Skip to content

build(deps): bump prometheus-fastapi-instrumentator from 6.1.0 to 8.0.0#619

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/prometheus-fastapi-instrumentator-8.0.0
Open

build(deps): bump prometheus-fastapi-instrumentator from 6.1.0 to 8.0.0#619
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/uv/main/prometheus-fastapi-instrumentator-8.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 11, 2026

Copy link
Copy Markdown
Contributor

Bumps prometheus-fastapi-instrumentator from 6.1.0 to 8.0.0.

Release notes

Sourced from prometheus-fastapi-instrumentator's releases.

8.0.0 / 2026-05-29

  • BREAKING: Ported project to Starlette v1. This includes new required minimum versions of Python, Starlette, and FastAPI. Bumped starlette dependency from >=0.30.0,<1.0.0 to >=1.0.0,<2.0.0. Bumped requires-python from >=3.8 to >=3.10 (starlette dropped support). Bumped fastapi dev dependency to ^0.133.0 (first version supporting starlette v1). Adjusted middleware app parameter type from Starlette to ASGIApp. Thanks to @​bgermann in #357 for implementing it.

v7.1.0

Added

  • Included metrics closure creators have new optional parameter custom_labels to set additional custom static labels. Parameter has not been added to the Instrumentator() constructor. Thanks to @​iocentos for requesting this in #279 and @​martian711 in #287 as well as @​Budlee in #326 for implementing it.

7.0.2 / 2025-01-14

These release notes also cover 7.0.1 which has been yanked due to incorrect license identifier on PyPI.

7.0.2 / 2025-01-14

Fixed

  • Replaced incorrect license identifier in pyproject.toml. Problem introduced with the migration to Poetry 2.0 in the last patch release.

7.0.1 / 2025-01-14

Changed

  • Migrated pyproject.toml to support PEP 621. This comes with a migration to Poetry 2.0. Thanks to @​alexted for bringing this up in #323.

7.0.0 / 2024-03-13

Major release with a single breaking change: Python 3.7 is not supported anymore. Beyond that, three improvements based on various pull requests.

Added

  • Instrumentator now works without FastAPI. This is possible because every FastAPI app is also a Starlette app (but not the other way around). Or to be more specific: FastAPI uses Starlette for things like routing and middleware this package relies on. The change is backwards compatible, even type checkers like mypy should continue working. Thanks to @​mvanderlee for proposing this in #280 and implementing it in #288.

  • Middleware also records duration without streaming in addition to the already existing total latency (i.e. the time consumed for streaming is not included in the duration value). The differentiation can be valuable as it shows the time to first byte.

    This mode is opt-in and can be enabled / used in several ways: The Instrumentator() constructor, the metrics.default() closure, and the metrics.latency() closure now come with the flag should_exclude_streaming_duration. The attribute modified_duration_without_streaming has been added to the metrics.Info class. Instances of metrics.Info are passed to instrumentation functions, where the added value can be used to set metrics.

    Thanks to @​dosuken123 for proposing this in #291 and implementing it in #290.

  • Relaxed type of get_route_name() argument to HTTPConnection. This allows developers to use the get_route_name function for getting the name of websocket routes as well. Thanks to @​pajowu for proposing and implementing this feature in #276.

Removed

  • BREAKING: Dropped support for Python 3.7 which is has reached end-of-life.
Changelog

Sourced from prometheus-fastapi-instrumentator's changelog.

8.0.0 / 2026-05-29

Changed

  • BREAKING: Ported project to Starlette v1. This includes new required minimum versions of Python, Starlette, and FastAPI. Bumped starlette dependency from >=0.30.0,<1.0.0 to >=1.0.0,<2.0.0. Bumped requires-python from >=3.8 to >=3.10 (starlette dropped support). Bumped fastapi dev dependency to ^0.133.0 (first version supporting starlette v1). Adjusted middleware app parameter type from Starlette to ASGIApp. Thanks to @​bgermann in #357 for implementing it.

Fixed

  • Corrected documentation for setting custom labels. Thanks to @​rickie95 in #342 for implementing it.

7.1.0 / 2025-03-19

Added

  • Included metrics closure creators have new optional parameter custom_labels to set additional custom static labels. Parameter has not been added to the Instrumentator() constructor. Thanks to @​iocentos for requesting this in #279 and @​martian711 in #287 as well as @​Budlee in #326 for implementing it.

7.0.2 / 2025-01-14

Fixed

  • Replaced incorrect license identifier in pyproject.toml. Problem introduced with the migration to Poetry 2.0 in the last patch release.

7.0.1 / 2025-01-14

Changed

  • Migrated pyproject.toml to support PEP 621. This comes with a migration to Poetry 2.0. Thanks to @​alexted bringing this up in

... (truncated)

Commits
  • 2f84152 chore: Prepare release v8.0.0
  • 5950ed2 build(deps): bump actions/checkout from 4 to 6
  • 3a212cc build(deps): bump pre-commit-ci/lite-action from 1.0.1 to 1.1.0
  • 631c86d Remove codecov
  • 1f7b5e8 fix(test): Adjust mp for httpx2
  • d7ea56d Revert "ci: Bump lower Python version to 3.12"
  • 7668645 ci: Bump lower Python version to 3.12
  • 7f47420 chore: Bump dev dependencies
  • 1a9c52a ci: Adjust Python and Poetry versions
  • 91a5a66 chore: Apply pre-commit fixes
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [prometheus-fastapi-instrumentator](https://github.com/trallnag/prometheus-fastapi-instrumentator) from 6.1.0 to 8.0.0.
- [Release notes](https://github.com/trallnag/prometheus-fastapi-instrumentator/releases)
- [Changelog](https://github.com/trallnag/prometheus-fastapi-instrumentator/blob/master/CHANGELOG.md)
- [Commits](trallnag/prometheus-fastapi-instrumentator@v6.1.0...v8.0.0)

---
updated-dependencies:
- dependency-name: prometheus-fastapi-instrumentator
  dependency-version: 8.0.0
  dependency-type: direct:development
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file type: misc labels Jun 11, 2026
@github-actions github-actions Bot added the topic: build Related to build, installation & CI label Jun 11, 2026
@socket-security

Copy link
Copy Markdown

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatedpypi/​prometheus-fastapi-instrumentator@​6.1.0 ⏵ 8.0.0100 +1100100100100

View full report

@codecov

codecov Bot commented Jun 11, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 92.30%. Comparing base (00743b2) to head (36ba31a).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #619   +/-   ##
=======================================
  Coverage   92.30%   92.30%           
=======================================
  Files          56       56           
  Lines        2585     2585           
=======================================
  Hits         2386     2386           
  Misses        199      199           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file topic: build Related to build, installation & CI type: misc

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants