fix(deps): update module github.com/prometheus/common to v0.64.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/prometheus/common	v0.63.0 -> v0.64.0
github.com/prometheus/common	v0.62.0 -> v0.64.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

prometheus/common (github.com/prometheus/common)

v0.64.0

Compare Source

What's Changed

• Add deprecation notice to otlptranslator by @​ArthurSens in https://github.com/prometheus/common/pull/773
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/774
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/775
• Update Go by @​SuperQ in https://github.com/prometheus/common/pull/770
• chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/common/pull/779
• build(deps): bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot in https://github.com/prometheus/common/pull/777
• build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot in https://github.com/prometheus/common/pull/776
• promslog: Use the default timezone (again) by @​beorn7 in https://github.com/prometheus/common/pull/739
• Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/common/pull/787
• build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot in https://github.com/prometheus/common/pull/784
• build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.29.0 by @​dependabot in https://github.com/prometheus/common/pull/785
• build(deps): bump golang.org/x/net from 0.38.0 to 0.39.0 by @​dependabot in https://github.com/prometheus/common/pull/786
• refactor(promslog): make NewNopLogger() wrapper around New() by @​tjhop in https://github.com/prometheus/common/pull/783
• build(deps): bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 by @​dependabot in https://github.com/prometheus/common/pull/788

New Contributors

• @​kakkoyun made their first contribution in https://github.com/prometheus/common/pull/779

Full Changelog: prometheus/common@v0.63.0...v0.64.0

---

Configuration

📅 Schedule: Branch creation - "on tuesday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: testbed/go.sum

Command failed: go get -d -t ./...
go: downloading go1.23.7 (linux/amd64)
go: download go1.23.7: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

[songy23]

There's still breaking change unfortunately /cc @ArthurSens

Error: /home/runner/go/pkg/mod/github.com/prometheus/[email protected]/util/logging/file.go:48:23: undefined: promslog.AllowedFormat

[codeboten]

There's still breaking change unfortunately /cc @ArthurSens

Error: /home/runner/go/pkg/mod/github.com/prometheus/[email protected]/util/logging/file.go:48:23: undefined: promslog.AllowedFormat

Tried bumping the prometheus package to 0.303.1, am getting data race failures locally, will see if CI is any different... tried bumping to 0.304 but that caused more API changes

[codeboten]

this package causes checksum failures

[codeboten]

ended up submitting the change for this in a separate PR: #40251

[codeboten]

Looks like the race condition persists when upgrading to 303.1

[songy23]

For context the data race was mentioned here: #40103 (comment)

[ArthurSens]

Data race is being fixed in prometheus/prometheus#16623, and will be added to a patch release of 3.4 if I'm understanding correctly.

To unblock this upgrade, we'll need to upgrade the prometheus dependency from 0.302.1 to 0.304.x

[codeboten]

Any indication of when the patch release might land? Upgrading this dependency is blocking the upgrade of the otel go package

[ArthurSens]

Any indication of when the patch release might land? Upgrading this dependency is blocking the upgrade of the otel go package

I don't have this information right now, I'll go after it!