Skip to content

build(deps): bump github.com/prometheus/common from 0.72.1 to 0.73.1 - #643

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/prometheus/common-0.73.1
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/prometheus/common-0.73.1

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/prometheus/common from 0.72.1 to 0.73.1.

Release notes

Sourced from github.com/prometheus/common's releases.

v0.73.1

What's Changed

Full Changelog: prometheus/common@v0.73.0...v0.73.1

v0.73.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.72.1...v0.73.0

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

Commits
  • d92d839 build(deps): bump github.com/pandatix/go-abnf from 0.5.1 to 0.5.3 (#1027)
  • 983d509 expfmt: add ABNF-based OpenMetrics 1.0 parser (#1015)
  • 220c51a expfmt: add FmtOpenMetrics_2_0_0_rc format constant (#1020)
  • 25bdf5c expfmt: default to allow-utf-8 escaping for OpenMetrics 2.0 (#1008)
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.72.1 to 0.73.1.
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.72.1...v0.73.1)

---
updated-dependencies:
- dependency-name: github.com/prometheus/common
  dependency-version: 0.73.1
  dependency-type: indirect
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 2, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner November 2, 2026 16:24
@coderabbitai

coderabbitai Bot commented Nov 2, 2026 •

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review.

Recent review info
Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: Organization UI
  • Review profile: CHILL
  • Plan: Enterprise
  • Run ID: 87db2da5-44c9-48a2-adfc-4ae350aeb672
Commits

Reviewing files that changed from the base of the PR and between ff33824 and f91a00b.

Files ignored due to path filters: 1
  • go.sum is excluded by !**/*.sum
Files selected for processing: 1
  • go.mod

Included review availability: This review used your included allowance. Your plan provides up to 12 included reviews per hour; 8 remain after this review.

Walkthrough

The Go module manifest adds github.com/pandatix/go-abnf v0.5.3 as an indirect dependency and updates the indirect github.com/prometheus/common dependency from v0.72.1 to v0.73.1.

Changes

Module dependencies

Layer / File(s) Summary
Update indirect dependencies
go.mod
Adds github.com/pandatix/go-abnf v0.5.3 and updates github.com/prometheus/common to v0.73.1.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: eqrx

Merge Risk: Minimal · up to f91a0

The dependency update is ready to merge with normal checks.

Pre-merge checks: Passed 4 · Failed 1

Failed Failed checks: 1 warning

Check name Status Explanation Resolution
Description check Warning The description is almost entirely Dependabot-generated release notes, changelog excerpts, commit lists, and Dependabot command help. It does not follow the repository template. It has no Summary sect… Add the template sections. Include a Summary that explains the bump, the reason for it, and any impact on the code. Select one Change Type. Mark the Check List items that apply, or state why they do not. Add any relevant details under Addit…
Passed Passed checks: 4 passed
Check name Status Explanation
Title check Passed The title names the main change: a Dependabot bump of github.com/prometheus/common from 0.72.1 to 0.73.1. The raw summary confirms go.mod updates this version. The title follows the conventional build…
Docstring Coverage Passed No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentat…
Linked Issues check Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check Passed Check skipped because no linked issues were found for this pull request.
Full details: Title check

Explanation

The title names the main change: a Dependabot bump of github.com/prometheus/common from 0.72.1 to 0.73.1. The raw summary confirms go.mod updates this version. The title follows the conventional build(deps) format and is specific, so it passes.

Full details: Docstring Coverage

Explanation

No eligible functions found in the changed files. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff with cyclomatic complexity of at least 2. Documentation-only edits and deletions within surviving functions are included; unchanged diff context and fully deleted functions are excluded. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Description check

Explanation

The description is almost entirely Dependabot-generated release notes, changelog excerpts, commit lists, and Dependabot command help. It does not follow the repository template. It has no Summary section with a description of what the PR accomplishes, no Change Type selection (Breaking Change, New Feature, Bug Fix, or Docs/Test), no Check List items marked, and no Additional Information section. It also does not state whether the change was tested or whether documentation was updated. The bump itself is described only in auto-generated text.

Resolution

Add the template sections. Include a Summary that explains the bump, the reason for it, and any impact on the code. Select one Change Type. Mark the Check List items that apply, or state why they do not. Add any relevant details under Additional Information, such as whether the go-abnf update or the new OpenMetrics parser affects this repository. Remove or shorten the generated release notes if they are not needed.

Finishing Touches
Generate unit tests (beta)
  • Commit to this branch
  • Create a new PR

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants