This is an automated email from the ASF dual-hosted git repository.
kezhenxu94 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/skywalking-satellite.git
The following commit(s) were added to refs/heads/main by this push:
new 28ef284 cves: bump prometheus from v0.311.2 to v0.311.3 (#249)
28ef284 is described below
commit 28ef28478a6bd4d2b108f544c78bbf1b3785c63c
Author: tetrate-ci[bot] <[email protected]>
AuthorDate: Thu May 7 18:08:17 2026 +0800
cves: bump prometheus from v0.311.2 to v0.311.3 (#249)
Fix the following CVEs:
- CVE-2026-42151 (HIGH): github.com/prometheus/prometheus v0.311.2 →
v0.311.3
- CVE-2026-42154 (HIGH): github.com/prometheus/prometheus upgrade
- GHSA-fw8g-cg8f-9j28 (MEDIUM): github.com/prometheus/prometheus v0.311.2 →
v0.311.3
---
go.mod | 2 +-
go.sum | 4 ++--
2 files changed, 3 insertions(+), 3 deletions(-)
diff --git a/go.mod b/go.mod
index 67b8d3e..268dc61 100644
--- a/go.mod
+++ b/go.mod
@@ -12,7 +12,7 @@ require (
github.com/hashicorp/go-multierror v1.1.1
github.com/prometheus/client_golang v1.23.2
github.com/prometheus/common v0.67.5
- github.com/prometheus/prometheus v0.311.2
+ github.com/prometheus/prometheus v0.311.3
github.com/shirou/gopsutil v3.21.11+incompatible
github.com/sirupsen/logrus v1.9.4
github.com/spf13/viper v1.21.0
diff --git a/go.sum b/go.sum
index ebbc833..bc1ab1b 100644
--- a/go.sum
+++ b/go.sum
@@ -200,8 +200,8 @@ github.com/prometheus/common v0.67.5
h1:pIgK94WWlQt1WLwAC5j2ynLaBRDiinoAb86HZHTU
github.com/prometheus/common v0.67.5/go.mod
h1:SjE/0MzDEEAyrdr5Gqc6G+sXI67maCxzaT3A2+HqjUw=
github.com/prometheus/procfs v0.16.1
h1:hZ15bTNuirocR6u0JZ6BAHHmwS1p8B4P6MRqxtzMyRg=
github.com/prometheus/procfs v0.16.1/go.mod
h1:teAbpZRB1iIAJYREa1LsoWUXykVXA1KlTmWl8x/U+Is=
-github.com/prometheus/prometheus v0.311.2
h1:6fBxp93y08GAZGNT1o3bIhgV/AMYvBFfU+ltDNEsHg8=
-github.com/prometheus/prometheus v0.311.2/go.mod
h1:gjsCxTKtHO1Q8T9333u1s+lUR1OjPyM7ruuGH8RvVyo=
+github.com/prometheus/prometheus v0.311.3
h1:3IrVxQv6v5i/ZCGi6OrYeBhtCwaPTn6Z3DYruXoYm3M=
+github.com/prometheus/prometheus v0.311.3/go.mod
h1:gjsCxTKtHO1Q8T9333u1s+lUR1OjPyM7ruuGH8RvVyo=
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0
h1:MkV+77GLUNo5oJ0jf870itWm3D0Sjh7+Za9gazKc5LQ=
github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0/go.mod
h1:bCqnVzQkZxMG4s8nGwiZ5l3QUCyqpo9Y+/ZMZ9VjZe4=
github.com/rogpeppe/fastuuid v1.2.0/go.mod
h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ=
