Skip to content

Bump prometheus v0.312.0, prometheus-operator v0.92.1 to remove docker dependency#396

Closed
nathalapooja wants to merge 1 commit into
mainfrom
bump-prometheus-v0.312.0-remove-docker-cve
Closed

Bump prometheus v0.312.0, prometheus-operator v0.92.1 to remove docker dependency#396
nathalapooja wants to merge 1 commit into
mainfrom
bump-prometheus-v0.312.0-remove-docker-cve

Conversation

@nathalapooja

Copy link
Copy Markdown
Contributor

Description of changes:
Upgrade prometheus/prometheus from v0.311.3 to v0.312.0 and prometheus-operator from v0.91.0 to v0.92.1. This removes the github.com/docker/docker transitive dependency entirely, as Prometheus migrated to github.com/moby/moby sub-packages in v0.312.0.

Breaking change in prometheus v0.312.0: discovery.NewManager now requires non-nil sdMetrics parameter. Fixed by calling
discovery.CreateAndRegisterSDMetrics() before creating the manager.

Other transitive dependency upgrades:

  • k8s.io/{api,client-go,apimachinery,component-base} v0.35.4 -> v0.36.2
  • k8s.io/kubectl v0.35.0 -> v0.36.2
  • sigs.k8s.io/controller-runtime v0.23.3 -> v0.24.1
  • golang.org/x/sync v0.20.0 -> v0.21.0
  • google.golang.org/grpc v1.80.0 -> v1.81.1

Issue #, if available:
N/A

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

…r/docker dependency

Upgrade prometheus/prometheus from v0.311.3 to v0.312.0 and
prometheus-operator from v0.91.0 to v0.92.1. This removes the
github.com/docker/docker transitive dependency entirely, as Prometheus
migrated to github.com/moby/moby sub-packages in v0.312.0.

Breaking change in prometheus v0.312.0: discovery.NewManager now requires
non-nil sdMetrics parameter. Fixed by calling
discovery.CreateAndRegisterSDMetrics() before creating the manager.

Other transitive dependency upgrades:
- k8s.io/{api,client-go,apimachinery,component-base} v0.35.4 -> v0.36.2
- k8s.io/kubectl v0.35.0 -> v0.36.2
- sigs.k8s.io/controller-runtime v0.23.3 -> v0.24.1
- golang.org/x/sync v0.20.0 -> v0.21.0
- google.golang.org/grpc v1.80.0 -> v1.81.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant