Renovate: Update External dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/prometheus/common	v0.70.1 → v0.72.0
github.com/rabbitmq/amqp091-go	v1.14.0 → v1.15.0
go.xyrillian.de/gg	v1.16.0 → v1.17.0

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.72.0

Compare Source

NOTE:

• This release bumps go.mod to 1.26 -- mostly due to /x Go packages requiring 1.26 as well.
• This is the first release with the experimental support of OpenMetrics 2 encoding.

What's Changed

• build(deps): bump the codeql group with 4 updates by @​dependabot[bot] in #​980
• feat: implement histogram and gauge histogram support for OpenMetrics 2.0 by @​dashpole in #​964
• chore: Update gofumpt config and apply new formatting by @​dongjiang1989 in #​987
• expfmt: reject nameless samples after metric metadata by @​roidelapluie in #​988
• feat: implement summary support for OpenMetrics 2.0 by @​dashpole in #​983
• docs(expfmt): update OpenMetrics 2.0 supported metric types comments by @​dashpole in #​989
• optimize sample unmarshaling for json/v2 by @​liggitt in #​991
• expfmt: simplify format constants and provide default negotiation slices by @​bwplotka in #​992
• expfmt: reject invalid UTF-8 and a trailing CR in OpenMetrics 2.0 metadata by @​Rohilalala in #​998
• expfmt: stop a test leaving the shared parser on legacy validation by @​Rohilalala in #​996
• build(deps): bump github.com/prometheus/client_model from 0.6.2 to 0.6.3 in the prometheus group across 1 directory by @​dependabot[bot] in #​1001
• chore: Update linting by @​SuperQ in #​1002
• Synchronize common files from prometheus/prometheus by @​prombot in #​1003
• Update supported Go versions by @​SuperQ in #​1004
• build(deps): bump the golang-org-x group across 1 directory with 2 updates by @​dependabot[bot] in #​1000

New Contributors

• @​liggitt made their first contribution in #​991
• @​Rohilalala made their first contribution in #​998

Full Changelog: prometheus/common@v0.71.0...v0.72.0

v0.71.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​957
• build(deps): bump the codeql group across 1 directory with 4 updates by @​dependabot[bot] in #​955
• Synchronize common files from prometheus/prometheus by @​prombot in #​958
• fix: use slog.DiscardHandler in promslog.NopLogger by @​FUSAKLA in #​960
• build(deps): bump ossf/scorecard-action from 2.4.3 to 2.4.4 by @​dependabot[bot] in #​956
• Synchronize common files from prometheus/prometheus by @​prombot in #​959
• Synchronize common files from prometheus/prometheus by @​prombot in #​961
• feat: implement gauge and counter support for OpenMetrics 2.0 by @​dashpole in #​894
• fix: support exemplars with empty label sets in OpenMetrics 2.0 by @​dashpole in #​965
• model: sort label names without boxing them into sort.Interface by @​SoloJacobs in #​963
• expfmt: fix wildcard content negotiation regression for Negotiate and NegotiateIncludingOpenMetrics by @​dashpole in #​966
• expfmt: precompute parsed goautoneg.Accept for well-known Format constants by @​dashpole in #​967
• expfmt: format OpenMetrics 2.0 float values and validate units by @​dashpole in #​969
• fix: drop invalid OpenMetrics 2.0 exemplars instead of failing exposition by @​dashpole in #​970
• model: add Duration unit constants and conversion methods by @​locker95 in #​952
• expfmt: prevent st@ leaking to Gauge and Untyped samples in OpenMetrics 2.0 by @​dashpole in #​971
• expfmt: fix OpenMetrics 2.0 decoder error, format docs, and encoder version dispatch by @​dashpole in #​968
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 by @​dependabot[bot] in #​977
• build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12 by @​dependabot[bot] in #​976
• build(deps): bump golang.org/x/net from 0.57.0 to 0.58.0 in the golang-org-x group across 1 directory by @​dependabot[bot] in #​975
• Update dependabot config by @​SuperQ in #​978
• build(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.1 in /assets by @​dependabot[bot] in #​979

New Contributors

• @​SoloJacobs made their first contribution in #​963
• @​locker95 made their first contribution in #​952

Full Changelog: prometheus/common@v0.70.1...v0.71.0

rabbitmq/amqp091-go (github.com/rabbitmq/amqp091-go)

v1.15.0

Compare Source

Full Changelog

Fixed bugs:

• fix: preserve caller-provided SASL credentials across Reconnect() #​389 (suchitd)
• fix: clone SASL authentication before zeroing credentials post-handshake #​388 (suchitd)

Closed issues:

• v1.13.0 (#​350) zeroes caller-provided PlainAuth.Password, breaking auth on any reconnect that reuses the Config #​387

Merged pull requests:

• chore(deps): bump github/codeql-action from 4.37.8 to 4.37.9 in the github-actions group #​390 (dependabot[bot])
• chore(deps): bump github/codeql-action from 4.37.7 to 4.37.8 in the github-actions group #​386 (dependabot[bot])
• chore(deps): bump github/codeql-action from 4.37.6 to 4.37.7 in the github-actions group #​385 (dependabot[bot])

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 8am on Thursday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 2 additional dependencies were updated

Details:

Package	Change
github.com/prometheus/client_model	v0.6.2 -> v0.6.3
google.golang.org/protobuf	v1.36.11 -> v1.36.12

[majewsky]

Do not approve before Go 1.27.2. The protobuf update triggers golang/go#81353 downstream.