dependabot[bot]
cc48844ebc
build(deps): bump github.com/jackc/pgx/v5 from 5.9.1 to 5.9.2 ( #1188 )
...
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) from 5.9.1
to 5.9.2.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jackc/pgx/blob/master/CHANGELOG.md ">github.com/jackc/pgx/v5's
changelog</a>.</em></p>
<blockquote>
<h1>5.9.2 (April 18, 2026)</h1>
<p>Fix SQL Injection via placeholder confusion with dollar quoted string
literals (GHSA-j88v-2chj-qfwx)</p>
<p>SQL injection can occur when:</p>
<ol>
<li>The non-default simple protocol is used.</li>
<li>A dollar quoted string literal is used in the SQL query.</li>
<li>That query contains text that would be would be interpreted outside
as a placeholder outside of a string literal.</li>
<li>The value of that placeholder is controllable by the attacker.</li>
</ol>
<p>e.g.</p>
<pre lang="go"><code>attackValue := `$tag$; drop table canary; --`
_, err = tx.Exec(ctx, `select $tag$ $1 $tag$, $1`,
pgx.QueryExecModeSimpleProtocol, attackValue)
</code></pre>
<p>This is unlikely to occur outside of a contrived scenario.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0aeabbcf1160644f8491a5680bc945https://redirect.github.com/jackc/pgx/issues/2531 ">#2531</a> from
dolmen-go/godoc-add-links</li>
<li><a
href="e34e45240008c9bb1f0d96b4dbdfd0acf88e0065https://redirect.github.com/jackc/pgx/issues/2526 ">#2526</a> from
abrightwell/abrightwell-min-proto</li>
<li><a
href="2f81f1fc03https://github.com/jackc/pgx/compare/v5.9.1...v5.9.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-21 05:02:43 -04:00
dependabot[bot]
0c5dde243b
build(deps): bump github.com/google/go-containerregistry from 0.21.4 to 0.21.5 ( #1162 )
2026-04-14 05:19:36 -04:00
dependabot[bot]
1e83267610
build(deps): bump cloud.google.com/go/kms from 1.27.0 to 1.29.0 ( #1163 )
2026-04-14 05:19:09 -04:00
dependabot[bot]
07fa85f68b
build(deps): bump github.com/coreos/go-oidc/v3 from 3.17.0 to 3.18.0 ( #1140 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc )
from 3.17.0 to 3.18.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coreos/go-oidc/releases ">github.com/coreos/go-oidc/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.18.0</h2>
<h2>What's Changed</h2>
<ul>
<li>.github: configure dependabot by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/477 ">coreos/go-oidc#477</a></li>
<li>.github: update go versions in CI by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/480 ">coreos/go-oidc#480</a></li>
<li>build(deps): bump golang.org/x/oauth2 from 0.28.0 to 0.36.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/coreos/go-oidc/pull/478 ">coreos/go-oidc#478</a></li>
<li>build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/coreos/go-oidc/pull/479 ">coreos/go-oidc#479</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 ">https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="da6b3bfca87f806942157271de57583ccf20fdc4https://github.com/coreos/go-oidc/compare/v3.17.0...v3.18.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 18:16:23 -04:00
dependabot[bot]
607d52ff20
build(deps): bump github.com/go-jose/go-jose/v4 from 4.1.3 to 4.1.4 ( #1114 )
...
Bumps
[github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose ) from
4.1.3 to 4.1.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-jose/go-jose/releases ">github.com/go-jose/go-jose/v4's
releases</a>.</em></p>
<blockquote>
<h2>v4.1.4</h2>
<h2>What's Changed</h2>
<p>Fixes Panic in JWE decryption. See <a
href="https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 ">https://github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8 </a></p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 ">https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0e59876635ddffdbcec8https://redirect.github.com/go-jose/go-jose/issues/213 ">#213</a>)</li>
<li>See full diff in <a
href="https://github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:20:12 -04:00
dependabot[bot]
5f81cf3336
build(deps): bump cloud.google.com/go/kms from 1.26.0 to 1.27.0 ( #1111 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.26.0 to 1.27.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>kms: v1.27.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.26.0...kms/v1.27.0 ">v1.27.0</a>
(2026-04-02)</h2>
<h2>retail: v1.27.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.26.0...retail/v1.27.0 ">v1.27.0</a>
(2026-04-02)</h2>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.26.1...documentai/v1.27.0 ">1.27.0</a>
(2024-04-15)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Support a new Layout Processor in
Document AI (<a
href="2cdc40a0b4https://github.com/googleapis/google-cloud-go/compare/documentai/v1.26.0...documentai/v1.26.1 ">1.26.1</a>
(2024-03-14)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Update protobuf dep to v1.33.0 (<a
href="30b038d8ca25c3f2dfcfb64e8dcf0ahttps://redirect.github.com/googleapis/google-cloud-go/issues/13116 ">#13116</a>)</li>
<li><a
href="ddc086c9e3c79db96ce2https://redirect.github.com/googleapis/google-cloud-go/issues/13101 ">#13101</a>)</li>
<li><a
href="b041315902https://redirect.github.com/googleapis/google-cloud-go/issues/13112 ">#13112</a>)</li>
<li><a
href="a75de408e8https://redirect.github.com/googleapis/google-cloud-go/issues/13110 ">#13110</a>)</li>
<li><a
href="3cf5269fachttps://redirect.github.com/googleapis/google-cloud-go/issues/13109 ">#13109</a>)</li>
<li><a
href="7663fdce36https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="8ebb89625chttps://redirect.github.com/googleapis/google-cloud-go/issues/13107 ">#13107</a>)</li>
<li><a
href="befb302203https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="1930511848https://redirect.github.com/googleapis/google-cloud-go/issues/13089 ">#13089</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.26.0...dlp/v1.27.0 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-04-09 14:19:50 -04:00
dependabot[bot]
53af38ee38
build(deps): bump the opentelemetry group across 1 directory with 6 updates ( #1134 )
...
Bumps the opentelemetry group with 2 updates in the / directory:
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
and
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go ).
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.67.0 to 0.68.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.43.0 / v2.5.0 / v0.68.0 / v0.37.0 / v0.23.0 / v0.18.0 / v0.16.0 /
v0.15.0</h2>
<h2>Added</h2>
<ul>
<li>Add <code>Resource</code> method to <code>SDK</code> in
<code>go.opentelemetry.io/contrib/otelconf/v0.3.0</code> to expose the
resolved SDK resource from declarative configuration. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8660 ">#8660</a>)</li>
<li>Add support to set the configuration file via
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
<li>Add support for <code>service</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8674 ">#8674</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in tracer provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8687 ">#8687</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in logger provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8686 ">#8686</a>)</li>
<li>Add support for <code>server.address</code> and
<code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
<li>Add support for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
Supported values are <code>rpc</code> (default), <code>rpc/dup</code>
and <code>rpc/old</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8726 ">#8726</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8632 ">#8632</a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li>Prepend <code>_</code> to the normalized environment variable name
when the key starts with a digit in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, ensuring
POSIX compliance. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8678 ">#8678</a>)</li>
<li>Move experimental types from
<code>go.opentelemetry.io/contrib/otelconf</code> to
<code>go.opentelemetry.io/contrib/otelconf/x</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li>Normalize cached environment variable names in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, aligning
<code>Carrier.Keys</code> output with the carrier's normalized key
format. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Fix <code>go.opentelemetry.io/contrib/otelconf</code> Prometheus
reader converting OTel dot-style label names (e.g.
<code>service.name</code>) to underscore-style
(<code>service_name</code>) in <code>target_info</code> when both
<code>without_type_suffix</code> and <code>without_units</code> are set.
Use <code>NoTranslation</code> instead of
<code>UnderscoreEscapingWithoutSuffixes</code> to preserve dot-style
label names while still suppressing metric name suffixes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li>Limit the request body size at 1MB in
<code>go.opentelemetry.io/contrib/zpages</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8656 ">#8656</a>)</li>
<li>Fix server spans using the client's address and port for
<code>server.address</code> and <code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
</ul>
<h2>Removed</h2>
<ul>
<li>Host ID resource detector has been removed when configuring the
<code>host</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8581 ">#8581</a>)</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>Deprecate <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> in favour of
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update module github.com/jgautheron/goconst to v1.9.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8651 ">open-telemetry/opentelemetry-go-contrib#8651</a></li>
<li>chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8652 ">open-telemetry/opentelemetry-go-contrib#8652</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to e526e8a by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8647 ">open-telemetry/opentelemetry-go-contrib#8647</a></li>
<li>chore(deps): update module k8s.io/klog/v2 to v2.140.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8650 ">open-telemetry/opentelemetry-go-contrib#8650</a></li>
<li>chore(deps): update module github.com/mgechev/revive to v1.14.0 by
<a href="https://github.com/mmorel-35 "><code>@mmorel-35</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8646 ">open-telemetry/opentelemetry-go-contrib#8646</a></li>
<li>chore(deps): update module github.com/mgechev/revive to v1.15.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8539 ">open-telemetry/opentelemetry-go-contrib#8539</a></li>
<li>chore: fix noctx issues by <a
href="https://github.com/mmorel-35 "><code>@mmorel-35</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8645 ">open-telemetry/opentelemetry-go-contrib#8645</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8655 ">open-telemetry/opentelemetry-go-contrib#8655</a></li>
<li>chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8654 ">open-telemetry/opentelemetry-go-contrib#8654</a></li>
<li>chore(deps): update module github.com/mattn/go-runewidth to v0.0.21
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8653 ">open-telemetry/opentelemetry-go-contrib#8653</a></li>
<li>fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8657 ">open-telemetry/opentelemetry-go-contrib#8657</a></li>
<li>Limit the number of bytes read from the zpages body by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8656 ">open-telemetry/opentelemetry-go-contrib#8656</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8648 ">open-telemetry/opentelemetry-go-contrib#8648</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8661 ">open-telemetry/opentelemetry-go-contrib#8661</a></li>
<li>chore(deps): update github.com/securego/gosec/v2 digest to 8895462
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8663 ">open-telemetry/opentelemetry-go-contrib#8663</a></li>
<li>otelconf: support OTEL_CONFIG_FILE as it is no longer experimental
by <a href="https://github.com/codeboten "><code>@codeboten</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8639 ">open-telemetry/opentelemetry-go-contrib#8639</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8664 ">open-telemetry/opentelemetry-go-contrib#8664</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] -
2026-04-03</h2>
<h3>Added</h3>
<ul>
<li>Add <code>Resource</code> method to <code>SDK</code> in
<code>go.opentelemetry.io/contrib/otelconf/v0.3.0</code> to expose the
resolved SDK resource from declarative configuration. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8660 ">#8660</a>)</li>
<li>Add support to set the configuration file via
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
<li>Add support for <code>service</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8674 ">#8674</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in tracer provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8687 ">#8687</a>)</li>
<li>Add support for <code>attribute_count_limit</code> and
<code>attribute_value_length_limit</code> in logger provider
configuration in <code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8686 ">#8686</a>)</li>
<li>Add support for <code>server.address</code> and
<code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
<li>Add support for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
Supported values are <code>rpc</code> (default), <code>rpc/dup</code>
and <code>rpc/old</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8726 ">#8726</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8632 ">#8632</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Prepend <code>_</code> to the normalized environment variable name
when the key starts with a digit in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, ensuring
POSIX compliance. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8678 ">#8678</a>)</li>
<li>Move experimental types from
<code>go.opentelemetry.io/contrib/otelconf</code> to
<code>go.opentelemetry.io/contrib/otelconf/x</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li>Normalize cached environment variable names in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>, aligning
<code>Carrier.Keys</code> output with the carrier's normalized key
format. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>go.opentelemetry.io/contrib/otelconf</code> Prometheus
reader converting OTel dot-style label names (e.g.
<code>service.name</code>) to underscore-style
(<code>service_name</code>) in <code>target_info</code> when both
<code>without_type_suffix</code> and <code>without_units</code> are set.
Use <code>NoTranslation</code> instead of
<code>UnderscoreEscapingWithoutSuffixes</code> to preserve dot-style
label names while still suppressing metric name suffixes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li>Limit the request body size at 1MB in
<code>go.opentelemetry.io/contrib/zpages</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8656 ">#8656</a>)</li>
<li>Fix server spans using the client's address and port for
<code>server.address</code> and <code>server.port</code> attributes in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8723 ">#8723</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Host ID resource detector has been removed when configuring the
<code>host</code> resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8581 ">#8581</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> in favour of
<code>OTEL_CONFIG_FILE</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8639 ">#8639</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="45977a4b9chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8769 ">#8769</a>)</li>
<li><a
href="0fcc1524d1eaba3cdaa1https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8776 ">#8776</a>)</li>
<li><a
href="6df430c480https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8771 ">#8771</a>)</li>
<li><a
href="ae90e3237ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8763 ">#8763</a>)</li>
<li><a
href="f202c3f800https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8529 ">#8529</a>)</li>
<li><a
href="8ddaecee1chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8764 ">#8764</a>)</li>
<li><a
href="c7c03a47d4https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8766 ">#8766</a>)</li>
<li><a
href="717a85a203https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8761 ">#8761</a>)</li>
<li><a
href="ad990b6d55https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8765 ">#8765</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.67.0...zpages/v0.68.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.64.0 to
0.65.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.43.0/v0.65.0/v0.19.0</h2>
<h2>Added</h2>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h2>Changed</h2>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Refactor slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h2>Deprecated</h2>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update module github.com/jgautheron/goconst to v1.9.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014 ">open-telemetry/opentelemetry-go#8014</a></li>
<li>fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to 190d7d4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013 ">open-telemetry/opentelemetry-go#8013</a></li>
<li>chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016 ">open-telemetry/opentelemetry-go#8016</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011 ">open-telemetry/opentelemetry-go#8011</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023 ">open-telemetry/opentelemetry-go#8023</a></li>
<li>fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020 ">open-telemetry/opentelemetry-go#8020</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.64.0...exporters/prometheus/v0.65.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9276201a64https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8128 ">#8128</a>)</li>
<li><a
href="61b8c9466chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8131 ">#8131</a>)</li>
<li><a
href="97a086e82fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8122 ">#8122</a>)</li>
<li><a
href="5e363de517https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><a
href="35214b6013https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113 ">#8113</a>)</li>
<li><a
href="290024ceafhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8121 ">#8121</a>)</li>
<li><a
href="e70658e098https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096 ">#8096</a>)</li>
<li><a
href="4afe468e3bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8117 ">#8117</a>)</li>
<li><a
href="b9ca729776https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8115 ">#8115</a>)</li>
<li><a
href="69472ec56chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8118 ">#8118</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.42.0 to 1.43.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>IsRandom</code> and <code>WithRandom</code> on
<code>TraceFlags</code>, and <code>IsRandom</code> on
<code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code>
for <a
href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag ">W3C
Trace Context Level 2 Random Trace ID Flag</a> support. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012 ">#8012</a>)</li>
<li>Add service detection with <code>WithService</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642 ">#7642</a>)</li>
<li>Add <code>DefaultWithContext</code> and
<code>EnvironmentWithContext</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing
<code>context.Context</code> through default and environment detectors.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051 ">#8051</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Support attributes with empty value (<code>attribute.EMPTY</code>)
in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Add support for per-series start time tracking for cumulative
metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>.
Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060 ">#8060</a>)</li>
<li>Add <code>WithCardinalityLimitSelector</code> for metric reader for
configuring cardinality limits specific to the instrument kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855 ">#7855</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Introduce the <code>EMPTY</code> Type in
<code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty
value is now a valid value, with <code>INVALID</code> remaining as a
deprecated alias of <code>EMPTY</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
<li>Improve slice handling in
<code>go.opentelemetry.io/otel/attribute</code> to optimize short slice
values with fixed-size fast paths. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039 ">#8039</a>)</li>
<li>Improve performance of span metric recording in
<code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if
self-observability is not enabled. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067 ">#8067</a>)</li>
<li>Improve formatting of metric data diffs in
<code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073 ">#8073</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>INVALID</code> in
<code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038 ">#8038</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Return spec-compliant <code>TraceIdRatioBased</code> description.
This is a breaking behavioral change, but it is necessary to
make the implementation <a
href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased ">spec-compliant</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027 ">#8027</a>)</li>
<li>Fix a race condition in
<code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue
aggregation could collect the value 0 even when no zero-value
measurements were recorded. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056 ">#8056</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li>Limit HTTP response body to 4 MiB in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
to mitigate excessive memory usage caused by a misconfigured or
malicious server.
Responses exceeding the limit are treated as non-retryable errors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108 ">#8108</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>kenv</code> command on BSD. (<a
href="https://redirect.github.com/open-telemetry/opent ...
_Description has been truncated_
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:33:36 -04:00
dependabot[bot]
81bc5ff653
build(deps): bump github.com/google/go-containerregistry from 0.21.3 to 0.21.4 ( #1131 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.21.3 to 0.21.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.4</h2>
<h2>What's Changed</h2>
<ul>
<li>go.mod: do not make a viral minimum go version by <a
href="https://github.com/howardjohn "><code>@howardjohn</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2237 ">google/go-containerregistry#2237</a></li>
<li>Avoid pruning absolute links from extracted and flattened images by
<a href="https://github.com/Subserial "><code>@Subserial</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2241 ">google/go-containerregistry#2241</a></li>
<li>Bump the go-deps group across 3 directories with 5 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2245 ">google/go-containerregistry#2245</a></li>
<li>fix: update to go1.25.8, and use separate .go-version file by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2246 ">google/go-containerregistry#2246</a></li>
<li>Bump CI go version to 1.26.1 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2242 ">google/go-containerregistry#2242</a></li>
<li>Bump codecov/codecov-action from 5.5.2 to 5.5.3 in the actions group
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2240 ">google/go-containerregistry#2240</a></li>
<li>fork distribution client v3 auth-challenge as an internal package
(squashed) by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2248 ">google/go-containerregistry#2248</a></li>
<li>transport: validate Bearer realm URL to prevent SSRF by <a
href="https://github.com/evilgensec "><code>@evilgensec</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2243 ">google/go-containerregistry#2243</a></li>
<li>revert path traversal and symlink escape from <a
href="https://redirect.github.com/google/go-containerregistry/issues/2227 ">#2227</a>
by <a href="https://github.com/Subserial "><code>@Subserial</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2250 ">google/go-containerregistry#2250</a></li>
<li>Fix pkg/v1/google/auth tests for arm64 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2085 ">google/go-containerregistry#2085</a></li>
<li>goreleaser: Update goreleaser config and GH action by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2253 ">google/go-containerregistry#2253</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/evilgensec "><code>@evilgensec</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2243 ">google/go-containerregistry#2243</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 ">https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e8813dd0a0https://redirect.github.com/google/go-containerregistry/issues/2253 ">#2253</a>)</li>
<li><a
href="e90447d319https://redirect.github.com/google/go-containerregistry/issues/2085 ">#2085</a>)</li>
<li><a
href="0d0368c2a5https://redirect.github.com/google/go-containerregistry/issues/2250 ">#2250</a>)</li>
<li><a
href="a2f47d4202https://redirect.github.com/google/go-containerregistry/issues/2243 ">#2243</a>)</li>
<li><a
href="19a36cd8c4c612a9b20ahttps://redirect.github.com/google/go-containerregistry/issues/2240 ">#2240</a>)</li>
<li><a
href="8f92f59fd6https://redirect.github.com/google/go-containerregistry/issues/2242 ">#2242</a>)</li>
<li><a
href="c99e7cf68bhttps://redirect.github.com/google/go-containerregistry/issues/2246 ">#2246</a>)</li>
<li><a
href="0794660d72https://redirect.github.com/google/go-containerregistry/issues/2245 ">#2245</a>)</li>
<li><a
href="4cb93aef09https://redirect.github.com/google/go-containerregistry/issues/2241 ">#2241</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.3...v0.21.4 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-08 05:33:17 -04:00
dependabot[bot]
2a6b00dde7
build(deps): bump github.com/jackc/pgx/v5 from 5.8.0 to 5.9.1 ( #1092 )
...
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) from 5.8.0
to 5.9.1.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jackc/pgx/blob/master/CHANGELOG.md ">github.com/jackc/pgx/v5's
changelog</a>.</em></p>
<blockquote>
<h1>5.9.1 (March 22, 2026)</h1>
<ul>
<li>Fix: batch result format corruption when using cached prepared
statements (reported by Dirkjan Bussink)</li>
</ul>
<h1>5.9.0 (March 21, 2026)</h1>
<p>This release includes a number of new features such as
SCRAM-SHA-256-PLUS support, OAuth authentication support, and
PostgreSQL protocol 3.2 support.</p>
<p>It significantly reduces the amount of network traffic when using
prepared statements (which are used automatically by
default) by avoiding unnecessary Describe Portal messages. This also
reduces local memory usage.</p>
<p>It also includes multiple fixes for potential DoS due to panic or OOM
if connected to a malicious server that sends
deliberately malformed messages.</p>
<ul>
<li>Require Go 1.25+</li>
<li>Add SCRAM-SHA-256-PLUS support (Adam Brightwell)</li>
<li>Add OAuth authentication support for PostgreSQL 18 (David
Schneider)</li>
<li>Add PostgreSQL protocol 3.2 support (Dirkjan Bussink)</li>
<li>Add tsvector type support (Adam Brightwell)</li>
<li>Skip Describe Portal for cached prepared statements reducing network
round trips</li>
<li>Make LoadTypes query easier to support on "postgres-like"
servers (Jelte Fennema-Nio)</li>
<li>Default empty user to current OS user matching libpq behavior
(ShivangSrivastava)</li>
<li>Optimize LRU statement cache with custom linked list and node
pooling (Mathias Bogaert)</li>
<li>Optimize date scanning by replacing regex with manual parsing
(Mathias Bogaert)</li>
<li>Optimize pgio append/set functions with direct byte shifts (Mathias
Bogaert)</li>
<li>Make RowsAffected faster (Abhishek Chanda)</li>
<li>Fix: Pipeline.Close panic when server sends multiple FATAL errors
(Varun Chawla)</li>
<li>Fix: ContextWatcher goroutine leak (Hank Donnay)</li>
<li>Fix: stdlib discard connections with open transactions in
ResetSession (Jeremy Schneider)</li>
<li>Fix: pipelineBatchResults.Exec silently swallowing lastRows
error</li>
<li>Fix: ColumnTypeLength using BPCharArrayOID instead of BPCharOID</li>
<li>Fix: TSVector text encoding returning nil for valid empty
tsvector</li>
<li>Fix: wrong error messages for Int2 and Int4 underflow</li>
<li>Fix: Numeric nil Int pointer dereference with Valid: true</li>
<li>Fix: reversed strings.ContainsAny arguments in
Numeric.ScanScientific</li>
<li>Fix: message length parsing on 32-bit platforms</li>
<li>Fix: FunctionCallResponse.Decode mishandling of signed result
size</li>
<li>Fix: returning wrong error in configTLS when DecryptPEMBlock fails
(Maxim Motyshen)</li>
<li>Fix: misleading ParseConfig error when default_query_exec_mode is
invalid (Skarm)</li>
<li>Fix: missed Unwatch in Pipeline error paths</li>
<li>Clarify too many failed acquire attempts error message</li>
<li>Better error wrapping with context and SQL statement (Aneesh
Makala)</li>
<li>Enable govet and ineffassign linters (Federico Guerinoni)</li>
<li>Guard against various malformed binary messages (arrays, hstore,
multirange, protocol messages)</li>
<li>Fix various godoc comments (ferhat elmas)</li>
<li>Fix typos in comments (Oleksandr Redko)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e4eaedb476273188265f7b90c2f1ahttps://redirect.github.com/jackc/pgx/issues/2524 ">#2524</a> from
dbussink/pipeline-result-format-reuse</li>
<li><a
href="3ce6d75be4b4d8e62b66c227cd4f76f492c14836ad8fb08d3f303377376d83ffb3c222https://github.com/jackc/pgx/compare/v5.8.0...v5.9.1 ">compare
view</a></li>
</ul>
</details>
<br />
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:10:21 -04:00
dependabot[bot]
bc8ff18495
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.37.2 to 2.37.3 ( #1098 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.37.2 to 2.37.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.3</h2>
<h2>Overview</h2>
<p>This bugfix release fixes a few minor bugs and typos from previous
releases.</p>
<p>This also adjusts the HTTP status code returned by Huma if marshaling
a response fails, from 200 to 500.</p>
<h2>What's Changed</h2>
<ul>
<li>Fix: add allow-popups to CSP sandbox for OAuth popups by <a
href="https://github.com/Micaso "><code>@Micaso</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li>Fix: use epsilon tolerance in multipleOf float validation by <a
href="https://github.com/smazurov "><code>@smazurov</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li>Fix typo in groups.md documentation by <a
href="https://github.com/Its-Haze "><code>@Its-Haze</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li>Fix relative schema urls by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/990 ">danielgtaylor/huma#990</a></li>
<li>Return HTTP 500 if marshaling fails by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/997 ">danielgtaylor/huma#997</a></li>
<li>Handle contentEncoding and contentMediaType keys by <a
href="https://github.com/NPellet "><code>@NPellet</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
<li>Chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.11 to
2.52.12 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/984 ">danielgtaylor/huma#984</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/Micaso "><code>@Micaso</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/987 ">danielgtaylor/huma#987</a></li>
<li><a href="https://github.com/smazurov "><code>@smazurov</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/989 ">danielgtaylor/huma#989</a></li>
<li><a href="https://github.com/Its-Haze "><code>@Its-Haze</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/995 ">danielgtaylor/huma#995</a></li>
<li><a href="https://github.com/NPellet "><code>@NPellet</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/919 ">danielgtaylor/huma#919</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a38b53666dhttps://redirect.github.com/danielgtaylor/huma/issues/984 ">#984</a>)</li>
<li><a
href="f4c53634a2https://redirect.github.com/danielgtaylor/huma/issues/919 ">#919</a>)</li>
<li><a
href="1678a04e88https://redirect.github.com/danielgtaylor/huma/issues/997 ">#997</a>)</li>
<li><a
href="1d5dddfc50https://redirect.github.com/danielgtaylor/huma/issues/990 ">#990</a>)</li>
<li><a
href="1b8766d7c3https://redirect.github.com/danielgtaylor/huma/issues/995 ">#995</a>)</li>
<li><a
href="99e60fdd0bhttps://redirect.github.com/danielgtaylor/huma/issues/989 ">#989</a>)</li>
<li><a
href="c6694fa179https://redirect.github.com/danielgtaylor/huma/issues/987 ">#987</a>)</li>
<li>See full diff in <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.2...v2.37.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-04-02 00:03:28 -04:00
dependabot[bot]
9c180f4d33
build(deps): bump google.golang.org/grpc from 1.78.0 to 1.79.3 ( #1076 )
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from
1.78.0 to 1.79.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases ">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.79.3</h2>
<h1>Security</h1>
<ul>
<li>server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted
"deny" rules in interceptors like <code>grpc/authz</code>. Any
request with a non-canonical path is now immediately rejected with an
<code>Unimplemented</code> error. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
</ul>
<h2>Release 1.79.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
(<a
href="https://redirect.github.com/grpc/grpc-go/pull/8874 ">grpc/grpc-go#8874</a>)</li>
</ul>
<h2>Release 1.79.1</h2>
<h1>Bug Fixes</h1>
<ul>
<li>grpc: Remove the <code>-dev</code> suffix from the User-Agent
header. (<a
href="https://redirect.github.com/grpc/grpc-go/pull/8902 ">grpc/grpc-go#8902</a>)</li>
</ul>
<h2>Release 1.79.0</h2>
<h1>API Changes</h1>
<ul>
<li>mem: Add experimental API <code>SetDefaultBufferPool</code> to
change the default buffer pool. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8806 ">#8806</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/vanja-p "><code>@vanja-p</code></a></li>
</ul>
</li>
<li>experimental/stats: Update <code>MetricsRecorder</code> to require
embedding the new <code>UnimplementedMetricsRecorder</code> (a no-op
struct) in all implementations for forward compatibility. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
</ul>
<h1>Behavior Changes</h1>
<ul>
<li>balancer/weightedtarget: Remove handling of <code>Addresses</code>
and only handle <code>Endpoints</code> in resolver updates. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8841 ">#8841</a>)</li>
</ul>
<h1>New Features</h1>
<ul>
<li>experimental/stats: Add support for asynchronous gauge metrics
through the new <code>AsyncMetricReporter</code> and
<code>RegisterAsyncReporter</code> APIs. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8780 ">#8780</a>)</li>
<li>pickfirst: Add support for weighted random shuffling of endpoints,
as described in <a
href="https://redirect.github.com/grpc/proposal/pull/535 ">gRFC A113</a>.
<ul>
<li>This is enabled by default, and can be turned off using the
environment variable
<code>GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING</code>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a>)</li>
</ul>
</li>
<li>xds: Implement <code>:authority</code> rewriting, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md ">gRFC
A81</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8779 ">#8779</a>)</li>
<li>balancer/randomsubsetting: Implement the
<code>random_subsetting</code> LB policy, as specified in <a
href="https://github.com/grpc/proposal/blob/master/A68-random-subsetting.md ">gRFC
A68</a>. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8650 ">#8650</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/marek-szews "><code>@marek-szews</code></a></li>
</ul>
</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>credentials/tls: Fix a bug where the port was not stripped from the
authority override before validation. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8726 ">#8726</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/Atul1710 "><code>@Atul1710</code></a></li>
</ul>
</li>
<li>xds/priority: Fix a bug causing delayed failover to lower-priority
clusters when a higher-priority cluster is stuck in
<code>CONNECTING</code> state. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8813 ">#8813</a>)</li>
<li>health: Fix a bug where health checks failed for clients using
legacy compression options (<code>WithDecompressor</code> or
<code>RPCDecompressor</code>). (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8765 ">#8765</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/sanki92 "><code>@sanki92</code></a></li>
</ul>
</li>
<li>transport: Fix an issue where the HTTP/2 server could skip header
size checks when terminating a stream early. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8769 ">#8769</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
<li>server: Propagate status detail headers, if available, when
terminating a stream during request header processing. (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8754 ">#8754</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/joybestourous "><code>@joybestourous</code></a></li>
</ul>
</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>credentials/alts: Optimize read buffer alignment to reduce copies.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8791 ">#8791</a>)</li>
<li>mem: Optimize pooling and creation of <code>buffer</code> objects.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8784 ">#8784</a>)</li>
<li>transport: Reduce slice re-allocations by reserving slice capacity.
(<a
href="https://redirect.github.com/grpc/grpc-go/issues/8797 ">#8797</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dda86dbd9chttps://redirect.github.com/grpc/grpc-go/issues/8983 ">#8983</a>)</li>
<li><a
href="72186f163ehttps://redirect.github.com/grpc/grpc-go/issues/8981 ">#8981</a>)</li>
<li><a
href="97ca3522b2https://redirect.github.com/grpc/grpc-go/issues/8954 ">#8954</a>)</li>
<li><a
href="8902ab6efehttps://redirect.github.com/grpc/grpc-go/issues/8947 ">#8947</a>)</li>
<li><a
href="a9286705aahttps://redirect.github.com/grpc/grpc-go/issues/8874 ">#8874</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8904 ">#8904</a>)</li>
<li><a
href="06df3638c0https://redirect.github.com/grpc/grpc-go/issues/8903 ">#8903</a>)</li>
<li><a
href="782f2de44fhttps://redirect.github.com/grpc/grpc-go/issues/8902 ">#8902</a>)</li>
<li><a
href="850eccbb22https://redirect.github.com/grpc/grpc-go/issues/8851 ">#8851</a>)</li>
<li><a
href="765ff056b6https://redirect.github.com/grpc/grpc-go/issues/8850 ">#8850</a>)</li>
<li><a
href="68804be0e7https://redirect.github.com/grpc/grpc-go/issues/8864 ">#8864</a> to
v1.79.x (<a
href="https://redirect.github.com/grpc/grpc-go/issues/8896 ">#8896</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.78.0...v1.79.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:56:53 +02:00
dependabot[bot]
9c7c8805cc
build(deps): bump github.com/google/go-containerregistry from 0.21.2 to 0.21.3 ( #1073 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.21.2 to 0.21.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Adds local file support to the <code>crane index</code> subcommand
by <a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li>migrate to github.com/moby/moby modules by <a
href="https://github.com/thaJeztah "><code>@thaJeztah</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li>Bump the go-deps group across 4 directories with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2233 ">google/go-containerregistry#2233</a></li>
<li>Bump goreleaser/goreleaser-action from 6.4.0 to 7.0.0 in the actions
group by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2220 ">google/go-containerregistry#2220</a></li>
<li>mutate: reject path traversal and symlink escape in Extract by <a
href="https://github.com/KevinZhao "><code>@KevinZhao</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li>tarball: detect symlink cycles in extractFileFromTar by <a
href="https://github.com/vnykmshr "><code>@vnykmshr</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
<li>bump golang to 1.25.7 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2236 ">google/go-containerregistry#2236</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/edwardthiele "><code>@edwardthiele</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2223 ">google/go-containerregistry#2223</a></li>
<li><a href="https://github.com/thaJeztah "><code>@thaJeztah</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2228 ">google/go-containerregistry#2228</a></li>
<li><a href="https://github.com/KevinZhao "><code>@KevinZhao</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2227 ">google/go-containerregistry#2227</a></li>
<li><a href="https://github.com/vnykmshr "><code>@vnykmshr</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2232 ">google/go-containerregistry#2232</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3888fb8f87https://redirect.github.com/google/go-containerregistry/issues/2236 ">#2236</a>)</li>
<li><a
href="f4396242bdhttps://redirect.github.com/google/go-containerregistry/issues/2232 ">#2232</a>)</li>
<li><a
href="400c263d8ehttps://redirect.github.com/google/go-containerregistry/issues/2227 ">#2227</a>)</li>
<li><a
href="47eedc9de4https://redirect.github.com/google/go-containerregistry/issues/2220 ">#2220</a>)</li>
<li><a
href="be0a845999https://redirect.github.com/google/go-containerregistry/issues/2233 ">#2233</a>)</li>
<li><a
href="e916301498https://redirect.github.com/google/go-containerregistry/issues/2228 ">#2228</a>)</li>
<li><a
href="8b2478e69fhttps://redirect.github.com/google/go-containerregistry/issues/2223 ">#2223</a>)</li>
<li>See full diff in <a
href="https://github.com/google/go-containerregistry/compare/v0.21.2...v0.21.3 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-19 23:51:32 +02:00
dependabot[bot]
52178183f3
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.35.0 to 2.37.2 ( #989 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.35.0 to 2.37.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.37.2</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue with how form data was being
documented in OpenAPI.</p>
<p>This also fixes embedded objects with valid JSON tags being
incorrectly embedded in the OpenAPI docs.</p>
<h2>What's Changed</h2>
<ul>
<li>Don't embed embedded objects with valid JSON tags by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/978 ">danielgtaylor/huma#978</a></li>
<li>Fix OpenAPI path prefix regression from $schema fix PR by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/979 ">danielgtaylor/huma#979</a></li>
<li>Fix form param doc regression by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/981 ">danielgtaylor/huma#981</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 ">https://github.com/danielgtaylor/huma/compare/v2.37.1...v2.37.2 </a></p>
<h2>v2.37.1</h2>
<h2>Overview</h2>
<p>This bugfix release fixes an issue regarding the Swagger UI docs
renderer, as well as fixes an issue preventing Groups from using the
configurable options released in v2.37.1.</p>
<p>This also brings interface constructors to <code>humamux</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Export Gorilla Mux interface constructors by <a
href="https://github.com/RangelReale "><code>@RangelReale</code></a> in
<a
href="https://redirect.github.com/danielgtaylor/huma/pull/965 ">danielgtaylor/huma#965</a></li>
<li>fix(api): use proper CSP hash for inline script in Swagger doc
renderer by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/977 ">danielgtaylor/huma#977</a></li>
<li>fix(group): ensure "Group" satisfies the configProvider
interface by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/976 ">danielgtaylor/huma#976</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 ">https://github.com/danielgtaylor/huma/compare/v2.37.0...v2.37.1 </a></p>
<h2>v2.37.0</h2>
<h2>Overview</h2>
<h3>Dropped Explicit IDN-Hostname Validation</h3>
<p>This validation unintentionally imported an external library to the
base Huma library. Since this was not a requested feature, it has been
removed for now. The <code>idn-hostname</code> format value has become
an alias for <code>hostname</code> in the meantime.</p>
<h3>Operation ID Normalization</h3>
<p>Spaces in operation IDs get automatically converted to hyphens
now.</p>
<h3>Optimizations & Fixed Memory Leak</h3>
<p>Various internal operations have been optimized (~7% overall
improvement): <a
href="https://redirect.github.com/danielgtaylor/huma/pull/973#issue-3960297052 ">danielgtaylor/huma#973</a></p>
<p>A memory leak when using <code>MultipartFormFiles</code> has been
resolved.</p>
<h3>New Configurable Options</h3>
<h4>Allow Additional Properties By Default</h4>
<p>A new config option has been added to allow additional properties by
default. This can be set in the API config.</p>
<pre lang="go"><code>config.AllowAdditionalPropertiesByDefault = true
</code></pre>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="887f7d4322https://redirect.github.com/danielgtaylor/huma/issues/981 ">#981</a>)</li>
<li><a
href="f02efeb11dhttps://redirect.github.com/danielgtaylor/huma/issues/979 ">#979</a>)</li>
<li><a
href="cbf60b60afhttps://redirect.github.com/danielgtaylor/huma/issues/978 ">#978</a>)</li>
<li><a
href="6d0295c4e1https://redirect.github.com/danielgtaylor/huma/issues/976 ">#976</a>)</li>
<li><a
href="07ca6c5d17https://redirect.github.com/danielgtaylor/huma/issues/977 ">#977</a>)</li>
<li><a
href="58edcf2bf5https://redirect.github.com/danielgtaylor/huma/issues/965 ">#965</a>)</li>
<li><a
href="6c29f67c9dhttps://redirect.github.com/danielgtaylor/huma/issues/916 ">#916</a>)</li>
<li><a
href="3aee9bd172https://redirect.github.com/danielgtaylor/huma/issues/974 ">#974</a>)</li>
<li><a
href="e31a8198adhttps://redirect.github.com/danielgtaylor/huma/issues/973 ">#973</a>)</li>
<li><a
href="ddbb810fd5https://redirect.github.com/danielgtaylor/huma/issues/925 ">#925</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/danielgtaylor/huma/compare/v2.35.0...v2.37.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-16 17:06:31 +02:00
dependabot[bot]
00de8fac8b
build(deps): bump golang.org/x/mod from 0.33.0 to 0.34.0 ( #1054 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.33.0 to
0.34.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1ac721dff8fb1fac8b36https://github.com/golang/mod/compare/v0.33.0...v0.34.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-12 11:46:51 +01:00
dependabot[bot]
c0ecfd5a65
build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.2 ( #1026 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.20.7 to 0.21.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.21.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Better handle redirects to https in ping by <a
href="https://github.com/jonjohnsonjr "><code>@jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2225 ">google/go-containerregistry#2225</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 ">https://github.com/google/go-containerregistry/compare/v0.21.1...v0.21.2 </a></p>
<h2>v0.21.1</h2>
<p>This release fixes a regression in <code>crane</code> introduced in
the previous release.</p>
<h2>What's Changed</h2>
<ul>
<li>Add WithFileBufferedOpener for file-backed daemon image buffering by
<a href="https://github.com/twdamhore "><code>@twdamhore</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li>crane: fix case in auth response json by <a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/twdamhore "><code>@twdamhore</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2214 ">google/go-containerregistry#2214</a></li>
<li><a
href="https://github.com/aelindeman "><code>@aelindeman</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2218 ">google/go-containerregistry#2218</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 ">https://github.com/google/go-containerregistry/compare/v0.21.0...v0.21.1 </a></p>
<h2>v0.21.0</h2>
<p>This release updates the minimum Go version to
<code>1.25.6</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix(mutate): don't skip dir replacements via whiteout in export by
<a href="https://github.com/r4f4 "><code>@r4f4</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li>Improve performance of v1.NewHash by <a
href="https://github.com/bmoylan "><code>@bmoylan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2194 ">google/go-containerregistry#2194</a></li>
<li>Bump the actions group across 1 directory with 4 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2207 ">google/go-containerregistry#2207</a></li>
<li>Bump the root-deps group across 1 directory with 7 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2195 ">google/go-containerregistry#2195</a></li>
<li>Fix error messages in crane_test.go by <a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
<li>Bump go version across packages to 1.25.6 by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2211 ">google/go-containerregistry#2211</a></li>
<li>Join go.mod dependency updates by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2212 ">google/go-containerregistry#2212</a></li>
<li>Bump the go-deps group across 3 directories with 3 updates by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2213 ">google/go-containerregistry#2213</a></li>
<li>Disable taint gosec lints by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2215 ">google/go-containerregistry#2215</a></li>
<li>Update go version used in goreleaser by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2216 ">google/go-containerregistry#2216</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/r4f4 "><code>@r4f4</code></a> made their
first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2191 ">google/go-containerregistry#2191</a></li>
<li><a
href="https://github.com/jammie-jelly "><code>@jammie-jelly</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2189 ">google/go-containerregistry#2189</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 ">https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e0ccb0a72https://redirect.github.com/google/go-containerregistry/issues/2225 ">#2225</a>)</li>
<li><a
href="85f2bf5f73https://redirect.github.com/google/go-containerregistry/issues/2218 ">#2218</a>)</li>
<li><a
href="e971d630dchttps://redirect.github.com/google/go-containerregistry/issues/2214 ">#2214</a>)</li>
<li><a
href="8e2d6a6817https://redirect.github.com/google/go-containerregistry/issues/2216 ">#2216</a>)</li>
<li><a
href="b58334f761https://redirect.github.com/google/go-containerregistry/issues/2215 ">#2215</a>)</li>
<li><a
href="88b39ed906https://redirect.github.com/google/go-containerregistry/issues/2213 ">#2213</a>)</li>
<li><a
href="102ac75ddehttps://redirect.github.com/google/go-containerregistry/issues/2212 ">#2212</a>)</li>
<li><a
href="d5817d559ehttps://redirect.github.com/google/go-containerregistry/issues/2211 ">#2211</a>)</li>
<li><a
href="23f0632fa3https://redirect.github.com/google/go-containerregistry/issues/2189 ">#2189</a>)</li>
<li><a
href="438abde5e7https://redirect.github.com/google/go-containerregistry/issues/2195 ">#2195</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.7...v0.21.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-07 15:31:08 +02:00
dependabot[bot]
03d551dbab
build(deps): bump the opentelemetry group with 6 updates ( #1044 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.66.0` | `0.67.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.63.0` | `0.64.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.41.0` | `1.42.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.66.0 to 0.67.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for <a href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update github artifact actions to v7 (major) by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8605 ">open-telemetry/opentelemetry-go-contrib#8605</a></li>
<li>chore(deps): update module github.com/sonatard/noctx to v0.5.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8610 ">open-telemetry/opentelemetry-go-contrib#8610</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8620 ">open-telemetry/opentelemetry-go-contrib#8620</a></li>
<li>fix(deps): update module github.com/aws/smithy-go to v1.24.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8614 ">open-telemetry/opentelemetry-go-contrib#8614</a></li>
<li>chore(deps): update go-openapi packages by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8621 ">open-telemetry/opentelemetry-go-contrib#8621</a></li>
<li>fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8622 ">open-telemetry/opentelemetry-go-contrib#8622</a></li>
<li>chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8608 ">open-telemetry/opentelemetry-go-contrib#8608</a></li>
<li>chore(deps): update module github.com/protonmail/go-crypto to v1.4.0
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8609 ">open-telemetry/opentelemetry-go-contrib#8609</a></li>
<li>chore(deps): update otel/opentelemetry-collector-contrib docker tag
to v0.147.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8625 ">open-telemetry/opentelemetry-go-contrib#8625</a></li>
<li>chore(deps): update module github.com/daixiang0/gci to v0.14.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8623 ">open-telemetry/opentelemetry-go-contrib#8623</a></li>
<li>Drop support for 1.24 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8628 ">open-telemetry/opentelemetry-go-contrib#8628</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8554 ">open-telemetry/opentelemetry-go-contrib#8554</a></li>
<li>fix(deps): update kubernetes packages to v0.35.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8626 ">open-telemetry/opentelemetry-go-contrib#8626</a></li>
<li>fix(deps): update aws-sdk-go-v2 monorepo by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8598 ">open-telemetry/opentelemetry-go-contrib#8598</a></li>
<li>fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8630 ">open-telemetry/opentelemetry-go-contrib#8630</a></li>
<li>otelgrpc: modernize the example project by <a
href="https://github.com/ash2k "><code>@ash2k</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8619 ">open-telemetry/opentelemetry-go-contrib#8619</a></li>
<li>chore(deps): update googleapis to a57be14 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8606 ">open-telemetry/opentelemetry-go-contrib#8606</a></li>
<li>fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8627 ">open-telemetry/opentelemetry-go-contrib#8627</a></li>
<li>chore(deps): update module github.com/prometheus/procfs to v0.20.1
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8624 ">open-telemetry/opentelemetry-go-contrib#8624</a></li>
<li>fix(otelhttp): make Body handling in Transport consistent with
stdlib by <a href="https://github.com/ash2k "><code>@ash2k</code></a> in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8618 ">open-telemetry/opentelemetry-go-contrib#8618</a></li>
<li>otelhttp: Ignore informational response status codes when persisting
status by <a
href="https://github.com/VirrageS "><code>@VirrageS</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/6913 ">open-telemetry/opentelemetry-go-contrib#6913</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] -
2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add environment variables propagation carrier in
<code>go.opentelemetry.io/contrib/propagators/envcar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>
<p>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.40.0</code>, including updates across instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8631 ">#8631</a>)</p>
<ul>
<li>The semantic conventions v1.40.0 release introduces RPC breaking
changes applied in this repository:
<ul>
<li>RPC spans and metrics no longer include
<code>network.protocol.name</code>,
<code>network.protocol.version</code>, or <code>network.transport</code>
attributes.</li>
<li><code>rpc.client.request.size</code>,
<code>rpc.client.response.size</code>,
<code>rpc.server.request.size</code>, and
<code>rpc.server.response.size</code> are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.</li>
<li><code>rpc.message</code> span events and their message attributes
are no longer emitted in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
(including when <code>WithMessageEvents</code> is configured).</li>
</ul>
</li>
</ul>
<p>See <a
href="https://github.com/open-telemetry/semantic-conventions/releases/tag/v1.40.0 ">semantic-conventions
v1.40.0 release</a> for complete details.</p>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Ignore informational response status codes (<code>100-199</code>)
except <code>101 Switching Protocols</code> when storing the HTTP status
code in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
and
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6913 ">#6913</a>)</li>
<li>Make <code>Body</code> handling in <code>Transport</code> consistent
with stdlib in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8618 ">#8618</a>)</li>
<li>Fix bucket boundaries for <code>rpc.server.call.duration</code> and
<code>rpc.client.call.duration</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li>Host resource detector in
<code>go.opentelemetry.io/contrib/otelconf</code> now includes
<code>os.</code> attributes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8628 ">#8628</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d8dabf6736https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8649 ">#8649</a>)</li>
<li><a
href="b1de2c71d9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8578 ">#8578</a>)</li>
<li><a
href="b228c0f2f2https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8644 ">#8644</a>)</li>
<li><a
href="e70fd977a6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8642 ">#8642</a>)</li>
<li><a
href="b018d98a0ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8643 ">#8643</a>)</li>
<li><a
href="fb6a3518d8https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8641 ">#8641</a>)</li>
<li><a
href="2c9c10ec4ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8640 ">#8640</a>)</li>
<li><a
href="22248d4c31https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8583 ">#8583</a>)</li>
<li><a
href="324662a14bhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8442 ">#8442</a>)</li>
<li><a
href="69addb4996https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8636 ">#8636</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.66.0...zpages/v0.67.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.63.0 to
0.64.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.42.0/v0.64.0/v0.18.0/v0.0.16</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix changelog protection marker by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986 ">open-telemetry/opentelemetry-go#7986</a></li>
<li>Drop support for Go 1.24 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984 ">open-telemetry/opentelemetry-go#7984</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907 ">open-telemetry/opentelemetry-go#7907</a></li>
<li>chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981 ">open-telemetry/opentelemetry-go#7981</a></li>
<li>chore(deps): update benchmark-action/github-action-benchmark action
to v1.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989 ">open-telemetry/opentelemetry-go#7989</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982 ">open-telemetry/opentelemetry-go#7982</a></li>
<li>Revert "Revert "Generate semconv/v1.40.0"" by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985 ">open-telemetry/opentelemetry-go#7985</a></li>
<li>support stdlib request.GetBody on metrics by <a
href="https://github.com/marifari-hue "><code>@marifari-hue</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931 ">open-telemetry/opentelemetry-go#7931</a></li>
<li>attribute: add TestNotEquivalence and equality operator tests by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979 ">open-telemetry/opentelemetry-go#7979</a></li>
<li>Refactor benchmark CI by <a
href="https://github.com/XSAM "><code>@XSAM</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873 ">open-telemetry/opentelemetry-go#7873</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.24.7
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988 ">open-telemetry/opentelemetry-go#7988</a></li>
<li>chore(deps): pin codspeedhq/action action to df47568 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996 ">open-telemetry/opentelemetry-go#7996</a></li>
<li>chore(deps): update actions/checkout action to v6.0.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997 ">open-telemetry/opentelemetry-go#7997</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999 ">open-telemetry/opentelemetry-go#7999</a></li>
<li>Upgrade to semconv/v1.40.0 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991 ">open-telemetry/opentelemetry-go#7991</a></li>
<li>Regenerate semconv/v1.40.0/MIGRATION.md by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992 ">open-telemetry/opentelemetry-go#7992</a></li>
<li>fix: generated semconv helpers skipping attributes by <a
href="https://github.com/victoraugustolls "><code>@victoraugustolls</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964 ">open-telemetry/opentelemetry-go#7964</a></li>
<li>Feat: Have SpanContext support the new W3C random flag. by <a
href="https://github.com/nikhilmantri0902 "><code>@nikhilmantri0902</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834 ">open-telemetry/opentelemetry-go#7834</a></li>
<li>Semconv metric helper caller-slice mutation fix by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993 ">open-telemetry/opentelemetry-go#7993</a></li>
<li>Fix semconv generated error type to check error chain for custom
type declaration by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994 ">open-telemetry/opentelemetry-go#7994</a></li>
<li>refactor: replace uint64 and int32 with atomic types in tests by <a
href="https://github.com/alexandear "><code>@alexandear</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941 ">open-telemetry/opentelemetry-go#7941</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 18da590 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000 ">open-telemetry/opentelemetry-go#8000</a></li>
<li>TracerProvider ForceFlush() Error Fix by <a
href="https://github.com/sawamurataxman "><code>@sawamurataxman</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856 ">open-telemetry/opentelemetry-go#7856</a></li>
<li>log: add error field to Record and make SDK to emit exception
attributes by <a
href="https://github.com/iblancasa "><code>@iblancasa</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924 ">open-telemetry/opentelemetry-go#7924</a></li>
<li>chore(deps): update dependency codespell to v2.4.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003 ">open-telemetry/opentelemetry-go#8003</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.6 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004 ">open-telemetry/opentelemetry-go#8004</a></li>
<li>chore(deps): update codspeedhq/action action to v4.11.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8001 ">open-telemetry/opentelemetry-go#8001</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.63.0...exporters/prometheus/v0.64.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.41.0 to 1.42.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2>
<h3>Added</h3>
<ul>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package.
The package contains semantic conventions from the <code>v1.40.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985 ">#7985</a>)</li>
<li>Add <code>Err</code> and <code>SetErr</code> on <code>Record</code>
in <code>go.opentelemetry.io/otel/log</code> to attach an error and set
record exception attributes in
<code>go.opentelemetry.io/otel/log/sdk</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>TracerProvider.ForceFlush</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code> joins errors together
and continues iteration through SpanProcessors as opposed to returning
the first encountered error without attempting exports on subsequent
SpanProcessors. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931 ">#7931</a>)</li>
<li>Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964 ">#7964</a>)</li>
<li>Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
<code>go.opentelemetry.io/otel/propagation</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834 ">#7834</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.24]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984 ">#7984</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3941ff595https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8006 ">#8006</a>)</li>
<li><a
href="6059c47bc6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8010 ">#8010</a>)</li>
<li><a
href="44c7edf896https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8009 ">#8009</a>)</li>
<li><a
href="de5fb3ad10https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8007 ">#8007</a>)</li>
<li><a
href="0b82ded815https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8001 ">#8001</a>)</li>
<li><a
href="aa3660f77ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/8004 ">#8004</a>)</li>
<li><a
href="9be8c92a13https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8003 ">#8003</a>)</li>
<li><a
href="c9d20155fchttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924 ">#7924</a>)</li>
<li><a
href="fdd1320c39https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856 ">#7856</a>)</li>
<li><a
href="78f99042e2https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8000 ">#8000</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-07 15:22:17 +02:00
Radoslav Dimitrov
7b0c411928
Bump go ( #1041 )
...
<!-- Provide a brief summary of your changes -->
Fixes:
https://github.com/modelcontextprotocol/registry/actions/runs/22784360696/job/66097670402
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
---------
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-03-06 14:57:51 -08:00
dependabot[bot]
6c500c52e3
build(deps): bump cloud.google.com/go/kms from 1.25.0 to 1.26.0 ( #985 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.25.0 to 1.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>retail 1.26.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/retail/v1.25.1...retail/v1.26.0 ">1.26.0</a>
(2026-01-29)</h2>
<h3>Features</h3>
<ul>
<li>
<p>add a user_attributes field in SearchRequest that can be used for
personalization (PiperOrigin-RevId: 861314205) (<a
href="d8ea738ad8ea738ahttps://github.com/googleapis/google-cloud-go/compare/kms/v1.25.0...kms/v1.26.0 ">v1.26.0</a>
(2026-02-19)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Introduced the RetiredResource resource to track records of deleted
keys and prevent the reuse of their resource names (PiperOrigin-RevId:
868670725) (<a
href="d3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dd3eb851dhttps://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.25.0...documentai/v1.26.0 ">1.26.0</a>
(2024-02-21)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> A new field
<code>schema_override</code> is added to message
<code>ProcessOptions</code> (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9400 ">#9400</a>)
(<a
href="a86aa8e9627e6c208c5d8ebb89625chttps://redirect.github.com/googleapis/google-cloud-go/issues/13107 ">#13107</a>)</li>
<li><a
href="befb302203https://redirect.github.com/googleapis/google-cloud-go/issues/13 ">#13</a>...</li>
<li><a
href="1930511848https://redirect.github.com/googleapis/google-cloud-go/issues/13089 ">#13089</a>)</li>
<li><a
href="e6b9d41832https://redirect.github.com/googleapis/google-cloud-go/issues/13009 ">#13009</a>)</li>
<li><a
href="6259aeec39https://redirect.github.com/googleapis/google-cloud-go/issues/12945 ">#12945</a>)</li>
<li><a
href="bafd691de1https://redirect.github.com/googleapis/google-cloud-go/issues/13004 ">#13004</a>)</li>
<li><a
href="2b75879c22https://redirect.github.com/googleapis/google-cloud-go/issues/13082 ">#13082</a>)</li>
<li><a
href="9157a715e3https://redirect.github.com/googleapis/google-cloud-go/issues/13083 ">#13083</a>)</li>
<li><a
href="a93d961e66https://redirect.github.com/googleapis/google-cloud-go/issues/13079 ">#13079</a>)</li>
<li><a
href="75c95f3f05https://redirect.github.com/googleapis/google-cloud-go/issues/13080 ">#13080</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.25.0...dlp/v1.26.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:25:23 +02:00
dependabot[bot]
de6e9839ec
build(deps): bump the opentelemetry group with 6 updates ( #1025 )
...
Bumps the opentelemetry group with 6 updates:
| Package | From | To |
| --- | --- | --- |
|
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
| `0.65.0` | `0.66.0` |
|
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
| `0.62.0` | `0.63.0` |
|
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
|
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
| `1.40.0` | `1.41.0` |
Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from
0.65.0 to 0.66.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>.
The next release will require at least <a
href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
<h2>What's Changed</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] -
2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Add <code>WithSpanKind</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to override the default span kind. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8506 ">#8506</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelzap</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8544 ">#8544</a>)</li>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8549 ">#8549</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/autodetect</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/azure/azurevm</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8553 ">#8553</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/baggagecopy</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8557 ">#8557</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/detectors/aws/lambda</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8510 ">#8510</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/propagators/autoprop</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8488 ">#8488</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/processors/minsev</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8590 ">#8590</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/exporters/autoexport</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Change the <code>rpc.server.call.duration</code> metric value from
milliseconds to seconds in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8509 ">#8509</a>)</li>
<li>Change the <code>rpc.response.status_code</code> attribute to the
canonical <code>UPPER_SNAKE_CASE</code> format in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li>Enforce that <code>client_certificate_file</code> and
<code>client_key_file</code> are provided together in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8450 ">#8450</a>)</li>
<li>Fix broken CSS and JavaScript CDN URLs in
<code>go.opentelemetry.io/contrib/zpages</code> by replacing the
inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8502 ">#8502</a>)</li>
<li>Use Prometheus translation strategy instead of deprecated funcs in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Remove the deprecated zipkin exporter example in
<code>go.opentelemetry.io/contrib/examples/zipkin</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8501 ">#8501</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Reduce allocations in the generated HTTP
<code>internal/semconv</code> packages. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)
Updated modules include:
<ul>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code></li>
<li><code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code></li>
</ul>
</li>
<li>Update the configuration schema used in
<code>go.opentelemetry.io/contrib/otelconf</code> to <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.3 ">rc.3</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8505 ">#8505</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithMetricAttributesFn</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated and will be removed in a future release. Use
<code>Labeler</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07fa42463chttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8617 ">#8617</a>)</li>
<li><a
href="f64d6bbf2ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8532 ">#8532</a>)</li>
<li><a
href="5995ae876ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8555 ">#8555</a>)</li>
<li><a
href="c0aa7c9a5ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8511 ">#8511</a>)</li>
<li><a
href="e81a2b4433https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8565 ">#8565</a>)</li>
<li><a
href="8096a3ec79https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8587 ">#8587</a>)</li>
<li><a
href="2dce2452b9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8595 ">#8595</a>)</li>
<li><a
href="d2a58075d3https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8612 ">#8612</a>)</li>
<li><a
href="52dd9873f6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8613 ">#8613</a>)</li>
<li><a
href="c4223d5dadhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8603 ">#8603</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.65.0...zpages/v0.66.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.62.0 to
0.63.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>v1.41.0/v0.63.0/v0.17.0/v0.0.15</h2>
<p>This release is the last to support <a
href="https://go.dev/doc/go1.24 ">Go 1.24</a>. The next release will
require at least <a href="https://go.dev/doc/go1.25 ">Go 1.25</a>.</p>
<h3>Added</h3>
<ul>
<li>Support testing of <a href="https://go.dev/doc/go1.26 ">Go 1.26</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits. <code>New</code> and
<code>Parse</code> now return partial baggage along with an error when
limits are exceeded. Errors from baggage extraction are reported to the
global error handler. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update googleapis to ce8ad4c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7860 ">open-telemetry/opentelemetry-go#7860</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7865 ">open-telemetry/opentelemetry-go#7865</a></li>
<li>fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.51.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7863 ">open-telemetry/opentelemetry-go#7863</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to fe4bb1c by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7861 ">open-telemetry/opentelemetry-go#7861</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7869 ">open-telemetry/opentelemetry-go#7869</a></li>
<li>sdk/log/observ: guard LogProcessed with Enabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7848 ">open-telemetry/opentelemetry-go#7848</a></li>
<li>stdouttrace observability: skip metric work when instruments are
disabled by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7853 ">open-telemetry/opentelemetry-go#7853</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.21.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7870 ">open-telemetry/opentelemetry-go#7870</a></li>
<li>fix(deps): update googleapis to 546029d by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7871 ">open-telemetry/opentelemetry-go#7871</a></li>
<li>stdoutmetric observ: skip metric work when instruments are disabled
by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7868 ">open-telemetry/opentelemetry-go#7868</a></li>
<li>chore(deps): update fossas/fossa-action action to v1.8.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7879 ">open-telemetry/opentelemetry-go#7879</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7878 ">open-telemetry/opentelemetry-go#7878</a></li>
<li>chore(deps): update module github.com/ghostiam/protogetter to
v0.3.20 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7877 ">open-telemetry/opentelemetry-go#7877</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 86a5c4b by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7876 ">open-telemetry/opentelemetry-go#7876</a></li>
<li>fix(deps): update module golang.org/x/sys to v0.41.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7885 ">open-telemetry/opentelemetry-go#7885</a></li>
<li>chore(deps): update module github.com/clipperhouse/uax29/v2 to
v2.6.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7884 ">open-telemetry/opentelemetry-go#7884</a></li>
<li>Checked if instrument enabled before measuring in prometheus by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7866 ">open-telemetry/opentelemetry-go#7866</a></li>
<li>exporter/otlploghttp: guard observ metrics with Enabled checks by <a
href="https://github.com/NesterovYehor "><code>@NesterovYehor</code></a>
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7813 ">open-telemetry/opentelemetry-go#7813</a></li>
<li>chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7886 ">open-telemetry/opentelemetry-go#7886</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7887 ">open-telemetry/opentelemetry-go#7887</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7890 ">open-telemetry/opentelemetry-go#7890</a></li>
<li>fix(deps): update golang.org/x to 2842357 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7891 ">open-telemetry/opentelemetry-go#7891</a></li>
<li>fix(deps): update googleapis to 4cfbd41 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7889 ">open-telemetry/opentelemetry-go#7889</a></li>
<li>Checked if instrument enabled before measuring in
<code>oteltracegrpc</code> by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7825 ">open-telemetry/opentelemetry-go#7825</a></li>
<li>Checked if Instrument Enabled before measuring in otlpgrpc by <a
href="https://github.com/itssaharsh "><code>@itssaharsh</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7824 ">open-telemetry/opentelemetry-go#7824</a></li>
<li>chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2
to v2.27.8 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7892 ">open-telemetry/opentelemetry-go#7892</a></li>
<li>chore(deps): update module github.com/golangci/golines to v0.15.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7893 ">open-telemetry/opentelemetry-go#7893</a></li>
<li>chore(deps): update module github.com/golangci/misspell to v0.8.0 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7894 ">open-telemetry/opentelemetry-go#7894</a></li>
<li>chore(deps): update golang.org/x/telemetry digest to 9f66fae by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7898 ">open-telemetry/opentelemetry-go#7898</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7906 ">open-telemetry/opentelemetry-go#7906</a></li>
<li>Support Go 1.26 by <a
href="https://github.com/dmathieu "><code>@dmathieu</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7902 ">open-telemetry/opentelemetry-go#7902</a></li>
<li>fix(deps): update module google.golang.org/grpc to v1.79.1 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7908 ">open-telemetry/opentelemetry-go#7908</a></li>
<li>chore(deps): update github/codeql-action action to v4.32.3 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7909 ">open-telemetry/opentelemetry-go#7909</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.62.0...exporters/prometheus/v0.63.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.41.0
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902 ">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880 ">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914 ">#7914</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4575a9774dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977 ">#7977</a>)</li>
<li><a
href="66fc10d9df76e6eec88fhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980 ">#7980</a>)</li>
<li><a
href="0d50f9008chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978 ">#7978</a>)</li>
<li><a
href="c38a4a57c3https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929 ">#7929</a>)</li>
<li><a
href="0f1a22484ehttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899 ">#7899</a>)</li>
<li><a
href="c79ebf43ebhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973 ">#7973</a>)</li>
<li><a
href="f758157465https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968 ">#7968</a>)</li>
<li><a
href="92a11645723cd7c27e84https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969 ">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 ">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:16:23 +02:00
dependabot[bot]
8575244d1f
build(deps): bump github.com/caarlos0/env/v11 from 11.3.1 to 11.4.0 ( #995 )
...
Bumps [github.com/caarlos0/env/v11](https://github.com/caarlos0/env )
from 11.3.1 to 11.4.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases ">github.com/caarlos0/env/v11's
releases</a>.</em></p>
<blockquote>
<h2>v11.4.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>2be9960e75cc5f053dcb89c64e43de19765fd154: feat: option to set
defaults for zero values only (<a
href="https://redirect.github.com/caarlos0/env/issues/325 ">#325</a>) (<a
href="https://github.com/dnovikoff "><code>@dnovikoff</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>d3505f14213c309f8ca3b0b1e468284749456dde: fix: all new lint issues,
update golangci-lint (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>aaa45113e5eb50e2a243959041452bbab40ae3cc: fix: lint issues (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>8917d78b4247be8a3f555ccee03305c7763471e4: docs: clarify example a
bit (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>7b10cf56e20fe41042b7a7148555990b64b85f95: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c98ad844e1e479526ef6b4069e0b0f1ced5c953d: ci(deps): bump
github/codeql-action in the actions group (<a
href="https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2ca9b08cafe0bc271636c15fa34d156733631123: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/393 ">#393</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>cd5c220dbceb1d1353263a5d6fe3f6816aa1217f: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/396 ">#396</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>4d25a4659f428119ce5eaf3ea579176b9161c6e0: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/402 ">#402</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>c660cc91db76b02de72e8ab7e9ad348edef3f891: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/403 ">#403</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>3a3ea05453bd16685c807ba089b20a82033a02f1: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>d28373e3a047e93ad21676ea9878e5dd1ca157f7: ci(deps): bump the actions
group with 2 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>7b5005693b54a0014e4d3a2ee6192c7bce336af7: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/397 ">#397</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>6b2db30d1977183eb8a9732c01ff4e6788565a6e: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>f33230e8e7e0377c9cdb65d43940db1666061766: ci(deps): bump the actions
group with 3 updates (<a
href="https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>) (<a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot])</li>
<li>2dc7aec137983c972c29779e951011ddb496fc8b: ci(sec): add codeql,
govulncheck, grype (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>82412ce6900082095e9e4b66f5024c0e67ff3fb8: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>02495c42107d77c9365aef6a031b7089f734af3b: ci: build perms (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>e5b3c2c879e43e458e060e2a61fb525e161b7715: ci: lint workflow perms
(<a href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>6690dfb3d314535320f3a30365c52f6fb40c8992: ci: pin github actions
versions (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
<li>548a7a66c9d5504d8f9c0488ee47a05ae453c7e2: ci: update dependabot (<a
href="https://github.com/caarlos0 "><code>@caarlos0</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro ">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aaa45113e54fe3f70200c98ad844e1https://redirect.github.com/caarlos0/env/issues/410 ">#410</a>)</li>
<li><a
href="d28373e3a0https://redirect.github.com/caarlos0/env/issues/408 ">#408</a>)</li>
<li><a
href="3a3ea05453https://redirect.github.com/caarlos0/env/issues/405 ">#405</a>)</li>
<li><a
href="f33230e8e7https://redirect.github.com/caarlos0/env/issues/404 ">#404</a>)</li>
<li><a
href="c660cc91dbhttps://redirect.github.com/caarlos0/env/issues/403 ">#403</a>)</li>
<li><a
href="4d25a4659fhttps://redirect.github.com/caarlos0/env/issues/402 ">#402</a>)</li>
<li><a
href="7b10cf56e2https://redirect.github.com/caarlos0/env/issues/400 ">#400</a>)</li>
<li><a
href="6b2db30d19https://redirect.github.com/caarlos0/env/issues/399 ">#399</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v11.3.1...v11.4.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:14:22 +02:00
dependabot[bot]
a5b152f212
build(deps): bump github.com/docker/cli from 29.0.3+incompatible to 29.2.0+incompatible ( #1032 )
...
Bumps [github.com/docker/cli](https://github.com/docker/cli ) from
29.0.3+incompatible to 29.2.0+incompatible.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0b9d1985dbhttps://redirect.github.com/docker/cli/issues/6764 ">#6764</a> from
vvoland/update-docker</li>
<li><a
href="9c9ec73588bab3e81e1d2e64fc162ahttps://redirect.github.com/docker/cli/issues/6367 ">#6367</a> from
thaJeztah/template_slicejoin</li>
<li><a
href="1f2ba2ac9dhttps://redirect.github.com/docker/cli/issues/6760 ">#6760</a> from
thaJeztah/container_create_fix_error</li>
<li><a
href="e34a3422cca86356d42fhttps://redirect.github.com/docker/cli/issues/6763 ">#6763</a> from
thaJeztah/bump_mapstructure</li>
<li><a
href="771660a17e9cff36b35ahttps://redirect.github.com/docker/cli/issues/6762 ">#6762</a> from
thaJeztah/bump_x_deps</li>
<li><a
href="08ed2bc6e8https://github.com/docker/cli/compare/v29.0.3...v29.2.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-03-06 02:10:21 +02:00
dependabot[bot]
b883d47d97
build(deps): bump golang.org/x/mod from 0.32.0 to 0.33.0 ( #951 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.32.0 to
0.33.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27761a2ad8https://github.com/golang/mod/compare/v0.32.0...v0.33.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-10 22:54:33 +02:00
dependabot[bot]
541a6c61fa
build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.64.0 to 0.65.0 ( #940 )
...
Bumps
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
from 0.64.0 to 0.65.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>Release
v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191 ">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281 ">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401 ">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461 ">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323 ">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352 ">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142 ">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302 ">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317 ">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325 ">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340 ">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341 ">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349 ">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356 ">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357 ">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358 ">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360 ">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361 ">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365 ">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366 ">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370 ">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404 ">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>
<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] -
2026-02-02</h2>
<h3>Added</h3>
<ul>
<li><code>WithMetricAttributesFn</code> option in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
to define dynamic attributes on auto-instrumented metrics. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8191 ">#8191</a>)</li>
<li>Add support for configuring propagators in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8281 ">#8281</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8401 ">#8401</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8461 ">#8461</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogr</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otellogrus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li>Add <code>const Version</code> in
<code>go.opentelemetry.io/contrib/bridges/otelslog</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix panic when passing nil <code>TracerProvider</code> or
<code>MeterProvider</code> to <code>WithTracerProvider</code> or
<code>WithMeterProvider</code> in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8323 ">#8323</a>)</li>
<li><code>Transport</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
now supports reading request body multiple times for subsequent requests
that reuse <code>http.Request</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8352 ">#8352</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8142 ">#8142</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8302 ">#8302</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8317 ">#8317</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/zpages</code> has been replaced by
<code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8325 ">#8325</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8340 ">#8340</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8341 ">#8341</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/runtime</code> has
been replaced by <code>const Version</code> string. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8349 ">#8349</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8356 ">#8356</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8357 ">#8357</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/host</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8358 ">#8358</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8360 ">#8360</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/propagators/opencensus</code> has been
replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8361 ">#8361</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8365 ">#8365</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/samplers/probability/consistent</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8366 ">#8366</a>)</li>
<li>The <code>Version()</code> function in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>
has been replaced by <code>const Version</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8370 ">#8370</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Set <code>error.type</code> attribute instead of adding
<code>exception</code> span events in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8386 ">#8386</a>)</li>
<li>Upgrade <code>go.opentelemetry.io/otel/semconv</code> to
<code>v1.39.0</code>, including updates across all instrumentation and
detector modules. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8404 ">#8404</a>)
<ul>
<li>The semantic conventions v1.39.0 release introduces breaking
changes, including:
<ul>
<li><code>rpc</code> span and metric attributes have been renamed to
align with naming guidelines:
<ul>
<li><code>rpc.system</code> → <code>rpc.system.name</code> (values:
<code>grpc</code>, <code>grpc_web</code>, <code>connectrpc</code>,
<code>thrift</code>, <code>dubbo</code>, etc.)</li>
<li><code>rpc.method</code> and <code>rpc.service</code> have been
merged into a fully-qualified <code>rpc.method</code> attribute</li>
<li><code>rpc.client|server.duration</code> →
<code>rpc.client|server.call.duration</code> (unit changed to
seconds)</li>
<li><code>rpc.grpc.request.metadata</code>/<code>rpc.grpc.response.metadata</code>
→
<code>rpc.request.metadata</code>/<code>rpc.response.metadata</code></li>
<li><code>rpc.grpc.status_code</code> → deprecated in favor of
<code>rpc.response.status_code</code></li>
<li><code>rpc.jsonrpc.request_id</code> →
<code>jsonrpc.request.id</code></li>
<li><code>rpc.jsonrpc.version</code> →
<code>jsonrpc.protocol.version</code></li>
</ul>
</li>
<li><code>system</code> and <code>process</code> metrics:
<ul>
<li><code>*.linux.memory</code> metrics renamed to
<code>*.memory.linux</code></li>
<li><code>system.process.status</code> → <code>process.state</code></li>
<li><code>system.paging.type</code> and
<code>process.paging.fault_type</code> →
<code>system.paging.fault.type</code></li>
</ul>
</li>
</ul>
</li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a89d958e7ahttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8493 ">#8493</a>)</li>
<li><a
href="1530d71edchttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8481 ">#8481</a>)</li>
<li><a
href="135bb6050ehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8483 ">#8483</a>)</li>
<li><a
href="8e921058c6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8486 ">#8486</a>)</li>
<li><a
href="147148e2d2https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8487 ">#8487</a>)</li>
<li><a
href="d387510eechttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8485 ">#8485</a>)</li>
<li><a
href="fad49c80d5https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8480 ">#8480</a>)</li>
<li><a
href="9e1e5731aehttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8479 ">#8479</a>)</li>
<li><a
href="37aa4753c9https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8477 ">#8477</a>)</li>
<li><a
href="fc8ef39de1https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.64.0...zpages/v0.65.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-09 11:11:06 +02:00
dependabot[bot]
545c4c8c15
build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.61.0 to 0.62.0 ( #939 )
...
Bumps
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
from 0.61.0 to 0.62.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>Release v1.40.0/v0.62.0/v0.16.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>. This stabilizes the
synchronous instrument enabled feature, allowing users to check if an
instrument will process measurements before performing computationally
expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="298cbedf25/semconv/v1.39.0/MIGRATION.mdhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>. This
prevents scrape failures when the Prometheus exporter is misconfigured
to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP2 GOAWAY frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix(deps): update opentelemetry-go monorepo to v0.15.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7690 ">open-telemetry/opentelemetry-go#7690</a></li>
<li>chore(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7689 ">open-telemetry/opentelemetry-go#7689</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7691 ">open-telemetry/opentelemetry-go#7691</a></li>
<li>prometheus exporter ignores metrics from the Prometheus bridge by <a
href="https://github.com/dashpole "><code>@dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7688 ">open-telemetry/opentelemetry-go#7688</a></li>
<li>chore(deps): update codecov/codecov-action action to v5.5.2 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7693 ">open-telemetry/opentelemetry-go#7693</a></li>
<li>fix(deps): update golang.org/x to 8475f28 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7692 ">open-telemetry/opentelemetry-go#7692</a></li>
<li>chore(deps): update github.com/securego/gosec/v2 digest to b6eea26
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7694 ">open-telemetry/opentelemetry-go#7694</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.22.11
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7696 ">open-telemetry/opentelemetry-go#7696</a></li>
<li>Use sync.Map and atomics for fixed bucket histograms by <a
href="https://github.com/dashpole "><code>@dashpole</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7474 ">open-telemetry/opentelemetry-go#7474</a></li>
<li>chore(deps): update actions/cache action to v5 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7701 ">open-telemetry/opentelemetry-go#7701</a></li>
<li>chore(deps): update otel/weaver docker tag to v0.20.0 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7698 ">open-telemetry/opentelemetry-go#7698</a></li>
<li>fix(deps): update module google.golang.org/protobuf to v1.36.11 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7704 ">open-telemetry/opentelemetry-go#7704</a></li>
<li>chore(deps): update github/codeql-action action to v4.31.8 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7703 ">open-telemetry/opentelemetry-go#7703</a></li>
<li>sdk/log: improve Processor documentation by <a
href="https://github.com/pellared "><code>@pellared</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7695 ">open-telemetry/opentelemetry-go#7695</a></li>
<li>chore(deps): update github artifact actions (major) by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7707 ">open-telemetry/opentelemetry-go#7707</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.61.0...exporters/prometheus/v0.62.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-06 12:01:52 +02:00
dependabot[bot]
7ac2b8de49
build(deps): bump go.opentelemetry.io/otel/sdk/metric from 1.39.0 to 1.40.0 ( #928 )
...
Bumps
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-05 12:45:10 +02:00
dependabot[bot]
cffac199b6
build(deps): bump github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1 ( #922 )
...
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt )
from 5.3.0 to 5.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang-jwt/jwt/releases ">github.com/golang-jwt/jwt/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.3.1</h2>
<!-- raw HTML omitted -->
<h2>What's Changed</h2>
<h3>🔐 Features</h3>
<ul>
<li>Add spellcheck Github action to catch common spelling mistakes by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458 ">golang-jwt/jwt#458</a></li>
<li>Add <code>WithNotBeforeRequired</code> parser option and add test
coverage by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/456 ">golang-jwt/jwt#456</a></li>
<li>Update godoc example func to properly refer to
<code>NewWithClaims()</code> by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/459 ">golang-jwt/jwt#459</a></li>
<li>Update github workflows by <a
href="https://github.com/mfridman "><code>@mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/462 ">golang-jwt/jwt#462</a></li>
<li>Additional test for CustomClaims that validates unmarshalling
behaviour by <a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/457 ">golang-jwt/jwt#457</a></li>
<li>Fix early file close in jwt cli by <a
href="https://github.com/mfridman "><code>@mfridman</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/472 ">golang-jwt/jwt#472</a></li>
<li>Add TPM signature reference by <a
href="https://github.com/salrashid123 "><code>@salrashid123</code></a>
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473 ">golang-jwt/jwt#473</a></li>
<li>Remove misleading ParserOptions documentation in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/484 ">golang-jwt/jwt#484</a></li>
<li>Save signature to Token struct after successful signing by <a
href="https://github.com/EgorSheff "><code>@EgorSheff</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417 ">golang-jwt/jwt#417</a></li>
<li>Set token.Signature in <code>ParseUnverified</code> by <a
href="https://github.com/slickwilli "><code>@slickwilli</code></a> in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414 ">golang-jwt/jwt#414</a></li>
</ul>
<h3>👒 Dependencies</h3>
<ul>
<li>Bump crate-ci/typos from 1.34.0 to 1.35.3 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/461 ">golang-jwt/jwt#461</a></li>
<li>Bump crate-ci/typos from 1.35.4 to 1.36.2 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/470 ">golang-jwt/jwt#470</a></li>
<li>Bump github/codeql-action from 3 to 4 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/478 ">golang-jwt/jwt#478</a></li>
<li>Bump crate-ci/typos from 1.36.2 to 1.39.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/480 ">golang-jwt/jwt#480</a></li>
<li>Bump golangci/golangci-lint-action from 8 to 9 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/481 ">golang-jwt/jwt#481</a></li>
<li>Bump actions/setup-go from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/469 ">golang-jwt/jwt#469</a></li>
<li>Bump crate-ci/typos from 1.39.0 to 1.40.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/488 ">golang-jwt/jwt#488</a></li>
<li>Bump actions/checkout from 5 to 6 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/487 ">golang-jwt/jwt#487</a></li>
<li>Bump crate-ci/typos from 1.40.0 to 1.41.0 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/490 ">golang-jwt/jwt#490</a></li>
<li>Bump crate-ci/typos from 1.41.0 to 1.42.1 by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/492 ">golang-jwt/jwt#492</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/equalsgibson "><code>@equalsgibson</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/458 ">golang-jwt/jwt#458</a></li>
<li><a
href="https://github.com/salrashid123 "><code>@salrashid123</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/473 ">golang-jwt/jwt#473</a></li>
<li><a href="https://github.com/EgorSheff "><code>@EgorSheff</code></a>
made their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/417 ">golang-jwt/jwt#417</a></li>
<li><a
href="https://github.com/slickwilli "><code>@slickwilli</code></a> made
their first contribution in <a
href="https://redirect.github.com/golang-jwt/jwt/pull/414 ">golang-jwt/jwt#414</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 ">https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7ceae619e7dce8e4dddchttps://redirect.github.com/golang-jwt/jwt/issues/414 ">#414</a>)</li>
<li><a
href="8889e208aahttps://redirect.github.com/golang-jwt/jwt/issues/417 ">#417</a>)</li>
<li><a
href="d237f8204bd8dce95a40https://redirect.github.com/golang-jwt/jwt/issues/492 ">#492</a>)</li>
<li><a
href="e93180329ehttps://redirect.github.com/golang-jwt/jwt/issues/490 ">#490</a>)</li>
<li><a
href="e6a0afa839https://redirect.github.com/golang-jwt/jwt/issues/487 ">#487</a>)</li>
<li><a
href="9f85c9ec9fhttps://redirect.github.com/golang-jwt/jwt/issues/488 ">#488</a>)</li>
<li><a
href="60a8669e02https://redirect.github.com/golang-jwt/jwt/issues/469 ">#469</a>)</li>
<li><a
href="76f582896dhttps://redirect.github.com/golang-jwt/jwt/issues/484 ">#484</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/golang-jwt/jwt/compare/v5.3.0...v5.3.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:32:51 +02:00
dependabot[bot]
d33b3f5ece
build(deps): bump go.opentelemetry.io/otel/metric from 1.39.0 to 1.40.0 ( #930 )
...
Bumps
[go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go )
from 1.39.0 to 1.40.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724 ">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763 ">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783 ">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789 ">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443 ">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447 ">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474 ">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478 ">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492 ">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688 ">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702 ">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662 ">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794 ">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818 ">#7818</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li>Deprecate <code>go.opentelemetry.io/otel/exporters/zipkin</code>.
For more information, see the <a
href="https://opentelemetry.io/blog/2025/deprecating-zipkin-exporters/ ">OTel
blog post deprecating the Zipkin exporter</a>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7670 ">#7670</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a3a5317c5chttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7859 ">#7859</a>)</li>
<li><a
href="77785da545https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7858 ">#7858</a>)</li>
<li><a
href="56fa1c297bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7857 ">#7857</a>)</li>
<li><a
href="298cbedf25https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854 ">#7854</a>)</li>
<li><a
href="3264bf171bhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7850 ">#7850</a>)</li>
<li><a
href="fd5d030c0a8d3b4cb250https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7847 ">#7847</a>)</li>
<li><a
href="91f7cadfcahttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7845 ">#7845</a>)</li>
<li><a
href="fdad1eb7f3c46d3bac18https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7843 ">#7843</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.40.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Radoslav Dimitrov <radoslav@stacklok.com>
2026-02-05 12:31:21 +02:00
dependabot[bot]
3f3383bb61
build(deps): bump cloud.google.com/go/kms from 1.24.0 to 1.25.0 ( #913 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.24.0 to 1.25.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>maps 1.25.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/maps/v1.24.0...maps/v1.25.0 ">1.25.0</a>
(2025-10-22)</h2>
<h3>Features</h3>
<ul>
<li>
<p>Add moved_place and moved_place_id to Place (PiperOrigin-RevId:
821809971) (<a
href="f46efe450241a9ca0241a9ca0241a9ca0241a9caf46efe450241a9ca0241a9ca0241a9ca0241a9cahttps://github.com/googleapis/google-cloud-go/compare/cloudbuild/v1.24.0...cloudbuild/v1.25.0 ">1.25.0</a>
(2025-12-18)</h2>
<h2>kms 1.25.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.24.0...kms/v1.25.0 ">1.25.0</a>
(2026-01-22)</h2>
<h3>Features</h3>
<ul>
<li>add the SingleTenantHsm functionality including the management API
and resource types (PiperOrigin-RevId: 858582271) (<a
href="8ddeca508ddeca508ddeca508ddeca50https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.24.0...documentai/v1.25.0 ">1.25.0</a>
(2024-02-09)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Expose model_type in v1 processor, so
that user can see the model_type after get or list processor version (<a
href="2fcf55ccb2740e59c6a0https://redirect.github.com/googleapis/google-cloud-go/issues/12870 ">#12870</a>)</li>
<li><a
href="d8078f0b64https://redirect.github.com/googleapis/google-cloud-go/issues/12869 ">#12869</a>)</li>
<li><a
href="2d9e87b206https://redirect.github.com/googleapis/google-cloud-go/issues/12868 ">#12868</a>)</li>
<li><a
href="1501b23474https://redirect.github.com/googleapis/google-cloud-go/issues/12863 ">#12863</a>)</li>
<li><a
href="1f11996023https://redirect.github.com/googleapis/google-cloud-go/issues/12796 ">#12796</a>)</li>
<li><a
href="baab714b87https://redirect.github.com/googleapis/google-cloud-go/issues/12866 ">#12866</a>)</li>
<li><a
href="a76dedc161https://redirect.github.com/googleapis/google-cloud-go/issues/12861 ">#12861</a>)</li>
<li><a
href="5a65fa044fhttps://redirect.github.com/googleapis/google-cloud-go/issues/12862 ">#12862</a>)</li>
<li><a
href="d73f9123behttps://redirect.github.com/googleapis/google-cloud-go/issues/12814 ">#12814</a>)</li>
<li><a
href="45a7d9b4b9https://redirect.github.com/googleapis/google-cloud-go/issues/12857 ">#12857</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.24.0...dlp/v1.25.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-23 14:12:46 +02:00
dependabot[bot]
8ef8df8433
build(deps): bump cloud.google.com/go/kms from 1.23.2 to 1.24.0 ( #891 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.23.2 to 1.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>maps 1.24.0</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/maps/v1.23.0...maps/v1.24.0 ">1.24.0</a>
(2025-10-10)</h2>
<h3>Features</h3>
<ul>
<li>Upgrade to Go 1.24 (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/12781 ">#12781</a>)
(<a
href="4f1129chttps://redirect.github.com/googleapis/google-cloud-go/issues/13014 ">#13014</a>)
(PiperOrigin-RevId: 813834114) (<a
href="b80fb13https://github.com/googleapis/google-cloud-go/compare/cloudbuild/v1.23.1...cloudbuild/v1.24.0 ">1.24.0</a>
(2025-12-04)</h2>
<h3>Features</h3>
<ul>
<li>Update GCB with latest proto changes (PiperOrigin-RevId: 837135318)
(<a
href="185951b3https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.2...kms/v1.24.0 ">1.24.0</a>
(2026-01-15)</h2>
<h3>Documentation</h3>
<ul>
<li>Marking MODIFIED_CUSTOMER_INITIATED_ACCESS and
MODIFIED_GOOGLE_INITIATED_SYSTEM_OPERATION Key Access Justification
codes as deprecated in favor of GOOGLE_RESPONSE_TO_PRODUCTION_ALERT
(PiperOrigin-RevId: 853754070) (<a
href="80379edbhttps://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.8...documentai/v1.24.0 ">1.24.0</a>
(2024-02-06)</h2>
<h3>Features</h3>
<ul>
<li><strong>documentai:</strong> Add model_type in v1beta3 processor
proto (<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/9355 ">#9355</a>)
(<a
href="05e9e1f53fhttps://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.7...documentai/v1.23.8 ">1.23.8</a>
(2024-01-30)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Enable universe domain resolution
options (<a
href="fd1d56930fhttps://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.6...documentai/v1.23.7 ">1.23.7</a>
(2023-12-13)</h2>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Clarify Properties documentation (<a
href="757c1b0dcchttps://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.5...documentai/v1.23.6 ">1.23.6</a>
(2023-11-27)</h2>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Update comment for
ProcessOptions.page_range (<a
href="63ffff2a99https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.4...documentai/v1.23.5 ">1.23.5</a>
(2023-11-01)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Bump google.golang.org/api to v0.149.0
(<a
href="8d2ab9f32024e410efbbhttps://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.3...documentai/v1.23.4 ">1.23.4</a>
(2023-10-26)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Update grpc-go to v1.59.0 (<a
href="81a97b06cbhttps://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.2...documentai/v1.23.3 ">1.23.3</a>
(2023-10-17)</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="dfcb16fb60https://redirect.github.com/googleapis/google-cloud-go/issues/12499 ">#12499</a>)</li>
<li><a
href="4939f28da3https://redirect.github.com/googleapis/google-cloud-go/issues/12498 ">#12498</a>)</li>
<li><a
href="737615d285https://redirect.github.com/googleapis/google-cloud-go/issues/12487 ">#12487</a>)</li>
<li><a
href="9cc6c0418bhttps://redirect.github.com/googleapis/google-cloud-go/issues/12493 ">#12493</a>)</li>
<li><a
href="fe377af799https://redirect.github.com/googleapis/google-cloud-go/issues/12491 ">#12491</a>)</li>
<li><a
href="e655889e2fhttps://redirect.github.com/googleapis/google-cloud-go/issues/12497 ">#12497</a>)</li>
<li><a
href="2d66d4f5b2b560234ed8https://redirect.github.com/googleapis/google-cloud-go/issues/12480 ">#12480</a>)</li>
<li><a
href="a961cb5e85https://redirect.github.com/googleapis/google-cloud-go/issues/12492 ">#12492</a>)</li>
<li><a
href="dd096ec819https://redirect.github.com/googleapis/google-cloud-go/issues/12401 ">#12401</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.2...dlp/v1.24.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 17:12:32 +02:00
dependabot[bot]
0af9ee03b9
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.34.1 to 2.35.0 ( #905 )
...
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma )
from 2.34.1 to 2.35.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases ">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.35.0</h2>
<h2>Overview</h2>
<p><em>Moved this release as it was incorrectly tagged as
v2.34.3.</em></p>
<h3>Improved Error Messaging for Form Pointers</h3>
<p>Pointer panic messages now explicitly include “Form” where
applicable, making debugging clearer and resolving <a
href="https://redirect.github.com/danielgtaylor/huma/issues/892 ">#892</a>.</p>
<h3>Expanded String Format Support</h3>
<p>Added support for <code>duration</code> and <code>idn-hostname</code>
string formats, improving schema expressiveness and validation
coverage.</p>
<h3>Header Parsing Fix</h3>
<p>Fixed several subtle issues in header detection that occurred when
output fields were slices, arrays, or maps, which could cause headers
(notably []*http.Cookie) to be incorrectly applied or documented. The
parsing logic now correctly inspects the root type of collection fields
and adds support for hidden headers, allowing them to be excluded from
generated OpenAPI documentation. These changes resolve multiple
long-standing documentation and serialization bugs without introducing
new behavior.</p>
<h2>What's Changed</h2>
<ul>
<li>fix: include “Form” in pointer panic message (fixes <a
href="https://redirect.github.com/danielgtaylor/huma/issues/892 ">#892</a>)
by <a href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/938 ">danielgtaylor/huma#938</a></li>
<li>feat: support duration and IDN-hostname string formats by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/939 ">danielgtaylor/huma#939</a></li>
<li>docs: add simple HTML docs by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/941 ">danielgtaylor/huma#941</a></li>
<li>fix: header parsing by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/944 ">danielgtaylor/huma#944</a></li>
<li>perf(schema): optimize convertType with fast paths for compatible
types by <a href="https://github.com/baagod "><code>@baagod</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/931 ">danielgtaylor/huma#931</a></li>
<li>Added exhaustive error code wrappers by <a
href="https://github.com/rhodeon "><code>@rhodeon</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/876 ">danielgtaylor/huma#876</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/baagod "><code>@baagod</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/931 ">danielgtaylor/huma#931</a></li>
<li><a href="https://github.com/rhodeon "><code>@rhodeon</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/876 ">danielgtaylor/huma#876</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.34.2...v2.35.0 ">https://github.com/danielgtaylor/huma/compare/v2.34.2...v2.34.3 </a></p>
<h2>v2.34.2</h2>
<h2>Overview</h2>
<h3>TLS-Aware URL Scheme Detection</h3>
<p>Huma now correctly uses the <code>https</code> URL scheme when TLS is
configured, and <code>http</code> when it is not. Previously, the scheme
detection could be incorrect in certain scenarios.</p>
<h3>Time Wrapper Parsing Fix</h3>
<p>Fixed an issue where time wrapper types failed to parse correctly,
resolving <a
href="https://redirect.github.com/danielgtaylor/huma/issues/844 ">#844</a>.</p>
<h2>What's Changed</h2>
<ul>
<li>fix: correct example format for tags in Pet struct by <a
href="https://github.com/vikyw89 "><code>@vikyw89</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/858 ">danielgtaylor/huma#858</a></li>
<li>docs: add links to hire me by <a
href="https://github.com/danielgtaylor "><code>@danielgtaylor</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/869 ">danielgtaylor/huma#869</a></li>
<li>Revert "docs: add links to hire me" by <a
href="https://github.com/danielgtaylor "><code>@danielgtaylor</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/890 ">danielgtaylor/huma#890</a></li>
<li>chore(deps): bump github.com/gofiber/fiber/v2 from 2.52.7 to 2.52.9
by <a
href="https://github.com/dependabot "><code>@dependabot</code></a>[bot]
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/882 ">danielgtaylor/huma#882</a></li>
<li>Fix code samples in the response output documentation by <a
href="https://github.com/prnvbn "><code>@prnvbn</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/927 ">danielgtaylor/huma#927</a></li>
<li>fix: use "http" URL scheme only if no TLS is used by <a
href="https://github.com/leonklingele "><code>@leonklingele</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/905 ">danielgtaylor/huma#905</a></li>
<li>fix: failed to parse time wrapper, close <a
href="https://redirect.github.com/danielgtaylor/huma/issues/844 ">#844</a>
by <a href="https://github.com/zhenzou "><code>@zhenzou</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/924 ">danielgtaylor/huma#924</a></li>
<li>Minor linting/formatting by <a
href="https://github.com/wolveix "><code>@wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/936 ">danielgtaylor/huma#936</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/vikyw89 "><code>@vikyw89</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/858 ">danielgtaylor/huma#858</a></li>
<li><a href="https://github.com/prnvbn "><code>@prnvbn</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/927 ">danielgtaylor/huma#927</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c24cd0713db4a4ec85cahttps://redirect.github.com/danielgtaylor/huma/issues/931 ">#931</a>)</li>
<li><a
href="88c6cda0a4https://redirect.github.com/danielgtaylor/huma/issues/944 ">#944</a>)</li>
<li><a
href="0814e6f650https://redirect.github.com/danielgtaylor/huma/issues/941 ">#941</a>)</li>
<li><a
href="1cd5c26aechttps://redirect.github.com/danielgtaylor/huma/issues/939 ">#939</a>)</li>
<li><a
href="e78584eeb0https://redirect.github.com/danielgtaylor/huma/issues/938 ">#938</a>)</li>
<li><a
href="027984237bhttps://redirect.github.com/danielgtaylor/huma/issues/936 ">#936</a>)</li>
<li><a
href="f30901ce06https://redirect.github.com/danielgtaylor/huma/issues/844 ">#844</a>
(<a
href="https://redirect.github.com/danielgtaylor/huma/issues/924 ">#924</a>)</li>
<li><a
href="57b362553dhttps://redirect.github.com/danielgtaylor/huma/issues/905 ">#905</a>)</li>
<li><a
href="1f43b55a21https://redirect.github.com/danielgtaylor/huma/issues/927 ">#927</a>
from prnvbn/patch-1</li>
<li>Additional commits viewable in <a
href="https://github.com/danielgtaylor/huma/compare/v2.34.1...v2.35.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-20 17:05:15 +02:00
dependabot[bot]
c6856a818b
build(deps): bump golang.org/x/mod from 0.31.0 to 0.32.0 ( #883 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.31.0 to
0.32.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c04067938https://github.com/golang/mod/compare/v0.31.0...v0.32.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-01-13 11:15:33 +02:00
dependabot[bot]
50e030d927
build(deps): bump github.com/jackc/pgx/v5 from 5.7.6 to 5.8.0 ( #864 )
...
Bumps [github.com/jackc/pgx/v5](https://github.com/jackc/pgx ) from 5.7.6
to 5.8.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/jackc/pgx/blob/master/CHANGELOG.md ">github.com/jackc/pgx/v5's
changelog</a>.</em></p>
<blockquote>
<h1>5.8.0 (December 26, 2025)</h1>
<ul>
<li>Require Go 1.24+</li>
<li>Remove golang.org/x/crypto dependency</li>
<li>Add OptionShouldPing to control ResetSession ping behavior
(ilyam8)</li>
<li>Fix: Avoid overflow when MaxConns is set to MaxInt32</li>
<li>Fix: Close batch pipeline after a query error (Anthonin
Bonnefoy)</li>
<li>Faster shutdown of pgxpool.Pool background goroutines (Blake
Gentry)</li>
<li>Add pgxpool ping timeout (Amirsalar Safaei)</li>
<li>Fix: Rows.FieldDescriptions for empty query</li>
<li>Scan unknown types into *any as string or []byte based on format
code</li>
<li>Optimize pgtype.Numeric (Philip Dubé)</li>
<li>Add AfterNetConnect hook to pgconn.Config</li>
<li>Fix: Handle for preparing statements that fail during the Describe
phase</li>
<li>Fix overflow in numeric scanning (Ilia Demianenko)</li>
<li>Fix: json/jsonb sql.Scanner source type is []byte</li>
<li>Migrate from math/rand to math/rand/v2 (Mathias Bogaert)</li>
<li>Optimize internal iobufpool (Mathias Bogaert)</li>
<li>Optimize stmtcache invalidation (Mathias Bogaert)</li>
<li>Fix: missing error case in interval parsing (Maxime Soulé)</li>
<li>Fix: invalidate statement/description cache in Exec (James
Hartig)</li>
<li>ColumnTypeLength method return the type length for varbit type
(DengChan)</li>
<li>Array and Composite codecs handle typed nils</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fe8740aa06e5dde5a51106f2d82cac2cf78dd906https://redirect.github.com/jackc/pgx/issues/2448 ">#2448</a> from
DengChan/column_type_lenth_varbit</li>
<li><a
href="2d1c4ef1aa1a5fa7fc7f5736d0976d4c1308c14b14ce2b7a6265b2724ea5https://redirect.github.com/jackc/pgx/issues/2443 ">#2443</a> from
jameshartig/x-invalidate-cache-in-exec</li>
<li>Additional commits viewable in <a
href="https://github.com/jackc/pgx/compare/v5.7.6...v5.8.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-31 11:05:26 +02:00
dependabot[bot]
b4e76845d5
build(deps): bump go.opentelemetry.io/otel/exporters/prometheus from 0.60.0 to 0.61.0 ( #832 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go )
from 0.60.0 to 0.61.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel/exporters/prometheus's
releases</a>.</em></p>
<blockquote>
<h2>Release v1.38.0/v0.60.0/v0.14.0/v0.0.13</h2>
<h2>Overview</h2>
<p>This release is the last to support [Go 1.23]. The next release will
require at least [Go 1.24].</p>
<h3>Added</h3>
<ul>
<li>Add native histogram exemplar support in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6772 ">#6772</a>)</li>
<li>Add template attribute functions to the
<code>go.opentelmetry.io/otel/semconv/v1.34.0</code> package. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6939 ">#6939</a>)
<ul>
<li><code>ContainerLabel</code></li>
<li><code>DBOperationParameter</code></li>
<li><code>DBSystemParameter</code></li>
<li><code>HTTPRequestHeader</code></li>
<li><code>HTTPResponseHeader</code></li>
<li><code>K8SCronJobAnnotation</code></li>
<li><code>K8SCronJobLabel</code></li>
<li><code>K8SDaemonSetAnnotation</code></li>
<li><code>K8SDaemonSetLabel</code></li>
<li><code>K8SDeploymentAnnotation</code></li>
<li><code>K8SDeploymentLabel</code></li>
<li><code>K8SJobAnnotation</code></li>
<li><code>K8SJobLabel</code></li>
<li><code>K8SNamespaceAnnotation</code></li>
<li><code>K8SNamespaceLabel</code></li>
<li><code>K8SNodeAnnotation</code></li>
<li><code>K8SNodeLabel</code></li>
<li><code>K8SPodAnnotation</code></li>
<li><code>K8SPodLabel</code></li>
<li><code>K8SReplicaSetAnnotation</code></li>
<li><code>K8SReplicaSetLabel</code></li>
<li><code>K8SStatefulSetAnnotation</code></li>
<li><code>K8SStatefulSetLabel</code></li>
<li><code>ProcessEnvironmentVariable</code></li>
<li><code>RPCConnectRPCRequestMetadata</code></li>
<li><code>RPCConnectRPCResponseMetadata</code></li>
<li><code>RPCGRPCRequestMetadata</code></li>
<li><code>RPCGRPCResponseMetadata</code></li>
</ul>
</li>
<li>Add <code>ErrorType</code> attribute helper function to the
<code>go.opentelmetry.io/otel/semconv/v1.34.0</code> package. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6962 ">#6962</a>)</li>
<li>Add <code>WithAllowKeyDuplication</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> which can be used to
disable deduplication for log records. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6968 ">#6968</a>)</li>
<li>Add <code>WithCardinalityLimit</code> option to configure the
cardinality limit in <code>go.opentelemetry.io/otel/sdk/metric</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6996 ">#6996</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7065 ">#7065</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7081 ">#7081</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7164 ">#7164</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7165 ">#7165</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7179 ">#7179</a>)</li>
<li>Add <code>Clone</code> method to <code>Record</code> in
<code>go.opentelemetry.io/otel/log</code> that returns a copy of the
record with no shared state. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7001 ">#7001</a>)</li>
<li>Add experimental self-observability span and batch span processor
metrics in <code>go.opentelemetry.io/otel/sdk/trace</code>. Check the
<code>go.opentelemetry.io/otel/sdk/trace/internal/x</code> package
documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7027 ">#7027</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/6393 ">#6393</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7209 ">#7209</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.36.0</code> package.
The package contains semantic conventions from the <code>v1.36.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.36.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.34.0.</code>(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7032 ">#7032</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7041 ">#7041</a>)</li>
<li>Add support for configuring Prometheus name translation using
<code>WithTranslationStrategy</code> option in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>. The current
default translation strategy when UTF-8 mode is enabled is
<code>NoUTF8EscapingWithSuffixes</code>, but a future release will
change the default strategy to
<code>UnderscoreEscapingWithSuffixes</code> for compliance with the
specification. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7111 ">#7111</a>)</li>
<li>Add experimental self-observability log metrics in
<code>go.opentelemetry.io/otel/sdk/log</code>. Check the
<code>go.opentelemetry.io/otel/sdk/log/internal/x</code> package
documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7121 ">#7121</a>)</li>
<li>Add experimental self-observability trace exporter metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdouttrace</code>.
Check the
<code>go.opentelemetry.io/otel/exporters/stdout/stdouttrace/internal/x</code>
package documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7133 ">#7133</a>)</li>
<li>Support testing of [Go 1.25]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7187 ">#7187</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.37.0</code> package.
The package contains semantic conventions from the <code>v1.37.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.37.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.36.0.</code>(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7254 ">#7254</a>)</li>
</ul>
<h3>Changed</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel/exporters/prometheus's
changelog</a>.</em></p>
<blockquote>
<h2>[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05</h2>
<h3>Added</h3>
<ul>
<li>Greatly reduce the cost of recording metrics in
<code>go.opentelemetry.io/otel/sdk/metric</code> using hashing for map
keys. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li>Add <code>WithInstrumentationAttributeSet</code> option to
<code>go.opentelemetry.io/otel/log</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/trace</code> packages.
This provides a concurrent-safe and performant alternative to
<code>WithInstrumentationAttributes</code> by accepting a
pre-constructed <code>attribute.Set</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287 ">#7287</a>)</li>
<li>Add experimental observability for the Prometheus exporter in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>.
Check the
<code>go.opentelemetry.io/otel/exporters/prometheus/internal/x</code>
package documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345 ">#7345</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353 ">#7353</a>)</li>
<li>Add temporality selector functions
<code>DeltaTemporalitySelector</code>,
<code>CumulativeTemporalitySelector</code>,
<code>LowMemoryTemporalitySelector</code> to
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434 ">#7434</a>)</li>
<li>Add experimental observability metrics for simple log processor in
<code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548 ">#7548</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459 ">#7459</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486 ">#7486</a>)</li>
<li>Add experimental observability metrics for simple span processor in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374 ">#7374</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512 ">#7512</a>)</li>
<li>Add experimental observability metrics for manual reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524 ">#7524</a>)</li>
<li>Add experimental observability metrics for periodic reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571 ">#7571</a>)</li>
<li>Support <code>OTEL_EXPORTER_OTLP_LOGS_INSECURE</code> and
<code>OTEL_EXPORTER_OTLP_INSECURE</code> environmental variables in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608 ">#7608</a>)</li>
<li>Add <code>Enabled</code> method to the <code>Processor</code>
interface in <code>go.opentelemetry.io/otel/sdk/log</code>.
All <code>Processor</code> implementations now include an
<code>Enabled</code> method. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639 ">#7639</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.38.0</code> package.
The package contains semantic conventions from the <code>v1.38.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.37.0.</code>(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648 ">#7648</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Distinct</code> in
<code>go.opentelemetry.io/otel/attribute</code> is no longer guaranteed
to uniquely identify an attribute set.
Collisions between <code>Distinct</code> values for different Sets are
possible with extremely high cardinality (billions of series per
instrument), but are highly unlikely. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/trace</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>TracerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/meter</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>MeterOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/log</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>LoggerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li>Rename the <code>OTEL_GO_X_SELF_OBSERVABILITY</code> environment
variable to <code>OTEL_GO_X_OBSERVABILITY</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code>,
<code>go.opentelemetry.io/otel/sdk/log</code>, and
<code>go.opentelemetry.io/otel/exporters/stdout/stdouttrace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302 ">#7302</a>)</li>
<li>Improve performance of histogram <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/metric</code> when min and max are
disabled using <code>NoMinMax</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306 ">#7306</a>)</li>
<li>Improve error handling for dropped data during translation by using
<code>prometheus.NewInvalidMetric</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>.
⚠️ <strong>Breaking Change:</strong> Previously, these cases were only
logged and scrapes succeeded.
Now, when translation would drop data (e.g., invalid label/value), the
exporter emits a <code>NewInvalidMetric</code>, and Prometheus scrapes
<strong>fail with HTTP 500</strong> by default.
To preserve the prior behavior (scrapes succeed while errors are
logged), configure your Prometheus HTTP handler with:
<code>promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError
}</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363 ">#7363</a>)</li>
<li>Replace fnv hash with xxhash in
<code>go.opentelemetry.io/otel/attribute</code> for better performance.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371 ">#7371</a>)</li>
<li>The default <code>TranslationStrategy</code> in
<code>go.opentelemetry.io/exporters/prometheus</code> is changed from
<code>otlptranslator.NoUTF8EscapingWithSuffixes</code> to
<code>otlptranslator.UnderscoreEscapingWithSuffixes</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421 ">#7421</a>)</li>
<li>Improve performance of concurrent measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427 ">#7427</a>)</li>
<li>Include W3C TraceFlags (bits 0–7) in the OTLP
<code>Span.Flags</code> field in
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp</code>
and
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438 ">#7438</a>)</li>
<li>The <code>ErrorType</code> function in
<code>go.opentelemetry.io/otel/semconv/v1.37.0</code> now handles custom
error types.
If an error implements an <code>ErrorType() string</code> method, the
return value of that method will be used as the error type. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442 ">#7442</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>WithInstrumentationAttributes</code> options in
<code>go.opentelemetry.io/otel/trace</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/log</code> to properly merge attributes
when passed multiple times instead of replacing them.
Attributes with duplicate keys will use the last value passed. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300 ">#7300</a>)</li>
<li>The equality of <code>attribute.Set</code> when using the
<code>Equal</code> method is not affected by the user overriding the
empty set pointed to by <code>attribute.EmptySet</code> in
<code>go.opentelemetry.io/otel/attribute</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357 ">#7357</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6ce14298b9https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676 ">#7676</a>)</li>
<li><a
href="12e421a706https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639 ">#7639</a>)</li>
<li><a
href="5982f16d24https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684 ">#7684</a>)</li>
<li><a
href="928837830dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683 ">#7683</a>)</li>
<li><a
href="ee3dfef45dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682 ">#7682</a>)</li>
<li><a
href="9345d1f64dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680 ">#7680</a>)</li>
<li><a
href="d03b03395dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678 ">#7678</a>)</li>
<li><a
href="61765e78a6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677 ">#7677</a>)</li>
<li><a
href="a54721cc80https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679 ">#7679</a>)</li>
<li><a
href="746d0860d7https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675 ">#7675</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/exporters/prometheus/v0.60.0...exporters/prometheus/v0.61.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 23:57:22 +02:00
dependabot[bot]
1be2f4edbb
build(deps): bump go.opentelemetry.io/contrib/instrumentation/runtime from 0.63.0 to 0.64.0 ( #835 )
...
Bumps
[go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib )
from 0.63.0 to 0.64.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/releases ">go.opentelemetry.io/contrib/instrumentation/runtime's
releases</a>.</em></p>
<blockquote>
<h2>Release
v1.39.0/v2.1.0/v0.64.0/v0.33.0/v0.19.0/v0.14.0/v0.12.0/v0.11.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li><code>ParseYAML</code> in
<code>go.opentelemetry.io/contrib/otelconf</code> now supports
environment variables substitution in the format
<code>${[env:]VAR_NAME[:-defaultvalue]}</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6215 ">#6215</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7966 ">#7966</a>)</li>
<li>Support <code>db.client.operation.duration</code> metric for
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7983 ">#7983</a>)</li>
<li>Add a <code>WithSpanNameFormatter</code> option to
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7986 ">#7986</a>)</li>
<li>WithOnError option for otelecho middleware in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
to specify the behavior when an error occurs. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8025 ">#8025</a>)</li>
<li>Updated <code>go.opentelemetry.io/contrib/otelconf</code> to include
the <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.2 ">v1.0.0-rc2</a>
release candidate of schema which includes backwards incompatible
changes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8026 ">#8026</a>)</li>
<li>Introduce v1.0.0-rc.2 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8031 ">#8031</a>)</li>
<li>Add unmarshaling and validation for <code>CardinalityLimits</code>
and <code>SpanLimits</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8043 ">#8043</a>)</li>
<li>Add unmarshaling and validation for
<code>BatchLogRecordProcessor</code>, <code>BatchSpanProcessor</code>,
and <code>PeriodicMetricReader</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8049 ">#8049</a>)</li>
<li>Add unmarshaling and validation for <code>TextMapPropagator</code>
to v1.0.0 model in <code>go.opentelemetry.io/contrib/otelconf</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8052 ">#8052</a>)</li>
<li>Add
<code>jaeger.sampler.type</code>/<code>jaeger.sampler.param</code>
attributes for adaptive sampling support and option
<code>WithAttributesDisabled</code> in
<code>go.opentelemetry.io/contrib/samplers/jaegerremote</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8073 ">#8073</a>)</li>
<li>Add support for <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> via the
<code>NewSDK</code> function in
<code>go.opentelemetry.io/contrib/otelconf</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8106 ">#8106</a>)</li>
<li>Add unmarshaling and validation for <code>OTLPHttpExporter</code>,
<code>OTLPGrpcExporter</code>, <code>OTLPGrpcMetricExporter</code> and
<code>OTLPHttpMetricExporter</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8112 ">#8112</a>)</li>
<li>Add unmarshaling and validation for <code>AttributeType</code>,
<code>AttributeNameValue</code>, <code>SimpleSpanProcessor</code>,
<code>SimpleLogRecordProcessor</code>, <code>ZipkinSpanExporter</code>,
<code>NameStringValuePair</code>, <code>InstrumentType</code>,
<code>ExperimentalPeerInstrumentationServiceMappingElem</code>,
<code>ExporterDefaultHistogramAggregation</code>,
<code>PullMetricReader</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8127 ">#8127</a>)</li>
<li>Add support for <code>container</code>, <code>host</code>,
<code>process</code> resource detectors in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8180 ">#8180</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve performance by reducing allocations in the gRPC stats
handler in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8035 ">#8035</a>)</li>
<li>Export the <code>ReadEvents</code> and <code>WriteEvents</code>
constants in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
so they can be used in <code>WithMessageEvents</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8153 ">#8153</a>)</li>
<li>Switched the default for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code>
to emit the v1.37.0 semantic conventions by default in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>.
Use the environment variable <code>OTEL_SEMCONV_STABILITY_OPT_IN</code>
to configure duplication with old semantic conventions if needed (i.e.
<code>OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"</code>).
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8230 ">#8230</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithRouteTag</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated. The route is already added automatically for spans. For
metrics, the alternative is to use the
<code>WithMetricAttributesFn</code> option. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8117 ">#8117</a>)</li>
<li><code>WithPublicEndpoint</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated. Use <code>WithPublicEndpointFn</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8152 ">#8152</a>)</li>
<li><code>DefaultClient</code>, <code>Get</code>, <code>Head</code>,
<code>Post</code>, and <code>PostForm</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
are deprecated. Use a custom <code>*http.Client</code> with
<code>otelhttp.NewTransport(http.DefaultTransport)</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8140 ">#8140</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8201 ">#8201</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for <a href="https://go.dev/doc/go1.23 ">Go 1.23</a>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7831 ">#7831</a>)</li>
<li>Remove deprecated
<code>go.opentelemetry.io/contrib/detectors/aws/ec2</code> module,
please use <code>go.opentelemetry.io/contrib/detectors/aws/ec2/v2</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7841 ">#7841</a>)</li>
<li>Remove the deprecated <code>Extract</code> and <code>Inject</code>
functions from
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7952 ">#7952</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>chore(deps): update go-openapi packages by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7830 ">open-telemetry/opentelemetry-go-contrib#7830</a></li>
<li>chore(deps): update module github.com/spf13/pflag to v1.0.9 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7833 ">open-telemetry/opentelemetry-go-contrib#7833</a></li>
<li>fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.8 by
<a href="https://github.com/renovate "><code>@renovate</code></a>[bot]
in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7834 ">open-telemetry/opentelemetry-go-contrib#7834</a></li>
<li>Remove support for Go 1.23 by <a
href="https://github.com/MrAlias "><code>@MrAlias</code></a> in <a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7831 ">open-telemetry/opentelemetry-go-contrib#7831</a></li>
<li>fix(deps): update golang.org/x by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7733 ">open-telemetry/opentelemetry-go-contrib#7733</a></li>
<li>chore(deps): update googleapis to ef028d9 by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7835 ">open-telemetry/opentelemetry-go-contrib#7835</a></li>
<li>chore(deps): update module github.com/securego/gosec/v2 to v2.22.8
by <a
href="https://github.com/renovate "><code>@renovate</code></a>[bot] in
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/7836 ">open-telemetry/opentelemetry-go-contrib#7836</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md ">go.opentelemetry.io/contrib/instrumentation/runtime's
changelog</a>.</em></p>
<blockquote>
<h2>[1.39.0/2.1.0/0.64.0/0.33.0/0.19.0/0.14.0/0.12.0/0.11.0] -
2025-12-08</h2>
<h3>Added</h3>
<ul>
<li><code>ParseYAML</code> in
<code>go.opentelemetry.io/contrib/otelconf</code> now supports
environment variables substitution in the format
<code>${[env:]VAR_NAME[:-defaultvalue]}</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/6215 ">#6215</a>)</li>
<li>Add the <code>http.route</code> metric attribute to
<code>go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7966 ">#7966</a>)</li>
<li>Support <code>db.client.operation.duration</code> metric for
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7983 ">#7983</a>)</li>
<li>Add a <code>WithSpanNameFormatter</code> option to
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7986 ">#7986</a>)</li>
<li>WithOnError option for otelecho middleware in
<code>go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho</code>
to specify the behavior when an error occurs. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8025 ">#8025</a>)</li>
<li>Updated <code>go.opentelemetry.io/contrib/otelconf</code> to include
the <a
href="https://github.com/open-telemetry/opentelemetry-configuration/releases/tag/v1.0.0-rc.2 ">v1.0.0-rc2</a>
release candidate of schema which includes backwards incompatible
changes. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8026 ">#8026</a>)</li>
<li>Introduce v1.0.0-rc.2 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8031 ">#8031</a>)</li>
<li>Add unmarshaling and validation for <code>CardinalityLimits</code>
and <code>SpanLimits</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8043 ">#8043</a>)</li>
<li>Add unmarshaling and validation for
<code>BatchLogRecordProcessor</code>, <code>BatchSpanProcessor</code>,
and <code>PeriodicMetricReader</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8049 ">#8049</a>)</li>
<li>Add unmarshaling and validation for <code>TextMapPropagator</code>
to v1.0.0 model in <code>go.opentelemetry.io/contrib/otelconf</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8052 ">#8052</a>)</li>
<li>Add
<code>jaeger.sampler.type</code>/<code>jaeger.sampler.param</code>
attributes for adaptive sampling support and option
<code>WithAttributesDisabled</code> in
<code>go.opentelemetry.io/contrib/samplers/jaegerremote</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8073 ">#8073</a>)</li>
<li>Add support for <code>OTEL_EXPERIMENTAL_CONFIG_FILE</code> via the
<code>NewSDK</code> function in
<code>go.opentelemetry.io/contrib/otelconf</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8106 ">#8106</a>)</li>
<li>Add unmarshaling and validation for <code>OTLPHttpExporter</code>,
<code>OTLPGrpcExporter</code>, <code>OTLPGrpcMetricExporter</code> and
<code>OTLPHttpMetricExporter</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8112 ">#8112</a>)</li>
<li>Add unmarshaling and validation for <code>AttributeType</code>,
<code>AttributeNameValue</code>, <code>SimpleSpanProcessor</code>,
<code>SimpleLogRecordProcessor</code>, <code>ZipkinSpanExporter</code>,
<code>NameStringValuePair</code>, <code>InstrumentType</code>,
<code>ExperimentalPeerInstrumentationServiceMappingElem</code>,
<code>ExporterDefaultHistogramAggregation</code>,
<code>PullMetricReader</code> to v1.0.0 model in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8127 ">#8127</a>)</li>
<li>Add support for <code>container</code>, <code>host</code>,
<code>process</code> resource detectors in
<code>go.opentelemetry.io/contrib/otelconf</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8180 ">#8180</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve performance by reducing allocations in the gRPC stats
handler in
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8035 ">#8035</a>)</li>
<li>Export the <code>ReadEvents</code> and <code>WriteEvents</code>
constants in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
so they can be used in <code>WithMessageEvents</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8153 ">#8153</a>)</li>
<li>Switched the default for <code>OTEL_SEMCONV_STABILITY_OPT_IN</code>
to emit the v1.37.0 semantic conventions by default in
<code>go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo</code>.
Use the environment variable <code>OTEL_SEMCONV_STABILITY_OPT_IN</code>
to configure duplication with old semantic conventions if needed (i.e.
<code>OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"</code>).
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8230 ">#8230</a>)</li>
</ul>
<h3>Deprecated</h3>
<ul>
<li><code>WithRouteTag</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated.
The route is already added automatically for spans.
For metrics, the alternative is to use the
<code>WithMetricAttributesFn</code> option. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8117 ">#8117</a>)</li>
<li><code>WithPublicEndpoint</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
is deprecated.
Use <code>WithPublicEndpointFn</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8152 ">#8152</a>)</li>
<li><code>DefaultClient</code>, <code>Get</code>, <code>Head</code>,
<code>Post</code>, and <code>PostForm</code> in
<code>go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp</code>
are deprecated.
Use a custom <code>*http.Client</code> with
<code>otelhttp.NewTransport(http.DefaultTransport)</code> instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8140 ">#8140</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8201 ">#8201</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li>Drop support for [Go 1.23]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7831 ">#7831</a>)</li>
<li>Remove deprecated
<code>go.opentelemetry.io/contrib/detectors/aws/ec2</code> module,
please use <code>go.opentelemetry.io/contrib/detectors/aws/ec2/v2</code>
instead. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7841 ">#7841</a>)</li>
<li>Remove the deprecated <code>Extract</code> and <code>Inject</code>
functions from
<code>go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/7952 ">#7952</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9a6a4d7dechttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8261 ">#8261</a>)</li>
<li><a
href="14c6a7a655https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8260 ">#8260</a>)</li>
<li><a
href="829f498cc4https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8259 ">#8259</a>)</li>
<li><a
href="a77cddabf6https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8257 ">#8257</a>)</li>
<li><a
href="a98be56f37https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8255 ">#8255</a>)</li>
<li><a
href="4385fbc6dbhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8253 ">#8253</a>)</li>
<li><a
href="3c3e7b27afhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8180 ">#8180</a>)</li>
<li><a
href="6497853d28https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8106 ">#8106</a>)</li>
<li><a
href="3f4d49c3dbhttps://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8250 ">#8250</a>)</li>
<li><a
href="3ce5839c96https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8252 ">#8252</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go-contrib/compare/zpages/v0.63.0...zpages/v0.64.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-10 23:56:56 +02:00
dependabot[bot]
d840378a3a
build(deps): bump go.opentelemetry.io/otel from 1.38.0 to 1.39.0 ( #829 )
...
[//]: # (dependabot-start)
⚠️ **Dependabot is rebasing this PR** ⚠️
Rebasing might not happen immediately, so don't worry if this takes some
time.
Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.
---
[//]: # (dependabot-end)
Bumps
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go )
from 1.38.0 to 1.39.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/releases ">go.opentelemetry.io/otel's
releases</a>.</em></p>
<blockquote>
<h2>v1.39.0</h2>
<h2>Overview</h2>
<h3>Added</h3>
<ul>
<li>Greatly reduce the cost of recording metrics in
<code>go.opentelemetry.io/otel/sdk/metric</code> using hashing for map
keys. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li>Add <code>WithInstrumentationAttributeSet</code> option to
<code>go.opentelemetry.io/otel/log</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/trace</code> packages. This provides a
concurrent-safe and performant alternative to
<code>WithInstrumentationAttributes</code> by accepting a
pre-constructed <code>attribute.Set</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287 ">#7287</a>)</li>
<li>Add experimental observability for the Prometheus exporter in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>. Check the
<code>go.opentelemetry.io/otel/exporters/prometheus/internal/x</code>
package documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345 ">#7345</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353 ">#7353</a>)</li>
<li>Add temporality selector functions
<code>DeltaTemporalitySelector</code>,
<code>CumulativeTemporalitySelector</code>,
<code>LowMemoryTemporalitySelector</code> to
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434 ">#7434</a>)</li>
<li>Add experimental observability metrics for simple log processor in
<code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548 ">#7548</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459 ">#7459</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486 ">#7486</a>)</li>
<li>Add experimental observability metrics for simple span processor in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374 ">#7374</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512 ">#7512</a>)</li>
<li>Add experimental observability metrics for manual reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524 ">#7524</a>)</li>
<li>Add experimental observability metrics for periodic reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571 ">#7571</a>)</li>
<li>Support <code>OTEL_EXPORTER_OTLP_LOGS_INSECURE</code> and
<code>OTEL_EXPORTER_OTLP_INSECURE</code> environmental variables in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608 ">#7608</a>)</li>
<li>Add <code>Enabled</code> method to the <code>Processor</code>
interface in <code>go.opentelemetry.io/otel/sdk/log</code>. All
<code>Processor</code> implementations now include an
<code>Enabled</code> method. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639 ">#7639</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.38.0</code> package.
The package contains semantic conventions from the <code>v1.38.0</code>
version of the OpenTelemetry Semantic Conventions. See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/HEAD/semconv/v1.38.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.37.0.</code>(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648 ">#7648</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Distinct</code> in
<code>go.opentelemetry.io/otel/attribute</code> is no longer guaranteed
to uniquely identify an attribute set. Collisions between
<code>Distinct</code> values for different Sets are possible with
extremely high cardinality (billions of series per instrument), but are
highly unlikely. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/trace</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>TracerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/meter</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>MeterOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/log</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>LoggerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li>Rename the <code>OTEL_GO_X_SELF_OBSERVABILITY</code> environment
variable to <code>OTEL_GO_X_OBSERVABILITY</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code>,
<code>go.opentelemetry.io/otel/sdk/log</code>, and
<code>go.opentelemetry.io/otel/exporters/stdout/stdouttrace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302 ">#7302</a>)</li>
<li>Improve performance of histogram <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/metric</code> when min and max are
disabled using <code>NoMinMax</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306 ">#7306</a>)</li>
<li>Improve error handling for dropped data during translation by using
<code>prometheus.NewInvalidMetric</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>. ⚠️
<strong>Breaking Change:</strong> Previously, these cases were only
logged and scrapes succeeded. Now, when translation would drop data
(e.g., invalid label/value), the exporter emits a
<code>NewInvalidMetric</code>, and Prometheus scrapes <strong>fail with
HTTP 500</strong> by default. To preserve the prior behavior (scrapes
succeed while errors are logged), configure your Prometheus HTTP handler
with: <code>promhttp.HandlerOpts{ ErrorHandling:
promhttp.ContinueOnError }</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363 ">#7363</a>)</li>
<li>Replace fnv hash with xxhash in
<code>go.opentelemetry.io/otel/attribute</code> for better performance.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371 ">#7371</a>)</li>
<li>The default <code>TranslationStrategy</code> in
<code>go.opentelemetry.io/exporters/prometheus</code> is changed from
<code>otlptranslator.NoUTF8EscapingWithSuffixes</code> to
<code>otlptranslator.UnderscoreEscapingWithSuffixes</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421 ">#7421</a>)</li>
<li>Improve performance of concurrent measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427 ">#7427</a>)</li>
<li>Include W3C TraceFlags (bits 0–7) in the OTLP
<code>Span.Flags</code> field in
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp</code>
and
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438 ">#7438</a>)</li>
<li>The <code>ErrorType</code> function in
<code>go.opentelemetry.io/otel/semconv/v1.37.0</code> now handles custom
error types.
If an error implements an <code>ErrorType() string</code> method, the
return value of that method will be used as the error type. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442 ">#7442</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>WithInstrumentationAttributes</code> options in
<code>go.opentelemetry.io/otel/trace</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/log</code> to properly merge attributes
when passed multiple times instead of replacing them. Attributes with
duplicate keys will use the last value passed. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300 ">#7300</a>)</li>
<li>The equality of <code>attribute.Set</code> when using the
<code>Equal</code> method is not affected by the user overriding the
empty set pointed to by <code>attribute.EmptySet</code> in
<code>go.opentelemetry.io/otel/attribute</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357 ">#7357</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Return partial OTLP export errors to the caller in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7372 ">#7372</a>)</li>
<li>Fix <code>AddAttributes</code>, <code>SetAttributes</code>,
<code>SetBody</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not mutate input. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7403 ">#7403</a>)</li>
<li>Do not double record measurements of <code>RecordSet</code> methods
in <code>go.opentelemetry.io/otel/semconv/v1.37.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7655 ">#7655</a>)</li>
<li>Do not double record measurements of <code>RecordSet</code> methods
in <code>go.opentelemetry.io/otel/semconv/v1.36.0</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7656 ">#7656</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md ">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05</h2>
<h3>Added</h3>
<ul>
<li>Greatly reduce the cost of recording metrics in
<code>go.opentelemetry.io/otel/sdk/metric</code> using hashing for map
keys. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li>Add <code>WithInstrumentationAttributeSet</code> option to
<code>go.opentelemetry.io/otel/log</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/trace</code> packages.
This provides a concurrent-safe and performant alternative to
<code>WithInstrumentationAttributes</code> by accepting a
pre-constructed <code>attribute.Set</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7287 ">#7287</a>)</li>
<li>Add experimental observability for the Prometheus exporter in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>.
Check the
<code>go.opentelemetry.io/otel/exporters/prometheus/internal/x</code>
package documentation for more information. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7345 ">#7345</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7353 ">#7353</a>)</li>
<li>Add temporality selector functions
<code>DeltaTemporalitySelector</code>,
<code>CumulativeTemporalitySelector</code>,
<code>LowMemoryTemporalitySelector</code> to
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7434 ">#7434</a>)</li>
<li>Add experimental observability metrics for simple log processor in
<code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7548 ">#7548</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7459 ">#7459</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7486 ">#7486</a>)</li>
<li>Add experimental observability metrics for simple span processor in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7374 ">#7374</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7512 ">#7512</a>)</li>
<li>Add experimental observability metrics for manual reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7524 ">#7524</a>)</li>
<li>Add experimental observability metrics for periodic reader in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7571 ">#7571</a>)</li>
<li>Support <code>OTEL_EXPORTER_OTLP_LOGS_INSECURE</code> and
<code>OTEL_EXPORTER_OTLP_INSECURE</code> environmental variables in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7608 ">#7608</a>)</li>
<li>Add <code>Enabled</code> method to the <code>Processor</code>
interface in <code>go.opentelemetry.io/otel/sdk/log</code>.
All <code>Processor</code> implementations now include an
<code>Enabled</code> method. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639 ">#7639</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.38.0</code> package.
The package contains semantic conventions from the <code>v1.38.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.38.0/MIGRATION.md ">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.37.0.</code>(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7648 ">#7648</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li><code>Distinct</code> in
<code>go.opentelemetry.io/otel/attribute</code> is no longer guaranteed
to uniquely identify an attribute set.
Collisions between <code>Distinct</code> values for different Sets are
possible with extremely high cardinality (billions of series per
instrument), but are highly unlikely. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7175 ">#7175</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/trace</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>TracerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/meter</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>MeterOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li><code>WithInstrumentationAttributes</code> in
<code>go.opentelemetry.io/otel/log</code> synchronously de-duplicates
the passed attributes instead of delegating it to the returned
<code>LoggerOption</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7266 ">#7266</a>)</li>
<li>Rename the <code>OTEL_GO_X_SELF_OBSERVABILITY</code> environment
variable to <code>OTEL_GO_X_OBSERVABILITY</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code>,
<code>go.opentelemetry.io/otel/sdk/log</code>, and
<code>go.opentelemetry.io/otel/exporters/stdout/stdouttrace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7302 ">#7302</a>)</li>
<li>Improve performance of histogram <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/metric</code> when min and max are
disabled using <code>NoMinMax</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7306 ">#7306</a>)</li>
<li>Improve error handling for dropped data during translation by using
<code>prometheus.NewInvalidMetric</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>.
⚠️ <strong>Breaking Change:</strong> Previously, these cases were only
logged and scrapes succeeded.
Now, when translation would drop data (e.g., invalid label/value), the
exporter emits a <code>NewInvalidMetric</code>, and Prometheus scrapes
<strong>fail with HTTP 500</strong> by default.
To preserve the prior behavior (scrapes succeed while errors are
logged), configure your Prometheus HTTP handler with:
<code>promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError
}</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7363 ">#7363</a>)</li>
<li>Replace fnv hash with xxhash in
<code>go.opentelemetry.io/otel/attribute</code> for better performance.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7371 ">#7371</a>)</li>
<li>The default <code>TranslationStrategy</code> in
<code>go.opentelemetry.io/exporters/prometheus</code> is changed from
<code>otlptranslator.NoUTF8EscapingWithSuffixes</code> to
<code>otlptranslator.UnderscoreEscapingWithSuffixes</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7421 ">#7421</a>)</li>
<li>Improve performance of concurrent measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7427 ">#7427</a>)</li>
<li>Include W3C TraceFlags (bits 0–7) in the OTLP
<code>Span.Flags</code> field in
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp</code>
and
<code>go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7438 ">#7438</a>)</li>
<li>The <code>ErrorType</code> function in
<code>go.opentelemetry.io/otel/semconv/v1.37.0</code> now handles custom
error types.
If an error implements an <code>ErrorType() string</code> method, the
return value of that method will be used as the error type. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7442 ">#7442</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix <code>WithInstrumentationAttributes</code> options in
<code>go.opentelemetry.io/otel/trace</code>,
<code>go.opentelemetry.io/otel/metric</code>, and
<code>go.opentelemetry.io/otel/log</code> to properly merge attributes
when passed multiple times instead of replacing them.
Attributes with duplicate keys will use the last value passed. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7300 ">#7300</a>)</li>
<li>The equality of <code>attribute.Set</code> when using the
<code>Equal</code> method is not affected by the user overriding the
empty set pointed to by <code>attribute.EmptySet</code> in
<code>go.opentelemetry.io/otel/attribute</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7357 ">#7357</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6ce14298b9https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7676 ">#7676</a>)</li>
<li><a
href="12e421a706https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7639 ">#7639</a>)</li>
<li><a
href="5982f16d24https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7684 ">#7684</a>)</li>
<li><a
href="928837830dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7683 ">#7683</a>)</li>
<li><a
href="ee3dfef45dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7682 ">#7682</a>)</li>
<li><a
href="9345d1f64dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7680 ">#7680</a>)</li>
<li><a
href="d03b03395dhttps://redirect.github.com/open-telemetry/opentelemetry-go/issues/7678 ">#7678</a>)</li>
<li><a
href="61765e78a6https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7677 ">#7677</a>)</li>
<li><a
href="a54721cc80https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7679 ">#7679</a>)</li>
<li><a
href="746d0860d7https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7675 ">#7675</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.39.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 11:54:52 -08:00
dependabot[bot]
b63a5d7f3f
build(deps): bump golang.org/x/mod from 0.30.0 to 0.31.0 ( #831 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.30.0 to
0.31.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d271cf332f269c237cf33f03020ad5https://github.com/golang/mod/compare/v0.30.0...v0.31.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-09 11:53:58 -08:00
dependabot[bot]
34daa90f6a
build(deps): bump github.com/google/go-containerregistry from 0.20.6 to 0.20.7 ( #797 )
...
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry )
from 0.20.6 to 0.20.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases ">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.20.7</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix ArgsEscaped lint directive by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2137 ">google/go-containerregistry#2137</a></li>
<li>transport: Fix broken links to distribution docs by <a
href="https://github.com/guzalv "><code>@guzalv</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2136 ">google/go-containerregistry#2136</a></li>
<li>fix(remote): using customized retry predicate func if provided by <a
href="https://github.com/derekhjray "><code>@derekhjray</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2135 ">google/go-containerregistry#2135</a></li>
<li>Adding docker file by <a
href="https://github.com/HassanJasim "><code>@HassanJasim</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/2138 ">google/go-containerregistry#2138</a></li>
<li>crane: Add timestamp to flatten layer by <a
href="https://github.com/Stephanie0829 "><code>@Stephanie0829</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2117 ">google/go-containerregistry#2117</a></li>
<li>feat(remote): pass retryBackoff option to transport by <a
href="https://github.com/aslafy-z "><code>@aslafy-z</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1628 ">google/go-containerregistry#1628</a></li>
<li>Expose clobber refusal error by <a
href="https://github.com/pjbgf "><code>@pjbgf</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2146 ">google/go-containerregistry#2146</a></li>
<li>Build artifacts for riscv64 by <a
href="https://github.com/ffgan "><code>@ffgan</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2159 ">google/go-containerregistry#2159</a></li>
<li>Update dependencies and deprecate DockerVersion field by <a
href="https://github.com/Subserial "><code>@Subserial</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2164 ">google/go-containerregistry#2164</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/guzalv "><code>@guzalv</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2136 ">google/go-containerregistry#2136</a></li>
<li><a
href="https://github.com/derekhjray "><code>@derekhjray</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2135 ">google/go-containerregistry#2135</a></li>
<li><a
href="https://github.com/HassanJasim "><code>@HassanJasim</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2138 ">google/go-containerregistry#2138</a></li>
<li><a
href="https://github.com/Stephanie0829 "><code>@Stephanie0829</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2117 ">google/go-containerregistry#2117</a></li>
<li><a href="https://github.com/pjbgf "><code>@pjbgf</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2146 ">google/go-containerregistry#2146</a></li>
<li><a href="https://github.com/ffgan "><code>@ffgan</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/2159 ">google/go-containerregistry#2159</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.20.6...v0.20.7 ">https://github.com/google/go-containerregistry/compare/v0.20.6...v0.20.7 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e075f20912https://redirect.github.com/google/go-containerregistry/issues/2171 ">#2171</a>)</li>
<li><a
href="45aacf4b5fhttps://redirect.github.com/google/go-containerregistry/issues/2170 ">#2170</a>)</li>
<li><a
href="073b936909https://redirect.github.com/google/go-containerregistry/issues/2164 ">#2164</a>)</li>
<li><a
href="390dacd7adhttps://redirect.github.com/google/go-containerregistry/issues/2163 ">#2163</a>)</li>
<li><a
href="ca44d47f67https://redirect.github.com/google/go-containerregistry/issues/2162 ">#2162</a>)</li>
<li><a
href="999cc1fbfbhttps://redirect.github.com/google/go-containerregistry/issues/2161 ">#2161</a>)</li>
<li><a
href="d1809c8623https://redirect.github.com/google/go-containerregistry/issues/2159 ">#2159</a>)</li>
<li><a
href="7471efdf98https://redirect.github.com/google/go-containerregistry/issues/2156 ">#2156</a>)</li>
<li><a
href="2bb5bb01b8https://redirect.github.com/google/go-containerregistry/issues/2155 ">#2155</a>)</li>
<li><a
href="16371c1fe7https://redirect.github.com/google/go-containerregistry/issues/2151 ">#2151</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.20.6...v0.20.7 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-12-03 00:27:29 +02:00
dependabot[bot]
9a4edd02fd
build(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 in the go_modules group across 1 directory ( #791 )
...
Bumps the go_modules group with 1 update in the / directory:
[golang.org/x/crypto](https://github.com/golang/crypto ).
Updates `golang.org/x/crypto` from 0.42.0 to 0.45.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4e0068c009e79546e28bf91f7a7c312df4153a03bcf6a849efb4f2b6207679ec3a51fc122a78f140c0531f9c340997000b45https://github.com/golang/crypto/compare/v0.42.0...v0.45.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/modelcontextprotocol/registry/network/alerts ).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 19:24:50 +02:00
dependabot[bot]
453e020464
build(deps): bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 ( #794 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc )
from 3.16.0 to 3.17.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coreos/go-oidc/releases ">github.com/coreos/go-oidc/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>oidc: improve error message for mismatched issuer URLs by <a
href="https://github.com/ericchiang "><code>@ericchiang</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/469 ">coreos/go-oidc#469</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0 ">https://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="35b8e031bchttps://github.com/coreos/go-oidc/compare/v3.16.0...v3.17.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-24 19:24:05 +02:00
dependabot[bot]
e726cfe11a
build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.0 to 1.13.1 ( #760 )
...
Bumps
[github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go )
from 1.13.0 to 1.13.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Azure/azure-sdk-for-go/releases ">github.com/Azure/azure-sdk-for-go/sdk/azidentity's
releases</a>.</em></p>
<blockquote>
<h2>sdk/azidentity/v1.13.1</h2>
<h2>1.13.1 (2025-11-10)</h2>
<h3>Bugs Fixed</h3>
<ul>
<li><code>AzureCLICredential</code> quoted arguments incorrectly on
Windows</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6bb9b03b23https://redirect.github.com/Azure/azure-sdk-for-go/issues/25574 ">#25574</a>)</li>
<li><a
href="e18dbd7e4dhttps://redirect.github.com/Azure/azure-sdk-for-go/issues/25367 ">#25367</a>)</li>
<li><a
href="4f0facc097https://redirect.github.com/Azure/azure-sdk-for-go/issues/25352 ">#25352</a>)</li>
<li><a
href="2d8c98bd5467dd4fcabdhttps://redirect.github.com/Azure/azure-sdk-for-go/issues/25263 ">#25263</a>)</li>
<li><a
href="1a74bc8ed7https://redirect.github.com/Azure/azure-sdk-for-go/issues/25231 ">#25231</a>)</li>
<li><a
href="839a355f6ehttps://redirect.github.com/Azure/azure-sdk-for-go/issues/25237 ">#25237</a>)</li>
<li><a
href="c352be349ahttps://redirect.github.com/Azure/azure-sdk-for-go/issues/25243 ">#25243</a>)</li>
<li><a
href="c994eca550https://redirect.github.com/Azure/azure-sdk-for-go/issues/25234 ">#25234</a>)</li>
<li><a
href="9c95d95a66https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.13.0...sdk/azidentity/v1.13.1 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-12 12:22:33 +02:00
dependabot[bot]
cf8e7b8b98
build(deps): bump golang.org/x/mod from 0.29.0 to 0.30.0 ( #762 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.29.0 to
0.30.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7416265ac65517a715a6b6cdd1a97chttps://github.com/golang/mod/compare/v0.29.0...v0.30.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-11-12 12:21:59 +02:00
dependabot[bot]
309b77d20e
build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.12.0 to 1.13.0 ( #730 )
...
Bumps
[github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go )
from 1.12.0 to 1.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Azure/azure-sdk-for-go/releases ">github.com/Azure/azure-sdk-for-go/sdk/azidentity's
releases</a>.</em></p>
<blockquote>
<h2>sdk/azidentity/v1.13.0</h2>
<h2>1.13.0 (2025-10-07)</h2>
<h3>Features Added</h3>
<ul>
<li>Added <code>AzurePowerShellCredential</code>, which authenticates as
the identity logged in to Azure PowerShell
(thanks <a href="https://github.com/ArmaanMcleod ">ArmaanMcleod</a>)</li>
<li>When <code>AZURE_TOKEN_CREDENTIALS</code> is set to
<code>ManagedIdentityCredential</code>,
<code>DefaultAzureCredential</code> behaves the same as
does <code>ManagedIdentityCredential</code> when used directly. It
doesn't apply special retry configuration or attempt to
determine whether IMDS is available. (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/25265 ">#25265</a>)</li>
</ul>
<h3>Breaking Changes</h3>
<ul>
<li>Removed the <code>WorkloadIdentityCredential</code> support for
identity binding mode added in v1.13.0-beta.1.
It will return in v1.14.0-beta.1</li>
</ul>
<h2>sdk/azidentity/v1.13.0-beta.1</h2>
<h2>1.13.0-beta.1 (2025-09-17)</h2>
<h3>Features Added</h3>
<ul>
<li>Added <code>AzurePowerShellCredential</code>, which authenticates as
the identity logged in to Azure PowerShell
(thanks <a href="https://github.com/ArmaanMcleod ">ArmaanMcleod</a>)</li>
<li><code>WorkloadIdentityCredential</code> supports identity binding
mode (<a
href="https://redirect.github.com/Azure/azure-sdk-for-go/issues/25056 ">#25056</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="94c22e63e8https://redirect.github.com/Azure/azure-sdk-for-go/issues/23192 ">#23192</a>)</li>
<li><a
href="c5213b1289https://redirect.github.com/Azure/azure-sdk-for-go/issues/23114 ">#23114</a>)</li>
<li><a
href="5df73f947fb4b472122380dbc7d99dhttps://redirect.github.com/Azure/azure-sdk-for-go/issues/23191 ">#23191</a>)</li>
<li><a
href="d254d11b07https://redirect.github.com/Azure/azure-sdk-for-go/issues/23190 ">#23190</a>)</li>
<li><a
href="62f7a3d0e9https://redirect.github.com/Azure/azure-sdk-for-go/issues/23184 ">#23184</a>)</li>
<li><a
href="5aaedf4bf9ce39ed9696https://redirect.github.com/Azure/azure-sdk-for-go/issues/23175 ">#23175</a>)</li>
<li><a
href="75d30bbd4bhttps://github.com/microsoft/azure-p ">https://github.com/microsoft/azure-p </a>...</li>
<li>Additional commits viewable in <a
href="https://github.com/Azure/azure-sdk-for-go/compare/sdk/azcore/v1.12.0...sdk/azcore/v1.13.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 23:56:35 +02:00
dependabot[bot]
68213d2bef
build(deps): bump cloud.google.com/go/kms from 1.23.0 to 1.23.2 ( #729 )
...
Bumps
[cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go )
from 1.23.0 to 1.23.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/googleapis/google-cloud-go/releases ">cloud.google.com/go/kms's
releases</a>.</em></p>
<blockquote>
<h2>kms: v1.23.2</h2>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.1...kms/v1.23.2 ">1.23.2</a>
(2025-10-15)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>kms:</strong> Conditionally enable AllowHardBoundTokens (<a
href="fc134e09b9https://github.com/googleapis/google-cloud-go/compare/cloudbuild/v1.23.0...cloudbuild/v1.23.1 ">1.23.1</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>cloudbuild:</strong> Upgrade gRPC service registration func
(<a
href="bc93e83f56https://github.com/googleapis/google-cloud-go/compare/kms/v1.23.0...kms/v1.23.1 ">1.23.1</a>
(2025-10-07)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>kms:</strong> Upgrade gRPC service registration func (<a
href="bc93e83f56https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md ">cloud.google.com/go/kms's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.1...documentai/v1.23.2 ">1.23.2</a>
(2023-10-12)</h2>
<h3>Bug Fixes</h3>
<ul>
<li><strong>documentai:</strong> Update golang.org/x/net to v0.17.0 (<a
href="174da47254https://github.com/googleapis/google-cloud-go/compare/documentai/v1.23.0...documentai/v1.23.1 ">1.23.1</a>
(2023-10-12)</h2>
<h3>Documentation</h3>
<ul>
<li><strong>documentai:</strong> Minor comment update (<a
href="9c502c2cf61c6338385ehttps://redirect.github.com/googleapis/google-cloud-go/issues/13151 ">#13151</a>)</li>
<li><a
href="fc134e09b9https://redirect.github.com/googleapis/google-cloud-go/issues/13150 ">#13150</a>)</li>
<li><a
href="2f0942b658https://redirect.github.com/googleapis/google-cloud-go/issues/13130 ">#13130</a>)</li>
<li><a
href="a4960ef37chttps://redirect.github.com/googleapis/google-cloud-go/issues/13149 ">#13149</a>)</li>
<li><a
href="3b782f4938https://redirect.github.com/googleapis/google-cloud-go/issues/13008 ">#13008</a>)</li>
<li><a
href="78f240f8f7https://redirect.github.com/googleapis/google-cloud-go/issues/13148 ">#13148</a>)</li>
<li><a
href="cb7e6c00fbhttps://redirect.github.com/googleapis/google-cloud-go/issues/1111 ">#1111</a>)
(<a
href="https://redirect.github.com/googleapis/google-cloud-go/issues/13141 ">#13141</a>)</li>
<li><a
href="2da2244b18f4fec22ad2https://redirect.github.com/googleapis/google-cloud-go/issues/13145 ">#13145</a>)</li>
<li><a
href="ec656b96fehttps://redirect.github.com/googleapis/google-cloud-go/issues/13140 ">#13140</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/googleapis/google-cloud-go/compare/dlp/v1.23.0...kms/v1.23.2 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-31 13:40:09 +00:00
Joel Verhagen
88c2e1be16
Enable Google KMS and Azure Key Vault for publisher login tool ( #696 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
This allows the private key used for DNS or HTTP based authentication to
be stored securely in a cloud key management system. These services
often provide HSM storage which makes it very hard to leak the private
key.
The full context is described in my design document here:
https://github.com/modelcontextprotocol/registry/issues/482#issuecomment-3437117171
## How Has This Been Tested?
I have tested it against PROD using an Ed25519 key stored in Google KMS.
I have added unit tests. I have tested both ECDSA P-384 and Ed25519 with
Az KV and Google KMS against a locally running server.
## Breaking Changes
None intended.
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [x] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [x] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [x] My code follows the repository's style guidelines
- [x] New and existing tests pass locally
- [x] I have added appropriate error handling
- [x] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
---------
Co-authored-by: adam jones <domdomegg+git@gmail.com>
2025-10-29 13:23:20 +00:00
Radoslav Dimitrov
913147be3a
Add support for Google Artifact Registry (GAR) ( #692 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR:
* Deprecates the existing OCI reference parser
* Deprecates the existing OCI way of authenticating and accessing the
image manifest
* Replaces the above by leveraging go-containerregistry
* Introduces support for Google Artifact Registry
* Enables us to easily add support for other OCI-compliant registries in
the future
* Introduces better error handling
* Introduces custom context timeouts for validation
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [x] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Related to #427
---------
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2025-10-28 15:00:06 +02:00
Terry Nederveld
73d2174cec
feat: add CORS support to registry API ( #711 )
...
Fixes #710
This PR adds CORS middleware to enable browser-based clients and web
applications to access the registry API.
## Changes
- Add CORSMiddleware in internal/api/cors.go to handle preflight OPTIONS
requests and inject CORS headers
- Integrate CORS middleware into the server middleware stack
- Add CORS configuration options (CORS_ENABLED and CORS_ALLOWED_ORIGIN)
## Testing
- All existing tests pass
- Manual testing confirms CORS headers are present in responses
- OPTIONS preflight requests now return 204 with proper headers
## Configuration
New environment variables:
- MCP_REGISTRY_CORS_ENABLED (default: true)
- MCP_REGISTRY_CORS_ALLOWED_ORIGIN (default: *)
2025-10-27 18:07:13 +00:00
Radoslav Dimitrov
6d110bf99e
Use distribution/reference for parsing OCI references ( #651 )
...
<!-- Provide a brief summary of your changes -->
## Motivation and Context
<!-- Why is this change needed? What problem does it solve? -->
The following PR addresses the feedback from #634 around:
* Use a proper library - https://github.com/distribution/reference ,
instead of the implementing the OCI parsing ourselves (note: left the
tests so we can ensure we are not breaking any existing behavior)
* Updating one of the error messages to now assume MCPB.
## How Has This Been Tested?
<!-- Have you tested this in a real application? Which scenarios were
tested? -->
## Breaking Changes
<!-- Will users need to update their code or configurations? -->
## Types of changes
<!-- What types of changes does your code introduce? Put an `x` in all
the boxes that apply: -->
- [ ] Bug fix (non-breaking change which fixes an issue)
- [ ] New feature (non-breaking change which adds functionality)
- [ ] Breaking change (fix or feature that would cause existing
functionality to change)
- [ ] Documentation update
## Checklist
<!-- Go over all the following points, and put an `x` in all the boxes
that apply. -->
- [ ] I have read the [MCP
Documentation](https://modelcontextprotocol.io )
- [ ] My code follows the repository's style guidelines
- [ ] New and existing tests pass locally
- [ ] I have added appropriate error handling
- [ ] I have added or updated documentation as needed
## Additional context
<!-- Add any other context, implementation notes, or design decisions
-->
Signed-off-by: Radoslav Dimitrov <radoslav@stacklok.com>
2025-10-14 15:27:57 +03:00
dependabot[bot]
69f45c459c
build(deps): bump golang.org/x/mod from 0.28.0 to 0.29.0 ( #647 )
...
Bumps [golang.org/x/mod](https://github.com/golang/mod ) from 0.28.0 to
0.29.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="bba3e065a6https://github.com/golang/mod/compare/v0.28.0...v0.29.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-12 22:58:28 +03:00
dependabot[bot]
1592666f26
build(deps): bump github.com/coreos/go-oidc/v3 from 3.15.0 to 3.16.0 ( #616 )
...
Bumps [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc )
from 3.15.0 to 3.16.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/coreos/go-oidc/releases ">github.com/coreos/go-oidc/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.16.0</h2>
<h2>What's Changed</h2>
<ul>
<li>refactor: Remove unused time injection from RemoteKeySet by <a
href="https://github.com/ponimas "><code>@ponimas</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/466 ">coreos/go-oidc#466</a></li>
<li>bump go to 1.24, remove 1.23 support, bump go-jose dependency,
remove x/net dependency by <a
href="https://github.com/wardviaene "><code>@wardviaene</code></a> in <a
href="https://redirect.github.com/coreos/go-oidc/pull/467 ">coreos/go-oidc#467</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/wardviaene "><code>@wardviaene</code></a> made
their first contribution in <a
href="https://redirect.github.com/coreos/go-oidc/pull/467 ">coreos/go-oidc#467</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0 ">https://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0 </a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e9584733f869b167061fhttps://github.com/coreos/go-oidc/compare/v3.15.0...v3.16.0 ">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores )
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-10-04 00:56:21 +01:00
Tadas Antanavicius
272ee9322d
fix: add server name validation and clean invalid data before migration 009 ( #591 )
...
## Summary
This PR adds two important improvements to ensure data integrity:
1. **Adds server name format validation at the API layer** to match the
database constraint from migration 008
2. **Includes migration 008 to clean up invalid data** before applying
strict constraints in migration 009
## Changes
### Server Name Validation
- Enforces validation at the API layer matching the database constraint
- **Namespace pattern**: `[a-zA-Z0-9][a-zA-Z0-9.-]*[a-zA-Z0-9]`
- Must start and end with alphanumeric characters
- Can contain dots and hyphens in the middle
- **Name pattern**: `[a-zA-Z0-9][a-zA-Z0-9._-]*[a-zA-Z0-9]`
- Must start and end with alphanumeric characters
- Can contain dots, underscores, and hyphens in the middle
- Provides clear, user-friendly error messages indicating which part is
invalid
- Uses DRY approach with composed regex patterns
### Migration 008: Data Cleanup
- Removes servers with invalid names or empty versions (5 servers
affected in production)
- Fixes invalid status values by setting them to 'active' (1 server
affected)
- Removes duplicate name+version combinations
- Includes comprehensive safety checks to prevent accidental data loss
- Must run before migration 009 which adds strict constraints
## Testing
- All validator tests pass
- Migration includes safety checks that match production data
- CI verification included
---------
Co-authored-by: Claude <noreply@anthropic.com>
2025-09-30 20:07:42 +03:00
dependabot[bot]
Radoslav Dimitrov
Joel Verhagen
Terry Nederveld
Tadas Antanavicius