Skip to content

Bump io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.6.1#7438

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/main/io.prometheus-prometheus-metrics-bom-1.6.1
Open

Bump io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.6.1#7438
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/main/io.prometheus-prometheus-metrics-bom-1.6.1

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 28, 2026 •
edited
Loading

Bumps io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.6.1.

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.6.1

1.6.1 (2026-04-27)

Note: With the OM2 metric-name preservation fix in this release, OpenMetrics 2.0 can now be tested. It is still in progress and not ready for general use yet.

Bug Fixes

  • Preserve original metric names in OM2 output (#2058) (59a7a6d)

Documentation

v1.6.0

1.6.0 (2026-04-25)

Note: OpenMetrics 2.0 support is still in progress and not ready for general use yet.

As part of the OM2 work, metric-name suffix handling moved from metric creation time to scrape time. A positive side effect is that metric names are now more flexible across the board, for example names ending in suffixes like _total are accepted where they were previously rejected. To keep the Prometheus and OM1 output unambiguous, the registry tracks claimed exposition names and still rejects registrations that would collide at scrape time.

Example Before 1.6.0 Since 1.6.0 Reason
Gauge("foo_total") Rejected Allowed Not breaking because this previously failed at registration, so no working setup changes behavior, and safe because _total suffix expansion applies to counters, not gauges.
Counter("events_total") Rejected Allowed Not breaking because the OM1 output is still events_total; only the builder now accepts the name.
Gauge("foo_total") + Histogram("foo") Rejected Allowed Not breaking because this combination used to be blocked even though the exposed names do not overlap.
Gauge("events_total") + Counter("events") Rejected Rejected Not breaking because the ambiguous OM1 output would still expose two events_total series.
Gauge("foo_count") + Histogram("foo") Allowed Rejected Intentionally breaking because the old behavior could expose a conflicting foo_count name at scrape time.

Features

  • Relax metric name validation in Dropwizard5 (#1985) (deb782f)

Bug Fixes

  • deps: update dependency com.google.guava:guava to v33.6.0-jre (#2021) (1382693)
  • deps: update dependency commons-io:commons-io to v2.22.0 (#2044) (9e05c1d)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (#2022) (30ac534)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (#2023) (2d51a32)
  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.1 (#2004) (650ce4b)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.21 (#2005) (7a36df7)

... (truncated)

Changelog

Sourced from io.prometheus:prometheus-metrics-bom's changelog.

1.6.1 (2026-04-27)

Note: With the OM2 metric-name preservation fix in this release, OpenMetrics 2.0 can now be tested. It is still in progress and not ready for general use yet.

Bug Fixes

  • Preserve original metric names in OM2 output (#2058) (59a7a6d)

Documentation

1.6.0 (2026-04-25)

Note: OpenMetrics 2.0 support is still in progress and not ready for general use yet.

As part of the OM2 work, metric-name suffix handling moved from metric creation time to scrape time. A positive side effect is that metric names are now more flexible across the board, for example names ending in suffixes like _total are accepted where they were previously rejected. To keep the Prometheus and OM1 output unambiguous, the registry tracks claimed exposition names and still rejects registrations that would collide at scrape time.

Example Before 1.6.0 Since 1.6.0 Reason
Gauge("foo_total") Rejected Allowed Not breaking because this previously failed at registration, so no working setup changes behavior, and safe because _total suffix expansion applies to counters, not gauges.
Counter("events_total") Rejected Allowed Not breaking because the OM1 output is still events_total; only the builder now accepts the name.
Gauge("foo_total") + Histogram("foo") Rejected Allowed Not breaking because this combination used to be blocked even though the exposed names do not overlap.
Gauge("events_total") + Counter("events") Rejected Rejected Not breaking because the ambiguous OM1 output would still expose two events_total series.
Gauge("foo_count") + Histogram("foo") Allowed Rejected Intentionally breaking because the old behavior could expose a conflicting foo_count name at scrape time.

Features

  • Relax metric name validation in Dropwizard5 (#1985) (deb782f)

Bug Fixes

  • deps: update dependency com.google.guava:guava to v33.6.0-jre (#2021) (1382693)
  • deps: update dependency commons-io:commons-io to v2.22.0 (#2044) (9e05c1d)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (#2022) (30ac534)
  • deps: update dependency io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom-alpha to v2.27.0-alpha (#2023) (2d51a32)
  • deps: update dependency io.prometheus:prometheus-metrics-bom to v1.5.1 (#2004) (650ce4b)
  • deps: update dependency org.apache.tomcat.embed:tomcat-embed-core to v11.0.21 (#2005) (7a36df7)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.5 (#2006) (0106c18)
  • deps: update dependency org.springframework.boot:spring-boot-starter-parent to v4.0.6 (#2046) (40a9db8)
  • deps: update jetty monorepo to v12.1.8 (#2007) (acab5b2)
  • deps: update protobuf (#2024) (8e2214e)

... (truncated)

Commits

@dependabot dependabot Bot added this to the 1.17.x milestone Apr 28, 2026
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Apr 28, 2026
@github-actions github-actions Bot enabled auto-merge (squash) April 28, 2026 00:28
@dependabot
Bump io.prometheus:prometheus-metrics-bom from 1.5.1 to 1.6.1
d243258 
Bumps [io.prometheus:prometheus-metrics-bom](https://github.com/prometheus/client_java) from 1.5.1 to 1.6.1.
- [Release notes](https://github.com/prometheus/client_java/releases)
- [Changelog](https://github.com/prometheus/client_java/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_java@v1.5.1...v1.6.1)

---
updated-dependencies:
- dependency-name: io.prometheus:prometheus-metrics-bom
  dependency-version: 1.6.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/gradle/main/io.prometheus-prometheus-metrics-bom-1.6.1 branch from 7cde38a to d243258 Compare April 28, 2026 21:29
@jonatan-ivanov
Copy link
Copy Markdown
Member

jonatan-ivanov commented May 21, 2026

Connected PRs:

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Milestone

1.17.x

Development

Successfully merging this pull request may close these issues.

1 participant

@jonatan-ivanov