Skip to content

fix(deps): update go-libraries - #5779

Open
renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/go-libraries
Open

fix(deps): update go-libraries#5779
renovate-bot wants to merge 1 commit into
google:masterfrom
renovate-bot:renovate/go-libraries

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown
Collaborator

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
cloud.google.com/go/datastore v1.25.0 → v1.26.0 age confidence require minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace v1.34.0 → v1.35.0 age confidence require minor
github.com/klauspost/compress v1.19.0 → v1.19.2 age confidence require patch
github.com/ossf/osv-schema/bindings/go d4a00c3 → f3f8263 age confidence require digest
github.com/yuin/goldmark v1.8.4 → v1.8.5 age confidence require patch
go.opentelemetry.io/contrib/detectors/gcp v1.44.0 → v1.45.0 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 → v0.70.0 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0 → v0.70.0 age confidence require minor
go.opentelemetry.io/otel v1.44.0 → v1.45.0 age confidence require minor
go.opentelemetry.io/otel/sdk v1.44.0 → v1.45.0 age confidence require minor
go.opentelemetry.io/otel/trace v1.44.0 → v1.45.0 age confidence require minor
google.golang.org/api v0.287.1 → v0.292.0 age confidence require minor v0.293.0
google.golang.org/grpc v1.82.1 → v1.83.0 age confidence require minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

klauspost/compress (github.com/klauspost/compress)

v1.19.2

Compare Source

What's Changed
New Contributors

Full Changelog: klauspost/compress@v1.19.1...v1.19.2

v1.19.1

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

yuin/goldmark (github.com/yuin/goldmark)

v1.8.5

Compare Source

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)

v1.45.0: /v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0

Compare Source

Overview
Added
  • Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#​9011)
  • Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#​9108)
  • Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#​8993)
  • The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#​8990)
  • Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#​8915)
  • Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#​9138)
  • Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#​9074)
  • Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#​9137)
  • Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#​9289)
  • Add azurecontainerapps resource detector for Azure Container Apps. (#​8939)
  • Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#​9290)
  • Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#​9162)
  • Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#​8995)
Changed
  • Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules.
    See semantic-conventions v1.43.0 release for complete details. (#​9337)
  • Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules.
    See semantic-conventions v1.42.0 release for complete details. (#​9196)
  • Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#​9112)
  • Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#​9180)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#​9076)
  • Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#​8977)
  • Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8904)
  • The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#​9162)
Fixed
  • Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#​9062)
  • Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#​9131)
  • Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#​9160)
  • Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#​9184)
  • Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#​9063)
  • Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#​9197)
  • Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#​9284)
  • TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#​9163)
  • Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#​9238)
  • Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#​9229)
  • Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#​9068)
  • Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#​9208)
  • Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#​9069)
  • Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#​9361)
  • Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#​9273)
  • Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#​9359)
  • Strip connection number suffix from connection ID in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo to prevent unbounded metric cardinality. (#​9352)
  • Strip connection number suffix from connection ID in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo so the network.peer.address and net.peer.name span attributes reflect the actual host instead of the raw connection ID. (#​9352)
  • Record network.protocol.version (and network.protocol.name) from the response's negotiated protocol instead of the request's stamped Proto in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, so an HTTP/1.1-shaped request that gets upgraded to HTTP/2 via ALPN is no longer misreported as HTTP/1.1 on the client span and request metrics. (#​9371)
What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone Australia/Sydney)

  • Branch creation
    • "before 6am on wednesday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Aug 4, 2026
@forking-renovate

forking-renovate Bot commented Aug 4, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: bindings/go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68 -> v0.0.0-20260526163538-3dc84a4a5aaa
File name: go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 11 additional dependencies were updated

Details:

Package Change
cel.dev/expr v0.25.1 -> v0.25.2
cloud.google.com/go/auth v0.20.0 -> v0.22.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.32.0 -> v1.35.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.58.0 -> v0.59.0
github.com/felixge/httpsnoop v1.0.4 -> v1.1.0
github.com/go-logr/logr v1.4.3 -> v1.4.4
github.com/googleapis/enterprise-certificate-proxy v0.3.17 -> v0.3.19
github.com/spiffe/go-spiffe/v2 v2.6.0 -> v2.7.0
go.opentelemetry.io/otel/metric v1.44.0 -> v1.45.0
go.opentelemetry.io/otel/sdk/metric v1.44.0 -> v1.45.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20260706201446-f0a921348800 -> v0.0.0-20260803160001-6ac0973c030d

@renovate-bot
renovate-bot force-pushed the renovate/go-libraries branch 5 times, most recently from a754a60 to bae8620 Compare August 7, 2026 21:30
@another-rex
another-rex enabled auto-merge (squash) August 10, 2026 01:32
another-rex
another-rex previously approved these changes Aug 10, 2026
View reviewed changes
auto-merge was automatically disabled August 11, 2026 05:08

Head branch was pushed to by a user without write access

@renovate-bot
renovate-bot force-pushed the renovate/go-libraries branch 4 times, most recently from 5b5bdee to 682935b Compare August 12, 2026 16:53
@renovate-bot
renovate-bot force-pushed the renovate/go-libraries branch from 682935b to 804393f Compare August 13, 2026 09:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@another-rex another-rex another-rex left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @another-rex