chore(deps): update module github.com/prometheus/common to v0.68.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/common	v0.67.5 → v0.68.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.68.0

Compare Source

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in #​873
• Synchronize common files from prometheus/prometheus by @​prombot in #​874
• build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 by @​dependabot[bot] in #​879
• build(deps): bump golang.org/x/net from 0.48.0 to 0.49.0 by @​dependabot[bot] in #​878
• Synchronize common files from prometheus/prometheus by @​prombot in #​875
• Synchronize common files from prometheus/prometheus by @​prombot in #​880
• Remove logic adding unit to metrics name by @​vesari in #​877
• Synchronize common files from prometheus/prometheus by @​prombot in #​881
• Update for Go 1.26 by @​SuperQ in #​883
• build(deps): bump golang.org/x/net from 0.49.0 to 0.51.0 by @​dependabot[bot] in #​882
• version: Add a slog helper by @​SuperQ in #​886
• Remove Arthur from maintainers list by @​ArthurSens in #​885
• Synchronize common files from prometheus/prometheus by @​prombot in #​895
• Synchronize common files from prometheus/prometheus by @​prombot in #​896
• config: change NewOAuth2RoundTripper to accept variadic HTTPClientOption by @​alliasgher in #​898
• config: guard against nil oauth2 credential in RoundTrip by @​alliasgher in #​897
• build(deps): bump golang.org/x/net from 0.51.0 to 0.52.0 by @​dependabot[bot] in #​890
• build(deps): bump go.yaml.in/yaml/v2 from 2.4.3 to 2.4.4 by @​dependabot[bot] in #​891
• build(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.36.0 by @​dependabot[bot] in #​892
• Move interface assertions to a test file by @​msiegen in #​839
• fix(http_config): fix client cert rotation when no CA is configured by @​machine424 in #​908
• Remove CircleCI by @​ArthurSens in #​910
• Fix: apply DialContextFunc to OAuth2 token-fetch transport by @​yuri-tceretian in #​911

New Contributors

• @​alliasgher made their first contribution in #​898
• @​msiegen made their first contribution in #​839
• @​machine424 made their first contribution in #​908
• @​yuri-tceretian made their first contribution in #​911

Full Changelog: prometheus/common@v0.67.5...v0.68.0

---

Configuration

📅 Schedule: Branch creation - "on saturday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 39898a0a-a6be-44aa-9871-c5cfb9989c70

📥 Commits

Reviewing files that changed from the base of the PR and between 1ff1d2d and 02fe94f.

⛔ Files ignored due to path filters (4)

• go.sum is excluded by !**/*.sum
• vendor/github.com/prometheus/common/expfmt/openmetrics_create.go is excluded by !**/vendor/**, !vendor/**
• vendor/github.com/prometheus/common/model/metric.go is excluded by !**/vendor/**, !vendor/**
• vendor/modules.txt is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (1)

• go.mod

---

Walkthrough

This pull request updates an indirect dependency on github.com/prometheus/common from version v0.67.5 to v0.68.0 in the Go module file. No other code or dependency changes are included.

Changes

Indirect Dependency Update

Layer / File(s)	Summary
Prometheus Common version bump go.mod	The indirect dependency github.com/prometheus/common is bumped from v0.67.5 to v0.68.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested reviewers

• jcpowermac
• Prashanth684

🚥 Pre-merge checks | ✅ 14 | ❌ 1

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Microshift Test Compatibility	⚠️ Warning	Two Ginkgo e2e tests use MicroShift-incompatible OpenShift APIs without protection: tests for Build and DeploymentConfig in pkg/e2e/podplacement/pod_placement_test.go lack skips or apigroup tags.	Add [apigroup:build.openshift.io] or [apigroup:apps.openshift.io] tags to test names, or guard with exutil.IsMicroShiftCluster() checks.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the main change: updating a dependency to a specific version. It is concise, follows conventional commit format, and directly matches the changeset content.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	All Ginkgo test names in added test files are static and deterministic. No dynamic pod names, timestamps, UUIDs, or generated values appear in test titles.
Test Structure And Quality	✅ Passed	Tests follow all quality standards: single-responsibility It blocks, proper setup/cleanup patterns, explicit timeouts, meaningful assertion messages, and consistent builder usage throughout codebase.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	No new Ginkgo e2e tests added in this PR. The changes are limited to updating go.mod and go.sum for prometheus/common v0.67.5→v0.68.0. SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PR updates prometheus/common dependency. Deployment uses topology-safe scheduling: 2 replicas, required affinity only for arch/OS (not control-plane), no problematic anti-affinity/topology-spread.
Ote Binary Stdout Contract	✅ Passed	Codebase complies with OTE contract. Logging properly configured to avoid stdout corruption. Transitive prometheus/common v0.68.0 update contains only routine maintenance.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only updates prometheus/common dependency in go.mod; no new Ginkgo e2e tests are added, so IPv6/disconnected network compatibility check does not apply.
No-Weak-Crypto	✅ Passed	No weak cryptography usage detected. PR only updates go.mod/go.sum; no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom crypto, or non-constant-time comparisons found.
Container-Privileges	✅ Passed	PR updates prometheus/common dependency without introducing privileged containers, hostPID/Network/IPC, SYS_ADMIN, or privilege escalation in any manifests.
No-Sensitive-Data-In-Logs	✅ Passed	PR only updates prometheus/common dependency version in go.mod; no new logging code introduced. Existing logging uses safe secret names, not sensitive data.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/github.com-prometheus-common-0.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by:

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 1ff1d2d and 2 for PR HEAD 02fe94f in total

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD fb36b9d and 1 for PR HEAD 02fe94f in total

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 7829dbd and 0 for PR HEAD 02fe94f in total

[openshift-merge-bot]

/hold

Revision 02fe94f was retested 3 times: holding

[openshift-ci]

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/ocp419-e2e-azure	02fe94f	link	true	/test ocp419-e2e-azure
ci/prow/ocp421-e2e-gcp	02fe94f	link	true	/test ocp421-e2e-gcp
ci/prow/ocp422-e2e-gcp	02fe94f	link	true	/test ocp422-e2e-gcp
ci/prow/ocp416-e2e-gcp	02fe94f	link	true	/test ocp416-e2e-gcp
ci/prow/ocp417-e2e-gcp	02fe94f	link	true	/test ocp417-e2e-gcp

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.