[dependabot]

Bumps github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.94.1 to 0.95.0.

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.94.2 / 2026-10-22

• [SECURITY] Rebuild with latest quay.io/prometheus/busybox base images to remove the Comodo AAA Services root and emSign ECC Root CA - G3 root CAs. #8907
• [SECURITY] Rebuild with Go 1.27.3 to fix various vulnerabilities. #8907

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.95.0 / 2026-11-04

• [CHANGE] Add alertmanagerConfigFileSystemMode field to the Alertmanager CRD controlling how to process AlertmanagerConfig resources which have references to files from the Alertmanager container's filesystem.
• [FEATURE] Add extraScrapeMetrics field to the Prometheus and PrometheusAgent CRDs. #8810
• [FEATURE] Add extraScrapeMetrics field to the ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #8892
• [FEATURE] Reconcile ScrapeConfig status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #8910
• [FEATURE] Reconcile ServiceMonitor status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #8860
• [FEATURE] Reconcile PodMonitor status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #8859
• [FEATURE] Reconcile Probe status subresource when selected by PrometheusAgent custom resources (requires the StatusForConfigurationResources feature gate). #8930
• [FEATURE] Reconcile AlertmanagerConfig status subresource on Alertmanager reconciliations (requires the StatusForConfigurationResources feature gate). #8261
• [FEATURE] Add labels field to the AlertmanagerConfig to manage route labels. #8761
• [FEATURE] Add support for route labels in the Alertmanager configuration Secret. #8865
• [FEATURE] Add botToken support for the global Telegram configuration in the Alertmanager CRD. #8403
• [ENHANCEMENT] Add distroless images (available under the <version>-distroless tag). #8815
• [ENHANCEMENT] Add --disable-pprof CLI argument. #8920
• [ENHANCEMENT] Configure the log level via the runtime configuration section instead of the --log.level flag for Prometheus >= 3.15.0. #8881
• [BUGFIX] Reject AlertmanagerConfig resources where PagerDuty routingKey and serviceKey references resolve to empty strings. #8842
• [BUGFIX] Rollout Alertmanager pods when the cluster TLS configuration is updated. #8840
• [BUGFIX] Pass imagePullPolicy to the ThanosRuler config-reloader sidecar. #8916
• [BUGFIX] Make the ordering of the ts and level keys consistent in the config-reloader logs (the ts key always comes first). #8913
• [BUGFIX] Reject MSTeamsV2 receivers without a webhook URL. #8908
• [BUGFIX] Add credentials validation for Webex receivers in the AlertmanagerConfig CRD. #8906 #8897
• [BUGFIX] Preserve HTTP client configuration for Azure SD in the ScrapeConfig CRD. #8898
• [BUGFIX] Reject AlertmanagerConfig custom resources with duplicated time interval names. #8896
• [BUGFIX] Improve validation for the PagerDuty receiver in the AlertmanagerConfig CRD. #8842
• [BUGFIX] Add validation for the clientAuthType field in Prometheus, PrometheusAgent, Alertmanager and ThanosRuler CRDs. #8823
• [BUGFIX] Discard unsupported fields in remote-write configuration for the ThanosRuler CRD. #8813
• [BUGFIX] Add zone information to the generated kubelet EndpointSlice. #8864
• [BUGFIX] Preserve the Pushover ttl field when converting AlertmanagerConfig resources. #8866
• [BUGFIX] Handle unset email threading fields when converting AlertmanagerConfig resources. #8858
• [BUGFIX] Add URL validation for the PagerDuty receiver in the Alertmanager configuration Secret. #8221
• [BUGFIX] Add URL validation for the RocketChat receiver in the Alertmanager configuration Secret. #8224
• [BUGFIX] Log errors when namespace flags conflict. #8931

0.94.2 / 2026-10-22

• [SECURITY] Rebuild with latest quay.io/prometheus/busybox base images to remove the Comodo AAA Services root and emSign ECC Root CA - G3 root CAs. #8907
• [SECURITY] Rebuild with Go 1.27.3 to fix various vulnerabilities. #8907

Commits

• c47c772 Merge pull request #8944 from simonpasquier/update-go-mod-files
• b37f40e chore: bump to v0.95.0 in go.mod files
• 56ea50c Merge pull request #8940 from simonpasquier/cut-0.95.0
• 4f483b9 chore: cut v0.95.0
• ea2d5b6 Merge commit from fork
• f161d6b fix: implement alertmanagerConfigFileSystemMode
• 661218a Merge pull request #8939 from simonpasquier/bump-k8s-v0.37.2
• cb74b3a chore: bump k8s.io dependencies to v0.37.2
• ce63980 Merge pull request #8931 from Alja9/fix-namespaces
• 056a6d3 Merge pull request #8930 from yuminn-k/agent-probe-status
• Additional commits viewable in compare view

[copy-pr-bot]

This pull request requires additional validation before any workflows can run on NVIDIA's runners.

Pull request vetters can view their responsibilities here.

Contributors can view more details about this message here.

[devin-ai-integration]

Note

Newer findings are available below. Devin Review posted a newer report on this PR, in addition to the findings presented here.

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no bugs or issues to report.

[devin-ai-integration]

Devin Review found 1 new potential issue.

[devin-ai-integration]

🔍 Verify vendored Kubernetes patch releases

The Kubernetes modules advance to v0.37.2, but their vendored source remains unchanged. Run make validate-modules to check whether the vendor tree matches those releases.

---

Was this helpful? React with 👍 or 👎 to provide feedback.

[dependabot]

Superseded by #3168.