Skip to content

Bump io.prometheus:prometheus-metrics-bom from 1.8.0 to 1.9.0 - #7429

Merged
nscuro merged 1 commit into
5.1.xfrom
dependabot/maven/5.1.x/io.prometheus-prometheus-metrics-bom-1.9.0
Sep 23, 2026
Merged

nscuro merged 1 commit into
5.1.xfrom
dependabot/maven/5.1.x/io.prometheus-prometheus-metrics-bom-1.9.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 23, 2026

Copy link
Copy Markdown
Contributor

Bumps io.prometheus:prometheus-metrics-bom from 1.8.0 to 1.9.0.

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.9.0

1.9.0 (2026-09-16)

Features

  • support metric name filtering in OpenTelemetry exporter (#2344) (9b0ede8)

Bug Fixes

  • avoid protobuf debug reflection in native images (#2251) (7f899e7)
  • bound HTTPServer request resources (#2333) (33ec556)
  • bound observation buffering during collection (#2336) (43788f5)
  • bound scrape query parameters (#2334) (27e1912)
  • ci: skip benchmark report for skipped runs (#2422) (40eddb0)
  • clarify benchmark regression report verdicts (#2394) (e5fa067)
  • deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)
  • deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)
  • deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)
  • deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)
  • deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)
  • deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)
  • deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)
  • deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)
  • deps: update otel.instrumentation.version (#2236) (158230d)
  • deps: update protobuf (#2400) (e2db1ed)
  • deps: update protobuf (#2438) (8ad6fa8)
  • deps: update protobuf to v4.35.1 (#2221) (cf17073)
  • disable micrometer compat build cache (#2457) (6a40eda)
  • drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)
  • exposition: export internal package for OSGi resolution (#2415) (28b503d)
  • httpserver: make scrape error responses secure and configurable (f6d9df5)
  • include counter names in negative value errors (#2315) (ea8f935)
  • include license files in release source jars (#2250) (08cf925), closes #2216
  • keep late observations out of subsequent collection buffers (#2471) (d78b149)
  • keep PR title check required after rebases (#2414) (e3d4c3b)
  • prevent buffer stripe index overflow (#2331) (b6cd000)

... (truncated)

Changelog

Sourced from io.prometheus:prometheus-metrics-bom's changelog.

1.9.0 (2026-09-16)

Features

  • support metric name filtering in OpenTelemetry exporter (#2344) (9b0ede8)

Bug Fixes

  • avoid protobuf debug reflection in native images (#2251) (7f899e7)
  • bound HTTPServer request resources (#2333) (33ec556)
  • bound observation buffering during collection (#2336) (43788f5)
  • bound scrape query parameters (#2334) (27e1912)
  • ci: skip benchmark report for skipped runs (#2422) (40eddb0)
  • clarify benchmark regression report verdicts (#2394) (e5fa067)
  • deps: update dependency com.google.guava:guava to v33.7.0-jre (#2387) (bf0db49)
  • deps: update dependency io.dropwizard.metrics:metrics-core to v4.2.40 (#2432) (dd88326)
  • deps: update dependency io.dropwizard.metrics5:metrics-core to v5.0.8 (#2433) (42f3c8a)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.29.0-alpha (#2235) (cf9f702)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2328) (1ca2716)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.30.0-alpha (#2330) (07623c1)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2401) (6c26619)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.0-alpha (#2402) (ac0d68a)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2409) (5eea652)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.31.1-alpha (#2410) (0bcef89)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.23 (#2241) (a017f80)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.24 (#2294) (63967bd)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.25 (#2389) (92f8344)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.26 (#2477) (05146c0)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.1.1 (#2399) (a0b0880)
  • deps: update jetty monorepo to v12.1.11 (#2279) (4dc54da)
  • deps: update jetty monorepo to v12.1.12 (#2371) (08967e0)
  • deps: update jetty monorepo to v12.1.13 (#2459) (b217f05)
  • deps: update junit-framework monorepo to v6.1.2 (#2300) (5966d1d)
  • deps: update junit-framework monorepo to v6.1.3 (#2374) (d1ade52)
  • deps: update otel.instrumentation.version (#2236) (158230d)
  • deps: update protobuf (#2400) (e2db1ed)
  • deps: update protobuf (#2438) (8ad6fa8)
  • deps: update protobuf to v4.35.1 (#2221) (cf17073)
  • disable micrometer compat build cache (#2457) (6a40eda)
  • drop +Inf bound from OpenTelemetry classic histogram boundaries (#2458) (a3bce9a)
  • exposition: export internal package for OSGi resolution (#2415) (28b503d)
  • httpserver: make scrape error responses secure and configurable (f6d9df5)
  • include counter names in negative value errors (#2315) (ea8f935)
  • include license files in release source jars (#2250) (08cf925), closes #2216
  • keep late observations out of subsequent collection buffers (#2471) (d78b149)
  • keep PR title check required after rebases (#2414) (e3d4c3b)
  • prevent buffer stripe index overflow (#2331) (b6cd000)
  • redact invalid configuration values (#2335) (7e7e533)

... (truncated)

Commits
  • 71e821c chore(main): release 1.9.0 (#2237)
  • d78b149 fix: keep late observations out of subsequent collection buffers (#2471)
  • 085263b perf: avoid allocating a mapping lambda on every labelValues() call (#2442)
  • 9ec38b7 chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.161...
  • 05146c0 fix(deps): update dependency org.apache.tomcat.embed:tomcat-embed-core to v11...
  • 59ca1f0 test: focus PR benchmarks on client_java and measure label lookups (#2468)
  • 398d087 fix: show uncertainty in benchmark comparisons (#2476)
  • 8722230 perf: skip snapshot rebuild in mergeDuplicates when names are unique (#2441)
  • ea8f935 fix: include counter names in negative value errors (#2315)
  • fba2007 test: verify buffer recovery after snapshot failures (#2446)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [io.prometheus:prometheus-metrics-bom](https://github.com/prometheus/client_java) from 1.8.0 to 1.9.0.
- [Release notes](https://github.com/prometheus/client_java/releases)
- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_java@v1.8.0...v1.9.0)

---
updated-dependencies:
- dependency-name: io.prometheus:prometheus-metrics-bom
  dependency-version: 1.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Sep 23, 2026
@owasp-dt-bot

Copy link
Copy Markdown

✅ Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
✅ Open Source Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@codacy-production

codacy-production Bot commented Sep 23, 2026 •

Copy link
Copy Markdown

Up to standards ✅

🟢 Issues 0 issues

Results:
0 new issues

View in Codacy

🟢 Metrics 0 complexity

Metric Results
Complexity 0

View in Codacy

🟢 Coverage ∅ diff coverage · 0.00% coverage variation

Metric Results
Coverage variation ✅ 0.00% coverage variation (-1.00%)
Diff coverage ✅ ∅ diff coverage (70.00%)

View coverage diff in Codacy

Coverage variation details
Coverable lines Covered lines Coverage
Common ancestor commit (54ba4f0) 44814 39207 87.49%
Head commit (426c8bf) 44814 (+0) 39205 (-2) 87.48% (0.00%)

Coverage variation is the difference between the coverage for the head and common ancestor commits of the pull request branch: <coverage of head commit> - <coverage of common ancestor commit>

Diff coverage details
Coverable lines Covered lines Diff coverage
Pull request (#7429) 0 0 ∅ (not applicable)

Diff coverage is the percentage of lines that are covered by tests out of the coverable lines that the pull request added or modified: <covered lines added or modified>/<coverable lines added or modified> * 100%

NEW Get contextual insights on your PRs based on Codacy's metrics, along with PR and Jira context, without leaving GitHub. Enable AI reviewer
TIP This summary will be updated as you push new changes.

@nscuro nscuro added this to the 5.1.2 milestone Sep 23, 2026
@nscuro
nscuro merged commit c36e206 into 5.1.x Sep 23, 2026
22 checks passed
@nscuro
nscuro deleted the dependabot/maven/5.1.x/io.prometheus-prometheus-metrics-bom-1.9.0 branch September 23, 2026 11:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants