From 4f405cb261675ebe4027089204cabec326ec8dcf Mon Sep 17 00:00:00 2001
From: "cycode-security[bot]"
 <54410473+cycode-security[bot]@users.noreply.github.com>
Date: Tue, 5 May 2026 23:42:43 +0000
Subject: [PATCH] [Cycode] Fix for vulnerable manifest file dependency -
 github.com/prometheus/prometheus updated to version 0.311.3

---
 go.mod | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/go.mod b/go.mod
index c677e56..e2bc4cf 100644
--- a/go.mod
+++ b/go.mod
@@ -9,7 +9,7 @@ require (
 	github.com/golang/snappy v0.0.4
 	github.com/open-telemetry/opentelemetry-collector-contrib/exporter/prometheusremotewriteexporter v0.111.0
 	github.com/open-telemetry/opentelemetry-collector-contrib/pkg/resourcetotelemetry v0.111.0
-	github.com/prometheus/prometheus v0.54.1
+	github.com/prometheus/prometheus v0.311.3
 	github.com/stretchr/testify v1.9.0
 	go.opentelemetry.io/collector/component v0.111.0
 	go.opentelemetry.io/collector/config/confighttp v0.111.0