modelcontextprotocol/registry
Watch
1
0
Fork
You've already forked registry
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
528 commits 1 branch 36 tags 50 MiB
Commit graph

528 commits

This branch
This branch
All branches
Author SHA1 Message Date
Jonathan Hefner
b941ee3674
 		Remove .mdx suffixes from internal doc links for Mintlify (#1052) 
These docs are synced to modelcontextprotocol.io which uses Mintlify for
rendering. Mintlify routes are extension-less, so links like
`./package-types.mdx` produce 404s on the live site. Dropping the `.mdx`
suffix fixes those broken links. The trade-off is that the links no
longer resolve when browsing the raw files on GitHub.

Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
 2026-03-12 11:46:30 +01:00
dependabot[bot]
b112ac3335
 		build(deps): bump the actions group with 2 updates (#1049) 
Bumps the actions group with 2 updates:
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer)
and [anchore/sbom-action](https://github.com/anchore/sbom-action).

Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<p>We recommend updating as soon as possible as this includes bug fixes
for Cosign. We also recommend removing <code>with: cosign-release</code>
and strongly discourage using <code>cosign-release</code> unless you
have a specific reason to use an older version of Cosign.</p>
<ul>
<li>Bump cosign to 3.0.5 in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/220">sigstore/cosign-installer#220</a></li>
<li>fix: add retry to curl downloads for transient network failures in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/210">sigstore/cosign-installer#210</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0">https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ba7bc0a3fe"><code>ba7bc0a</code></a>
fix: add retry to curl downloads for transient network failures (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/210">#210</a>)</li>
<li><a
href="5a292e1504"><code>5a292e1</code></a>
Bump cosign to 3.0.5 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/220">#220</a>)</li>
<li><a
href="351ea76151"><code>351ea76</code></a>
Bump actions/checkout from 6.0.1 to 6.0.2 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/217">#217</a>)</li>
<li><a
href="c17565ff32"><code>c17565f</code></a>
test with go 1.26 too (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/221">#221</a>)</li>
<li><a
href="a6fdd19182"><code>a6fdd19</code></a>
Bump actions/setup-go from 6.1.0 to 6.3.0 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/218">#218</a>)</li>
<li><a
href="430b6a704f"><code>430b6a7</code></a>
docs: fix registry from gcr.io to ghcr.io (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/213">#213</a>)</li>
<li><a
href="4d14d7f17e"><code>4d14d7f</code></a>
feat: update to v3.0.3 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/212">#212</a>)</li>
<li><a
href="f14800521e"><code>f148005</code></a>
fix: use env vars for template expansions; show curl errors (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/207">#207</a>)</li>
<li><a
href="c3f2d79008"><code>c3f2d79</code></a>
Bump actions/checkout from 6.0.0 to 6.0.1 (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/208">#208</a>)</li>
<li><a
href="b9a9af4616"><code>b9a9af4</code></a>
drop tests with go1.24 as it cant build (<a
href="https://redirect.github.com/sigstore/cosign-installer/issues/211">#211</a>)</li>
<li>Additional commits viewable in <a
href="faadad0cce...ba7bc0a3fe">compare
view</a></li>
</ul>
</details>
<br />

Updates `anchore/sbom-action` from 0.23.0 to 0.23.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.1</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): update Syft to v1.42.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/607">#607</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps): bump fast-xml-parser and all other deps (<a
href="https://redirect.github.com/anchore/sbom-action/issues/604">#604</a>)
[@<a href="https://github.com/apps/dependabot">dependabot[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57aae52805"><code>57aae52</code></a>
chore(deps): update Syft to v1.42.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/607">#607</a>)</li>
<li><a
href="c29e913258"><code>c29e913</code></a>
chore(deps): bump fast-xml-parser and other deps (<a
href="https://redirect.github.com/anchore/sbom-action/issues/604">#604</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.23.0...v0.23.1">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-11 10:44:47 +01:00
Tadas Antanavicius
2575290393
 		chore(deploy): bump production image tag to 1.5.0 (#1043) 
## Summary
- Updates the production image tag in `deploy/Pulumi.gcpProd.yaml` from
`1.4.1` to `1.5.0`

## Test plan
- [ ] Verify the Pulumi deployment picks up the new image tag
- [ ] Confirm the v1.5.0 container image exists in the registry

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
 2026-03-07 06:53:30 -08:00
dependabot[bot]
c0ecfd5a65
 		build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 (#1026) 
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.20.7 to 0.21.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Better handle redirects to https in ping by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2225">google/go-containerregistry#2225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2">https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2</a></p>
<h2>v0.21.1</h2>
<p>This release fixes a regression in <code>crane</code> introduced in
the previous release.</p>
<h2>What's Changed</h2>
<ul>
<li>Add WithFileBufferedOpener for file-backed daemon image buffering by
<a href="https://github.com/twdamhore"><code>@​twdamhore</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2214">google/go-containerregistry#2214</a></li>
<li>crane: fix case in auth response json by <a
href="https://github.com/aelindeman"><code>@​aelindeman</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218">google/go-containerregistry#2218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/twdamhore"><code>@​twdamhore</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2214">google/go-containerregistry#2214</a></li>
<li><a
href="https://github.com/aelindeman"><code>@​aelindeman</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218">google/go-containerregistry#2218</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1">https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1</a></p>
<h2>v0.21.0</h2>
<p>This release updates the minimum Go version to
<code>1.25.6</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(mutate): don't skip dir replacements via whiteout in export by
<a href="https://github.com/r4f4"><code>@​r4f4</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191">google/go-containerregistry#2191</a></li>
<li>Improve performance of v1.NewHash by <a
href="https://github.com/bmoylan"><code>@​bmoylan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2194">google/go-containerregistry#2194</a></li>
<li>Bump the actions group across 1 directory with 4 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2207">google/go-containerregistry#2207</a></li>
<li>Bump the root-deps group across 1 directory with 7 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2195">google/go-containerregistry#2195</a></li>
<li>Fix error messages in crane_test.go by <a
href="https://github.com/jammie-jelly"><code>@​jammie-jelly</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189">google/go-containerregistry#2189</a></li>
<li>Bump go version across packages to 1.25.6 by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2211">google/go-containerregistry#2211</a></li>
<li>Join go.mod dependency updates by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2212">google/go-containerregistry#2212</a></li>
<li>Bump the go-deps group across 3 directories with 3 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2213">google/go-containerregistry#2213</a></li>
<li>Disable taint gosec lints by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2215">google/go-containerregistry#2215</a></li>
<li>Update go version used in goreleaser by <a
href="https://github.com/Subserial"><code>@​Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2216">google/go-containerregistry#2216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/r4f4"><code>@​r4f4</code></a> made their
first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191">google/go-containerregistry#2191</a></li>
<li><a
href="https://github.com/jammie-jelly"><code>@​jammie-jelly</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189">google/go-containerregistry#2189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0">https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e0ccb0a72"><code>9e0ccb0</code></a>
Better handle redirects to https in ping (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2225">#2225</a>)</li>
<li><a
href="85f2bf5f73"><code>85f2bf5</code></a>
crane: fix case in auth response json (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2218">#2218</a>)</li>
<li><a
href="e971d630dc"><code>e971d63</code></a>
Add WithFileBufferedOpener for file-backed daemon image buffering (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2214">#2214</a>)</li>
<li><a
href="8e2d6a6817"><code>8e2d6a6</code></a>
Update go version used in goreleaser (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2216">#2216</a>)</li>
<li><a
href="b58334f761"><code>b58334f</code></a>
Disable taint gosec lints (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2215">#2215</a>)</li>
<li><a
href="88b39ed906"><code>88b39ed</code></a>
Bump the go-deps group across 3 directories with 3 updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2213">#2213</a>)</li>
<li><a
href="102ac75dde"><code>102ac75</code></a>
join go.mod dependency updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2212">#2212</a>)</li>
<li><a
href="d5817d559e"><code>d5817d5</code></a>
Bump go version across packages to 1.25.6 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2211">#2211</a>)</li>
<li><a
href="23f0632fa3"><code>23f0632</code></a>
Fix error messages in crane_test.go (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2189">#2189</a>)</li>
<li><a
href="438abde5e7"><code>438abde</code></a>
Bump the root-deps group across 1 directory with 7 updates (<a
href="https://redirect.github.com/google/go-containerregistry/issues/2195">#2195</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.20.7&new-version=0.21.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-03-07 15:31:08 +02:00
dependabot[bot]
03d551dbab
 		build(deps): bump the opentelemetry group with 6 updates (#1044) 
Bumps the opentelemetry group with 6 updates:

| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib)
| `0.66.0` | `0.67.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go)
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go)
| `0.63.0` | `0.64.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go)
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go)
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go)
| `1.41.0` | `1.42.0` |

Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.66.0 to 0.67.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for <a href="https://go.dev/doc/go1.24">Go 1.24</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628">#8628</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update github artifact actions to v7 (major) by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8605">open-telemetry/opentelemetry-go-contrib#8605</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8610">open-telemetry/opentelemetry-go-contrib#8610</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.5 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8620">open-telemetry/opentelemetry-go-contrib#8620</a></li>
<li>fix(deps): update module github.com/aws/smithy-go to v1.24.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8614">open-telemetry/opentelemetry-go-contrib#8614</a></li>
<li>chore(deps): update go-openapi packages by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8621">open-telemetry/opentelemetry-go-contrib#8621</a></li>
<li>fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8622">open-telemetry/opentelemetry-go-contrib#8622</a></li>
<li>chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8608">open-telemetry/opentelemetry-go-contrib#8608</a></li>
<li>chore(deps): update module github.com/protonmail/go-crypto to v1.4.0
by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8609">open-telemetry/opentelemetry-go-contrib#8609</a></li>
<li>chore(deps): update otel/opentelemetry-collector-contrib docker tag
to v0.147.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8625">open-telemetry/opentelemetry-go-contrib#8625</a></li>
<li>chore(deps): update module github.com/daixiang0/gci to v0.14.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8623">open-telemetry/opentelemetry-go-contrib#8623</a></li>
<li>Drop support for 1.24 by <a
href="https://github.com/dmathieu"><code>@​dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8628">open-telemetry/opentelemetry-go-contrib#8628</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8554">open-telemetry/opentelemetry-go-contrib#8554</a></li>
<li>fix(deps): update kubernetes packages to v0.35.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8626">open-telemetry/opentelemetry-go-contrib#8626</a></li>
<li>fix(deps): update aws-sdk-go-v2 monorepo by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8598">open-telemetry/opentelemetry-go-contrib#8598</a></li>
<li>fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8630">open-telemetry/opentelemetry-go-contrib#8630</a></li>
<li>otelgrpc: modernize the example project by <a
href="https://github.com/ash2k"><code>@​ash2k</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8619">open-telemetry/opentelemetry-go-contrib#8619</a></li>
<li>chore(deps): update googleapis to a57be14 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8606">open-telemetry/opentelemetry-go-contrib#8606</a></li>
<li>fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8627">open-telemetry/opentelemetry-go-contrib#8627</a></li>
<li>chore(deps): update module github.com/prometheus/procfs to v0.20.1
by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8624">open-telemetry/opentelemetry-go-contrib#8624</a></li>
<li>fix(otelhttp): make Body handling in Transport consistent with
stdlib by <a href="https://github.com/ash2k"><code>@​ash2k</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8618">open-telemetry/opentelemetry-go-contrib#8618</a></li>
<li>otelhttp: Ignore informational response status codes when persisting
status by <a
href="https://github.com/VirrageS"><code>@​VirrageS</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/6913">open-telemetry/opentelemetry-go-contrib#6913</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] -
2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628">#8628</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d8dabf6736"><code>d8dabf6</code></a>
Release v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8649">#8649</a>)</li>
<li><a
href="b1de2c71d9"><code>b1de2c7</code></a>
otelconf: host detector should include os as well (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578">#8578</a>)</li>
<li><a
href="b228c0f2f2"><code>b228c0f</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8644">#8644</a>)</li>
<li><a
href="e70fd977a6"><code>e70fd97</code></a>
Use correct bucket boundaries for otelgrpc client and server histograms
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642">#8642</a>)</li>
<li><a
href="b018d98a0e"><code>b018d98</code></a>
fix(deps): update aws-sdk-go-v2 monorepo (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8643">#8643</a>)</li>
<li><a
href="fb6a3518d8"><code>fb6a351</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8641">#8641</a>)</li>
<li><a
href="2c9c10ec4a"><code>2c9c10e</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8640">#8640</a>)</li>
<li><a
href="22248d4c31"><code>22248d4</code></a>
chore: enable modernize linter (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8583">#8583</a>)</li>
<li><a
href="324662a14b"><code>324662a</code></a>
envcar: add environment carrier (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442">#8442</a>)</li>
<li><a
href="69addb4996"><code>69addb4</code></a>
chore(deps): update k8s.io/kube-openapi digest to 5b3e3fd (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8636">#8636</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.66.0...zpages/v0.67.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595"><code>a3941ff</code></a>
Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006">#8006</a>)</li>
<li><a
href="6059c47bc6"><code>6059c47</code></a>
chore(deps): update golang.org/x/telemetry digest to e526e8a (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010">#8010</a>)</li>
<li><a
href="44c7edf896"><code>44c7edf</code></a>
chore(deps): update module github.com/mgechev/revive to v1.15.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009">#8009</a>)</li>
<li><a
href="de5fb3ad10"><code>de5fb3a</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007">#8007</a>)</li>
<li><a
href="0b82ded815"><code>0b82ded</code></a>
chore(deps): update codspeedhq/action action to v4.11.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001">#8001</a>)</li>
<li><a
href="aa3660f77e"><code>aa3660f</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004">#8004</a>)</li>
<li><a
href="9be8c92a13"><code>9be8c92</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003">#8003</a>)</li>
<li><a
href="c9d20155fc"><code>c9d2015</code></a>
log: add error field to Record and make SDK to emit exception attributes
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
<li><a
href="fdd1320c39"><code>fdd1320</code></a>
TracerProvider ForceFlush() Error Fix (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
<li><a
href="78f99042e2"><code>78f9904</code></a>
chore(deps): update golang.org/x/telemetry digest to 18da590 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.63.0 to
0.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v0.64.0/v0.18.0/v0.0.16</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix changelog protection marker by <a
href="https://github.com/pellared"><code>@​pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986">open-telemetry/opentelemetry-go#7986</a></li>
<li>Drop support for Go 1.24 by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984">open-telemetry/opentelemetry-go#7984</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907">open-telemetry/opentelemetry-go#7907</a></li>
<li>chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981">open-telemetry/opentelemetry-go#7981</a></li>
<li>chore(deps): update benchmark-action/github-action-benchmark action
to v1.21.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989">open-telemetry/opentelemetry-go#7989</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982">open-telemetry/opentelemetry-go#7982</a></li>
<li>Revert &quot;Revert &quot;Generate semconv/v1.40.0&quot;&quot; by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985">open-telemetry/opentelemetry-go#7985</a></li>
<li>support stdlib request.GetBody on metrics by <a
href="https://github.com/marifari-hue"><code>@​marifari-hue</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931">open-telemetry/opentelemetry-go#7931</a></li>
<li>attribute: add TestNotEquivalence and equality operator tests by <a
href="https://github.com/pellared"><code>@​pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979">open-telemetry/opentelemetry-go#7979</a></li>
<li>Refactor benchmark CI by <a
href="https://github.com/XSAM"><code>@​XSAM</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873">open-telemetry/opentelemetry-go#7873</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.24.7
by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988">open-telemetry/opentelemetry-go#7988</a></li>
<li>chore(deps): pin codspeedhq/action action to df47568 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996">open-telemetry/opentelemetry-go#7996</a></li>
<li>chore(deps): update actions/checkout action to v6.0.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997">open-telemetry/opentelemetry-go#7997</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999">open-telemetry/opentelemetry-go#7999</a></li>
<li>Upgrade to semconv/v1.40.0 by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991">open-telemetry/opentelemetry-go#7991</a></li>
<li>Regenerate semconv/v1.40.0/MIGRATION.md by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992">open-telemetry/opentelemetry-go#7992</a></li>
<li>fix: generated semconv helpers skipping attributes by <a
href="https://github.com/victoraugustolls"><code>@​victoraugustolls</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964">open-telemetry/opentelemetry-go#7964</a></li>
<li>Feat: Have SpanContext support the new W3C random flag. by <a
href="https://github.com/nikhilmantri0902"><code>@​nikhilmantri0902</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834">open-telemetry/opentelemetry-go#7834</a></li>
<li>Semconv metric helper caller-slice mutation fix by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993">open-telemetry/opentelemetry-go#7993</a></li>
<li>Fix semconv generated error type to check error chain for custom
type declaration by <a
href="https://github.com/MrAlias"><code>@​MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994">open-telemetry/opentelemetry-go#7994</a></li>
<li>refactor: replace uint64 and int32 with atomic types in tests by <a
href="https://github.com/alexandear"><code>@​alexandear</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941">open-telemetry/opentelemetry-go#7941</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 18da590 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000">open-telemetry/opentelemetry-go#8000</a></li>
<li>TracerProvider ForceFlush() Error Fix by <a
href="https://github.com/sawamurataxman"><code>@​sawamurataxman</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856">open-telemetry/opentelemetry-go#7856</a></li>
<li>log: add error field to Record and make SDK to emit exception
attributes by <a
href="https://github.com/iblancasa"><code>@​iblancasa</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924">open-telemetry/opentelemetry-go#7924</a></li>
<li>chore(deps): update dependency codespell to v2.4.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003">open-telemetry/opentelemetry-go#8003</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.6 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004">open-telemetry/opentelemetry-go#8004</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8001">open-telemetry/opentelemetry-go#8001</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595"><code>a3941ff</code></a>
Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006">#8006</a>)</li>
<li><a
href="6059c47bc6"><code>6059c47</code></a>
chore(deps): update golang.org/x/telemetry digest to e526e8a (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010">#8010</a>)</li>
<li><a
href="44c7edf896"><code>44c7edf</code></a>
chore(deps): update module github.com/mgechev/revive to v1.15.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009">#8009</a>)</li>
<li><a
href="de5fb3ad10"><code>de5fb3a</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007">#8007</a>)</li>
<li><a
href="0b82ded815"><code>0b82ded</code></a>
chore(deps): update codspeedhq/action action to v4.11.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001">#8001</a>)</li>
<li><a
href="aa3660f77e"><code>aa3660f</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004">#8004</a>)</li>
<li><a
href="9be8c92a13"><code>9be8c92</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003">#8003</a>)</li>
<li><a
href="c9d20155fc"><code>c9d2015</code></a>
log: add error field to Record and make SDK to emit exception attributes
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
<li><a
href="fdd1320c39"><code>fdd1320</code></a>
TracerProvider ForceFlush() Error Fix (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
<li><a
href="78f99042e2"><code>78f9904</code></a>
chore(deps): update golang.org/x/telemetry digest to 18da590 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.63.0...exporters/prometheus/v0.64.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595"><code>a3941ff</code></a>
Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006">#8006</a>)</li>
<li><a
href="6059c47bc6"><code>6059c47</code></a>
chore(deps): update golang.org/x/telemetry digest to e526e8a (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010">#8010</a>)</li>
<li><a
href="44c7edf896"><code>44c7edf</code></a>
chore(deps): update module github.com/mgechev/revive to v1.15.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009">#8009</a>)</li>
<li><a
href="de5fb3ad10"><code>de5fb3a</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007">#8007</a>)</li>
<li><a
href="0b82ded815"><code>0b82ded</code></a>
chore(deps): update codspeedhq/action action to v4.11.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001">#8001</a>)</li>
<li><a
href="aa3660f77e"><code>aa3660f</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004">#8004</a>)</li>
<li><a
href="9be8c92a13"><code>9be8c92</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003">#8003</a>)</li>
<li><a
href="c9d20155fc"><code>c9d2015</code></a>
log: add error field to Record and make SDK to emit exception attributes
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
<li><a
href="fdd1320c39"><code>fdd1320</code></a>
TracerProvider ForceFlush() Error Fix (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
<li><a
href="78f99042e2"><code>78f9904</code></a>
chore(deps): update golang.org/x/telemetry digest to 18da590 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/sdk` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595"><code>a3941ff</code></a>
Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006">#8006</a>)</li>
<li><a
href="6059c47bc6"><code>6059c47</code></a>
chore(deps): update golang.org/x/telemetry digest to e526e8a (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010">#8010</a>)</li>
<li><a
href="44c7edf896"><code>44c7edf</code></a>
chore(deps): update module github.com/mgechev/revive to v1.15.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009">#8009</a>)</li>
<li><a
href="de5fb3ad10"><code>de5fb3a</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007">#8007</a>)</li>
<li><a
href="0b82ded815"><code>0b82ded</code></a>
chore(deps): update codspeedhq/action action to v4.11.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001">#8001</a>)</li>
<li><a
href="aa3660f77e"><code>aa3660f</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004">#8004</a>)</li>
<li><a
href="9be8c92a13"><code>9be8c92</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003">#8003</a>)</li>
<li><a
href="c9d20155fc"><code>c9d2015</code></a>
log: add error field to Record and make SDK to emit exception attributes
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
<li><a
href="fdd1320c39"><code>fdd1320</code></a>
TracerProvider ForceFlush() Error Fix (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
<li><a
href="78f99042e2"><code>78f9904</code></a>
chore(deps): update golang.org/x/telemetry digest to 18da590 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595"><code>a3941ff</code></a>
Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006">#8006</a>)</li>
<li><a
href="6059c47bc6"><code>6059c47</code></a>
chore(deps): update golang.org/x/telemetry digest to e526e8a (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010">#8010</a>)</li>
<li><a
href="44c7edf896"><code>44c7edf</code></a>
chore(deps): update module github.com/mgechev/revive to v1.15.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009">#8009</a>)</li>
<li><a
href="de5fb3ad10"><code>de5fb3a</code></a>
fix(deps): update module google.golang.org/grpc to v1.79.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007">#8007</a>)</li>
<li><a
href="0b82ded815"><code>0b82ded</code></a>
chore(deps): update codspeedhq/action action to v4.11.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001">#8001</a>)</li>
<li><a
href="aa3660f77e"><code>aa3660f</code></a>
chore(deps): update github/codeql-action action to v4.32.6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004">#8004</a>)</li>
<li><a
href="9be8c92a13"><code>9be8c92</code></a>
chore(deps): update dependency codespell to v2.4.2 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003">#8003</a>)</li>
<li><a
href="c9d20155fc"><code>c9d2015</code></a>
log: add error field to Record and make SDK to emit exception attributes
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924">#7924</a>)</li>
<li><a
href="fdd1320c39"><code>fdd1320</code></a>
TracerProvider ForceFlush() Error Fix (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856">#7856</a>)</li>
<li><a
href="78f99042e2"><code>78f9904</code></a>
chore(deps): update golang.org/x/telemetry digest to 18da590 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-07 15:22:17 +02:00
Radoslav Dimitrov
7b0c411928
 		Bump go (#1041) v1.5.0 
<!-- Provide a brief summary of your changes -->
Fixes:
https://github.com/modelcontextprotocol/registry/actions/runs/22784360696/job/66097670402
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->

---------

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-03-06 14:57:51 -08:00
Tadas Antanavicius
7462b3c34e
 		fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 (#1040) 
## Summary

Fixes two CI issues:

### 1. Deploy workflows broken since PR #1034 (all staging deploys
failing)

The deploy-staging and deploy-production workflows install Go using the
**root** `go.mod`, but then build Pulumi infrastructure code from the
`deploy/` directory which has its own `go.mod`.

This started failing when PR #1034 (`build(deps): bump
github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy`)
bumped `deploy/go.mod` from Go 1.24.11 to **Go 1.25.6** — a version
newer than the root module's Go 1.24.13. Every staging deploy since that
merge (Mar 6) has failed with:

```
go: go.mod requires go >= 1.25.6 (running go 1.24.13; GOTOOLCHAIN=local)
```

The last successful deploy was commit cb4807a on Mar 1, before the Go
version bump.

**Fix**: point `go-version-file` in both deploy workflows at
`deploy/go.mod` instead of the root `go.mod`.

### 2. `govulncheck` failing due to Go stdlib vulnerabilities

Five new Go stdlib vulnerabilities (GO-2026-4599 through GO-2026-4603)
were published on Mar 5-6 affecting Go 1.24.13, fixed in Go 1.25.8.
These cause `govulncheck` in the CI pipeline to fail.

**Fix**: bump root `go.mod` from Go 1.24.13 to Go 1.25.8.

## Test plan
- [ ] CI pipeline passes (govulncheck, build, lint, tests)
- [ ] Verify the deploy-staging workflow passes on the next push to main
after merge

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude <noreply@anthropic.com>
 2026-03-06 14:20:44 -08:00
dependabot[bot]
6c500c52e3
 		build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 (#985) 
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go)
from 1.25.0 to 1.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>retail 1.26.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.25.1...retail/v1.26.0">1.26.0</a>
(2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>
<p>add a user_attributes field in SearchRequest that can be used for
personalization (PiperOrigin-RevId: 861314205) (<a
href="d8ea738a">d8ea738a</a>)</p>
</li>
<li>
<p>add a model_scores field in SearchResponse.results to expose model
quality signals (PiperOrigin-RevId: 861314205) (<a
href="d8ea738a">d8ea738a</a>)</p>
</li>
</ul>
<h2>kms: v1.26.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.25.0...kms/v1.26.0">v1.26.0</a>
(2026-02-19)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Introduced the RetiredResource resource to track records of deleted
keys and prevent the reuse of their resource names (PiperOrigin-RevId:
868670725) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Added ListRetiredResources and GetRetiredResource RPCs to manage and
view these records (PiperOrigin-RevId: 868670725) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Added DeleteCryptoKey and DeleteCryptoKeyVersion RPCs to permanently
remove resources (PiperOrigin-RevId: 868670725) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Add KeyProjectResolutionMode to AutokeyConfig to support
project-level configurations (PiperOrigin-RevId: 870858133) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Add support for project level key usage tracking (PiperOrigin-RevId:
871667322) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Add more post-quantum (PQ) signature algorithms to CryptoKeyVersion
(PiperOrigin-RevId: 870858133) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>
<p>Clarify supported resources for the crypto_key_backend field in
ImportJob (PiperOrigin-RevId: 870858133) (<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
<li>
<p>Update documentation for AutokeyAdmin service and messages to support
folder and project-level configurations (PiperOrigin-RevId: 870858133)
(<a
href="d3eb851d">d3eb851d</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.25.0...documentai/v1.26.0">1.26.0</a>
(2024-02-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> A new field
<code>schema_override</code> is added to message
<code>ProcessOptions</code> (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9400">#9400</a>)
(<a
href="a86aa8e962">a86aa8e</a>)</li>
<li><strong>documentai:</strong> A new message
FoundationModelTuningOptions is added (<a
href="7e6c208c5d">7e6c208</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8ebb89625c"><code>8ebb896</code></a>
chore: librarian release pull request: 20251010T200657Z (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13107">#13107</a>)</li>
<li><a
href="befb302203"><code>befb302</code></a>
test(internal/postprocessor): skip test that expects certain live config
(<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13">#13</a>...</li>
<li><a
href="1930511848"><code>1930511</code></a>
testing(internal/godocfx): convert equality check to a diff check (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13089">#13089</a>)</li>
<li><a
href="e6b9d41832"><code>e6b9d41</code></a>
chore: migrate compute/metadata to Librarian (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13009">#13009</a>)</li>
<li><a
href="6259aeec39"><code>6259aee</code></a>
fix(storage): skip download of file outside of target dir (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12945">#12945</a>)</li>
<li><a
href="bafd691de1"><code>bafd691</code></a>
perf(bigtable): parallelize the exportTimeSeries function (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13004">#13004</a>)</li>
<li><a
href="2b75879c22"><code>2b75879</code></a>
chore: release main (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13082">#13082</a>)</li>
<li><a
href="9157a715e3"><code>9157a71</code></a>
chore: bump changed modules (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13083">#13083</a>)</li>
<li><a
href="a93d961e66"><code>a93d961</code></a>
fix: upgrade gRPC service registration func (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13079">#13079</a>)</li>
<li><a
href="75c95f3f05"><code>75c95f3</code></a>
chore: librarian generate pull request: 20251009T073841Z (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13080">#13080</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.25.0...dlp/v1.26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cloud.google.com/go/kms&package-manager=go_modules&previous-version=1.25.0&new-version=1.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:25:23 +02:00
dependabot[bot]
de6e9839ec
 		build(deps): bump the opentelemetry group with 6 updates (#1025) 
Bumps the opentelemetry group with 6 updates:

| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib)
| `0.65.0` | `0.66.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go)
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go)
| `0.62.0` | `0.63.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go)
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go)
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go)
| `1.40.0` | `1.41.0` |

Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.65.0 to 0.66.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24">Go 1.24</a>.
The next release will require at least <a
href="https://go.dev/doc/go1.25">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544">#8544</a>)</li>
<li>Support testing of <a href="https://go.dev/doc/go1.26">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511">#8511</a>)
Updated modules include:
<ul>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587">#8587</a>)</li>
</ul>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] -
2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544">#8544</a>)</li>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511">#8511</a>)
Updated modules include:
<ul>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>

<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587">#8587</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07fa42463c"><code>07fa424</code></a>
Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8617">#8617</a>)</li>
<li><a
href="f64d6bbf2a"><code>f64d6bb</code></a>
HTTP instrumentations cleanup (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8532">#8532</a>)</li>
<li><a
href="5995ae876a"><code>5995ae8</code></a>
add version file for Autodetect detector (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555">#8555</a>)</li>
<li><a
href="c0aa7c9a5e"><code>c0aa7c9</code></a>
internal/shared/semconv: Reduce allocations (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511">#8511</a>)</li>
<li><a
href="e81a2b4433"><code>e81a2b4</code></a>
otelgrpc: Use canonical string status codes (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565">#8565</a>)</li>
<li><a
href="8096a3ec79"><code>8096a3e</code></a>
otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587">#8587</a>)</li>
<li><a
href="2dce2452b9"><code>2dce245</code></a>
otelconf: use translation strategy instead of deprecated funcs (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595">#8595</a>)</li>
<li><a
href="d2a58075d3"><code>d2a5807</code></a>
Add version file for autoexport module (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612">#8612</a>)</li>
<li><a
href="52dd9873f6"><code>52dd987</code></a>
ci: add govulncheck job to CI workflow and update lint target (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8613">#8613</a>)</li>
<li><a
href="c4223d5dad"><code>c4223d5</code></a>
chore(deps): update prom/prometheus docker tag to v3.10.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8603">#8603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.66.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774d"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="66fc10d9df"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="76e6eec88f"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="0d50f9008c"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="c38a4a57c3"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="0f1a22484e"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="c79ebf43eb"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="f758157465"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="92a1164572"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="3cd7c27e84"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.62.0 to
0.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v0.63.0/v0.17.0/v0.0.15</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24">Go 1.24</a>. The next release will
require at least <a href="https://go.dev/doc/go1.25">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Support testing of <a href="https://go.dev/doc/go1.26">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits. <code>New</code> and
<code>Parse</code> now return partial baggage along with an error when
limits are exceeded. Errors from baggage extraction are reported to the
global error handler. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update googleapis to ce8ad4c by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7860">open-telemetry/opentelemetry-go#7860</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7865">open-telemetry/opentelemetry-go#7865</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.51.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7863">open-telemetry/opentelemetry-go#7863</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to fe4bb1c by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7861">open-telemetry/opentelemetry-go#7861</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7869">open-telemetry/opentelemetry-go#7869</a></li>
<li>sdk/log/observ: guard LogProcessed with Enabled by <a
href="https://github.com/NesterovYehor"><code>@​NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7848">open-telemetry/opentelemetry-go#7848</a></li>
<li>stdouttrace observability: skip metric work when instruments are
disabled by <a
href="https://github.com/NesterovYehor"><code>@​NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7853">open-telemetry/opentelemetry-go#7853</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7870">open-telemetry/opentelemetry-go#7870</a></li>
<li>fix(deps): update googleapis to 546029d by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7871">open-telemetry/opentelemetry-go#7871</a></li>
<li>stdoutmetric observ: skip metric work when instruments are disabled
by <a
href="https://github.com/NesterovYehor"><code>@​NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7868">open-telemetry/opentelemetry-go#7868</a></li>
<li>chore(deps): update fossas/fossa-action action to v1.8.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7879">open-telemetry/opentelemetry-go#7879</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7878">open-telemetry/opentelemetry-go#7878</a></li>
<li>chore(deps): update module github.com/ghostiam/protogetter to
v0.3.20 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7877">open-telemetry/opentelemetry-go#7877</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 86a5c4b by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7876">open-telemetry/opentelemetry-go#7876</a></li>
<li>fix(deps): update module golang.org/x/sys to v0.41.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7885">open-telemetry/opentelemetry-go#7885</a></li>
<li>chore(deps): update module github.com/clipperhouse/uax29/v2 to
v2.6.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7884">open-telemetry/opentelemetry-go#7884</a></li>
<li>Checked if instrument enabled before measuring in prometheus by <a
href="https://github.com/itssaharsh"><code>@​itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7866">open-telemetry/opentelemetry-go#7866</a></li>
<li>exporter/otlploghttp: guard observ metrics with Enabled checks by <a
href="https://github.com/NesterovYehor"><code>@​NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7813">open-telemetry/opentelemetry-go#7813</a></li>
<li>chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7886">open-telemetry/opentelemetry-go#7886</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7887">open-telemetry/opentelemetry-go#7887</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7890">open-telemetry/opentelemetry-go#7890</a></li>
<li>fix(deps): update golang.org/x to 2842357 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7891">open-telemetry/opentelemetry-go#7891</a></li>
<li>fix(deps): update googleapis to 4cfbd41 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7889">open-telemetry/opentelemetry-go#7889</a></li>
<li>Checked if instrument enabled before measuring in
<code>oteltracegrpc</code> by <a
href="https://github.com/itssaharsh"><code>@​itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7825">open-telemetry/opentelemetry-go#7825</a></li>
<li>Checked if Instrument Enabled before measuring in otlpgrpc by <a
href="https://github.com/itssaharsh"><code>@​itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7824">open-telemetry/opentelemetry-go#7824</a></li>
<li>chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2
to v2.27.8 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7892">open-telemetry/opentelemetry-go#7892</a></li>
<li>chore(deps): update module github.com/golangci/golines to v0.15.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7893">open-telemetry/opentelemetry-go#7893</a></li>
<li>chore(deps): update module github.com/golangci/misspell to v0.8.0 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7894">open-telemetry/opentelemetry-go#7894</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 9f66fae by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7898">open-telemetry/opentelemetry-go#7898</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7906">open-telemetry/opentelemetry-go#7906</a></li>
<li>Support Go 1.26 by <a
href="https://github.com/dmathieu"><code>@​dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7902">open-telemetry/opentelemetry-go#7902</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.1 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7908">open-telemetry/opentelemetry-go#7908</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.3 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7909">open-telemetry/opentelemetry-go#7909</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774d"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="66fc10d9df"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="76e6eec88f"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="0d50f9008c"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="c38a4a57c3"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="0f1a22484e"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="c79ebf43eb"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="f758157465"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="92a1164572"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="3cd7c27e84"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.62.0...exporters/prometheus/v0.63.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774d"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="66fc10d9df"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="76e6eec88f"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="0d50f9008c"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="c38a4a57c3"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="0f1a22484e"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="c79ebf43eb"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="f758157465"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="92a1164572"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="3cd7c27e84"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774d"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="66fc10d9df"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="76e6eec88f"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="0d50f9008c"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="c38a4a57c3"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="0f1a22484e"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="c79ebf43eb"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="f758157465"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="92a1164572"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="3cd7c27e84"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774d"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="66fc10d9df"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="76e6eec88f"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="0d50f9008c"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="c38a4a57c3"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="0f1a22484e"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="c79ebf43eb"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="f758157465"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="92a1164572"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="3cd7c27e84"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:16:23 +02:00
dependabot[bot]
b738501d2f
 		build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.25.0 to 4.27.0 in /deploy (#1024) 
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes)
from 4.25.0 to 4.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.27.0</h2>
<p>No release notes provided.</p>
<h2>v4.26.0</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed the update. This occurred when Pulumi checked status fields
before the controller updated <code>observedGeneration</code>, causing
stale &quot;ready&quot; values to be trusted.</p>
</li>
<li>
<p>Fixed a regression of <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943">#2943</a>
which could cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md">github.com/pulumi/pulumi-kubernetes/sdk/v4's
changelog</a>.</em></p>
<blockquote>
<h2>4.27.0 (March 2, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4181">#4181</a>
Fix PVC timeout when updating to a storage class with
WaitForFirstConsumer bind mode.</li>
</ul>
<h3>Added</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/3661">#3661</a>
Support for OCI login inside the provider process. Providing a
username/password to <code>Chart v4</code> and <code>Release v3</code>
will now login to private OCI
registries as expected.
(<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/2911">pulumi/pulumi-kubernetes#2911</a>
and <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/1914">pulumi/pulumi-kubernetes#1914</a>)</li>
</ul>
<h2>4.26.0 (February 19, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed
the update. This occurred when Pulumi checked status fields before the
controller updated <code>observedGeneration</code>, causing stale
&quot;ready&quot; values to be
trusted.</p>
</li>
<li>
<p>Fixed a regression of
<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943">#2943</a>
which could
cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
<h2>4.24.0 (November 5, 2025)</h2>
<h3>Added</h3>
<ul>
<li>Added a <code>plainHttp</code> option to the <code>v4.Chart</code>
resource. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3250">pulumi/pulumi-kubernetes#3250</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>The <code>pulumi.com/waitFor</code> annotation now uses an
<a
href="https://www.rfc-editor.org/rfc/rfc9535.html">RFC9535</a>-compliant
JSONPath
parser. This makes it possible to wait for more complex scenarios.</p>
<p>For example:</p>
<ul>
<li>To wait for a Pod's <code>status.phase</code> to be
&quot;Running&quot; or &quot;Succeeded&quot;:</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20f0c07152"><code>20f0c07</code></a>
Prepare for v4.27.0 release (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4194">#4194</a>)</li>
<li><a
href="c5e7ece7b1"><code>c5e7ece</code></a>
Update module github.com/pulumi/pulumi/pkg/v3 to v3.224.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4191">#4191</a>)</li>
<li><a
href="49c2646952"><code>49c2646</code></a>
helm: login to private registries (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3661">#3661</a>)</li>
<li><a
href="b48d7a39a8"><code>b48d7a3</code></a>
Fix PVC timeout on Update (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4181">#4181</a>)</li>
<li><a
href="e3427da684"><code>e3427da</code></a>
Automated upgrade: bump pulumi/pulumi to 3.223.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4188">#4188</a>)</li>
<li><a
href="7af1b7e73b"><code>7af1b7e</code></a>
Update dependency <code>@​pulumi/pulumi</code> to v3.224.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4189">#4189</a>)</li>
<li><a
href="6860aae22d"><code>6860aae</code></a>
Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4187">#4187</a>)</li>
<li><a
href="5c58fea181"><code>5c58fea</code></a>
Update GitHub Actions workflows. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4186">#4186</a>)</li>
<li><a
href="1564fc1c46"><code>1564fc1</code></a>
Update module github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3
to v3...</li>
<li><a
href="9ebe2663c3"><code>9ebe266</code></a>
Update dependency <code>@​pulumi/gcp</code> to v9.13.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4184">#4184</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.25.0...v4.27.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi-kubernetes/sdk/v4&package-manager=go_modules&previous-version=4.25.0&new-version=4.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:16:00 +02:00
dependabot[bot]
8575244d1f
 		build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 (#995) 
Bumps [github.com/caarlos0/env/v11](https://github.com/caarlos0/env)
from 11.3.1 to 11.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v11's
releases</a>.</em></p>
<blockquote>
<h2>v11.4.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set
defaults for zero values only (<a
href="https://redirect.github.com/caarlos0/env/issues/325">#325</a>) (<a
href="https://github.com/dnovikoff"><code>@​dnovikoff</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>d3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues,
update golangci-lint (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>aaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a
bit (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/400">#400</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>c98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/410">#410</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/393">#393</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>cd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/396">#396</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/402">#402</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>c660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/403">#403</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/405">#405</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>d28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/408">#408</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/397">#397</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/399">#399</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>f33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/404">#404</a>) (<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql,
govulncheck, grype (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>e5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions
versions (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aaa45113e5"><code>aaa4511</code></a>
fix: lint issues</li>
<li><a
href="4fe3f70200"><code>4fe3f70</code></a>
chore: dependabot update</li>
<li><a
href="c98ad844e1"><code>c98ad84</code></a>
ci(deps): bump github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/410">#410</a>)</li>
<li><a
href="d28373e3a0"><code>d28373e</code></a>
ci(deps): bump the actions group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/408">#408</a>)</li>
<li><a
href="3a3ea05453"><code>3a3ea05</code></a>
ci(deps): bump the actions group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/405">#405</a>)</li>
<li><a
href="f33230e8e7"><code>f33230e</code></a>
ci(deps): bump the actions group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/404">#404</a>)</li>
<li><a
href="c660cc91db"><code>c660cc9</code></a>
ci(deps): bump the actions group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/403">#403</a>)</li>
<li><a
href="4d25a4659f"><code>4d25a46</code></a>
ci(deps): bump the actions group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/402">#402</a>)</li>
<li><a
href="7b10cf56e2"><code>7b10cf5</code></a>
ci(deps): bump github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/400">#400</a>)</li>
<li><a
href="6b2db30d19"><code>6b2db30</code></a>
ci(deps): bump the actions group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/399">#399</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v11.3.1...v11.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v11&package-manager=go_modules&previous-version=11.3.1&new-version=11.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:14:22 +02:00
dependabot[bot]
febc8dc6a1
 		build(deps): bump the actions group across 1 directory with 5 updates (#1031) 
Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `6.2.0` |
`6.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact)
| `6.0.0` | `7.0.0` |
| [docker/login-action](https://github.com/docker/login-action) |
`3.7.0` | `4.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action) |
`0.22.2` | `0.23.0` |
|
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action)
| `6.4.0` | `7.0.0` |


Updates `actions/setup-go` from 6.2.0 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default Go module caching to use go.mod by <a
href="https://github.com/priyagupta108"><code>@​priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/705">actions/setup-go#705</a></li>
<li>Fix golang download url to go.dev by <a
href="https://github.com/178inaba"><code>@​178inaba</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/469">actions/setup-go#469</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.3.0">https://github.com/actions/setup-go/compare/v6...v6.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b73464bb3"><code>4b73464</code></a>
Fix golang download url to go.dev (<a
href="https://redirect.github.com/actions/setup-go/issues/469">#469</a>)</li>
<li><a
href="a5f9b05d2d"><code>a5f9b05</code></a>
Update default Go module caching to use go.mod (<a
href="https://redirect.github.com/actions/setup-go/issues/705">#705</a>)</li>
<li>See full diff in <a
href="7a3fe6cf4c...4b73464bb3">compare
view</a></li>
</ul>
</details>
<br />

Updates `actions/upload-artifact` from 6.0.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/upload-artifact/releases">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>v7 What's new</h2>
<h3>Direct Uploads</h3>
<p>Adds support for uploading single files directly (unzipped). Callers
can set the new <code>archive</code> parameter to <code>false</code> to
skip zipping the file during upload. Right now, we only support single
files. The action will fail if the glob passed resolves to multiple
files. The <code>name</code> parameter is also ignored with this
setting. Instead, the name of the artifact will be the name of the
uploaded file.</p>
<h3>ESM</h3>
<p>To support new versions of the <code>@actions/*</code> packages,
we've upgraded the package to ESM.</p>
<h2>What's Changed</h2>
<ul>
<li>Add proxy integration test by <a
href="https://github.com/Link"><code>@​Link</code></a>- in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li>
<li>Upgrade the module to ESM and bump dependencies by <a
href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/762">actions/upload-artifact#762</a></li>
<li>Support direct file uploads by <a
href="https://github.com/danwkennedy"><code>@​danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/764">actions/upload-artifact#764</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Link"><code>@​Link</code></a>- made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754">actions/upload-artifact#754</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0">https://github.com/actions/upload-artifact/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bbbca2ddaa"><code>bbbca2d</code></a>
Support direct file uploads (<a
href="https://redirect.github.com/actions/upload-artifact/issues/764">#764</a>)</li>
<li><a
href="589182c5a4"><code>589182c</code></a>
Upgrade the module to ESM and bump dependencies (<a
href="https://redirect.github.com/actions/upload-artifact/issues/762">#762</a>)</li>
<li><a
href="47309c993a"><code>47309c9</code></a>
Merge pull request <a
href="https://redirect.github.com/actions/upload-artifact/issues/754">#754</a>
from actions/Link-/add-proxy-integration-tests</li>
<li><a
href="02a8460834"><code>02a8460</code></a>
Add proxy integration test</li>
<li>See full diff in <a
href="b7c566a772...bbbca2ddaa">compare
view</a></li>
</ul>
</details>
<br />

Updates `docker/login-action` from 3.7.0 to 4.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<ul>
<li>Node 24 as default runtime (requires <a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Actions
Runner v2.327.1</a> or later) by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/929">docker/login-action#929</a></li>
<li>Switch to ESM and update config/test wiring by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/927">docker/login-action#927</a></li>
<li>Bump <code>@​actions/core</code> from 1.11.1 to 3.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/919">docker/login-action#919</a></li>
<li>Bump <code>@​aws-sdk/client-ecr</code> from 3.890.0 to 3.1000.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/909">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920">docker/login-action#920</a></li>
<li>Bump <code>@​aws-sdk/client-ecr-public</code> from 3.890.0 to
3.1000.0 in <a
href="https://redirect.github.com/docker/login-action/pull/909">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920">docker/login-action#920</a></li>
<li>Bump <code>@​docker/actions-toolkit</code> from 0.63.0 to 0.77.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/910">docker/login-action#910</a>
<a
href="https://redirect.github.com/docker/login-action/pull/928">docker/login-action#928</a></li>
<li>Bump <code>@​isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a
href="https://redirect.github.com/docker/login-action/pull/921">docker/login-action#921</a></li>
<li>Bump js-yaml from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/login-action/pull/901">docker/login-action#901</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.7.0...v4.0.0">https://github.com/docker/login-action/compare/v3.7.0...v4.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b45d80f862"><code>b45d80f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/929">#929</a>
from crazy-max/node24</li>
<li><a
href="176cb9c12a"><code>176cb9c</code></a>
node 24 as default runtime</li>
<li><a
href="cad8984310"><code>cad8984</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/920">#920</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="92cbcb231e"><code>92cbcb2</code></a>
chore: update generated content</li>
<li><a
href="5a2d6a71bd"><code>5a2d6a7</code></a>
build(deps): bump the aws-sdk-dependencies group with 2 updates</li>
<li><a
href="44512b6b2e"><code>44512b6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/928">#928</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="28737a5e46"><code>28737a5</code></a>
chore: update generated content</li>
<li><a
href="dac079354a"><code>dac0793</code></a>
build(deps): bump <code>@​docker/actions-toolkit</code> from 0.76.0 to
0.77.0</li>
<li><a
href="62029f315d"><code>62029f3</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/919">#919</a>
from docker/dependabot/npm_and_yarn/actions/core-3.0.0</li>
<li><a
href="08c8f064bf"><code>08c8f06</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="c94ce9fb46...b45d80f862">compare
view</a></li>
</ul>
</details>
<br />

Updates `anchore/sbom-action` from 0.22.2 to 0.23.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.0</h2>
<ul>
<li>switch to single-file dist build with sub-action flags and update
dependencies (<a
href="https://redirect.github.com/anchore/sbom-action/issues/595">#595</a>)
[<a href="https://github.com/kzantow"><code>@​kzantow</code></a>]</li>
<li>switch to esbuild (<a
href="https://redirect.github.com/anchore/sbom-action/issues/590">#590</a>)
[<a
href="https://github.com/willmurphyscode"><code>@​willmurphyscode</code></a>]</li>
<li>update Syft to v1.42.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/599">#599</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator">anchore-actions-token-generator[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="17ae174017"><code>17ae174</code></a>
chore(deps/test): move to es modules, node:test, single dist file (<a
href="https://redirect.github.com/anchore/sbom-action/issues/595">#595</a>)</li>
<li><a
href="6d473d3843"><code>6d473d3</code></a>
chore(deps): update Syft to v1.42.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/599">#599</a>)</li>
<li><a
href="60619e70c0"><code>60619e7</code></a>
fix tests and bump fast-xml-parser (<a
href="https://redirect.github.com/anchore/sbom-action/issues/598">#598</a>)</li>
<li><a
href="e2bd58a025"><code>e2bd58a</code></a>
chore(deps-dev): bump the dev-dependencies group with 3 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/592">#592</a>)</li>
<li><a
href="d032d7d671"><code>d032d7d</code></a>
ci(syft auto update): npm ci, not npm install (<a
href="https://redirect.github.com/anchore/sbom-action/issues/597">#597</a>)</li>
<li><a
href="2d094306a7"><code>2d09430</code></a>
fix(dev): switch to esbuild (<a
href="https://redirect.github.com/anchore/sbom-action/issues/590">#590</a>)</li>
<li><a
href="74c5ce948d"><code>74c5ce9</code></a>
chore(deps): update Syft to v1.42.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/589">#589</a>)</li>
<li><a
href="77fae5a5ab"><code>77fae5a</code></a>
chore(deps-dev): bump the dev-dependencies group with 4 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/583">#583</a>)</li>
<li><a
href="debc3eeb0f"><code>debc3ee</code></a>
chore(deps): bump npm-check-updates in the non-major group (<a
href="https://redirect.github.com/anchore/sbom-action/issues/584">#584</a>)</li>
<li><a
href="fff8762a01"><code>fff8762</code></a>
chore(deps): bump zizmorcore/zizmor-action from 0.4.1 to 0.5.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/588">#588</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.2...v0.23.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/goreleaser-action/releases">goreleaser/goreleaser-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat!: node 24, update deps, rm yarn, ESM by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/533">goreleaser/goreleaser-action#533</a></li>
<li>sec: pin github action versions by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/514">goreleaser/goreleaser-action#514</a></li>
<li>docs: Upgrade checkout GitHub Action in README.md by <a
href="https://github.com/dunglas"><code>@​dunglas</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/507">goreleaser/goreleaser-action#507</a></li>
<li>chore(deps): bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/504">goreleaser/goreleaser-action#504</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/517">goreleaser/goreleaser-action#517</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/523">goreleaser/goreleaser-action#523</a></li>
<li>ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the
actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/526">goreleaser/goreleaser-action#526</a></li>
<li>ci(deps): bump the actions group across 1 directory with 4 updates
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/532">goreleaser/goreleaser-action#532</a></li>
<li>ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions
group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/534">goreleaser/goreleaser-action#534</a></li>
<li>chore(deps): bump the npm group across 1 directory with 4 updates by
<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/536">goreleaser/goreleaser-action#536</a></li>
<li>chore(deps): bump <code>@​actions/http-client</code> from 3.0.2 to
4.0.0 in the npm group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/537">goreleaser/goreleaser-action#537</a></li>
<li>ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in
the actions group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/538">goreleaser/goreleaser-action#538</a></li>
<li>chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/539">goreleaser/goreleaser-action#539</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0">https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec59f474b9"><code>ec59f47</code></a>
fix: yargs usage</li>
<li><a
href="752dedee3d"><code>752dede</code></a>
fix: gitignore</li>
<li><a
href="1881ae035d"><code>1881ae0</code></a>
ci: update dependabot settings</li>
<li><a
href="fdc5e662bb"><code>fdc5e66</code></a>
chore: gitignore provenance.json</li>
<li><a
href="51b5b35c3c"><code>51b5b35</code></a>
chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/539">#539</a>)</li>
<li><a
href="4247c53b30"><code>4247c53</code></a>
ci(deps): bump docker/setup-buildx-action in the actions group (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/538">#538</a>)</li>
<li><a
href="c169bfd5ae"><code>c169bfd</code></a>
chore(deps): bump <code>@​actions/http-client</code> from 3.0.2 to 4.0.0
in the npm group (...</li>
<li><a
href="902ab4a70d"><code>902ab4a</code></a>
chore(deps): bump the npm group across 1 directory with 4 updates (<a
href="https://redirect.github.com/goreleaser/goreleaser-action/issues/536">#536</a>)</li>
<li><a
href="c59a691319"><code>c59a691</code></a>
chore: gitignore</li>
<li><a
href="56cc8b2737"><code>56cc8b2</code></a>
ci: add job to automate dependabot pre-checkin/vendor</li>
<li>Additional commits viewable in <a
href="e435ccd777...ec59f474b9">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:11:03 +02:00
dependabot[bot]
a5b152f212
 		build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible (#1032) 
Bumps [github.com/docker/cli](https://github.com/docker/cli) from
29.0.3+incompatible to 29.2.0+incompatible.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0b9d1985db"><code>0b9d198</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6764">#6764</a> from
vvoland/update-docker</li>
<li><a
href="9c9ec73588"><code>9c9ec73</code></a>
vendor: github.com/moby/moby/client v0.2.2</li>
<li><a
href="bab3e81e1d"><code>bab3e81</code></a>
vendor: github.com/moby/moby/api v1.53.0</li>
<li><a
href="2e64fc162a"><code>2e64fc1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6367">#6367</a> from
thaJeztah/template_slicejoin</li>
<li><a
href="1f2ba2ac9d"><code>1f2ba2a</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6760">#6760</a> from
thaJeztah/container_create_fix_error</li>
<li><a
href="e34a3422cc"><code>e34a342</code></a>
templates: make &quot;join&quot; work with non-string slices and map
values</li>
<li><a
href="a86356d42f"><code>a86356d</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6763">#6763</a> from
thaJeztah/bump_mapstructure</li>
<li><a
href="771660a17e"><code>771660a</code></a>
vendor: github.com/go-viper/mapstructure/v2 v2.5.0</li>
<li><a
href="9cff36b35a"><code>9cff36b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/cli/issues/6762">#6762</a> from
thaJeztah/bump_x_deps</li>
<li><a
href="08ed2bc6e8"><code>08ed2bc</code></a>
cli/command/container: make injecting config.json failures a
warning</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/cli/compare/v29.0.3...v29.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/cli&package-manager=go_modules&previous-version=29.0.3+incompatible&new-version=29.2.0+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:10:21 +02:00
dependabot[bot]
26564484ac
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy (#1034) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.220.0 to 3.225.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.225.1</h2>
<h2>3.225.1 (2026-03-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Fix inheritence of default providers across resources of
different packages
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22101">#22101</a></p>
</li>
<li>
<p>[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21917">#21917</a></p>
</li>
<li>
<p>[programgen/go] Fix plain values not always being lifted to
input/output values when needed
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22084">#22084</a></p>
</li>
<li>
<p>[programgen/python] Fix generation of <code>entries</code> and
<code>lookup</code> calls
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22086">#22086</a></p>
</li>
</ul>
<h2>v3.225.0</h2>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076">#22076</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076">#22076</a></p>
</li>
<li>
<p>[engine] Fix panic when a new component resource in the program is
not targeted
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21957">#21957</a></p>
</li>
<li>
<p>[sdk/nodejs] Implement GetProgramDependencies for bun and pnpm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22065">#22065</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Build language plugins with the grpcnotrace tag to reduce the
binary size
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22012">#22012</a></li>
</ul>
<h2>3.224.0 (2026-02-26)</h2>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="511dda345a"><code>511dda3</code></a>
Fix provider inheritence (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22101">#22101</a>)</li>
<li><a
href="46eee5ccae"><code>46eee5c</code></a>
Fix Go program generation lifting plains to input values (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22084">#22084</a>)</li>
<li><a
href="346389a8e6"><code>346389a</code></a>
Prepare for patch release (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22104">#22104</a>)</li>
<li><a
href="62a6d208d7"><code>62a6d20</code></a>
Fix Go codegen panic on digit-prefixed schema properties (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21917">#21917</a>)</li>
<li><a
href="58c7319c9b"><code>58c7319</code></a>
Changelog and go.mod updates for v3.225.0 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22091">#22091</a>)</li>
<li><a
href="d2c48abe82"><code>d2c48ab</code></a>
Fix builtin-object tests for Python (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22086">#22086</a>)</li>
<li><a
href="e3eece1a08"><code>e3eece1</code></a>
Freeze v3.225.0 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22085">#22085</a>)</li>
<li><a
href="ca6228e034"><code>ca6228e</code></a>
Update yaml to 1.30.0 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22081">#22081</a>)</li>
<li><a
href="e72496a59e"><code>e72496a</code></a>
fix race when looking up package ref (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22080">#22080</a>)</li>
<li><a
href="21b4452b91"><code>21b4452</code></a>
l1 builtin secret test (<a
href="https://redirect.github.com/pulumi/pulumi/issues/22079">#22079</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.220.0...v3.225.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.220.0&new-version=3.225.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-03-06 02:10:02 +02:00
Preeti Dewani
cb4807a7fb
 		add details of include_deleted in openapi spec (#1014) 
<!-- Provide a brief summary of your changes -->

## Motivation and Context
Add missing spec of include_deleted parameter in openapi spec

## How Has This Been Tested?
NA

## Breaking Changes
No

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
 2026-03-01 06:35:50 -08:00
Preeti Dewani
bb84ea69e8
 		Publisher-managed "deleted" support (#893) 
(Updated auto-generated PR description from @tadasant / Claude on Feb
22, 2026)

## Motivation and Context

Fixes #637

Server lifecycle management (deprecation and yanking) is a standard
requirement for package registries. Use cases like rebranding, security
vulnerabilities, and end-of-life servers demand the ability to mark
servers as deprecated or deleted, with optional messaging to guide
consumers toward alternatives.

## Changes

### New API endpoints

- **`PATCH /v0/servers/{serverName}/versions/{version}/status`** —
Update the lifecycle status of a single server version
- **`PATCH /v0/servers/{serverName}/status`** — Update the lifecycle
status of all versions of a server in a single transaction

Both endpoints accept:
```json
{
  "status": "active|deprecated|deleted",
  "statusMessage": "Optional message (max 500 chars) explaining the change"
}
```

### New CLI command

- **`mcp-publisher status <serverName> [version]`** — Update server
lifecycle status from the command line
  - `--status` (required): `active`, `deprecated`, or `deleted`
  - `--message`: Optional status message
- `--all-versions`: Apply to all versions of the server (replaces the
`<version>` argument)

### API response changes

`RegistryExtensions` now includes two new fields:
- `statusChangedAt` — Timestamp of the last status change
- `statusMessage` — Optional free-form message (e.g., deprecation
reason, migration guidance)

### List endpoint changes

- New `include_deleted` query parameter on `GET /v0/servers` — defaults
to `false`, hiding deleted servers from listings
- When `updated_since` is provided, `include_deleted` is automatically
set to `true` for incremental sync

### Database

- Migration `013_add_status_fields.sql`: Adds `status_changed_at` (NOT
NULL, initialized from `published_at`) and `status_message` columns to
the `servers` table

### Design decisions (from review discussion)

- **Dedicated status endpoints** rather than overloading the existing
edit endpoint
- **Bidirectional status transitions** — all transitions between
`active`, `deprecated`, and `deleted` are allowed
- **`statusMessage` as free-form text** — no structured `nextName` or
`alternativeUrl` fields (per maintainer feedback, to avoid complexity
around chaining, trust transfer, etc.)
- **Publish permission** grants status change access (not limited to
admin/edit)
- **Status message auto-cleared** when transitioning back to `active`
Good, now I have the full picture. Here's the addendum:

### Consumer-facing API changes

The new status fields live inside
`_meta["io.modelcontextprotocol.registry/official"]` on every
`ServerResponse`. This is the existing `RegistryExtensions` object — two
new fields are added alongside the existing ones:

**Before:**
```json
{
  "server": { "name": "com.example/my-server", "...": "..." },
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "active",
      "publishedAt": "2025-06-01T00:00:00Z",
      "updatedAt": "2025-06-15T00:00:00Z",
      "isLatest": true
    }
  }
}
```

**After:**
```json
{
  "server": { "name": "com.example/my-server", "...": "..." },
  "_meta": {
    "io.modelcontextprotocol.registry/official": {
      "status": "deprecated",
      "statusChangedAt": "2026-02-01T12:00:00Z",
      "statusMessage": "Deprecated in favor of com.example/my-server-v2",
      "publishedAt": "2025-06-01T00:00:00Z",
      "updatedAt": "2026-02-01T12:00:00Z",
      "isLatest": true
    }
  }
}
```

| New field | Type | Present when |
|-----------|------|-------------|
| `statusChangedAt` | `string` (RFC3339) | Always — initialized to
`publishedAt` for existing records |
| `statusMessage` | `string` (max 500 chars) | Only when set —
`null`/omitted for active servers (auto-cleared on transition to active)
|

These fields appear on **every endpoint that returns a
`ServerResponse`**: `GET /v0/servers`, `GET /v0/servers/{name}`, `GET
/v0/servers/{name}/versions/{version}`, and the new PATCH status
endpoints.

### List endpoint filtering

`GET /v0/servers` gains an `include_deleted` query parameter:

| Scenario | Behavior |
|----------|----------|
| No `include_deleted` param | Deleted servers hidden (default `false`)
|
| `include_deleted=true` | Deleted servers included in results |
| `updated_since` provided | `include_deleted` forced to `true` for
incremental sync |

## How Has This Been Tested?

- Unit tests for status handler (`status_test.go`) covering status
transitions, permission checks, validation errors, and the all-versions
endpoint
- Unit tests for the CLI command (`status_test.go`)
- Integration with existing server/edit handler tests
- Database layer tests for the new status update and query methods
- Tested locally with `make dev-compose`

## Types of changes

- [x] New feature (non-breaking change which adds functionality)

## Checklist

- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed

## Open items from review

- [ ] `include_deleted` silent override: When `updated_since` is
provided and `include_deleted=false` is explicitly passed, should return
a 400 error rather than silently overriding
([thread](https://github.com/modelcontextprotocol/registry/pull/893#discussion_r2100879360))
— agreed upon but may not yet be implemented
 2026-02-27 09:00:07 -08:00
Den Delimarsky
01e4e2b09e
 		Update SECURITY.md to use GitHub Security Advisories (#977) 
Replaces Anthropic HackerOne VDP references with standard GitHub
Security Advisory process.
 2026-02-18 23:36:23 -08:00
dependabot[bot]
541c8a78c0
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.219.0 to 3.220.0 in /deploy (#953) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.219.0 to 3.220.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.220.0</h2>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is &gt;= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is &gt;= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8ecd95a5e"><code>e8ecd95</code></a>
Fix remote components with PULUMI_NODEJS_SKIP_COMPONENT_INPUTS (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21727">#21727</a>)</li>
<li><a
href="4c2cc2a729"><code>4c2cc2a</code></a>
upgrade pulumi-dotnet and pulumi-yaml to latest (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21764">#21764</a>)</li>
<li><a
href="8dc466ce6e"><code>8dc466c</code></a>
Always install from registry when appropriate (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21649">#21649</a>)</li>
<li><a
href="2ce415c413"><code>2ce415c</code></a>
Relax the Copyright banner linter (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21732">#21732</a>)</li>
<li><a
href="5d49339b03"><code>5d49339</code></a>
Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21758">#21758</a>)</li>
<li><a
href="dbcad3b0ba"><code>dbcad3b</code></a>
Remap environment variables as a resource option on Provider (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21572">#21572</a>)</li>
<li><a
href="f5dc5a3fff"><code>f5dc5a3</code></a>
print and save environment variables on snapshot integrity errors (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21709">#21709</a>)</li>
<li><a
href="82d584e2d4"><code>82d584e</code></a>
Fix proto build: Update Node.js installation to use modern keyring (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21729">#21729</a>)</li>
<li><a
href="f8aaed4083"><code>f8aaed4</code></a>
Deprecate <code>github.com/pulumi/pulumi/pkg/v3/codegen/dotnet</code>
&amp; remove tests (<a
href="https://redirect.github.com/pulumi/pulumi/issues/2">#2</a>...</li>
<li><a
href="3392d063db"><code>3392d06</code></a>
Remove workaround for slow typechecking with MyPy and PyCharm (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21722">#21722</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.219.0&new-version=3.220.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-11 10:31:55 +02:00
Radoslav Dimitrov
4e1d46d843
 		Bump production to v1.4.1 (#952) 
<!-- Provide a brief summary of your changes -->

## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR bumps prod to v1.4.1

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-10 23:39:51 +02:00
deerajkumar18
b5f38fcc2a
 		update schema url point to the actual location (#884) 
<!-- Provide a brief summary of your changes -->

## Motivation and Context
This PR ensures that the draft URL points to the actual draft schema 
improvement suggested in
https://github.com/modelcontextprotocol/registry/issues/814


## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
 2026-02-10 13:32:58 -08:00
dependabot[bot]
a5f2dc1b66
 		build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 in /deploy (#950) v1.4.1 
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git)
from 5.16.2 to 5.16.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.16.5</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module golang.org/x/crypto to v0.45.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate"><code>@​go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1744">go-git/go-git#1744</a></li>
<li>build: Bump Go test versions to 1.23-1.25 (v5) by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1746">go-git/go-git#1746</a></li>
<li>[v5] git: worktree, Don't delete local untracked files when
resetting worktree by <a
href="https://github.com/Ch00k"><code>@​Ch00k</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1800">go-git/go-git#1800</a></li>
<li>Expand packfile checks by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1836">go-git/go-git#1836</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5">https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5</a></p>
<h2>v5.16.4</h2>
<h2>What's Changed</h2>
<ul>
<li>backport plumbing: format/idxfile, prevent panic by <a
href="https://github.com/swills"><code>@​swills</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1732">go-git/go-git#1732</a></li>
<li>[backport] build: test, Fix build on Windows. by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1734">go-git/go-git#1734</a></li>
<li>build: Update module golang.org/x/net to v0.38.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate"><code>@​go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1742">go-git/go-git#1742</a></li>
<li>build: Update module github.com/cloudflare/circl to v1.6.1
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate"><code>@​go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1741">go-git/go-git#1741</a></li>
<li>build: Update module github.com/go-git/go-git/v5 to v5.13.0
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate"><code>@​go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1743">go-git/go-git#1743</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4">https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4</a></p>
<h2>v5.16.3</h2>
<h2>What's Changed</h2>
<ul>
<li>internal: Expand regex to fix build [5.x] by <a
href="https://github.com/baloo"><code>@​baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1644">go-git/go-git#1644</a></li>
<li>build: raise timeouts for windows CI tests and disable CIFuzz [5.x]
by <a href="https://github.com/baloo"><code>@​baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1646">go-git/go-git#1646</a></li>
<li>plumbing: support commits extra headers, support jujutsu signed
commit [5.x] by <a
href="https://github.com/baloo"><code>@​baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1633">go-git/go-git#1633</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3">https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="48a1ae05ee"><code>48a1ae0</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1836">#1836</a>
from go-git/check-v5</li>
<li><a
href="42bdf1f904"><code>42bdf1f</code></a>
storage: filesystem, Verify idx matches pack file</li>
<li><a
href="4146a5653f"><code>4146a56</code></a>
plumbing: format/idxfile, Verify idxfile's checksum</li>
<li><a
href="63d78ec080"><code>63d78ec</code></a>
plumbing: format/packfile, Add new ErrMalformedPackFile</li>
<li><a
href="25f1624754"><code>25f1624</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1800">#1800</a>
from Ch00k/no-delete-untracked-v5</li>
<li><a
href="600fb13907"><code>600fb13</code></a>
git: worktree, Don't delete local untracked files when resetting
worktree</li>
<li><a
href="390a569415"><code>390a569</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1746">#1746</a>
from pjbgf/bump-go</li>
<li><a
href="61c8b859ce"><code>61c8b85</code></a>
build: Bump Go test versions to 1.23-1.25 (v5)</li>
<li><a
href="e5a05ecd4f"><code>e5a05ec</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/1744">#1744</a>
from go-git/renovate/releases/v5.x-go-golang.org-x-c...</li>
<li><a
href="1495930b09"><code>1495930</code></a>
plumbing: Remove use of non-constant format strings</li>
<li>Additional commits viewable in <a
href="https://github.com/go-git/go-git/compare/v5.16.2...v5.16.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.16.2&new-version=5.16.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-10 22:54:52 +02:00
dependabot[bot]
b883d47d97
 		build(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 (#951) 
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.32.0 to
0.33.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27761a2ad8"><code>27761a2</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/mod/compare/v0.32.0...v0.33.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/mod&package-manager=go_modules&previous-version=0.32.0&new-version=0.33.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-10 22:54:33 +02:00
Tadas Antanavicius
70a27717fb
 		feat(schema): allow template variables in transport URL field (#910) 
Authored by Claude Code Opus 4.5, steered/reviewed by me.

## Summary
- Updated the URL regex pattern in `StreamableHttpTransport` and
`SseTransport` to allow template variables like `{baseUrl}` as an
alternative to requiring the `https://` prefix
- This enables more flexible URL configuration in the `remotes` section
of server.json

## Changes
- Modified the `url` field pattern from `^https?://[^\s]+$` to
`^(https?://[^\s]+|\{[a-zA-Z_][a-zA-Z0-9_]*\}[^\s]*)$`
- Updated both `openapi.yaml` and the derived `server.schema.json`
- Added clarifying documentation that URL must start with `http://`,
`https://`, or a template variable

## Regex breakdown

```
^(https?://[^\s]+|\{[a-zA-Z_][a-zA-Z0-9_]*\}[^\s]*)$
```

| Part | Meaning |
|------|---------|
| `^` | Start of string |
| `(` | Begin alternation group |
| `https?://[^\s]+` | `http://` or `https://` followed by non-whitespace
|
| `\|` | OR |
| `\{[a-zA-Z_][a-zA-Z0-9_]*\}` | Template variable: `{` + valid
identifier + `}` |
| `[^\s]*` | Optional path/query after template variable |
| `)` | End alternation group |
| `$` | End of string |

## Test cases

**Should match ✓**
- `https://api.example.com/mcp`
- `http://localhost:8080/sse`
- `https://example.com/path?query=value`
- `{baseUrl}`
- `{baseUrl}/mcp`
- `{server_url}/api/v1`
- `{API_ENDPOINT}`

**Should NOT match ✗**
- `ftp://example.com` — wrong protocol
- `example.com` — missing protocol or variable
- `/relative/path` — relative paths not allowed
- `{invalid-name}/path` — hyphens not valid in variable names
- `{123invalid}` — variables can't start with numbers

---------

Co-authored-by: Agent Orchestrator <agent@ao.pulsemcp.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-09 11:51:17 +02:00
dependabot[bot]
541a6c61fa
 		build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.64.0 to 0.65.0 (#940) 
Bumps
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib)
from 0.64.0 to 0.65.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>Release
v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>

<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] -
2026-02-02</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>

<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
<li><code>system.paging.type</code> and
<code>process.paging.fault_type</code> →
<code>system.paging.fault.type</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a89d958e7a"><code>a89d958</code></a>
Release v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8493">#8493</a>)</li>
<li><a
href="1530d71edc"><code>1530d71</code></a>
Upgrade <code>semconv</code> to <code>v1.39.0</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8481">#8481</a>)</li>
<li><a
href="135bb6050e"><code>135bb60</code></a>
Upgrade autoexport to latest otel dep (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8483">#8483</a>)</li>
<li><a
href="8e921058c6"><code>8e92105</code></a>
chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.13
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8486">#8486</a>)</li>
<li><a
href="147148e2d2"><code>147148e</code></a>
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8487">#8487</a>)</li>
<li><a
href="d387510eec"><code>d387510</code></a>
Add version file for otellogrus bridge (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485">#8485</a>)</li>
<li><a
href="fad49c80d5"><code>fad49c8</code></a>
add version file for otelslog bridge (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480">#8480</a>)</li>
<li><a
href="9e1e5731ae"><code>9e1e573</code></a>
fix(deps): update module go.mongodb.org/mongo-driver to v1.17.8 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8479">#8479</a>)</li>
<li><a
href="37aa4753c9"><code>37aa475</code></a>
Add version file for otellogr bridge (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477">#8477</a>)</li>
<li><a
href="fc8ef39de1"><code>fc8ef39</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.64.0...zpages/v0.65.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/contrib/instrumentation/runtime&package-manager=go_modules&previous-version=0.64.0&new-version=0.65.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-09 11:11:06 +02:00
Radoslav Dimitrov
5962f9ea75
 		Resolve vulnerability warnings by bumping Go to 1.24.13 (#938) 
<!-- Provide a brief summary of your changes -->

## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-09 11:07:21 +02:00
Radoslav Dimitrov
bf628f464d
 		Group otel dependencies in a single dependabot PR (#935) 
<!-- Provide a brief summary of your changes -->

## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR groups all otel deps in a single dependabot PR as
usually they are spread across 4-5 separate ones whenever there's a new
version.

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-08 13:32:28 -08:00
dependabot[bot]
3b0341d89a
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.218.0 to 3.219.0 in /deploy (#941) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.218.0 to 3.219.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.219.0</h2>
<h2>3.219.0 (2026-02-05)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow setting <code>requiredPulumiVersion</code> in Pulumi.yaml
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21627">#21627</a></p>
</li>
<li>
<p>[cli/{install,package}] Allow using private packages as local
dependencies in components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21664">#21664</a></p>
</li>
<li>
<p>[cli/policy] Add <code>pulumi policy install</code> command
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21652">#21652</a></p>
</li>
<li>
<p>[engine] Run analyzer calls in parallel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21631">#21631</a></p>
</li>
<li>
<p>[programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21621">#21621</a></p>
</li>
<li>
<p>[sdk/python] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21644">#21644</a></p>
</li>
<li>
<p>[sdk/python] Add support for protobuf 6
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21647">#21647</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21604">#21604</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21614">#21614</a></p>
</li>
<li>
<p>[engine] Download/install required policy packs in parallel with
plugins
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21651">#21651</a></p>
</li>
<li>
<p>[cli/package] Correctly install packages that depend on other
packages for <code>pulumi package add</code> and <code>pulumi package
get-schema</code>.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21321">#21321</a></p>
</li>
<li>
<p>[programgen/python] Fix panic when ranging over a resource output
that is an array of objects
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21679">#21679</a></p>
</li>
<li>
<p>[sdk/python] Fix issue with generic subclasses of
<code>dynamic.Resource</code>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21670">#21670</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Relax pip version constraint</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.219.0 (2026-02-05)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow setting <code>requiredPulumiVersion</code> in Pulumi.yaml
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21627">#21627</a></p>
</li>
<li>
<p>[cli/{install,package}] Allow using private packages as local
dependencies in components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21664">#21664</a></p>
</li>
<li>
<p>[cli/policy] Add <code>pulumi policy install</code> command
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21652">#21652</a></p>
</li>
<li>
<p>[engine] Run analyzer calls in parallel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21631">#21631</a></p>
</li>
<li>
<p>[programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21621">#21621</a></p>
</li>
<li>
<p>[sdk/python] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21644">#21644</a></p>
</li>
<li>
<p>[sdk/python] Add support for protobuf 6
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21647">#21647</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21604">#21604</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21614">#21614</a></p>
</li>
<li>
<p>[engine] Download/install required policy packs in parallel with
plugins
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21651">#21651</a></p>
</li>
<li>
<p>[cli/package] Correctly install packages that depend on other
packages for <code>pulumi package add</code> and <code>pulumi package
get-schema</code>.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21321">#21321</a></p>
</li>
<li>
<p>[programgen/python] Fix panic when ranging over a resource output
that is an array of objects
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21679">#21679</a></p>
</li>
<li>
<p>[sdk/python] Fix issue with generic subclasses of
<code>dynamic.Resource</code>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21670">#21670</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Relax pip version constraint
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21639">#21639</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="11ec8dc824"><code>11ec8dc</code></a>
add repro + exclusion for RefreshV2 SIE (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21673">#21673</a>)</li>
<li><a
href="f188093644"><code>f188093</code></a>
Fix panic when ranging over array of objects output (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21679">#21679</a>)</li>
<li><a
href="f280013893"><code>f280013</code></a>
Bump the SDKs for 3.219.0 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21674">#21674</a>)</li>
<li><a
href="aba11a7f69"><code>aba11a7</code></a>
Bump the npm_and_yarn group across 2 directories with 1 update (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21665">#21665</a>)</li>
<li><a
href="59e1c1a691"><code>59e1c1a</code></a>
Always use the default a registry for <code>pulumi {install,package
add}</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21664">#21664</a>)</li>
<li><a
href="788bc12672"><code>788bc12</code></a>
Add a language test for <code>pluginDownloadURL</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21642">#21642</a>)</li>
<li><a
href="fa53ec6a3a"><code>fa53ec6</code></a>
Fix issue with generic subclasses of <code>dynamic.Resource</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21670">#21670</a>)</li>
<li><a
href="179a175ab1"><code>179a175</code></a>
Add invalid policy tests (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21660">#21660</a>)</li>
<li><a
href="ea80033453"><code>ea80033</code></a>
Run analyzer calls in parallel (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21631">#21631</a>)</li>
<li><a
href="1863748227"><code>1863748</code></a>
Add a <code>pulumi policy install</code> command (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21652">#21652</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.218.0...v3.219.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.218.0&new-version=3.219.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-06 12:02:48 +02:00
dependabot[bot]
545c4c8c15
 		build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0 (#939) 
Bumps
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go)
from 0.61.0 to 0.62.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>Release v1.40.0/v0.62.0/v0.16.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>. This stabilizes the
synchronous instrument enabled feature, allowing users to check if an
instrument will process measurements before performing computationally
expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="298cbedf25/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. This
prevents scrape failures when the Prometheus exporter is misconfigured
to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update opentelemetry-go monorepo to v0.15.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7690">open-telemetry/opentelemetry-go#7690</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7689">open-telemetry/opentelemetry-go#7689</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7691">open-telemetry/opentelemetry-go#7691</a></li>
<li>prometheus exporter ignores metrics from the Prometheus bridge by <a
href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7688">open-telemetry/opentelemetry-go#7688</a></li>
<li>chore(deps): update codecov/codecov-action action to v5.5.2 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7693">open-telemetry/opentelemetry-go#7693</a></li>
<li>fix(deps): update golang.org/x to 8475f28 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7692">open-telemetry/opentelemetry-go#7692</a></li>
<li>chore(deps): update github.com/securego/gosec/v2 digest to b6eea26
by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7694">open-telemetry/opentelemetry-go#7694</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.22.11
by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7696">open-telemetry/opentelemetry-go#7696</a></li>
<li>Use sync.Map and atomics for fixed bucket histograms by <a
href="https://github.com/dashpole"><code>@​dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7474">open-telemetry/opentelemetry-go#7474</a></li>
<li>chore(deps): update actions/cache action to v5 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7701">open-telemetry/opentelemetry-go#7701</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.20.0 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7698">open-telemetry/opentelemetry-go#7698</a></li>
<li>fix(deps): update module google.golang.org/protobuf to v1.36.11 by
<a href="https://github.com/renovate"><code>@​renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7704">open-telemetry/opentelemetry-go#7704</a></li>
<li>chore(deps): update github/codeql-action action to v4.31.8 by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7703">open-telemetry/opentelemetry-go#7703</a></li>
<li>sdk/log: improve Processor documentation by <a
href="https://github.com/pellared"><code>@​pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7695">open-telemetry/opentelemetry-go#7695</a></li>
<li>chore(deps): update github artifact actions (major) by <a
href="https://github.com/renovate"><code>@​renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7707">open-telemetry/opentelemetry-go#7707</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5c"><code>a3a5317</code></a>
Release v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859">#7859</a>)</li>
<li><a
href="77785da545"><code>77785da</code></a>
chore(deps): update github/codeql-action action to v4.32.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858">#7858</a>)</li>
<li><a
href="56fa1c297b"><code>56fa1c2</code></a>
chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857">#7857</a>)</li>
<li><a
href="298cbedf25"><code>298cbed</code></a>
Upgrade semconv use to v1.39.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li><a
href="3264bf171b"><code>3264bf1</code></a>
refactor: modernize code (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850">#7850</a>)</li>
<li><a
href="fd5d030c0a"><code>fd5d030</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="8d3b4cb250"><code>8d3b4cb</code></a>
chore(deps): update actions/cache action to v5.0.3 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847">#7847</a>)</li>
<li><a
href="91f7cadfca"><code>91f7cad</code></a>
chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845">#7845</a>)</li>
<li><a
href="fdad1eb7f3"><code>fdad1eb</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="c46d3bac18"><code>c46d3ba</code></a>
chore(deps): update golang.org/x/telemetry digest to fcf36f6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.61.0...exporters/prometheus/v0.62.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel/exporters/prometheus&package-manager=go_modules&previous-version=0.61.0&new-version=0.62.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-06 12:01:52 +02:00
dependabot[bot]
2959e0f9c1
 		build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 (#929) 
Bumps
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go)
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5c"><code>a3a5317</code></a>
Release v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859">#7859</a>)</li>
<li><a
href="77785da545"><code>77785da</code></a>
chore(deps): update github/codeql-action action to v4.32.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858">#7858</a>)</li>
<li><a
href="56fa1c297b"><code>56fa1c2</code></a>
chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857">#7857</a>)</li>
<li><a
href="298cbedf25"><code>298cbed</code></a>
Upgrade semconv use to v1.39.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li><a
href="3264bf171b"><code>3264bf1</code></a>
refactor: modernize code (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850">#7850</a>)</li>
<li><a
href="fd5d030c0a"><code>fd5d030</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="8d3b4cb250"><code>8d3b4cb</code></a>
chore(deps): update actions/cache action to v5.0.3 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847">#7847</a>)</li>
<li><a
href="91f7cadfca"><code>91f7cad</code></a>
chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845">#7845</a>)</li>
<li><a
href="fdad1eb7f3"><code>fdad1eb</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="c46d3bac18"><code>c46d3ba</code></a>
chore(deps): update golang.org/x/telemetry digest to fcf36f6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel/sdk&package-manager=go_modules&previous-version=1.39.0&new-version=1.40.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-05 12:45:33 +02:00
dependabot[bot]
7ac2b8de49
 		build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.39.0 to 1.40.0 (#928) 
Bumps
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go)
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5c"><code>a3a5317</code></a>
Release v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859">#7859</a>)</li>
<li><a
href="77785da545"><code>77785da</code></a>
chore(deps): update github/codeql-action action to v4.32.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858">#7858</a>)</li>
<li><a
href="56fa1c297b"><code>56fa1c2</code></a>
chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857">#7857</a>)</li>
<li><a
href="298cbedf25"><code>298cbed</code></a>
Upgrade semconv use to v1.39.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li><a
href="3264bf171b"><code>3264bf1</code></a>
refactor: modernize code (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850">#7850</a>)</li>
<li><a
href="fd5d030c0a"><code>fd5d030</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="8d3b4cb250"><code>8d3b4cb</code></a>
chore(deps): update actions/cache action to v5.0.3 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847">#7847</a>)</li>
<li><a
href="91f7cadfca"><code>91f7cad</code></a>
chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845">#7845</a>)</li>
<li><a
href="fdad1eb7f3"><code>fdad1eb</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="c46d3bac18"><code>c46d3ba</code></a>
chore(deps): update golang.org/x/telemetry digest to fcf36f6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel/sdk/metric&package-manager=go_modules&previous-version=1.39.0&new-version=1.40.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-02-05 12:45:10 +02:00
dependabot[bot]
1da48694b9
 		build(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.40.0 (#927) 
Bumps
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go)
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5c"><code>a3a5317</code></a>
Release v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859">#7859</a>)</li>
<li><a
href="77785da545"><code>77785da</code></a>
chore(deps): update github/codeql-action action to v4.32.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858">#7858</a>)</li>
<li><a
href="56fa1c297b"><code>56fa1c2</code></a>
chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857">#7857</a>)</li>
<li><a
href="298cbedf25"><code>298cbed</code></a>
Upgrade semconv use to v1.39.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li><a
href="3264bf171b"><code>3264bf1</code></a>
refactor: modernize code (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850">#7850</a>)</li>
<li><a
href="fd5d030c0a"><code>fd5d030</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="8d3b4cb250"><code>8d3b4cb</code></a>
chore(deps): update actions/cache action to v5.0.3 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847">#7847</a>)</li>
<li><a
href="91f7cadfca"><code>91f7cad</code></a>
chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845">#7845</a>)</li>
<li><a
href="fdad1eb7f3"><code>fdad1eb</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="c46d3bac18"><code>c46d3ba</code></a>
chore(deps): update golang.org/x/telemetry digest to fcf36f6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel&package-manager=go_modules&previous-version=1.39.0&new-version=1.40.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:33:16 +02:00
dependabot[bot]
cffac199b6
 		build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 (#922) 
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt)
from 5.3.0 to 5.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang-jwt/jwt/releases">github.com/golang-jwt/jwt/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🔐 Features</h3>
<ul>
<li>Add spellcheck Github action to catch common spelling mistakes by <a
href="https://github.com/equalsgibson"><code>@​equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458">golang-jwt/jwt#458</a></li>
<li>Add <code>WithNotBeforeRequired</code> parser option and add test
coverage by <a
href="https://github.com/equalsgibson"><code>@​equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/456">golang-jwt/jwt#456</a></li>
<li>Update godoc example func to properly refer to
<code>NewWithClaims()</code> by <a
href="https://github.com/equalsgibson"><code>@​equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/459">golang-jwt/jwt#459</a></li>
<li>Update github workflows by <a
href="https://github.com/mfridman"><code>@​mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/462">golang-jwt/jwt#462</a></li>
<li>Additional test for CustomClaims that validates unmarshalling
behaviour by <a
href="https://github.com/equalsgibson"><code>@​equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/457">golang-jwt/jwt#457</a></li>
<li>Fix early file close in jwt cli by <a
href="https://github.com/mfridman"><code>@​mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/472">golang-jwt/jwt#472</a></li>
<li>Add TPM signature reference by <a
href="https://github.com/salrashid123"><code>@​salrashid123</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473">golang-jwt/jwt#473</a></li>
<li>Remove misleading ParserOptions documentation in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/484">golang-jwt/jwt#484</a></li>
<li>Save signature to Token struct after successful signing by <a
href="https://github.com/EgorSheff"><code>@​EgorSheff</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417">golang-jwt/jwt#417</a></li>
<li>Set token.Signature in <code>ParseUnverified</code> by <a
href="https://github.com/slickwilli"><code>@​slickwilli</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414">golang-jwt/jwt#414</a></li>
</ul>
<h3>👒 Dependencies</h3>
<ul>
<li>Bump crate-ci/typos from 1.34.0 to 1.35.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/461">golang-jwt/jwt#461</a></li>
<li>Bump crate-ci/typos from 1.35.4 to 1.36.2 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/470">golang-jwt/jwt#470</a></li>
<li>Bump github/codeql-action from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/478">golang-jwt/jwt#478</a></li>
<li>Bump crate-ci/typos from 1.36.2 to 1.39.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/480">golang-jwt/jwt#480</a></li>
<li>Bump golangci/golangci-lint-action from 8 to 9 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/481">golang-jwt/jwt#481</a></li>
<li>Bump actions/setup-go from 5 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/469">golang-jwt/jwt#469</a></li>
<li>Bump crate-ci/typos from 1.39.0 to 1.40.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/488">golang-jwt/jwt#488</a></li>
<li>Bump actions/checkout from 5 to 6 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/487">golang-jwt/jwt#487</a></li>
<li>Bump crate-ci/typos from 1.40.0 to 1.41.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/490">golang-jwt/jwt#490</a></li>
<li>Bump crate-ci/typos from 1.41.0 to 1.42.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/492">golang-jwt/jwt#492</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/equalsgibson"><code>@​equalsgibson</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458">golang-jwt/jwt#458</a></li>
<li><a
href="https://github.com/salrashid123"><code>@​salrashid123</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473">golang-jwt/jwt#473</a></li>
<li><a href="https://github.com/EgorSheff"><code>@​EgorSheff</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417">golang-jwt/jwt#417</a></li>
<li><a
href="https://github.com/slickwilli"><code>@​slickwilli</code></a> made
their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414">golang-jwt/jwt#414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1">https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7ceae619e7"><code>7ceae61</code></a>
Add release.yml for changelog configuration</li>
<li><a
href="dce8e4dddc"><code>dce8e4d</code></a>
Set token.Signature in <code>ParseUnverified</code> (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/414">#414</a>)</li>
<li><a
href="8889e208aa"><code>8889e20</code></a>
Save signature to Token struct after successful signing (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/417">#417</a>)</li>
<li><a
href="d237f8204b"><code>d237f82</code></a>
ci: update github-actions schedule interval to monthly</li>
<li><a
href="d8dce95a40"><code>d8dce95</code></a>
Bump crate-ci/typos from 1.41.0 to 1.42.1 (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/492">#492</a>)</li>
<li><a
href="e93180329e"><code>e931803</code></a>
Bump crate-ci/typos from 1.40.0 to 1.41.0 (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/490">#490</a>)</li>
<li><a
href="e6a0afa839"><code>e6a0afa</code></a>
Bump actions/checkout from 5 to 6 (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/487">#487</a>)</li>
<li><a
href="9f85c9ec9f"><code>9f85c9e</code></a>
Bump crate-ci/typos from 1.39.0 to 1.40.0 (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/488">#488</a>)</li>
<li><a
href="60a8669e02"><code>60a8669</code></a>
Bump actions/setup-go from 5 to 6 (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/469">#469</a>)</li>
<li><a
href="76f582896d"><code>76f5828</code></a>
Remove misleading ParserOptions documentation (<a
href="https://redirect.github.com/golang-jwt/jwt/issues/484">#484</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/golang-jwt/jwt/v5&package-manager=go_modules&previous-version=5.3.0&new-version=5.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:32:51 +02:00
dependabot[bot]
4248d135b7
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.217.1 to 3.218.0 in /deploy (#924) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.217.1 to 3.218.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.218.0</h2>
<h2>3.218.0 (2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/nodejs] Add support for the <code>OnError</code> resource
hook</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again</p>
</li>
<li>
<p>[cli/install] Correctly include git forge organizations as schema
namespaces when generating SDKs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21579">#21579</a></p>
</li>
<li>
<p>[cli/{install,package}] Correctly grab package names for Python &amp;
NodeJS
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21577">#21577</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.218.0 (2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/nodejs] Add support for the <code>OnError</code> resource
hook</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again</p>
</li>
<li>
<p>[cli/install] Correctly include git forge organizations as schema
namespaces when generating SDKs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21579">#21579</a></p>
</li>
<li>
<p>[cli/{install,package}] Correctly grab package names for Python &amp;
NodeJS
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21577">#21577</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="da9b84347b"><code>da9b843</code></a>
Unrestrict arguments to <code>convert</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21603">#21603</a>)</li>
<li><a
href="d94b6a69e2"><code>d94b6a6</code></a>
OnError support for NodeJS SDK (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21568">#21568</a>)</li>
<li><a
href="6ae181792f"><code>6ae1817</code></a>
expand exclusion rule for RefreshV2 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21591">#21591</a>)</li>
<li><a
href="e885bf3653"><code>e885bf3</code></a>
fuzzing: print full test case to stdout in CI (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21601">#21601</a>)</li>
<li><a
href="059066063e"><code>0590660</code></a>
Argument specifications for state commands (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21590">#21590</a>)</li>
<li><a
href="d186b46c6f"><code>d186b46</code></a>
Check the interaction between <code>replaceWith</code> and
<code>deletedWith</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21584">#21584</a>)</li>
<li><a
href="9074f6b351"><code>9074f6b</code></a>
Argument specifications for Pulumi CLI stack commands (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21589">#21589</a>)</li>
<li><a
href="16ad3edd5a"><code>16ad3ed</code></a>
Bump language runtimes for dotnet, java, and yaml (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21597">#21597</a>)</li>
<li><a
href="5b2e34bcd4"><code>5b2e34b</code></a>
Argument specifications for Pulumi Cloud commands (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21587">#21587</a>)</li>
<li><a
href="aed72b3e76"><code>aed72b3</code></a>
Argument specifications for Pulumi deployment commands (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21588">#21588</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.217.1...v3.218.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.217.1&new-version=3.218.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:32:15 +02:00
dependabot[bot]
8e0af8d82b
 		build(deps): bump the actions group across 1 directory with 2 updates (#933) 
Bumps the actions group with 2 updates in the / directory:
[docker/login-action](https://github.com/docker/login-action) and
[anchore/sbom-action](https://github.com/anchore/sbom-action).

Updates `docker/login-action` from 3.6.0 to 3.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.7.0</h2>
<ul>
<li>Add <code>scope</code> input to set scopes for the authentication
token by <a
href="https://github.com/crazy-max"><code>@​crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/912">docker/login-action#912</a></li>
<li>Add support for AWS European Sovereign Cloud ECR by <a
href="https://github.com/dphi"><code>@​dphi</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/914">docker/login-action#914</a></li>
<li>Ensure passwords are redacted with <code>registry-auth</code> input
by <a href="https://github.com/crazy-max"><code>@​crazy-max</code></a>
in <a
href="https://redirect.github.com/docker/login-action/pull/911">docker/login-action#911</a></li>
<li>build(deps): bump lodash from 4.17.21 to 4.17.23 in <a
href="https://redirect.github.com/docker/login-action/pull/915">docker/login-action#915</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.6.0...v3.7.0">https://github.com/docker/login-action/compare/v3.6.0...v3.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c94ce9fb46"><code>c94ce9f</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/915">#915</a>
from docker/dependabot/npm_and_yarn/lodash-4.17.23</li>
<li><a
href="8339c958ce"><code>8339c95</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/912">#912</a>
from docker/scope</li>
<li><a
href="c83e9320c8"><code>c83e932</code></a>
build(deps): bump lodash from 4.17.21 to 4.17.23</li>
<li><a
href="b268aa57e3"><code>b268aa5</code></a>
chore: update generated content</li>
<li><a
href="a603229278"><code>a603229</code></a>
documentation for scope input</li>
<li><a
href="7567f92a74"><code>7567f92</code></a>
Add scope input to set scopes for the authentication token</li>
<li><a
href="0567fa5ae8"><code>0567fa5</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/914">#914</a>
from dphi/add-support-for-amazonaws.eu</li>
<li><a
href="f6ef577545"><code>f6ef577</code></a>
feat: add support for AWS European Sovereign Cloud ECR registries</li>
<li><a
href="916386b000"><code>916386b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/login-action/issues/911">#911</a>
from crazy-max/ensure-redact</li>
<li><a
href="5b3f94a294"><code>5b3f94a</code></a>
chore: update generated content</li>
<li>Additional commits viewable in <a
href="5e57cd1181...c94ce9fb46">compare
view</a></li>
</ul>
</details>
<br />

Updates `anchore/sbom-action` from 0.22.1 to 0.22.2
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.2</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/581">#581</a>)
[@<a href="https://github.com/apps/dependabot">dependabot[bot]</a>]</li>
<li>chore(deps): update Syft to v1.41.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/582">#582</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps-dev): bump the dev-dependencies group with 2 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/580">#580</a>)
[@<a href="https://github.com/apps/dependabot">dependabot[bot]</a>]</li>
<li>chore(deps): update Syft to v1.41.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/579">#579</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator">anchore-actions-token-generator[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28d71544de"><code>28d7154</code></a>
chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/581">#581</a>)</li>
<li><a
href="5e3583419a"><code>5e35834</code></a>
chore(deps): update Syft to v1.41.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/582">#582</a>)</li>
<li><a
href="a30a06a2ce"><code>a30a06a</code></a>
chore(deps-dev): bump the dev-dependencies group with 2 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/580">#580</a>)</li>
<li><a
href="750e84c055"><code>750e84c</code></a>
chore(deps): update Syft to v1.41.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/579">#579</a>)</li>
<li><a
href="5620efe7f1"><code>5620efe</code></a>
chore(deps): bump release-drafter/release-drafter from 6.1.0 to 6.2.0
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/578">#578</a>)</li>
<li><a
href="ec824c76ad"><code>ec824c7</code></a>
chore(deps): bump peter-evans/create-pull-request from 8.0.0 to 8.1.0
(<a
href="https://redirect.github.com/anchore/sbom-action/issues/577">#577</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.1...v0.22.2">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:31:42 +02:00
dependabot[bot]
d33b3f5ece
 		build(deps): bump go.opentelemetry.io/otel/metric from 1.39.0 to 1.40.0 (#930) 
Bumps
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go)
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5c"><code>a3a5317</code></a>
Release v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859">#7859</a>)</li>
<li><a
href="77785da545"><code>77785da</code></a>
chore(deps): update github/codeql-action action to v4.32.1 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858">#7858</a>)</li>
<li><a
href="56fa1c297b"><code>56fa1c2</code></a>
chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857">#7857</a>)</li>
<li><a
href="298cbedf25"><code>298cbed</code></a>
Upgrade semconv use to v1.39.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li><a
href="3264bf171b"><code>3264bf1</code></a>
refactor: modernize code (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850">#7850</a>)</li>
<li><a
href="fd5d030c0a"><code>fd5d030</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="8d3b4cb250"><code>8d3b4cb</code></a>
chore(deps): update actions/cache action to v5.0.3 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847">#7847</a>)</li>
<li><a
href="91f7cadfca"><code>91f7cad</code></a>
chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845">#7845</a>)</li>
<li><a
href="fdad1eb7f3"><code>fdad1eb</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="c46d3bac18"><code>c46d3ba</code></a>
chore(deps): update golang.org/x/telemetry digest to fcf36f6 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel/metric&package-manager=go_modules&previous-version=1.39.0&new-version=1.40.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:31:21 +02:00
Radoslav Dimitrov
c25e88d6f3
 		Resolve vulnerability warnings by bumping Go to 1.24.12 (#934) 
<!-- Provide a brief summary of your changes -->
The following PR fixes the failing validation checks on our CI. 

## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->

## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->

## Breaking Changes
<!-- Will users need to update their code or configurations? -->

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed

## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->

Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
 2026-02-05 12:24:17 +02:00
Bob Dickinson
f06d1eda8a
 		Added /validate endpoint and modified mcp-publish so that all validation happens there (#896) 
## Motivation and Context

Per discussion with @rdimitrov - all validation now happens in a new
`/validate` endpoint. For details, see below.

## Breaking Changes

None. Validation on /publish only validates schema version and semantic
checks (manual checks) as before. We can add schema validation by
changing a flag in the called to `ValidateJSONSchema` when we're ready.

## Types of changes
- [X] New feature (non-breaking change which adds functionality)

## Checklist
- [X] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [X] My code follows the repository's style guidelines
- [X] New and existing tests pass locally
- [X] I have added appropriate error handling
- [X] I have added or updated documentation as needed

## Additional context

## API Changes

### 1. New `/validate` Endpoint

A new public endpoint was added for validating `server.json` files
without publishing them.

**Details:**
- **Paths:** `/v0/validate` and `/v0.1/validate`
- **Method:** `POST`
- **Authentication:** None required (public endpoint)
- **Request:** JSON body containing `ServerJSON`
- **Response:** `200 OK` with `ValidationResult` containing:
  - `valid` (boolean)
- `issues` (array of validation issues with type, path, message,
severity, reference)

**Implementation:**
- New handler file: `internal/api/handlers/v0/validate.go`
- Performs comprehensive validation using `ValidationAll` option:
  - Schema version validation
  - Full schema validation
  - Semantic validation
- Always returns `200 OK` - validity is indicated in `result.Valid`
field
- Registered in router for both `/v0` and `/v0.1` prefixes

### 2. `/publish` Endpoint Validation Flow Changes

The publish endpoint now validates earlier in the request flow and
provides clearer error responses.

**Before:** Validation was mixed into `ValidatePublishRequest()` (which
also handled publisher extensions and registry ownership).

**After:**
1. Validates `ServerJSON` structure first using `ValidateServerJSON()`
(schema version + semantic validation)
2. Returns `422 Unprocessable Entity` with message: "Failed to publish
server, invalid schema: call /validate for details"
3. Only proceeds to publisher extensions/registry validation if schema
validation passes
4. No longer calls `ValidatePublishRequest()` internally for schema
validation

**Key Changes:**
- Validation happens before `CreateServer()` call
- Returns `422` on schema/semantic validation failures
- Error message directs users to `/validate` endpoint for details
- `ValidatePublishRequest()` no longer performs schema validation (added
note in comments)

### 3. `/edit` Endpoint Validation Flow Changes

Similar validation changes were applied to the edit endpoint.

**Changes:**
- Added `ValidateServerJSON()` call before server update
- Returns `422` with same error message format on validation failure
- Matches the `/publish` endpoint behavior

### 4. Validator Functions Refactoring

Updated validator functions to reflect that schema validation is now
done separately.

**Changes to `ValidatePublishRequest()`:**
- Removed internal `ValidateServerJSON()` call
- Added note: "ValidateServerJSON should be called separately before
this function"
- Now only validates publisher extensions and registry ownership

**Changes to `ValidateUpdateRequest()`:**
- Same change (removed schema validation, added note)
- Now only validates registry ownership

## CLI Changes

### 1. `validate` Command: Now Uses API Endpoint

**Before:** Performed local validation using
`validators.ValidateServerJSON()`.

**After:** Calls the `/v0/validate` endpoint on the registry.

**Details:**
- Reads `server.json` and sends it to the registry API
- Displays validation results returned by the server
- Uses the same error formatting as before
- Registry URL comes from token file (or default)
- No authentication required (public endpoint)

**Implementation:**
- Added `validateViaAPI()` function that POSTs to `/v0/validate`
- Parses `ValidationResult` response from server
- Uses shared `printValidationIssues()` for formatting

### 2. `publish` Command: Validation Only on 422 Errors

**Before:** Performed upfront local schema validation before publishing.

**After:** Attempts publish first, then validates only if server returns
422.

**Details:**
- Attempts publish immediately (no upfront validation)
- If publish returns 422 (Unprocessable Entity):
  - Calls `/v0/validate` endpoint to get detailed validation errors
  - Formats and displays them using same logic as `validate` command
  - Returns error with migration links
- For non-422 errors (401, 403, etc.), returns original error (no
validation call)

**Implementation Changes:**
- Removed upfront `runValidationAndPrintIssues()` call
- Modified `publishToRegistry()` to return HTTP status code alongside
response/error
- Added 422 detection logic that calls `validateViaAPI()`

### 3. Shared Validation Error Formatting

**Before:** `runValidationAndPrintIssues()` function handled both
validation and printing together.

**After:** Refactored to separate printing logic.

**Details:**
- Created `printValidationIssues()` function - just prints validation
issues (no validation logic)
- Removed `runValidationAndPrintIssues()` function (no longer used)
- Both `validate` and `publish` commands use `printValidationIssues()`
for consistent output

**Behavior:**
- Prints schema validation errors with migration guidance
- Prints all other validation issues with formatting
- Returns formatted error message string for schema issues

## Summary

Both CLI commands now use the `/validate` API endpoint for validation
instead of local validation. The `publish` command validates only after
receiving a 422 error response, and both commands share the same error
formatting via `printValidationIssues()`.

### Benefits

- **Centralized validation logic** - All validation happens on the
server
- **Always up-to-date** - CLI always uses current server validation
rules
- **Consistent experience** - Same validation behavior whether using CLI
or API directly
- **Better separation of concerns** - Schema validation separated from
publisher-specific validation
 2026-02-04 15:52:07 +02:00
dependabot[bot]
dc73689210
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.216.0 to 3.217.1 in /deploy (#919) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.216.0 to 3.217.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.217.1</h2>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548">#21548</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1</a></p>
<h2>v3.217.0</h2>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548">#21548</a></p>
</li>
<li>
<p>[cli/install] Copy files when linking instead of renaming
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549">#21549</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1</a></p>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="381f23bab0"><code>381f23b</code></a>
ProgramTest: Fully qualify environment names (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21556">#21556</a>)</li>
<li><a
href="0b1bfabbd6"><code>0b1bfab</code></a>
Fix concurrency bugs in <code>packageinstallation</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21559">#21559</a>)</li>
<li><a
href="de8f97e80e"><code>de8f97e</code></a>
Prepare for patch release v3.217.1 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21558">#21558</a>)</li>
<li><a
href="4bcb1d4046"><code>4bcb1d4</code></a>
Add language tests for <code>replaceOnChanges</code> (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21552">#21552</a>)</li>
<li><a
href="8e23ef0108"><code>8e23ef0</code></a>
Increase partition for the pkg module on windows (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21554">#21554</a>)</li>
<li><a
href="c571535c83"><code>c571535</code></a>
Bump tar from 6.2.1 to 7.5.6 in /tests/integration/iterative-constraints
in t...</li>
<li><a
href="98192921a5"><code>9819292</code></a>
split up python conformance tests (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21367">#21367</a>)</li>
<li><a
href="683b6f63cb"><code>683b6f6</code></a>
Copy files when linking instead of renaming (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21549">#21549</a>)</li>
<li><a
href="b2ecd0eb63"><code>b2ecd0e</code></a>
Implement Go SDK support for <code>OnError</code> hooks (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21515">#21515</a>)</li>
<li><a
href="16713d0b23"><code>16713d0</code></a>
Do not double install plugins with explicit parameterizations (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21548">#21548</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.216.0...v3.217.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.216.0&new-version=3.217.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-28 11:56:20 +02:00
dependabot[bot]
f1dbb060c8
 		build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 in the actions group (#920) 
Bumps the actions group with 1 update:
[anchore/sbom-action](https://github.com/anchore/sbom-action).

Updates `anchore/sbom-action` from 0.22.0 to 0.22.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.1</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): update Syft to v1.41.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/576">#576</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps): bump lodash from 4.17.21 to 4.17.23 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/573">#573</a>)
[@<a href="https://github.com/apps/dependabot">dependabot[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="deef08a0db"><code>deef08a</code></a>
chore(deps): update Syft to v1.41.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/576">#576</a>)</li>
<li><a
href="f139ded77a"><code>f139ded</code></a>
chore(deps): bump lodash from 4.17.21 to 4.17.23 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/573">#573</a>)</li>
<li><a
href="1b05262535"><code>1b05262</code></a>
chore(deps): bump zizmorcore/zizmor-action from 0.3.0 to 0.4.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/575">#575</a>)</li>
<li><a
href="1e8f28d002"><code>1e8f28d</code></a>
chore(deps): bump actions/checkout from 6.0.1 to 6.0.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/574">#574</a>)</li>
<li><a
href="c618dc7fb6"><code>c618dc7</code></a>
chore: tweak release drafter author and husky (<a
href="https://redirect.github.com/anchore/sbom-action/issues/572">#572</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.0...v0.22.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.22.0&new-version=0.22.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-28 11:55:59 +02:00
dependabot[bot]
3f3383bb61
 		build(deps): bump cloud.google.com/go/kms from 1.24.0 to 1.25.0 (#913) 
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go)
from 1.24.0 to 1.25.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>maps 1.25.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/maps/v1.24.0...maps/v1.25.0">1.25.0</a>
(2025-10-22)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Add moved_place and moved_place_id to Place (PiperOrigin-RevId:
821809971) (<a
href="f46efe45">f46efe45</a>)</p>
</li>
<li>
<p>add experimental Load Costs feature (PiperOrigin-RevId: 819788002)
(<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>add OptimizeToursLongRunning method (PiperOrigin-RevId: 819788002)
(<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>add experimental U-turn Avoidance feature (PiperOrigin-RevId:
819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>add OptimizeToursUri method (PiperOrigin-RevId: 819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>
<p>Change comments in some fields in Places API (PiperOrigin-RevId:
821809971) (<a
href="f46efe45">f46efe45</a>)</p>
</li>
<li>
<p>A comment for field <code>place_id</code> in message
<code>.google.maps.routeoptimization.v1.Waypoint</code> is changed
(PiperOrigin-RevId: 819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>A comment for field <code>precedence_rules</code> in message
<code>.google.maps.routeoptimization.v1.ShipmentModel</code> is changed
(PiperOrigin-RevId: 819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>A comment for field <code>duration_distance_matrices</code> in
message <code>.google.maps.routeoptimization.v1.ShipmentModel</code> is
changed (PiperOrigin-RevId: 819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
<li>
<p>A comment for enum <code>TravelMode</code> is changed
(PiperOrigin-RevId: 819788002) (<a
href="0241a9ca">0241a9ca</a>)</p>
</li>
</ul>
<h2>cloudbuild 1.25.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/cloudbuild/v1.24.0...cloudbuild/v1.25.0">1.25.0</a>
(2025-12-18)</h2>
<h2>kms 1.25.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.24.0...kms/v1.25.0">1.25.0</a>
(2026-01-22)</h2>
<h3>Features</h3>
<ul>
<li>add the SingleTenantHsm functionality including the management API
and resource types (PiperOrigin-RevId: 858582271) (<a
href="8ddeca50">8ddeca50</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li>
<p>A comment for field <code>crypto_key_backend</code> in message
<code>.google.cloud.kms.v1.CryptoKey</code> is expanded to include
SingleTenantHsmInstances (PiperOrigin-RevId: 858582271) (<a
href="8ddeca50">8ddeca50</a>)</p>
</li>
<li>
<p>A comment for enum value
<code>MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION</code> in enum
<code>AccessReason</code> is changed (PiperOrigin-RevId: 858582271) (<a
href="8ddeca50">8ddeca50</a>)</p>
</li>
<li>
<p>A comment for enum value
<code>MODIFIED_CUSTOMER_INITIATED_ACCESS</code> in enum
<code>AccessReason</code> is changed (PiperOrigin-RevId: 858582271) (<a
href="8ddeca50">8ddeca50</a>)</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.24.0...documentai/v1.25.0">1.25.0</a>
(2024-02-09)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Expose model_type in v1 processor, so
that user can see the model_type after get or list processor version (<a
href="2fcf55ccb2">2fcf55c</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="740e59c6a0"><code>740e59c</code></a>
chore: librarian release pull request: 20250912T134835Z (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12870">#12870</a>)</li>
<li><a
href="d8078f0b64"><code>d8078f0</code></a>
chore: release main (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12869">#12869</a>)</li>
<li><a
href="2d9e87b206"><code>2d9e87b</code></a>
chore: librarian generate pull request: 20250912T133008Z (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12868">#12868</a>)</li>
<li><a
href="1501b23474"><code>1501b23</code></a>
feat(gkehub): add <code>k8s_git_version</code> field (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12863">#12863</a>)</li>
<li><a
href="1f11996023"><code>1f11996</code></a>
chore(main): release spanner 1.85.1 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12796">#12796</a>)</li>
<li><a
href="baab714b87"><code>baab714</code></a>
fix(spanner): disable afe_connectivity_error_count metric (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12866">#12866</a>)</li>
<li><a
href="a76dedc161"><code>a76dedc</code></a>
chore: release main (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12861">#12861</a>)</li>
<li><a
href="5a65fa044f"><code>5a65fa0</code></a>
chore: remove dlp from release-please and bump postprocessor (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12862">#12862</a>)</li>
<li><a
href="d73f9123be"><code>d73f912</code></a>
chore(apihub): fix Go proto/grpc build target (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12814">#12814</a>)</li>
<li><a
href="45a7d9b4b9"><code>45a7d9b</code></a>
fix(internal/postprocessor): add dlp to skip-module-scan-paths (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12857">#12857</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.24.0...dlp/v1.25.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cloud.google.com/go/kms&package-manager=go_modules&previous-version=1.24.0&new-version=1.25.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-23 14:12:46 +02:00
Jonathan Hefner
817e12161d docs: Add preview disclaimer note to public documentation 
Add a `<Note>` component to all MDX files in
`docs/modelcontextprotocol-io/` informing readers that the MCP Registry
is currently in preview and that breaking changes or data resets may
occur before general availability.

The note also directs users to report issues on GitHub at
https://github.com/modelcontextprotocol/registry/issues

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-22 07:35:03 -06:00
dependabot[bot]
4fb32e5e2e
 		build(deps): bump anchore/sbom-action from 0.21.1 to 0.22.0 in the actions group (#911) 
Bumps the actions group with 1 update:
[anchore/sbom-action](https://github.com/anchore/sbom-action).

Updates `anchore/sbom-action` from 0.21.1 to 0.22.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.0</h2>
<h2>Changes in v0.22.0</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps-dev): bump the dev-dependencies group with 19 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/566">#566</a>)
[<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>]</li>
<li>chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/567">#567</a>)
[<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>]</li>
<li>chore(deps): update Syft to v1.40.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/563">#563</a>)
[<a
href="https://github.com/anchore-actions-token-generator"><code>@​anchore-actions-token-generator</code></a>[bot]]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="62ad5284b8"><code>62ad528</code></a>
chore: update release-drafter, dependencies (<a
href="https://redirect.github.com/anchore/sbom-action/issues/571">#571</a>)</li>
<li><a
href="2657179ab6"><code>2657179</code></a>
chore(deps-dev): bump the dev-dependencies group with 19 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/566">#566</a>)</li>
<li><a
href="61140b1e0e"><code>61140b1</code></a>
chore(deps): bump npm-check-updates from 17.1.3 to 19.3.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/567">#567</a>)</li>
<li><a
href="f99cf3e0ee"><code>f99cf3e</code></a>
ci: enable dependabot with groups (<a
href="https://redirect.github.com/anchore/sbom-action/issues/565">#565</a>)</li>
<li><a
href="28b3d8f2b7"><code>28b3d8f</code></a>
Chore better zizmor (<a
href="https://redirect.github.com/anchore/sbom-action/issues/564">#564</a>)</li>
<li><a
href="3363a57fa0"><code>3363a57</code></a>
chore(deps): update Syft to v1.40.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/563">#563</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.21.1...v0.22.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=anchore/sbom-action&package-manager=github_actions&previous-version=0.21.1&new-version=0.22.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-22 14:39:44 +02:00
Jonathan Hefner
9d30456d48 docs: Fix errors and typos in public documentation 
- Fix `--private-key-file` to `--private-key` in `github-actions.mdx`
  DNS authentication example (the CLI expects hex-encoded key data, not
  a file path)
- Add missing `./` prefix to `mcp-publisher` command in PAT
  authentication example
- Fix typo `verfication` to `verification` in troubleshooting table
- Remove duplicate word `authentication` in `quickstart.mdx`
  prerequisites
- Fix `name` to `identifier` field in JSON examples in `versioning.mdx`
- Fix `PyPi` to `PyPI` (correct capitalization) in
  `moderation-policy.mdx`

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 10:57:09 -06:00
Jonathan Hefner
28360d5b20 docs: Convert FAQ heading to MDX frontmatter 
Replace the markdown `# Frequently Asked Questions` heading with proper
MDX frontmatter that includes both `title` and `sidebarTitle` fields.
This brings the FAQ page in line with MDX documentation conventions.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-01-21 10:57:09 -06:00
dependabot[bot]
1e8594e6e0
 		build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.215.0 to 3.216.0 in /deploy (#898) 
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi) from
3.215.0 to 3.216.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.216.0</h2>
<h2>3.216.0 (2026-01-16)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[build] Don't set PULUMI_ROOT with mise
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21457">#21457</a></p>
</li>
<li>
<p>[cli] Default to Pulumi Cloud when using an OIDC token for login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21322">#21322</a></p>
</li>
<li>
<p>[engine] Add CheckPulumiVersion RPC to the engine
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21429">#21429</a></p>
</li>
<li>
<p>[protobuf] Remove ProviderHandshakeResponse.pulumi_version_range
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21438">#21438</a></p>
</li>
<li>
<p>[sdk/nodejs] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21315">#21315</a></p>
</li>
<li>
<p>[sdk/nodejs] Add support for serializing async generators
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21410">#21410</a></p>
</li>
<li>
<p>[sdk/python] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21315">#21315</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Optimize StackReference performance
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21446">#21446</a></p>
</li>
<li>
<p>[cli/display] Fix message renderer on windows
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21401">#21401</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix RangeError in defaultErrorMessage when error objects
are large
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21409">#21409</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/dotnet] Update dotnet to v3.97.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.216.0 (2026-01-16)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[build] Don't set PULUMI_ROOT with mise
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21457">#21457</a></p>
</li>
<li>
<p>[cli] Default to Pulumi Cloud when using an OIDC token for login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21322">#21322</a></p>
</li>
<li>
<p>[engine] Add CheckPulumiVersion RPC to the engine
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21429">#21429</a></p>
</li>
<li>
<p>[protobuf] Remove ProviderHandshakeResponse.pulumi_version_range
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21438">#21438</a></p>
</li>
<li>
<p>[sdk/nodejs] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21315">#21315</a></p>
</li>
<li>
<p>[sdk/nodejs] Add support for serializing async generators
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21410">#21410</a></p>
</li>
<li>
<p>[sdk/python] Allow dynamic providers to return inputs from read() for
accurate diffs after refresh
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21315">#21315</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Optimize StackReference performance
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21446">#21446</a></p>
</li>
<li>
<p>[cli/display] Fix message renderer on windows
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21401">#21401</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix RangeError in defaultErrorMessage when error objects
are large
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21409">#21409</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/dotnet] Update dotnet to v3.97.0</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1be7c7455f"><code>1be7c74</code></a>
Update dotnet to 3.97.0 (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21470">#21470</a>)</li>
<li><a
href="700157c958"><code>700157c</code></a>
Don't set PULUMI_ROOT with mise (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21457">#21457</a>)</li>
<li><a
href="bf997bae6e"><code>bf997ba</code></a>
feat: Allow dynamic providers to return inputs for richer preview (<a
href="https://redirect.github.com/pulumi/pulumi/issues/13839">#13839</a>)
(#...</li>
<li><a
href="e981f90509"><code>e981f90</code></a>
add failing test and exclusion for up snapshot integrity issue (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21427">#21427</a>)</li>
<li><a
href="9b9984615d"><code>9b99846</code></a>
Make sdk/python's <code>make build_plugin build_package</code> not phony
(<a
href="https://redirect.github.com/pulumi/pulumi/issues/21425">#21425</a>)</li>
<li><a
href="ed78dbefee"><code>ed78dbe</code></a>
Extend env util library (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21417">#21417</a>)</li>
<li><a
href="6f72af4039"><code>6f72af4</code></a>
Optimize StackReference performance (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21446">#21446</a>)</li>
<li><a
href="af783d3da8"><code>af783d3</code></a>
enable fuzzing for destroy in CI (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21439">#21439</a>)</li>
<li><a
href="b70d447d1b"><code>b70d447</code></a>
fuzzing: don't allow Delete and PendingReplacement to be set on the same
reso...</li>
<li><a
href="3a9e1b7fa6"><code>3a9e1b7</code></a>
fuzzing: enable destroyV2 in CI (<a
href="https://redirect.github.com/pulumi/pulumi/issues/21448">#21448</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.215.0...v3.216.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi/sdk/v3&package-manager=go_modules&previous-version=3.215.0&new-version=3.216.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-20 17:18:23 +02:00
dependabot[bot]
8fe8725235
 		build(deps): bump actions/checkout from 4 to 6 in the actions group (#892) 
Bumps the actions group with 1 update:
[actions/checkout](https://github.com/actions/checkout).

Updates `actions/checkout` from 4 to 6
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/checkout/releases">actions/checkout's
releases</a>.</em></p>
<blockquote>
<h2>v6.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update README to include Node.js 24 support details and requirements
by <a href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a>
in <a
href="https://redirect.github.com/actions/checkout/pull/2248">actions/checkout#2248</a></li>
<li>Persist creds to a separate file by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2286">actions/checkout#2286</a></li>
<li>v6-beta by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2298">actions/checkout#2298</a></li>
<li>update readme/changelog for v6 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2311">actions/checkout#2311</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5.0.0...v6.0.0">https://github.com/actions/checkout/compare/v5.0.0...v6.0.0</a></p>
<h2>v6-beta</h2>
<h2>What's Changed</h2>
<p>Updated persist-credentials to store the credentials under
<code>$RUNNER_TEMP</code> instead of directly in the local git
config.</p>
<p>This requires a minimum Actions Runner version of <a
href="https://github.com/actions/runner/releases/tag/v2.329.0">v2.329.0</a>
to access the persisted credentials for <a
href="https://docs.github.com/en/actions/tutorials/use-containerized-services/create-a-docker-container-action">Docker
container action</a> scenarios.</p>
<h2>v5.0.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v5 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2301">actions/checkout#2301</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v5...v5.0.1">https://github.com/actions/checkout/compare/v5...v5.0.1</a></p>
<h2>v5.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update actions checkout to use node 24 by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2226">actions/checkout#2226</a></li>
<li>Prepare v5.0.0 release by <a
href="https://github.com/salmanmkc"><code>@​salmanmkc</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2238">actions/checkout#2238</a></li>
</ul>
<h2>⚠️ Minimum Compatible Runner Version</h2>
<p><strong>v2.327.1</strong><br />
<a
href="https://github.com/actions/runner/releases/tag/v2.327.1">Release
Notes</a></p>
<p>Make sure your runner is updated to this version or newer to use this
release.</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v5.0.0">https://github.com/actions/checkout/compare/v4...v5.0.0</a></p>
<h2>v4.3.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Port v6 cleanup to v4 by <a
href="https://github.com/ericsciple"><code>@​ericsciple</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2305">actions/checkout#2305</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/checkout/compare/v4...v4.3.1">https://github.com/actions/checkout/compare/v4...v4.3.1</a></p>
<h2>v4.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>docs: update README.md by <a
href="https://github.com/motss"><code>@​motss</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1971">actions/checkout#1971</a></li>
<li>Add internal repos for checking out multiple repositories by <a
href="https://github.com/mouismail"><code>@​mouismail</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/1977">actions/checkout#1977</a></li>
<li>Documentation update - add recommended permissions to Readme by <a
href="https://github.com/benwells"><code>@​benwells</code></a> in <a
href="https://redirect.github.com/actions/checkout/pull/2043">actions/checkout#2043</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8e8c483db8"><code>8e8c483</code></a>
Clarify v6 README (<a
href="https://redirect.github.com/actions/checkout/issues/2328">#2328</a>)</li>
<li><a
href="033fa0dc0b"><code>033fa0d</code></a>
Add worktree support for persist-credentials includeIf (<a
href="https://redirect.github.com/actions/checkout/issues/2327">#2327</a>)</li>
<li><a
href="c2d88d3ecc"><code>c2d88d3</code></a>
Update all references from v5 and v4 to v6 (<a
href="https://redirect.github.com/actions/checkout/issues/2314">#2314</a>)</li>
<li><a
href="1af3b93b68"><code>1af3b93</code></a>
update readme/changelog for v6 (<a
href="https://redirect.github.com/actions/checkout/issues/2311">#2311</a>)</li>
<li><a
href="71cf2267d8"><code>71cf226</code></a>
v6-beta (<a
href="https://redirect.github.com/actions/checkout/issues/2298">#2298</a>)</li>
<li><a
href="069c695914"><code>069c695</code></a>
Persist creds to a separate file (<a
href="https://redirect.github.com/actions/checkout/issues/2286">#2286</a>)</li>
<li><a
href="ff7abcd0c3"><code>ff7abcd</code></a>
Update README to include Node.js 24 support details and requirements (<a
href="https://redirect.github.com/actions/checkout/issues/2248">#2248</a>)</li>
<li><a
href="08c6903cd8"><code>08c6903</code></a>
Prepare v5.0.0 release (<a
href="https://redirect.github.com/actions/checkout/issues/2238">#2238</a>)</li>
<li><a
href="9f265659d3"><code>9f26565</code></a>
Update actions checkout to use node 24 (<a
href="https://redirect.github.com/actions/checkout/issues/2226">#2226</a>)</li>
<li>See full diff in <a
href="https://github.com/actions/checkout/compare/v4...v6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/checkout&package-manager=github_actions&previous-version=4&new-version=6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-20 17:12:51 +02:00
dependabot[bot]
8ef8df8433
 		build(deps): bump cloud.google.com/go/kms from 1.23.2 to 1.24.0 (#891) 
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go)
from 1.23.2 to 1.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>maps 1.24.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/maps/v1.23.0...maps/v1.24.0">1.24.0</a>
(2025-10-10)</h2>
<h3>Features</h3>
<ul>
<li>Upgrade to Go 1.24 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12781">#12781</a>)
(<a
href="4f1129c">4f1129c</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>upgrade gRPC service registration func (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13014">#13014</a>)
(PiperOrigin-RevId: 813834114) (<a
href="b80fb13">b80fb13</a>)</li>
</ul>
<h2>cloudbuild 1.24.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/cloudbuild/v1.23.1...cloudbuild/v1.24.0">1.24.0</a>
(2025-12-04)</h2>
<h3>Features</h3>
<ul>
<li>Update GCB with latest proto changes (PiperOrigin-RevId: 837135318)
(<a
href="185951b3">185951b3</a>)</li>
</ul>
<h2>kms 1.24.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.2...kms/v1.24.0">1.24.0</a>
(2026-01-15)</h2>
<h3>Documentation</h3>
<ul>
<li>Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and
MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification
codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT
(PiperOrigin-RevId: 853754070) (<a
href="80379edb">80379edb</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.8...documentai/v1.24.0">1.24.0</a>
(2024-02-06)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Add model_type in v1beta3 processor
proto (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9355">#9355</a>)
(<a
href="05e9e1f53f">05e9e1f</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.7...documentai/v1.23.8">1.23.8</a>
(2024-01-30)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Enable universe domain resolution
options (<a
href="fd1d56930f">fd1d569</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.6...documentai/v1.23.7">1.23.7</a>
(2023-12-13)</h2>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Clarify Properties documentation (<a
href="757c1b0dcc">757c1b0</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.5...documentai/v1.23.6">1.23.6</a>
(2023-11-27)</h2>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Update comment for
ProcessOptions.page_range (<a
href="63ffff2a99">63ffff2</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.4...documentai/v1.23.5">1.23.5</a>
(2023-11-01)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Bump google.golang.org/api to v0.149.0
(<a
href="8d2ab9f320">8d2ab9f</a>)</li>
</ul>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Updated comments (<a
href="24e410efbb">24e410e</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.3...documentai/v1.23.4">1.23.4</a>
(2023-10-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Update grpc-go to v1.59.0 (<a
href="81a97b06cb">81a97b0</a>)</li>
</ul>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.2...documentai/v1.23.3">1.23.3</a>
(2023-10-17)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dfcb16fb60"><code>dfcb16f</code></a>
chore: release main (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12499">#12499</a>)</li>
<li><a
href="4939f28da3"><code>4939f28</code></a>
chore: redact bigquery/v2 from the common config/manifest (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12498">#12498</a>)</li>
<li><a
href="737615d285"><code>737615d</code></a>
chore(main): release vertexai 0.15.0 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12487">#12487</a>)</li>
<li><a
href="9cc6c0418b"><code>9cc6c04</code></a>
feat(vertexai): support ThinkingConfig (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12493">#12493</a>)</li>
<li><a
href="fe377af799"><code>fe377af</code></a>
chore(main): release 0.121.3 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12491">#12491</a>)</li>
<li><a
href="e655889e2f"><code>e655889</code></a>
feat(spanner): wrap proto mutation (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12497">#12497</a>)</li>
<li><a
href="2d66d4f5b2"><code>2d66d4f</code></a>
feat(retail): add a user_attributes field in SearchRequest that can be
used f...</li>
<li><a
href="b560234ed8"><code>b560234</code></a>
testing(bigquery/v2): add some basic smoketesting for bigquery/v2 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12480">#12480</a>)</li>
<li><a
href="a961cb5e85"><code>a961cb5</code></a>
fix(vertexai): fix flaky test (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12492">#12492</a>)</li>
<li><a
href="dd096ec819"><code>dd096ec</code></a>
docs(impersonate): Address TODO in impersonate/example_test.go (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12401">#12401</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.2...dlp/v1.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=cloud.google.com/go/kms&package-manager=go_modules&previous-version=1.23.2&new-version=1.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-20 17:12:32 +02:00
dependabot[bot]
e28c64dbe9
 		build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.24.1 to 4.25.0 in /deploy (#899) 
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes)
from 4.24.1 to 4.25.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.25.0</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f47bc2d6f1"><code>f47bc2d</code></a>
Upgrade runners and reduce parallelism for publish jobs (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4073">#4073</a>)</li>
<li><a
href="890c66d3d1"><code>890c66d</code></a>
Fix a race in condition.Deleted (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4079">#4079</a>)</li>
<li><a
href="a6affb2331"><code>a6affb2</code></a>
Re-generate workflows to use larger publish runner (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4069">#4069</a>)</li>
<li><a
href="7bd527abff"><code>7bd527a</code></a>
Update GitHub Actions workflows. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4071">#4071</a>)</li>
<li><a
href="3fb75f0a22"><code>3fb75f0</code></a>
Update module github.com/pulumi/pulumi/pkg/v3 to v3.215.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4064">#4064</a>)</li>
<li><a
href="7bb5e5ff7f"><code>7bb5e5f</code></a>
Update dependency <code>@​pulumi/pulumi</code> to v3.215.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4062">#4062</a>)</li>
<li><a
href="04466f6b72"><code>04466f6</code></a>
Update dependency <code>@​pulumi/gcp</code> to v9.9.0 (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4061">#4061</a>)</li>
<li><a
href="d512bb3ba3"><code>d512bb3</code></a>
Update first-party Pulumi dependencies (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4058">#4058</a>)</li>
<li><a
href="bc12e8ace3"><code>bc12e8a</code></a>
Allow for yaml render mode to not need a working cluster (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4053">#4053</a>)</li>
<li><a
href="fd2b31702d"><code>fd2b317</code></a>
Update first-party Pulumi dependencies (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4027">#4027</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.24.1...v4.25.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/pulumi/pulumi-kubernetes/sdk/v4&package-manager=go_modules&previous-version=4.24.1&new-version=4.25.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-20 17:11:26 +02:00
dependabot[bot]
0af9ee03b9
 		build(deps): bump github.com/danielgtaylor/huma/v2 from 2.34.1 to 2.35.0 (#905) 
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma)
from 2.34.1 to 2.35.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.35.0</h2>
<h2>Overview</h2>
<p><em>Moved this release as it was incorrectly tagged as
v2.34.3.</em></p>
<h3>Improved Error Messaging for Form Pointers</h3>
<p>Pointer panic messages now explicitly include “Form” where
applicable, making debugging clearer and resolving <a
href="https://redirect.github.com/danielgtaylor/huma/issues/892">#892</a>.</p>
<h3>Expanded String Format Support</h3>
<p>Added support for <code>duration</code> and <code>idn-hostname</code>
string formats, improving schema expressiveness and validation
coverage.</p>
<h3>Header Parsing Fix</h3>
<p>Fixed several subtle issues in header detection that occurred when
output fields were slices, arrays, or maps, which could cause headers
(notably []*http.Cookie) to be incorrectly applied or documented. The
parsing logic now correctly inspects the root type of collection fields
and adds support for hidden headers, allowing them to be excluded from
generated OpenAPI documentation. These changes resolve multiple
long-standing documentation and serialization bugs without introducing
new behavior.</p>
<h2>What's Changed</h2>
<ul>
<li>fix: include “Form” in pointer panic message (fixes <a
href="https://redirect.github.com/danielgtaylor/huma/issues/892">#892</a>)
by <a href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/938">danielgtaylor/huma#938</a></li>
<li>feat: support duration and IDN-hostname string formats by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/939">danielgtaylor/huma#939</a></li>
<li>docs: add simple HTML docs by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/941">danielgtaylor/huma#941</a></li>
<li>fix: header parsing by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/944">danielgtaylor/huma#944</a></li>
<li>perf(schema): optimize convertType with fast paths for compatible
types by <a href="https://github.com/baagod"><code>@​baagod</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/931">danielgtaylor/huma#931</a></li>
<li>Added exhaustive error code wrappers by <a
href="https://github.com/rhodeon"><code>@​rhodeon</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/876">danielgtaylor/huma#876</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/baagod"><code>@​baagod</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/931">danielgtaylor/huma#931</a></li>
<li><a href="https://github.com/rhodeon"><code>@​rhodeon</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/876">danielgtaylor/huma#876</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.34.2...v2.35.0">https://github.com/danielgtaylor/huma/compare/v2.34.2...v2.34.3</a></p>
<h2>v2.34.2</h2>
<h2>Overview</h2>
<h3>TLS-Aware URL Scheme Detection</h3>
<p>Huma now correctly uses the <code>https</code> URL scheme when TLS is
configured, and <code>http</code> when it is not. Previously, the scheme
detection could be incorrect in certain scenarios.</p>
<h3>Time Wrapper Parsing Fix</h3>
<p>Fixed an issue where time wrapper types failed to parse correctly,
resolving <a
href="https://redirect.github.com/danielgtaylor/huma/issues/844">#844</a>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix: correct example format for tags in Pet struct by <a
href="https://github.com/vikyw89"><code>@​vikyw89</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/858">danielgtaylor/huma#858</a></li>
<li>docs: add links to hire me by <a
href="https://github.com/danielgtaylor"><code>@​danielgtaylor</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/869">danielgtaylor/huma#869</a></li>
<li>Revert &quot;docs: add links to hire me&quot; by <a
href="https://github.com/danielgtaylor"><code>@​danielgtaylor</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/890">danielgtaylor/huma#890</a></li>
<li>chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.7 to 2.52.9
by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/882">danielgtaylor/huma#882</a></li>
<li>Fix code samples in the response output documentation by <a
href="https://github.com/prnvbn"><code>@​prnvbn</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/927">danielgtaylor/huma#927</a></li>
<li>fix: use &quot;http&quot; URL scheme only if no TLS is used by <a
href="https://github.com/leonklingele"><code>@​leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/905">danielgtaylor/huma#905</a></li>
<li>fix: failed to parse time wrapper, close <a
href="https://redirect.github.com/danielgtaylor/huma/issues/844">#844</a>
by <a href="https://github.com/zhenzou"><code>@​zhenzou</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/924">danielgtaylor/huma#924</a></li>
<li>Minor linting/formatting by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/936">danielgtaylor/huma#936</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/vikyw89"><code>@​vikyw89</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/858">danielgtaylor/huma#858</a></li>
<li><a href="https://github.com/prnvbn"><code>@​prnvbn</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/927">danielgtaylor/huma#927</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c24cd0713d"><code>c24cd07</code></a>
Added wrappers for the remaining error codes defined in the standard
library....</li>
<li><a
href="b4a4ec85ca"><code>b4a4ec8</code></a>
perf(schema): optimize convertType with fast paths for compatible types
(<a
href="https://redirect.github.com/danielgtaylor/huma/issues/931">#931</a>)</li>
<li><a
href="88c6cda0a4"><code>88c6cda</code></a>
Fix Header Parsing (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/944">#944</a>)</li>
<li><a
href="0814e6f650"><code>0814e6f</code></a>
Simple HTML docs (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/941">#941</a>)</li>
<li><a
href="1cd5c26aec"><code>1cd5c26</code></a>
Support Duration and IDN-Hostname String Formats (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/939">#939</a>)</li>
<li><a
href="e78584eeb0"><code>e78584e</code></a>
Include form in pointer panic message (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/938">#938</a>)</li>
<li><a
href="027984237b"><code>0279842</code></a>
Minor linting/formatting (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/936">#936</a>)</li>
<li><a
href="f30901ce06"><code>f30901c</code></a>
fix: failed to parse time wrapper, close <a
href="https://redirect.github.com/danielgtaylor/huma/issues/844">#844</a>
(<a
href="https://redirect.github.com/danielgtaylor/huma/issues/924">#924</a>)</li>
<li><a
href="57b362553d"><code>57b3625</code></a>
fix: use &quot;http&quot; URL scheme only if no TLS is used (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/905">#905</a>)</li>
<li><a
href="1f43b55a21"><code>1f43b55</code></a>
Merge pull request <a
href="https://redirect.github.com/danielgtaylor/huma/issues/927">#927</a>
from prnvbn/patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/danielgtaylor/huma/compare/v2.34.1...v2.35.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/danielgtaylor/huma/v2&package-manager=go_modules&previous-version=2.34.1&new-version=2.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
 2026-01-20 17:05:15 +02:00
Bob Dickinson
fc88cf0870
 		Enhanced server.json validation (phase 1) (#636) 
Added schema validation and support for exhaustive and more detailed
validation to existing validators. Added new `mcp-publisher validate`
command. No change to any existing tests or behavior other than the new
command.

## Motivation and Context

Many currently published servers fail schema validation. Of those that
pass, many have semantic/logical errors or other errors that make them
impossible to configure, or their configuration when applied doesn't
generate correct MCP server configuration (per their own documentation).

To address this, we need better tooling to validate servers and to
inform server publishers of errors, issues, and best practices in a way
that is clear and actionable, both during server development and at time
of publishing.

I have started a discussion about the broader topic:
https://github.com/modelcontextprotocol/registry/discussions/635

There is also a fairly detailed document describing the design,
architecture, implementation, future plans, etc. See [Enhanced
Validation Design](docs/explanations/proposed-enhanced-validation.md)

This PR is the first step in the process of improving validation. It
adds schema validation and updates all existing validators to use a new
model that allows them to track context and return rich and exhaustive
results. This has been done in a way that is backward compatible
(ValidateServerJSON is unchanged as are all existing validation unit
tests).

There is a new `mcp-publisher` command called `validate` that is
currenty the only place that schema validation and enhanced
(exhaustive/rich) validation results are exposed.

### Changes

Internal Validation improvements
- Schema validation has been implemented and is available as an option
in validation methods (defaults to off)
- Existing validators track the JSON path (context) of the attribute
they're evaluating, passing it to any child validators
- Existing validators are exhaustive (return all issues, not failing
fast on the first error)
- Existing validators return rich validation results, including:
  - type (schema, semantic, linter)
  - severity (error, warn, info)
  - path (JSON path to server.json element)
  - reference (to the schema element or rule that triggered the result)
  - message (currently the same as previous error message)

A new `validate` command has been added to `mcp-publisher` so publishers
can evaluate their server.json before publishing
- Includes new schema validation and previous semantic validation
- Shows full details of all issues encountered during validation

### Usage

Given a server.json that looks like this:

```json
{
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-09-29/server.schema.json",
  "name": "io.github.BobDickinson/registry",
  "description": "An MCP server that provides [describe what your server does]",
  "repository": {
    "url": "",
    "source": ""
  },
  "version": "=1.0.0",
  "packages": [
    {
      "registryType": "oci",
      "registryBaseUrl": "https://docker.io",
      "identifier": "registry",
      "version": "1.0.0",
      "transport": {
        "type": "sse"
      },
      "packageArguments": [
        {
          "type": "named",
          "name": "--mode",
          "description": "Operation mode",
          "format": "foo"
        }
      ],
      "environmentVariables": [
        {
          "description": "Your API key for the service",
          "isRequired": true,
          "format": "string",
          "isSecret": true,
          "name": "YOUR_API_KEY"
        }
      ]
    }
  ]
}
```

Run the command: 

`mcp-publisher validate server.json`

Which will produce the output:

```bash
❌ Validation failed with 5 issue(s):

1. [error] packages.0.packageArguments.0.format (schema)
   value must be one of "string", "number", "boolean", "filepath"
   Reference: #/definitions/Input/properties/format/enum from: [#/definitions/ServerDetail]/properties/packages/items/[#/definitions/Package]/properties/packageArguments/items/[#/definitions/Argument]/else/[#/definitions/NamedArgument]/allOf/0/[#/definitions/InputWithVariables]/allOf/0/[#/definitions/Input]/properties/format/enum

2. [error] packages.0.transport (schema)
   missing required fields: 'url'
   Reference: #/definitions/SseTransport/required from: [#/definitions/ServerDetail]/properties/packages/items/[#/definitions/Package]/properties/transport/else/else/[#/definitions/SseTransport]/required

3. [error] repository.url (schema)
   '' has invalid format 'uri'
   Reference: #/definitions/Repository/properties/url/format from: [#/definitions/ServerDetail]/properties/repository/[#/definitions/Repository]/properties/url/format

4. [error] version (semantic)
   version must be a specific version, not a range: "=1.0.0"
   Reference: version-looks-like-range

5. [error] packages[0].transport.url (semantic)
   url is required for sse transport type
   Reference: streamable-transport-url-required

Error: validation failed
```

Note in the results above:
- All errors contain the JSON path of the triggering element from
server.json.
- The first three errors are schema errors detected during schema
validation. The `Reference` provided contains an absolute path to the
schema rule that was violated, followed by the full schema path that
enforced that rule (with $ref redirect values substited and enclosed in
square brackets).
- The error messages provided by the existing semantic validators are
exactly the same as the previous error messages those validators
produced.

In the final solution we would remove semantic validators that are
redundant to schema validation (as in number 5 above). We have the
option to use the structured data produced by schema validation to
replace the generic schema validation message with a more descriptive
message if that is an issue (in particular, if the only argument for an
ad-hoc validator is that is produces a better/cleaner message, we would
just move that message creation code to the schema error result
formatter and special case it as opposed to having a redundant
validator).

### What's Next

If this general direction is supported and this PR is accepted, a fast
follow would include:

- Add new validators (infliuenced by observed issues) for both semantic
errors and best practices
- Require passing schema validation (in addition to improved semantic
validation) in order to publish
- Remove existing validation code that is redundant to schema validation
(ensuring error messages remain intelligible)
- Update validation client code and tests to handle the new rich return
types natively

### Issues

Schema validation requires embedding the `server.schema.json` file into
the validators package via `go:embed`, which is restricted from
embedding files outside of the package. For this reason we copy the
schema file into a schema subdir (via a prep target in the makefile) and
we .gitignore it. I tried cleaning up the copy in the make clean target,
but then the linter would complain about the embed target being missing
if it wasn't there during development. I also considered just checking
in the schema file and assuming a separate workflow for updating the
embedded schema file, but it's not clear what that workflow would be or
how it would be maintained. I'm open to a different approach, but the
schema file does need to be embedded somehow for schema validation to
work.

## How Has This Been Tested?
All existing validation tests pass, new tests implemented and all pass.

## Breaking Changes
No breaking changes, no behavior change except new `validate` command

## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [X] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update

## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [X] I have read the [MCP
Documentation](https://modelcontextprotocol.io)
- [X] My code follows the repository's style guidelines
- [X] New and existing tests pass locally
- [X] I have added appropriate error handling
- [X] I have added or updated documentation as needed

---------

Co-authored-by: GitHub Action <action@github.com>
 2026-01-16 00:49:39 +02:00