Bump prometheus.client.version from 0.13.0 to 0.14.1

[dependabot]

Bumps prometheus.client.version from 0.13.0 to 0.14.1.
Updates simpleclient from 0.13.0 to 0.14.1

Release notes

Sourced from simpleclient's releases.

0.14.1 / 2021-12-19

Bump the log4j version in simpleclient_log4j2 to 2.17.0. Apart from that this release is identical to 0.14.0.

0.14.0 / 2021-12-18

Yet another log4j version update in simpleclient_log4j2: This time to 2.16.0. Note that the log4j dependency in simpleclient_log4j2 has scope provided, i.e. simpleclient_log4j2 does not ship with log4j. simpleclient_log4j2 uses whatever log4j version the monitored application provides at runtime. Updating the log4j dependency in simpleclient_log4j2 helps getting rid of security scanner warnings (see #733), but in order to eliminate the log4j vulnerability you must make sure that the application you monitor ships with an up-to-date log4j version.

Apart from the log4j update we have a new feature:

[ENHANCEMENT] The HTTPServer can now be configured to use SSL (#695). Thanks @​dhoard.

Commits

• 39e40da [maven-release-plugin] prepare release parent-0.14.1
• c867d8e Bump log4j2 version
• c7ed85c Bump log4j-core from 2.16.0 to 2.17.0 in /integration_tests/it_log4j2
• 715aaa3 Added missing @​Test annotation
• 3af6571 [maven-release-plugin] prepare for next development iteration
• db4c538 [maven-release-plugin] prepare release parent-0.14.0
• d30ddee Added cleaner SSL support to HTTPServer
• ffb1416 Bump log4j2 version
• ab82f6f Update common Prometheus files (#730)
• 837bb6d [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Updates simpleclient_httpserver from 0.13.0 to 0.14.1

Release notes

Sourced from simpleclient_httpserver's releases.

0.14.1 / 2021-12-19

Bump the log4j version in simpleclient_log4j2 to 2.17.0. Apart from that this release is identical to 0.14.0.

0.14.0 / 2021-12-18

Yet another log4j version update in simpleclient_log4j2: This time to 2.16.0. Note that the log4j dependency in simpleclient_log4j2 has scope provided, i.e. simpleclient_log4j2 does not ship with log4j. simpleclient_log4j2 uses whatever log4j version the monitored application provides at runtime. Updating the log4j dependency in simpleclient_log4j2 helps getting rid of security scanner warnings (see #733), but in order to eliminate the log4j vulnerability you must make sure that the application you monitor ships with an up-to-date log4j version.

Apart from the log4j update we have a new feature:

[ENHANCEMENT] The HTTPServer can now be configured to use SSL (#695). Thanks @​dhoard.

Commits

• 39e40da [maven-release-plugin] prepare release parent-0.14.1
• c867d8e Bump log4j2 version
• c7ed85c Bump log4j-core from 2.16.0 to 2.17.0 in /integration_tests/it_log4j2
• 715aaa3 Added missing @​Test annotation
• 3af6571 [maven-release-plugin] prepare for next development iteration
• db4c538 [maven-release-plugin] prepare release parent-0.14.0
• d30ddee Added cleaner SSL support to HTTPServer
• ffb1416 Bump log4j2 version
• ab82f6f Update common Prometheus files (#730)
• 837bb6d [maven-release-plugin] prepare for next development iteration
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[brendandburns]

/lgtm
/approve

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: brendandburns, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

• OWNERS [brendandburns]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment