Yusufhan Saçak
8df5a7711d
fix(publisher): omit repository when URL cannot be detected ( #1149 )
...
## Summary
When `detectRepoURL()` cannot determine the repository (no git remote,
no package.json repository field), return an empty string instead of a
placeholder URL (`https://github.com/YOUR_USERNAME/YOUR_REPO `). This
causes `createServerJSON()` to omit the `repository` field entirely,
preventing schema validation failures on publish.
Fixes #613
## Problem
`mcp-publisher init` generated a `repository` object with a placeholder
URL that fails the `uri` format validation on publish. 88 published
servers in the official registry had this issue.
## Change
- `cmd/publisher/commands/init.go`: `detectRepoURL()` returns `""`
instead of placeholder when no repo is found
- The existing guard in `createServerJSON()` (`if repoURL != "" &&
repoSource != ""`) already handles this correctly — it omits the
repository when URL is empty
## Test plan
- [x] `go build ./cmd/publisher/...` compiles
- [x] `go test ./cmd/publisher/commands/...` passes
- [ ] Manual: `mcp-publisher init` in a directory without git remote or
package.json repo — verify no `repository` field in generated
server.json
- [ ] Manual: `mcp-publisher init` in a git repo — verify `repository`
is populated correctly
## AI Disclosure
AI assistance (Claude) was used for issue research. The implementation
was written and reviewed by the author.
2026-04-15 07:16:23 -04:00
Radoslav Dimitrov
90baa0528f
fix: store tokens in ~/.config/mcp-publisher/ instead of cwd ( #1166 )
...
## Summary
Fixes #663
- **Security fix**: `mcp-publisher login` no longer writes
`.mcpregistry_github_token` and `.mcpregistry_registry_token` to the
current working directory. GitHub tokens are kept in memory during the
login→exchange flow and cleared immediately after.
- **Token location**: Unified token moved from `~/.mcp_publisher_token`
to `~/.config/mcp-publisher/token.json` (dir 0700, file 0600), following
the convention used by `gh`, `docker`, and `kubectl`.
- **Dead code removed**: `NeedsLogin()` was on the `Provider` interface
but never called — removed from interface and all 4 implementations.
`forceLogin` field also removed.
- **Auth tests added**: 11 new tests for `GitHubATProvider` (package
previously had 0 tests).
- **Test isolation**: `SetupTestToken` now uses `t.TempDir()` +
`t.Setenv("HOME", ...)` instead of writing to real `$HOME`.
### Breaking change
Users must re-login after upgrading (`mcp-publisher login <method>`).
Existing tokens at `~/.mcp_publisher_token` are not auto-migrated.
`logout` cleans up both old and new locations.
## Test plan
- [x] `make check` passes (lint, unit tests, integration tests)
- [x] `mcp-publisher login none` stores token at
`~/.config/mcp-publisher/token.json`
- [x] No `.mcpregistry_*` files created in cwd after login (with
`--token`, `MCP_GITHUB_TOKEN`, or device flow)
- [x] `mcp-publisher publish` reads token from new location
- [x] `mcp-publisher validate` reads registry URL from new location
- [x] `mcp-publisher logout` cleans up new location, legacy
`~/.mcp_publisher_token`, and cwd `.mcpregistry_*` files
- [x] `mcp-publisher logout` when not logged in shows "Not logged in"
- [x] File permissions: dir 0700, file 0600
🤖 Generated with [Claude Code](https://claude.com/claude-code )
---------
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-15 03:23:07 -04:00
dependabot[bot]
77bbd41fd3
build(deps): bump actions/upload-artifact from 7.0.0 to 7.0.1 in the actions group ( #1154 )
2026-04-14 05:20:05 -04:00
dependabot[bot]
0c5dde243b
build(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 ( #1162 )
2026-04-14 05:19:36 -04:00
dependabot[bot]
1e83267610
build(deps): bump cloud.google.com/go/kms from 1.27.0 to 1.29.0 ( #1163 )
2026-04-14 05:19:09 -04:00
dependabot[bot]
07fa85f68b
build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 ( #1140 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc )
from 3.17.0 to 3.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coreos/go-oidc/releases ">github.com/coreos/go-oidc/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>.github: configure dependabot by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/477 ">coreos/go-oidc#477</a></li>
<li>.github: update go versions in CI by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/480 ">coreos/go-oidc#480</a></li>
<li>build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/coreos/go-oidc/pull/478 ">coreos/go-oidc#478</a></li>
<li>build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/coreos/go-oidc/pull/479 ">coreos/go-oidc#479</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 ">https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="da6b3bfca87f806942157271de57583ccf20fdc4https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 18:16:23 -04:00
dependabot[bot]
fbea08a348
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.229.0 to 3.230.0 in /deploy ( #1141 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.229.0 to 3.230.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.230.0</h2>
<h2>3.230.0 (2026-04-08)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Detect AI agents and send in update metadata
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22497 ">#22497</a></p>
</li>
<li>
<p>[auto/nodejs] Add "org" commands (get-default, set-default,
search, search ai) to the auto-generated interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22395 ">#22395</a></p>
</li>
<li>
<p>[auto/nodejs] Add "new" command to the auto-generated
interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22421 ">#22421</a></p>
</li>
<li>
<p>[sdk/{nodejs,python}] Add Cancel handler to Python & Node.js
providers
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22516 ">#22516</a></p>
</li>
<li>
<p>[cli/policy] Add ESC environment resolution for policy packs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22425 ">#22425</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[auto/go] Insert --non-interactive flag before "--"
positional separator to avoid misinterpretation as a positional argument
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22462 ">#22462</a></p>
</li>
<li>
<p>[ci] Add code coverage collection for Node.js automation tools tests
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22412 ">#22412</a></p>
</li>
<li>
<p>[pcl] Allow key indexing into a map of resources created by range
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22498 ">#22498</a></p>
</li>
<li>
<p>[programgen/go] Fix an issue with formatted index modules not
importing correctly</p>
</li>
<li>
<p>[cli/state] Check for Pulumi.yaml projects and <code>backend</code>
option in <code>state upgrade</code>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22483 ">#22483</a></p>
</li>
<li>
<p>[sdk/go] Fix Go program generation for ternary expressions inside
apply callbacks, add Go predeclared identifiers to reserved words,
handle optional list types in union type codegen, and fix
unmarshalOutput for known outputs with null elements.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22460 ">#22460</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix inherited input properties missing from component
schema when args interface extends another interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22446 ">#22446</a></p>
</li>
<li>
<p>[sdk/python] Fix inherited input properties missing from component
schema when args class inherits from a base class
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22484 ">#22484</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ae2e269861https://redirect.github.com/pulumi/pulumi/issues/22526 ">#22526</a>)</li>
<li><a
href="28d3f9c3b8https://redirect.github.com/pulumi/pulumi/issues/22505 ">#22505</a>)</li>
<li><a
href="dc6881aa75https://redirect.github.com/pulumi/pulumi/issues/22528 ">#22528</a>)</li>
<li><a
href="cb231c1819https://redirect.github.com/pulumi/pulumi/issues/22525 ">#22525</a>)</li>
<li><a
href="3809a4c60chttps://redirect.github.com/pulumi/pulumi/issues/22516 ">#22516</a>)</li>
<li><a
href="b4e628b543https://redirect.github.com/pulumi/pulumi/issues/22493 ">#22493</a>)</li>
<li><a
href="f6ae330abbhttps://redirect.github.com/pulumi/pulumi/issues/22425 ">#22425</a>)</li>
<li><a
href="14b0963afehttps://redirect.github.com/pulumi/pulumi/issues/22517 ">#22517</a>)</li>
<li><a
href="2e60a39033https://redirect.github.com/pulumi/pulumi/issues/22514 ">#22514</a>)</li>
<li><a
href="5da6fcb0d3https://redirect.github.com/pulumi/pulumi/issues/22460 ">#22460</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.229.0...v3.230.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:20:55 -04:00
dependabot[bot]
83f8ea7cff
build(deps): bump go.opentelemetry.io/otel/sdk from 1.41.0 to 1.43.0 in /deploy ( #1139 )
...
Bumps
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
from 1.41.0 to 1.43.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.43.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:20:33 -04:00
dependabot[bot]
607d52ff20
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 ( #1114 )
...
Bumps
[github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from
4.1.3 to 4.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/releases ">github.com/go-jose/go-jose/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.4</h2>
<h2>What's Changed</h2>
<p>Fixes Panic in JWE decryption. See <a
href="https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 ">https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 </a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 ">https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0e59876635ddffdbcec8https://redirect.github.com/go-jose/go-jose/issues/213 ">#213</a>)</li>
<li>See full diff in <a
href="https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:20:12 -04:00
dependabot[bot]
5f81cf3336
build(deps): bump cloud.google.com/go/kms from 1.26.0 to 1.27.0 ( #1111 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.26.0 to 1.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>kms: v1.27.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.26.0...kms/v1.27.0 ">v1.27.0</a>
(2026-04-02)</h2>
<h2>retail: v1.27.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.26.0...retail/v1.27.0 ">v1.27.0</a>
(2026-04-02)</h2>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.26.1...documentai/v1.27.0 ">1.27.0</a>
(2024-04-15)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Support a new Layout Processor in
Document AI (<a
href="2cdc40a0b4https://github.com/googleapis/google-cloud-go/compare/documentai/v1.26.0...documentai/v1.26.1 ">1.26.1</a>
(2024-03-14)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Update protobuf dep to v1.33.0 (<a
href="30b038d8ca25c3f2dfcfb64e8dcf0ahttps://redirect.github.com/googleapis/google-cloud-go/issues/13116 ">#13116</a>)</li>
<li><a
href="ddc086c9e3c79db96ce2https://redirect.github.com/googleapis/google-cloud-go/issues/13101 ">#13101</a>)</li>
<li><a
href="b041315902https://redirect.github.com/googleapis/google-cloud-go/issues/13112 ">#13112</a>)</li>
<li><a
href="a75de408e8https://redirect.github.com/googleapis/google-cloud-go/issues/13110 ">#13110</a>)</li>
<li><a
href="3cf5269fachttps://redirect.github.com/googleapis/google-cloud-go/issues/13109 ">#13109</a>)</li>
<li><a
href="7663fdce36https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="8ebb89625chttps://redirect.github.com/googleapis/google-cloud-go/issues/13107 ">#13107</a>)</li>
<li><a
href="befb302203https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="1930511848https://redirect.github.com/googleapis/google-cloud-go/issues/13089 ">#13089</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.26.0...dlp/v1.27.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:19:50 -04:00
Radoslav Dimitrov
0fc4606be2
Stop pinning Go to patch versions, use stable in CI ( #1137 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
We keep bumping `go 1.26.x` across the repo every time a new Go patch
drops
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
- **`go.mod` / `deploy/go.mod`**: `go 1.25.8` → `go 1.26` (minor only —
"this module needs Go 1.26")
- **All CI workflows**: `go-version-file: 'go.mod'` → `go-version:
'stable'` — CI always uses the latest stable Go, no more
bump PRs
- **govulncheck**: removed hardcoded `go-version-input: '1.26.1'` →
`go-version-input: 'stable'`
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 11:57:21 -04:00
dependabot[bot]
9b32a5c187
build(deps): bump docker/login-action from 4.0.0 to 4.1.0 in the actions group ( #1113 )
...
Bumps the actions group with 1 update:
[docker/login-action](https://github.com/docker/login-action ).
Updates `docker/login-action` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/login-action/releases ">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<ul>
<li>Fix scoped Docker Hub cleanup path when registry is omitted by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/945 ">docker/login-action#945</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> and
<code>@aws-sdk/client-ecr-public</code> to 3.1020.0 in <a
href="https://redirect.github.com/docker/login-action/pull/930 ">docker/login-action#930</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.77.0 to 0.86.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/932 ">docker/login-action#932</a>
<a
href="https://redirect.github.com/docker/login-action/pull/936 ">docker/login-action#936</a></li>
<li>Bump brace-expansion from 1.1.12 to 1.1.13 in <a
href="https://redirect.github.com/docker/login-action/pull/952 ">docker/login-action#952</a></li>
<li>Bump fast-xml-parser from 5.3.4 to 5.3.6 in <a
href="https://redirect.github.com/docker/login-action/pull/942 ">docker/login-action#942</a></li>
<li>Bump flatted from 3.3.3 to 3.4.2 in <a
href="https://redirect.github.com/docker/login-action/pull/944 ">docker/login-action#944</a></li>
<li>Bump glob from 10.3.12 to 10.5.0 in <a
href="https://redirect.github.com/docker/login-action/pull/940 ">docker/login-action#940</a></li>
<li>Bump handlebars from 4.7.8 to 4.7.9 in <a
href="https://redirect.github.com/docker/login-action/pull/949 ">docker/login-action#949</a></li>
<li>Bump http-proxy-agent and https-proxy-agent to 8.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/937 ">docker/login-action#937</a></li>
<li>Bump lodash from 4.17.23 to 4.18.1 in <a
href="https://redirect.github.com/docker/login-action/pull/958 ">docker/login-action#958</a></li>
<li>Bump minimatch from 3.1.2 to 3.1.5 in <a
href="https://redirect.github.com/docker/login-action/pull/941 ">docker/login-action#941</a></li>
<li>Bump picomatch from 4.0.3 to 4.0.4 in <a
href="https://redirect.github.com/docker/login-action/pull/948 ">docker/login-action#948</a></li>
<li>Bump undici from 6.23.0 to 6.24.1 in <a
href="https://redirect.github.com/docker/login-action/pull/938 ">docker/login-action#938</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v4.0.0...v4.1.0 ">https://github.com/docker/login-action/compare/v4.0.0...v4.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4907a6ddechttps://redirect.github.com/docker/login-action/issues/930 ">#930</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="1e233e691a6c24ead680ee034d7094https://redirect.github.com/docker/login-action/issues/958 ">#958</a>
from docker/dependabot/npm_and_yarn/lodash-4.18.1</li>
<li><a
href="1527209db9https://redirect.github.com/docker/login-action/issues/937 ">#937</a>
from docker/dependabot/npm_and_yarn/proxy-agent-depen...</li>
<li><a
href="d39362aba4a6f092b56860953f0bed62c688590fhttps://redirect.github.com/docker/login-action/issues/936 ">#936</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="102c0e6729b45d80f862...4907a6ddechttps://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=docker/login-action&package-manager=github_actions&previous-version=4.0.0&new-version=4.1.0 )](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:39:37 -04:00
dependabot[bot]
5d0edc97bf
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.228.0 to 3.229.0 in /deploy ( #1112 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.228.0 to 3.229.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.229.0</h2>
<h2>3.229.0 (2026-04-02)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[auto/python] Add org get-default and set-default commands to
Automation API</p>
</li>
<li>
<p>[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22373 ">#22373</a></p>
</li>
<li>
<p>[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22369 ">#22369</a></p>
</li>
<li>
<p>[cli/display] Add <code>--urns</code> flag to display full resource
URNs instead of short names in preview, up, destroy, refresh, import,
and watch commands
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22007 ">#22007</a></p>
</li>
<li>
<p>[pcl] Type integer literals as integers rather than numbers in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22268 ">#22268</a></p>
</li>
<li>
<p>[pcl] Support parameterized providers in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22251 ">#22251</a></p>
</li>
<li>
<p>[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22389 ">#22389</a></p>
</li>
<li>
<p>[yaml] Update YAML runtime to 1.30.2
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22426 ">#22426</a></p>
</li>
<li>
<p>[sdk/go] Add org get-default and set-default commands to Automation
API</p>
</li>
<li>
<p>[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22370 ">#22370</a></p>
</li>
<li>
<p>[cli/policy] Add a new <code>policy analyze</code> command to run a
policy pack against existing state
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22250 ">#22250</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[backend/diy] Remove state lock for refresh --preview-only for diy
backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22385 ">#22385</a></p>
</li>
<li>
<p>[cli] Fix OTEL flushing on provider shutdown
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22358 ">#22358</a></p>
</li>
<li>
<p>[cli/display] Fix deadlock in message renderer when cancelling an
operation
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22433 ">#22433</a></p>
</li>
<li>
<p>[engine] Fix <code>--include</code> and <code>--exclude</code> not
working for program-based refresh (RefreshV2)</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.229.0 (2026-04-02)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[auto/python] Add org get-default and set-default commands to
Automation API</p>
</li>
<li>
<p>[backend/diy] Avoid unnecessary S3 bucket HEAD calls to improve
performance
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22373 ">#22373</a></p>
</li>
<li>
<p>[cli] Allow TRACEPARENT to be set for CLI invocations, parenting the
pulumi spans under an existing parent span
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22369 ">#22369</a></p>
</li>
<li>
<p>[cli/display] Add <code>--urns</code> flag to display full resource
URNs instead of short names in preview, up, destroy, refresh, import,
and watch commands
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22007 ">#22007</a></p>
</li>
<li>
<p>[pcl] Type integer literals as integers rather than numbers in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22268 ">#22268</a></p>
</li>
<li>
<p>[pcl] Support parameterized providers in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22251 ">#22251</a></p>
</li>
<li>
<p>[protobuf] Add RunPlugin2 bidirectional streaming RPC to
LanguageRuntime proto
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22389 ">#22389</a></p>
</li>
<li>
<p>[yaml] Update YAML runtime to 1.30.2
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22426 ">#22426</a></p>
</li>
<li>
<p>[sdk/go] Add org get-default and set-default commands to Automation
API</p>
</li>
<li>
<p>[sdk/nodejs] Modernize generated tsconfig.json to align with
TypeScript defaults
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22370 ">#22370</a></p>
</li>
<li>
<p>[cli/policy] Add a new <code>policy analyze</code> command to run a
policy pack against existing state
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22250 ">#22250</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[backend/diy] Remove state lock for refresh --preview-only for diy
backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22385 ">#22385</a></p>
</li>
<li>
<p>[cli] Fix OTEL flushing on provider shutdown
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22358 ">#22358</a></p>
</li>
<li>
<p>[cli/display] Fix deadlock in message renderer when cancelling an
operation
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22433 ">#22433</a></p>
</li>
<li>
<p>[engine] Fix <code>--include</code> and <code>--exclude</code> not
working for program-based refresh (RefreshV2)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22404 ">#22404</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4a1e067a15https://redirect.github.com/pulumi/pulumi/issues/22436 ">#22436</a>)</li>
<li><a
href="40fd96368bhttps://redirect.github.com/pulumi/pulumi/issues/22445 ">#22445</a>)</li>
<li><a
href="5a26c3e545https://redirect.github.com/pulumi/pulumi/issues/22376 ">#22376</a>)</li>
<li><a
href="24ff624010https://redirect.github.com/pulumi/pulumi/issues/22444 ">#22444</a>)</li>
<li><a
href="1bf3962a77https://redirect.github.com/pulumi/pulumi/issues/22443 ">#22443</a>)</li>
<li><a
href="dea48c63e9https://redirect.github.com/pulumi/pulumi/issues/22433 ">#22433</a>)</li>
<li><a
href="0a0aff442ahttps://redirect.github.com/pulumi/pulumi/issues/22435 ">#22435</a>)</li>
<li><a
href="f80af9ea14https://redirect.github.com/pulumi/pulumi/issues/22429 ">#22429</a>)</li>
<li><a
href="f94eb08ebahttps://redirect.github.com/pulumi/pulumi/issues/22437 ">#22437</a>)</li>
<li><a
href="11ebea5709https://github.com/pulumi/pulumi/compare/v3.228.0...v3.229.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:38:52 -04:00
dependabot[bot]
53af38ee38
build(deps): bump the opentelemetry group across 1 directory with 6 updates ( #1134 )
...
Bumps the opentelemetry group with 2 updates in the / directory:
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
and
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go ).
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.67.0 to 0.68.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.43.0 / v2.5.0 / v0.68.0 / v0.37.0 / v0.23.0 / v0.18.0 / v0.16.0 /
v0.15.0</h2>
<h2>Added</h2>
<ul>
<li>Add <code>Resource</code> method to <code>SDK</code> in
<code>go.opentelemetry.io/contrib/otelconf/v0.3.0</code> to expose the
resolved SDK resource from declarative configuration. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8660 ">#8660</a>)</li>
<li>Add support to set the configuration file via
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
<li>Add support for <code>service</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8674 ">#8674</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in tracer provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8687 ">#8687</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in logger provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8686 ">#8686</a>)</li>
<li>Add support for <code>server.address</code> and
<code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
<li>Add support for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
Supported values are <code>rpc</code> (default), <code>rpc/dup</code>
and <code>rpc/old</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8726 ">#8726</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8632 ">#8632</a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li>Prepend <code>_</code> to the normalized environment variable name
when the key starts with a digit in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, ensuring
POSIX compliance. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8678 ">#8678</a>)</li>
<li>Move experimental types from
<code>go.opentelemetry.io/contrib/otelconf</code> to
<code>go.opentelemetry.io/contrib/otelconf/x</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li>Normalize cached environment variable names in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, aligning
<code>Carrier.Keys</code> output with the carrier's normalized key
format. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Fix <code>go.opentelemetry.io/contrib/otelconf</code> Prometheus
reader converting OTel dot-style label names (e.g.
<code>service.name</code>) to underscore-style
(<code>service_name</code>) in <code>target_info</code> when both
<code>without_type_suffix</code> and <code>without_units</code> are set.
Use <code>NoTranslation</code> instead of
<code>UnderscoreEscapingWithoutSuffixes</code> to preserve dot-style
label names while still suppressing metric name suffixes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li>Limit the request body size at 1MB in
<code>go.opentelemetry.io/contrib/zpages</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8656 ">#8656</a>)</li>
<li>Fix server spans using the client's address and port for
<code>server.address</code> and <code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
</ul>
<h2>Removed</h2>
<ul>
<li>Host ID resource detector has been removed when configuring the
<code>host</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8581 ">#8581</a>)</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>Deprecate <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> in favour of
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update module github.com/jgautheron/goconst to v1.9.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8651 ">open-telemetry/opentelemetry-go-contrib#8651</a></li>
<li>chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8652 ">open-telemetry/opentelemetry-go-contrib#8652</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to e526e8a by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8647 ">open-telemetry/opentelemetry-go-contrib#8647</a></li>
<li>chore(deps): update module k8s.io/klog/v2 to v2.140.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8650 ">open-telemetry/opentelemetry-go-contrib#8650</a></li>
<li>chore(deps): update module github.com/mgechev/revive to v1.14.0 by
<a href="https://github.com/mmorel-35 "><code>@mmorel-35</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8646 ">open-telemetry/opentelemetry-go-contrib#8646</a></li>
<li>chore(deps): update module github.com/mgechev/revive to v1.15.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8539 ">open-telemetry/opentelemetry-go-contrib#8539</a></li>
<li>chore: fix noctx issues by <a
href="https://github.com/mmorel-35 "><code>@mmorel-35</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8645 ">open-telemetry/opentelemetry-go-contrib#8645</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8655 ">open-telemetry/opentelemetry-go-contrib#8655</a></li>
<li>chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8654 ">open-telemetry/opentelemetry-go-contrib#8654</a></li>
<li>chore(deps): update module github.com/mattn/go-runewidth to v0.0.21
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8653 ">open-telemetry/opentelemetry-go-contrib#8653</a></li>
<li>fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8657 ">open-telemetry/opentelemetry-go-contrib#8657</a></li>
<li>Limit the number of bytes read from the zpages body by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8656 ">open-telemetry/opentelemetry-go-contrib#8656</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8648 ">open-telemetry/opentelemetry-go-contrib#8648</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8661 ">open-telemetry/opentelemetry-go-contrib#8661</a></li>
<li>chore(deps): update github.com/securego/gosec/v2 digest to 8895462
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8663 ">open-telemetry/opentelemetry-go-contrib#8663</a></li>
<li>otelconf: support OTEL_CONFIG_FILE as it is no longer experimental
by <a href="https://github.com/codeboten "><code>@codeboten</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8639 ">open-telemetry/opentelemetry-go-contrib#8639</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8664 ">open-telemetry/opentelemetry-go-contrib#8664</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] -
2026-04-03</h2>
<h3>Added</h3>
<ul>
<li>Add <code>Resource</code> method to <code>SDK</code> in
<code>go.opentelemetry.io/contrib/otelconf/v0.3.0</code> to expose the
resolved SDK resource from declarative configuration. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8660 ">#8660</a>)</li>
<li>Add support to set the configuration file via
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
<li>Add support for <code>service</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8674 ">#8674</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in tracer provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8687 ">#8687</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in logger provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8686 ">#8686</a>)</li>
<li>Add support for <code>server.address</code> and
<code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
<li>Add support for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
Supported values are <code>rpc</code> (default), <code>rpc/dup</code>
and <code>rpc/old</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8726 ">#8726</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8632 ">#8632</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Prepend <code>_</code> to the normalized environment variable name
when the key starts with a digit in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, ensuring
POSIX compliance. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8678 ">#8678</a>)</li>
<li>Move experimental types from
<code>go.opentelemetry.io/contrib/otelconf</code> to
<code>go.opentelemetry.io/contrib/otelconf/x</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li>Normalize cached environment variable names in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, aligning
<code>Carrier.Keys</code> output with the carrier's normalized key
format. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>go.opentelemetry.io/contrib/otelconf</code> Prometheus
reader converting OTel dot-style label names (e.g.
<code>service.name</code>) to underscore-style
(<code>service_name</code>) in <code>target_info</code> when both
<code>without_type_suffix</code> and <code>without_units</code> are set.
Use <code>NoTranslation</code> instead of
<code>UnderscoreEscapingWithoutSuffixes</code> to preserve dot-style
label names while still suppressing metric name suffixes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li>Limit the request body size at 1MB in
<code>go.opentelemetry.io/contrib/zpages</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8656 ">#8656</a>)</li>
<li>Fix server spans using the client's address and port for
<code>server.address</code> and <code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Host ID resource detector has been removed when configuring the
<code>host</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8581 ">#8581</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> in favour of
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="45977a4b9chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8769 ">#8769</a>)</li>
<li><a
href="0fcc1524d1eaba3cdaa1https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8776 ">#8776</a>)</li>
<li><a
href="6df430c480https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8771 ">#8771</a>)</li>
<li><a
href="ae90e3237ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li><a
href="f202c3f800https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li><a
href="8ddaecee1chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8764 ">#8764</a>)</li>
<li><a
href="c7c03a47d4https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8766 ">#8766</a>)</li>
<li><a
href="717a85a203https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
<li><a
href="ad990b6d55https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8765 ">#8765</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.67.0...zpages/v0.68.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.64.0 to
0.65.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.43.0/v0.65.0/v0.19.0</h2>
<h2>Added</h2>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Refactor slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update module github.com/jgautheron/goconst to v1.9.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014 ">open-telemetry/opentelemetry-go#8014</a></li>
<li>fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to 190d7d4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013 ">open-telemetry/opentelemetry-go#8013</a></li>
<li>chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016 ">open-telemetry/opentelemetry-go#8016</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011 ">open-telemetry/opentelemetry-go#8011</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023 ">open-telemetry/opentelemetry-go#8023</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020 ">open-telemetry/opentelemetry-go#8020</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.64.0...exporters/prometheus/v0.65.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opent ...
_Description has been truncated_
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:33:36 -04:00
dependabot[bot]
81bc5ff653
build(deps): bump github.com/google/go-containerregistry from 0.21.3 to 0.21.4 ( #1131 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.21.3 to 0.21.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.4</h2>
<h2>What's Changed</h2>
<ul>
<li>go.mod: do not make a viral minimum go version by <a
href="https://github.com/howardjohn "><code>@howardjohn</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2237 ">google/go-containerregistry#2237</a></li>
<li>Avoid pruning absolute links from extracted and flattened images by
<a href="https://github.com/Subserial "><code>@Subserial</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2241 ">google/go-containerregistry#2241</a></li>
<li>Bump the go-deps group across 3 directories with 5 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2245 ">google/go-containerregistry#2245</a></li>
<li>fix: update to go1.25.8, and use separate .go-version file by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2246 ">google/go-containerregistry#2246</a></li>
<li>Bump CI go version to 1.26.1 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2242 ">google/go-containerregistry#2242</a></li>
<li>Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2240 ">google/go-containerregistry#2240</a></li>
<li>fork distribution client v3 auth-challenge as an internal package
(squashed) by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2248 ">google/go-containerregistry#2248</a></li>
<li>transport: validate Bearer realm URL to prevent SSRF by <a
href="https://github.com/evilgensec "><code>@evilgensec</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2243 ">google/go-containerregistry#2243</a></li>
<li>revert path traversal and symlink escape from <a
href="https://redirect.github.com/google/go-containerregistry/issues/2227 ">#2227</a>
by <a href="https://github.com/Subserial "><code>@Subserial</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2250 ">google/go-containerregistry#2250</a></li>
<li>Fix pkg/v1/google/auth tests for arm64 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2085 ">google/go-containerregistry#2085</a></li>
<li>goreleaser: Update goreleaser config and GH action by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2253 ">google/go-containerregistry#2253</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/evilgensec "><code>@evilgensec</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2243 ">google/go-containerregistry#2243</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 ">https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8813dd0a0https://redirect.github.com/google/go-containerregistry/issues/2253 ">#2253</a>)</li>
<li><a
href="e90447d319https://redirect.github.com/google/go-containerregistry/issues/2085 ">#2085</a>)</li>
<li><a
href="0d0368c2a5https://redirect.github.com/google/go-containerregistry/issues/2250 ">#2250</a>)</li>
<li><a
href="a2f47d4202https://redirect.github.com/google/go-containerregistry/issues/2243 ">#2243</a>)</li>
<li><a
href="19a36cd8c4c612a9b20ahttps://redirect.github.com/google/go-containerregistry/issues/2240 ">#2240</a>)</li>
<li><a
href="8f92f59fd6https://redirect.github.com/google/go-containerregistry/issues/2242 ">#2242</a>)</li>
<li><a
href="c99e7cf68bhttps://redirect.github.com/google/go-containerregistry/issues/2246 ">#2246</a>)</li>
<li><a
href="0794660d72https://redirect.github.com/google/go-containerregistry/issues/2245 ">#2245</a>)</li>
<li><a
href="4cb93aef09https://redirect.github.com/google/go-containerregistry/issues/2241 ">#2241</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:33:17 -04:00
dependabot[bot]
2a6b00dde7
build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 ( #1092 )
...
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) from 5.8.0
to 5.9.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jackc/pgx/blob/master/CHANGELOG.md ">github.com/jackc/pgx/v5's
changelog</a>.</em></p>
<blockquote>
<h1>5.9.1 (March 22, 2026)</h1>
<ul>
<li>Fix: batch result format corruption when using cached prepared
statements (reported by Dirkjan Bussink)</li>
</ul>
<h1>5.9.0 (March 21, 2026)</h1>
<p>This release includes a number of new features such as
SCRAM-SHA-256-PLUS support, OAuth authentication support, and
PostgreSQL protocol 3.2 support.</p>
<p>It significantly reduces the amount of network traffic when using
prepared statements (which are used automatically by
default) by avoiding unnecessary Describe Portal messages. This also
reduces local memory usage.</p>
<p>It also includes multiple fixes for potential DoS due to panic or OOM
if connected to a malicious server that sends
deliberately malformed messages.</p>
<ul>
<li>Require Go 1.25+</li>
<li>Add SCRAM-SHA-256-PLUS support (Adam Brightwell)</li>
<li>Add OAuth authentication support for PostgreSQL 18 (David
Schneider)</li>
<li>Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)</li>
<li>Add tsvector type support (Adam Brightwell)</li>
<li>Skip Describe Portal for cached prepared statements reducing network
round trips</li>
<li>Make LoadTypes query easier to support on "postgres-like"
servers (Jelte Fennema-Nio)</li>
<li>Default empty user to current OS user matching libpq behavior
(ShivangSrivastava)</li>
<li>Optimize LRU statement cache with custom linked list and node
pooling (Mathias Bogaert)</li>
<li>Optimize date scanning by replacing regex with manual parsing
(Mathias Bogaert)</li>
<li>Optimize pgio append/set functions with direct byte shifts (Mathias
Bogaert)</li>
<li>Make RowsAffected faster (Abhishek Chanda)</li>
<li>Fix: Pipeline.Close panic when server sends multiple FATAL errors
(Varun Chawla)</li>
<li>Fix: ContextWatcher goroutine leak (Hank Donnay)</li>
<li>Fix: stdlib discard connections with open transactions in
ResetSession (Jeremy Schneider)</li>
<li>Fix: pipelineBatchResults.Exec silently swallowing lastRows
error</li>
<li>Fix: ColumnTypeLength using BPCharArrayOID instead of BPCharOID</li>
<li>Fix: TSVector text encoding returning nil for valid empty
tsvector</li>
<li>Fix: wrong error messages for Int2 and Int4 underflow</li>
<li>Fix: Numeric nil Int pointer dereference with Valid: true</li>
<li>Fix: reversed strings.ContainsAny arguments in
Numeric.ScanScientific</li>
<li>Fix: message length parsing on 32-bit platforms</li>
<li>Fix: FunctionCallResponse.Decode mishandling of signed result
size</li>
<li>Fix: returning wrong error in configTLS when DecryptPEMBlock fails
(Maxim Motyshen)</li>
<li>Fix: misleading ParseConfig error when default_query_exec_mode is
invalid (Skarm)</li>
<li>Fix: missed Unwatch in Pipeline error paths</li>
<li>Clarify too many failed acquire attempts error message</li>
<li>Better error wrapping with context and SQL statement (Aneesh
Makala)</li>
<li>Enable govet and ineffassign linters (Federico Guerinoni)</li>
<li>Guard against various malformed binary messages (arrays, hstore,
multirange, protocol messages)</li>
<li>Fix various godoc comments (ferhat elmas)</li>
<li>Fix typos in comments (Oleksandr Redko)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e4eaedb476273188265f7b90c2f1ahttps://redirect.github.com/jackc/pgx/issues/2524 ">#2524</a> from
dbussink/pipeline-result-format-reuse</li>
<li><a
href="3ce6d75be4b4d8e62b66c227cd4f76f492c14836ad8fb08d3f303377376d83ffb3c222https://github.com/jackc/pgx/compare/v5.8.0...v5.9.1 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:10:21 -04:00
dependabot[bot]
fff1664e3d
build(deps): bump the actions group across 1 directory with 2 updates ( #1105 )
...
Bumps the actions group with 2 updates in the / directory:
[actions/setup-go](https://github.com/actions/setup-go ) and
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer ).
Updates `actions/setup-go` from 6.3.0 to 6.4.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases ">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.4.0</h2>
<h2>What's Changed</h2>
<h3>Enhancement</h3>
<ul>
<li>Add go-download-base-url input for custom Go distributions by <a
href="https://github.com/gdams "><code>@gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/721 ">actions/setup-go#721</a></li>
</ul>
<h3>Dependency update</h3>
<ul>
<li>Upgrade minimatch from 3.1.2 to 3.1.5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/727 ">actions/setup-go#727</a></li>
</ul>
<h3>Documentation update</h3>
<ul>
<li>Rearrange README.md, add advanced-usage.md by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/724 ">actions/setup-go#724</a></li>
<li>Fix Microsoft build of Go link by <a
href="https://github.com/gdams "><code>@gdams</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/734 ">actions/setup-go#734</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/gdams "><code>@gdams</code></a> made
their first contribution in <a
href="https://redirect.github.com/actions/setup-go/pull/721 ">actions/setup-go#721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.4.0 ">https://github.com/actions/setup-go/compare/v6...v6.4.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4a3601121dhttps://redirect.github.com/actions/setup-go/issues/734 ">#734</a>)</li>
<li><a
href="8f19afcc70https://redirect.github.com/actions/setup-go/issues/721 ">#721</a>)</li>
<li><a
href="27fdb267c1https://redirect.github.com/actions/setup-go/issues/727 ">#727</a>)</li>
<li><a
href="def8c394e3https://redirect.github.com/actions/setup-go/issues/724 ">#724</a>)</li>
<li>See full diff in <a
href="4b73464bb3...4a3601121dhttps://github.com/sigstore/cosign-installer/releases ">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.1</h2>
<h2>What's Changed</h2>
<ul>
<li>chore: update default cosign-release to v3.0.5 in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/223 ">sigstore/cosign-installer#223</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v4.1.0...v4.1.1 ">https://github.com/sigstore/cosign-installer/compare/v4.1.0...v4.1.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cad07c2e89https://redirect.github.com/sigstore/cosign-installer/issues/223 ">#223</a>)</li>
<li>See full diff in <a
href="ba7bc0a3fe...cad07c2e89
2026-04-02 00:04:08 -04:00
dependabot[bot]
7be5dd23c0
build(deps): bump github.com/go-git/go-git/v5 from 5.16.5 to 5.17.1 in /deploy ( #1104 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git )
from 5.16.5 to 5.17.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases ">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.17.1</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module github.com/cloudflare/circl to v1.6.3
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1930 ">go-git/go-git#1930</a></li>
<li>[v5] plumbing: format/index, Improve v4 entry name validation by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1935 ">go-git/go-git#1935</a></li>
<li>[v5] plumbing: format/idxfile, Fix version and fanout checks by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1937 ">go-git/go-git#1937</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1 ">https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1 </a></p>
<h2>v5.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module github.com/go-git/go-git/v5 to v5.16.5
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1839 ">go-git/go-git#1839</a></li>
<li>git: worktree, optimize infiles function for very large repos by <a
href="https://github.com/k-anshul "><code>@k-anshul</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1853 ">go-git/go-git#1853</a></li>
<li>git: Add strict checks for supported extensions by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1861 ">go-git/go-git#1861</a></li>
<li>backport, git: Improve Status() speed with new index.ModTime check
by <a
href="https://github.com/cedric-appdirect "><code>@cedric-appdirect</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/1862 ">go-git/go-git#1862</a></li>
<li>storage: filesystem, Avoid overwriting loose obj files by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1864 ">go-git/go-git#1864</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0 ">https://github.com/go-git/go-git/compare/v5.16.5...v5.17.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5e23dfd02dhttps://redirect.github.com/go-git/go-git/issues/1937 ">#1937</a>
from pjbgf/idx-v5</li>
<li><a
href="6b38a32681https://redirect.github.com/go-git/go-git/issues/1935 ">#1935</a>
from pjbgf/index-v5</li>
<li><a
href="cd757fcb853ec0d70cb6dbe10b6b42e9b65df44cadad18daabhttps://redirect.github.com/go-git/go-git/issues/1930 ">#1930</a>
from go-git/renovate/releases/v5.x-go-github.com-clo...</li>
<li><a
href="29470bd1d8bdf06885bdhttps://redirect.github.com/go-git/go-git/issues/1864 ">#1864</a>
from pjbgf/v5-issue-55</li>
<li><a
href="5290e521c8https://redirect.github.com/go-git/go-git/issues/55 ">#55</a></li>
<li>Additional commits viewable in <a
href="https://github.com/go-git/go-git/compare/v5.16.5...v5.17.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:51 -04:00
dependabot[bot]
bc8ff18495
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.37.2 to 2.37.3 ( #1098 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.37.2 to 2.37.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.3</h2>
<h2>Overview</h2>
<p>This bugfix release fixes a few minor bugs and typos from previous
releases.</p>
<p>This also adjusts the HTTP status code returned by Huma if marshaling
a response fails, from 200 to 500.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix: add allow-popups to CSP sandbox for OAuth popups by <a
href="https://github.com/Micaso "><code>@Micaso</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li>Fix: use epsilon tolerance in multipleOf float validation by <a
href="https://github.com/smazurov "><code>@smazurov</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li>Fix typo in groups.md documentation by <a
href="https://github.com/Its-Haze "><code>@Its-Haze</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li>Fix relative schema urls by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/990 ">danielgtaylor/huma#990</a></li>
<li>Return HTTP 500 if marshaling fails by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/997 ">danielgtaylor/huma#997</a></li>
<li>Handle contentEncoding and contentMediaType keys by <a
href="https://github.com/NPellet "><code>@NPellet</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
<li>Chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.11 to
2.52.12 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/984 ">danielgtaylor/huma#984</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Micaso "><code>@Micaso</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li><a href="https://github.com/smazurov "><code>@smazurov</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li><a href="https://github.com/Its-Haze "><code>@Its-Haze</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li><a href="https://github.com/NPellet "><code>@NPellet</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a38b53666dhttps://redirect.github.com/danielgtaylor/huma/issues/984 ">#984</a>)</li>
<li><a
href="f4c53634a2https://redirect.github.com/danielgtaylor/huma/issues/919 ">#919</a>)</li>
<li><a
href="1678a04e88https://redirect.github.com/danielgtaylor/huma/issues/997 ">#997</a>)</li>
<li><a
href="1d5dddfc50https://redirect.github.com/danielgtaylor/huma/issues/990 ">#990</a>)</li>
<li><a
href="1b8766d7c3https://redirect.github.com/danielgtaylor/huma/issues/995 ">#995</a>)</li>
<li><a
href="99e60fdd0bhttps://redirect.github.com/danielgtaylor/huma/issues/989 ">#989</a>)</li>
<li><a
href="c6694fa179https://redirect.github.com/danielgtaylor/huma/issues/987 ">#987</a>)</li>
<li>See full diff in <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:28 -04:00
dependabot[bot]
f30e540117
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.226.0 to 3.228.0 in /deploy ( #1094 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.226.0 to 3.228.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.228.0</h2>
<h2>3.228.0 (2026-03-25)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Don't apply the secrets filter to <code>true</code> and
<code>false</code> (case-insensitive)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22269 ">#22269</a></p>
</li>
<li>
<p>[cli] Add grpcs:// support and header authentication to OTLP exporter
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22320 ">#22320</a></p>
</li>
<li>
<p>[cli] Read OTEL_RESOURCE_ATTRIBUTES
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22329 ">#22329</a></p>
</li>
<li>
<p>[auto/nodejs] Add low-level "cancel" command to the
auto-generated interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22156 ">#22156</a></p>
</li>
<li>
<p>[cli/state] Allow <code>pulumi state delete</code> to accept multiple
resource URNs and delete them in a dependency-safe order</p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow relative file paths for --otel-traces
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22300 ">#22300</a></p>
</li>
<li>
<p>[cli] Bridge opentracing spans from providers into OTel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22313 ">#22313</a></p>
</li>
<li>
<p>[cli] Correctly end spans for GRPC streams
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22304 ">#22304</a></p>
</li>
<li>
<p>[cli/about] Do not include the access token in plain text
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22347 ">#22347</a></p>
</li>
<li>
<p>[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22317 ">#22317</a></p>
</li>
<li>
<p>[cli/import] Fix import codegen when generating references to
non-standard names
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22319 ">#22319</a></p>
</li>
<li>
<p>[engine] Update golang version
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22277 ">#22277</a></p>
</li>
<li>
<p>[pcl] Typecheck component inputs in PCL programs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22292 ">#22292</a></p>
</li>
<li>
<p>[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22306 ">#22306</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.228.0 (2026-03-25)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Don't apply the secrets filter to <code>true</code> and
<code>false</code> (case-insensitive)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22269 ">#22269</a></p>
</li>
<li>
<p>[cli] Add grpcs:// support and header authentication to OTLP exporter
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22320 ">#22320</a></p>
</li>
<li>
<p>[cli] Read OTEL_RESOURCE_ATTRIBUTES
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22329 ">#22329</a></p>
</li>
<li>
<p>[auto/nodejs] Add low-level "cancel" command to the
auto-generated interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22156 ">#22156</a></p>
</li>
<li>
<p>[cli/state] Allow <code>pulumi state delete</code> to accept multiple
resource URNs and delete them in a dependency-safe order</p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Allow relative file paths for --otel-traces
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22300 ">#22300</a></p>
</li>
<li>
<p>[cli] Bridge opentracing spans from providers into OTel
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22313 ">#22313</a></p>
</li>
<li>
<p>[cli] Correctly end spans for GRPC streams
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22304 ">#22304</a></p>
</li>
<li>
<p>[cli/about] Do not include the access token in plain text
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22347 ">#22347</a></p>
</li>
<li>
<p>[display] Fix detailed diff indentation so changed resources are not
visually nested under unrelated visible resources when unchanged parents
are hidden.
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22317 ">#22317</a></p>
</li>
<li>
<p>[cli/import] Fix import codegen when generating references to
non-standard names
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22319 ">#22319</a></p>
</li>
<li>
<p>[engine] Update golang version
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22277 ">#22277</a></p>
</li>
<li>
<p>[pcl] Typecheck component inputs in PCL programs
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22292 ">#22292</a></p>
</li>
<li>
<p>[programgen/{nodejs,python}] Fix literal conversion when calling into
local components
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22306 ">#22306</a></p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7551b7f72e6a1c2d2d64https://redirect.github.com/pulumi/pulumi/issues/22347 ">#22347</a>)</li>
<li><a
href="9630cec028https://redirect.github.com/pulumi/pulumi/issues/19625 ">#19625</a>)</li>
<li><a
href="3171ca6903https://redirect.github.com/pulumi/pulumi/issues/22339 ">#22339</a>)</li>
<li><a
href="d5bf67ee45https://redirect.github.com/pulumi/pulumi/issues/22319 ">#22319</a>)</li>
<li><a
href="6589fd4215https://redirect.github.com/pulumi/pulumi/issues/22330 ">#22330</a>)</li>
<li><a
href="fba98e9c64https://redirect.github.com/pulumi/pulumi/issues/22337 ">#22337</a>)</li>
<li><a
href="469eb8384dhttps://redirect.github.com/pulumi/pulumi/issues/2 ">#2</a>...</li>
<li><a
href="fe4a6355b1https://redirect.github.com/pulumi/pulumi/issues/22277 ">#22277</a>)</li>
<li><a
href="cfb587b741https://redirect.github.com/pulumi/pulumi/issues/22 ">#22</a>...</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.226.0...v3.228.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:02 -04:00
dependabot[bot]
c5c4b9e889
build(deps): bump anchore/sbom-action from 0.23.1 to 0.24.0 in the actions group ( #1085 )
2026-03-22 18:53:07 +02:00
Radoslav Dimitrov
ddb93bd3a8
Add contributing guidelines to prevent seed.json PRs ( #1079 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
We've been receiving numerous PRs from authors attempting to publish
their MCP server by adding entries to `data/seed.json`. This is not the
correct approach as servers should be published using the
`mcp-publisher` CLI tool.
Many of these PRs appear to be AI-generated so the existing docs aren't
being surfaced effectively. This PR adds explicit guidance in the files
that AI coding assistants actually read:
- `CONTRIBUTING.md` - shown by GitHub when opening new PRs; widely
ingested by AI tools
- `.github/copilot-instructions.md` - read by GitHub Copilot
- `CLAUDE.md` - read by Claude Code and Claude on github.com
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-22 07:42:18 -07:00
dependabot[bot]
9c180f4d33
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 ( #1076 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from
1.78.0 to 1.79.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.79.3</h2>
<h1>Security</h1>
<ul>
<li>server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted
"deny" rules in interceptors like <code>grpc/authz</code>. Any
request with a non-canonical path is now immediately rejected with an
<code>Unimplemented</code> error. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
</ul>
<h2>Release 1.79.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
(<a
href="https://redirect.github.com/grpc/grpc-go/pull/8874 ">grpc/grpc-go#8874</a>)</li>
</ul>
<h2>Release 1.79.1</h2>
<h1>Bug Fixes</h1>
<ul>
<li>grpc: Remove the <code>-dev</code> suffix from the User-Agent
header. (<a
href="https://redirect.github.com/grpc/grpc-go/pull/8902 ">grpc/grpc-go#8902</a>)</li>
</ul>
<h2>Release 1.79.0</h2>
<h1>API Changes</h1>
<ul>
<li>mem: Add experimental API <code>SetDefaultBufferPool</code> to
change the default buffer pool. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8806 ">#8806</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/vanja-p "><code>@vanja-p</code></a></li>
</ul>
</li>
<li>experimental/stats: Update <code>MetricsRecorder</code> to require
embedding the new <code>UnimplementedMetricsRecorder</code> (a no-op
struct) in all implementations for forward compatibility. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
</ul>
<h1>Behavior Changes</h1>
<ul>
<li>balancer/weightedtarget: Remove handling of <code>Addresses</code>
and only handle <code>Endpoints</code> in resolver updates. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8841 ">#8841</a>)</li>
</ul>
<h1>New Features</h1>
<ul>
<li>experimental/stats: Add support for asynchronous gauge metrics
through the new <code>AsyncMetricReporter</code> and
<code>RegisterAsyncReporter</code> APIs. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
<li>pickfirst: Add support for weighted random shuffling of endpoints,
as described in <a
href="https://redirect.github.com/grpc/proposal/pull/535 ">gRFC A113</a>.
<ul>
<li>This is enabled by default, and can be turned off using the
environment variable
<code>GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a>)</li>
</ul>
</li>
<li>xds: Implement <code>:authority</code> rewriting, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md ">gRFC
A81</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8779 ">#8779</a>)</li>
<li>balancer/randomsubsetting: Implement the
<code>random_subsetting</code> LB policy, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md ">gRFC
A68</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8650 ">#8650</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/marek-szews "><code>@marek-szews</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>credentials/tls: Fix a bug where the port was not stripped from the
authority override before validation. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8726 ">#8726</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/Atul1710 "><code>@Atul1710</code></a></li>
</ul>
</li>
<li>xds/priority: Fix a bug causing delayed failover to lower-priority
clusters when a higher-priority cluster is stuck in
<code>CONNECTING</code> state. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8813 ">#8813</a>)</li>
<li>health: Fix a bug where health checks failed for clients using
legacy compression options (<code>WithDecompressor</code> or
<code>RPCDecompressor</code>). (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8765 ">#8765</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/sanki92 "><code>@sanki92</code></a></li>
</ul>
</li>
<li>transport: Fix an issue where the HTTP/2 server could skip header
size checks when terminating a stream early. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8769 ">#8769</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
<li>server: Propagate status detail headers, if available, when
terminating a stream during request header processing. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8754 ">#8754</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>credentials/alts: Optimize read buffer alignment to reduce copies.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8791 ">#8791</a>)</li>
<li>mem: Optimize pooling and creation of <code>buffer</code> objects.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8784 ">#8784</a>)</li>
<li>transport: Reduce slice re-allocations by reserving slice capacity.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8797 ">#8797</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dda86dbd9chttps://redirect.github.com/grpc/grpc-go/issues/8983 ">#8983</a>)</li>
<li><a
href="72186f163ehttps://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
<li><a
href="97ca3522b2https://redirect.github.com/grpc/grpc-go/issues/8954 ">#8954</a>)</li>
<li><a
href="8902ab6efehttps://redirect.github.com/grpc/grpc-go/issues/8947 ">#8947</a>)</li>
<li><a
href="a9286705aahttps://redirect.github.com/grpc/grpc-go/issues/8874 ">#8874</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8904 ">#8904</a>)</li>
<li><a
href="06df3638c0https://redirect.github.com/grpc/grpc-go/issues/8903 ">#8903</a>)</li>
<li><a
href="782f2de44fhttps://redirect.github.com/grpc/grpc-go/issues/8902 ">#8902</a>)</li>
<li><a
href="850eccbb22https://redirect.github.com/grpc/grpc-go/issues/8851 ">#8851</a>)</li>
<li><a
href="765ff056b6https://redirect.github.com/grpc/grpc-go/issues/8850 ">#8850</a>)</li>
<li><a
href="68804be0e7https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8896 ">#8896</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:56:53 +02:00
dependabot[bot]
29ed71a8b8
build(deps): bump google.golang.org/grpc from 1.79.1 to 1.79.3 in /deploy ( #1077 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from
1.79.1 to 1.79.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.79.3</h2>
<h1>Security</h1>
<ul>
<li>server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted
"deny" rules in interceptors like <code>grpc/authz</code>. Any
request with a non-canonical path is now immediately rejected with an
<code>Unimplemented</code> error. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
</ul>
<h2>Release 1.79.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
(<a
href="https://redirect.github.com/grpc/grpc-go/pull/8874 ">grpc/grpc-go#8874</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dda86dbd9chttps://redirect.github.com/grpc/grpc-go/issues/8983 ">#8983</a>)</li>
<li><a
href="72186f163ehttps://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
<li><a
href="97ca3522b2https://redirect.github.com/grpc/grpc-go/issues/8954 ">#8954</a>)</li>
<li><a
href="8902ab6efehttps://redirect.github.com/grpc/grpc-go/issues/8947 ">#8947</a>)</li>
<li><a
href="a9286705aahttps://redirect.github.com/grpc/grpc-go/issues/8874 ">#8874</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8904 ">#8904</a>)</li>
<li><a
href="06df3638c0https://redirect.github.com/grpc/grpc-go/issues/8903 ">#8903</a>)</li>
<li>See full diff in <a
href="https://github.com/grpc/grpc-go/compare/v1.79.1...v1.79.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:52:06 +02:00
dependabot[bot]
9c7c8805cc
build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3 ( #1073 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.21.2 to 0.21.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds local file support to the <code>crane index</code> subcommand
by <a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li>migrate to github.com/moby/moby modules by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li>Bump the go-deps group across 4 directories with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2233 ">google/go-containerregistry#2233</a></li>
<li>Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions
group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2220 ">google/go-containerregistry#2220</a></li>
<li>mutate: reject path traversal and symlink escape in Extract by <a
href="https://github.com/KevinZhao "><code>@KevinZhao</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li>tarball: detect symlink cycles in extractFileFromTar by <a
href="https://github.com/vnykmshr "><code>@vnykmshr</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
<li>bump golang to 1.25.7 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2236 ">google/go-containerregistry#2236</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li><a href="https://github.com/thaJeztah "><code>@thaJeztah</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li><a href="https://github.com/KevinZhao "><code>@KevinZhao</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li><a href="https://github.com/vnykmshr "><code>@vnykmshr</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3888fb8f87https://redirect.github.com/google/go-containerregistry/issues/2236 ">#2236</a>)</li>
<li><a
href="f4396242bdhttps://redirect.github.com/google/go-containerregistry/issues/2232 ">#2232</a>)</li>
<li><a
href="400c263d8ehttps://redirect.github.com/google/go-containerregistry/issues/2227 ">#2227</a>)</li>
<li><a
href="47eedc9de4https://redirect.github.com/google/go-containerregistry/issues/2220 ">#2220</a>)</li>
<li><a
href="be0a845999https://redirect.github.com/google/go-containerregistry/issues/2233 ">#2233</a>)</li>
<li><a
href="e916301498https://redirect.github.com/google/go-containerregistry/issues/2228 ">#2228</a>)</li>
<li><a
href="8b2478e69fhttps://redirect.github.com/google/go-containerregistry/issues/2223 ">#2223</a>)</li>
<li>See full diff in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:51:32 +02:00
dependabot[bot]
52178183f3
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.35.0 to 2.37.2 ( #989 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.35.0 to 2.37.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.2</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue with how form data was being
documented in OpenAPI.</p>
<p>This also fixes embedded objects with valid JSON tags being
incorrectly embedded in the OpenAPI docs.</p>
<h2>What's Changed</h2>
<ul>
<li>Don't embed embedded objects with valid JSON tags by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/978 ">danielgtaylor/huma#978</a></li>
<li>Fix OpenAPI path prefix regression from $schema fix PR by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/979 ">danielgtaylor/huma#979</a></li>
<li>Fix form param doc regression by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/981 ">danielgtaylor/huma#981</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 ">https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 </a></p>
<h2>v2.37.1</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue regarding the Swagger UI docs
renderer, as well as fixes an issue preventing Groups from using the
configurable options released in v2.37.1.</p>
<p>This also brings interface constructors to <code>humamux</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Export Gorilla Mux interface constructors by <a
href="https://github.com/RangelReale "><code>@RangelReale</code></a> in
<a
href="https://redirect.github.com/danielgtaylor/huma/pull/965 ">danielgtaylor/huma#965</a></li>
<li>fix(api): use proper CSP hash for inline script in Swagger doc
renderer by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/977 ">danielgtaylor/huma#977</a></li>
<li>fix(group): ensure "Group" satisfies the configProvider
interface by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/976 ">danielgtaylor/huma#976</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 ">https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 </a></p>
<h2>v2.37.0</h2>
<h2>Overview</h2>
<h3>Dropped Explicit IDN-Hostname Validation</h3>
<p>This validation unintentionally imported an external library to the
base Huma library. Since this was not a requested feature, it has been
removed for now. The <code>idn-hostname</code> format value has become
an alias for <code>hostname</code> in the meantime.</p>
<h3>Operation ID Normalization</h3>
<p>Spaces in operation IDs get automatically converted to hyphens
now.</p>
<h3>Optimizations & Fixed Memory Leak</h3>
<p>Various internal operations have been optimized (~7% overall
improvement): <a
href="https://redirect.github.com/danielgtaylor/huma/pull/973#issue-3960297052 ">danielgtaylor/huma#973</a></p>
<p>A memory leak when using <code>MultipartFormFiles</code> has been
resolved.</p>
<h3>New Configurable Options</h3>
<h4>Allow Additional Properties By Default</h4>
<p>A new config option has been added to allow additional properties by
default. This can be set in the API config.</p>
<pre lang="go"><code>config.AllowAdditionalPropertiesByDefault = true
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="887f7d4322https://redirect.github.com/danielgtaylor/huma/issues/981 ">#981</a>)</li>
<li><a
href="f02efeb11dhttps://redirect.github.com/danielgtaylor/huma/issues/979 ">#979</a>)</li>
<li><a
href="cbf60b60afhttps://redirect.github.com/danielgtaylor/huma/issues/978 ">#978</a>)</li>
<li><a
href="6d0295c4e1https://redirect.github.com/danielgtaylor/huma/issues/976 ">#976</a>)</li>
<li><a
href="07ca6c5d17https://redirect.github.com/danielgtaylor/huma/issues/977 ">#977</a>)</li>
<li><a
href="58edcf2bf5https://redirect.github.com/danielgtaylor/huma/issues/965 ">#965</a>)</li>
<li><a
href="6c29f67c9dhttps://redirect.github.com/danielgtaylor/huma/issues/916 ">#916</a>)</li>
<li><a
href="3aee9bd172https://redirect.github.com/danielgtaylor/huma/issues/974 ">#974</a>)</li>
<li><a
href="e31a8198adhttps://redirect.github.com/danielgtaylor/huma/issues/973 ">#973</a>)</li>
<li><a
href="ddbb810fd5https://redirect.github.com/danielgtaylor/huma/issues/925 ">#925</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/danielgtaylor/huma/compare/v2.35.0...v2.37.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-16 17:06:31 +02:00
dependabot[bot]
a94c56a78f
build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.27.0 to 4.28.0 in /deploy ( #1056 )
...
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes )
from 4.27.0 to 4.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.28.0</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
changelog</a>.</em></p>
<blockquote>
<h2>4.28.0 (March 12, 2026)</h2>
<h3>Changed</h3>
<ul>
<li>Upgrade Kubernetes schema and libraries to v1.35.2.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1655f4c793https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4230 ">#4230</a>)</li>
<li><a
href="dbeeb56978c6b1c916a3https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4223 ">#4223</a>)</li>
<li><a
href="fedb665c4fhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4221 ">#4221</a>)</li>
<li><a
href="4b3e1f493chttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4218 ">#4218</a>)</li>
<li><a
href="1737d00694https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4209 ">#4209</a>)</li>
<li><a
href="be0dfed214https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4217 ">#4217</a>)</li>
<li><a
href="4ecded1435https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4213 ">#4213</a>)</li>
<li><a
href="af862bb849https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4196 ">#4196</a>)</li>
<li><a
href="ecf6701c9ehttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4208 ">#4208</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.27.0...v4.28.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 11:53:31 +01:00
dependabot[bot]
01b1ae2555
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.225.1 to 3.226.0 in /deploy ( #1057 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.225.1 to 3.226.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.226.0</h2>
<h2>3.226.0 (2026-03-11)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[backend/service] Automatically repair snapshot integrity issues,
while sending an error event to the backend for further diagnosis
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22179 ">#22179</a></p>
</li>
<li>
<p>[cli] Add a --otel-traces flag, that allows writing otel traces to a
file, or directly to a grpc interface
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22129 ">#22129</a></p>
</li>
<li>
<p>[engine] Engine will use provider references from
<code>__self__</code> arguments to calls
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22114 ">#22114</a></p>
</li>
<li>
<p>[sdk/bun] Support bun as a runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22177 ">#22177</a>
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22049 ">#22049</a></p>
</li>
<li>
<p>[sdk/bun] Add debugger support for the bun runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22177 ">#22177</a></p>
</li>
<li>
<p>[sdk/bun] Add support for Bun as a plugin runtime
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22189 ">#22189</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Fix ReplacementTrigger firing due to dependency changes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22119 ">#22119</a></p>
</li>
<li>
<p>[engine] Correctly serialize output values to the snapshot rather
than always recording them as computed even when known
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22120 ">#22120</a></p>
</li>
<li>
<p>[pcl] Support resource ranges in PCL
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22144 ">#22144</a></p>
</li>
<li>
<p>[cli/config] Include environments used when refreshing a stack's
config
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22103 ">#22103</a></p>
</li>
<li>
<p>[cli/display] Fix <code>pulumi destroy</code> not showing parent
resource hierarchy
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22148 ">#22148</a></p>
</li>
<li>
<p>[cli/package] Correctly parse package URLs with .git in them
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22174 ">#22174</a></p>
</li>
<li>
<p>[cli/plugin] Fix package get-schema for binary providers at relative
paths
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22107 ">#22107</a></p>
</li>
<li>
<p>[sdk/python] Handle null detailedDiff in automation StepEventMetadata
JSON parsing</p>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="94ee966f0fhttps://redirect.github.com/pulumi/pulumi/issues/22195 ">#22195</a>)</li>
<li><a
href="4f16f96499https://redirect.github.com/pulumi/pulumi/issues/22186 ">#22186</a>)</li>
<li><a
href="b0a5846488https://redirect.github.com/pulumi/pulumi/issues/22176 ">#22176</a>)</li>
<li><a
href="6ebc01e665https://redirect.github.com/pulumi/pulumi/issues/22189 ">#22189</a>)</li>
<li><a
href="a42977b776https://redirect.github.com/pulumi/pulumi/issues/22188 ">#22188</a>)</li>
<li><a
href="c1dabceab2https://redirect.github.com/pulumi/pulumi/issues/22187 ">#22187</a>)</li>
<li><a
href="646a020a63https://redirect.github.com/pulumi/pulumi/issues/22072 ">#22072</a>)</li>
<li><a
href="32871e07a4https://redirect.github.com/pulumi/pulumi/issues/22180 ">#22180</a>)</li>
<li><a
href="b190b8b18ehttps://redirect.github.com/pulumi/pulumi/issues/22103 ">#22103</a>)</li>
<li><a
href="e5e3a1d68fhttps://redirect.github.com/pulumi/pulumi/issues/22179 ">#22179</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.225.1...v3.226.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-13 01:30:03 +01:00
dependabot[bot]
00de8fac8b
build(deps): bump golang.org/x/mod from 0.33.0 to 0.34.0 ( #1054 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.33.0 to
0.34.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ac721dff8fb1fac8b36https://github.com/golang/mod/compare/v0.33.0...v0.34.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 11:46:51 +01:00
Jonathan Hefner
b941ee3674
Remove .mdx suffixes from internal doc links for Mintlify ( #1052 )
...
These docs are synced to modelcontextprotocol.io which uses Mintlify for
rendering. Mintlify routes are extension-less, so links like
`./package-types.mdx` produce 404s on the live site. Dropping the `.mdx`
suffix fixes those broken links. The trade-off is that the links no
longer resolve when browsing the raw files on GitHub.
Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-12 11:46:30 +01:00
dependabot[bot]
b112ac3335
build(deps): bump the actions group with 2 updates ( #1049 )
...
Bumps the actions group with 2 updates:
[sigstore/cosign-installer](https://github.com/sigstore/cosign-installer )
and [anchore/sbom-action](https://github.com/anchore/sbom-action ).
Updates `sigstore/cosign-installer` from 4.0.0 to 4.1.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign-installer/releases ">sigstore/cosign-installer's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.0</h2>
<h2>What's Changed</h2>
<p>We recommend updating as soon as possible as this includes bug fixes
for Cosign. We also recommend removing <code>with: cosign-release</code>
and strongly discourage using <code>cosign-release</code> unless you
have a specific reason to use an older version of Cosign.</p>
<ul>
<li>Bump cosign to 3.0.5 in <a
href="https://redirect.github.com/sigstore/cosign-installer/pull/220 ">sigstore/cosign-installer#220</a></li>
<li>fix: add retry to curl downloads for transient network failures in
<a
href="https://redirect.github.com/sigstore/cosign-installer/pull/210 ">sigstore/cosign-installer#210</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0 ">https://github.com/sigstore/cosign-installer/compare/v4.0.0...v4.1.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ba7bc0a3fehttps://redirect.github.com/sigstore/cosign-installer/issues/210 ">#210</a>)</li>
<li><a
href="5a292e1504https://redirect.github.com/sigstore/cosign-installer/issues/220 ">#220</a>)</li>
<li><a
href="351ea76151https://redirect.github.com/sigstore/cosign-installer/issues/217 ">#217</a>)</li>
<li><a
href="c17565ff32https://redirect.github.com/sigstore/cosign-installer/issues/221 ">#221</a>)</li>
<li><a
href="a6fdd19182https://redirect.github.com/sigstore/cosign-installer/issues/218 ">#218</a>)</li>
<li><a
href="430b6a704fhttps://redirect.github.com/sigstore/cosign-installer/issues/213 ">#213</a>)</li>
<li><a
href="4d14d7f17ehttps://redirect.github.com/sigstore/cosign-installer/issues/212 ">#212</a>)</li>
<li><a
href="f14800521ehttps://redirect.github.com/sigstore/cosign-installer/issues/207 ">#207</a>)</li>
<li><a
href="c3f2d79008https://redirect.github.com/sigstore/cosign-installer/issues/208 ">#208</a>)</li>
<li><a
href="b9a9af4616https://redirect.github.com/sigstore/cosign-installer/issues/211 ">#211</a>)</li>
<li>Additional commits viewable in <a
href="faadad0cce...ba7bc0a3fehttps://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.1</h2>
<h2>⬆️ Dependencies</h2>
<ul>
<li>chore(deps): update Syft to v1.42.2 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/607 ">#607</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
<li>chore(deps): bump fast-xml-parser and all other deps (<a
href="https://redirect.github.com/anchore/sbom-action/issues/604 ">#604</a>)
[@<a href="https://github.com/apps/dependabot ">dependabot[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="57aae52805https://redirect.github.com/anchore/sbom-action/issues/607 ">#607</a>)</li>
<li><a
href="c29e913258https://redirect.github.com/anchore/sbom-action/issues/604 ">#604</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.23.0...v0.23.1 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-11 10:44:47 +01:00
Tadas Antanavicius
2575290393
chore(deploy): bump production image tag to 1.5.0 ( #1043 )
...
## Summary
- Updates the production image tag in `deploy/Pulumi.gcpProd.yaml` from
`1.4.1` to `1.5.0`
## Test plan
- [ ] Verify the Pulumi deployment picks up the new image tag
- [ ] Confirm the v1.5.0 container image exists in the registry
🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>
2026-03-07 06:53:30 -08:00
dependabot[bot]
c0ecfd5a65
build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 ( #1026 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.20.7 to 0.21.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Better handle redirects to https in ping by <a
href="https://github.com/jonjohnsonjr "><code>@jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2225 ">google/go-containerregistry#2225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 ">https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 </a></p>
<h2>v0.21.1</h2>
<p>This release fixes a regression in <code>crane</code> introduced in
the previous release.</p>
<h2>What's Changed</h2>
<ul>
<li>Add WithFileBufferedOpener for file-backed daemon image buffering by
<a href="https://github.com/twdamhore "><code>@twdamhore</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li>crane: fix case in auth response json by <a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/twdamhore "><code>@twdamhore</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li><a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 ">https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 </a></p>
<h2>v0.21.0</h2>
<p>This release updates the minimum Go version to
<code>1.25.6</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(mutate): don't skip dir replacements via whiteout in export by
<a href="https://github.com/r4f4 "><code>@r4f4</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li>Improve performance of v1.NewHash by <a
href="https://github.com/bmoylan "><code>@bmoylan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2194 ">google/go-containerregistry#2194</a></li>
<li>Bump the actions group across 1 directory with 4 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2207 ">google/go-containerregistry#2207</a></li>
<li>Bump the root-deps group across 1 directory with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2195 ">google/go-containerregistry#2195</a></li>
<li>Fix error messages in crane_test.go by <a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
<li>Bump go version across packages to 1.25.6 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2211 ">google/go-containerregistry#2211</a></li>
<li>Join go.mod dependency updates by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2212 ">google/go-containerregistry#2212</a></li>
<li>Bump the go-deps group across 3 directories with 3 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2213 ">google/go-containerregistry#2213</a></li>
<li>Disable taint gosec lints by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2215 ">google/go-containerregistry#2215</a></li>
<li>Update go version used in goreleaser by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2216 ">google/go-containerregistry#2216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/r4f4 "><code>@r4f4</code></a> made their
first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li><a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 ">https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e0ccb0a72https://redirect.github.com/google/go-containerregistry/issues/2225 ">#2225</a>)</li>
<li><a
href="85f2bf5f73https://redirect.github.com/google/go-containerregistry/issues/2218 ">#2218</a>)</li>
<li><a
href="e971d630dchttps://redirect.github.com/google/go-containerregistry/issues/2214 ">#2214</a>)</li>
<li><a
href="8e2d6a6817https://redirect.github.com/google/go-containerregistry/issues/2216 ">#2216</a>)</li>
<li><a
href="b58334f761https://redirect.github.com/google/go-containerregistry/issues/2215 ">#2215</a>)</li>
<li><a
href="88b39ed906https://redirect.github.com/google/go-containerregistry/issues/2213 ">#2213</a>)</li>
<li><a
href="102ac75ddehttps://redirect.github.com/google/go-containerregistry/issues/2212 ">#2212</a>)</li>
<li><a
href="d5817d559ehttps://redirect.github.com/google/go-containerregistry/issues/2211 ">#2211</a>)</li>
<li><a
href="23f0632fa3https://redirect.github.com/google/go-containerregistry/issues/2189 ">#2189</a>)</li>
<li><a
href="438abde5e7https://redirect.github.com/google/go-containerregistry/issues/2195 ">#2195</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-07 15:31:08 +02:00
dependabot[bot]
03d551dbab
build(deps): bump the opentelemetry group with 6 updates ( #1044 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.66.0` | `0.67.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.63.0` | `0.64.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.66.0 to 0.67.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for <a href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update github artifact actions to v7 (major) by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8605 ">open-telemetry/opentelemetry-go-contrib#8605</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8610 ">open-telemetry/opentelemetry-go-contrib#8610</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8620 ">open-telemetry/opentelemetry-go-contrib#8620</a></li>
<li>fix(deps): update module github.com/aws/smithy-go to v1.24.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8614 ">open-telemetry/opentelemetry-go-contrib#8614</a></li>
<li>chore(deps): update go-openapi packages by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8621 ">open-telemetry/opentelemetry-go-contrib#8621</a></li>
<li>fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8622 ">open-telemetry/opentelemetry-go-contrib#8622</a></li>
<li>chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8608 ">open-telemetry/opentelemetry-go-contrib#8608</a></li>
<li>chore(deps): update module github.com/protonmail/go-crypto to v1.4.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8609 ">open-telemetry/opentelemetry-go-contrib#8609</a></li>
<li>chore(deps): update otel/opentelemetry-collector-contrib docker tag
to v0.147.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8625 ">open-telemetry/opentelemetry-go-contrib#8625</a></li>
<li>chore(deps): update module github.com/daixiang0/gci to v0.14.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8623 ">open-telemetry/opentelemetry-go-contrib#8623</a></li>
<li>Drop support for 1.24 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8628 ">open-telemetry/opentelemetry-go-contrib#8628</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8554 ">open-telemetry/opentelemetry-go-contrib#8554</a></li>
<li>fix(deps): update kubernetes packages to v0.35.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8626 ">open-telemetry/opentelemetry-go-contrib#8626</a></li>
<li>fix(deps): update aws-sdk-go-v2 monorepo by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8598 ">open-telemetry/opentelemetry-go-contrib#8598</a></li>
<li>fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8630 ">open-telemetry/opentelemetry-go-contrib#8630</a></li>
<li>otelgrpc: modernize the example project by <a
href="https://github.com/ash2k "><code>@ash2k</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8619 ">open-telemetry/opentelemetry-go-contrib#8619</a></li>
<li>chore(deps): update googleapis to a57be14 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8606 ">open-telemetry/opentelemetry-go-contrib#8606</a></li>
<li>fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8627 ">open-telemetry/opentelemetry-go-contrib#8627</a></li>
<li>chore(deps): update module github.com/prometheus/procfs to v0.20.1
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8624 ">open-telemetry/opentelemetry-go-contrib#8624</a></li>
<li>fix(otelhttp): make Body handling in Transport consistent with
stdlib by <a href="https://github.com/ash2k "><code>@ash2k</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8618 ">open-telemetry/opentelemetry-go-contrib#8618</a></li>
<li>otelhttp: Ignore informational response status codes when persisting
status by <a
href="https://github.com/VirrageS "><code>@VirrageS</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/6913 ">open-telemetry/opentelemetry-go-contrib#6913</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] -
2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d8dabf6736https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8649 ">#8649</a>)</li>
<li><a
href="b1de2c71d9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
<li><a
href="b228c0f2f2https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8644 ">#8644</a>)</li>
<li><a
href="e70fd977a6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li><a
href="b018d98a0ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8643 ">#8643</a>)</li>
<li><a
href="fb6a3518d8https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8641 ">#8641</a>)</li>
<li><a
href="2c9c10ec4ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8640 ">#8640</a>)</li>
<li><a
href="22248d4c31https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8583 ">#8583</a>)</li>
<li><a
href="324662a14bhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
<li><a
href="69addb4996https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8636 ">#8636</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.66.0...zpages/v0.67.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.63.0 to
0.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v0.64.0/v0.18.0/v0.0.16</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix changelog protection marker by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986 ">open-telemetry/opentelemetry-go#7986</a></li>
<li>Drop support for Go 1.24 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984 ">open-telemetry/opentelemetry-go#7984</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907 ">open-telemetry/opentelemetry-go#7907</a></li>
<li>chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981 ">open-telemetry/opentelemetry-go#7981</a></li>
<li>chore(deps): update benchmark-action/github-action-benchmark action
to v1.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989 ">open-telemetry/opentelemetry-go#7989</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982 ">open-telemetry/opentelemetry-go#7982</a></li>
<li>Revert "Revert "Generate semconv/v1.40.0"" by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985 ">open-telemetry/opentelemetry-go#7985</a></li>
<li>support stdlib request.GetBody on metrics by <a
href="https://github.com/marifari-hue "><code>@marifari-hue</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931 ">open-telemetry/opentelemetry-go#7931</a></li>
<li>attribute: add TestNotEquivalence and equality operator tests by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979 ">open-telemetry/opentelemetry-go#7979</a></li>
<li>Refactor benchmark CI by <a
href="https://github.com/XSAM "><code>@XSAM</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873 ">open-telemetry/opentelemetry-go#7873</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.24.7
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988 ">open-telemetry/opentelemetry-go#7988</a></li>
<li>chore(deps): pin codspeedhq/action action to df47568 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996 ">open-telemetry/opentelemetry-go#7996</a></li>
<li>chore(deps): update actions/checkout action to v6.0.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997 ">open-telemetry/opentelemetry-go#7997</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999 ">open-telemetry/opentelemetry-go#7999</a></li>
<li>Upgrade to semconv/v1.40.0 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991 ">open-telemetry/opentelemetry-go#7991</a></li>
<li>Regenerate semconv/v1.40.0/MIGRATION.md by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992 ">open-telemetry/opentelemetry-go#7992</a></li>
<li>fix: generated semconv helpers skipping attributes by <a
href="https://github.com/victoraugustolls "><code>@victoraugustolls</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964 ">open-telemetry/opentelemetry-go#7964</a></li>
<li>Feat: Have SpanContext support the new W3C random flag. by <a
href="https://github.com/nikhilmantri0902 "><code>@nikhilmantri0902</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834 ">open-telemetry/opentelemetry-go#7834</a></li>
<li>Semconv metric helper caller-slice mutation fix by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993 ">open-telemetry/opentelemetry-go#7993</a></li>
<li>Fix semconv generated error type to check error chain for custom
type declaration by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994 ">open-telemetry/opentelemetry-go#7994</a></li>
<li>refactor: replace uint64 and int32 with atomic types in tests by <a
href="https://github.com/alexandear "><code>@alexandear</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941 ">open-telemetry/opentelemetry-go#7941</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 18da590 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000 ">open-telemetry/opentelemetry-go#8000</a></li>
<li>TracerProvider ForceFlush() Error Fix by <a
href="https://github.com/sawamurataxman "><code>@sawamurataxman</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856 ">open-telemetry/opentelemetry-go#7856</a></li>
<li>log: add error field to Record and make SDK to emit exception
attributes by <a
href="https://github.com/iblancasa "><code>@iblancasa</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924 ">open-telemetry/opentelemetry-go#7924</a></li>
<li>chore(deps): update dependency codespell to v2.4.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003 ">open-telemetry/opentelemetry-go#8003</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.6 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004 ">open-telemetry/opentelemetry-go#8004</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8001 ">open-telemetry/opentelemetry-go#8001</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.63.0...exporters/prometheus/v0.64.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-07 15:22:17 +02:00
Radoslav Dimitrov
7b0c411928
Bump go ( #1041 )
...
<!-- Provide a brief summary of your changes -->
Fixes:
https://github.com/modelcontextprotocol/registry/actions/runs/22784360696/job/66097670402
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
---------
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-06 14:57:51 -08:00
Tadas Antanavicius
7462b3c34e
fix(ci): use deploy/go.mod for deploy workflow Go version and bump root Go to 1.25.8 ( #1040 )
...
## Summary
Fixes two CI issues:
### 1. Deploy workflows broken since PR #1034 (all staging deploys
failing)
The deploy-staging and deploy-production workflows install Go using the
**root** `go.mod`, but then build Pulumi infrastructure code from the
`deploy/` directory which has its own `go.mod`.
This started failing when PR #1034 (`build(deps): bump
github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy`)
bumped `deploy/go.mod` from Go 1.24.11 to **Go 1.25.6** — a version
newer than the root module's Go 1.24.13. Every staging deploy since that
merge (Mar 6) has failed with:
```
go: go.mod requires go >= 1.25.6 (running go 1.24.13; GOTOOLCHAIN=local)
```
The last successful deploy was commit cb4807a🤖 Generated with [Claude Code](https://claude.com/claude-code )
Co-authored-by: Claude <noreply@anthropic.com>
2026-03-06 14:20:44 -08:00
dependabot[bot]
6c500c52e3
build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 ( #985 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.25.0 to 1.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>retail 1.26.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.25.1...retail/v1.26.0 ">1.26.0</a>
(2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>
<p>add a user_attributes field in SearchRequest that can be used for
personalization (PiperOrigin-RevId: 861314205) (<a
href="d8ea738ad8ea738ahttps://github.com/googleapis/google-cloud-go/compare/kms/v1.25.0...kms/v1.26.0 ">v1.26.0</a>
(2026-02-19)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Introduced the RetiredResource resource to track records of deleted
keys and prevent the reuse of their resource names (PiperOrigin-RevId:
868670725) (<a
href="d3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dhttps://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.25.0...documentai/v1.26.0 ">1.26.0</a>
(2024-02-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> A new field
<code>schema_override</code> is added to message
<code>ProcessOptions</code> (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9400 ">#9400</a>)
(<a
href="a86aa8e9627e6c208c5d8ebb89625chttps://redirect.github.com/googleapis/google-cloud-go/issues/13107 ">#13107</a>)</li>
<li><a
href="befb302203https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="1930511848https://redirect.github.com/googleapis/google-cloud-go/issues/13089 ">#13089</a>)</li>
<li><a
href="e6b9d41832https://redirect.github.com/googleapis/google-cloud-go/issues/13009 ">#13009</a>)</li>
<li><a
href="6259aeec39https://redirect.github.com/googleapis/google-cloud-go/issues/12945 ">#12945</a>)</li>
<li><a
href="bafd691de1https://redirect.github.com/googleapis/google-cloud-go/issues/13004 ">#13004</a>)</li>
<li><a
href="2b75879c22https://redirect.github.com/googleapis/google-cloud-go/issues/13082 ">#13082</a>)</li>
<li><a
href="9157a715e3https://redirect.github.com/googleapis/google-cloud-go/issues/13083 ">#13083</a>)</li>
<li><a
href="a93d961e66https://redirect.github.com/googleapis/google-cloud-go/issues/13079 ">#13079</a>)</li>
<li><a
href="75c95f3f05https://redirect.github.com/googleapis/google-cloud-go/issues/13080 ">#13080</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.25.0...dlp/v1.26.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:25:23 +02:00
dependabot[bot]
de6e9839ec
build(deps): bump the opentelemetry group with 6 updates ( #1025 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.65.0` | `0.66.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.62.0` | `0.63.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.65.0 to 0.66.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
The next release will require at least <a
href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] -
2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07fa42463chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8617 ">#8617</a>)</li>
<li><a
href="f64d6bbf2ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8532 ">#8532</a>)</li>
<li><a
href="5995ae876ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li><a
href="c0aa7c9a5ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)</li>
<li><a
href="e81a2b4433https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li><a
href="8096a3ec79https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
<li><a
href="2dce2452b9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
<li><a
href="d2a58075d3https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
<li><a
href="52dd9873f6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8613 ">#8613</a>)</li>
<li><a
href="c4223d5dadhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8603 ">#8603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.66.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.62.0 to
0.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v0.63.0/v0.17.0/v0.0.15</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>. The next release will
require at least <a href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits. <code>New</code> and
<code>Parse</code> now return partial baggage along with an error when
limits are exceeded. Errors from baggage extraction are reported to the
global error handler. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update googleapis to ce8ad4c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7860 ">open-telemetry/opentelemetry-go#7860</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7865 ">open-telemetry/opentelemetry-go#7865</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.51.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7863 ">open-telemetry/opentelemetry-go#7863</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to fe4bb1c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7861 ">open-telemetry/opentelemetry-go#7861</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7869 ">open-telemetry/opentelemetry-go#7869</a></li>
<li>sdk/log/observ: guard LogProcessed with Enabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7848 ">open-telemetry/opentelemetry-go#7848</a></li>
<li>stdouttrace observability: skip metric work when instruments are
disabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7853 ">open-telemetry/opentelemetry-go#7853</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7870 ">open-telemetry/opentelemetry-go#7870</a></li>
<li>fix(deps): update googleapis to 546029d by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7871 ">open-telemetry/opentelemetry-go#7871</a></li>
<li>stdoutmetric observ: skip metric work when instruments are disabled
by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7868 ">open-telemetry/opentelemetry-go#7868</a></li>
<li>chore(deps): update fossas/fossa-action action to v1.8.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7879 ">open-telemetry/opentelemetry-go#7879</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7878 ">open-telemetry/opentelemetry-go#7878</a></li>
<li>chore(deps): update module github.com/ghostiam/protogetter to
v0.3.20 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7877 ">open-telemetry/opentelemetry-go#7877</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 86a5c4b by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7876 ">open-telemetry/opentelemetry-go#7876</a></li>
<li>fix(deps): update module golang.org/x/sys to v0.41.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7885 ">open-telemetry/opentelemetry-go#7885</a></li>
<li>chore(deps): update module github.com/clipperhouse/uax29/v2 to
v2.6.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7884 ">open-telemetry/opentelemetry-go#7884</a></li>
<li>Checked if instrument enabled before measuring in prometheus by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7866 ">open-telemetry/opentelemetry-go#7866</a></li>
<li>exporter/otlploghttp: guard observ metrics with Enabled checks by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7813 ">open-telemetry/opentelemetry-go#7813</a></li>
<li>chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7886 ">open-telemetry/opentelemetry-go#7886</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7887 ">open-telemetry/opentelemetry-go#7887</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7890 ">open-telemetry/opentelemetry-go#7890</a></li>
<li>fix(deps): update golang.org/x to 2842357 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7891 ">open-telemetry/opentelemetry-go#7891</a></li>
<li>fix(deps): update googleapis to 4cfbd41 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7889 ">open-telemetry/opentelemetry-go#7889</a></li>
<li>Checked if instrument enabled before measuring in
<code>oteltracegrpc</code> by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7825 ">open-telemetry/opentelemetry-go#7825</a></li>
<li>Checked if Instrument Enabled before measuring in otlpgrpc by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7824 ">open-telemetry/opentelemetry-go#7824</a></li>
<li>chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2
to v2.27.8 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7892 ">open-telemetry/opentelemetry-go#7892</a></li>
<li>chore(deps): update module github.com/golangci/golines to v0.15.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7893 ">open-telemetry/opentelemetry-go#7893</a></li>
<li>chore(deps): update module github.com/golangci/misspell to v0.8.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7894 ">open-telemetry/opentelemetry-go#7894</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 9f66fae by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7898 ">open-telemetry/opentelemetry-go#7898</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7906 ">open-telemetry/opentelemetry-go#7906</a></li>
<li>Support Go 1.26 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7902 ">open-telemetry/opentelemetry-go#7902</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7908 ">open-telemetry/opentelemetry-go#7908</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7909 ">open-telemetry/opentelemetry-go#7909</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.62.0...exporters/prometheus/v0.63.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:16:23 +02:00
dependabot[bot]
b738501d2f
build(deps): bump github.com/pulumi/pulumi-kubernetes/sdk/v4 from 4.25.0 to 4.27.0 in /deploy ( #1024 )
...
Bumps
[github.com/pulumi/pulumi-kubernetes/sdk/v4](https://github.com/pulumi/pulumi-kubernetes )
from 4.25.0 to 4.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/releases ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.27.0</h2>
<p>No release notes provided.</p>
<h2>v4.26.0</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122 ">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed the update. This occurred when Pulumi checked status fields
before the controller updated <code>observedGeneration</code>, causing
stale "ready" values to be trusted.</p>
</li>
<li>
<p>Fixed a regression of <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943 ">#2943</a>
which could cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969 ">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156 ">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi-kubernetes/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi-kubernetes/sdk/v4's
changelog</a>.</em></p>
<blockquote>
<h2>4.27.0 (March 2, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4181 ">#4181</a>
Fix PVC timeout when updating to a storage class with
WaitForFirstConsumer bind mode.</li>
</ul>
<h3>Added</h3>
<ul>
<li><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/3661 ">#3661</a>
Support for OCI login inside the provider process. Providing a
username/password to <code>Chart v4</code> and <code>Release v3</code>
will now login to private OCI
registries as expected.
(<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/2911 ">pulumi/pulumi-kubernetes#2911</a>
and <a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/1914 ">pulumi/pulumi-kubernetes#1914</a>)</li>
</ul>
<h2>4.26.0 (February 19, 2026)</h2>
<h3>Fixed</h3>
<ul>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4122 ">#4122</a>
Implements a new provider config option, <code>alwaysRender</code>,
which sets <code>Diff_Some</code>to true when used in combination with
<code>renderYAMLtoDirectory</code>.
This allows for user-defined opt-in behavior for YAML manifests to be
idempotently generated on every <code>pulumi up</code>, and for Update()
to show these changes to a user.</p>
</li>
<li>
<p>Fixed a race condition in StatefulSet await logic where Pulumi could
incorrectly report a rollout as complete before the controller had
processed
the update. This occurred when Pulumi checked status fields before the
controller updated <code>observedGeneration</code>, causing stale
"ready" values to be
trusted.</p>
</li>
<li>
<p>Fixed a regression of
<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/2943 ">#2943</a>
which could
cause Deployments to erroneously report diffs.</p>
</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgraded <code>helm.sh/helm</code> to v3.18.6. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3969 ">pulumi/pulumi-kubernetes#3969</a>)</p>
</li>
<li>
<p><a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/pull/4156 ">#4156</a>
Upgrade Kubernetes schema and libraries to v1.35.1</p>
</li>
</ul>
<h2>4.24.0 (November 5, 2025)</h2>
<h3>Added</h3>
<ul>
<li>Added a <code>plainHttp</code> option to the <code>v4.Chart</code>
resource. (<a
href="https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3250 ">pulumi/pulumi-kubernetes#3250</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>The <code>pulumi.com/waitFor</code> annotation now uses an
<a
href="https://www.rfc-editor.org/rfc/rfc9535.html ">RFC9535</a>-compliant
JSONPath
parser. This makes it possible to wait for more complex scenarios.</p>
<p>For example:</p>
<ul>
<li>To wait for a Pod's <code>status.phase</code> to be
"Running" or "Succeeded":</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20f0c07152https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4194 ">#4194</a>)</li>
<li><a
href="c5e7ece7b1https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4191 ">#4191</a>)</li>
<li><a
href="49c2646952https://redirect.github.com/pulumi/pulumi-kubernetes/issues/3661 ">#3661</a>)</li>
<li><a
href="b48d7a39a8https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4181 ">#4181</a>)</li>
<li><a
href="e3427da684https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4188 ">#4188</a>)</li>
<li><a
href="7af1b7e73bhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4189 ">#4189</a>)</li>
<li><a
href="6860aae22dhttps://redirect.github.com/pulumi/pulumi-kubernetes/issues/4187 ">#4187</a>)</li>
<li><a
href="5c58fea181https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4186 ">#4186</a>)</li>
<li><a
href="1564fc1c469ebe2663c3https://redirect.github.com/pulumi/pulumi-kubernetes/issues/4184 ">#4184</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi-kubernetes/compare/v4.25.0...v4.27.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:16:00 +02:00
dependabot[bot]
8575244d1f
build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 ( #995 )
...
Bumps [github.com/caarlos0/env/v11](https://github.com/caarlos0/env )
from 11.3.1 to 11.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases ">github.com/caarlos0/env/v11's
releases</a>.</em></p>
<blockquote>
<h2>v11.4.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set
defaults for zero values only (<a
href="https://redirect.github.com/caarlos0/env/issues/325 ">#325</a>) (<a
href="https://github.com/dnovikoff "><code>@dnovikoff</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>d3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues,
update golangci-lint (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>aaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a
bit (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/393 ">#393</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>cd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/396 ">#396</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/402 ">#402</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/403 ">#403</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>d28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/397 ">#397</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>f33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql,
govulncheck, grype (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>e5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms
(<a href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions
versions (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro ">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aaa45113e54fe3f70200c98ad844e1https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>)</li>
<li><a
href="d28373e3a0https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>)</li>
<li><a
href="3a3ea05453https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>)</li>
<li><a
href="f33230e8e7https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>)</li>
<li><a
href="c660cc91dbhttps://redirect.github.com/caarlos0/env/issues/403 ">#403</a>)</li>
<li><a
href="4d25a4659fhttps://redirect.github.com/caarlos0/env/issues/402 ">#402</a>)</li>
<li><a
href="7b10cf56e2https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>)</li>
<li><a
href="6b2db30d19https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v11.3.1...v11.4.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:14:22 +02:00
dependabot[bot]
febc8dc6a1
build(deps): bump the actions group across 1 directory with 5 updates ( #1031 )
...
Bumps the actions group with 5 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go ) | `6.2.0` |
`6.3.0` |
| [actions/upload-artifact](https://github.com/actions/upload-artifact )
| `6.0.0` | `7.0.0` |
| [docker/login-action](https://github.com/docker/login-action ) |
`3.7.0` | `4.0.0` |
| [anchore/sbom-action](https://github.com/anchore/sbom-action ) |
`0.22.2` | `0.23.0` |
|
[goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action )
| `6.4.0` | `7.0.0` |
Updates `actions/setup-go` from 6.2.0 to 6.3.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/actions/setup-go/releases ">actions/setup-go's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Update default Go module caching to use go.mod by <a
href="https://github.com/priyagupta108 "><code>@priyagupta108</code></a>
in <a
href="https://redirect.github.com/actions/setup-go/pull/705 ">actions/setup-go#705</a></li>
<li>Fix golang download url to go.dev by <a
href="https://github.com/178inaba "><code>@178inaba</code></a> in <a
href="https://redirect.github.com/actions/setup-go/pull/469 ">actions/setup-go#469</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/setup-go/compare/v6...v6.3.0 ">https://github.com/actions/setup-go/compare/v6...v6.3.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b73464bb3https://redirect.github.com/actions/setup-go/issues/469 ">#469</a>)</li>
<li><a
href="a5f9b05d2dhttps://redirect.github.com/actions/setup-go/issues/705 ">#705</a>)</li>
<li>See full diff in <a
href="7a3fe6cf4c...4b73464bb3https://github.com/actions/upload-artifact/releases ">actions/upload-artifact's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>v7 What's new</h2>
<h3>Direct Uploads</h3>
<p>Adds support for uploading single files directly (unzipped). Callers
can set the new <code>archive</code> parameter to <code>false</code> to
skip zipping the file during upload. Right now, we only support single
files. The action will fail if the glob passed resolves to multiple
files. The <code>name</code> parameter is also ignored with this
setting. Instead, the name of the artifact will be the name of the
uploaded file.</p>
<h3>ESM</h3>
<p>To support new versions of the <code>@actions/*</code> packages,
we've upgraded the package to ESM.</p>
<h2>What's Changed</h2>
<ul>
<li>Add proxy integration test by <a
href="https://github.com/Link "><code>@Link</code></a>- in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
<li>Upgrade the module to ESM and bump dependencies by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/762 ">actions/upload-artifact#762</a></li>
<li>Support direct file uploads by <a
href="https://github.com/danwkennedy "><code>@danwkennedy</code></a> in
<a
href="https://redirect.github.com/actions/upload-artifact/pull/764 ">actions/upload-artifact#764</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Link "><code>@Link</code></a>- made
their first contribution in <a
href="https://redirect.github.com/actions/upload-artifact/pull/754 ">actions/upload-artifact#754</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/actions/upload-artifact/compare/v6...v7.0.0 ">https://github.com/actions/upload-artifact/compare/v6...v7.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bbbca2ddaahttps://redirect.github.com/actions/upload-artifact/issues/764 ">#764</a>)</li>
<li><a
href="589182c5a4https://redirect.github.com/actions/upload-artifact/issues/762 ">#762</a>)</li>
<li><a
href="47309c993ahttps://redirect.github.com/actions/upload-artifact/issues/754 ">#754</a>
from actions/Link-/add-proxy-integration-tests</li>
<li><a
href="02a8460834b7c566a772...bbbca2ddaahttps://github.com/docker/login-action/releases ">docker/login-action's
releases</a>.</em></p>
<blockquote>
<h2>v4.0.0</h2>
<ul>
<li>Node 24 as default runtime (requires <a
href="https://github.com/actions/runner/releases/tag/v2.327.1 ">Actions
Runner v2.327.1</a> or later) by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/929 ">docker/login-action#929</a></li>
<li>Switch to ESM and update config/test wiring by <a
href="https://github.com/crazy-max "><code>@crazy-max</code></a> in <a
href="https://redirect.github.com/docker/login-action/pull/927 ">docker/login-action#927</a></li>
<li>Bump <code>@actions/core</code> from 1.11.1 to 3.0.0 in <a
href="https://redirect.github.com/docker/login-action/pull/919 ">docker/login-action#919</a></li>
<li>Bump <code>@aws-sdk/client-ecr</code> from 3.890.0 to 3.1000.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/909 ">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920 ">docker/login-action#920</a></li>
<li>Bump <code>@aws-sdk/client-ecr-public</code> from 3.890.0 to
3.1000.0 in <a
href="https://redirect.github.com/docker/login-action/pull/909 ">docker/login-action#909</a>
<a
href="https://redirect.github.com/docker/login-action/pull/920 ">docker/login-action#920</a></li>
<li>Bump <code>@docker/actions-toolkit</code> from 0.63.0 to 0.77.0 in
<a
href="https://redirect.github.com/docker/login-action/pull/910 ">docker/login-action#910</a>
<a
href="https://redirect.github.com/docker/login-action/pull/928 ">docker/login-action#928</a></li>
<li>Bump <code>@isaacs/brace-expansion</code> from 5.0.0 to 5.0.1 in <a
href="https://redirect.github.com/docker/login-action/pull/921 ">docker/login-action#921</a></li>
<li>Bump js-yaml from 4.1.0 to 4.1.1 in <a
href="https://redirect.github.com/docker/login-action/pull/901 ">docker/login-action#901</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/docker/login-action/compare/v3.7.0...v4.0.0 ">https://github.com/docker/login-action/compare/v3.7.0...v4.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b45d80f862https://redirect.github.com/docker/login-action/issues/929 ">#929</a>
from crazy-max/node24</li>
<li><a
href="176cb9c12acad8984310https://redirect.github.com/docker/login-action/issues/920 ">#920</a>
from docker/dependabot/npm_and_yarn/aws-sdk-dependenc...</li>
<li><a
href="92cbcb231e5a2d6a71bd44512b6b2ehttps://redirect.github.com/docker/login-action/issues/928 ">#928</a>
from docker/dependabot/npm_and_yarn/docker/actions-to...</li>
<li><a
href="28737a5e46dac079354a62029f315dhttps://redirect.github.com/docker/login-action/issues/919 ">#919</a>
from docker/dependabot/npm_and_yarn/actions/core-3.0.0</li>
<li><a
href="08c8f064bfc94ce9fb46...b45d80f862https://github.com/anchore/sbom-action/releases ">anchore/sbom-action's
releases</a>.</em></p>
<blockquote>
<h2>v0.23.0</h2>
<ul>
<li>switch to single-file dist build with sub-action flags and update
dependencies (<a
href="https://redirect.github.com/anchore/sbom-action/issues/595 ">#595</a>)
[<a href="https://github.com/kzantow "><code>@kzantow</code></a>]</li>
<li>switch to esbuild (<a
href="https://redirect.github.com/anchore/sbom-action/issues/590 ">#590</a>)
[<a
href="https://github.com/willmurphyscode "><code>@willmurphyscode</code></a>]</li>
<li>update Syft to v1.42.1 (<a
href="https://redirect.github.com/anchore/sbom-action/issues/599 ">#599</a>)
[@<a
href="https://github.com/apps/anchore-actions-token-generator ">anchore-actions-token-generator[bot]</a>]</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="17ae174017https://redirect.github.com/anchore/sbom-action/issues/595 ">#595</a>)</li>
<li><a
href="6d473d3843https://redirect.github.com/anchore/sbom-action/issues/599 ">#599</a>)</li>
<li><a
href="60619e70c0https://redirect.github.com/anchore/sbom-action/issues/598 ">#598</a>)</li>
<li><a
href="e2bd58a025https://redirect.github.com/anchore/sbom-action/issues/592 ">#592</a>)</li>
<li><a
href="d032d7d671https://redirect.github.com/anchore/sbom-action/issues/597 ">#597</a>)</li>
<li><a
href="2d094306a7https://redirect.github.com/anchore/sbom-action/issues/590 ">#590</a>)</li>
<li><a
href="74c5ce948dhttps://redirect.github.com/anchore/sbom-action/issues/589 ">#589</a>)</li>
<li><a
href="77fae5a5abhttps://redirect.github.com/anchore/sbom-action/issues/583 ">#583</a>)</li>
<li><a
href="debc3eeb0fhttps://redirect.github.com/anchore/sbom-action/issues/584 ">#584</a>)</li>
<li><a
href="fff8762a01https://redirect.github.com/anchore/sbom-action/issues/588 ">#588</a>)</li>
<li>See full diff in <a
href="https://github.com/anchore/sbom-action/compare/v0.22.2...v0.23.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `goreleaser/goreleaser-action` from 6.4.0 to 7.0.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/goreleaser-action/releases ">goreleaser/goreleaser-action's
releases</a>.</em></p>
<blockquote>
<h2>v7.0.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat!: node 24, update deps, rm yarn, ESM by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/533 ">goreleaser/goreleaser-action#533</a></li>
<li>sec: pin github action versions by <a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/514 ">goreleaser/goreleaser-action#514</a></li>
<li>docs: Upgrade checkout GitHub Action in README.md by <a
href="https://github.com/dunglas "><code>@dunglas</code></a> in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/507 ">goreleaser/goreleaser-action#507</a></li>
<li>chore(deps): bump actions/checkout from 4 to 5 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/504 ">goreleaser/goreleaser-action#504</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/517 ">goreleaser/goreleaser-action#517</a></li>
<li>ci(deps): bump the actions group with 2 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/523 ">goreleaser/goreleaser-action#523</a></li>
<li>ci(deps): bump docker/bake-action from 6.9.0 to 6.10.0 in the
actions group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/526 ">goreleaser/goreleaser-action#526</a></li>
<li>ci(deps): bump the actions group across 1 directory with 4 updates
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/532 ">goreleaser/goreleaser-action#532</a></li>
<li>ci(deps): bump actions/checkout from 6.0.1 to 6.0.2 in the actions
group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/534 ">goreleaser/goreleaser-action#534</a></li>
<li>chore(deps): bump the npm group across 1 directory with 4 updates by
<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/536 ">goreleaser/goreleaser-action#536</a></li>
<li>chore(deps): bump <code>@actions/http-client</code> from 3.0.2 to
4.0.0 in the npm group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/537 ">goreleaser/goreleaser-action#537</a></li>
<li>ci(deps): bump docker/setup-buildx-action from 3.10.0 to 3.12.0 in
the actions group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/538 ">goreleaser/goreleaser-action#538</a></li>
<li>chore(deps): bump semver from 7.7.3 to 7.7.4 in the npm group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/goreleaser/goreleaser-action/pull/539 ">goreleaser/goreleaser-action#539</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0 ">https://github.com/goreleaser/goreleaser-action/compare/v6...v7.0.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec59f474b9752dedee3d1881ae035dfdc5e662bb51b5b35c3chttps://redirect.github.com/goreleaser/goreleaser-action/issues/539 ">#539</a>)</li>
<li><a
href="4247c53b30https://redirect.github.com/goreleaser/goreleaser-action/issues/538 ">#538</a>)</li>
<li><a
href="c169bfd5ae902ab4a70dhttps://redirect.github.com/goreleaser/goreleaser-action/issues/536 ">#536</a>)</li>
<li><a
href="c59a69131956cc8b2737e435ccd777...ec59f474b9
2026-03-06 02:11:03 +02:00
dependabot[bot]
a5b152f212
build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible ( #1032 )
...
Bumps [github.com/docker/cli](https://github.com/docker/cli ) from
29.0.3+incompatible to 29.2.0+incompatible.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0b9d1985dbhttps://redirect.github.com/docker/cli/issues/6764 ">#6764</a> from
vvoland/update-docker</li>
<li><a
href="9c9ec73588bab3e81e1d2e64fc162ahttps://redirect.github.com/docker/cli/issues/6367 ">#6367</a> from
thaJeztah/template_slicejoin</li>
<li><a
href="1f2ba2ac9dhttps://redirect.github.com/docker/cli/issues/6760 ">#6760</a> from
thaJeztah/container_create_fix_error</li>
<li><a
href="e34a3422cca86356d42fhttps://redirect.github.com/docker/cli/issues/6763 ">#6763</a> from
thaJeztah/bump_mapstructure</li>
<li><a
href="771660a17e9cff36b35ahttps://redirect.github.com/docker/cli/issues/6762 ">#6762</a> from
thaJeztah/bump_x_deps</li>
<li><a
href="08ed2bc6e8https://github.com/docker/cli/compare/v29.0.3...v29.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:10:21 +02:00
dependabot[bot]
26564484ac
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.220.0 to 3.225.1 in /deploy ( #1034 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.220.0 to 3.225.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.225.1</h2>
<h2>3.225.1 (2026-03-05)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[engine] Fix inheritence of default providers across resources of
different packages
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22101 ">#22101</a></p>
</li>
<li>
<p>[programgen/go] Fix panic on digit-prefixed schema properties in Go
code generation
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21917 ">#21917</a></p>
</li>
<li>
<p>[programgen/go] Fix plain values not always being lifted to
input/output values when needed
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22084 ">#22084</a></p>
</li>
<li>
<p>[programgen/python] Fix generation of <code>entries</code> and
<code>lookup</code> calls
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22086 ">#22086</a></p>
</li>
</ul>
<h2>v3.225.0</h2>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959 ">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999 ">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041 ">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066 ">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960 ">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897 ">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076 ">#22076</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h1>Changelog</h1>
<h2>3.225.0 (2026-03-04)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[engine] Automatically make invoke outputs secret when there is a
secret input, and the invoke provider does not support secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21959 ">#21959</a></p>
</li>
<li>
<p>[engine] The engine now handles the inheritance of the
<code>provider</code> option in resource registrations
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21999 ">#21999</a></p>
</li>
<li>
<p>[engine] Enable journaling by default. It can still be turned off
using the PULUMI_DISABLE_JOURNALING env variable
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22041 ">#22041</a></p>
</li>
<li>
<p>[programgen] PCL can now express config values should be read as
secrets
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22066 ">#22066</a></p>
</li>
<li>
<p>[yaml] Update yaml to v1.30.0</p>
</li>
<li>
<p>[cli/engine] Add a flag for automatically opening a Neo task on
preview/up failure
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21960 ">#21960</a></p>
</li>
<li>
<p>[cli/package] Support source-based packages in <code>pulumi schema
check</code>, not just schema files
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21897 ">#21897</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Fix <code>stack import</code> panicking when importing a
service stack into a DIY backend
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22076 ">#22076</a></p>
</li>
<li>
<p>[engine] Fix panic when a new component resource in the program is
not targeted
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21957 ">#21957</a></p>
</li>
<li>
<p>[sdk/nodejs] Implement GetProgramDependencies for bun and pnpm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22065 ">#22065</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Build language plugins with the grpcnotrace tag to reduce the
binary size
<a
href="https://redirect.github.com/pulumi/pulumi/pull/22012 ">#22012</a></li>
</ul>
<h2>3.224.0 (2026-02-26)</h2>
<h3>Features</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="511dda345ahttps://redirect.github.com/pulumi/pulumi/issues/22101 ">#22101</a>)</li>
<li><a
href="46eee5ccaehttps://redirect.github.com/pulumi/pulumi/issues/22084 ">#22084</a>)</li>
<li><a
href="346389a8e6https://redirect.github.com/pulumi/pulumi/issues/22104 ">#22104</a>)</li>
<li><a
href="62a6d208d7https://redirect.github.com/pulumi/pulumi/issues/21917 ">#21917</a>)</li>
<li><a
href="58c7319c9bhttps://redirect.github.com/pulumi/pulumi/issues/22091 ">#22091</a>)</li>
<li><a
href="d2c48abe82https://redirect.github.com/pulumi/pulumi/issues/22086 ">#22086</a>)</li>
<li><a
href="e3eece1a08https://redirect.github.com/pulumi/pulumi/issues/22085 ">#22085</a>)</li>
<li><a
href="ca6228e034https://redirect.github.com/pulumi/pulumi/issues/22081 ">#22081</a>)</li>
<li><a
href="e72496a59ehttps://redirect.github.com/pulumi/pulumi/issues/22080 ">#22080</a>)</li>
<li><a
href="21b4452b91https://redirect.github.com/pulumi/pulumi/issues/22079 ">#22079</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.220.0...v3.225.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:10:02 +02:00
Preeti Dewani
cb4807a7fb
add details of include_deleted in openapi spec ( #1014 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
Add missing spec of include_deleted parameter in openapi spec
## How Has This Been Tested?
NA
## Breaking Changes
No
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
2026-03-01 06:35:50 -08:00
Preeti Dewani
bb84ea69e8
Publisher-managed "deleted" support ( #893 )
...
(Updated auto-generated PR description from @tadasant / Claude on Feb
22, 2026)
## Motivation and Context
Fixes #637
Server lifecycle management (deprecation and yanking) is a standard
requirement for package registries. Use cases like rebranding, security
vulnerabilities, and end-of-life servers demand the ability to mark
servers as deprecated or deleted, with optional messaging to guide
consumers toward alternatives.
## Changes
### New API endpoints
- **`PATCH /v0/servers/{serverName}/versions/{version}/status`** —
Update the lifecycle status of a single server version
- **`PATCH /v0/servers/{serverName}/status`** — Update the lifecycle
status of all versions of a server in a single transaction
Both endpoints accept:
```json
{
"status": "active|deprecated|deleted",
"statusMessage": "Optional message (max 500 chars) explaining the change"
}
```
### New CLI command
- **`mcp-publisher status <serverName> [version]`** — Update server
lifecycle status from the command line
- `--status` (required): `active`, `deprecated`, or `deleted`
- `--message`: Optional status message
- `--all-versions`: Apply to all versions of the server (replaces the
`<version>` argument)
### API response changes
`RegistryExtensions` now includes two new fields:
- `statusChangedAt` — Timestamp of the last status change
- `statusMessage` — Optional free-form message (e.g., deprecation
reason, migration guidance)
### List endpoint changes
- New `include_deleted` query parameter on `GET /v0/servers` — defaults
to `false`, hiding deleted servers from listings
- When `updated_since` is provided, `include_deleted` is automatically
set to `true` for incremental sync
### Database
- Migration `013_add_status_fields.sql`: Adds `status_changed_at` (NOT
NULL, initialized from `published_at`) and `status_message` columns to
the `servers` table
### Design decisions (from review discussion)
- **Dedicated status endpoints** rather than overloading the existing
edit endpoint
- **Bidirectional status transitions** — all transitions between
`active`, `deprecated`, and `deleted` are allowed
- **`statusMessage` as free-form text** — no structured `nextName` or
`alternativeUrl` fields (per maintainer feedback, to avoid complexity
around chaining, trust transfer, etc.)
- **Publish permission** grants status change access (not limited to
admin/edit)
- **Status message auto-cleared** when transitioning back to `active`
Good, now I have the full picture. Here's the addendum:
### Consumer-facing API changes
The new status fields live inside
`_meta["io.modelcontextprotocol.registry/official"]` on every
`ServerResponse`. This is the existing `RegistryExtensions` object — two
new fields are added alongside the existing ones:
**Before:**
```json
{
"server": { "name": "com.example/my-server", "...": "..." },
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "active",
"publishedAt": "2025-06-01T00:00:00Z",
"updatedAt": "2025-06-15T00:00:00Z",
"isLatest": true
}
}
}
```
**After:**
```json
{
"server": { "name": "com.example/my-server", "...": "..." },
"_meta": {
"io.modelcontextprotocol.registry/official": {
"status": "deprecated",
"statusChangedAt": "2026-02-01T12:00:00Z",
"statusMessage": "Deprecated in favor of com.example/my-server-v2",
"publishedAt": "2025-06-01T00:00:00Z",
"updatedAt": "2026-02-01T12:00:00Z",
"isLatest": true
}
}
}
```
| New field | Type | Present when |
|-----------|------|-------------|
| `statusChangedAt` | `string` (RFC3339) | Always — initialized to
`publishedAt` for existing records |
| `statusMessage` | `string` (max 500 chars) | Only when set —
`null`/omitted for active servers (auto-cleared on transition to active)
|
These fields appear on **every endpoint that returns a
`ServerResponse`**: `GET /v0/servers`, `GET /v0/servers/{name}`, `GET
/v0/servers/{name}/versions/{version}`, and the new PATCH status
endpoints.
### List endpoint filtering
`GET /v0/servers` gains an `include_deleted` query parameter:
| Scenario | Behavior |
|----------|----------|
| No `include_deleted` param | Deleted servers hidden (default `false`)
|
| `include_deleted=true` | Deleted servers included in results |
| `updated_since` provided | `include_deleted` forced to `true` for
incremental sync |
## How Has This Been Tested?
- Unit tests for status handler (`status_test.go`) covering status
transitions, permission checks, validation errors, and the all-versions
endpoint
- Unit tests for the CLI command (`status_test.go`)
- Integration with existing server/edit handler tests
- Database layer tests for the new status update and query methods
- Tested locally with `make dev-compose`
## Types of changes
- [x] New feature (non-breaking change which adds functionality)
## Checklist
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
## Open items from review
- [ ] `include_deleted` silent override: When `updated_since` is
provided and `include_deleted=false` is explicitly passed, should return
a 400 error rather than silently overriding
([thread](https://github.com/modelcontextprotocol/registry/pull/893#discussion_r2100879360 ))
— agreed upon but may not yet be implemented
2026-02-27 09:00:07 -08:00
Den Delimarsky
01e4e2b09e
Update SECURITY.md to use GitHub Security Advisories ( #977 )
...
Replaces Anthropic HackerOne VDP references with standard GitHub
Security Advisory process.
2026-02-18 23:36:23 -08:00
dependabot[bot]
541c8a78c0
build(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.219.0 to 3.220.0 in /deploy ( #953 )
...
Bumps
[github.com/pulumi/pulumi/sdk/v3](https://github.com/pulumi/pulumi ) from
3.219.0 to 3.220.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/releases ">github.com/pulumi/pulumi/sdk/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.220.0</h2>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709 ">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408 ">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572 ">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720 ">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707 ">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576 ">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620 ">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722 ">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is >= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663 ">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/pulumi/pulumi/blob/master/CHANGELOG.md ">github.com/pulumi/pulumi/sdk/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.220.0 (2026-02-10)</h2>
<h3>Features</h3>
<ul>
<li>
<p>[cli] Show environment variables that were set if a snapshot
integrity error happens
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21709 ">#21709</a></p>
</li>
<li>
<p>[cli/{install,package}] Use the Pulumi Cloud Registry by default to
resolve package names</p>
</li>
<li>
<p>[engine] Pass replacement trigger through to Construct
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21408 ">#21408</a></p>
</li>
<li>
<p>[engine] Add EnvVarMappings resource option for provider resources,
allowing environment variables to be remapped before being passed to the
provider
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21572 ">#21572</a></p>
</li>
<li>
<p>[pkg] BREAKING: Deprecate
github.com/pulumi/pulumi/pkg/v3/codegen/dotnet in favor of
github.com/pulumi/pulumi-dotnet/pulumi-language-dotnet/v3/codegen. This
package will be removed from pulumi/pulumi soon!
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21720 ">#21720</a></p>
</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>
<p>[cli] Retry <code>yarn install</code> when it fails (e.g. during
<code>pulumi install</code>)
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21707 ">#21707</a></p>
</li>
<li>
<p>[engine] Deal with errors in elided journal entries correctly
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21576 ">#21576</a></p>
</li>
<li>
<p>[sdk/nodejs] Fix remote components with
PULUMI_NODEJS_SKIP_COMPONENT_INPUTS</p>
</li>
<li>
<p>[sdk/python] Fix <code>_LazyModule</code> to not trigger full module
load for introspection attributes
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21620 ">#21620</a></p>
</li>
<li>
<p>[sdkgen/python] Remove workaround for slow typechecking with MyPy and
PyCharm
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21722 ">#21722</a></p>
</li>
</ul>
<h3>Miscellaneous</h3>
<ul>
<li>[cli] Write logfile location if verbosity is >= 1 to stderr
instead of stdout
<a
href="https://redirect.github.com/pulumi/pulumi/pull/21663 ">#21663</a></li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8ecd95a5ehttps://redirect.github.com/pulumi/pulumi/issues/21727 ">#21727</a>)</li>
<li><a
href="4c2cc2a729https://redirect.github.com/pulumi/pulumi/issues/21764 ">#21764</a>)</li>
<li><a
href="8dc466ce6ehttps://redirect.github.com/pulumi/pulumi/issues/21649 ">#21649</a>)</li>
<li><a
href="2ce415c413https://redirect.github.com/pulumi/pulumi/issues/21732 ">#21732</a>)</li>
<li><a
href="5d49339b03https://redirect.github.com/pulumi/pulumi/issues/21758 ">#21758</a>)</li>
<li><a
href="dbcad3b0bahttps://redirect.github.com/pulumi/pulumi/issues/21572 ">#21572</a>)</li>
<li><a
href="f5dc5a3fffhttps://redirect.github.com/pulumi/pulumi/issues/21709 ">#21709</a>)</li>
<li><a
href="82d584e2d4https://redirect.github.com/pulumi/pulumi/issues/21729 ">#21729</a>)</li>
<li><a
href="f8aaed4083https://redirect.github.com/pulumi/pulumi/issues/2 ">#2</a>...</li>
<li><a
href="3392d063dbhttps://redirect.github.com/pulumi/pulumi/issues/21722 ">#21722</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/pulumi/pulumi/compare/v3.219.0...v3.220.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-11 10:31:55 +02:00
Radoslav Dimitrov
4e1d46d843
Bump production to v1.4.1 ( #952 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR bumps prod to v1.4.1
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-10 23:39:51 +02:00
deerajkumar18
b5f38fcc2a
update schema url point to the actual location ( #884 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
This PR ensures that the draft URL points to the actual draft schema
improvement suggested in
https://github.com/modelcontextprotocol/registry/issues/814
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [x] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
2026-02-10 13:32:58 -08:00
dependabot[bot]
a5f2dc1b66
build(deps): bump github.com/go-git/go-git/v5 from 5.16.2 to 5.16.5 in /deploy ( #950 )
...
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git )
from 5.16.2 to 5.16.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases ">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.16.5</h2>
<h2>What's Changed</h2>
<ul>
<li>build: Update module golang.org/x/crypto to v0.45.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1744 ">go-git/go-git#1744</a></li>
<li>build: Bump Go test versions to 1.23-1.25 (v5) by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1746 ">go-git/go-git#1746</a></li>
<li>[v5] git: worktree, Don't delete local untracked files when
resetting worktree by <a
href="https://github.com/Ch00k "><code>@Ch00k</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1800 ">go-git/go-git#1800</a></li>
<li>Expand packfile checks by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1836 ">go-git/go-git#1836</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5 ">https://github.com/go-git/go-git/compare/v5.16.4...v5.16.5 </a></p>
<h2>v5.16.4</h2>
<h2>What's Changed</h2>
<ul>
<li>backport plumbing: format/idxfile, prevent panic by <a
href="https://github.com/swills "><code>@swills</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1732 ">go-git/go-git#1732</a></li>
<li>[backport] build: test, Fix build on Windows. by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1734 ">go-git/go-git#1734</a></li>
<li>build: Update module golang.org/x/net to v0.38.0 [SECURITY]
(releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1742 ">go-git/go-git#1742</a></li>
<li>build: Update module github.com/cloudflare/circl to v1.6.1
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1741 ">go-git/go-git#1741</a></li>
<li>build: Update module github.com/go-git/go-git/v5 to v5.13.0
[SECURITY] (releases/v5.x) by <a
href="https://github.com/go-git-renovate "><code>@go-git-renovate</code></a>[bot]
in <a
href="https://redirect.github.com/go-git/go-git/pull/1743 ">go-git/go-git#1743</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 ">https://github.com/go-git/go-git/compare/v5.16.3...v5.16.4 </a></p>
<h2>v5.16.3</h2>
<h2>What's Changed</h2>
<ul>
<li>internal: Expand regex to fix build [5.x] by <a
href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1644 ">go-git/go-git#1644</a></li>
<li>build: raise timeouts for windows CI tests and disable CIFuzz [5.x]
by <a href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1646 ">go-git/go-git#1646</a></li>
<li>plumbing: support commits extra headers, support jujutsu signed
commit [5.x] by <a
href="https://github.com/baloo "><code>@baloo</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/1633 ">go-git/go-git#1633</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3 ">https://github.com/go-git/go-git/compare/v5.16.2...v5.16.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="48a1ae05eehttps://redirect.github.com/go-git/go-git/issues/1836 ">#1836</a>
from go-git/check-v5</li>
<li><a
href="42bdf1f9044146a5653f63d78ec08025f1624754https://redirect.github.com/go-git/go-git/issues/1800 ">#1800</a>
from Ch00k/no-delete-untracked-v5</li>
<li><a
href="600fb13907390a569415https://redirect.github.com/go-git/go-git/issues/1746 ">#1746</a>
from pjbgf/bump-go</li>
<li><a
href="61c8b859cee5a05ecd4fhttps://redirect.github.com/go-git/go-git/issues/1744 ">#1744</a>
from go-git/renovate/releases/v5.x-go-golang.org-x-c...</li>
<li><a
href="1495930b09https://github.com/go-git/go-git/compare/v5.16.2...v5.16.5 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 22:54:52 +02:00
Yusufhan Saçak
Radoslav Dimitrov
dependabot[bot]
Jonathan Hefner
Tadas Antanavicius
Preeti Dewani
Den Delimarsky
deerajkumar18