Bump github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.94.0

[dependabot]

Bumps github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.55.1 to 0.94.0.

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.94.0 / 2026-09-09

• [CHANGE] Update the default Alertmanager version to v0.34.0 and discard zero-value duration fields (retention, clusterGossipInterval, clusterPushpullInterval, clusterPeerTimeout) in Alertmanager resources instead of passing them as CLI flags, which Alertmanager rejects and can cause startup failures. Ignored fields are reported via the IgnoredFields status condition. #8800
• [CHANGE] Add named enum types for Hetzner, Docker Swarm, and OpenStack service discovery fields in the ScrapeConfig CRD (HetznerRole, DockerSwarmRole, OpenStackAvailability). #8789
• [CHANGE] Reject empty strings in namespaceDiscovery.names, consulSDConfig.services, and consulSDConfig.tags list fields in the ScrapeConfig CRD. #8786
• [FEATURE] Add retentionPercentage field to Prometheus and PrometheusAgent CRDs for volume-based retention (requires Prometheus >= v3.11.0). Setting only the percentage no longer falls back to the default 24h time-based retention. #8728
• [FEATURE] Add clusterPeerName field to Alertmanager CRD to override the --cluster.peer-name flag (requires Alertmanager >= v0.30.0). #8767
• [FEATURE] Expose status conditions as Prometheus metrics for Prometheus, PrometheusAgent, Alertmanager, and ThanosRuler resources (prometheus_operator_<resource>_status_condition). #8719
• [ENHANCEMENT] Tighten the operator's ClusterRole by replacing wildcard verbs with explicit permissions per resource. #8752
• [ENHANCEMENT] Support webhook_url_file for Discord receiver in Alertmanager configuration Secret (requires Alertmanager >= v0.28.0). #8035
• [BUGFIX] Require Thanos >= v0.42.0 for delayed compaction with object storage uploads, raised from v0.41.0. Thanos v0.41.0 mis-validates the delayed-compaction paths and the sidecar crash-loops; deployments pinned to v0.41.0 fall back to disabling local compaction. #8764
• [BUGFIX] Add URL validation for Mattermost receiver fields in Alertmanager configuration Secret. #8225
• [BUGFIX] Fix operator panic when AlertmanagerConfig Pushover receivers use userKeyFile or tokenFile instead of secret selectors. #8775
• [BUGFIX] Fix operator panic when kubelet Service synchronization fails and the service is unavailable. #8743
• [BUGFIX] Fix resources stuck during deletion when the informer misses the deletion timestamp update. #8727
• [BUGFIX] Fix TracingConfig fields in Prometheus CRD not being serialized due to invalid JSON struct tags. #8730
• [BUGFIX] Fix externalId version gating for Alertmanager SigV4 configuration to require version >= v0.34.0 (was incorrectly set to v0.33.0). #8759

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

[!NOTE] The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564
• [ENHANCEMENT] Add validation for the Slack update_message field in Alertmanager configuration Secret. #8556
• [BUGFIX] Validate target labels in Probe static configuration to prevent invalid Prometheus scrape configs. #7901
• [BUGFIX] Fix goroutine leak and data race in pollBasedListerWatcher. #8593
• [BUGFIX] Validate ProxyConfig in OAuth2 configuration. #8610

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.94.0 / 2026-09-09

• [CHANGE] Update the default Alertmanager version to v0.34.0 and discard zero-value duration fields (retention, clusterGossipInterval, clusterPushpullInterval, clusterPeerTimeout) in Alertmanager resources instead of passing them as CLI flags, which Alertmanager rejects and can cause startup failures. Ignored fields are reported via the IgnoredFields status condition. #8800
• [CHANGE] Add named enum types for Hetzner, Docker Swarm, and OpenStack service discovery fields in the ScrapeConfig CRD (HetznerRole, DockerSwarmRole, OpenStackAvailability). #8789
• [CHANGE] Reject empty strings in namespaceDiscovery.names, consulSDConfig.services, and consulSDConfig.tags list fields in the ScrapeConfig CRD. #8786
• [FEATURE] Add retentionPercentage field to Prometheus and PrometheusAgent CRDs for volume-based retention (requires Prometheus >= v3.11.0). Setting only the percentage no longer falls back to the default 24h time-based retention. #8728
• [FEATURE] Add clusterPeerName field to Alertmanager CRD to override the --cluster.peer-name flag (requires Alertmanager >= v0.30.0). #8767
• [FEATURE] Expose status conditions as Prometheus metrics for Prometheus, PrometheusAgent, Alertmanager, and ThanosRuler resources (prometheus_operator_<resource>_status_condition). #8719
• [ENHANCEMENT] Tighten the operator's ClusterRole by replacing wildcard verbs with explicit permissions per resource. #8752
• [ENHANCEMENT] Support webhook_url_file for Discord receiver in Alertmanager configuration Secret (requires Alertmanager >= v0.28.0). #8035
• [BUGFIX] Require Thanos >= v0.42.0 for delayed compaction with object storage uploads, raised from v0.41.0. Thanos v0.41.0 mis-validates the delayed-compaction paths and the sidecar crash-loops; deployments pinned to v0.41.0 fall back to disabling local compaction. #8764
• [BUGFIX] Add URL validation for Mattermost receiver fields in Alertmanager configuration Secret. #8225
• [BUGFIX] Fix operator panic when AlertmanagerConfig Pushover receivers use userKeyFile or tokenFile instead of secret selectors. #8775
• [BUGFIX] Fix operator panic when kubelet Service synchronization fails and the service is unavailable. #8743
• [BUGFIX] Fix resources stuck during deletion when the informer misses the deletion timestamp update. #8727
• [BUGFIX] Fix TracingConfig fields in Prometheus CRD not being serialized due to invalid JSON struct tags. #8730
• [BUGFIX] Fix externalId version gating for Alertmanager SigV4 configuration to require version >= v0.34.0 (was incorrectly set to v0.33.0). #8759

0.93.1 / 2026-08-10

• [BUGFIX] Fix duplicate kubelet targets for nodes reporting several addresses of the same IP family. #8739
• [BUGFIX] Fix argument list for Thanos containers when custom TLS ciphers or curves are specified. #8749

0.93.0 / 2026-07-28

• [CHANGE] Switch from uint to int types in the Go definition of the CRDs and add API validations to reject negative values. #8662 #8666
• [CHANGE] Keep local Prometheus compaction enabled when the Thanos sidecar uploads to object storage, for Prometheus >= v3.9.0 and Thanos >= v0.41.0. The operator now coordinates uploads through the shipper meta file (--storage.tsdb.delay-compact-file.path, --shipper.meta-file-name, --shipper.ignore-unequal-block-size) instead of disabling compaction. Set spec.disableCompaction: true to keep the previous behavior. #8694
• [CHANGE] Define a default value of 1 for .spec.shards for Prometheus and PrometheusAgent CRDs. #8691
• [CHANGE/BUGFIX] Add validation markers to all unsigned int fields to reject negative values. #8662
• [CHANGE/BUGFIX] Disable metadata sending when the remote-write configuration uses message version v2.0. #8700
• [FEATURE] Add updateMessage field to the Slack receiver in the AlertmanagerConfig CRD. #8506
• [FEATURE] Add chunkEncoding field to TSDBSpec for runtime float encoding selection in Prometheus and PrometheusAgent CRDs. #8675
• [ENHANCEMENT] Use pod's name as the peer name for Alertmanager >= v0.30.0. #8705
• [BUGFIX] Create IPv6 EndpointSlice for the kubelet Service on dual-stack clusters. #8682

0.92.1 / 2026-06-30

• [BUGFIX] Fix "namespace not found" errors when the operator watches monitoring and workload resources in different resources. #8658

0.92.0 / 2026-06-18

Note: The PrometheusTopologySharding and PrometheusShardRetentionPolicy feature gates have been promoted to Beta in this release and are now enabled by default. See the sharding documentation for details.

• [CHANGE] Add URL validation for the tokenUrl field in OAuth2 configuration across all CRDs. #8579
• [CHANGE] Add URL validation for the url field in RemoteReadSpec in Prometheus CRD. #8596
• [FEATURE] Migrate retention options from CLI flags to the config file for Prometheus CRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547
• [FEATURE] Add staleSeriesCompactionThreshold field to TSDBSpec in Prometheus and PrometheusAgent CRDs. #8563
• [FEATURE] Add labelNameUnderscoreSanitization and labelNamePreserveMultipleUnderscores fields to OTLPConfig in Prometheus and PrometheusAgent CRDs. #8562
• [FEATURE] Add payload field to Webhook receiver in AlertmanagerConfig CRD. #8507
• [ENHANCEMENT] Use pod topology labels for zone sharding on Kubernetes >= 1.35 when the PrometheusTopologySharding feature gate is enabled (removes the need for attachMetadata.node=true). #8564

... (truncated)

Commits

• 2e4af1d Merge pull request #8805 from slashpai/cut-v0.94
• ac6c5f5 chore: cut v0.94.0
• 14007db Merge pull request #8804 from prometheus-operator/dependabot/go_modules/scrip...
• a739ad7 build(deps): bump google.golang.org/grpc in /scripts
• 326e6c5 Merge pull request #8800 from slashpai/am-v0.34
• 6497455 Merge pull request #8803 from prometheus-operator/dependabot/go_modules/golan...
• 2538741 build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0
• 86b0032 test: add e2e test for IgnoredFields on zero durations
• f8df9a4 change: discard zero duration fields and report IgnoredFields status
• f0b48b4 change: update default Alertmanager version to v0.34.0
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated underlying monitoring, serialization, networking, text-processing, and Kubernetes API dependencies.
  • No user-facing features or behavior changes were identified.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 3e082542-e906-43e4-b0d6-cffa6aeb39b4

📥 Commits

Reviewing files that changed from the base of the PR and between 7deff84 and f16cae3.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 9 remain after this review.

---

Walkthrough

The module file updates the Prometheus Operator monitoring APIs and four indirect dependencies. No exported or public entities change.

Changes

Dependency Updates

Layer / File(s)	Summary
Module dependency versions go.mod	Prometheus Operator monitoring APIs update from v0.55.1 to v0.94.0. Indirect dependencies update for fxamacker/cbor, golang.org/x/net, golang.org/x/text, and k8s.io/kube-openapi.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Merge Risk: ⚪ Minimal · up to f16ca

The dependency updates are mergeable with no identified current-head risk requiring resolution before merge.

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and specifically describes the primary dependency update from version 0.55.1 to 0.94.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS: The review-scoped diff changes only go.mod and go.sum. It contains dependency version and checksum updates only, with no Go test files or Ginkgo declarations. Therefore, the pull request introdu…
Test Structure And Quality	✅ Passed	PASS: The reviewed range changes only go.mod and go.sum. The patch contains dependency version and checksum updates, with no added or modified Ginkgo test code. Therefore, the listed test-structure re…
Microshift Test Compatibility	✅ Passed	The pull request changes only go.mod and go.sum. The authoritative diff adds no Ginkgo tests, test files, or test bodies. Therefore, the MicroShift test compatibility check does not apply.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The reviewed range changes only go.mod and go.sum. It adds no Ginkgo e2e tests, test files, or test constructs such as It(), Describe(), Context(), or When(). Therefore, the SNO multi-node compa…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS. The reviewed range changes only go.mod and go.sum. The patch contains dependency versions and checksums only. It adds or modifies no deployment manifest, operator code, controller, or scheduling…
Ote Binary Stdout Contract	✅ Passed	PASS. The authoritative pull-request diff changes only go.mod and go.sum. The patch updates dependency versions and checksums; it contains no Go source, main/suite setup, logging, klog, or stdout writ…
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The reviewed range changes only go.mod and go.sum. It adds no Ginkgo e2e tests or other test files, so the IPv4 and external-connectivity conditions do not apply.
No-Weak-Crypto	✅ Passed	PASS. The pull request changes only go.mod and go.sum; it adds no cryptographic code. AST searches found no weak-crypto calls in repository Go code. The new Prometheus monitoring API and other upd…
Container-Privileges	✅ Passed	The pull request changes only go.mod and go.sum. It does not change any container or Kubernetes manifest, source file, or privilege setting. The reviewed diff contains no privileged:true, hostPID, hos…
No-Sensitive-Data-In-Logs	✅ Passed	PASS: The pull request changes only go.mod and go.sum. It adds no logging code or log arguments. The upgraded Prometheus Operator API module contains no logging imports or print/log calls, and reposit…

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring-0.94.0

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign tnierman for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/pr-check	f16cae3	link	true	/test pr-check
ci/prow/rosa-sts-e2e	f16cae3	link	false	/test rosa-sts-e2e

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[dependabot]

Superseded by #646.