Update module github.com/prometheus/exporter-toolkit to v0.15.0

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/prometheus/exporter-toolkit	v0.14.1 -> v0.15.0

---

Release Notes

prometheus/exporter-toolkit (github.com/prometheus/exporter-toolkit)

v0.15.0

Compare Source

What's Changed

• Update GitHub Actions by @​SuperQ in #​346
• feat: Add Rate Limiting by @​mrueg in #​331
• Update supported Go versions by @​SuperQ in #​352
• Bump golang.org/x/time from 0.12.0 to 0.13.0 by @​dependabot[bot] in #​348
• Bump golang.org/x/crypto from 0.41.0 to 0.42.0 by @​dependabot[bot] in #​351
• Bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.3 by @​dependabot[bot] in #​350
• Remove obsolete CircleCI config by @​SuperQ in #​355

Full Changelog: prometheus/exporter-toolkit@v0.14.1...v0.15.0

---

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) in timezone America/Los_Angeles, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/crypto	v0.42.0 -> v0.43.0
golang.org/x/net	v0.44.0 -> v0.45.0
golang.org/x/sys	v0.36.0 -> v0.37.0
golang.org/x/text	v0.29.0 -> v0.30.0

[github-actions]

Dependency Review

The following issues were found:

• ❌ 1 vulnerable package(s)
• ✅ 0 package(s) with incompatible licenses
• ✅ 0 package(s) with invalid SPDX license definitions
• ⚠️ 5 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

go.mod

Name	Version	Vulnerability	Severity
golang.org/x/crypto	0.43.0	golang.org/x/crypto/ssh allows an attacker to cause unbounded memory consumption	moderate
		golang.org/x/crypto/ssh/agent vulnerable to panic if message is malformed due to out of bounds read	moderate

License Issues

go.mod

Package	Version	License	Issue Type
golang.org/x/crypto	0.43.0	Null	Unknown License
golang.org/x/net	0.45.0	Null	Unknown License
golang.org/x/sys	0.37.0	Null	Unknown License
golang.org/x/text	0.30.0	Null	Unknown License
golang.org/x/time	0.13.0	Null	Unknown License

Allowed Licenses:

Apache-1.1, Apache-2.0, BSD-2-Clause, BSD-3-Clause, BSL-1.0, ISC, MIT, NCSA, OpenSSL, Python-2.0, X11, CC0-1.0, CC-BY-4.0

Excluded from license check:

pkg:githubactions/fossas/fossa-action, pkg:githubactions/opentofu/setup-opentofu, pkg:golang/github.com/shoenig/go-m1cpu, pkg:pypi/pytest-metadata

OpenSSF Scorecard

Package	Version	Score	Details
gomod/golang.org/x/crypto	0.43.0	Unknown	Unknown
gomod/github.com/prometheus/exporter-toolkit	0.15.0	🟢 7.8	Details Check Score Reason Security-Policy 🟢 9 security policy file detected Code-Review 🟢 9 Found 16/17 approved changesets -- score normalized to 9 Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 13 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies 🟢 10 all dependencies are pinned CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Token-Permissions ⚠️ 0 detected GitHub workflow tokens with excessive permissions Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Vulnerabilities 🟢 10 0 existing vulnerabilities detected SAST 🟢 10 SAST tool is run on all commits
gomod/golang.org/x/net	0.45.0	Unknown	Unknown
gomod/golang.org/x/sys	0.37.0	Unknown	Unknown
gomod/golang.org/x/text	0.30.0	Unknown	Unknown
gomod/golang.org/x/time	0.13.0	Unknown	Unknown

Scanned Files

• go.mod