dependabot[bot]
bc8ff18495
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.37.2 to 2.37.3 ( #1098 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.37.2 to 2.37.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.3</h2>
<h2>Overview</h2>
<p>This bugfix release fixes a few minor bugs and typos from previous
releases.</p>
<p>This also adjusts the HTTP status code returned by Huma if marshaling
a response fails, from 200 to 500.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix: add allow-popups to CSP sandbox for OAuth popups by <a
href="https://github.com/Micaso "><code>@Micaso</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li>Fix: use epsilon tolerance in multipleOf float validation by <a
href="https://github.com/smazurov "><code>@smazurov</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li>Fix typo in groups.md documentation by <a
href="https://github.com/Its-Haze "><code>@Its-Haze</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li>Fix relative schema urls by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/990 ">danielgtaylor/huma#990</a></li>
<li>Return HTTP 500 if marshaling fails by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/997 ">danielgtaylor/huma#997</a></li>
<li>Handle contentEncoding and contentMediaType keys by <a
href="https://github.com/NPellet "><code>@NPellet</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
<li>Chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.11 to
2.52.12 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/984 ">danielgtaylor/huma#984</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Micaso "><code>@Micaso</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li><a href="https://github.com/smazurov "><code>@smazurov</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li><a href="https://github.com/Its-Haze "><code>@Its-Haze</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li><a href="https://github.com/NPellet "><code>@NPellet</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a38b53666dhttps://redirect.github.com/danielgtaylor/huma/issues/984 ">#984</a>)</li>
<li><a
href="f4c53634a2https://redirect.github.com/danielgtaylor/huma/issues/919 ">#919</a>)</li>
<li><a
href="1678a04e88https://redirect.github.com/danielgtaylor/huma/issues/997 ">#997</a>)</li>
<li><a
href="1d5dddfc50https://redirect.github.com/danielgtaylor/huma/issues/990 ">#990</a>)</li>
<li><a
href="1b8766d7c3https://redirect.github.com/danielgtaylor/huma/issues/995 ">#995</a>)</li>
<li><a
href="99e60fdd0bhttps://redirect.github.com/danielgtaylor/huma/issues/989 ">#989</a>)</li>
<li><a
href="c6694fa179https://redirect.github.com/danielgtaylor/huma/issues/987 ">#987</a>)</li>
<li>See full diff in <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:28 -04:00
dependabot[bot]
f30e540117
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.226.0 to 3.228.0 in /deploy ( #1094 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.226.0 to 3.228.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.228.0</h2>
<h2>3.228.0 (2026-03-25)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Don't apply the secrets filter to <code>true</code> and
<code>false</code> (case-insensitive)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22269 ">#22269</a></p>
</li>
<li>
<p>[cli] Add grpcs:// support and header authentication to OTLP exporter
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22320 ">#22320</a></p>
</li>
<li>
<p>[cli] Read OTEL_RESOURCE_ATTRIBUTES
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22329 ">#22329</a></p>
</li>
<li>
<p>[auto/nodejs] Add low-level "cancel" command to the
auto-generated interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22156 ">#22156</a></p>
</li>
<li>
<p>[cli/state] Allow <code>pulumi state delete</code> to accept multiple
resource URNs and delete them in a dependency-safe order</p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow relative file paths for --otel-traces
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22300 ">#22300</a></p>
</li>
<li>
<p>[cli] Bridge opentracing spans from providers into OTel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22313 ">#22313</a></p>
</li>
<li>
<p>[cli] Correctly end spans for GRPC streams
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22304 ">#22304</a></p>
</li>
<li>
<p>[cli/about] Do not include the access token in plain text
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22347 ">#22347</a></p>
</li>
<li>
<p>[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22317 ">#22317</a></p>
</li>
<li>
<p>[cli/import] Fix import codegen when generating references to
non-standard names
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22319 ">#22319</a></p>
</li>
<li>
<p>[engine] Update golang version
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22277 ">#22277</a></p>
</li>
<li>
<p>[pcl] Typecheck component inputs in PCL programs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22292 ">#22292</a></p>
</li>
<li>
<p>[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22306 ">#22306</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.228.0 (2026-03-25)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Don't apply the secrets filter to <code>true</code> and
<code>false</code> (case-insensitive)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22269 ">#22269</a></p>
</li>
<li>
<p>[cli] Add grpcs:// support and header authentication to OTLP exporter
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22320 ">#22320</a></p>
</li>
<li>
<p>[cli] Read OTEL_RESOURCE_ATTRIBUTES
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22329 ">#22329</a></p>
</li>
<li>
<p>[auto/nodejs] Add low-level "cancel" command to the
auto-generated interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22156 ">#22156</a></p>
</li>
<li>
<p>[cli/state] Allow <code>pulumi state delete</code> to accept multiple
resource URNs and delete them in a dependency-safe order</p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow relative file paths for --otel-traces
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22300 ">#22300</a></p>
</li>
<li>
<p>[cli] Bridge opentracing spans from providers into OTel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22313 ">#22313</a></p>
</li>
<li>
<p>[cli] Correctly end spans for GRPC streams
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22304 ">#22304</a></p>
</li>
<li>
<p>[cli/about] Do not include the access token in plain text
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22347 ">#22347</a></p>
</li>
<li>
<p>[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22317 ">#22317</a></p>
</li>
<li>
<p>[cli/import] Fix import codegen when generating references to
non-standard names
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22319 ">#22319</a></p>
</li>
<li>
<p>[engine] Update golang version
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22277 ">#22277</a></p>
</li>
<li>
<p>[pcl] Typecheck component inputs in PCL programs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22292 ">#22292</a></p>
</li>
<li>
<p>[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22306 ">#22306</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7551b7f72e6a1c2d2d64https://redirect.github.com/pulumi/pulumi/issues/22347 ">#22347</a>)</li>
<li><a
href="9630cec028https://redirect.github.com/pulumi/pulumi/issues/19625 ">#19625</a>)</li>
<li><a
href="3171ca6903https://redirect.github.com/pulumi/pulumi/issues/22339 ">#22339</a>)</li>
<li><a
href="d5bf67ee45https://redirect.github.com/pulumi/pulumi/issues/22319 ">#22319</a>)</li>
<li><a
href="6589fd4215https://redirect.github.com/pulumi/pulumi/issues/22330 ">#22330</a>)</li>
<li><a
href="fba98e9c64https://redirect.github.com/pulumi/pulumi/issues/22337 ">#22337</a>)</li>
<li><a
href="469eb8384dhttps://redirect.github.com/pulumi/pulumi/issues/2 ">#2</a>...</li>
<li><a
href="fe4a6355b1https://redirect.github.com/pulumi/pulumi/issues/22277 ">#22277</a>)</li>
<li><a
href="cfb587b741https://redirect.github.com/pulumi/pulumi/issues/22 ">#22</a>...</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.226.0...v3.228.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:02 -04:00
dependabot[bot]
c5c4b9e889
build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 in the actions group ( #1085 )
2026-03-22 18:53:07 +02:00
Radoslav Dimitrov
ddb93bd3a8
Add contributing guidelines to prevent seed.json PRs ( #1079 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
We've been receiving numerous PRs from authors attempting to publish
their MCP server by adding entries to `data/seed.json`. This is not the
correct approach as servers should be published using the
`mcp-publisher` CLI tool.
Many of these PRs appear to be AI-generated so the existing docs aren't
being surfaced effectively. This PR adds explicit guidance in the files
that AI coding assistants actually read:
- `CONTRIBUTING.md` - shown by GitHub when opening new PRs; widely
ingested by AI tools
- `.github/copilot-instructions.md` - read by GitHub Copilot
- `CLAUDE.md` - read by Claude Code and Claude on github.com
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-22 07:42:18 -07:00
dependabot[bot]
9c180f4d33
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 ( #1076 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from
1.78.0 to 1.79.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.79.3</h2>
<h1>Security</h1>
<ul>
<li>server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted
"deny" rules in interceptors like <code>grpc/authz</code>. Any
request with a non-canonical path is now immediately rejected with an
<code>Unimplemented</code> error. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
</ul>
<h2>Release 1.79.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
(<a
href="https://redirect.github.com/grpc/grpc-go/pull/8874 ">grpc/grpc-go#8874</a>)</li>
</ul>
<h2>Release 1.79.1</h2>
<h1>Bug Fixes</h1>
<ul>
<li>grpc: Remove the <code>-dev</code> suffix from the User-Agent
header. (<a
href="https://redirect.github.com/grpc/grpc-go/pull/8902 ">grpc/grpc-go#8902</a>)</li>
</ul>
<h2>Release 1.79.0</h2>
<h1>API Changes</h1>
<ul>
<li>mem: Add experimental API <code>SetDefaultBufferPool</code> to
change the default buffer pool. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8806 ">#8806</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/vanja-p "><code>@vanja-p</code></a></li>
</ul>
</li>
<li>experimental/stats: Update <code>MetricsRecorder</code> to require
embedding the new <code>UnimplementedMetricsRecorder</code> (a no-op
struct) in all implementations for forward compatibility. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
</ul>
<h1>Behavior Changes</h1>
<ul>
<li>balancer/weightedtarget: Remove handling of <code>Addresses</code>
and only handle <code>Endpoints</code> in resolver updates. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8841 ">#8841</a>)</li>
</ul>
<h1>New Features</h1>
<ul>
<li>experimental/stats: Add support for asynchronous gauge metrics
through the new <code>AsyncMetricReporter</code> and
<code>RegisterAsyncReporter</code> APIs. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
<li>pickfirst: Add support for weighted random shuffling of endpoints,
as described in <a
href="https://redirect.github.com/grpc/proposal/pull/535 ">gRFC A113</a>.
<ul>
<li>This is enabled by default, and can be turned off using the
environment variable
<code>GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a>)</li>
</ul>
</li>
<li>xds: Implement <code>:authority</code> rewriting, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md ">gRFC
A81</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8779 ">#8779</a>)</li>
<li>balancer/randomsubsetting: Implement the
<code>random_subsetting</code> LB policy, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md ">gRFC
A68</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8650 ">#8650</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/marek-szews "><code>@marek-szews</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>credentials/tls: Fix a bug where the port was not stripped from the
authority override before validation. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8726 ">#8726</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/Atul1710 "><code>@Atul1710</code></a></li>
</ul>
</li>
<li>xds/priority: Fix a bug causing delayed failover to lower-priority
clusters when a higher-priority cluster is stuck in
<code>CONNECTING</code> state. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8813 ">#8813</a>)</li>
<li>health: Fix a bug where health checks failed for clients using
legacy compression options (<code>WithDecompressor</code> or
<code>RPCDecompressor</code>). (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8765 ">#8765</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/sanki92 "><code>@sanki92</code></a></li>
</ul>
</li>
<li>transport: Fix an issue where the HTTP/2 server could skip header
size checks when terminating a stream early. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8769 ">#8769</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
<li>server: Propagate status detail headers, if available, when
terminating a stream during request header processing. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8754 ">#8754</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>credentials/alts: Optimize read buffer alignment to reduce copies.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8791 ">#8791</a>)</li>
<li>mem: Optimize pooling and creation of <code>buffer</code> objects.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8784 ">#8784</a>)</li>
<li>transport: Reduce slice re-allocations by reserving slice capacity.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8797 ">#8797</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dda86dbd9chttps://redirect.github.com/grpc/grpc-go/issues/8983 ">#8983</a>)</li>
<li><a
href="72186f163ehttps://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
<li><a
href="97ca3522b2https://redirect.github.com/grpc/grpc-go/issues/8954 ">#8954</a>)</li>
<li><a
href="8902ab6efehttps://redirect.github.com/grpc/grpc-go/issues/8947 ">#8947</a>)</li>
<li><a
href="a9286705aahttps://redirect.github.com/grpc/grpc-go/issues/8874 ">#8874</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8904 ">#8904</a>)</li>
<li><a
href="06df3638c0https://redirect.github.com/grpc/grpc-go/issues/8903 ">#8903</a>)</li>
<li><a
href="782f2de44fhttps://redirect.github.com/grpc/grpc-go/issues/8902 ">#8902</a>)</li>
<li><a
href="850eccbb22https://redirect.github.com/grpc/grpc-go/issues/8851 ">#8851</a>)</li>
<li><a
href="765ff056b6https://redirect.github.com/grpc/grpc-go/issues/8850 ">#8850</a>)</li>
<li><a
href="68804be0e7https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8896 ">#8896</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:56:53 +02:00
dependabot[bot]
29ed71a8b8
build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /deploy ( #1077 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from
1.79.1 to 1.79.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.79.3</h2>
<h1>Security</h1>
<ul>
<li>server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted
"deny" rules in interceptors like <code>grpc/authz</code>. Any
request with a non-canonical path is now immediately rejected with an
<code>Unimplemented</code> error. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
</ul>
<h2>Release 1.79.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
(<a
href="https://redirect.github.com/grpc/grpc-go/pull/8874 ">grpc/grpc-go#8874</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dda86dbd9chttps://redirect.github.com/grpc/grpc-go/issues/8983 ">#8983</a>)</li>
<li><a
href="72186f163ehttps://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
<li><a
href="97ca3522b2https://redirect.github.com/grpc/grpc-go/issues/8954 ">#8954</a>)</li>
<li><a
href="8902ab6efehttps://redirect.github.com/grpc/grpc-go/issues/8947 ">#8947</a>)</li>
<li><a
href="a9286705aahttps://redirect.github.com/grpc/grpc-go/issues/8874 ">#8874</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8904 ">#8904</a>)</li>
<li><a
href="06df3638c0https://redirect.github.com/grpc/grpc-go/issues/8903 ">#8903</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:52:06 +02:00
dependabot[bot]
9c7c8805cc
build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3 ( #1073 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.21.2 to 0.21.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds local file support to the <code>crane index</code> subcommand
by <a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li>migrate to github.com/moby/moby modules by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li>Bump the go-deps group across 4 directories with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2233 ">google/go-containerregistry#2233</a></li>
<li>Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions
group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2220 ">google/go-containerregistry#2220</a></li>
<li>mutate: reject path traversal and symlink escape in Extract by <a
href="https://github.com/KevinZhao "><code>@KevinZhao</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li>tarball: detect symlink cycles in extractFileFromTar by <a
href="https://github.com/vnykmshr "><code>@vnykmshr</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
<li>bump golang to 1.25.7 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2236 ">google/go-containerregistry#2236</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li><a href="https://github.com/thaJeztah "><code>@thaJeztah</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li><a href="https://github.com/KevinZhao "><code>@KevinZhao</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li><a href="https://github.com/vnykmshr "><code>@vnykmshr</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3888fb8f87https://redirect.github.com/google/go-containerregistry/issues/2236 ">#2236</a>)</li>
<li><a
href="f4396242bdhttps://redirect.github.com/google/go-containerregistry/issues/2232 ">#2232</a>)</li>
<li><a
href="400c263d8ehttps://redirect.github.com/google/go-containerregistry/issues/2227 ">#2227</a>)</li>
<li><a
href="47eedc9de4https://redirect.github.com/google/go-containerregistry/issues/2220 ">#2220</a>)</li>
<li><a
href="be0a845999https://redirect.github.com/google/go-containerregistry/issues/2233 ">#2233</a>)</li>
<li><a
href="e916301498https://redirect.github.com/google/go-containerregistry/issues/2228 ">#2228</a>)</li>
<li><a
href="8b2478e69fhttps://redirect.github.com/google/go-containerregistry/issues/2223 ">#2223</a>)</li>
<li>See full diff in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:51:32 +02:00
dependabot[bot]
52178183f3
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.35.0 to 2.37.2 ( #989 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.35.0 to 2.37.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.2</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue with how form data was being
documented in OpenAPI.</p>
<p>This also fixes embedded objects with valid JSON tags being
incorrectly embedded in the OpenAPI docs.</p>
<h2>What's Changed</h2>
<ul>
<li>Don't embed embedded objects with valid JSON tags by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/978 ">danielgtaylor/huma#978</a></li>
<li>Fix OpenAPI path prefix regression from $schema fix PR by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/979 ">danielgtaylor/huma#979</a></li>
<li>Fix form param doc regression by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/981 ">danielgtaylor/huma#981</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 ">https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 </a></p>
<h2>v2.37.1</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue regarding the Swagger UI docs
renderer, as well as fixes an issue preventing Groups from using the
configurable options released in v2.37.1.</p>
<p>This also brings interface constructors to <code>humamux</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Export Gorilla Mux interface constructors by <a
href="https://github.com/RangelReale "><code>@RangelReale</code></a> in
<a
href="https://redirect.github.com/danielgtaylor/huma/pull/965 ">danielgtaylor/huma#965</a></li>
<li>fix(api): use proper CSP hash for inline script in Swagger doc
renderer by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/977 ">danielgtaylor/huma#977</a></li>
<li>fix(group): ensure "Group" satisfies the configProvider
interface by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/976 ">danielgtaylor/huma#976</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 ">https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 </a></p>
<h2>v2.37.0</h2>
<h2>Overview</h2>
<h3>Dropped Explicit IDN-Hostname Validation</h3>
<p>This validation unintentionally imported an external library to the
base Huma library. Since this was not a requested feature, it has been
removed for now. The <code>idn-hostname</code> format value has become
an alias for <code>hostname</code> in the meantime.</p>
<h3>Operation ID Normalization</h3>
<p>Spaces in operation IDs get automatically converted to hyphens
now.</p>
<h3>Optimizations & Fixed Memory Leak</h3>
<p>Various internal operations have been optimized (~7% overall
improvement): <a
href="https://redirect.github.com/danielgtaylor/huma/pull/973#issue-3960297052 ">danielgtaylor/huma#973</a></p>
<p>A memory leak when using <code>MultipartFormFiles</code> has been
resolved.</p>
<h3>New Configurable Options</h3>
<h4>Allow Additional Properties By Default</h4>
<p>A new config option has been added to allow additional properties by
default. This can be set in the API config.</p>
<pre lang="go"><code>config.AllowAdditionalPropertiesByDefault = true
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="887f7d4322https://redirect.github.com/danielgtaylor/huma/issues/981 ">#981</a>)</li>
<li><a
href="f02efeb11dhttps://redirect.github.com/danielgtaylor/huma/issues/979 ">#979</a>)</li>
<li><a
href="cbf60b60afhttps://redirect.github.com/danielgtaylor/huma/issues/978 ">#978</a>)</li>
<li><a
href="6d0295c4e1https://redirect.github.com/danielgtaylor/huma/issues/976 ">#976</a>)</li>
<li><a
href="07ca6c5d17https://redirect.github.com/danielgtaylor/huma/issues/977 ">#977</a>)</li>
<li><a
href="58edcf2bf5https://redirect.github.com/danielgtaylor/huma/issues/965 ">#965</a>)</li>
<li><a
href="6c29f67c9dhttps://redirect.github.com/danielgtaylor/huma/issues/916 ">#916</a>)</li>
<li><a
href="3aee9bd172https://redirect.github.com/danielgtaylor/huma/issues/974 ">#974</a>)</li>
<li><a
href="e31a8198adhttps://redirect.github.com/danielgtaylor/huma/issues/973 ">#973</a>)</li>
<li><a
href="ddbb810fd5https://redirect.github.com/danielgtaylor/huma/issues/925 ">#925</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/danielgtaylor/huma/compare/v2.35.0...v2.37.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-16 17:06:31 +02:00
dependabot[bot]
a94c56a78f
build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.27.0 to 4.28.0 in /deploy ( #1056 )
...
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes )
from 4.27.0 to 4.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.28.0</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
changelog</a>.</em></p>
<blockquote>
<h2>4.28.0 (March 12, 2026)</h2>
<h3>Changed</h3>
<ul>
<li>Upgrade Kubernetes schema and libraries to v1.35.2.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1655f4c793https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4230 ">#4230</a>)</li>
<li><a
href="dbeeb56978c6b1c916a3https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4223 ">#4223</a>)</li>
<li><a
href="fedb665c4fhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4221 ">#4221</a>)</li>
<li><a
href="4b3e1f493chttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4218 ">#4218</a>)</li>
<li><a
href="1737d00694https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4209 ">#4209</a>)</li>
<li><a
href="be0dfed214https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4217 ">#4217</a>)</li>
<li><a
href="4ecded1435https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4213 ">#4213</a>)</li>
<li><a
href="af862bb849https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4196 ">#4196</a>)</li>
<li><a
href="ecf6701c9ehttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4208 ">#4208</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.27.0...v4.28.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 11:53:31 +01:00
dependabot[bot]
01b1ae2555
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.225.1 to 3.226.0 in /deploy ( #1057 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.225.1 to 3.226.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.226.0</h2>
<h2>3.226.0 (2026-03-11)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22179 ">#22179</a></p>
</li>
<li>
<p>[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22129 ">#22129</a></p>
</li>
<li>
<p>[engine] Engine will use provider references from
<code>__self__</code> arguments to calls
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22114 ">#22114</a></p>
</li>
<li>
<p>[sdk/bun] Support bun as a runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22177 ">#22177</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22049 ">#22049</a></p>
</li>
<li>
<p>[sdk/bun] Add debugger support for the bun runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22177 ">#22177</a></p>
</li>
<li>
<p>[sdk/bun] Add support for Bun as a plugin runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22189 ">#22189</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Fix ReplacementTrigger firing due to dependency changes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22119 ">#22119</a></p>
</li>
<li>
<p>[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22120 ">#22120</a></p>
</li>
<li>
<p>[pcl] Support resource ranges in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22144 ">#22144</a></p>
</li>
<li>
<p>[cli/config] Include environments used when refreshing a stack's
config
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22103 ">#22103</a></p>
</li>
<li>
<p>[cli/display] Fix <code>pulumi destroy</code> not showing parent
resource hierarchy
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22148 ">#22148</a></p>
</li>
<li>
<p>[cli/package] Correctly parse package URLs with .git in them
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22174 ">#22174</a></p>
</li>
<li>
<p>[cli/plugin] Fix package get-schema for binary providers at relative
paths
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22107 ">#22107</a></p>
</li>
<li>
<p>[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="94ee966f0fhttps://redirect.github.com/pulumi/pulumi/issues/22195 ">#22195</a>)</li>
<li><a
href="4f16f96499https://redirect.github.com/pulumi/pulumi/issues/22186 ">#22186</a>)</li>
<li><a
href="b0a5846488https://redirect.github.com/pulumi/pulumi/issues/22176 ">#22176</a>)</li>
<li><a
href="6ebc01e665https://redirect.github.com/pulumi/pulumi/issues/22189 ">#22189</a>)</li>
<li><a
href="a42977b776https://redirect.github.com/pulumi/pulumi/issues/22188 ">#22188</a>)</li>
<li><a
href="c1dabceab2https://redirect.github.com/pulumi/pulumi/issues/22187 ">#22187</a>)</li>
<li><a
href="646a020a63https://redirect.github.com/pulumi/pulumi/issues/22072 ">#22072</a>)</li>
<li><a
href="32871e07a4https://redirect.github.com/pulumi/pulumi/issues/22180 ">#22180</a>)</li>
<li><a
href="b190b8b18ehttps://redirect.github.com/pulumi/pulumi/issues/22103 ">#22103</a>)</li>
<li><a
href="e5e3a1d68fhttps://redirect.github.com/pulumi/pulumi/issues/22179 ">#22179</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 01:30:03 +01:00
dependabot[bot]
00de8fac8b
build(deps): bump golang.org/x/mod from 0.33.0 to 0.34.0 ( #1054 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.33.0 to
0.34.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ac721dff8fb1fac8b36https://github.com/golang/mod/compare/v0.33.0...v0.34.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 11:46:51 +01:00
Jonathan Hefner
b941ee3674
Remove .mdx suffixes from internal doc links for Mintlify ( #1052 )
...
These docs are synced to modelcontextprotocol.io which uses Mintlify for
rendering. Mintlify routes are extension-less, so links like
`./package-types.mdx` produce 404s on the live site. Dropping the `.mdx`
suffix fixes those broken links. The trade-off is that the links no
longer resolve when browsing the raw files on GitHub.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-12 11:46:30 +01:00
dependabot[bot]
b112ac3335
build(deps): bump the actions group with 2 updates ( #1049 )
...
Bumps the actions group with 2 updates:
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer )
and [anchore/sbom-action](https://github.com/anchore/sbom-action ).
Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases ">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<p>We recommend updating as soon as possible as this includes bug fixes
for Cosign. We also recommend removing <code>with: cosign-release</code>
and strongly discourage using <code>cosign-release</code> unless you
have a specific reason to use an older version of Cosign.</p>
<ul>
<li>Bump cosign to 3.0.5 in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/220 ">sigstore/cosign-installer#220</a></li>
<li>fix: add retry to curl downloads for transient network failures in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/210 ">sigstore/cosign-installer#210</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0 ">https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ba7bc0a3fehttps://redirect.github.com/sigstore/cosign-installer/issues/210 ">#210</a>)</li>
<li><a
href="5a292e1504https://redirect.github.com/sigstore/cosign-installer/issues/220 ">#220</a>)</li>
<li><a
href="351ea76151https://redirect.github.com/sigstore/cosign-installer/issues/217 ">#217</a>)</li>
<li><a
href="c17565ff32https://redirect.github.com/sigstore/cosign-installer/issues/221 ">#221</a>)</li>
<li><a
href="a6fdd19182https://redirect.github.com/sigstore/cosign-installer/issues/218 ">#218</a>)</li>
<li><a
href="430b6a704fhttps://redirect.github.com/sigstore/cosign-installer/issues/213 ">#213</a>)</li>
<li><a
href="4d14d7f17ehttps://redirect.github.com/sigstore/cosign-installer/issues/212 ">#212</a>)</li>
<li><a
href="f14800521ehttps://redirect.github.com/sigstore/cosign-installer/issues/207 ">#207</a>)</li>
<li><a
href="c3f2d79008https://redirect.github.com/sigstore/cosign-installer/issues/208 ">#208</a>)</li>
<li><a
href="b9a9af4616https://redirect.github.com/sigstore/cosign-installer/issues/211 ">#211</a>)</li>
<li>Additional commits viewable in <a
href="faadad0cce...ba7bc0a3fehttps://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.1</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): update Syft to v1.42.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/607 ">#607</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps): bump fast-xml-parser and all other deps (<a
href="https://redirect.github.com/anchore/sbom-action/issues/604 ">#604</a>)
[@<a href="https://github.com/apps/dependabot ">dependabot[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57aae52805https://redirect.github.com/anchore/sbom-action/issues/607 ">#607</a>)</li>
<li><a
href="c29e913258https://redirect.github.com/anchore/sbom-action/issues/604 ">#604</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.23.0...v0.23.1 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 10:44:47 +01:00
Tadas Antanavicius
2575290393
chore(deploy): bump production image tag to 1.5.0 ( #1043 )
...
## Summary
- Updates the production image tag in `deploy/Pulumi.gcpProd.yaml` from
`1.4.1` to `1.5.0`
## Test plan
- [ ] Verify the Pulumi deployment picks up the new image tag
- [ ] Confirm the v1.5.0 container image exists in the registry
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 06:53:30 -08:00
dependabot[bot]
c0ecfd5a65
build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 ( #1026 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.20.7 to 0.21.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Better handle redirects to https in ping by <a
href="https://github.com/jonjohnsonjr "><code>@jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2225 ">google/go-containerregistry#2225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 ">https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 </a></p>
<h2>v0.21.1</h2>
<p>This release fixes a regression in <code>crane</code> introduced in
the previous release.</p>
<h2>What's Changed</h2>
<ul>
<li>Add WithFileBufferedOpener for file-backed daemon image buffering by
<a href="https://github.com/twdamhore "><code>@twdamhore</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li>crane: fix case in auth response json by <a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/twdamhore "><code>@twdamhore</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li><a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 ">https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 </a></p>
<h2>v0.21.0</h2>
<p>This release updates the minimum Go version to
<code>1.25.6</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(mutate): don't skip dir replacements via whiteout in export by
<a href="https://github.com/r4f4 "><code>@r4f4</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li>Improve performance of v1.NewHash by <a
href="https://github.com/bmoylan "><code>@bmoylan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2194 ">google/go-containerregistry#2194</a></li>
<li>Bump the actions group across 1 directory with 4 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2207 ">google/go-containerregistry#2207</a></li>
<li>Bump the root-deps group across 1 directory with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2195 ">google/go-containerregistry#2195</a></li>
<li>Fix error messages in crane_test.go by <a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
<li>Bump go version across packages to 1.25.6 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2211 ">google/go-containerregistry#2211</a></li>
<li>Join go.mod dependency updates by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2212 ">google/go-containerregistry#2212</a></li>
<li>Bump the go-deps group across 3 directories with 3 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2213 ">google/go-containerregistry#2213</a></li>
<li>Disable taint gosec lints by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2215 ">google/go-containerregistry#2215</a></li>
<li>Update go version used in goreleaser by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2216 ">google/go-containerregistry#2216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/r4f4 "><code>@r4f4</code></a> made their
first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li><a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 ">https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e0ccb0a72https://redirect.github.com/google/go-containerregistry/issues/2225 ">#2225</a>)</li>
<li><a
href="85f2bf5f73https://redirect.github.com/google/go-containerregistry/issues/2218 ">#2218</a>)</li>
<li><a
href="e971d630dchttps://redirect.github.com/google/go-containerregistry/issues/2214 ">#2214</a>)</li>
<li><a
href="8e2d6a6817https://redirect.github.com/google/go-containerregistry/issues/2216 ">#2216</a>)</li>
<li><a
href="b58334f761https://redirect.github.com/google/go-containerregistry/issues/2215 ">#2215</a>)</li>
<li><a
href="88b39ed906https://redirect.github.com/google/go-containerregistry/issues/2213 ">#2213</a>)</li>
<li><a
href="102ac75ddehttps://redirect.github.com/google/go-containerregistry/issues/2212 ">#2212</a>)</li>
<li><a
href="d5817d559ehttps://redirect.github.com/google/go-containerregistry/issues/2211 ">#2211</a>)</li>
<li><a
href="23f0632fa3https://redirect.github.com/google/go-containerregistry/issues/2189 ">#2189</a>)</li>
<li><a
href="438abde5e7https://redirect.github.com/google/go-containerregistry/issues/2195 ">#2195</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-07 15:31:08 +02:00
dependabot[bot]
03d551dbab
build(deps): bump the opentelemetry group with 6 updates ( #1044 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.66.0` | `0.67.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.63.0` | `0.64.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.66.0 to 0.67.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for <a href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update github artifact actions to v7 (major) by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8605 ">open-telemetry/opentelemetry-go-contrib#8605</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8610 ">open-telemetry/opentelemetry-go-contrib#8610</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8620 ">open-telemetry/opentelemetry-go-contrib#8620</a></li>
<li>fix(deps): update module github.com/aws/smithy-go to v1.24.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8614 ">open-telemetry/opentelemetry-go-contrib#8614</a></li>
<li>chore(deps): update go-openapi packages by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8621 ">open-telemetry/opentelemetry-go-contrib#8621</a></li>
<li>fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8622 ">open-telemetry/opentelemetry-go-contrib#8622</a></li>
<li>chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8608 ">open-telemetry/opentelemetry-go-contrib#8608</a></li>
<li>chore(deps): update module github.com/protonmail/go-crypto to v1.4.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8609 ">open-telemetry/opentelemetry-go-contrib#8609</a></li>
<li>chore(deps): update otel/opentelemetry-collector-contrib docker tag
to v0.147.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8625 ">open-telemetry/opentelemetry-go-contrib#8625</a></li>
<li>chore(deps): update module github.com/daixiang0/gci to v0.14.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8623 ">open-telemetry/opentelemetry-go-contrib#8623</a></li>
<li>Drop support for 1.24 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8628 ">open-telemetry/opentelemetry-go-contrib#8628</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8554 ">open-telemetry/opentelemetry-go-contrib#8554</a></li>
<li>fix(deps): update kubernetes packages to v0.35.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8626 ">open-telemetry/opentelemetry-go-contrib#8626</a></li>
<li>fix(deps): update aws-sdk-go-v2 monorepo by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8598 ">open-telemetry/opentelemetry-go-contrib#8598</a></li>
<li>fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8630 ">open-telemetry/opentelemetry-go-contrib#8630</a></li>
<li>otelgrpc: modernize the example project by <a
href="https://github.com/ash2k "><code>@ash2k</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8619 ">open-telemetry/opentelemetry-go-contrib#8619</a></li>
<li>chore(deps): update googleapis to a57be14 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8606 ">open-telemetry/opentelemetry-go-contrib#8606</a></li>
<li>fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8627 ">open-telemetry/opentelemetry-go-contrib#8627</a></li>
<li>chore(deps): update module github.com/prometheus/procfs to v0.20.1
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8624 ">open-telemetry/opentelemetry-go-contrib#8624</a></li>
<li>fix(otelhttp): make Body handling in Transport consistent with
stdlib by <a href="https://github.com/ash2k "><code>@ash2k</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8618 ">open-telemetry/opentelemetry-go-contrib#8618</a></li>
<li>otelhttp: Ignore informational response status codes when persisting
status by <a
href="https://github.com/VirrageS "><code>@VirrageS</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/6913 ">open-telemetry/opentelemetry-go-contrib#6913</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] -
2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d8dabf6736https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8649 ">#8649</a>)</li>
<li><a
href="b1de2c71d9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
<li><a
href="b228c0f2f2https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8644 ">#8644</a>)</li>
<li><a
href="e70fd977a6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li><a
href="b018d98a0ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8643 ">#8643</a>)</li>
<li><a
href="fb6a3518d8https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8641 ">#8641</a>)</li>
<li><a
href="2c9c10ec4ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8640 ">#8640</a>)</li>
<li><a
href="22248d4c31https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8583 ">#8583</a>)</li>
<li><a
href="324662a14bhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
<li><a
href="69addb4996https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8636 ">#8636</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.66.0...zpages/v0.67.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.63.0 to
0.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v0.64.0/v0.18.0/v0.0.16</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix changelog protection marker by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986 ">open-telemetry/opentelemetry-go#7986</a></li>
<li>Drop support for Go 1.24 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984 ">open-telemetry/opentelemetry-go#7984</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907 ">open-telemetry/opentelemetry-go#7907</a></li>
<li>chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981 ">open-telemetry/opentelemetry-go#7981</a></li>
<li>chore(deps): update benchmark-action/github-action-benchmark action
to v1.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989 ">open-telemetry/opentelemetry-go#7989</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982 ">open-telemetry/opentelemetry-go#7982</a></li>
<li>Revert "Revert "Generate semconv/v1.40.0"" by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985 ">open-telemetry/opentelemetry-go#7985</a></li>
<li>support stdlib request.GetBody on metrics by <a
href="https://github.com/marifari-hue "><code>@marifari-hue</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931 ">open-telemetry/opentelemetry-go#7931</a></li>
<li>attribute: add TestNotEquivalence and equality operator tests by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979 ">open-telemetry/opentelemetry-go#7979</a></li>
<li>Refactor benchmark CI by <a
href="https://github.com/XSAM "><code>@XSAM</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873 ">open-telemetry/opentelemetry-go#7873</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.24.7
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988 ">open-telemetry/opentelemetry-go#7988</a></li>
<li>chore(deps): pin codspeedhq/action action to df47568 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996 ">open-telemetry/opentelemetry-go#7996</a></li>
<li>chore(deps): update actions/checkout action to v6.0.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997 ">open-telemetry/opentelemetry-go#7997</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999 ">open-telemetry/opentelemetry-go#7999</a></li>
<li>Upgrade to semconv/v1.40.0 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991 ">open-telemetry/opentelemetry-go#7991</a></li>
<li>Regenerate semconv/v1.40.0/MIGRATION.md by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992 ">open-telemetry/opentelemetry-go#7992</a></li>
<li>fix: generated semconv helpers skipping attributes by <a
href="https://github.com/victoraugustolls "><code>@victoraugustolls</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964 ">open-telemetry/opentelemetry-go#7964</a></li>
<li>Feat: Have SpanContext support the new W3C random flag. by <a
href="https://github.com/nikhilmantri0902 "><code>@nikhilmantri0902</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834 ">open-telemetry/opentelemetry-go#7834</a></li>
<li>Semconv metric helper caller-slice mutation fix by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993 ">open-telemetry/opentelemetry-go#7993</a></li>
<li>Fix semconv generated error type to check error chain for custom
type declaration by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994 ">open-telemetry/opentelemetry-go#7994</a></li>
<li>refactor: replace uint64 and int32 with atomic types in tests by <a
href="https://github.com/alexandear "><code>@alexandear</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941 ">open-telemetry/opentelemetry-go#7941</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 18da590 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000 ">open-telemetry/opentelemetry-go#8000</a></li>
<li>TracerProvider ForceFlush() Error Fix by <a
href="https://github.com/sawamurataxman "><code>@sawamurataxman</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856 ">open-telemetry/opentelemetry-go#7856</a></li>
<li>log: add error field to Record and make SDK to emit exception
attributes by <a
href="https://github.com/iblancasa "><code>@iblancasa</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924 ">open-telemetry/opentelemetry-go#7924</a></li>
<li>chore(deps): update dependency codespell to v2.4.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003 ">open-telemetry/opentelemetry-go#8003</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.6 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004 ">open-telemetry/opentelemetry-go#8004</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8001 ">open-telemetry/opentelemetry-go#8001</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.63.0...exporters/prometheus/v0.64.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-07 15:22:17 +02:00
Radoslav Dimitrov
7b0c411928
Bump go ( #1041 )
...
<!-- Provide a brief summary of your changes -->
Fixes:
https://github.com/modelcontextprotocol/registry/actions/runs/22784360696/job/66097670402
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
---------
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-06 14:57:51 -08:00
Tadas Antanavicius
7462b3c34e
fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 ( #1040 )
...
## Summary
Fixes two CI issues:
### 1. Deploy workflows broken since PR #1034 (all staging deploys
failing)
The deploy-staging and deploy-production workflows install Go using the
**root** `go.mod`, but then build Pulumi infrastructure code from the
`deploy/` directory which has its own `go.mod`.
This started failing when PR #1034 (`build(deps): bump
github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy`)
bumped `deploy/go.mod` from Go 1.24.11 to **Go 1.25.6** — a version
newer than the root module's Go 1.24.13. Every staging deploy since that
merge (Mar 6) has failed with:
```
go: go.mod requires go >= 1.25.6 (running go 1.24.13; GOTOOLCHAIN=local)
```
The last successful deploy was commit cb4807a🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude <noreply@anthropic.com>
2026-03-06 14:20:44 -08:00
dependabot[bot]
6c500c52e3
build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 ( #985 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.25.0 to 1.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>retail 1.26.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.25.1...retail/v1.26.0 ">1.26.0</a>
(2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>
<p>add a user_attributes field in SearchRequest that can be used for
personalization (PiperOrigin-RevId: 861314205) (<a
href="d8ea738ad8ea738ahttps://github.com/googleapis/google-cloud-go/compare/kms/v1.25.0...kms/v1.26.0 ">v1.26.0</a>
(2026-02-19)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Introduced the RetiredResource resource to track records of deleted
keys and prevent the reuse of their resource names (PiperOrigin-RevId:
868670725) (<a
href="d3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dhttps://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.25.0...documentai/v1.26.0 ">1.26.0</a>
(2024-02-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> A new field
<code>schema_override</code> is added to message
<code>ProcessOptions</code> (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9400 ">#9400</a>)
(<a
href="a86aa8e9627e6c208c5d8ebb89625chttps://redirect.github.com/googleapis/google-cloud-go/issues/13107 ">#13107</a>)</li>
<li><a
href="befb302203https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="1930511848https://redirect.github.com/googleapis/google-cloud-go/issues/13089 ">#13089</a>)</li>
<li><a
href="e6b9d41832https://redirect.github.com/googleapis/google-cloud-go/issues/13009 ">#13009</a>)</li>
<li><a
href="6259aeec39https://redirect.github.com/googleapis/google-cloud-go/issues/12945 ">#12945</a>)</li>
<li><a
href="bafd691de1https://redirect.github.com/googleapis/google-cloud-go/issues/13004 ">#13004</a>)</li>
<li><a
href="2b75879c22https://redirect.github.com/googleapis/google-cloud-go/issues/13082 ">#13082</a>)</li>
<li><a
href="9157a715e3https://redirect.github.com/googleapis/google-cloud-go/issues/13083 ">#13083</a>)</li>
<li><a
href="a93d961e66https://redirect.github.com/googleapis/google-cloud-go/issues/13079 ">#13079</a>)</li>
<li><a
href="75c95f3f05https://redirect.github.com/googleapis/google-cloud-go/issues/13080 ">#13080</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.25.0...dlp/v1.26.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:25:23 +02:00
dependabot[bot]
de6e9839ec
build(deps): bump the opentelemetry group with 6 updates ( #1025 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.65.0` | `0.66.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.62.0` | `0.63.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.65.0 to 0.66.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
The next release will require at least <a
href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] -
2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07fa42463chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8617 ">#8617</a>)</li>
<li><a
href="f64d6bbf2ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8532 ">#8532</a>)</li>
<li><a
href="5995ae876ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li><a
href="c0aa7c9a5ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)</li>
<li><a
href="e81a2b4433https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li><a
href="8096a3ec79https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
<li><a
href="2dce2452b9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
<li><a
href="d2a58075d3https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
<li><a
href="52dd9873f6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8613 ">#8613</a>)</li>
<li><a
href="c4223d5dadhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8603 ">#8603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.66.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.62.0 to
0.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v0.63.0/v0.17.0/v0.0.15</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>. The next release will
require at least <a href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits. <code>New</code> and
<code>Parse</code> now return partial baggage along with an error when
limits are exceeded. Errors from baggage extraction are reported to the
global error handler. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update googleapis to ce8ad4c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7860 ">open-telemetry/opentelemetry-go#7860</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7865 ">open-telemetry/opentelemetry-go#7865</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.51.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7863 ">open-telemetry/opentelemetry-go#7863</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to fe4bb1c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7861 ">open-telemetry/opentelemetry-go#7861</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7869 ">open-telemetry/opentelemetry-go#7869</a></li>
<li>sdk/log/observ: guard LogProcessed with Enabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7848 ">open-telemetry/opentelemetry-go#7848</a></li>
<li>stdouttrace observability: skip metric work when instruments are
disabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7853 ">open-telemetry/opentelemetry-go#7853</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7870 ">open-telemetry/opentelemetry-go#7870</a></li>
<li>fix(deps): update googleapis to 546029d by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7871 ">open-telemetry/opentelemetry-go#7871</a></li>
<li>stdoutmetric observ: skip metric work when instruments are disabled
by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7868 ">open-telemetry/opentelemetry-go#7868</a></li>
<li>chore(deps): update fossas/fossa-action action to v1.8.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7879 ">open-telemetry/opentelemetry-go#7879</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7878 ">open-telemetry/opentelemetry-go#7878</a></li>
<li>chore(deps): update module github.com/ghostiam/protogetter to
v0.3.20 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7877 ">open-telemetry/opentelemetry-go#7877</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 86a5c4b by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7876 ">open-telemetry/opentelemetry-go#7876</a></li>
<li>fix(deps): update module golang.org/x/sys to v0.41.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7885 ">open-telemetry/opentelemetry-go#7885</a></li>
<li>chore(deps): update module github.com/clipperhouse/uax29/v2 to
v2.6.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7884 ">open-telemetry/opentelemetry-go#7884</a></li>
<li>Checked if instrument enabled before measuring in prometheus by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7866 ">open-telemetry/opentelemetry-go#7866</a></li>
<li>exporter/otlploghttp: guard observ metrics with Enabled checks by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7813 ">open-telemetry/opentelemetry-go#7813</a></li>
<li>chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7886 ">open-telemetry/opentelemetry-go#7886</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7887 ">open-telemetry/opentelemetry-go#7887</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7890 ">open-telemetry/opentelemetry-go#7890</a></li>
<li>fix(deps): update golang.org/x to 2842357 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7891 ">open-telemetry/opentelemetry-go#7891</a></li>
<li>fix(deps): update googleapis to 4cfbd41 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7889 ">open-telemetry/opentelemetry-go#7889</a></li>
<li>Checked if instrument enabled before measuring in
<code>oteltracegrpc</code> by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7825 ">open-telemetry/opentelemetry-go#7825</a></li>
<li>Checked if Instrument Enabled before measuring in otlpgrpc by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7824 ">open-telemetry/opentelemetry-go#7824</a></li>
<li>chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2
to v2.27.8 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7892 ">open-telemetry/opentelemetry-go#7892</a></li>
<li>chore(deps): update module github.com/golangci/golines to v0.15.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7893 ">open-telemetry/opentelemetry-go#7893</a></li>
<li>chore(deps): update module github.com/golangci/misspell to v0.8.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7894 ">open-telemetry/opentelemetry-go#7894</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 9f66fae by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7898 ">open-telemetry/opentelemetry-go#7898</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7906 ">open-telemetry/opentelemetry-go#7906</a></li>
<li>Support Go 1.26 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7902 ">open-telemetry/opentelemetry-go#7902</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7908 ">open-telemetry/opentelemetry-go#7908</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7909 ">open-telemetry/opentelemetry-go#7909</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.62.0...exporters/prometheus/v0.63.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:16:23 +02:00
dependabot[bot]
b738501d2f
build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.25.0 to 4.27.0 in /deploy ( #1024 )
...
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes )
from 4.25.0 to 4.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.27.0</h2>
<p>No release notes provided.</p>
<h2>v4.26.0</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122 ">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed the update. This occurred when Pulumi checked status fields
before the controller updated <code>observedGeneration</code>, causing
stale "ready" values to be trusted.</p>
</li>
<li>
<p>Fixed a regression of <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943 ">#2943</a>
which could cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969 ">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156 ">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
changelog</a>.</em></p>
<blockquote>
<h2>4.27.0 (March 2, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4181 ">#4181</a>
Fix PVC timeout when updating to a storage class with
WaitForFirstConsumer bind mode.</li>
</ul>
<h3>Added</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/3661 ">#3661</a>
Support for OCI login inside the provider process. Providing a
username/password to <code>Chart v4</code> and <code>Release v3</code>
will now login to private OCI
registries as expected.
(<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/2911 ">pulumi/pulumi-kubernetes#2911</a>
and <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/1914 ">pulumi/pulumi-kubernetes#1914</a>)</li>
</ul>
<h2>4.26.0 (February 19, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122 ">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed
the update. This occurred when Pulumi checked status fields before the
controller updated <code>observedGeneration</code>, causing stale
"ready" values to be
trusted.</p>
</li>
<li>
<p>Fixed a regression of
<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943 ">#2943</a>
which could
cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969 ">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156 ">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
<h2>4.24.0 (November 5, 2025)</h2>
<h3>Added</h3>
<ul>
<li>Added a <code>plainHttp</code> option to the <code>v4.Chart</code>
resource. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3250 ">pulumi/pulumi-kubernetes#3250</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>The <code>pulumi.com/waitFor</code> annotation now uses an
<a
href="https://www.rfc-editor.org/rfc/rfc9535.html ">RFC9535</a>-compliant
JSONPath
parser. This makes it possible to wait for more complex scenarios.</p>
<p>For example:</p>
<ul>
<li>To wait for a Pod's <code>status.phase</code> to be
"Running" or "Succeeded":</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20f0c07152https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4194 ">#4194</a>)</li>
<li><a
href="c5e7ece7b1https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4191 ">#4191</a>)</li>
<li><a
href="49c2646952https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3661 ">#3661</a>)</li>
<li><a
href="b48d7a39a8https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4181 ">#4181</a>)</li>
<li><a
href="e3427da684https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4188 ">#4188</a>)</li>
<li><a
href="7af1b7e73bhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4189 ">#4189</a>)</li>
<li><a
href="6860aae22dhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4187 ">#4187</a>)</li>
<li><a
href="5c58fea181https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4186 ">#4186</a>)</li>
<li><a
href="1564fc1c469ebe2663c3https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4184 ">#4184</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.25.0...v4.27.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:16:00 +02:00
dependabot[bot]
8575244d1f
build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 ( #995 )
...
Bumps [github.com/caarlos0/env/v11](https://github.com/caarlos0/env )
from 11.3.1 to 11.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases ">github.com/caarlos0/env/v11's
releases</a>.</em></p>
<blockquote>
<h2>v11.4.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set
defaults for zero values only (<a
href="https://redirect.github.com/caarlos0/env/issues/325 ">#325</a>) (<a
href="https://github.com/dnovikoff "><code>@dnovikoff</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>d3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues,
update golangci-lint (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>aaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a
bit (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/393 ">#393</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>cd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/396 ">#396</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/402 ">#402</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/403 ">#403</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>d28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/397 ">#397</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>f33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql,
govulncheck, grype (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>e5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms
(<a href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions
versions (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro ">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aaa45113e54fe3f70200c98ad844e1https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>)</li>
<li><a
href="d28373e3a0https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>)</li>
<li><a
href="3a3ea05453https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>)</li>
<li><a
href="f33230e8e7https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>)</li>
<li><a
href="c660cc91dbhttps://redirect.github.com/caarlos0/env/issues/403 ">#403</a>)</li>
<li><a
href="4d25a4659fhttps://redirect.github.com/caarlos0/env/issues/402 ">#402</a>)</li>
<li><a
href="7b10cf56e2https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>)</li>
<li><a
href="6b2db30d19https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v11.3.1...v11.4.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:14:22 +02:00
dependabot[bot]
febc8dc6a1
build(deps): bump the actions group across 1 directory with 5 updates ( #1031 )
...
Bumps the actions group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go ) | `6.2.0` |
`6.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact )
| `6.0.0` | `7.0.0` |
| [docker/login-action](https://github.com/docker/login-action ) |
`3.7.0` | `4.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action ) |
`0.22.2` | `0.23.0` |
|
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action )
| `6.4.0` | `7.0.0` |
Updates `actions/setup-go` from 6.2.0 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases ">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default Go module caching to use go.mod by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/705 ">actions/setup-go#705</a></li>
<li>Fix golang download url to go.dev by <a
href="https://github.com/178inaba "><code>@178inaba</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/469 ">actions/setup-go#469</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.3.0 ">https://github.com/actions/setup-go/compare/v6...v6.3.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b73464bb3https://redirect.github.com/actions/setup-go/issues/469 ">#469</a>)</li>
<li><a
href="a5f9b05d2dhttps://redirect.github.com/actions/setup-go/issues/705 ">#705</a>)</li>
<li>See full diff in <a
href="7a3fe6cf4c...4b73464bb3https://github.com/actions/upload-artifact/releases ">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>v7 What's new</h2>
<h3>Direct Uploads</h3>
<p>Adds support for uploading single files directly (unzipped). Callers
can set the new <code>archive</code> parameter to <code>false</code> to
skip zipping the file during upload. Right now, we only support single
files. The action will fail if the glob passed resolves to multiple
files. The <code>name</code> parameter is also ignored with this
setting. Instead, the name of the artifact will be the name of the
uploaded file.</p>
<h3>ESM</h3>
<p>To support new versions of the <code>@actions/*</code> packages,
we've upgraded the package to ESM.</p>
<h2>What's Changed</h2>
<ul>
<li>Add proxy integration test by <a
href="https://github.com/Link "><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
<li>Upgrade the module to ESM and bump dependencies by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/762 ">actions/upload-artifact#762</a></li>
<li>Support direct file uploads by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/764 ">actions/upload-artifact#764</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Link "><code>@Link</code></a>- made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0 ">https://github.com/actions/upload-artifact/compare/v6...v7.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bbbca2ddaahttps://redirect.github.com/actions/upload-artifact/issues/764 ">#764</a>)</li>
<li><a
href="589182c5a4https://redirect.github.com/actions/upload-artifact/issues/762 ">#762</a>)</li>
<li><a
href="47309c993ahttps://redirect.github.com/actions/upload-artifact/issues/754 ">#754</a>
from actions/Link-/add-proxy-integration-tests</li>
<li><a
href="02a8460834b7c566a772...bbbca2ddaahttps://github.com/docker/login-action/releases ">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<ul>
<li>Node 24 as default runtime (requires <a
href="https://github.com/actions/runner/releases/tag/v2.327.1 ">Actions
Runner v2.327.1</a> or later) by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/929 ">docker/login-action#929</a></li>
<li>Switch to ESM and update config/test wiring by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/927 ">docker/login-action#927</a></li>
<li>Bump <code>@actions/core</code> from 1.11.1 to 3.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/919 ">docker/login-action#919</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> from 3.890.0 to 3.1000.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/909 ">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920 ">docker/login-action#920</a></li>
<li>Bump <code>@aws-sdk/client-ecr-public</code> from 3.890.0 to
3.1000.0 in <a
href="https://redirect.github.com/docker/login-action/pull/909 ">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920 ">docker/login-action#920</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.63.0 to 0.77.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/910 ">docker/login-action#910</a>
<a
href="https://redirect.github.com/docker/login-action/pull/928 ">docker/login-action#928</a></li>
<li>Bump <code>@isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a
href="https://redirect.github.com/docker/login-action/pull/921 ">docker/login-action#921</a></li>
<li>Bump js-yaml from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/login-action/pull/901 ">docker/login-action#901</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.7.0...v4.0.0 ">https://github.com/docker/login-action/compare/v3.7.0...v4.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b45d80f862https://redirect.github.com/docker/login-action/issues/929 ">#929</a>
from crazy-max/node24</li>
<li><a
href="176cb9c12acad8984310https://redirect.github.com/docker/login-action/issues/920 ">#920</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="92cbcb231e5a2d6a71bd44512b6b2ehttps://redirect.github.com/docker/login-action/issues/928 ">#928</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="28737a5e46dac079354a62029f315dhttps://redirect.github.com/docker/login-action/issues/919 ">#919</a>
from docker/dependabot/npm_and_yarn/actions/core-3.0.0</li>
<li><a
href="08c8f064bfc94ce9fb46...b45d80f862https://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.0</h2>
<ul>
<li>switch to single-file dist build with sub-action flags and update
dependencies (<a
href="https://redirect.github.com/anchore/sbom-action/issues/595 ">#595</a>)
[<a href="https://github.com/kzantow "><code>@kzantow</code></a>]</li>
<li>switch to esbuild (<a
href="https://redirect.github.com/anchore/sbom-action/issues/590 ">#590</a>)
[<a
href="https://github.com/willmurphyscode "><code>@willmurphyscode</code></a>]</li>
<li>update Syft to v1.42.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/599 ">#599</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="17ae174017https://redirect.github.com/anchore/sbom-action/issues/595 ">#595</a>)</li>
<li><a
href="6d473d3843https://redirect.github.com/anchore/sbom-action/issues/599 ">#599</a>)</li>
<li><a
href="60619e70c0https://redirect.github.com/anchore/sbom-action/issues/598 ">#598</a>)</li>
<li><a
href="e2bd58a025https://redirect.github.com/anchore/sbom-action/issues/592 ">#592</a>)</li>
<li><a
href="d032d7d671https://redirect.github.com/anchore/sbom-action/issues/597 ">#597</a>)</li>
<li><a
href="2d094306a7https://redirect.github.com/anchore/sbom-action/issues/590 ">#590</a>)</li>
<li><a
href="74c5ce948dhttps://redirect.github.com/anchore/sbom-action/issues/589 ">#589</a>)</li>
<li><a
href="77fae5a5abhttps://redirect.github.com/anchore/sbom-action/issues/583 ">#583</a>)</li>
<li><a
href="debc3eeb0fhttps://redirect.github.com/anchore/sbom-action/issues/584 ">#584</a>)</li>
<li><a
href="fff8762a01https://redirect.github.com/anchore/sbom-action/issues/588 ">#588</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.2...v0.23.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/goreleaser-action/releases ">goreleaser/goreleaser-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat!: node 24, update deps, rm yarn, ESM by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/533 ">goreleaser/goreleaser-action#533</a></li>
<li>sec: pin github action versions by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/514 ">goreleaser/goreleaser-action#514</a></li>
<li>docs: Upgrade checkout GitHub Action in README.md by <a
href="https://github.com/dunglas "><code>@dunglas</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/507 ">goreleaser/goreleaser-action#507</a></li>
<li>chore(deps): bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/504 ">goreleaser/goreleaser-action#504</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/517 ">goreleaser/goreleaser-action#517</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/523 ">goreleaser/goreleaser-action#523</a></li>
<li>ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the
actions group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/526 ">goreleaser/goreleaser-action#526</a></li>
<li>ci(deps): bump the actions group across 1 directory with 4 updates
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/532 ">goreleaser/goreleaser-action#532</a></li>
<li>ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions
group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/534 ">goreleaser/goreleaser-action#534</a></li>
<li>chore(deps): bump the npm group across 1 directory with 4 updates by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/536 ">goreleaser/goreleaser-action#536</a></li>
<li>chore(deps): bump <code>@actions/http-client</code> from 3.0.2 to
4.0.0 in the npm group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/537 ">goreleaser/goreleaser-action#537</a></li>
<li>ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in
the actions group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/538 ">goreleaser/goreleaser-action#538</a></li>
<li>chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/539 ">goreleaser/goreleaser-action#539</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0 ">https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec59f474b9752dedee3d1881ae035dfdc5e662bb51b5b35c3chttps://redirect.github.com/goreleaser/goreleaser-action/issues/539 ">#539</a>)</li>
<li><a
href="4247c53b30https://redirect.github.com/goreleaser/goreleaser-action/issues/538 ">#538</a>)</li>
<li><a
href="c169bfd5ae902ab4a70dhttps://redirect.github.com/goreleaser/goreleaser-action/issues/536 ">#536</a>)</li>
<li><a
href="c59a69131956cc8b2737e435ccd777...ec59f474b9
2026-03-06 02:11:03 +02:00
dependabot[bot]
a5b152f212
build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible ( #1032 )
...
Bumps [github.com/docker/cli](https://github.com/docker/cli ) from
29.0.3+incompatible to 29.2.0+incompatible.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0b9d1985dbhttps://redirect.github.com/docker/cli/issues/6764 ">#6764</a> from
vvoland/update-docker</li>
<li><a
href="9c9ec73588bab3e81e1d2e64fc162ahttps://redirect.github.com/docker/cli/issues/6367 ">#6367</a> from
thaJeztah/template_slicejoin</li>
<li><a
href="1f2ba2ac9dhttps://redirect.github.com/docker/cli/issues/6760 ">#6760</a> from
thaJeztah/container_create_fix_error</li>
<li><a
href="e34a3422cca86356d42fhttps://redirect.github.com/docker/cli/issues/6763 ">#6763</a> from
thaJeztah/bump_mapstructure</li>
<li><a
href="771660a17e9cff36b35ahttps://redirect.github.com/docker/cli/issues/6762 ">#6762</a> from
thaJeztah/bump_x_deps</li>
<li><a
href="08ed2bc6e8https://github.com/docker/cli/compare/v29.0.3...v29.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:10:21 +02:00
dependabot[bot]
26564484ac
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy ( #1034 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.220.0 to 3.225.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.225.1</h2>
<h2>3.225.1 (2026-03-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Fix inheritence of default providers across resources of
different packages
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22101 ">#22101</a></p>
</li>
<li>
<p>[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21917 ">#21917</a></p>
</li>
<li>
<p>[programgen/go] Fix plain values not always being lifted to
input/output values when needed
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22084 ">#22084</a></p>
</li>
<li>
<p>[programgen/python] Fix generation of <code>entries</code> and
<code>lookup</code> calls
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22086 ">#22086</a></p>
</li>
</ul>
<h2>v3.225.0</h2>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959 ">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999 ">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041 ">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066 ">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960 ">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897 ">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076 ">#22076</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959 ">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999 ">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041 ">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066 ">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960 ">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897 ">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076 ">#22076</a></p>
</li>
<li>
<p>[engine] Fix panic when a new component resource in the program is
not targeted
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21957 ">#21957</a></p>
</li>
<li>
<p>[sdk/nodejs] Implement GetProgramDependencies for bun and pnpm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22065 ">#22065</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Build language plugins with the grpcnotrace tag to reduce the
binary size
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22012 ">#22012</a></li>
</ul>
<h2>3.224.0 (2026-02-26)</h2>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="511dda345ahttps://redirect.github.com/pulumi/pulumi/issues/22101 ">#22101</a>)</li>
<li><a
href="46eee5ccaehttps://redirect.github.com/pulumi/pulumi/issues/22084 ">#22084</a>)</li>
<li><a
href="346389a8e6https://redirect.github.com/pulumi/pulumi/issues/22104 ">#22104</a>)</li>
<li><a
href="62a6d208d7https://redirect.github.com/pulumi/pulumi/issues/21917 ">#21917</a>)</li>
<li><a
href="58c7319c9bhttps://redirect.github.com/pulumi/pulumi/issues/22091 ">#22091</a>)</li>
<li><a
href="d2c48abe82https://redirect.github.com/pulumi/pulumi/issues/22086 ">#22086</a>)</li>
<li><a
href="e3eece1a08https://redirect.github.com/pulumi/pulumi/issues/22085 ">#22085</a>)</li>
<li><a
href="ca6228e034https://redirect.github.com/pulumi/pulumi/issues/22081 ">#22081</a>)</li>
<li><a
href="e72496a59ehttps://redirect.github.com/pulumi/pulumi/issues/22080 ">#22080</a>)</li>
<li><a
href="21b4452b91https://redirect.github.com/pulumi/pulumi/issues/22079 ">#22079</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.220.0...v3.225.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:10:02 +02:00
Preeti Dewani
cb4807a7fb
add details of include_deleted in openapi spec ( #1014 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
Add missing spec of include_deleted parameter in openapi spec
## How Has This Been Tested?
NA
## Breaking Changes
No
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
2026-03-01 06:35:50 -08:00
Preeti Dewani
bb84ea69e8
Publisher-managed "deleted" support ( #893 )
...
(Updated auto-generated PR description from @tadasant / Claude on Feb
22, 2026)
## Motivation and Context
Fixes #637
Server lifecycle management (deprecation and yanking) is a standard
requirement for package registries. Use cases like rebranding, security
vulnerabilities, and end-of-life servers demand the ability to mark
servers as deprecated or deleted, with optional messaging to guide
consumers toward alternatives.
## Changes
### New API endpoints
- **`PATCH /v0/servers/{serverName}/versions/{version}/status`** —
Update the lifecycle status of a single server version
- **`PATCH /v0/servers/{serverName}/status`** — Update the lifecycle
status of all versions of a server in a single transaction
Both endpoints accept:
```json
{
"status": "active|deprecated|deleted",
"statusMessage": "Optional message (max 500 chars) explaining the change"
}
```
### New CLI command
- **`mcp-publisher status <serverName> [version]`** — Update server
lifecycle status from the command line
- `--status` (required): `active`, `deprecated`, or `deleted`
- `--message`: Optional status message
- `--all-versions`: Apply to all versions of the server (replaces the
`<version>` argument)
### API response changes
`RegistryExtensions` now includes two new fields:
- `statusChangedAt` — Timestamp of the last status change
- `statusMessage` — Optional free-form message (e.g., deprecation
reason, migration guidance)
### List endpoint changes
- New `include_deleted` query parameter on `GET /v0/servers` — defaults
to `false`, hiding deleted servers from listings
- When `updated_since` is provided, `include_deleted` is automatically
set to `true` for incremental sync
### Database
- Migration `013_add_status_fields.sql`: Adds `status_changed_at` (NOT
NULL, initialized from `published_at`) and `status_message` columns to
the `servers` table
### Design decisions (from review discussion)
- **Dedicated status endpoints** rather than overloading the existing
edit endpoint
- **Bidirectional status transitions** — all transitions between
`active`, `deprecated`, and `deleted` are allowed
- **`statusMessage` as free-form text** — no structured `nextName` or
`alternativeUrl` fields (per maintainer feedback, to avoid complexity
around chaining, trust transfer, etc.)
- **Publish permission** grants status change access (not limited to
admin/edit)
- **Status message auto-cleared** when transitioning back to `active`
Good, now I have the full picture. Here's the addendum:
### Consumer-facing API changes
The new status fields live inside
`_meta["io.modelcontextprotocol.registry/official"]` on every
`ServerResponse`. This is the existing `RegistryExtensions` object — two
new fields are added alongside the existing ones:
**Before:**
```json
{
"server": { "name": "com.example/my-server", "...": "..." },
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"publishedAt": "2025-06-01T00:00:00Z",
"updatedAt": "2025-06-15T00:00:00Z",
"isLatest": true
}
}
}
```
**After:**
```json
{
"server": { "name": "com.example/my-server", "...": "..." },
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "deprecated",
"statusChangedAt": "2026-02-01T12:00:00Z",
"statusMessage": "Deprecated in favor of com.example/my-server-v2",
"publishedAt": "2025-06-01T00:00:00Z",
"updatedAt": "2026-02-01T12:00:00Z",
"isLatest": true
}
}
}
```
| New field | Type | Present when |
|-----------|------|-------------|
| `statusChangedAt` | `string` (RFC3339) | Always — initialized to
`publishedAt` for existing records |
| `statusMessage` | `string` (max 500 chars) | Only when set —
`null`/omitted for active servers (auto-cleared on transition to active)
|
These fields appear on **every endpoint that returns a
`ServerResponse`**: `GET /v0/servers`, `GET /v0/servers/{name}`, `GET
/v0/servers/{name}/versions/{version}`, and the new PATCH status
endpoints.
### List endpoint filtering
`GET /v0/servers` gains an `include_deleted` query parameter:
| Scenario | Behavior |
|----------|----------|
| No `include_deleted` param | Deleted servers hidden (default `false`)
|
| `include_deleted=true` | Deleted servers included in results |
| `updated_since` provided | `include_deleted` forced to `true` for
incremental sync |
## How Has This Been Tested?
- Unit tests for status handler (`status_test.go`) covering status
transitions, permission checks, validation errors, and the all-versions
endpoint
- Unit tests for the CLI command (`status_test.go`)
- Integration with existing server/edit handler tests
- Database layer tests for the new status update and query methods
- Tested locally with `make dev-compose`
## Types of changes
- [x] New feature (non-breaking change which adds functionality)
## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
## Open items from review
- [ ] `include_deleted` silent override: When `updated_since` is
provided and `include_deleted=false` is explicitly passed, should return
a 400 error rather than silently overriding
([thread](https://github.com/modelcontextprotocol/registry/pull/893#discussion_r2100879360 ))
— agreed upon but may not yet be implemented
2026-02-27 09:00:07 -08:00
Den Delimarsky
01e4e2b09e
Update SECURITY.md to use GitHub Security Advisories ( #977 )
...
Replaces Anthropic HackerOne VDP references with standard GitHub
Security Advisory process.
2026-02-18 23:36:23 -08:00
dependabot[bot]
541c8a78c0
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.219.0 to 3.220.0 in /deploy ( #953 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.219.0 to 3.220.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.220.0</h2>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709 ">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408 ">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572 ">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720 ">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707 ">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576 ">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620 ">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722 ">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is >= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663 ">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709 ">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408 ">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572 ">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720 ">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707 ">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576 ">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620 ">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722 ">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is >= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663 ">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8ecd95a5ehttps://redirect.github.com/pulumi/pulumi/issues/21727 ">#21727</a>)</li>
<li><a
href="4c2cc2a729https://redirect.github.com/pulumi/pulumi/issues/21764 ">#21764</a>)</li>
<li><a
href="8dc466ce6ehttps://redirect.github.com/pulumi/pulumi/issues/21649 ">#21649</a>)</li>
<li><a
href="2ce415c413https://redirect.github.com/pulumi/pulumi/issues/21732 ">#21732</a>)</li>
<li><a
href="5d49339b03https://redirect.github.com/pulumi/pulumi/issues/21758 ">#21758</a>)</li>
<li><a
href="dbcad3b0bahttps://redirect.github.com/pulumi/pulumi/issues/21572 ">#21572</a>)</li>
<li><a
href="f5dc5a3fffhttps://redirect.github.com/pulumi/pulumi/issues/21709 ">#21709</a>)</li>
<li><a
href="82d584e2d4https://redirect.github.com/pulumi/pulumi/issues/21729 ">#21729</a>)</li>
<li><a
href="f8aaed4083https://redirect.github.com/pulumi/pulumi/issues/2 ">#2</a>...</li>
<li><a
href="3392d063dbhttps://redirect.github.com/pulumi/pulumi/issues/21722 ">#21722</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 10:31:55 +02:00
Radoslav Dimitrov
4e1d46d843
Bump production to v1.4.1 ( #952 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR bumps prod to v1.4.1
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-10 23:39:51 +02:00
deerajkumar18
b5f38fcc2a
update schema url point to the actual location ( #884 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
This PR ensures that the draft URL points to the actual draft schema
improvement suggested in
https://github.com/modelcontextprotocol/registry/issues/814
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
2026-02-10 13:32:58 -08:00
dependabot[bot]
a5f2dc1b66
build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 in /deploy ( #950 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git )
from 5.16.2 to 5.16.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases ">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.16.5</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module golang.org/x/crypto to v0.45.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1744 ">go-git/go-git#1744</a></li>
<li>build: Bump Go test versions to 1.23-1.25 (v5) by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1746 ">go-git/go-git#1746</a></li>
<li>[v5] git: worktree, Don't delete local untracked files when
resetting worktree by <a
href="https://github.com/Ch00k "><code>@Ch00k</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1800 ">go-git/go-git#1800</a></li>
<li>Expand packfile checks by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1836 ">go-git/go-git#1836</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5 ">https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5 </a></p>
<h2>v5.16.4</h2>
<h2>What's Changed</h2>
<ul>
<li>backport plumbing: format/idxfile, prevent panic by <a
href="https://github.com/swills "><code>@swills</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1732 ">go-git/go-git#1732</a></li>
<li>[backport] build: test, Fix build on Windows. by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1734 ">go-git/go-git#1734</a></li>
<li>build: Update module golang.org/x/net to v0.38.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1742 ">go-git/go-git#1742</a></li>
<li>build: Update module github.com/cloudflare/circl to v1.6.1
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1741 ">go-git/go-git#1741</a></li>
<li>build: Update module github.com/go-git/go-git/v5 to v5.13.0
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1743 ">go-git/go-git#1743</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 ">https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 </a></p>
<h2>v5.16.3</h2>
<h2>What's Changed</h2>
<ul>
<li>internal: Expand regex to fix build [5.x] by <a
href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1644 ">go-git/go-git#1644</a></li>
<li>build: raise timeouts for windows CI tests and disable CIFuzz [5.x]
by <a href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1646 ">go-git/go-git#1646</a></li>
<li>plumbing: support commits extra headers, support jujutsu signed
commit [5.x] by <a
href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1633 ">go-git/go-git#1633</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3 ">https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="48a1ae05eehttps://redirect.github.com/go-git/go-git/issues/1836 ">#1836</a>
from go-git/check-v5</li>
<li><a
href="42bdf1f9044146a5653f63d78ec08025f1624754https://redirect.github.com/go-git/go-git/issues/1800 ">#1800</a>
from Ch00k/no-delete-untracked-v5</li>
<li><a
href="600fb13907390a569415https://redirect.github.com/go-git/go-git/issues/1746 ">#1746</a>
from pjbgf/bump-go</li>
<li><a
href="61c8b859cee5a05ecd4fhttps://redirect.github.com/go-git/go-git/issues/1744 ">#1744</a>
from go-git/renovate/releases/v5.x-go-golang.org-x-c...</li>
<li><a
href="1495930b09https://github.com/go-git/go-git/compare/v5.16.2...v5.16.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 22:54:52 +02:00
dependabot[bot]
b883d47d97
build(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 ( #951 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.32.0 to
0.33.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27761a2ad8https://github.com/golang/mod/compare/v0.32.0...v0.33.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 22:54:33 +02:00
Tadas Antanavicius
70a27717fb
feat(schema): allow template variables in transport URL field ( #910 )
...
Authored by Claude Code Opus 4.5, steered/reviewed by me.
## Summary
- Updated the URL regex pattern in `StreamableHttpTransport` and
`SseTransport` to allow template variables like `{baseUrl}` as an
alternative to requiring the `https://` prefix
- This enables more flexible URL configuration in the `remotes` section
of server.json
## Changes
- Modified the `url` field pattern from `^https?://[^\s]+$` to
`^(https?://[^\s]+|\{[a-zA-Z_][a-zA-Z0-9_]*\}[^\s]*)$`
- Updated both `openapi.yaml` and the derived `server.schema.json`
- Added clarifying documentation that URL must start with `http://`,
`https://`, or a template variable
## Regex breakdown
```
^(https?://[^\s]+|\{[a-zA-Z_][a-zA-Z0-9_]*\}[^\s]*)$
```
| Part | Meaning |
|------|---------|
| `^` | Start of string |
| `(` | Begin alternation group |
| `https?://[^\s]+` | `http://` or `https://` followed by non-whitespace
|
| `\|` | OR |
| `\{[a-zA-Z_][a-zA-Z0-9_]*\}` | Template variable: `{` + valid
identifier + `}` |
| `[^\s]*` | Optional path/query after template variable |
| `)` | End alternation group |
| `$` | End of string |
## Test cases
**Should match ✓**
- `https://api.example.com/mcp `
- `http://localhost:8080/sse `
- `https://example.com/path?query=value `
- `{baseUrl}`
- `{baseUrl}/mcp`
- `{server_url}/api/v1`
- `{API_ENDPOINT}`
**Should NOT match ✗**
- `ftp://example.com` — wrong protocol
- `example.com` — missing protocol or variable
- `/relative/path` — relative paths not allowed
- `{invalid-name}/path` — hyphens not valid in variable names
- `{123invalid}` — variables can't start with numbers
---------
Co-authored-by: Agent Orchestrator <agent@ao.pulsemcp.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-09 11:51:17 +02:00
dependabot[bot]
541a6c61fa
build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.64.0 to 0.65.0 ( #940 )
...
Bumps
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
from 0.64.0 to 0.65.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>Release
v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191 ">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281 ">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401 ">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461 ">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323 ">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352 ">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142 ">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302 ">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317 ">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325 ">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340 ">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341 ">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349 ">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356 ">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357 ">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358 ">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360 ">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361 ">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365 ">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366 ">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370 ">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404 ">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>
<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] -
2026-02-02</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191 ">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281 ">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401 ">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461 ">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323 ">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352 ">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142 ">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302 ">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317 ">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325 ">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340 ">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341 ">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349 ">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356 ">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357 ">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358 ">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360 ">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361 ">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365 ">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366 ">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370 ">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404 ">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>
<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
<li><code>system.paging.type</code> and
<code>process.paging.fault_type</code> →
<code>system.paging.fault.type</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a89d958e7ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8493 ">#8493</a>)</li>
<li><a
href="1530d71edchttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8481 ">#8481</a>)</li>
<li><a
href="135bb6050ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8483 ">#8483</a>)</li>
<li><a
href="8e921058c6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8486 ">#8486</a>)</li>
<li><a
href="147148e2d2https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8487 ">#8487</a>)</li>
<li><a
href="d387510eechttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li><a
href="fad49c80d5https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
<li><a
href="9e1e5731aehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8479 ">#8479</a>)</li>
<li><a
href="37aa4753c9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li><a
href="fc8ef39de1https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.64.0...zpages/v0.65.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-09 11:11:06 +02:00
Radoslav Dimitrov
5962f9ea75
Resolve vulnerability warnings by bumping Go to 1.24.13 ( #938 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-09 11:07:21 +02:00
Radoslav Dimitrov
bf628f464d
Group otel dependencies in a single dependabot PR ( #935 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR groups all otel deps in a single dependabot PR as
usually they are spread across 4-5 separate ones whenever there's a new
version.
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-08 13:32:28 -08:00
dependabot[bot]
3b0341d89a
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.218.0 to 3.219.0 in /deploy ( #941 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.218.0 to 3.219.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.219.0</h2>
<h2>3.219.0 (2026-02-05)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow setting <code>requiredPulumiVersion</code> in Pulumi.yaml
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21627 ">#21627</a></p>
</li>
<li>
<p>[cli/{install,package}] Allow using private packages as local
dependencies in components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21664 ">#21664</a></p>
</li>
<li>
<p>[cli/policy] Add <code>pulumi policy install</code> command
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21652 ">#21652</a></p>
</li>
<li>
<p>[engine] Run analyzer calls in parallel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21631 ">#21631</a></p>
</li>
<li>
<p>[programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21621 ">#21621</a></p>
</li>
<li>
<p>[sdk/python] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21644 ">#21644</a></p>
</li>
<li>
<p>[sdk/python] Add support for protobuf 6
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21647 ">#21647</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21604 ">#21604</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21614 ">#21614</a></p>
</li>
<li>
<p>[engine] Download/install required policy packs in parallel with
plugins
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21651 ">#21651</a></p>
</li>
<li>
<p>[cli/package] Correctly install packages that depend on other
packages for <code>pulumi package add</code> and <code>pulumi package
get-schema</code>.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21321 ">#21321</a></p>
</li>
<li>
<p>[programgen/python] Fix panic when ranging over a resource output
that is an array of objects
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21679 ">#21679</a></p>
</li>
<li>
<p>[sdk/python] Fix issue with generic subclasses of
<code>dynamic.Resource</code>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21670 ">#21670</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Relax pip version constraint</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.219.0 (2026-02-05)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Allow setting <code>requiredPulumiVersion</code> in Pulumi.yaml
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21627 ">#21627</a></p>
</li>
<li>
<p>[cli/{install,package}] Allow using private packages as local
dependencies in components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21664 ">#21664</a></p>
</li>
<li>
<p>[cli/policy] Add <code>pulumi policy install</code> command
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21652 ">#21652</a></p>
</li>
<li>
<p>[engine] Run analyzer calls in parallel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21631 ">#21631</a></p>
</li>
<li>
<p>[programgen/dotnet] Codegen RequirePulumiVersion for Dotnet
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21621 ">#21621</a></p>
</li>
<li>
<p>[sdk/python] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21644 ">#21644</a></p>
</li>
<li>
<p>[sdk/python] Add support for protobuf 6
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21647 ">#21647</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21604 ">#21604</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21614 ">#21614</a></p>
</li>
<li>
<p>[engine] Download/install required policy packs in parallel with
plugins
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21651 ">#21651</a></p>
</li>
<li>
<p>[cli/package] Correctly install packages that depend on other
packages for <code>pulumi package add</code> and <code>pulumi package
get-schema</code>.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21321 ">#21321</a></p>
</li>
<li>
<p>[programgen/python] Fix panic when ranging over a resource output
that is an array of objects
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21679 ">#21679</a></p>
</li>
<li>
<p>[sdk/python] Fix issue with generic subclasses of
<code>dynamic.Resource</code>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21670 ">#21670</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[sdk/python] Relax pip version constraint
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21639 ">#21639</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="11ec8dc824https://redirect.github.com/pulumi/pulumi/issues/21673 ">#21673</a>)</li>
<li><a
href="f188093644https://redirect.github.com/pulumi/pulumi/issues/21679 ">#21679</a>)</li>
<li><a
href="f280013893https://redirect.github.com/pulumi/pulumi/issues/21674 ">#21674</a>)</li>
<li><a
href="aba11a7f69https://redirect.github.com/pulumi/pulumi/issues/21665 ">#21665</a>)</li>
<li><a
href="59e1c1a691https://redirect.github.com/pulumi/pulumi/issues/21664 ">#21664</a>)</li>
<li><a
href="788bc12672https://redirect.github.com/pulumi/pulumi/issues/21642 ">#21642</a>)</li>
<li><a
href="fa53ec6a3ahttps://redirect.github.com/pulumi/pulumi/issues/21670 ">#21670</a>)</li>
<li><a
href="179a175ab1https://redirect.github.com/pulumi/pulumi/issues/21660 ">#21660</a>)</li>
<li><a
href="ea80033453https://redirect.github.com/pulumi/pulumi/issues/21631 ">#21631</a>)</li>
<li><a
href="1863748227https://redirect.github.com/pulumi/pulumi/issues/21652 ">#21652</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.218.0...v3.219.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 12:02:48 +02:00
dependabot[bot]
545c4c8c15
build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0 ( #939 )
...
Bumps
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
from 0.61.0 to 0.62.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>Release v1.40.0/v0.62.0/v0.16.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>. This stabilizes the
synchronous instrument enabled feature, allowing users to check if an
instrument will process measurements before performing computationally
expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="298cbedf25/semconv/v1.39.0/MIGRATION.mdhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. This
prevents scrape failures when the Prometheus exporter is misconfigured
to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update opentelemetry-go monorepo to v0.15.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7690 ">open-telemetry/opentelemetry-go#7690</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7689 ">open-telemetry/opentelemetry-go#7689</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7691 ">open-telemetry/opentelemetry-go#7691</a></li>
<li>prometheus exporter ignores metrics from the Prometheus bridge by <a
href="https://github.com/dashpole "><code>@dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7688 ">open-telemetry/opentelemetry-go#7688</a></li>
<li>chore(deps): update codecov/codecov-action action to v5.5.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7693 ">open-telemetry/opentelemetry-go#7693</a></li>
<li>fix(deps): update golang.org/x to 8475f28 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7692 ">open-telemetry/opentelemetry-go#7692</a></li>
<li>chore(deps): update github.com/securego/gosec/v2 digest to b6eea26
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7694 ">open-telemetry/opentelemetry-go#7694</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.22.11
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7696 ">open-telemetry/opentelemetry-go#7696</a></li>
<li>Use sync.Map and atomics for fixed bucket histograms by <a
href="https://github.com/dashpole "><code>@dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7474 ">open-telemetry/opentelemetry-go#7474</a></li>
<li>chore(deps): update actions/cache action to v5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7701 ">open-telemetry/opentelemetry-go#7701</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.20.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7698 ">open-telemetry/opentelemetry-go#7698</a></li>
<li>fix(deps): update module google.golang.org/protobuf to v1.36.11 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7704 ">open-telemetry/opentelemetry-go#7704</a></li>
<li>chore(deps): update github/codeql-action action to v4.31.8 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7703 ">open-telemetry/opentelemetry-go#7703</a></li>
<li>sdk/log: improve Processor documentation by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7695 ">open-telemetry/opentelemetry-go#7695</a></li>
<li>chore(deps): update github artifact actions (major) by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7707 ">open-telemetry/opentelemetry-go#7707</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.61.0...exporters/prometheus/v0.62.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 12:01:52 +02:00
dependabot[bot]
2959e0f9c1
build(deps): bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0 ( #929 )
...
Bumps
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-05 12:45:33 +02:00
dependabot[bot]
7ac2b8de49
build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.39.0 to 1.40.0 ( #928 )
...
Bumps
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-05 12:45:10 +02:00
dependabot[bot]
1da48694b9
build(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.40.0 ( #927 )
...
Bumps
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:33:16 +02:00
dependabot[bot]
cffac199b6
build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 ( #922 )
...
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt )
from 5.3.0 to 5.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang-jwt/jwt/releases ">github.com/golang-jwt/jwt/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🔐 Features</h3>
<ul>
<li>Add spellcheck Github action to catch common spelling mistakes by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458 ">golang-jwt/jwt#458</a></li>
<li>Add <code>WithNotBeforeRequired</code> parser option and add test
coverage by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/456 ">golang-jwt/jwt#456</a></li>
<li>Update godoc example func to properly refer to
<code>NewWithClaims()</code> by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/459 ">golang-jwt/jwt#459</a></li>
<li>Update github workflows by <a
href="https://github.com/mfridman "><code>@mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/462 ">golang-jwt/jwt#462</a></li>
<li>Additional test for CustomClaims that validates unmarshalling
behaviour by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/457 ">golang-jwt/jwt#457</a></li>
<li>Fix early file close in jwt cli by <a
href="https://github.com/mfridman "><code>@mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/472 ">golang-jwt/jwt#472</a></li>
<li>Add TPM signature reference by <a
href="https://github.com/salrashid123 "><code>@salrashid123</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473 ">golang-jwt/jwt#473</a></li>
<li>Remove misleading ParserOptions documentation in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/484 ">golang-jwt/jwt#484</a></li>
<li>Save signature to Token struct after successful signing by <a
href="https://github.com/EgorSheff "><code>@EgorSheff</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417 ">golang-jwt/jwt#417</a></li>
<li>Set token.Signature in <code>ParseUnverified</code> by <a
href="https://github.com/slickwilli "><code>@slickwilli</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414 ">golang-jwt/jwt#414</a></li>
</ul>
<h3>👒 Dependencies</h3>
<ul>
<li>Bump crate-ci/typos from 1.34.0 to 1.35.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/461 ">golang-jwt/jwt#461</a></li>
<li>Bump crate-ci/typos from 1.35.4 to 1.36.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/470 ">golang-jwt/jwt#470</a></li>
<li>Bump github/codeql-action from 3 to 4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/478 ">golang-jwt/jwt#478</a></li>
<li>Bump crate-ci/typos from 1.36.2 to 1.39.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/480 ">golang-jwt/jwt#480</a></li>
<li>Bump golangci/golangci-lint-action from 8 to 9 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/481 ">golang-jwt/jwt#481</a></li>
<li>Bump actions/setup-go from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/469 ">golang-jwt/jwt#469</a></li>
<li>Bump crate-ci/typos from 1.39.0 to 1.40.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/488 ">golang-jwt/jwt#488</a></li>
<li>Bump actions/checkout from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/487 ">golang-jwt/jwt#487</a></li>
<li>Bump crate-ci/typos from 1.40.0 to 1.41.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/490 ">golang-jwt/jwt#490</a></li>
<li>Bump crate-ci/typos from 1.41.0 to 1.42.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/492 ">golang-jwt/jwt#492</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458 ">golang-jwt/jwt#458</a></li>
<li><a
href="https://github.com/salrashid123 "><code>@salrashid123</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473 ">golang-jwt/jwt#473</a></li>
<li><a href="https://github.com/EgorSheff "><code>@EgorSheff</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417 ">golang-jwt/jwt#417</a></li>
<li><a
href="https://github.com/slickwilli "><code>@slickwilli</code></a> made
their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414 ">golang-jwt/jwt#414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 ">https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7ceae619e7dce8e4dddchttps://redirect.github.com/golang-jwt/jwt/issues/414 ">#414</a>)</li>
<li><a
href="8889e208aahttps://redirect.github.com/golang-jwt/jwt/issues/417 ">#417</a>)</li>
<li><a
href="d237f8204bd8dce95a40https://redirect.github.com/golang-jwt/jwt/issues/492 ">#492</a>)</li>
<li><a
href="e93180329ehttps://redirect.github.com/golang-jwt/jwt/issues/490 ">#490</a>)</li>
<li><a
href="e6a0afa839https://redirect.github.com/golang-jwt/jwt/issues/487 ">#487</a>)</li>
<li><a
href="9f85c9ec9fhttps://redirect.github.com/golang-jwt/jwt/issues/488 ">#488</a>)</li>
<li><a
href="60a8669e02https://redirect.github.com/golang-jwt/jwt/issues/469 ">#469</a>)</li>
<li><a
href="76f582896dhttps://redirect.github.com/golang-jwt/jwt/issues/484 ">#484</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:32:51 +02:00
dependabot[bot]
4248d135b7
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.217.1 to 3.218.0 in /deploy ( #924 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.217.1 to 3.218.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.218.0</h2>
<h2>3.218.0 (2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/nodejs] Add support for the <code>OnError</code> resource
hook</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again</p>
</li>
<li>
<p>[cli/install] Correctly include git forge organizations as schema
namespaces when generating SDKs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21579 ">#21579</a></p>
</li>
<li>
<p>[cli/{install,package}] Correctly grab package names for Python &
NodeJS
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21577 ">#21577</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.218.0 (2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/nodejs] Add support for the <code>OnError</code> resource
hook</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow positional arguments to be passed to <code>convert</code>
again</p>
</li>
<li>
<p>[cli/install] Correctly include git forge organizations as schema
namespaces when generating SDKs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21579 ">#21579</a></p>
</li>
<li>
<p>[cli/{install,package}] Correctly grab package names for Python &
NodeJS
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21577 ">#21577</a></p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="da9b84347bhttps://redirect.github.com/pulumi/pulumi/issues/21603 ">#21603</a>)</li>
<li><a
href="d94b6a69e2https://redirect.github.com/pulumi/pulumi/issues/21568 ">#21568</a>)</li>
<li><a
href="6ae181792fhttps://redirect.github.com/pulumi/pulumi/issues/21591 ">#21591</a>)</li>
<li><a
href="e885bf3653https://redirect.github.com/pulumi/pulumi/issues/21601 ">#21601</a>)</li>
<li><a
href="059066063ehttps://redirect.github.com/pulumi/pulumi/issues/21590 ">#21590</a>)</li>
<li><a
href="d186b46c6fhttps://redirect.github.com/pulumi/pulumi/issues/21584 ">#21584</a>)</li>
<li><a
href="9074f6b351https://redirect.github.com/pulumi/pulumi/issues/21589 ">#21589</a>)</li>
<li><a
href="16ad3edd5ahttps://redirect.github.com/pulumi/pulumi/issues/21597 ">#21597</a>)</li>
<li><a
href="5b2e34bcd4https://redirect.github.com/pulumi/pulumi/issues/21587 ">#21587</a>)</li>
<li><a
href="aed72b3e76https://redirect.github.com/pulumi/pulumi/issues/21588 ">#21588</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.217.1...v3.218.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:32:15 +02:00
dependabot[bot]
8e0af8d82b
build(deps): bump the actions group across 1 directory with 2 updates ( #933 )
...
Bumps the actions group with 2 updates in the / directory:
[docker/login-action](https://github.com/docker/login-action ) and
[anchore/sbom-action](https://github.com/anchore/sbom-action ).
Updates `docker/login-action` from 3.6.0 to 3.7.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases ">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v3.7.0</h2>
<ul>
<li>Add <code>scope</code> input to set scopes for the authentication
token by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/912 ">docker/login-action#912</a></li>
<li>Add support for AWS European Sovereign Cloud ECR by <a
href="https://github.com/dphi "><code>@dphi</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/914 ">docker/login-action#914</a></li>
<li>Ensure passwords are redacted with <code>registry-auth</code> input
by <a href="https://github.com/crazy-max "><code>@crazy-max</code></a>
in <a
href="https://redirect.github.com/docker/login-action/pull/911 ">docker/login-action#911</a></li>
<li>build(deps): bump lodash from 4.17.21 to 4.17.23 in <a
href="https://redirect.github.com/docker/login-action/pull/915 ">docker/login-action#915</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.6.0...v3.7.0 ">https://github.com/docker/login-action/compare/v3.6.0...v3.7.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c94ce9fb46https://redirect.github.com/docker/login-action/issues/915 ">#915</a>
from docker/dependabot/npm_and_yarn/lodash-4.17.23</li>
<li><a
href="8339c958cehttps://redirect.github.com/docker/login-action/issues/912 ">#912</a>
from docker/scope</li>
<li><a
href="c83e9320c8b268aa57e3a6032292787567f92a740567fa5ae8https://redirect.github.com/docker/login-action/issues/914 ">#914</a>
from dphi/add-support-for-amazonaws.eu</li>
<li><a
href="f6ef577545916386b000https://redirect.github.com/docker/login-action/issues/911 ">#911</a>
from crazy-max/ensure-redact</li>
<li><a
href="5b3f94a2945e57cd1181...c94ce9fb46https://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.2</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): bump fast-xml-parser from 5.3.3 to 5.3.4 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/581 ">#581</a>)
[@<a href="https://github.com/apps/dependabot ">dependabot[bot]</a>]</li>
<li>chore(deps): update Syft to v1.41.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/582 ">#582</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps-dev): bump the dev-dependencies group with 2 updates (<a
href="https://redirect.github.com/anchore/sbom-action/issues/580 ">#580</a>)
[@<a href="https://github.com/apps/dependabot ">dependabot[bot]</a>]</li>
<li>chore(deps): update Syft to v1.41.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/579 ">#579</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="28d71544dehttps://redirect.github.com/anchore/sbom-action/issues/581 ">#581</a>)</li>
<li><a
href="5e3583419ahttps://redirect.github.com/anchore/sbom-action/issues/582 ">#582</a>)</li>
<li><a
href="a30a06a2cehttps://redirect.github.com/anchore/sbom-action/issues/580 ">#580</a>)</li>
<li><a
href="750e84c055https://redirect.github.com/anchore/sbom-action/issues/579 ">#579</a>)</li>
<li><a
href="5620efe7f1https://redirect.github.com/anchore/sbom-action/issues/578 ">#578</a>)</li>
<li><a
href="ec824c76adhttps://redirect.github.com/anchore/sbom-action/issues/577 ">#577</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.1...v0.22.2 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:31:42 +02:00
dependabot[bot]
d33b3f5ece
build(deps): bump go.opentelemetry.io/otel/metric from 1.39.0 to 1.40.0 ( #930 )
...
Bumps
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:31:21 +02:00
Radoslav Dimitrov
c25e88d6f3
Resolve vulnerability warnings by bumping Go to 1.24.12 ( #934 )
...
<!-- Provide a brief summary of your changes -->
The following PR fixes the failing validation checks on our CI.
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:24:17 +02:00
Bob Dickinson
f06d1eda8a
Added /validate endpoint and modified mcp-publish so that all validation happens there ( #896 )
...
## Motivation and Context
Per discussion with @rdimitrov - all validation now happens in a new
`/validate` endpoint. For details, see below.
## Breaking Changes
None. Validation on /publish only validates schema version and semantic
checks (manual checks) as before. We can add schema validation by
changing a flag in the called to `ValidateJSONSchema` when we're ready.
## Types of changes
- [X] New feature (non-breaking change which adds functionality)
## Checklist
- [X] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [X] My code follows the repository's style guidelines
- [X] New and existing tests pass locally
- [X] I have added appropriate error handling
- [X] I have added or updated documentation as needed
## Additional context
## API Changes
### 1. New `/validate` Endpoint
A new public endpoint was added for validating `server.json` files
without publishing them.
**Details:**
- **Paths:** `/v0/validate` and `/v0.1/validate`
- **Method:** `POST`
- **Authentication:** None required (public endpoint)
- **Request:** JSON body containing `ServerJSON`
- **Response:** `200 OK` with `ValidationResult` containing:
- `valid` (boolean)
- `issues` (array of validation issues with type, path, message,
severity, reference)
**Implementation:**
- New handler file: `internal/api/handlers/v0/validate.go`
- Performs comprehensive validation using `ValidationAll` option:
- Schema version validation
- Full schema validation
- Semantic validation
- Always returns `200 OK` - validity is indicated in `result.Valid`
field
- Registered in router for both `/v0` and `/v0.1` prefixes
### 2. `/publish` Endpoint Validation Flow Changes
The publish endpoint now validates earlier in the request flow and
provides clearer error responses.
**Before:** Validation was mixed into `ValidatePublishRequest()` (which
also handled publisher extensions and registry ownership).
**After:**
1. Validates `ServerJSON` structure first using `ValidateServerJSON()`
(schema version + semantic validation)
2. Returns `422 Unprocessable Entity` with message: "Failed to publish
server, invalid schema: call /validate for details"
3. Only proceeds to publisher extensions/registry validation if schema
validation passes
4. No longer calls `ValidatePublishRequest()` internally for schema
validation
**Key Changes:**
- Validation happens before `CreateServer()` call
- Returns `422` on schema/semantic validation failures
- Error message directs users to `/validate` endpoint for details
- `ValidatePublishRequest()` no longer performs schema validation (added
note in comments)
### 3. `/edit` Endpoint Validation Flow Changes
Similar validation changes were applied to the edit endpoint.
**Changes:**
- Added `ValidateServerJSON()` call before server update
- Returns `422` with same error message format on validation failure
- Matches the `/publish` endpoint behavior
### 4. Validator Functions Refactoring
Updated validator functions to reflect that schema validation is now
done separately.
**Changes to `ValidatePublishRequest()`:**
- Removed internal `ValidateServerJSON()` call
- Added note: "ValidateServerJSON should be called separately before
this function"
- Now only validates publisher extensions and registry ownership
**Changes to `ValidateUpdateRequest()`:**
- Same change (removed schema validation, added note)
- Now only validates registry ownership
## CLI Changes
### 1. `validate` Command: Now Uses API Endpoint
**Before:** Performed local validation using
`validators.ValidateServerJSON()`.
**After:** Calls the `/v0/validate` endpoint on the registry.
**Details:**
- Reads `server.json` and sends it to the registry API
- Displays validation results returned by the server
- Uses the same error formatting as before
- Registry URL comes from token file (or default)
- No authentication required (public endpoint)
**Implementation:**
- Added `validateViaAPI()` function that POSTs to `/v0/validate`
- Parses `ValidationResult` response from server
- Uses shared `printValidationIssues()` for formatting
### 2. `publish` Command: Validation Only on 422 Errors
**Before:** Performed upfront local schema validation before publishing.
**After:** Attempts publish first, then validates only if server returns
422.
**Details:**
- Attempts publish immediately (no upfront validation)
- If publish returns 422 (Unprocessable Entity):
- Calls `/v0/validate` endpoint to get detailed validation errors
- Formats and displays them using same logic as `validate` command
- Returns error with migration links
- For non-422 errors (401, 403, etc.), returns original error (no
validation call)
**Implementation Changes:**
- Removed upfront `runValidationAndPrintIssues()` call
- Modified `publishToRegistry()` to return HTTP status code alongside
response/error
- Added 422 detection logic that calls `validateViaAPI()`
### 3. Shared Validation Error Formatting
**Before:** `runValidationAndPrintIssues()` function handled both
validation and printing together.
**After:** Refactored to separate printing logic.
**Details:**
- Created `printValidationIssues()` function - just prints validation
issues (no validation logic)
- Removed `runValidationAndPrintIssues()` function (no longer used)
- Both `validate` and `publish` commands use `printValidationIssues()`
for consistent output
**Behavior:**
- Prints schema validation errors with migration guidance
- Prints all other validation issues with formatting
- Returns formatted error message string for schema issues
## Summary
Both CLI commands now use the `/validate` API endpoint for validation
instead of local validation. The `publish` command validates only after
receiving a 422 error response, and both commands share the same error
formatting via `printValidationIssues()`.
### Benefits
- **Centralized validation logic** - All validation happens on the
server
- **Always up-to-date** - CLI always uses current server validation
rules
- **Consistent experience** - Same validation behavior whether using CLI
or API directly
- **Better separation of concerns** - Schema validation separated from
publisher-specific validation
2026-02-04 15:52:07 +02:00
dependabot[bot]
dc73689210
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.216.0 to 3.217.1 in /deploy ( #919 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.216.0 to 3.217.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.217.1</h2>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515 ">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549 ">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548 ">#21548</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1 ">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1 </a></p>
<h2>v3.217.0</h2>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462 ">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291 ">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368 ">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478 ">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430 ">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514 ">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.217.1 (2026-01-27)</h2>
<h3>Features</h3>
<ul>
<li>[sdk/go] Add support for the <code>OnError</code> resource hook
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21515 ">#21515</a></li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli/install] Copy files when linking to be robust to copying across
file partitions
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549 ">#21549</a></p>
</li>
<li>
<p>[cli/install] Do not double install plugins with explicit
parameterizations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21548 ">#21548</a></p>
</li>
<li>
<p>[cli/install] Copy files when linking instead of renaming
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21549 ">#21549</a></p>
</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1 ">https://github.com/pulumi/pulumi/compare/v3.217.0...v3.217.1 </a></p>
<h2>3.217.0 (2026-01-23)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Extract organization, team, and user from OIDC JWT claims
during login
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21462 ">#21462</a></p>
</li>
<li>
<p>[engine] Add the <code>OnError</code> resource hook to allow for
custom retry policies
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21291 ">#21291</a></p>
</li>
<li>
<p>[cli/engine] Add --plan up flag
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21368 ">#21368</a></p>
</li>
<li>
<p>[sdk/nodejs] Add requirePulumiVersion to the Node.js SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21478 ">#21478</a></p>
</li>
<li>
<p>[sdk/python] Add require_pulumi_version to the Python SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21430 ">#21430</a></p>
</li>
<li>
<p>[sdk/go] Add CheckPulumiVersion to the Go SDK
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21528 ">#21528</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21514 ">#21514</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="381f23bab0https://redirect.github.com/pulumi/pulumi/issues/21556 ">#21556</a>)</li>
<li><a
href="0b1bfabbd6https://redirect.github.com/pulumi/pulumi/issues/21559 ">#21559</a>)</li>
<li><a
href="de8f97e80ehttps://redirect.github.com/pulumi/pulumi/issues/21558 ">#21558</a>)</li>
<li><a
href="4bcb1d4046https://redirect.github.com/pulumi/pulumi/issues/21552 ">#21552</a>)</li>
<li><a
href="8e23ef0108https://redirect.github.com/pulumi/pulumi/issues/21554 ">#21554</a>)</li>
<li><a
href="c571535c8398192921a5https://redirect.github.com/pulumi/pulumi/issues/21367 ">#21367</a>)</li>
<li><a
href="683b6f63cbhttps://redirect.github.com/pulumi/pulumi/issues/21549 ">#21549</a>)</li>
<li><a
href="b2ecd0eb63https://redirect.github.com/pulumi/pulumi/issues/21515 ">#21515</a>)</li>
<li><a
href="16713d0b23https://redirect.github.com/pulumi/pulumi/issues/21548 ">#21548</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.216.0...v3.217.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 11:56:20 +02:00
dependabot[bot]
f1dbb060c8
build(deps): bump anchore/sbom-action from 0.22.0 to 0.22.1 in the actions group ( #920 )
...
Bumps the actions group with 1 update:
[anchore/sbom-action](https://github.com/anchore/sbom-action ).
Updates `anchore/sbom-action` from 0.22.0 to 0.22.1
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.22.1</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): update Syft to v1.41.0 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/576 ">#576</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps): bump lodash from 4.17.21 to 4.17.23 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/573 ">#573</a>)
[@<a href="https://github.com/apps/dependabot ">dependabot[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="deef08a0dbhttps://redirect.github.com/anchore/sbom-action/issues/576 ">#576</a>)</li>
<li><a
href="f139ded77ahttps://redirect.github.com/anchore/sbom-action/issues/573 ">#573</a>)</li>
<li><a
href="1b05262535https://redirect.github.com/anchore/sbom-action/issues/575 ">#575</a>)</li>
<li><a
href="1e8f28d002https://redirect.github.com/anchore/sbom-action/issues/574 ">#574</a>)</li>
<li><a
href="c618dc7fb6https://redirect.github.com/anchore/sbom-action/issues/572 ">#572</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.0...v0.22.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-28 11:55:59 +02:00
dependabot[bot]
Radoslav Dimitrov
Jonathan Hefner
Tadas Antanavicius
Preeti Dewani
Den Delimarsky
deerajkumar18
Bob Dickinson