fix(deps): update module github.com/prometheus/common to v0.64.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/prometheus/common	v0.62.0 -> v0.64.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in https://github.com/prometheus/common/pull/773
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/774
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/775
• Update Go by @​SuperQ in https://github.com/prometheus/common/pull/770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/common/pull/779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in https://github.com/prometheus/common/pull/777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in https://github.com/prometheus/common/pull/776
• promslog: Use the default timezone (again) by @​beorn7 in https://github.com/prometheus/common/pull/739
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in https://github.com/prometheus/common/pull/784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/prometheus/common/pull/785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in https://github.com/prometheus/common/pull/786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in https://github.com/prometheus/common/pull/783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in https://github.com/prometheus/common/pull/788

New Contributors

• @​kakkoyun made their first contribution in https://github.com/prometheus/common/pull/779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

v0.63.0

Compare Source

What's Changed

• Making the map a public variable for promtheus-operator by @​dongjiang1989 in https://github.com/prometheus/common/pull/741
• setup ossf scorecard and codeql workflows by @​mmorel-35 in https://github.com/prometheus/common/pull/564
• feat(promslog): implement reserved keys, rename duplicates by @​tjhop in https://github.com/prometheus/common/pull/746
• Bump golang.org/x/oauth2 from 0.24.0 to 0.25.0 by @​dependabot in https://github.com/prometheus/common/pull/750
• Bump golang.org/x/net from 0.33.0 to 0.34.0 by @​dependabot in https://github.com/prometheus/common/pull/749
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @​dependabot in https://github.com/prometheus/common/pull/751
• promslog: Make AllowedLevel concurrency safe. by @​bwplotka in https://github.com/prometheus/common/pull/754
• Fix typo 'the an' by @​petern48 in https://github.com/prometheus/common/pull/752
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/757
• build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @​dependabot in https://github.com/prometheus/common/pull/756
• build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @​dependabot in https://github.com/prometheus/common/pull/761
• build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @​dependabot in https://github.com/prometheus/common/pull/763
• build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 by @​dependabot in https://github.com/prometheus/common/pull/762
• model: Clarify the purpose of model.NameValidationScheme by @​ywwg in https://github.com/prometheus/common/pull/765
• Fix spelling mistake in godoc by @​grobinson-grafana in https://github.com/prometheus/common/pull/766
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/767
• otlptranslator: Add dependency free package that translates OTLP data into Prometheus metric/label names by @​ArthurSens in https://github.com/prometheus/common/pull/768

New Contributors

• @​dongjiang1989 made their first contribution in https://github.com/prometheus/common/pull/741
• @​petern48 made their first contribution in https://github.com/prometheus/common/pull/752

Full Changelog: prometheus/common@v0.62.0...v0.63.0

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[ArthurSens]

We're still blocked here: #12673

[songy23]

cannot do the upgrade for now

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 91.48%. Comparing base (2e61528) to head (bd6e741).
Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main   #13056   +/-   ##
=======================================
  Coverage   91.48%   91.48%           
=======================================
  Files         506      506           
  Lines       28557    28557           
=======================================
  Hits        26125    26125           
  Misses       1917     1917           
  Partials      515      515           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[bogdandrutu]

@songy23 do we have an issue filed in contrib to eventually fix this? We cannot block the world here, we need a path forward.

[songy23]

That's more a question to Prometheus folks. open-telemetry/opentelemetry-collector-contrib#39729 is the blocker in contrib. My guess is open-telemetry/opentelemetry-collector-contrib#40103 can help move things forward a bit

[ArthurSens]

Hey 👋 -- We had some compatibility problems that required us to upgrade the prometheus/prometheus library from 0.300. x to 0.302.x before we update prometheus/common.

Now that we've got this moving forward (open-telemetry/opentelemetry-collector-contrib#40103), I'm trying to retrigger the update in open-telemetry/opentelemetry-collector-contrib#39729, but the renovate bot is not doing its thing 😕. Could somebody retrigger it?

[ArthurSens]

This should be unblocked after open-telemetry/opentelemetry-collector-contrib#40397

[ArthurSens]

How do we re-trigger this? 😬

[songy23]

rebased, let's see if it works now 🤞

[songy23]

We may not need this PR any more since #13098 includes all the changes in this one

[songy23]

Yes, I checked #13098 includes prometheus/common so prefer #13098 then

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v0.64.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.