Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.0

[dependabot]

Bumps github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.93.0.

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

[!NOTE] The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478
• [FEATURE] Configure node selector when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8486
• [FEATURE] Configure external label with topology information when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8519
• [FEATURE] Distribute scrape targets within topology zones when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8538
• [FEATURE] Add --promql-options CLI argument to the admission-webhook binary. #8531
• [FEATURE] Validate PrometheusRule resources selected by Prometheus resources based on the PromQL enabled features. #8545
• [FEATURE] Add workload identity authentication method for AzureSD in ScrapeConfig CRD. #8489
• [ENHANCEMENT] Support strategic merge patch of container probes when workloads are configured with HTTPS. #8427

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

Note: The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610
• [BUGFIX] Fix SMTP smarthost format error handling in Alertmanager configuration. #8586
• [BUGFIX] Fix missing return in admission webhook after marshal failure. #8582
• [BUGFIX] Fix FindOwner to return nil on meta.Accessor error. #8585
• [BUGFIX] Fix dropped gzip Close errors in GzipConfig and GunzipConfig. #8573
• [BUGFIX] Fix panic on malformed key=value flag input (e.g. --labels "key"). #8560

0.91.0 / 2026-05-05

• [CHANGE] Enforce mutual exclusion of basicAuth, authorization and oauth2 in ScrapeConfig CRD. #8480
• [CHANGE] Add minimum length validations to string fields in ScrapeConfig CRD. #8479
• [CHANGE] Add validations for VictorOps receiver in AlertmanagerConfig CRD. #8220
• [CHANGE] Add validations for OpsGenie receiver in AlertmanagerConfig CRD. #8267
• [CHANGE] Add validations for Email receiver in AlertmanagerConfig CRD. #8270
• [FEATURE] Implement shard retention based on Prometheus data retention (it requires the PrometheusShardRetentionPolicy feature gate). #8478
• [FEATURE] Configure node selector when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8486
• [FEATURE] Configure external label with topology information when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8519
• [FEATURE] Distribute scrape targets within topology zones when sharding mode is Topology for Prometheus and PrometheusAgent custom resources (it requires the PrometheusTopologySharding feature gate). #8538
• [FEATURE] Add --promql-options CLI argument to the admission-webhook binary. #8531
• [FEATURE] Validate PrometheusRule resources selected by Prometheus resources based on the PromQL enabled features. #8545

... (truncated)

Commits

• f8fafd4 build(deps): bump the github-actions-deps group with 2 updates (#8726)
• 387684b chore: cut v0.93.0 (#8725)
• 263387c build(deps): bump the github-actions-deps group with 2 updates
• fadceb3 chore: cut v0.93.0
• 6eea70d Merge pull request #8714 from prometheus-operator/dependabot/go_modules/k8s.i...
• 3a40dd9 feat: add chunkEncoding field to TSDBSpec for runtime float encoding selectio...
• 12fb55d Regenerate docs + bump in other go.mod files
• 7b97bc9 fix: create IPv6 EndpointSlice for kubelet Service on dual-stack clusters (#8...
• 2e55a51 Merge pull request #8694 from Poil/feat/thanos-delayed-compaction-8266
• 716c885 Merge pull request #8717 from prometheus-operator/dependabot/go_modules/githu...
• Additional commits viewable in compare view

Summary by CodeRabbit

• Chores
  • Updated the Prometheus Operator monitoring module to version 0.93.0.

[coderabbitai]

Walkthrough

The Prometheus Operator monitoring API dependency in go.mod is upgraded from v0.55.1 to v0.93.0.

Changes

Monitoring API dependency update

Layer / File(s)	Summary
Update monitoring API dependency go.mod	Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from v0.55.1 to v0.93.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: ajpantuso, joshbranham

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately summarizes the main change: upgrading the monitoring dependency from 0.55.1 to 0.93.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The PR only changes go.mod and go.sum; no test files or Ginkgo titles were added or modified.
Test Structure And Quality	✅ Passed	No Ginkgo test files changed; only go.mod/go.sum dependency bumps, so the test-quality check is not applicable.
Microshift Test Compatibility	✅ Passed	Only go.mod/go.sum changed for a dependency bump; no Ginkgo e2e test files or test bodies were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only go.mod and go.sum changed for a dependency bump; no new Ginkgo e2e tests or SNO-sensitive test code were added.
Topology-Aware Scheduling Compatibility	✅ Passed	Only go.mod/go.sum changed; no deployment, controller, or manifest scheduling logic was modified.
Ote Binary Stdout Contract	✅ Passed	PR only bumps go.mod/go.sum; no process-level code or stdout writes were introduced.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	Only go.mod/go.sum changed; no Go test files or Ginkgo specs were added, so no IPv4/external-connectivity test compatibility risk.
No-Weak-Crypto	✅ Passed	Only go.mod/go.sum changed; no code added and no weak crypto or secret-comparison patterns appear in the diff.
Container-Privileges	✅ Passed	Diff only updates go.mod/go.sum; no container/K8s manifests or privileged settings were added.
No-Sensitive-Data-In-Logs	✅ Passed	Only go.mod/go.sum version bumps are changed; no logging code or sensitive data appears in the diff.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring-0.93.0

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign dustman9000 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

🧹 Nitpick comments (1)

go.mod (1)

16-16: 🔒 Security & Privacy | 🔵 Trivial

Add SBOM/provenance and signing checks for dependency bumps. The module is pinned and go.sum already has matching hashes, but I don't see repo-side CI for SBOM generation, provenance attestations, or Sigstore/cosign-signed artifacts.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 16, Add repository CI checks for dependency updates such as
github.com/prometheus-operator/prometheus-operator: generate and validate an
SBOM, verify provenance attestations, and check Sigstore/cosign signatures for
the resulting artifacts. Integrate these checks into the existing dependency or
release workflow, using the repository’s established CI tooling and failing when
verification does not pass.

Source: Path instructions

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@go.mod`:
- Line 16: Add repository CI checks for dependency updates such as
github.com/prometheus-operator/prometheus-operator: generate and validate an
SBOM, verify provenance attestations, and check Sigstore/cosign signatures for
the resulting artifacts. Integrate these checks into the existing dependency or
release workflow, using the repository’s established CI tooling and failing when
verification does not pass.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 3116dd40-0887-46ab-bcf9-cc20ca0c0e52

📥 Commits

Reviewing files that changed from the base of the PR and between 15b8f31 and 34a9f91.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

[openshift-ci]

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/pr-check	34a9f91	link	true	/test pr-check

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.