Bump the all-go-mod-patch-and-minor group with 2 updates

[dependabot]

Bumps the all-go-mod-patch-and-minor group with 2 updates: github.com/prometheus/client_golang and github.com/zalando/skipper.

Updates github.com/prometheus/client_golang from 1.19.1 to 1.20.4

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.4

• [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623

v1.20.3

• [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

v1.20.2

• [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

v1.20.1

This release contains the critical fix for the issue. Thanks to @​geberl, @​CubicrootXYZ, @​zetaab and @​timofurrer for helping us with the investigation!

• [BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on Linux machines. #1587

v1.20.0

Thanks everyone for contributions!

⚠️ In this release we remove one (broken anyway, given Go runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT and GOMAXPROCS flags) to the default collectors.NewGoCollector() collector. Given its popular usage, expect your binary to expose two additional metric.

Changes

• [CHANGE] ⚠️ go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577
• [FEATURE] ⚠️ go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559
• [FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578
• [FEATURE] testutil: Add CollectAndFormat method. #1503
• [FEATURE] histograms: Add support for exemplars in native histograms. #1471
• [FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496
• [FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #1544
• [FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #1537
• [FEATURE] process-collectors: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #1555
• [FEATURE] promlint: Add duplicated metric lint rule. #1472
• [BUGFIX] promlint: Relax metric type in name linter rule. #1455
• [BUGFIX] promhttp: Make sure server instrumentation wrapping supports new and future extra responseWriter methods. #1480
• [BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #1424

• feat(prometheus/testutil/promlint/validations): refine lintMetricType… by @​foehammer127 in prometheus/client_golang#1455
• Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in /examples/middleware by @​dependabot in prometheus/client_golang#1457
• Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @​dependabot in prometheus/client_golang#1458
• Bump golang.org/x/sys from 0.16.0 to 0.17.0 by @​dependabot in prometheus/client_golang#1459
• Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in /tutorial/whatsup by @​dependabot in prometheus/client_golang#1461
• Merge Release 1.19 back to main by @​ArthurSens in prometheus/client_golang#1462
• Bump the github-actions group with 2 updates by @​dependabot in prometheus/client_golang#1456
• Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 by @​dependabot in prometheus/client_golang#1466
• Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /examples/middleware by @​dependabot in prometheus/client_golang#1467
• Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /tutorial/whatsup by @​dependabot in prometheus/client_golang#1469
• Add LintDuplicateMetric to promlint by @​bboreham in prometheus/client_golang#1472

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

• [BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. #1623

1.20.3 / 2024-09-05

• [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

1.20.2 / 2024-08-23

• [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

1.20.1 / 2024-08-20

• [BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on linux machines. #1587

1.20.0 / 2024-08-14

• [CHANGE] ⚠️ go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577
• [FEATURE] ⚠️ go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559
• [FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578
• [FEATURE] testutil: Add CollectAndFormat method. #1503
• [FEATURE] histograms: Add support for exemplars in native histograms. #1471
• [FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496
• [FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #1544
• [FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #1537
• [FEATURE] process-collector: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #1555
• [FEATURE] promlint: Add duplicated metric lint rule. #1472
• [BUGFIX] promlint: Relax metric type in name linter rule. #1455
• [BUGFIX] promhttp: Make sure server instrumentation wrapping supports new and future extra responseWriter methods. #1480
• [BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #1424

1.19.0 / 2024-02-27

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

• [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
• [FEATURE] collectors: Add version collector. #1422 #1427

1.18.0 / 2023-12-22

• [FEATURE] promlint: Allow creation of custom metric validations. #1311
• [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
• [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
• [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
• [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

1.17.0 / 2023-09-27

• [CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325

... (truncated)

Commits

• 05fcde9 Merge pull request #1623 from krajorama/data-race-in-histogram-write
• 209f4c0 Add changelog
• 1e398cc native histogram: Fix race between Write and addExemplar
• ef2f87e Merge pull request #1620 from prometheus/arthursens/prepare-1.20.3
• 937ac63 Add changelog entry for 1.20.3
• 6e9914d Merge pull request #1608 from krajorama/index-out-of-range-native-histogram-e...
• d6b8c89 Update comments with more explanations
• 504566f Use simplified solution from #1609 for the data race
• dc8e9a4 fix: native histogram: Simplify and fix addExemplar
• dc819ce Use a trivial solution to #1605
• Additional commits viewable in compare view

Updates github.com/zalando/skipper from 0.21.166 to 0.21.198

Release notes

Sourced from github.com/zalando/skipper's releases.

v0.21.198

Changes

opa: pass URL query parameters to OPA policy evaluation (#3207)

Improve the envoy request adapting logic to include query parameters sent in the request. This would allow the policy evaluationin opaAuthorizeRequest* and opaServeResponse* filters to make use of query parameters/values in the policy.

• Add test cases to cover multi valued query params and trailing ? in URL path

• Change the logic to build path with query params

  • Use escaped path + raw query string to build the path set in envoy request
  • Add test cases to cover few additional special cases (empty query string, space in path)

• Use req.URL.RequestURI() to set the path with query params

Multiarch Docker image

Multiarch Docker image is available in Github's docker registry:

docker run -it ghcr.io/zalando/skipper:v0.21.198 skipper --help

Docker image

Docker image is available in Zalando's Open Source registry:

docker run -it registry.opensource.zalan.do/teapot/skipper:v0.21.198 skipper --help

v0.21.197

Changes

build(deps): bump the all-go-mod-patch-and-minor group across 1 directory with 6 updates (#3224)

Bumps the all-go-mod-patch-and-minor group with 5 updates in the / directory:

Package	From	To
github.com/instana/go-sensor	1.64.0	1.65.0
github.com/prometheus/client_golang	1.20.2	1.20.3
golang.org/x/crypto	0.26.0	0.27.0
golang.org/x/net	0.28.0	0.29.0
golang.org/x/oauth2	0.22.0	0.23.0

... (truncated)

Commits

• 7cb3dc2 opa: pass URL query parameters to OPA policy evaluation (#3207)
• bd87e31 build(deps): bump the all-go-mod-patch-and-minor group across 1 directory wit...
• 04972ff docs: fix HeaderRegexp example (#3222)
• 4460a02 build(deps): bump alpine from 0a4eaa0 to beefdbd in /packaging (#3218)
• 04149c5 build(deps): bump oss-fuzz-base/base-builder-go in /.clusterfuzzlite (#3219)
• 00bcc0b build(deps): bump amazonlinux from 171fe68 to 03b3981 in /fuzz (#3220)
• d3e3756 fallback to env variable for oidc,oauth2 client id and secret (#3217)
• 5dae8c8 build(deps): bump actions/upload-artifact from 4.3.6 to 4.4.0 (#3213)
• e1656ba build(deps): bump oss-fuzz-base/base-builder-go in /.clusterfuzzlite (#3212)
• 2968226 build(deps): bump actions/setup-python from 5.1.1 to 5.2.0 (#3214)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are no longer updatable, so this is no longer needed.