bot force-pushed the dependabot/go_modules/ecs-agent/dev/github.com/prometheus/common-0.70.1 branch from 64d5fe3 to 2b4bd1d Compare September 15, 2026 14:58

make gomod

502650a

singholt added the bot/test label Sep 15, 2026

amazon-ecs-bot removed the bot/test label Sep 15, 2026

singholt approved these changes Sep 15, 2026

View reviewed changes

singholt enabled auto-merge (rebase) September 15, 2026 17:17

prateekchaudhry approved these changes Sep 15, 2026

View reviewed changes

singholt merged commit 380bc91 into dev Sep 15, 2026
54 checks passed

dependabot Bot deleted the dependabot/go_modules/ecs-agent/dev/github.com/prometheus/common-0.70.1 branch September 15, 2026 17:29

Navigation Menu

Uh oh!

Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent - #5117

Bump github.com/prometheus/common from 0.66.1 to 0.71.0 in /ecs-agent#5117
singholt merged 2 commits into
devfrom
dependabot/go_modules/ecs-agent/dev/github.com/prometheus/common-0.70.1

dependabot Bot commented on behalf of github Aug 31, 2026 •

edited

Loading

Uh oh!

singholt commented Sep 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 31, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.71.0

What's Changed

New Contributors

v0.70.1

What's Changed

v0.70.0

What's Changed

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

Bugfixes

Internal

v0.69.0 / 2026-06-17

Security / behavior changes

Bugfixes

Performance

Internal

v0.67.2 / 2025-10-28

Uh oh!

singholt commented Sep 15, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

5 participants

dependabot Bot commented on behalf of github Aug 31, 2026 •

edited

Loading