chore(deps): bump prometheus-client from 0.20.0 to 0.22.3

[dependabot]

Bumps prometheus-client from 0.20.0 to 0.22.3.

Release notes

Sourced from prometheus-client's releases.

v0.22.3

See changelog for details.

v0.22.2

See changelog for details.

v0.22.1

See changelog for details.

v0.22.0

See changelog for details.

v0.21.2

See changelog for details.

v0.21.0

See changelog for details.

Changelog

Sourced from prometheus-client's changelog.

[0.22.3]

Added

• Added encode_registry and encode_eof functions to text module. See PR 205.

• Support all platforms with 32 bit atomics lacking 64 bit atomics. See PR 203.

[0.22.2]

Added

• Added Gauge<u32, AtomicU32> implementation. See PR 191.

[0.22.1]

Added

• Added EncodeLabelValue and EncodeLabelKey implementations for Arc, Rc, and Box. See PR 188.

[0.22.0]

Changed

• Simplify Collector trait by enabling Collector::collect to encode metrics directly with a DescriptorEncoder. See PR 149 for details.

[0.21.2]

Added

• Added sub_registry_with_labels method to Registry. See [PR 145].
• Added with_labels and with_prefix_and_labels constructors to Registry. See [PR 147].

... (truncated)

Commits

• 7f570f3 chore: prepare v0.22.3 (#209)
• 0f85e8e docs: enable for protobuf feature (#208)
• a914fc9 feat(encoding): add functions for individually encoding registry & EOF (#205)
• 4b78df1 chore(portability): support all platforms without 64 bit atomics (#203)
• bf196d7 chore(examples/hyper): port to hyper 1.x (#195)
• b462e61 examples/actix-web.rs: default enable compress middleware. (#192)
• de27234 feat(metrics): support Gauge\<u32, AtomicU32> type (#191)
• 4eecdc3 feat(encoding): implement EncodeLabel* for reference types (#188)
• 987037c benches: add baseline cases (#185)
• 23c31bd build(deps): update pyo3 requirement from 0.19 to 0.20 (#168)
• Additional commits viewable in compare view

[github-actions]

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

[github-actions]

SBOM Security Report

Total Packages: 4535

Language Distribution:

• go: 359
• javascript: 3278
• rust: 592
• python: 1

License Distribution:

• MIT: 1269
• Apache-2.0: 46
• CC0-1.0: 43
• BSD-3-Clause: 34
• ISC: 87
• BSD-2-Clause: 41
• Python-2.0: 2
• MPL-2.0: 1
• Unlicense: 5
• CC-BY-4.0: 1
• (Apache-2.0 OR MPL-1.1): 1
• BlueOak-1.0.0: 3
• (AFL-2.1 OR BSD-3-Clause): 2
• (BSD-3-Clause OR GPL-2.0): 1
• 0BSD: 3
• (MIT OR CC0-1.0): 4
• MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found

[github-actions]

Policy Coverage Report

Tools Coverage: 100%
Events Coverage: 100%
Egress Labeled: 100%
Replay Determinism: 100%

All policy gates passed successfully!

[fraware]

Deferred to a dedicated deps wave.

This bump is non-trivial (major/minor jump, lockfile churn, and/or grouped updates). Please leave open until a coordinated tip rebase has green CI; do not land opportunistically.

[github-actions]

Thanks for the PR! CI will run CERT validation and replay checks. Results will appear in workflow badges and artifacts.

[github-actions]

SBOM Security Report

Total Packages: 3287

Language Distribution:

• go: 323
• javascript: 2005
• rust: 653
• python: 1

License Distribution:

• MIT: 1319
• Apache-2.0: 44
• BSD-3-Clause: 43
• CC0-1.0: 43
• ISC: 84
• BSD-2-Clause: 39
• Python-2.0: 1
• MPL-2.0: 1
• Unlicense: 3
• CC-BY-4.0: 1
• (Apache-2.0 OR MPL-1.1): 1
• BlueOak-1.0.0: 3
• (AFL-2.1 OR BSD-3-Clause): 1
• (BSD-3-Clause OR GPL-2.0): 1
• (MIT AND Zlib): 1
• (MIT AND BSD-3-Clause): 1
• 0BSD: 4
• (MIT OR CC0-1.0): 3
• MIT AND ISC: 1

✅ SBOM generated successfully
✅ No GPL licenses detected
✅ No high/critical vulnerabilities found