dependabot[bot] opened a new pull request, #16250: URL: https://github.com/apache/dubbo/pull/16250
Bumps `prometheus_metrics.version` from 1.5.1 to 1.6.1. Updates `io.prometheus:prometheus-metrics-bom` from 1.5.1 to 1.6.1 <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_java/releases";>io.prometheus:prometheus-metrics-bom's releases</a>.</em></p> <blockquote> <h2>v1.6.1</h2> <h2><a href="https://github.com/prometheus/client_java/compare/v1.6.0...v1.6.1";>1.6.1</a> (2026-04-27)</h2> <blockquote> <p>Note: With the OM2 metric-name preservation fix in this release, OpenMetrics 2.0 can now be tested. It is still in progress and not ready for general use yet.</p> </blockquote> <h3>Bug Fixes</h3> <ul> <li>Preserve original metric names in OM2 output (<a href="https://redirect.github.com/prometheus/client_java/issues/2058";>#2058</a>) (<a href="https://github.com/prometheus/client_java/commit/59a7a6d4d5a9eb31c33167764b11ba96d6625b74";>59a7a6d</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>clarify 1.6.0 release notes (<a href="https://redirect.github.com/prometheus/client_java/issues/2062";>#2062</a>) (<a href="https://github.com/prometheus/client_java/commit/9e5d591f4c2e8e0d39ce5141ac14fff057b09c67";>9e5d591</a>)</li> <li>Document semantic PR title guidance (<a href="https://redirect.github.com/prometheus/client_java/issues/2060";>#2060</a>) (<a href="https://github.com/prometheus/client_java/commit/727788942cccbecfa57d75eee9fb3e942083a95e";>7277889</a>)</li> </ul> <h2>v1.6.0</h2> <h2><a href="https://github.com/prometheus/client_java/compare/v1.5.1...v1.6.0";>1.6.0</a> (2026-04-25)</h2> <blockquote> <p>Note: OpenMetrics 2.0 support is still in progress and not ready for general use yet.</p> <p>As part of the OM2 work, metric-name suffix handling moved from metric creation time to scrape time. A positive side effect is that metric names are now more flexible across the board, for example names ending in suffixes like <code>_total</code> are accepted where they were previously rejected. To keep the Prometheus and OM1 output unambiguous, the registry tracks claimed exposition names and still rejects registrations that would collide at scrape time.</p> <table> <thead> <tr> <th>Example</th> <th>Before 1.6.0</th> <th>Since 1.6.0</th> <th>Reason</th> </tr> </thead> <tbody> <tr> <td><code>Gauge("foo_total")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because this previously failed at registration, so no working setup changes behavior, and safe because <code>_total</code> suffix expansion applies to counters, not gauges.</td> </tr> <tr> <td><code>Counter("events_total")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because the OM1 output is still <code>events_total</code>; only the builder now accepts the name.</td> </tr> <tr> <td><code>Gauge("foo_total")</code> + <code>Histogram("foo")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because this combination used to be blocked even though the exposed names do not overlap.</td> </tr> <tr> <td><code>Gauge("events_total")</code> + <code>Counter("events")</code></td> <td>Rejected</td> <td>Rejected</td> <td>Not breaking because the ambiguous OM1 output would still expose two <code>events_total</code> series.</td> </tr> <tr> <td><code>Gauge("foo_count")</code> + <code>Histogram("foo")</code></td> <td>Allowed</td> <td>Rejected</td> <td>Intentionally breaking because the old behavior could expose a conflicting <code>foo_count</code> name at scrape time.</td> </tr> </tbody> </table> </blockquote> <h3>Features</h3> <ul> <li>Relax metric name validation in Dropwizard5 (<a href="https://redirect.github.com/prometheus/client_java/issues/1985";>#1985</a>) (<a href="https://github.com/prometheus/client_java/commit/deb782f9fce60ffb1308a98b661c0a1ccb79a82b";>deb782f</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency com.google.guava:guava to v33.6.0-jre (<a href="https://redirect.github.com/prometheus/client_java/issues/2021";>#2021</a>) (<a href="https://github.com/prometheus/client_java/commit/13826930b9c2f566040a6929090ef23c94e81796";>1382693</a>)</li> <li><strong>deps:</strong> update dependency commons-io:commons-io to v2.22.0 (<a href="https://redirect.github.com/prometheus/client_java/issues/2044";>#2044</a>) (<a href="https://github.com/prometheus/client_java/commit/9e05c1d56b7b0de17ba5aaaa300eb6433cc70824";>9e05c1d</a>)</li> <li><strong>deps:</strong> update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (<a href="https://redirect.github.com/prometheus/client_java/issues/2022";>#2022</a>) (<a href="https://github.com/prometheus/client_java/commit/30ac534d860fb7c60a1e7835723a6cf0035ea7f7";>30ac534</a>)</li> <li><strong>deps:</strong> update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (<a href="https://redirect.github.com/prometheus/client_java/issues/2023";>#2023</a>) (<a href="https://github.com/prometheus/client_java/commit/2d51a3251f6943cf1b03ba9ea8778ff052f83ef9";>2d51a32</a>)</li> <li><strong>deps:</strong> update dependency io.prometheus:prometheus-metrics-bom to v1.5.1 (<a href="https://redirect.github.com/prometheus/client_java/issues/2004";>#2004</a>) (<a href="https://github.com/prometheus/client_java/commit/650ce4b677f2ca65f5877e77260e403fa85533db";>650ce4b</a>)</li> <li><strong>deps:</strong> update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.21 (<a href="https://redirect.github.com/prometheus/client_java/issues/2005";>#2005</a>) (<a href="https://github.com/prometheus/client_java/commit/7a36df7151e55adafd5bb5a72af81fd7bf8f1133";>7a36df7</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_java/blob/main/CHANGELOG.md";>io.prometheus:prometheus-metrics-bom's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/prometheus/client_java/compare/v1.6.0...v1.6.1";>1.6.1</a> (2026-04-27)</h2> <blockquote> <p>Note: With the OM2 metric-name preservation fix in this release, OpenMetrics 2.0 can now be tested. It is still in progress and not ready for general use yet.</p> </blockquote> <h3>Bug Fixes</h3> <ul> <li>Preserve original metric names in OM2 output (<a href="https://redirect.github.com/prometheus/client_java/issues/2058";>#2058</a>) (<a href="https://github.com/prometheus/client_java/commit/59a7a6d4d5a9eb31c33167764b11ba96d6625b74";>59a7a6d</a>)</li> </ul> <h3>Documentation</h3> <ul> <li>clarify 1.6.0 release notes (<a href="https://redirect.github.com/prometheus/client_java/issues/2062";>#2062</a>) (<a href="https://github.com/prometheus/client_java/commit/9e5d591f4c2e8e0d39ce5141ac14fff057b09c67";>9e5d591</a>)</li> <li>Document semantic PR title guidance (<a href="https://redirect.github.com/prometheus/client_java/issues/2060";>#2060</a>) (<a href="https://github.com/prometheus/client_java/commit/727788942cccbecfa57d75eee9fb3e942083a95e";>7277889</a>)</li> </ul> <h2><a href="https://github.com/prometheus/client_java/compare/v1.5.1...v1.6.0";>1.6.0</a> (2026-04-25)</h2> <blockquote> <p>Note: OpenMetrics 2.0 support is still in progress and not ready for general use yet.</p> <p>As part of the OM2 work, metric-name suffix handling moved from metric creation time to scrape time. A positive side effect is that metric names are now more flexible across the board, for example names ending in suffixes like <code>_total</code> are accepted where they were previously rejected. To keep the Prometheus and OM1 output unambiguous, the registry tracks claimed exposition names and still rejects registrations that would collide at scrape time.</p> <table> <thead> <tr> <th>Example</th> <th>Before 1.6.0</th> <th>Since 1.6.0</th> <th>Reason</th> </tr> </thead> <tbody> <tr> <td><code>Gauge("foo_total")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because this previously failed at registration, so no working setup changes behavior, and safe because <code>_total</code> suffix expansion applies to counters, not gauges.</td> </tr> <tr> <td><code>Counter("events_total")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because the OM1 output is still <code>events_total</code>; only the builder now accepts the name.</td> </tr> <tr> <td><code>Gauge("foo_total")</code> + <code>Histogram("foo")</code></td> <td>Rejected</td> <td>Allowed</td> <td>Not breaking because this combination used to be blocked even though the exposed names do not overlap.</td> </tr> <tr> <td><code>Gauge("events_total")</code> + <code>Counter("events")</code></td> <td>Rejected</td> <td>Rejected</td> <td>Not breaking because the ambiguous OM1 output would still expose two <code>events_total</code> series.</td> </tr> <tr> <td><code>Gauge("foo_count")</code> + <code>Histogram("foo")</code></td> <td>Allowed</td> <td>Rejected</td> <td>Intentionally breaking because the old behavior could expose a conflicting <code>foo_count</code> name at scrape time.</td> </tr> </tbody> </table> </blockquote> <h3>Features</h3> <ul> <li>Relax metric name validation in Dropwizard5 (<a href="https://redirect.github.com/prometheus/client_java/issues/1985";>#1985</a>) (<a href="https://github.com/prometheus/client_java/commit/deb782f9fce60ffb1308a98b661c0a1ccb79a82b";>deb782f</a>)</li> </ul> <h3>Bug Fixes</h3> <ul> <li><strong>deps:</strong> update dependency com.google.guava:guava to v33.6.0-jre (<a href="https://redirect.github.com/prometheus/client_java/issues/2021";>#2021</a>) (<a href="https://github.com/prometheus/client_java/commit/13826930b9c2f566040a6929090ef23c94e81796";>1382693</a>)</li> <li><strong>deps:</strong> update dependency commons-io:commons-io to v2.22.0 (<a href="https://redirect.github.com/prometheus/client_java/issues/2044";>#2044</a>) (<a href="https://github.com/prometheus/client_java/commit/9e05c1d56b7b0de17ba5aaaa300eb6433cc70824";>9e05c1d</a>)</li> <li><strong>deps:</strong> update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (<a href="https://redirect.github.com/prometheus/client_java/issues/2022";>#2022</a>) (<a href="https://github.com/prometheus/client_java/commit/30ac534d860fb7c60a1e7835723a6cf0035ea7f7";>30ac534</a>)</li> <li><strong>deps:</strong> update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (<a href="https://redirect.github.com/prometheus/client_java/issues/2023";>#2023</a>) (<a href="https://github.com/prometheus/client_java/commit/2d51a3251f6943cf1b03ba9ea8778ff052f83ef9";>2d51a32</a>)</li> <li><strong>deps:</strong> update dependency io.prometheus:prometheus-metrics-bom to v1.5.1 (<a href="https://redirect.github.com/prometheus/client_java/issues/2004";>#2004</a>) (<a href="https://github.com/prometheus/client_java/commit/650ce4b677f2ca65f5877e77260e403fa85533db";>650ce4b</a>)</li> <li><strong>deps:</strong> update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.21 (<a href="https://redirect.github.com/prometheus/client_java/issues/2005";>#2005</a>) (<a href="https://github.com/prometheus/client_java/commit/7a36df7151e55adafd5bb5a72af81fd7bf8f1133";>7a36df7</a>)</li> <li><strong>deps:</strong> update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.5 (<a href="https://redirect.github.com/prometheus/client_java/issues/2006";>#2006</a>) (<a href="https://github.com/prometheus/client_java/commit/0106c18adffd6d3e829f73979917bdf7cc5f53dd";>0106c18</a>)</li> <li><strong>deps:</strong> update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.6 (<a href="https://redirect.github.com/prometheus/client_java/issues/2046";>#2046</a>) (<a href="https://github.com/prometheus/client_java/commit/40a9db868805e36fbaa0f9ac3d02becb17104cd0";>40a9db8</a>)</li> <li><strong>deps:</strong> update jetty monorepo to v12.1.8 (<a href="https://redirect.github.com/prometheus/client_java/issues/2007";>#2007</a>) (<a href="https://github.com/prometheus/client_java/commit/acab5b213e7661818470716158b3cfe67caae9da";>acab5b2</a>)</li> <li><strong>deps:</strong> update protobuf (<a href="https://redirect.github.com/prometheus/client_java/issues/2024";>#2024</a>) (<a href="https://github.com/prometheus/client_java/commit/8e2214e0a3ac2fe8a9194d9519dcee10f6c9a694";>8e2214e</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/client_java/commit/fa68aa7789c53d54ea1783f120194a3feae7e7b8";><code>fa68aa7</code></a> chore(main): release 1.6.1 (<a href="https://redirect.github.com/prometheus/client_java/issues/2064";>#2064</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/60a1fbcdbbb825c8e2001c23e8b306199a2a4225";><code>60a1fbc</code></a> chore(main): release 1.6.1-SNAPSHOT (<a href="https://redirect.github.com/prometheus/client_java/issues/2056";>#2056</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/9e5d591f4c2e8e0d39ce5141ac14fff057b09c67";><code>9e5d591</code></a> docs: clarify 1.6.0 release notes (<a href="https://redirect.github.com/prometheus/client_java/issues/2062";>#2062</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/59a7a6d4d5a9eb31c33167764b11ba96d6625b74";><code>59a7a6d</code></a> fix: Preserve original metric names in OM2 output (<a href="https://redirect.github.com/prometheus/client_java/issues/2058";>#2058</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/3cbc6657e3367a24c709481f50f993c7113989bc";><code>3cbc665</code></a> chore: ignore internal Prometheus BOM in Renovate (<a href="https://redirect.github.com/prometheus/client_java/issues/2063";>#2063</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/727788942cccbecfa57d75eee9fb3e942083a95e";><code>7277889</code></a> docs: Document semantic PR title guidance (<a href="https://redirect.github.com/prometheus/client_java/issues/2060";>#2060</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/1dd2189f3d0e8c4fb55bc65649916592d185b552";><code>1dd2189</code></a> chore(deps): update dependency mise to v2026.4.23 (<a href="https://redirect.github.com/prometheus/client_java/issues/2053";>#2053</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/37f89a0e85453750a24661e7e4a41ec00a2fef68";><code>37f89a0</code></a> chore(deps): update dependency lychee to v0.24.1 (<a href="https://redirect.github.com/prometheus/client_java/issues/2048";>#2048</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/29e9b013d92402bebe7ed220bb3989882f7b400a";><code>29e9b01</code></a> chore: fix release workflow dispatch repo resolution (<a href="https://redirect.github.com/prometheus/client_java/issues/2057";>#2057</a>)</li> <li><a href="https://github.com/prometheus/client_java/commit/a1530df870d4b2338d4b76782d05b7f5ca05bed1";><code>a1530df</code></a> chore(main): release 1.6.0 (<a href="https://redirect.github.com/prometheus/client_java/issues/1983";>#1983</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_java/compare/v1.5.1...v1.6.1";>compare view</a></li> </ul> </details> <br /> Updates `io.prometheus:prometheus-metrics-exporter-pushgateway` from 1.5.1 to 1.6.1 Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
