mirror of https://github.com/hanzoai/common.git synced 2026-10-30 18:44:05 +00:00

Files

T

zeekay a69115fd35 fork: prometheus/common v0.67.5 — drop mwitkow/go-conntrack instrumentation

Module path renamed github.com/prometheus/common → github.com/hanzoai/common.
The only functional patch is config/http_config.go: strip conntrack-based
dial-context instrumentation, replace with stdlib net.Dialer. This breaks
the transitive chain prometheus/common/config → mwitkow/go-conntrack →
prometheus/client_golang/prometheus that was leaking into every consumer
of prometheus/common/config (alertmanager notifiers, etc.).

Functional impact: HTTP clients built via NewClientFromConfig no longer
emit go-conntrack connection-tracking metrics (active/closed counters).
The connection count is observable via the underlying http.Transport
metrics that luxfi/metric ships, so this is loss-of-observability-zero
for callers on the Hanzo/Lux stack.

2026-05-22 21:07:19 -07:00

172 B

Raw Permalink Blame History

Reporting a security issue

The Prometheus security policy, including how to report vulnerabilities, can be found here:

https://prometheus.io/docs/operating/security/

172 B Raw Permalink Blame History

Reporting a security issue

172 B

Raw Permalink Blame History