Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.1

[dependabot]

Bumps github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.1.

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

[!NOTE] The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478
• [FEATURE] Configure node selector when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8486
• [FEATURE] Configure external label with topology information when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8519
• [FEATURE] Distribute scrape targets within topology zones when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8538

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

Note: The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478

... (truncated)

Commits

• 51cc33a Merge pull request #8750 from simonpasquier/cut-0.93.1
• 709d143 chore: cut v0.93.1
• b547616 Merge pull request #8749 from jan--f/fix/thanos-grpc-tls-repeated-flags
• a1f22de fix: emit repeated flags for Thanos gRPC TLS ciphers and curves
• d8beacd Merge pull request #8739 from sophotechlabs/fix/kubelet-endpoints-ip-family
• 964a482 kubelet: keep a single Endpoints address per node
• f8fafd4 build(deps): bump the github-actions-deps group with 2 updates (#8726)
• 387684b chore: cut v0.93.0 (#8725)
• 263387c build(deps): bump the github-actions-deps group with 2 updates
• fadceb3 chore: cut v0.93.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated the Prometheus monitoring integration dependency to a newer version for improved compatibility and maintenance.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: ffe7284b-5006-4a7a-b822-67101bec546d

📥 Commits

Reviewing files that changed from the base of the PR and between 969e5b0 and 0e0944a.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The direct Prometheus Operator monitoring API dependency was upgraded from v0.55.1 to v0.93.1 in go.mod.

Changes

Prometheus Operator update

Layer / File(s)	Summary
Update monitoring API dependency go.mod	The Prometheus Operator monitoring API dependency changed from v0.55.1 to v0.93.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: 🔵 Low · up to 0e094

This change updates a Go dependency with matching checksums, but the exact upstream 0.93.1 tag and required supply-chain and validation checks still need confirmation; it is mergeable with explicit owner follow-up before merging.

Suggested reviewers: samanthajayasinghe

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically describes the dependency update from version 0.55.1 to 0.93.1.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR changes only go.mod and go.sum; no *_test.go or Ginkgo title code changed, so it introduces no unstable test name.
Test Structure And Quality	✅ Passed	The PR diff changes only go.mod and go.sum; it adds or modifies no Ginkgo tests, cluster operations, waits, cleanup, or assertions covered by this check.
Microshift Test Compatibility	✅ Passed	The pull request changes only go.mod and go.sum; the parent diff adds no Ginkgo tests or other test code, so MicroShift test compatibility is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	The PR diff changes only go.mod and go.sum; it adds no Ginkgo e2e tests or test behavior that could assume a multi-node cluster.
Topology-Aware Scheduling Compatibility	✅ Passed	The PR diff changes only go.mod and go.sum; it adds no deployment manifests, operator code, controllers, or scheduling constraints.
Ote Binary Stdout Contract	✅ Passed	The PR changes only dependency metadata; existing process-level stdout writes are unchanged, and monitoring v0.93.1 has no stdout or logging writes.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The pull request changes only go.mod and go.sum; it adds no Ginkgo e2e tests or network behavior to assess.
No-Weak-Crypto	✅ Passed	The diff changes only go.mod/go.sum; application code uses monitoring API types, and no weak-crypto imports or algorithm calls occur in the repository or v0.93.1 module.
Container-Privileges	✅ Passed	The patch changes only the Prometheus dependency version and checksums in go.mod/go.sum; no container or Kubernetes privilege settings changed.
No-Sensitive-Data-In-Logs	✅ Passed	HEAD^..HEAD changes only go.mod and go.sum; no Go source or logging changes were introduced. The upgraded API is used for ServiceMonitor types only.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring-0.93.1

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign feichashao for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/pr-check	0e0944a	link	true	/test pr-check

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.