Skip to content

chore(deps): bump github.com/prometheus/common from 0.67.5 to 0.68.0#701

Merged
vdice merged 1 commit into
mainfrom
dependabot/go_modules/github.com/prometheus/common-0.68.0
Jun 1, 2026
Merged

chore(deps): bump github.com/prometheus/common from 0.67.5 to 0.68.0#701
vdice merged 1 commit into
mainfrom
dependabot/go_modules/github.com/prometheus/common-0.68.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 1, 2026

Bumps github.com/prometheus/common from 0.67.5 to 0.68.0.

Release notes

Sourced from github.com/prometheus/common's releases.

v0.68.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.5...v0.68.0

Commits
  • 1e0ae83 config: apply DialContextFunc to OAuth2 token-fetch transport (#911)
  • b51d01b Remove CircleCI (#910)
  • 0f3c348 Merge pull request #908 from machine424/ttlsco
  • 732a9cf fix(http_config): fix client cert rotation when no CA is configured
  • ce9215c Move interface assertions to a test file (#839)
  • 1ba5ed7 build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 (#892)
  • 8f8ada6 build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 (#891)
  • 5bf00a4 build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 (#890)
  • a4fac5c config: guard against nil oauth2 credential in RoundTrip (#897)
  • 9e28363 Merge pull request #898 from alliasgher/fix/NewOAuth2RoundTripper-exported-op...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.67.5 to 0.68.0.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.67.5...v0.68.0)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area/dependencies Pull requests that update a dependency file label Jun 1, 2026
@github-actions
Copy link
Copy Markdown

github-actions Bot commented Jun 1, 2026

Dependency Review

The following issues were found:
  • ✅ 0 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ⚠️ 1 package(s) with unknown licenses.
See the Details below.

License Issues

go.mod

PackageVersionLicenseIssue Type
github.com/prometheus/common0.68.0NullUnknown License
Allowed Licenses: Apache-2.0, BSD-2-Clause, BSD-3-Clause, BSL-1.0, CC0-1.0, ISC, MIT, MPL-2.0, Unlicense, LicenseRef-scancode-google-patent-license-golang

OpenSSF Scorecard

PackageVersionScoreDetails
gomod/github.com/prometheus/common 0.68.0 UnknownUnknown
gomod/go.yaml.in/yaml/v2 2.4.4 UnknownUnknown
gomod/golang.org/x/oauth2 0.36.0 UnknownUnknown

Scanned Files

  • go.mod

@vdice vdice merged commit 541bb82 into main Jun 1, 2026
14 checks passed
@vdice vdice deleted the dependabot/go_modules/github.com/prometheus/common-0.68.0 branch June 1, 2026 14:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant