Bump io.prometheus:prometheus-metrics-bom from 1.3.10 to 1.4.1

[dependabot]

Bumps io.prometheus:prometheus-metrics-bom from 1.3.10 to 1.4.1.

Release notes

Sourced from io.prometheus:prometheus-metrics-bom's releases.

v1.4.1

What's Changed

🏕 Features

• add missing builder method for escaping scheme by @​zeitlinger in prometheus/client_java#1518

Full Changelog: prometheus/client_java@v1.4.0...v1.4.1

v1.4.0

What's Changed

Unicode support

UTF-8 is now supported for metric and label names!

• this is a backwards compatible change
  • only Prometheus servers that can handle UTF-8 will actually see it
  • otherwise you'll still get the same _ replacement characters as before
• in the push gateway, you have to enable UTF-8 support explicitly
• unit names still do not support UTF-8
• refer to the documentation for details

🏕 Features

• UTF-8 support in metric and label names by @​fedetorres93 in prometheus/client_java#1255
• public StatefulMetric by @​sideeffffect in prometheus/client_java#1474
• Builder.withoutExemplars() setting cannot be overridden via properties by @​cruftex in prometheus/client_java#1477
• Update PrometheusScrapeHandler compression handling by @​jaydeluca in prometheus/client_java#1493

🧹 Chore

• pin mise by @​zeitlinger in prometheus/client_java#1475
• add Nullaway by @​zeitlinger in prometheus/client_java#1511

👒 Dependencies

• Update dependency com.diffplug.spotless:spotless-maven-plugin to v2.45.0 by @​renovate[bot] in prometheus/client_java#1452
• Update module go:github.com/gohugoio/hugo to v0.148.0 by @​renovate[bot] in prometheus/client_java#1453
• Update dependency com.google.errorprone:error_prone_core to v2.40.0 by @​renovate[bot] in prometheus/client_java#1454
• Update eclipse-temurin:21.0.7_6-jre Docker digest to f7d9b21 by @​renovate[bot] in prometheus/client_java#1455
• Update module go:github.com/gohugoio/hugo to v0.148.1 by @​renovate[bot] in prometheus/client_java#1456
• Update jdx/mise-action action to v2.4.0 by @​renovate[bot] in prometheus/client_java#1457
• Update dependency com.github.ben-manes.caffeine:caffeine to v3.2.2 by @​renovate[bot] in prometheus/client_java#1458
• Update prom/prometheus Docker tag to v3.5.0 by @​renovate[bot] in prometheus/client_java#1459
• Update otel/opentelemetry-collector-contrib Docker tag to v0.130.0 by @​renovate[bot] in prometheus/client_java#1460
• Update dependency org.apache.maven.plugins:maven-enforcer-plugin to v3.6.1 by @​renovate[bot] in prometheus/client_java#1462
• Update dependency maven to v3.9.11 by @​renovate[bot] in prometheus/client_java#1461
• Update eclipse-temurin:21.0.7_6-jre Docker digest to 28bede2 by @​renovate[bot] in prometheus/client_java#1463
• Update eclipse-temurin:21.0.7_6-jre Docker digest to 313b224 by @​renovate[bot] in prometheus/client_java#1464
• Update dependency commons-io:commons-io to v2.20.0 by @​renovate[bot] in prometheus/client_java#1468
• Update dependency java to v21.0.8+9.0.LTS by @​renovate[bot] in prometheus/client_java#1465

... (truncated)

Commits

• 8da6c1e add missing builder method for escaping scheme (#1518)
• f613ab4 UTF-8 support in metric and label names (#1255)
• ff23461 Update otel/opentelemetry-collector-contrib Docker tag to v0.132.4 (#1517)
• a24cf80 Update dependency mise to v2025.8.12 (#1516)
• aab5ad3 Update dependency org.apache.maven.plugins:maven-javadoc-plugin to v3.11.3 (#...
• e16e771 Update dependency com.google.protobuf:protobuf-java to v4.32.0 (#1513)
• 3aae6f4 Update dependency org.mockito:mockito-core to v5.19.0 (#1514)
• fb56734 add Nullaway (#1511)
• df6c250 Update otel/opentelemetry-collector-contrib Docker tag to v0.132.2 (#1510)
• fc5aba4 Update grafana/grafana Docker tag to v12.1.1 (#1509)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[shakuzen]

Some tests are failing like the following:

PrometheusNamingConventionTest > formatTagKey() FAILED
    java.lang.AssertionError: 
    Expecting actual:
      "_23_abc__:id__"
    to start with:
      "_23_abc___id__"
        at io.micrometer.prometheusmetrics.PrometheusNamingConventionTest.formatTagKey(PrometheusNamingConventionTest.java:38)

With the UTF-8 support added in the Prometheus client 1.4.0, it seems : is no longer replaced to an underscore (_).

[shakuzen]

@fstab it seems : does not get converted to _ in 1.4.1 but it did in 1.3.10. Is that change intentional? We're calling PrometheusNaming.prometheusName and PrometheusNaming.sanitizeMetricName and PrometheusNaming.sanitizeLabelName. See our PrometheusNamingConvention and the failing tests (formatName and formatTagKey) in PrometheusNamingConventionTest.

[jonatan-ivanov]

I opened prometheus/client_java#1548

[shakuzen]

I've updated our tests for the new behavior in the meantime so this upgrade is included in the M3 release. We can continue to follow-up on this before the 1.16.0 GA release.