chore(deps): update all dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
aquasecurity/trivy-action	action	minor	0.9.2 -> 0.10.0
github.com/prometheus/client_golang	require	minor	v1.14.0 -> v1.15.0
k8s.io/api	require	patch	v0.26.3 -> v0.26.4	v0.27.1 (+1)
k8s.io/apiextensions-apiserver	require	patch	v0.26.3 -> v0.26.4	v0.27.1 (+1)
k8s.io/apimachinery	require	minor	v0.26.3 -> v0.27.1

---

Release Notes

aquasecurity/trivy-action

v0.10.0

Compare Source

What's Changed

• docs: improve SBOM documentation by @​saerosV in https://github.com/aquasecurity/trivy-action/pull/208
• chore: Update Trivy to 0.40.0 by @​PerfectSlayer in https://github.com/aquasecurity/trivy-action/pull/223

New Contributors

• @​saerosV made their first contribution in https://github.com/aquasecurity/trivy-action/pull/208
• @​PerfectSlayer made their first contribution in https://github.com/aquasecurity/trivy-action/pull/223

Full Changelog: aquasecurity/trivy-action@0.9.2...0.10.0

prometheus/client_golang

v1.15.0

Compare Source

Changed

[BUGFIX] Fix issue with atomic variables on ppc64le #​1171
[BUGFIX] Support for multiple samples within same metric #​1181
[BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 #​1187
[ENHANCEMENT] Add exemplars and middleware examples #​1173
[ENHANCEMENT] Add more context to "duplicate label names" error to enable debugging #​1177
[ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs #​1151
[ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package #​1183
[ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation #​1066
[ENHANCEMENT] Add ability to Pusher to add custom headers #​1218
[ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage #​1225
[ENHANCEMENT] Added (official) support for go 1.20 #​1234
[ENHANCEMENT] timer: Added support for exemplars #​1233
[ENHANCEMENT] Filter expected metrics as well in CollectAndCompare #​1143
[ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed #​1238

All commits

• Merge release 1.14 to main by @​bwplotka in https://github.com/prometheus/client_golang/pull/1164
• Fix typo in doc comment by @​beorn7 in https://github.com/prometheus/client_golang/pull/1166
• Fix issue with atomic variables on ppc64le by @​beorn7 in https://github.com/prometheus/client_golang/pull/1171
• examples: Add exemplars and middleware examples by @​jessicalins in https://github.com/prometheus/client_golang/pull/1173
• Add context to "duplicate label names" to enable debugging by @​SpencerMalone in https://github.com/prometheus/client_golang/pull/1177
• Add constrained labels and Constrained variant for all MetricVecs by @​Okhoshi in https://github.com/prometheus/client_golang/pull/1151
• Support for multiple samples within same metric by @​machadovilaca in https://github.com/prometheus/client_golang/pull/1181
• Replace deprecated github.com/golang/protobuf package by @​zhsj in https://github.com/prometheus/client_golang/pull/1183
• Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 by @​b4bay in https://github.com/prometheus/client_golang/pull/1187
• typo fix by @​ibreakthecloud in https://github.com/prometheus/client_golang/pull/1178
• Add possibility to dynamically get label values for http instrumentation by @​Okhoshi in https://github.com/prometheus/client_golang/pull/1066
• Bump github.com/cespare/xxhash/v2 from 2.1.2 to 2.2.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1199
• Bump github.com/prometheus/procfs from 0.8.0 to 0.9.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1198
• Bump golang.org/x/sys from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1217
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1213
• Bump github.com/prometheus/common from 0.37.0 to 0.39.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1197
• Add Header method to Pusher for custom header by @​songjiayang in https://github.com/prometheus/client_golang/pull/1218
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1224
• api: Extend and improve json-iterator usage by @​beorn7 in https://github.com/prometheus/client_golang/pull/1225
• Indent example in godoc consistently by @​lamida in https://github.com/prometheus/client_golang/pull/1226
• Remove unnecessary check if label is nil in observeWithExemplar by @​dimonl in https://github.com/prometheus/client_golang/pull/1235
• README: Remove not working gocoverage images. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1236
• Added support for go 1.20. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1234
• timer: Added support for exemplars. by @​bwplotka in https://github.com/prometheus/client_golang/pull/1233
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1237
• Filter expected metrics as well in CollectAndCompare by @​DariaKunoichi in https://github.com/prometheus/client_golang/pull/1143
• Only set start/end if time is not Zero by @​jacksontj in https://github.com/prometheus/client_golang/pull/1238
• Bump google.golang.org/protobuf from 1.28.1 to 1.30.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1243
• Bump golang.org/x/sys from 0.5.0 to 0.6.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1246
• Bump github.com/golang/protobuf from 1.5.2 to 1.5.3 by @​dependabot in https://github.com/prometheus/client_golang/pull/1245
• Bump github.com/prometheus/common from 0.41.0 to 0.42.0 by @​dependabot in https://github.com/prometheus/client_golang/pull/1244
• Cut v1.15.0 by @​bwplotka in https://github.com/prometheus/client_golang/pull/1249

New Contributors

• @​SpencerMalone made their first contributihttps://github.com/prometheus/client_golang/pull/1177l/1177
• @​Okhoshi made their first contributihttps://github.com/prometheus/client_golang/pull/1151l/1151
• @​machadovilaca made their first contributihttps://github.com/prometheus/client_golang/pull/1181l/1181
• @​b4bay made their first contributihttps://github.com/prometheus/client_golang/pull/1187l/1187
• @​ibreakthecloud made their first contributihttps://github.com/prometheus/client_golang/pull/1178l/1178
• @​songjiayang made their first contributihttps://github.com/prometheus/client_golang/pull/1218l/1218
• @​lamida made their first contributihttps://github.com/prometheus/client_golang/pull/1226l/1226
• @​dimonl made their first contributihttps://github.com/prometheus/client_golang/pull/1235l/1235
• @​DariaKunoichi made their first contributihttps://github.com/prometheus/client_golang/pull/1143l/1143

Full Changelog: prometheus/client_golang@v1.14.0...v1.15.0

kubernetes/api

v0.26.4

Compare Source

kubernetes/apiextensions-apiserver

v0.26.4

Compare Source

kubernetes/apimachinery

v0.27.1

Compare Source

v0.27.0

Compare Source

v0.26.4

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 2am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.