Bump the go_modules group across 1 directory with 4 updates

[dependabot]

Bumps the go_modules group with 3 updates in the / directory: github.com/prometheus/client_golang, golang.org/x/net and gopkg.in/yaml.v3.

Updates github.com/prometheus/client_golang from 1.2.1 to 1.11.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

1.11.1 / 2022-02-15

• [SECURITY FIX] promhttp: Check validity of method and code label values prometheus/client_golang#987 (Addressed CVE-2022-21698)

What's Changed

• promhttp: Check validity of method and code label values by @​bwplotka and @​kakkoyun in prometheus/client_golang#987

Full Changelog: prometheus/client_golang@v1.11.0...v1.11.1

v1.11.0 / 2021-06-07

• [CHANGE] Add new collectors package. #862
• [CHANGE] prometheus.NewExpvarCollector is deprecated, use collectors.NewExpvarCollector instead. #862
• [CHANGE] prometheus.NewGoCollector is deprecated, use collectors.NewGoCollector instead. #862
• [CHANGE] prometheus.NewBuildInfoCollector is deprecated, use collectors.NewBuildInfoCollector instead. #862
• [FEATURE] Add new collector for database/sql#DBStats. #866
• [FEATURE] API client: Add exemplars API support. #861
• [ENHANCEMENT] API client: Add newer fields to Rules API. #855
• [ENHANCEMENT] API client: Add missing fields to Targets API. #856

What's Changed

• Synchronize common files from prometheus/prometheus by @​prombot in prometheus/client_golang#846
• Synchronize common files from prometheus/prometheus by @​prombot in prometheus/client_golang#849
• Synchronize common files from prometheus/prometheus by @​prombot in prometheus/client_golang#853
• Add newer fields to Rules API by @​gouthamve in prometheus/client_golang#855
• Add missing fields to targets API by @​yeya24 in prometheus/client_golang#856
• Synchronize common files from prometheus/prometheus by @​prombot in prometheus/client_golang#857
• Add exemplars API support by @​yeya24 in prometheus/client_golang#861
• Improve description of MaxAge in summary docs by @​Dean-Coakley in prometheus/client_golang#864
• Add new collectors package by @​johejo in prometheus/client_golang#862
• Add collector for database/sql#DBStats by @​johejo in prometheus/client_golang#866
• Make dbStatsCollector more DRY by @​beorn7 in prometheus/client_golang#867
• Change maintainers from @​beorn7 to @bwplotka/@​kakkoyun by @​beorn7 in prometheus/client_golang#873
• Document implications of negative observations by @​beorn7 in prometheus/client_golang#871
• Update Go modules by @​SuperQ in prometheus/client_golang#875

New Contributors

• @​gouthamve made their first contribution in prometheus/client_golang#855

Full Changelog: prometheus/client_golang@v1.10.0...v1.11.0

1.10.0 / 2021-03-18

• [CHANGE] Minimum required Go version is now 1.13.
• [CHANGE] API client: Add matchers to LabelNames and LabesValues. #828
• [FEATURE] API client: Add buildinfo call. #841
• [BUGFIX] Fix build on riscv64. #833

What's Changed

• Add SECURITY.md by @​roidelapluie in prometheus/client_golang#831
• Bump prometheus/procfs to 0.3.0 to fix building on riscv64 by @​zhsj in prometheus/client_golang#833
• Fix typo in comments in prometheus/client_golang#835

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

• [FEATURE] HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

Unreleased exp module

• [BUGFIX] exp/api: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

• [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812
• [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766
• [FEATURE] Add exemplars for native histograms #1686
• [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823
• [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833
• [BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)

• [FEATURE] prometheus: Add new CollectorFunc utility #1724
• [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738
• [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743
• [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

... (truncated)

Commits

• 989baa3 promhttp: Check validity of method and code label values (#962) (#987)
• 8184d76 Cut v1.11.0 (#877)
• 2539062 Merge pull request #875 from prometheus/superq/update_mods
• 68cd1e9 Update Go modules
• f22935d Merge pull request #871 from prometheus/beorn7/doc
• 11aba26 Change maintainers from @​beorn7 to @bwplotka/@​kakkoyun (#873)
• f34145a Document implications of negative observations
• a7515ca Merge pull request #867 from prometheus/beorn7/collectors
• 81a9556 Make dbStatsCollector more DRY
• a66da1d Add collector for database/sql#DBStats (#866)
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.0.0-20210916014120-12bc252f5db8 to 0.55.0

Commits

• See full diff in compare view

Updates gopkg.in/yaml.v3 from 3.0.0-20200615113413-eeeca48fe776 to 3.0.1

Updates golang.org/x/sys from 0.0.0-20210423082822-04245dca01da to 0.45.0

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.