fix(deps): update bump-dependencies by renovate[bot] · Pull Request #6 · libops/cap

renovate · 2026-03-25T02:09:22Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/GoogleCloudPlatform/prometheus-engine	`v0.8.0` → `v0.17.2`
github.com/prometheus/prometheus	`v0.41.0` → `v0.310.0`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

GoogleCloudPlatform/prometheus-engine (github.com/GoogleCloudPlatform/prometheus-engine)

`v0.17.2`

Compare Source

`v0.17.0`

Compare Source

We have just released version v0.17.0 of our managed collection for Kubernetes and v2.53.5-gmp.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.34 or newer. Self-deployed collection users should upgrade their binaries to use v2.53.5-gmp.0-gke.13.

Changes in managed collection v0.17.0:

[FEATURE] VPA is now expanded to all GMP components (b8427b45e).
[FEATURE] Added the --grafana-api-token-filepath flag to the datasource-syncer (85e3bc5d0).
[FEATURE] Added log level flags to the frontend and rule-evaluator (ea0e58aa2, 4a68fa476).
[FEATURE] Added /api/v1/status/buildinfo endpoint for Grafana compatibility (16440f14a).
[FEATURE] Webhook validation is now performed using CEL expressions (bc5cd97bc, ef84205e6, adeb41d19, e700f5a1e, 00200bcea, fd42d6434, 40af9fb7b, d4edf985e, 99aa5116f).
[ENHANCEMENT] Upgraded to Prometheus v2.53.5 (ff932eec2, 4a32e4be4, 719d6e36b, a79ab1562).
[ENHANCEMENT] Updated various dependencies, including Kubernetes APIs and client libraries, to their latest versions (f4a0f0b24, ecdf31c26, 64300fb03, 7c4bab33c, 71142b9c5, 1da3e4b90, 5635c20d3).
[BUGFIX] Fixed an issue where the operator did not propagate the correct compression for collection (c60d3bbd5).
[BUGFIX] Fixed an issue where endpoint statuses were not cleared for PodMonitoring without endpoints (903f7ecd5, a342d9b79).
[BUGFIX] Fixed a typo in Dockerfiles for TARGETARCH (f4579b120).
[BUGFIX] Fixed an issue where podmonitorings were not defaulted correctly (8bd22c64b).
[BUGFIX] Fixed an issue where the collector config was exported with an empty string (c8695de5d, 3190e05e3).
[BUGFIX] Fixed an issue where the frontend version was invalid (e2cd07628).
[BUGFIX] Fixed an issue where the frompod source label was not validated (d5ed65858).
[BUGFIX] Fixed an issue where rule name patterns were incorrect (6abd2625b).
[BUGFIX] Fixed an issue where gke-managed-component nodes were not tolerated (5fe14e06d).
[SECURITY] Updated Go version to 1.24.1 to include the latest security patches (d65df00de, a6e7572f4, cf6fe7124, bcfe05caa, 2a523aded, cd4a76836, 4349fa7a4).
[SECURITY] Updated Docker base images to include the latest security patches (f4a0f0b24, a58a8ef4a, 10c5314b0, 88ace122a, ef6fa4ad7, b62d0b63e, 341340a63, bc98998a7, 7d50e0159).
[SECURITY] Addressed vulnerabilities by bumping libc and other dependencies (3aa0c2858, 0cb26d856, f98d068a2).

`v0.15.3`

Compare Source

`v0.15.1`

Compare Source

We have just released version v0.15.1 of our managed collection for Kubernetes and v2.45.3-gmp.10-gke.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.32 or newer. Self-deployed collection users should upgrade their binaries to use v2.45.3-gmp.10-gke.0.

Changes in managed collection v0.15.1 (compared to 0.14.0):

[SECURITY] Upgraded Go dependencies.
[ENHANCEMENT] Switched to Google maintained google-go.pkg.dev/golang images for building Go code.
[ENHANCEMENT] By default operator configures collection relabelling to add top_level_controller and top_level_controller_type labels that tracks the controller type and name for pod workloads. For example a pod from the deployment dpl-foo should have top_level_controller="dpl-foo", top_level_controller_type="Deployment" labels added to all metrics.

Changes in self-deployed collection v2.45.3-gmp.10-gke.0:

[SECURITY] Upgraded Go and UI dependencies.

`v0.14.1`

Compare Source

`v0.14.0`

Compare Source

We have just released version v0.14.0 of our managed collection for Kubernetes and v2.45.3-gmp.9-gke.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.31 or newer. Self-deployed collection users should upgrade their binaries to use v2.45.3-gmp.9-gke.0.

Changes in managed collection v0.14.0:

[SECURITY] Use scale subresource to update replica counts.
[SECURITY] Do not automount initcontainer service account token in Managed Alertmanager.
[SECURITY] Remove operator RBAC permissions to update managed collector, rule-evaluator, and alertmanager deployments.
[ENHANCEMENT] Add mdox formating and binary flag doc autogen for better READMEs for our binaries.
[ENHANCEMENT] Prevent collector pod restarts on startup.
[ENHANCEMENT] Default OperatorConfig's external labels for project_id, location, and cluster from values passed to or auto-discovered by the operator to be explicit about relabeling.
[ENHANCEMENT] Default to Google Cloud links for Alerts in Managed Alertmanager.
[ENHANCEMENT] Allow updating collector, rule-evaluator, and alertmanager options at runtime.
[ENHANCEMENT] Add samples sent error counter gcm_export_samples_sent_errors_total when encountering errors on export.
[ENHANCEMENT] Allow GRAFANA_SERVICE_ACCOUNT_TOKEN environment variable for datasource-syncer
[ENHANCEMENT] Use protobuf encoding for core K8s API communication
[BUGFIX] cadvisor and kubelet ClusterNodeMonitoring examples regex fix.

Changes in self-deployed collection v2.45.3-gmp.9-gke.0:

[ENHANCEMENT] Google Cloud settings can now be configured via the config file. This allows operators to update Prometheus without needing DaemonSet PATCH/UPDATE RBAC permissions.

EDIT(June 2025): breaking change We accidently turned off operatorconfig.collection.filter feature and decided to deprecate and remove this feature going forward (details). See the https://cloud.google.com/stackdriver/docs/managed-prometheus/setup-managed#filter-metrics for the alternatives to use instead. Apologies for any inconvenience, we will make our best to catch those breakage before release.

`v0.13.1`

Compare Source

We have just released version v0.13.1 of our managed collection for Kubernetes.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.30 or newer.

Changes in managed collection v0.13.1:

[BUGFIX] Fix an issue where target status reporting errors when parsing ClusterNodeMonitoring configs for cadvisor and kubelet scraping.

`v0.13.0`

Compare Source

We have just released version v0.13.0 of our managed collection for Kubernetes and v2.45.3-gmp.9 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.31 or newer. Self-deployed collection users should upgrade their binaries to use v2.45.3-gmp.9.

Changes in managed collection v0.13.0:

[FEATURE] Vertifical Pod Autoscaling (VPA) can now be enabled via OperatorConfig.
[ENHANCEMENT] Collectors now skip WAL playback on startup, which can avoid slow startup and crashloop issues.
[ENHANCEMENT] Webhooks are now optional. In this case, the operator now performs validation and updates the status subresources in the reconcile loop.
[ENHANCEMENT] Add status field to Rules, ClusterRules, and GlobalRules to inform whether a successful configuration was generated or not.
[ENHANCEMENT] ClusterNodeMonitoring now supports insecure-skip-verify, achieving full feature parity with the existing Kubelet scraping configuration.
[ENHANCEMENT] The collector and rule-evaluator can now start up without previously flags if there is no configuration to parse.
[SECURITY] Use readOnlyRootFilesystem where possible to mitigate attack vectors.
[SECURITY] Disable automountServiceAccountToken for the alertmanager, which does not use the K8s API.
[BUGFIX] Fix ARM64 builds by using upstream go bas image.
[BUGFIX] Allow datasource-syncer manifest to run on ARM64 nodes.
[BUGFIX] Use the shard count value instead of batch size when handling sample export.

`v0.12.1`

Compare Source

We have just released version v0.12.1 of our managed collection for Kubernetes and v2.45.3-gmp.7 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.29 or newer. Self-deployed collection users should upgrade their binaries to use v2.45.3-gmp.7.

Changes in managed collection v0.12.1:

[ENHANCEMENT] Use Docker image tags in manifests.
[BUGFIX] Use proper regex for ClusterNodeMonitoring example to collect kubelet and cadvisor metrics.

`v0.12.0`

We have just released version v0.12.0 of our managed collection for Kubernetes and v2.45.3-gmp.7-rc.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.28 or newer. Self-deployed collection users should upgrade their binaries to use v2.45.3-gmp.7-rc.0.

Changes in managed collection v0.12.0:

[ENHANCEMENT] Added support for specifying a remote write URL.
[ENHANCEMENT] Enabled Boringcrypto.
[ENHANCEMENT] Added support for compression for Rules resources.
[ENHANCEMENT] Added the ability to reference BasicAuth passwords used to authenticate against scrape endpoints.
[ENHANCEMENT] Added the ability to reference Authentication credentials used to authenticate against scrape endpoints.
[ENHANCEMENT] Added the ability to reference OAuth client secrets used to authenticate against scrape endpoints.
[ENHANCEMENT] Added the ability to reference TLS certificates used to authenticate against scrape endpoints.
[ENHANCEMENT] The operator now supports healthz and readyz endpoints.
[BUGFIX] Config reloader is more resiliant against errors.

`v0.10.0`

Compare Source

We have just released version v0.10.0 of our managed collection for Kubernetes and prometheus:v2.43.1-gmp.0-gke.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation. Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.27 or newer. Self-deployed collection users should upgrade their binaries to use gke.gcr.io/prometheus-engine/prometheus:v2.43.1-gmp.0-gke.0.

Changes in managed collection v0.10.0:

[ENHANCEMENT] Introduced the datasource-syncer as a preferred way to authorize Grafana for querying, replacing the frontend binary.
- [ENHANCEMENT] Added mTLS parameters for datasource-syncer.
[ENHANCEMENT] Added mTLS settings (excluding certificates) for scrape configurations.
[ENHANCEMENT] Removed some unused RBAC permissions.
[ENHANCEMENT] Managed Rule-evaluator and Alertmanager now scale down when no rules or alerts are configured.
[ENHANCEMENT] Added BasicAuth Username setting for scrape endpoints (password coming soon)
[ENHANCEMENT] Added Authorization Header Scheme setting for scrape endpoints (credentials coming soon)
[ENHANCEMENT] Added OAuth 2 settings (excluding client secrets) for scrape endpoints
[ENHANCEMENT] Add support for web.external-url for managed alertmanager
[SECURITY] Reduce RBAC permissions of components

`v0.8.2`

Compare Source

We have just released version v0.8.2 of our managed collection for Kubernetes and prometheus:v2.41.0-gmp.9-gke.0 of self-deployed collection.

Users who deploy managed collection using kubectl should reapply the manifests in the documentation.

Users who deploy the service using gcloud or the GKE UI are being upgraded on clusters running version 1.25 or newer.

Self-deployed collection users should upgrade their binaries to use gke.gcr.io/prometheus-engine/prometheus:v2.41.0-gmp.9-gke.0.

Changes in managed collection v0.8.2:

[SECURITY] Build images using go 1.20.12 to mitigate CVE-2023-45285 and CVE-2023-39326 vulnerabilities.

prometheus/prometheus (github.com/prometheus/prometheus)

Configuration

📅 Schedule: Branch creation - Only on Wednesday ( * * * * 3 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-03-25T02:09:23Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/GoogleCloudPlatform/prometheus-engine v0.17.2
go: downloading github.com/go-kit/log v0.2.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/prometheus/prometheus v0.310.0
go: downloading github.com/go-logfmt/logfmt v0.6.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/prometheus/procfs v0.19.2
go: downloading golang.org/x/sys v0.40.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b
go: downloading github.com/grafana/regexp v0.0.0-20250905093917-f7b3be9d1853
go: downloading github.com/prometheus/client_golang/exp v0.0.0-20260108101519-fb0838f53562
go: downloading github.com/prometheus/otlptranslator v1.0.0
go: downloading github.com/prometheus/sigv4 v0.4.1
go: downloading go.yaml.in/yaml/v2 v2.4.3
go: downloading golang.org/x/text v0.33.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/dennwc/varint v1.0.0
go: downloading go.uber.org/atomic v1.11.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/klauspost/compress v1.18.3
go: downloading github.com/golang-jwt/jwt/v5 v5.3.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
go: downloading golang.org/x/net v0.49.0
go: downloading golang.org/x/oauth2 v0.34.0
go: downloading k8s.io/client-go v0.35.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1
go: downloading google.golang.org/api v0.265.0
go: downloading github.com/aws/aws-sdk-go-v2 v1.41.1
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.7
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.7
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.41.6
go: downloading github.com/jpillora/backoff v1.0.0
go: downloading golang.org/x/time v0.14.0
go: downloading k8s.io/apimachinery v0.35.0
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading k8s.io/klog v1.0.0
go: downloading k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2
go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0
go: downloading golang.org/x/crypto v0.47.0
go: downloading cloud.google.com/go/compute/metadata v0.9.0
go: downloading cloud.google.com/go/auth v0.18.1
go: downloading google.golang.org/grpc v1.78.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.8
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.65.0
go: downloading github.com/aws/smithy-go v1.24.0
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.17
go: downloading github.com/aws/aws-sdk-go-v2/internal/ini v1.8.4
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.0.5
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.30.9
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.13
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.17
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.4
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.17
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
go: downloading github.com/googleapis/gax-go/v2 v2.16.0
go: downloading github.com/google/s2a-go v0.1.9
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/otel v1.40.0
go: downloading go.opentelemetry.io/otel/metric v1.40.0
go: downloading go.opentelemetry.io/otel/trace v1.40.0
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.11
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.17
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409
go: downloading google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: github.com/libops/cap/scraper imports
	github.com/GoogleCloudPlatform/prometheus-engine/pkg/export: cannot find module providing package github.com/GoogleCloudPlatform/prometheus-engine/pkg/export

fix(deps): update bump-dependencies

53af7ed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update bump-dependencies#6

fix(deps): update bump-dependencies#6
renovate[bot] wants to merge 1 commit intomainfrom
renovate.bump-dependencies

renovate bot commented Mar 25, 2026

Uh oh!

renovate bot commented Mar 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate bot commented Mar 25, 2026

Release Notes

Configuration

Uh oh!

renovate bot commented Mar 25, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants