Skip to content

chore(deps): update go indirect dependencies - #1182

Merged
renovate[bot] merged 1 commit into
mainfrom
renovate/go-indirect-dependencies
Sep 13, 2026
Merged

renovate[bot] merged 1 commit into
mainfrom
renovate/go-indirect-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 13, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.35.0v1.37.0 age confidence
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.59.0v0.61.0 age confidence
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.59.0v0.61.0 age confidence
github.com/PuerkitoBio/goquery v1.12.0v1.13.0 age confidence
github.com/andybalholm/cascadia v1.3.4v1.3.5 age confidence
github.com/aws/smithy-go v1.27.8v1.28.1 age confidence
github.com/dlclark/regexp2/v2 v2.7.1v2.7.2 age confidence
github.com/envoyproxy/go-control-plane/envoy v1.37.0v1.39.0 age confidence
github.com/go-jose/go-jose/v4 v4.1.4v4.1.5 age confidence
github.com/googleapis/enterprise-certificate-proxy v0.3.20v0.3.21 age confidence
github.com/googleapis/gax-go/v2 v2.24.0v2.24.1 age confidence
github.com/mattn/go-runewidth v0.0.27v0.0.29 age confidence
go.opentelemetry.io/contrib/detectors/gcp v1.45.0v1.46.0 age confidence
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0v0.71.0 age confidence
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0v0.71.0 age confidence
go.opentelemetry.io/otel v1.45.0v1.46.0 age confidence
go.opentelemetry.io/otel/metric v1.45.0v1.46.0 age confidence
go.opentelemetry.io/otel/sdk v1.45.0v1.46.0 age confidence
go.opentelemetry.io/otel/sdk/metric v1.45.0v1.46.0 age confidence
go.opentelemetry.io/otel/trace v1.45.0v1.46.0 age confidence
golang.org/x/crypto v0.55.0v0.56.0 age confidence
golang.org/x/oauth2 v0.36.0v0.37.0 age confidence
golang.org/x/sync v0.22.0v0.23.0 age confidence
golang.org/x/sys v0.47.0v0.48.0 age confidence
golang.org/x/time v0.15.0v0.16.0 age confidence

Release Notes

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

v0.61.0: v1.37.0/v0.61.0

Compare Source

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.60.0...v0.61.0

v0.60.0: v1.36.0/v0.60.0

Compare Source

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.59.0...v0.60.0

PuerkitoBio/goquery (github.com/PuerkitoBio/goquery)

v1.13.0

Compare Source

Performance improvements and new top-level goquery.Text function to extract text from a selection with more control than the sel.Text jquery-like method.

andybalholm/cascadia (github.com/andybalholm/cascadia)

v1.3.5

Compare Source

aws/smithy-go (github.com/aws/smithy-go)

v1.28.1

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.1
    • Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

v1.28.0

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.28.0
    • Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

v1.27.10

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.10
    • Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

v1.27.9

Compare Source

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.27.9
    • Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.
    • Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.
    • Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.
    • Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.
dlclark/regexp2 (github.com/dlclark/regexp2/v2)

v2.7.2

Compare Source

envoyproxy/go-control-plane (github.com/envoyproxy/go-control-plane/envoy)

v1.39.0

Full Changelog: envoy/v1.38.0...envoy/v1.39.0

v1.38.0

Full Changelog: envoy/v1.37.0...envoy/v1.38.0

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.5

Compare Source

Fixed security issues

  • cipher/cbc_hmac: don't panic on empty ciphertext (#​292)
  • cipher/cbc_hmac: don't panic on invalid key (#​291)
  • json: limit stack depth (#​290)
  • jwt: reject out-of-range NumericDate values (#​278)
  • Check alg against pubkey curve during verify. (#​293)
  • Reject malformed Ed25519 JWKs (#​250)
  • jws: choose verification key per-signature (#​243)

Changed

  • Verify OpaqueSigner's Public() return is public (#​260)
  • jws: skip signature on ErrJWKSKidNotFound (#​248)
  • Handle JWE JSON without protected header (#​240)
  • jws: don't strip internal whitespace before parsing JSON (#​239)
  • jws: fewer calls to OpaqueSigner.Public() (#​224)
  • Return a specific error when parsing empty string (#​216)
  • Reject typed nil at Verify time (#​285)
googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

v0.3.21

Compare Source

What's Changed

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.20...v0.3.21

googleapis/gax-go (github.com/googleapis/gax-go/v2)

v2.24.1

Compare Source

Bug Fixes
  • split implementation of ProtoJSONStream for 1.27 and later (#​532) (d0623a1)
mattn/go-runewidth (github.com/mattn/go-runewidth)

v0.0.29

Compare Source

v0.0.28

Compare Source

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)

v1.46.0: /v2.5.3/v0.71.0/v0.37.3/v0.26.0/v0.20.1/v0.16.3/v0.18.0

Compare Source

This release is the last to support Go 1.25.
The next release will require at least Go 1.26.

Added
  • Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#​9139)
  • Support testing of Go 1.27. (#​9524)
  • Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#​9001)
  • Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#​9292)
  • Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#​9001)
Deprecated
  • Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho.
    Use github.com/labstack/echo-opentelemetry instead. (#​9136)
Fixed
  • Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#​9387)
  • Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#​9395)
  • Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (#​9429)
  • Reject OTLP exporter headers with an empty name in go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/otelconf/x, and go.opentelemetry.io/contrib/otelconf/v0.3.0, instead of forwarding invalid header names to OTLP exporters. (#​9102)
  • go.opentelemetry.io/contrib/detectors/aws/lambda no longer returns an error when run outside of an AWS Lambda environment, matching the no-op behavior of other resource detectors. (#​9464)
  • Convert Prometheus untyped metrics to OTLP Gauges in go.opentelemetry.io/contrib/bridges/prometheus. (#​9099)
What's Changed

Important

✂ PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Europe/Paris)

  • Branch creation
    • Between 12:00 AM and 03:59 AM, only on Monday (* 0-3 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from batmac as a code owner September 13, 2026 22:05
@renovate renovate Bot added the renovate label Sep 13, 2026
@renovate
renovate Bot enabled auto-merge (squash) September 13, 2026 22:05
@renovate

renovate Bot commented Sep 13, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260825221802-da73d73af1c5

@renovate
renovate Bot force-pushed the renovate/go-indirect-dependencies branch from 4376cd9 to 49999b9 Compare September 13, 2026 22:10
@renovate
renovate Bot force-pushed the renovate/go-indirect-dependencies branch from 49999b9 to a8cb38a Compare September 13, 2026 22:13
@renovate
renovate Bot merged commit 1e3302f into main Sep 13, 2026
23 of 24 checks passed
@renovate
renovate Bot deleted the renovate/go-indirect-dependencies branch September 13, 2026 22:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant