Comparing changes

## What changed Pass `--repo "${GITHUB_REPOSITORY}"` to the `gh workflow run release.yml` call in `release-please.yml`. ## Why The `Release Please` workflow dispatch step runs without a checkout, so `gh` cannot infer the repository from `.git`. The failed run for `v1.6.0` stopped with `fatal: not a git repository` before `release.yml` was dispatched. ## Impact This allows the existing release workflow to be triggered from the `Release Please` job without adding an unnecessary checkout step. ## Validation - Inspected the failing Actions job `73146303246` and confirmed the dispatch step was the failure point. - Verified comparable repositories commonly pass `--repo` explicitly when dispatching workflows from Actions. - Ran `mise run lint` locally. ## Follow-up After this lands, `release.yml` can be manually dispatched with `tag=v1.6.0` to publish the existing tag.

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [mise](https://redirect.github.com/jdx/mise) | patch | `v2026.4.18` → `v2026.4.23` | --- ### Release Notes <details> <summary>jdx/mise (mise)</summary> ### [`v2026.4.23`](https://redirect.github.com/jdx/mise/releases/tag/v2026.4.23): : Pre-releases, libc preference, and a Node musl fix [Compare Source](https://redirect.github.com/jdx/mise/compare/v2026.4.22...v2026.4.23) A patch release that adds a global `libc` preference and pre-release opt-in for `github:`/`aqua:` backends, alongside fixes for Node musl downloads, read-only system installs, and `mise prune` network hangs. #### Added - **(backend)** Per-tool `prerelease = true` opt-in for the `github:` and `aqua:` backends ([#9329](https://redirect.github.com/jdx/mise/pull/9329)) by [@jakedgy](https://redirect.github.com/jakedgy). When set, GitHub releases flagged `prerelease: true` show up in `mise ls-remote`, `latest` resolves against the full list including pre-releases, and fuzzy queries like `1.2` can match pre-release tags. Default behavior is unchanged; draft releases are still excluded. ```toml [tools] "github:myorg/mytool" = { version = "latest", prerelease = true } "aqua:owner/tool" = { version = "latest", prerelease = true } ``` - **(backend)** Global `libc` setting for selecting Linux precompiled binary variants ([#9404](https://redirect.github.com/jdx/mise/pull/9404)) by [@jdx](https://redirect.github.com/jdx). Accepts `musl`, `glibc`, or `gnu` and threads through `Platform::current()`/`PlatformTarget` so generic GitHub asset matching, aqua registry replacements (e.g. `unknown-linux-gnu` ↔ `unknown-linux-musl`), Bun, Python precompiled builds, Node, and vfox `envType` all honor the preference. ```sh export MISE_LIBC=musl ``` #### Fixed - **(install)** Stop rewriting healthy runtime symlinks ([#9410](https://redirect.github.com/jdx/mise/pull/9410)) by [@jdx](https://redirect.github.com/jdx). The rebuild path was unconditionally `remove_all` + recreating every `latest -> X.Y.Z` symlink, which became a hard failure under the common Docker pattern where root populates `/usr/local/share/mise/installs/` at build time and a non-root user runs `mise install` at runtime. Healthy symlinks now take a no-op path; the read-only system dir is no longer touched. If a write is genuinely required and can't happen, the install fails loudly instead of silently leaving a stale `latest`. - **(node)** Route musl tarball URLs to `unofficial-builds.nodejs.org` ([#9409](https://redirect.github.com/jdx/mise/pull/9409)) by [@jdx](https://redirect.github.com/jdx). After [#9404](https://redirect.github.com/jdx/mise/pull/9404) Node started appending `-musl` to filenames but kept routing through `nodejs.org/dist/` (which doesn't host them), causing 404s and lockfiles where the URL had a `-musl` suffix while the checksum was still pinned to the glibc tarball. The tarball URL and matching `SHASUMS256.txt` now come from the same host, and a custom `node.mirror_url` still passes through unchanged. Lockfile merging is also hardened to drop stale `checksum`/`size`/`url_api` when URLs disagree. - **(prune)** Skip remote version resolution for tracked configs ([#9406](https://redirect.github.com/jdx/mise/pull/9406)) by [@jdx](https://redirect.github.com/jdx). `mise prune` was hitting npm, the Go proxy, and the GitHub API to resolve tracked-config tool versions, which could hang on slow or failing registries. Since prune only protects *installed* versions from deletion, an `offline` flag is now threaded through `ResolveOptions` for prune. `mise upgrade` is unchanged and still queries fresh remote data. Closes [#9405](https://redirect.github.com/jdx/mise/discussions/9405). - **(backend)** Allow unresolved `latest` opt-in ([#9401](https://redirect.github.com/jdx/mise/pull/9401)) by [@jdx](https://redirect.github.com/jdx). `latest` now falls back to an unresolved selector only when a backend's unfiltered remote version list is empty *and* the backend opts in via `unresolved_latest_version()`. `pipx` opts in for git-backed requests; backends that require concrete versions continue to fail rather than create literal `latest/` installs. If `minimum_release_age` filters all candidates out, mise still reports no matching version. - **(schema)** Allow array values in tool `additionalProperties` ([#9400](https://redirect.github.com/jdx/mise/pull/9400)) by [@JP-Ellis](https://redirect.github.com/JP-Ellis). Configs like `rust = { version = "1.77", components = ["rustfmt", "clippy"] }` are no longer flagged as invalid by linters such as tombi. #### Registry - Use aqua for `rumdl` ([#9397](https://redirect.github.com/jdx/mise/pull/9397)) by [@scop](https://redirect.github.com/scop) - Add `llmfit` ([#9412](https://redirect.github.com/jdx/mise/pull/9412)) by [@jylenhof](https://redirect.github.com/jylenhof) #### New Contributors - [@JP-Ellis](https://redirect.github.com/JP-Ellis) made their first contribution in [#9400](https://redirect.github.com/jdx/mise/pull/9400) **Full Changelog**: <jdx/mise@v2026.4.22...v2026.4.23> ### [`v2026.4.22`](https://redirect.github.com/jdx/mise/releases/tag/v2026.4.22): : Repaired latest resolution and clearer deps output [Compare Source](https://redirect.github.com/jdx/mise/compare/v2026.4.21...v2026.4.22) A focused patch release that repairs two `@latest` regressions, gives `mise deps` clearer per-provider output labels, and renames the `install_before` setting to `minimum_release_age` to match the wider ecosystem. #### Highlights - `@latest` resolution is fixed for Go modules that only publish pseudo-versions, and stale `installs/<tool>/latest/` directories are now repaired automatically. - The `install_before` setting has been renamed to `minimum_release_age`; the old name keeps working as a deprecated alias. - `mise deps` output is now labeled by provider (e.g. `[deps.codegen]`) instead of repeating the raw command. - Fedora 44 and Rawhide are now supported in the COPR build. #### Fixed - **(backend)** Two separate `@latest` issues are repaired in [#9383](https://redirect.github.com/jdx/mise/pull/9383) by [@jdx](https://redirect.github.com/jdx): - Go modules that enumerate zero versions now resolve `@latest` via `go list -m -json <module>@latest`, so modules that only publish pseudo-versions still install a concrete version. - Stale real `installs/<tool>/latest/` directories are now repaired generically by the runtime symlink migration. The migration reruns under a new marker and refreshes only `install_state` after rewriting directories, so the current process picks up the repaired layout without rebuilding the backend map (which previously broke config aliases). Numeric partial-version dirs such as `installs/<tool>/25/` are left alone, and real direct-URL `latest` installs (e.g. UBI URL installs) are preserved when there is no concrete version to replace them with. - **(task)** `mise deps` output is now labeled with a stable `[deps.<provider>]` prefix on stdout/stderr (and in the progress message) instead of using the raw `run` command as the prefix, making repeated output from commands like `pip install -r requirements.txt` much easier to follow. `mise deps add/remove` continues to run unprefixed. ([#9385](https://redirect.github.com/jdx/mise/pull/9385)) by [@jdx](https://redirect.github.com/jdx) #### Changed - **(config)** The `install_before` setting and per-tool option have been renamed to `minimum_release_age`, matching pnpm's terminology. The old `install_before` name is preserved as a hidden, deprecated alias — global settings are migrated at load time, per-tool options resolve through the new key, and the JSON schema marks the old name as deprecated. Precedence is unchanged: `--before` > per-tool > global. ([#9384](https://redirect.github.com/jdx/mise/pull/9384)) by [@jdx](https://redirect.github.com/jdx) #### Added - **(copr)** Fedora 44 and Rawhide are now supported by the COPR build script. ([#9391](https://redirect.github.com/jdx/mise/pull/9391)) by [@bestagi](https://redirect.github.com/bestagi) #### Documentation - The docs site nav now displays the current release version (read from `Cargo.toml` at build time), linking to the GitHub releases page. The build emits a warning if the version cannot be parsed instead of silently falling back. ([#9388](https://redirect.github.com/jdx/mise/pull/9388), [#9389](https://redirect.github.com/jdx/mise/pull/9389)) by [@jdx](https://redirect.github.com/jdx) #### Aqua Registry Updated [aqua-registry](https://redirect.github.com/aquaproj/aqua-registry) from [v4.498.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.498.0) to [v4.499.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.499.0). #### Sponsor mise mise is built by [@jdx](https://redirect.github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors. If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). **Full Changelog**: <jdx/mise@v2026.4.21...v2026.4.22> ### [`v2026.4.21`](https://redirect.github.com/jdx/mise/releases/tag/v2026.4.21): : untrust command and prune lockfile fixes [Compare Source](https://redirect.github.com/jdx/mise/compare/v2026.4.20...v2026.4.21) A patch release that adds a new `mise untrust` command, teaches `mise prune` to skip tools tracked in lockfiles, and tightens GitHub asset auto-detection. > \[!NOTE] > This release was tagged but the publish job failed before assets were uploaded. v2026.4.22 ships the same fixes alongside additional changes — install that release instead. These notes are preserved here for the changelog. #### Highlights - New `mise untrust` command revokes trust on a config file. - `mise prune` now respects tracked lockfiles and no longer removes tools listed in them. - GitHub asset auto-detection prefers the shortest asset name as a tiebreaker, avoiding spurious matches on longer-named variants. - New `--security` flag on `mise registry` includes security info in JSON output. #### Added - **(registry)** `--security` flag on `mise registry` includes security info in JSON output. ([#9364](https://redirect.github.com/jdx/mise/pull/9364)) by [@jdx](https://redirect.github.com/jdx) - **(trust)** New `mise untrust` command. ([#9370](https://redirect.github.com/jdx/mise/pull/9370)) by [@jdx](https://redirect.github.com/jdx) #### Fixed - **(config)** Resolved backend opts are now limited to aliases. ([#9315](https://redirect.github.com/jdx/mise/pull/9315)) by [@risu729](https://redirect.github.com/risu729) - **(github)** Asset auto-detection prefers the shortest asset name as a tiebreaker. ([#9361](https://redirect.github.com/jdx/mise/pull/9361)) by [@jdx](https://redirect.github.com/jdx) - **(java)** Newer Zulu versions are detected correctly — they use a different directory structure than older releases. ([#9365](https://redirect.github.com/jdx/mise/pull/9365)) by [@roele](https://redirect.github.com/roele) - **(prune)** `mise prune` now respects tracked lockfiles. ([#9373](https://redirect.github.com/jdx/mise/pull/9373)) by [@jdx](https://redirect.github.com/jdx) - **(task)** Tool installation is skipped for missing naked tasks instead of failing the run. ([#9374](https://redirect.github.com/jdx/mise/pull/9374)) by [@jdx](https://redirect.github.com/jdx) #### Documentation - The docs site dismissible banner stacks its message and link on mobile. ([#9362](https://redirect.github.com/jdx/mise/pull/9362)) by [@jdx](https://redirect.github.com/jdx) - Ruby compile message updated. ([#9338](https://redirect.github.com/jdx/mise/pull/9338)) by [@fladson](https://redirect.github.com/fladson) #### Registry - Fix `flux-operator-mcp` aqua path. ([#9357](https://redirect.github.com/jdx/mise/pull/9357)) by [@monotek](https://redirect.github.com/monotek) - Remove `openshift-install`. ([#9372](https://redirect.github.com/jdx/mise/pull/9372)) by [@jdx](https://redirect.github.com/jdx) - Remove `go-sdk`. ([#9371](https://redirect.github.com/jdx/mise/pull/9371)) by [@jdx](https://redirect.github.com/jdx) #### New Contributors - [@fladson](https://redirect.github.com/fladson) made their first contribution in [#9338](https://redirect.github.com/jdx/mise/pull/9338) #### Sponsor mise mise is built by [@jdx](https://redirect.github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors. If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). **Full Changelog**: <jdx/mise@v2026.4.20...v2026.4.21> ### [`v2026.4.20`](https://redirect.github.com/jdx/mise/releases/tag/v2026.4.20): : Lockfile cleanup and path: fixes [Compare Source](https://redirect.github.com/jdx/mise/compare/v2026.4.19...v2026.4.20) A focused patch release that cleans up two long-standing lockfile and path-resolution bugs, makes GitHub attestation verification tolerant of regex-based aqua registry URLs, and reworks how the aqua registry is baked into mise. #### Highlights - `mise lock tool@latest` now writes a concrete version and heals lockfiles already poisoned with `version = "latest"`. - `path:` tool versions with relative paths resolve correctly against the config root. - Aqua registry is now baked from the upstream merged `registry.yaml`, pinned by tag. - GitHub artifact attestation works for registry entries that use regex URLs. #### Fixed - **(config)** Relative `path:` tool versions are now resolved at parse time against the config's root directory (or CWD for CLI args), with `~/` expansion and leading `./` stripped. Previously, a value like `path:./packages/logr` was joined with `installs_path` at install time and produced a bogus directory such as `~/.local/share/mise/installs/logr/./packages/logr`. ([#9320](https://redirect.github.com/jdx/mise/pull/9320)) by [@jdx](https://redirect.github.com/jdx) - **(lock)** `mise lock` handling of `@latest` has been overhauled ([#9321](https://redirect.github.com/jdx/mise/pull/9321) by [@jdx](https://redirect.github.com/jdx)): - `mise lock tool@latest` now resolves `latest` to the newest installed version instead of writing the literal string `"latest"` into the lockfile. - `mise lock` no longer produces duplicate `[[tools.<name>]]` entries when the config uses `tool = "latest"`. - Lockfiles already poisoned with `version = "latest"` are cleaned up in a single `mise lock` run. - GitHub artifact attestation verification now works when the aqua registry entry uses a regex in the workflow URL, unblocking installs such as `aqua:updatecli/updatecli`. ([#9327](https://redirect.github.com/jdx/mise/pull/9327)) by [@monotek](https://redirect.github.com/monotek) #### Changed - **(aqua)** The baked aqua registry source has been swapped for the upstream merged `registry.yaml`, pinned by tag via `crates/aqua-registry/aqua-registry/metadata.json`. The build script generates a canonical package-id map plus an alias lookup table, so runtime lookups only parse the selected package YAML. The pinned tag is now visible in `mise doctor`. ([#9043](https://redirect.github.com/jdx/mise/pull/9043)) by [@risu729](https://redirect.github.com/risu729) #### Added - New registry entry: `grafana-kubernetes-plugin`. ([#9300](https://redirect.github.com/jdx/mise/pull/9300)) by [@monotek](https://redirect.github.com/monotek) #### Documentation - A dismissible announcement banner has been added to the docs site, driven by a remote JSON config. Link schemes are restricted to `http`/`https`, dismissals persist per-id in `localStorage`, and the banner height is kept in sync with `--vp-layout-top-height` via a `ResizeObserver`. The `expires` field is respected so banners automatically hide after a given date. ([#9326](https://redirect.github.com/jdx/mise/pull/9326), [#9330](https://redirect.github.com/jdx/mise/pull/9330), [#9334](https://redirect.github.com/jdx/mise/pull/9334)) by [@jdx](https://redirect.github.com/jdx) #### Aqua Registry Updated [aqua-registry](https://redirect.github.com/aquaproj/aqua-registry) from [v4.492.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.492.0) to [v4.498.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.498.0), which includes: - [v4.493.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.493.0) - [v4.494.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.494.0) - [v4.494.1](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.494.1) - [v4.495.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.495.0) - [v4.496.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.496.0) - [v4.497.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.497.0) - [v4.498.0](https://redirect.github.com/aquaproj/aqua-registry/releases/tag/v4.498.0) #### Sponsor mise mise is built by [@jdx](https://redirect.github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors. If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). Individual and company sponsorships keep mise fast, free, and independent. **Full Changelog**: <jdx/mise@v2026.4.19...v2026.4.20> ### [`v2026.4.19`](https://redirect.github.com/jdx/mise/releases/tag/v2026.4.19): : OCI images, aqua templates, and more resilient installs [Compare Source](https://redirect.github.com/jdx/mise/compare/v2026.4.18...v2026.4.19) This release adds a new way to package environments as OCI images, improves backend flexibility with aqua variable templating, and tightens several authentication and concurrency edge cases that were causing friction in real workflows. The biggest addition is `mise` support for building OCI images directly from `mise.toml`, with per-tool layering to make image rebuilds more efficient. Alongside that, aqua-backed tools can now use templated variables, which should make more registries and package definitions work cleanly without custom glue. On the reliability side, fixes in conda, GitHub auth handling, vfox token usage, and interactive CLI cancellation should make automation and authenticated installs behave more predictably. #### Highlights - Build OCI images directly from `mise.toml` with per-tool image layers. - Support aqua variable templates in backends. - Fix several GitHub and token-handling issues affecting authenticated requests. - Improve install reliability for conda and backend path handling. - Add new registry entries including `gsudo`, `kiro-cli`, `llama.cpp`, and Flux operator tooling. #### Changes ##### Features - **(oci)** build OCI images from `mise.toml` with per-tool layers by [@jdx](https://redirect.github.com/jdx) in [#9273](https://redirect.github.com/jdx/mise/pull/9273) - **(backend)** support aqua vars templates by [@jdx](https://redirect.github.com/jdx) in [#9110](https://redirect.github.com/jdx/mise/pull/9110) - add `gsudo` (Sudo for Windows) to registry by [@jdx](https://redirect.github.com/jdx) in [#9281](https://redirect.github.com/jdx/mise/pull/9281) ##### Bug Fixes - **(cli)** suppress error output after interactive cancel by [@jdx](https://redirect.github.com/jdx) in [#9294](https://redirect.github.com/jdx/mise/pull/9294) - **(backend)** stop fuzzy requests installing literal dirs by [@jdx](https://redirect.github.com/jdx) in [#9276](https://redirect.github.com/jdx/mise/pull/9276) - **(conda)** avoid temp file collisions during parallel package downloads by [@jdx](https://redirect.github.com/jdx) in [#9293](https://redirect.github.com/jdx/mise/pull/9293) - **(github)** scope auth headers to API URLs by [@jdx](https://redirect.github.com/jdx) in [#9271](https://redirect.github.com/jdx/mise/pull/9271) - **(cli)** retrieve token from github helper for `self-update` command by [@jdx](https://redirect.github.com/jdx) in [#9259](https://redirect.github.com/jdx/mise/pull/9259) - **(vfox)** use github token for lua http requests by [@jdx](https://redirect.github.com/jdx) in [#9257](https://redirect.github.com/jdx/mise/pull/9257) ##### Registry - add `flux-operator` & `flux-operator-mcp` by [@tiyee](https://redirect.github.com/tiyee) in [#8852](https://redirect.github.com/jdx/mise/pull/8852) - add `kiro-cli` by [@jdx](https://redirect.github.com/jdx) in [#9274](https://redirect.github.com/jdx/mise/pull/9274) - add `llama.cpp` (`github:ggml-org/llama.cpp`) by [@jdx](https://redirect.github.com/jdx) in [#9282](https://redirect.github.com/jdx/mise/pull/9282) #### 💚 Sponsor mise mise is built by [@jdx](https://redirect.github.com/jdx) under [**en.dev**](https://en.dev) — an independent studio making developer tooling (mise, [aube](https://aube.en.dev/), and more). Development is funded by sponsors. If mise saves you or your team time, please consider sponsoring at [en.dev](https://en.dev). Individual and company sponsorships keep mise fast, free, and independent. </details> --- ### Configuration 📅 **Schedule**: (UTC) - Branch creation - "before 4am on Monday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/prometheus/client_java).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>

## Summary Document PR title expectations for AI coding agents working in this repository. - Require semantic/conventional PR title prefixes such as `feat:`, `fix:`, `docs:`, `chore:`, or `test:`. - Tell agents not to use `[codex]` in PR titles. - Ask agents to match the title type to the primary user-facing change. ## Validation - `mise run lint` - `git diff --check` Signed-off-by: Gregor Zeitlinger <[email protected]>

## Summary - add `io.prometheus:prometheus-metrics-bom` to the existing Renovate ignore rule for internal project modules - prevent Renovate PRs that update examples to consume the repo's own just-released BOM while release-please is already moving the repo to the next snapshot ## Testing - `mise exec -- renovate-config-validator .github/renovate.json5`

Refs #1954. ## Summary This fixes OM2 name preservation in the text writer. - Use original metric metadata names in OM2 output instead of OM1 exposition base names. - Preserve original names for default classic histogram output instead of delegating that path to OM1. - Keep the OM2 `_info` exception for info metrics. - Add builder-based regression coverage for counters and classic/native histograms with `.unit(...)`. ## Why `openmetrics2.enabled=true` is documented as preserving metric names as written by the application. The writer still used OM1-derived names in several paths, and classic histograms delegated to the OM1 writer, so `.unit(...)` could still leak unit-suffixed names into OM2 output. ## Smoking gun `prometheus-metrics-core/src/test/java/io/prometheus/metrics/core/metrics/OpenMetrics2TextFormatWriterTest.java` adds `counterPreservesOriginalNameWhenUnitIsConfigured()`. That test builds a real counter through the public builder API: ```java Counter.builder().name("my_counter").unit(Unit.SECONDS) ``` It then asserts that OM1 still emits the legacy name `my_counter_seconds_total`, while OM2 emits `my_counter` and does not contain `my_counter_seconds`. I verified this test fails against pre-fix `origin/main` when only the test is applied: ```text OpenMetrics2TextFormatWriterTest.counterPreservesOriginalNameWhenUnitIsConfigured Expecting actual: "# TYPE my_counter_seconds counter # UNIT my_counter_seconds seconds # HELP my_counter_seconds Test counter my_counter_seconds{method="GET"} 42.0 st@... # EOF " to contain: "# TYPE my_counter counter " ``` That is the bug this PR fixes: OM2 was still using the OM1 unit-suffixed metric name. ## Validation - `./mvnw test -pl prometheus-metrics-core,prometheus-metrics-exposition-textformats -am -Dtest=OpenMetrics2TextFormatWriterTest -Dcoverage.skip=true -Dcheckstyle.skip=true -Dsurefire.failIfNoSpecifiedTests=false` - `mise run build` - `mise run lint` - `git diff --check` Signed-off-by: Gregor Zeitlinger <[email protected]>

## Summary - remove OM2-related entries from the `1.6.0` changelog because that work should be punted from these release notes for now - keep a short note that OpenMetrics 2.0 support is still in progress and not ready for general use yet - keep `#1985` under `Features` because it is a real user-facing feature ## Why The `v1.6.0` release notes were mixing in OM2 work that should not be listed as released yet, and this PR should not include the unrelated `AGENTS.md` change. ## Validation - `mise run lint` --------- Signed-off-by: Gregor Zeitlinger <[email protected]>

🤖 I have created a release *beep* *boop* --- ### Updating meta-information for bleeding-edge SNAPSHOT release. --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please). Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>

🤖 I have created a release *beep* *boop* --- ## [1.6.1](v1.6.0...v1.6.1) (2026-04-27) ### Bug Fixes * Preserve original metric names in OM2 output ([#2058](#2058)) ([59a7a6d](59a7a6d)) ### Documentation * clarify 1.6.0 release notes ([#2062](#2062)) ([9e5d591](9e5d591)) * Document semantic PR title guidance ([#2060](#2060)) ([7277889](7277889)) --- > [!IMPORTANT] > Close and reopen this PR to trigger CI checks. --------- Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com> Co-authored-by: Gregor Zeitlinger <[email protected]>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comparing changes

Open a pull request

Commits on Apr 27, 2026

This comparison is taking too long to generate.

Uh oh!