search

billmcchesney1 / linkerd2

Ultralight, security-first service mesh for Kubernetes. Main repo for Linkerd 2.x.
https://linkerd.io
Apache License 2.0
0 stars 0 forks source link

chore(deps): update module github.com/prometheus/client_golang to v1.11.1 #168

Open mend-for-github-com[bot] opened 9 months ago

mend-for-github-com[bot] commented 9 months ago

This PR contains the following updates:

Package Type Update Change
github.com/prometheus/client_golang require minor v1.7.1 -> v1.11.1

By merging this PR, the below issues will be automatically resolved and closed:

Severity CVSS Score CVE GitHub Issue
High 7.5 CVE-2022-21698 #81

Release Notes

prometheus/client_golang (github.com/prometheus/client_golang) ### [`v1.11.1`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.11.1): 1.11.1 / 2022-02-15 [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.11.0...v1.11.1) - \[SECURITY FIX] promhttp: Check validity of method and code label values[https://github.com/prometheus/client_golang/pull/987](https://redirect.github.com/prometheus/client_golang/pull/987)7 (Addressed [`CVE-2022-21698`](https://redirect.github.com/prometheus/client_golang/security/advisories/GHSA-cg3q-j54f-5p7p)) #### What's Changed - promhttp: Check validity of method and code label values by [@​bwplotka](https://redirect.github.com/bwplotka) and [@​kakkoyun](https://redirect.github.com/kakkoyun) in [https://github.com/prometheus/client_golang/pull/987](https://redirect.github.com/prometheus/client_golang/pull/987) **Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.11.0...v1.11.1 ### [`v1.11.0`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.11.0): / 2021-06-07 [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.10.0...v1.11.0) - \[CHANGE] Add new collectors package. [#​862](https://redirect.github.com/prometheus/client_golang/issues/862) - \[CHANGE] `prometheus.NewExpvarCollector` is deprecated, use `collectors.NewExpvarCollector` instead. [#​862](https://redirect.github.com/prometheus/client_golang/issues/862) - \[CHANGE] `prometheus.NewGoCollector` is deprecated, use `collectors.NewGoCollector` instead. [#​862](https://redirect.github.com/prometheus/client_golang/issues/862) - \[CHANGE] `prometheus.NewBuildInfoCollector` is deprecated, use `collectors.NewBuildInfoCollector` instead. [#​862](https://redirect.github.com/prometheus/client_golang/issues/862) - \[FEATURE] Add new collector for database/sql#DBStats. [#​866](https://redirect.github.com/prometheus/client_golang/issues/866) - \[FEATURE] API client: Add exemplars API support. [#​861](https://redirect.github.com/prometheus/client_golang/issues/861) - \[ENHANCEMENT] API client: Add newer fields to Rules API. [#​855](https://redirect.github.com/prometheus/client_golang/issues/855) - \[ENHANCEMENT] API client: Add missing fields to Targets API. [#​856](https://redirect.github.com/prometheus/client_golang/issues/856) #### What's Changed - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/846](https://redirect.github.com/prometheus/client_golang/pull/846) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/849](https://redirect.github.com/prometheus/client_golang/pull/849) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/853](https://redirect.github.com/prometheus/client_golang/pull/853) - Add newer fields to Rules API by [@​gouthamve](https://redirect.github.com/gouthamve) in [https://github.com/prometheus/client_golang/pull/855](https://redirect.github.com/prometheus/client_golang/pull/855) - Add missing fields to targets API by [@​yeya24](https://redirect.github.com/yeya24) in [https://github.com/prometheus/client_golang/pull/856](https://redirect.github.com/prometheus/client_golang/pull/856) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/857](https://redirect.github.com/prometheus/client_golang/pull/857) - Add exemplars API support by [@​yeya24](https://redirect.github.com/yeya24) in [https://github.com/prometheus/client_golang/pull/861](https://redirect.github.com/prometheus/client_golang/pull/861) - Improve description of MaxAge in summary docs by [@​Dean-Coakley](https://redirect.github.com/Dean-Coakley) in [https://github.com/prometheus/client_golang/pull/864](https://redirect.github.com/prometheus/client_golang/pull/864) - Add new collectors package by [@​johejo](https://redirect.github.com/johejo) in [https://github.com/prometheus/client_golang/pull/862](https://redirect.github.com/prometheus/client_golang/pull/862) - Add collector for database/sql#DBStats by [@​johejo](https://redirect.github.com/johejo) in [https://github.com/prometheus/client_golang/pull/866](https://redirect.github.com/prometheus/client_golang/pull/866) - Make dbStatsCollector more DRY by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/867](https://redirect.github.com/prometheus/client_golang/pull/867) - Change maintainers from [@​beorn7](https://redirect.github.com/beorn7) to @​bwplotka/[@​kakkoyun](https://redirect.github.com/kakkoyun) by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/873](https://redirect.github.com/prometheus/client_golang/pull/873) - Document implications of negative observations by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/871](https://redirect.github.com/prometheus/client_golang/pull/871) - Update Go modules by [@​SuperQ](https://redirect.github.com/SuperQ) in [https://github.com/prometheus/client_golang/pull/875](https://redirect.github.com/prometheus/client_golang/pull/875) #### New Contributors - [@​gouthamve](https://redirect.github.com/gouthamve) made their first contribution in [https://github.com/prometheus/client_golang/pull/855](https://redirect.github.com/prometheus/client_golang/pull/855) **Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.10.0...v1.11.0 ### [`v1.10.0`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.10.0): 1.10.0 / 2021-03-18 [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.9.0...v1.10.0) - \[CHANGE] Minimum required Go version is now 1.13. - \[CHANGE] API client: Add matchers to `LabelNames` and `LabesValues`. [#​828](https://redirect.github.com/prometheus/client_golang/issues/828) - \[FEATURE] API client: Add buildinfo call. [#​841](https://redirect.github.com/prometheus/client_golang/issues/841) - \[BUGFIX] Fix build on riscv64. [#​833](https://redirect.github.com/prometheus/client_golang/issues/833) #### What's Changed - Add SECURITY.md by [@​roidelapluie](https://redirect.github.com/roidelapluie) in [https://github.com/prometheus/client_golang/pull/831](https://redirect.github.com/prometheus/client_golang/pull/831) - Bump prometheus/procfs to 0.3.0 to fix building on riscv64 by [@​zhsj](https://redirect.github.com/zhsj) in [https://github.com/prometheus/client_golang/pull/833](https://redirect.github.com/prometheus/client_golang/pull/833) - Fix typo in comments in [https://github.com/prometheus/client_golang/pull/835](https://redirect.github.com/prometheus/client_golang/pull/835) - Support matchers in labels API by [@​yeya24](https://redirect.github.com/yeya24) in [https://github.com/prometheus/client_golang/pull/828](https://redirect.github.com/prometheus/client_golang/pull/828) - Add buildinfo method by [@​ntk148v](https://redirect.github.com/ntk148v) in [https://github.com/prometheus/client_golang/pull/841](https://redirect.github.com/prometheus/client_golang/pull/841) - Update dependencies by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/843](https://redirect.github.com/prometheus/client_golang/pull/843) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/844](https://redirect.github.com/prometheus/client_golang/pull/844) - Cut v1.10.0 by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/845](https://redirect.github.com/prometheus/client_golang/pull/845) #### New Contributors - [@​zhsj](https://redirect.github.com/zhsj) made their first contribution in [https://github.com/prometheus/client_golang/pull/833](https://redirect.github.com/prometheus/client_golang/pull/833) - [@​ntk148v](https://redirect.github.com/ntk148v) made their first contribution in [https://github.com/prometheus/client_golang/pull/841](https://redirect.github.com/prometheus/client_golang/pull/841) **Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.9.0...v1.10.0 ### [`v1.9.0`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.9.0): 1.9.0 / 2020-12-17 [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.8.0...v1.9.0) - \[FEATURE] `NewPidFileFn` helper to create process collectors for processes whose PID is read from a file. [#​804](https://redirect.github.com/prometheus/client_golang/issues/804) - \[BUGFIX] promhttp: Prevent endless loop in `InstrumentHandler...` middlewares with invalid metric or label names. [#​823](https://redirect.github.com/prometheus/client_golang/issues/823) #### What's Changed - add the NewPidFileFn to helper by [@​sbookworm](https://redirect.github.com/sbookworm) in [https://github.com/prometheus/client_golang/pull/804](https://redirect.github.com/prometheus/client_golang/pull/804) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/809](https://redirect.github.com/prometheus/client_golang/pull/809) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/811](https://redirect.github.com/prometheus/client_golang/pull/811) - Added example api code showing how to add auth tokens and user agents to prom client. by [@​bwplotka](https://redirect.github.com/bwplotka) in [https://github.com/prometheus/client_golang/pull/817](https://redirect.github.com/prometheus/client_golang/pull/817) - Correct spelling: possibilites -> possibilities by [@​jubalh](https://redirect.github.com/jubalh) in [https://github.com/prometheus/client_golang/pull/819](https://redirect.github.com/prometheus/client_golang/pull/819) - Be more explicit about the multi-line properties of MultiError by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/821](https://redirect.github.com/prometheus/client_golang/pull/821) - promhttp: Correctly detect invalid metric and label names by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/823](https://redirect.github.com/prometheus/client_golang/pull/823) -  Cut release 1.9.0 by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/826](https://redirect.github.com/prometheus/client_golang/pull/826) #### New Contributors - [@​sbookworm](https://redirect.github.com/sbookworm) made their first contribution in [https://github.com/prometheus/client_golang/pull/804](https://redirect.github.com/prometheus/client_golang/pull/804) - [@​jubalh](https://redirect.github.com/jubalh) made their first contribution in [https://github.com/prometheus/client_golang/pull/819](https://redirect.github.com/prometheus/client_golang/pull/819) **Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.8.0...v1.9.0 ### [`v1.8.0`](https://redirect.github.com/prometheus/client_golang/releases/tag/v1.8.0): 1.8.0 / 2020-10-15 [Compare Source](https://redirect.github.com/prometheus/client_golang/compare/v1.7.1...v1.8.0) - \[CHANGE] API client: Use `time.Time` rather than `string` for timestamps in `RuntimeinfoResult`. [#​777](https://redirect.github.com/prometheus/client_golang/issues/777) - \[FEATURE] Export `MetricVec` to facilitate implementation of vectors of custom `Metric` types. [#​803](https://redirect.github.com/prometheus/client_golang/issues/803) - \[FEATURE API client: Support `/status/tsdb` endpoint. [#​773](https://redirect.github.com/prometheus/client_golang/issues/773) - \[ENHANCEMENT] API client: Enable GET fallback on status code 501. [#​802](https://redirect.github.com/prometheus/client_golang/issues/802) - \[ENHANCEMENT] Remove `Metric` references after reslicing to free up more memory. [#​784](https://redirect.github.com/prometheus/client_golang/issues/784) #### What's Changed - Add support for tsdb endpoint by [@​HimaVarsha94](https://redirect.github.com/HimaVarsha94) in [https://github.com/prometheus/client_golang/pull/773](https://redirect.github.com/prometheus/client_golang/pull/773) - Use time.Time for timestamps in Runtimeinfo by [@​mxey](https://redirect.github.com/mxey) in [https://github.com/prometheus/client_golang/pull/777](https://redirect.github.com/prometheus/client_golang/pull/777) - fix tests warning about string(int) type conversions by [@​johejo](https://redirect.github.com/johejo) in [https://github.com/prometheus/client_golang/pull/779](https://redirect.github.com/prometheus/client_golang/pull/779) - Update collector comment about GC stop-the-world by [@​roidelapluie](https://redirect.github.com/roidelapluie) in [https://github.com/prometheus/client_golang/pull/783](https://redirect.github.com/prometheus/client_golang/pull/783) - Remove reference to Metric after reslicing by [@​hummerd](https://redirect.github.com/hummerd) in [https://github.com/prometheus/client_golang/pull/784](https://redirect.github.com/prometheus/client_golang/pull/784) - Support go 1.15 by [@​roidelapluie](https://redirect.github.com/roidelapluie) in [https://github.com/prometheus/client_golang/pull/792](https://redirect.github.com/prometheus/client_golang/pull/792) - Replace with the standard library constant. by [@​johncming](https://redirect.github.com/johncming) in [https://github.com/prometheus/client_golang/pull/793](https://redirect.github.com/prometheus/client_golang/pull/793) - Synchronize common files from prometheus/prometheus by [@​prombot](https://redirect.github.com/prombot) in [https://github.com/prometheus/client_golang/pull/797](https://redirect.github.com/prometheus/client_golang/pull/797) - Remove spurious commas from links to the docs site by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/800](https://redirect.github.com/prometheus/client_golang/pull/800) - API client: Enable fallback on status code 501, too by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/802](https://redirect.github.com/prometheus/client_golang/pull/802) - Export MetricVec (again) by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/803](https://redirect.github.com/prometheus/client_golang/pull/803) - Cut v1.8.0 by [@​beorn7](https://redirect.github.com/beorn7) in [https://github.com/prometheus/client_golang/pull/806](https://redirect.github.com/prometheus/client_golang/pull/806) #### New Contributors - [@​HimaVarsha94](https://redirect.github.com/HimaVarsha94) made their first contribution in [https://github.com/prometheus/client_golang/pull/773](https://redirect.github.com/prometheus/client_golang/pull/773) - [@​mxey](https://redirect.github.com/mxey) made their first contribution in [https://github.com/prometheus/client_golang/pull/777](https://redirect.github.com/prometheus/client_golang/pull/777) - [@​hummerd](https://redirect.github.com/hummerd) made their first contribution in [https://github.com/prometheus/client_golang/pull/784](https://redirect.github.com/prometheus/client_golang/pull/784) - [@​johncming](https://redirect.github.com/johncming) made their first contribution in [https://github.com/prometheus/client_golang/pull/793](https://redirect.github.com/prometheus/client_golang/pull/793) **Full Changelog**: https://github.com/prometheus/client_golang/compare/v1.7.1...v1.8.0