Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.1

[dependabot]

Bumps github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.1.

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

[!NOTE] The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478
• [FEATURE] Configure node selector when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8486
• [FEATURE] Configure external label with topology information when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8519
• [FEATURE] Distribute scrape targets within topology zones when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8538

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

Note: The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478

... (truncated)

Commits

• 51cc33a Merge pull request #8750 from simonpasquier/cut-0.93.1
• 709d143 chore: cut v0.93.1
• b547616 Merge pull request #8749 from jan--f/fix/thanos-grpc-tls-repeated-flags
• a1f22de fix: emit repeated flags for Thanos gRPC TLS ciphers and curves
• d8beacd Merge pull request #8739 from sophotechlabs/fix/kubelet-endpoints-ip-family
• 964a482 kubelet: keep a single Endpoints address per node
• f8fafd4 build(deps): bump the github-actions-deps group with 2 updates (#8726)
• 387684b chore: cut v0.93.0 (#8725)
• 263387c build(deps): bump the github-actions-deps group with 2 updates
• fadceb3 chore: cut v0.93.0
• Additional commits viewable in compare view

Summary by CodeRabbit

• Maintenance
  • Updated underlying platform components and monitoring integrations to newer stable versions.
  • Improved compatibility, reliability, and ongoing support for the application’s Kubernetes-based runtime and observability tooling.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 1e0b9ccc-c9f0-4c03-90de-d4afebc2aae5

📥 Commits

Reviewing files that changed from the base of the PR and between 0e0944a and a7648be.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The Prometheus Operator monitoring dependency in go.mod was upgraded from v0.55.1 to v0.93.1.

Changes

Monitoring dependency update

Layer / File(s)	Summary
Update monitoring dependency go.mod	The Prometheus Operator monitoring dependency changed from v0.55.1 to v0.93.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to a7648

This PR updates the Prometheus Operator API dependency; no concrete correctness, security, availability, or readiness issue remains that would block merging after normal checks and review.

Suggested reviewers: psav, samanthajayasinghe

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the primary change: upgrading the Prometheus Operator monitoring dependency from version 0.55.1 to 0.93.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS: The pull request changes only go.mod and go.sum. The exact diff contains no test files and no changes to It, Describe, Context, or When titles. Therefore, it introduces no unstable o…
Test Structure And Quality	✅ Passed	PASS: The pull request changes only dependency metadata in go.mod and go.sum. No Ginkgo test file changed; the identified Ginkgo entrypoint has identical parent and current blob IDs. Therefore, th…
Microshift Test Compatibility	✅ Passed	PASS: The pull request changes only go.mod and go.sum. It adds no Ginkgo tests and does not modify existing e2e test files. Therefore, it introduces no MicroShift-incompatible test APIs or assumptions…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The pull request changes only go.mod and go.sum. It adds no Ginkgo declarations and changes no e2e or test files. Therefore, the SNO multi-node test compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PASS — the pull request changes only the Prometheus Operator dependency in go.mod and its checksums in go.sum. It does not add or modify deployment manifests, operator code, controllers, replicas,…
Ote Binary Stdout Contract	✅ Passed	PASS: The pull request changes only the monitoring API module version and checksums. It adds no main, init, TestMain, Ginkgo suite setup, or stdout call. The upgraded monitoring package's init code on…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The pull request changes only go.mod and go.sum. No Go test files or Ginkgo declarations changed. The parent and HEAD contain the same 28 Ginkgo declaration matches, so the pull request introduc…
No-Weak-Crypto	✅ Passed	PASS: The pull request changes only the Prometheus Operator API dependency and its checksums. The v0.93.1 API module has no crypto imports or weak-crypto implementation, and the application source has…
Container-Privileges	✅ Passed	The pull request changes only go.mod and go.sum. The patch contains no container or Kubernetes manifest files and no privilege-related declarations. The repository manifest search found no changed pri…
No-Sensitive-Data-In-Logs	✅ Passed	PASS. The pull request changes only the Prometheus monitoring module version in go.mod and its checksums in go.sum; it adds no logging statements or runtime source changes. The upgraded cached `pk…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Stable And Deterministic Test Names

Explanation

PASS: The pull request changes only go.mod and go.sum. The exact diff contains no test files and no changes to It, Describe, Context, or When titles. Therefore, it introduces no unstable or overly specific Ginkgo test name.

Full details: Test Structure And Quality

Explanation

PASS: The pull request changes only dependency metadata in go.mod and go.sum. No Ginkgo test file changed; the identified Ginkgo entrypoint has identical parent and current blob IDs. Therefore, this pull request introduces no test-structure or test-quality violation covered by the check.

Full details: Microshift Test Compatibility

Explanation

PASS: The pull request changes only go.mod and go.sum. It adds no Ginkgo tests and does not modify existing e2e test files. Therefore, it introduces no MicroShift-incompatible test APIs or assumptions.

Full details: Topology-Aware Scheduling Compatibility

Explanation

PASS — the pull request changes only the Prometheus Operator dependency in go.mod and its checksums in go.sum. It does not add or modify deployment manifests, operator code, controllers, replicas, affinity, topology spread, node selectors, tolerations, or PDBs. Therefore, this topology-aware scheduling check is not applicable.

Full details: Ote Binary Stdout Contract

Explanation

PASS: The pull request changes only the monitoring API module version and checksums. It adds no main, init, TestMain, Ginkgo suite setup, or stdout call. The upgraded monitoring package's init code only registers API types and contains no stdout or logging writes. Existing klog.SetOutput(os.Stdout) and FIPS fmt.Println calls are unchanged from the parent commit, so they are not caused by this pull request.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

PASS: The pull request changes only go.mod and go.sum. No Go test files or Ginkgo declarations changed. The parent and HEAD contain the same 28 Ginkgo declaration matches, so the pull request introduces no IPv4 assumption or external connectivity requirement under this check.

Full details: No-Weak-Crypto

Explanation

PASS: The pull request changes only the Prometheus Operator API dependency and its checksums. The v0.93.1 API module has no crypto imports or weak-crypto implementation, and the application source has no matches for MD5, SHA1, DES, 3DES, RC4, Blowfish, ECB, or non-constant-time secret comparisons. The only MD5 references are CRAM-MD5 documentation comments, which also existed in v0.55.1 and do not implement or invoke cryptography.

Full details: Container-Privileges

Explanation

The pull request changes only go.mod and go.sum. The patch contains no container or Kubernetes manifest files and no privilege-related declarations. The repository manifest search found no changed privilege settings; existing templates set runAsNonRoot: true and allowPrivilegeEscalation: false.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The pull request changes only the Prometheus monitoring module version in go.mod and its checksums in go.sum; it adds no logging statements or runtime source changes. The upgraded cached pkg/apis/monitoring package contains no production logging calls. Existing logs in the repository are unchanged, so this pull request does not introduce logging of passwords, tokens, API keys, PII, hostnames, session IDs, or customer data.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring-0.93.1

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign feichashao for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[xiaoyu74]

/retest

[openshift-ci]

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/pr-check	a7648be	link	true	/test pr-check

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.