[mortyops]

This PR contains the following updates:

Package	Type	Update	Change
aqua:prometheus/prometheus	tools	patch	3.15.0 → 3.15.1

---

Release Notes

prometheus/prometheus (aqua:prometheus/prometheus)

v3.15.1

Compare Source

• [SECURITY] Container images: Update CA certificates to distrust "emSign ECC Root CA - G3" and "Comodo AAA Services root" following the compromise of eMudhra intermediate CA private keys.
• [SECURITY] Build with Go 1.27.3 to fix vulnerabilities in net/http, net/textproto, crypto/tls and html/template.
• [SECURITY] Bump golang.org/x/net to v0.60.0 to fix HTTP/2 vulnerabilities (GO-2026-6603, GO-2026-6610, GO-2026-6611, GO-2026-6612, GO-2026-6617).

---

Configuration

📅 Schedule: (in timezone America/New_York)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

✅ Automated recommendation: APPROVE

Analysis engine: pr-review-local (openai) — fallback (primary failed) · pr-reviewer-action v3.7.0

Verdict: approve

This is a single-line dependency bump in .mise.toml from 3.15.0 to 3.15.1 for aqua:prometheus/prometheus. The change is a straightforward patch update with no other files touched.

Change-by-change findings

.mise.toml (line 56)

• Bumps aqua:prometheus/prometheus from 3.15.0 to 3.15.1. This is a patch-level update (3.15.0 → 3.15.1) and the PR body cites security fixes (CA certificate distrust, Go 1.27.3 build, HTTP/2 vulnerabilities). The version pin format is correct and consistent with the surrounding entries.
• No other files are changed, so there is no risk of Flux substitution collisions, secret leakage, or configuration drift.
• The commit message follows the repo convention: fix(deps): update aqua:prometheus/prometheus ( 3.15.0 ➔ 3.15.1 ).

Standards Compliance

• No plaintext secrets: No secrets introduced. ✅
• Flux substitution: No ${...} literals added. ✅
• Naming: .mise.toml is a valid config file; no kebab-case manifest naming issue. ✅
• Renovate scope: The bump is in scope for the aqua:prometheus/prometheus constraint. ✅
• No postRenderer bash: Not applicable (no HelmRelease changed). ✅
• No secrets under **/resources/**: Not applicable. ✅

Unknowns / Needs Verification

• The PR body references Go 1.27.3 as the build toolchain for Prometheus 3.15.1. The repo's .mise.toml does not pin a Go version for this tool, so the actual build toolchain used by CI or local builds is not visible here. This is informational only — the tool is a CLI utility (promtool), not a container image, so the Go version used to build it does not affect the cluster.

Required Checks

No must_check items were provided in the PR classification. No mandatory review questions to disposition.

[Aviator-Coding]

Digest/patch, risk:low, CI Success pass: merge

promtool pin used by CI tests; mise tool only.

Renovate triage by an agent (goal task 4.2); the owner merges.

[Aviator-Coding]

Merged by an agent through scripts/agent_merge.py (owner decision 2026-10-31) at 327f7905: ['risk:low'], CI Success and AI PR Review green from GitHub Actions, Jev blocker gate clear, no risk:high, steering or merge-gate paths.