Skip to content

build(deps): bump the golang group across 1 directory with 24 updates - #189

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/golang-4f1ea910b6
Closed

build(deps): bump the golang group across 1 directory with 24 updates#189
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/main/golang-4f1ea910b6

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the golang group with 16 updates in the / directory:

Package From To
github.com/amacneil/dbmate/v2 2.33.0 2.34.1
github.com/aws/aws-sdk-go-v2 1.41.7 1.42.1
github.com/aws/aws-sdk-go-v2/config 1.32.17 1.32.30
github.com/aws/aws-sdk-go-v2/service/s3 1.101.0 1.105.1
github.com/danielgtaylor/huma/v2 2.37.3 2.39.0
github.com/go-chi/httprate 0.15.0 0.16.0
github.com/jackc/pgx/v5 5.9.2 5.10.0
github.com/wneessen/go-mail 0.7.2 0.8.1
go.opentelemetry.io/contrib/bridges/otelslog 0.18.0 0.19.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp 0.19.0 0.20.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp 1.43.0 1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.43.0 1.44.0
github.com/ThreeDotsLabs/watermill 1.5.1 1.5.2
github.com/go-chi/httplog/v3 3.3.0 3.4.0
github.com/oschwald/geoip2-golang/v2 2.1.0 2.2.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.68.0 0.69.0

Updates github.com/amacneil/dbmate/v2 from 2.33.0 to 2.34.1

Release notes

Sourced from github.com/amacneil/dbmate/v2's releases.

v2.34.1

What's Changed

Full Changelog: amacneil/dbmate@v2.34.0...v2.34.1

v2.34.0

What's Changed

New Contributors

Full Changelog: amacneil/dbmate@v2.33.0...v2.34.0

Commits

Updates github.com/aws/aws-sdk-go-v2 from 1.41.7 to 1.42.1

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.17 to 1.32.30

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.16 to 1.19.29

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.101.0 to 1.105.1

Commits

Updates github.com/danielgtaylor/huma/v2 from 2.37.3 to 2.39.0

Release notes

Sourced from github.com/danielgtaylor/huma/v2's releases.

v2.39.0

Overview

This release adds a new framework adapter, a handful of developer-facing features, and a large batch of correctness fixes spanning SSE, the Fiber adapter, schema generation, and validation.

Echo v5 Support

The humaecho adapter now supports Echo v5 alongside the existing versions. (#959)

No More Faulty Duplicate-Schema Panics

Registering operations that use inline structs with differing field names (and an empty operation ID) previously panicked at startup on a false-positive duplicate-schema collision. Conflicting names are now auto-incremented deterministically (Request, Request1, Request2, ...), so the app starts and the generated spec stays readable. (#893)

Context Propagation to Adapters

WithContext now propagates the context directly into the underlying adapter's own context wrapper (bun, chi, echo, fiber, gin, go, httprouter) instead of relying on a generic sub-context, so cancellation and context values flow correctly through the request lifecycle. (#867)

SSE Streaming on Fiber / fasthttp

Server-Sent Events (and other streaming responses) previously failed on the Fiber adapters with unable to flush, since fasthttp doesn't implement http.Flusher. SSE now streams correctly on Fiber v2 and v3 via an internal streaming hook, with no new public API and fasthttp remaining an indirect dependency. (#1059)

More SSE Improvements

  • Response headers are now flushed before the user handler runs, so EventSource.onopen fires immediately rather than waiting for the first event (#1038)
  • Comments can now be sent over SSE streams, a common way to keep connections alive (#1054)

New Features

  • Schema.Const for pinning a schema to a single allowed value (#1004)
  • Customizable docs renderer config for finer control over the documentation UI (#1024)
  • encoding.TextUnmarshaler support for slice query parameters, matching the existing behavior for scalar params (#1021)
  • Non-file JSON form-data fields: multipart form fields tagged contentType:"application/json" are now unmarshalled and validated (#1060)

Validation & Schema Fixes

  • Integer enums no longer always fail validation on query/path parameters; numeric enum values are now compared numerically rather than by strict Go type (#1050)
  • Content-Type validation is now case-insensitive per RFC 9110, so e.g. Application/Json no longer returns 415 (#1052)
  • Path parameters are always marked required: true in the generated spec, per the OpenAPI specification (#1011)
  • Prevented a panic (and dropped response) in uniqueItems validation when array items are unhashable types, now returning 422 correctly (#1045)
  • The json:",inline" tag is now honored for embedding anonymous fields in schemas (#1006)
  • Hidden route schemas are no longer leaked into the generated spec (#1032)

Adapter & Robustness Fixes

  • humafiber (v2): corrected EachHeader iteration (it previously invoked the callback once per byte, breaking cookie reads) and switched BodyReader to Body() for automatic request-body decompression (#1058)
  • autopatch: prevented chi route-context reuse from recursing internal GET sub-requests back into the generated PATCH handler and panicking (#1049)
  • Fixed a URL parsing panic in getAPIPrefix when server URLs contain template variables like {port} or {version} (#1027)
  • The read deadline is now cleared after the request body is read, so a slow handler can't cause a background read to time out and cancel the connection context (#1028)

Docs UI & Documentation

  • Forms are now permitted in the docs UI CSP (#1036)
  • Added allow-downloads to the Stoplight CSP so the Export button works (#1048)
  • Updated Restish references to v2 (#1041)

What's Changed

... (truncated)

Commits
  • d6f2a37 feat(form-data): handle unmarshalling and validation of non-file JSON form da...
  • 214a18c fix: avoid faulty duplicate detection (#893)
  • 4e53fef fix: prevent panic in uniqueItems validation for unhashable types (#1042) (#1...
  • a8a668c fix(sse): support streaming responses on Fiber/fasthttp adapters (#1059)
  • 6cc787b Support sending comments with SSE (#1054)
  • da460b9 feat: propagate context to adapters on WithContext (#867)
  • fcd9058 fix(humafiber): correct Fiber v2 EachHeader iteration and body decompression ...
  • 770e618 fix: content type validation should be case insensitive (#1052)
  • fd8148e fix: compare numeric enum values numerically (#1050)
  • 93b5a32 fix: support json inline tag for embedding anonymous fields in schema (#1006)
  • Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.2.5 to 5.3.0

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.0

What's Changed

New Contributors

SECURITY: middleware.ClientIP, a replacement for middleware.RealIP

@​VojtechVitek submitted PR #967, which introduces middleware.ClientIP — a replacement for middleware.RealIP that closes the three open spoofing advisories:

It also addresses issues outlined at:

middleware.RealIP is deprecated in this PR with pointers to the new API.

The deprecation only adds a // Deprecated: doc comment; the function keeps working for backward compatibility.

Why a new middleware (not "fix RealIP in place")

RealIP has two unfixable design choices: it mutates r.RemoteAddr, and it tries to be a one-size-fits-all default by walking a hard-coded list of headers any client can supply. Per adam-p's "The perils of the 'real' client IP" (which calls chi out by name on this), there is no safe default — the user must pick their trust source explicitly.

The new API

Four middlewares, two accessors. Pick exactly one middleware based on your infrastructure, read the result with one of the two accessors:

// One of the four. There is no safe default — pick exactly one.
func ClientIPFromHeader(trustedHeader string) func(http.Handler) http.Handler
func ClientIPFromXFF(trustedIPPrefixes ...string) func(http.Handler) http.Handler
func ClientIPFromXFFTrustedProxies(numTrustedProxies int) func(http.Handler) http.Handler
</tr></table>

... (truncated)

Commits

Updates github.com/go-chi/httprate from 0.15.0 to 0.16.0

Release notes

Sourced from github.com/go-chi/httprate's releases.

v0.16.0

What's Changed

New Contributors

Full Changelog: go-chi/httprate@v0.15.0...v0.16.0

Commits
  • 741b4a5 Deprecate spoofable RealIP rate-limiting; add LimitBy + KeyFromContext and mo...
  • 81255de perf: use zero-alloc xxh3.HashString on the local counter hot path (#60)
  • 0c2093a test: replace golang.org/x/sync/errgroup with sync.WaitGroup (#59)
  • 89e5cca local counter: align windows to reset at sub-millisecond counter start (#58)
  • be2ba84 replace fmt with strconv to reduce allocations (#55)
  • See full diff in compare view

Updates github.com/jackc/pgx/v5 from 5.9.2 to 5.10.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.10.0 (June 3, 2026)

This release includes a significant amount of hardening against malicious or compromised PostgreSQL servers, contributed by Sean Chittenden at CrowdStrike, Inc. This work bounds binary decoders against attacker-controlled message sizes, caps server-supplied SCRAM iteration counts, adds require_auth to restrict which authentication methods a server may use (mitigating downgrade attacks under sslmode=prefer), and ensures cancellation requests are sent over TLS when the original connection used TLS.

Features

  • Add require_auth to restrict accepted server authentication methods (Sean Chittenden at CrowdStrike, Inc.)
  • Add ParseConfigOptions.ConnStringAllowedKeys to restrict allowed connection string keys (Sean Chittenden at CrowdStrike, Inc.)
  • Add StructArgs and StrictStructArgs for @-named queries (Tubelight30)
  • Add ErrConnClosed sentinel error and unwrap it from connLockError (Charlie Tonneslan)
  • pgxpool: check if connection is expired before acquire (arthurdotwork)

Security Hardening

  • Encrypt CancelRequest connection when the primary connection used TLS (Sean Chittenden at CrowdStrike, Inc.)
  • Cap server-supplied SCRAM iteration count (Sean Chittenden at CrowdStrike, Inc.)
  • Default Frontend max message body length to ~1 GiB (Sean Chittenden at CrowdStrike, Inc.)
  • Bound hstore binary decode against malicious server input (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array binary decode element length against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound array element count against remaining message bytes (Sean Chittenden at CrowdStrike, Inc.)
  • Bound range, multirange, and tsvector binary decoders (Sean Chittenden at CrowdStrike, Inc.)
  • Document secure connection configuration (Sean Chittenden at CrowdStrike, Inc.)
  • Fix panic on malformed geometric text; return an error instead (MaIII)

Fixes

  • Fix scanning "char" (OID 18) into *string in binary format (luongs3)
  • Fix handling of typed-nil driver.Valuer in array and composite codecs (Donncha Fahy)
  • Fix CopyData.Data hex decoding in UnmarshalJSON (Charlie Tonneslan)
  • Fix data race when context is cancelled during connect
  • Fix parseKeywordValueSettings rejecting trailing whitespace (alliasgher)
  • pgconn: preserve full error chain in normalizeTimeoutError (Charlie Tonneslan)
  • pgconn: use a fresh context for the fallback connection in connectPreferred (Charlie Tonneslan)
  • pgxpool: fix MaxLifetimeDestroyCount and ping order for acquire-time expiry check
  • Add missing error check of rows.Err to load types (Jen Altavilla)
Commits
  • 7293fb1 Update changelog for v5.10.0
  • 1ade285 pgconn: document secure connection configuration
  • b4d6d4d pgtype: bound range, multirange, and tsvector binary decoders
  • 0639b37 pgconn: add ParseConfigOptions.ConnStringAllowedKeys
  • b28e65b pgtype: bound array element count against remaining message bytes
  • cd1f389 pgtype: bound array binary decode element length against remaining bytes
  • ff27b5b pgtype: bound hstore binary decode against malicious server input
  • a6002e1 pgproto3: default Frontend max message body length to ~1 GiB
  • 44f6173 pgconn: cap server-supplied SCRAM iteration count
  • 1a976f7 pgconn: add require_auth to restrict accepted server auth methods
  • Additional commits viewable in compare view

Updates github.com/wneessen/go-mail from 0.7.2 to 0.8.1

Release notes

Sourced from github.com/wneessen/go-mail's releases.

v0.8.1

Welcome to go-mail v0.8.1! 🎉

This release is only a small release, but fixes a regression on the 386 platform. We hope you enjoy!

Notable features / improvements / fixes

Fix regression on 386 platforms

The NTLM support introduced in v0.8.0 contained a bug affecting 386 platforms: a 32-bit integer could overflow because it wasn't cast to int64. This caused problems when cross-compiling to the 386 architecture. The bug is fixed in #589. In addition, the CI pipeline has been extended to run cross-compile tests for every platform supported by GitHub runners. Thanks to @​firefart for reporting the issue.

Opportunistic SMTP authentication

PR #585 introduces an opportunistic authentication mechanism that lets users provide a list of preferred auth types. During SMTP authentication, the client checks the mechanisms the server supports and selects the first match from the preferred list. If the server supports none of the preferred mechanisms, the client falls back to Autodiscover mode and selects the strongest mechanism the server offers.

Convenience helpers for List-Unsubscribe and one-click List-Unsubscribe-Post

We already expose the HeaderListUnsubscribe and HeaderListUnsubscribePost header constants, but until now there was no dedicated function to construct these headers. Users had to assemble the angle-bracket URI list and the exact List-Unsubscribe=One-Click token by hand via SetGenHeader—something that's easy to get subtly wrong (missing <>, an incorrect POST token, or GET-triggerable URLs). Since February 2024, Gmail and Yahoo require a working RFC 8058 one-click unsubscribe for senders exceeding 5k messages per day, making this a common compliance requirement rather than a niche feature. PR #587 adds three convenience helpers to set these headers correctly:

  • SetListUnsubscribe(uris ...string): sets an RFC 2369 List-Unsubscribe header only (mailto/https links).
  • SetListUnsubscribePost(): sets List-Unsubscribe-Post: List-Unsubscribe=One-Click.
  • SetListUnsubscribeOneClick(httpsURL string, additionalURIs ...string): the common case: sets both headers correctly, validating that at least one HTTPS URL is present as required by RFC 8058.

What's Changed

CI/CD maintenance changes

Full Changelog: wneessen/go-mail@v0.8.0...v0.8.1

v0.8.0: Native NTLM and DKIM support

Welcome to go-mail v0.8.0! 🎉

This release brings two big new features and a couple of improvements and fixes to go-mail. We hope you enjoy this release!

[!IMPORTANT] This release adds a new dependency to go.mod. We now rely on the crypto package of the Go extended library. We already relied on golang.org/x/text before, but it's worth noting that if you have strict dependency requirements, that golang.org/x/crypto was added in this release.

Notable features/improvements/fixes

Native NTLM authentication support

With PR #576 native NTLMv2 SMTP auth support has been added to go-mail. This feature has been requested several times and so far we've always resorted to a custom SMTP authentication provider using some 3rd party libraries. With go-mail v0.8.0 you can now natively authenticate with NTLM servers like any of the other supported authentication methods. Big thanks to @​mkalus for providing some ground work in #549 and for helping to test the code. The development was mainly based on the excellent documentation of the cURL project.

... (truncated)

Commits
  • 2ac36f0 Update doc.go
  • 1550ad6 Merge pull request #598 from wneessen/churn/ci-cd-crosscompile
  • 896ceb6 Fix linux/386
  • 80296ec Add linux 386
  • 7f544b1 Only execute cross compile tests we can actually use
  • 47f7a74 Enable CGO
  • f3ab24e Add cross-compile test to CI
  • a0f7cbe Merge pull request #597 from wneessen/dependabot/go_modules/golang.org/x/cryp...
  • 86f6131 Bump golang.org/x/crypto from 0.53.0 to 0.54.0
  • 2b6e523 Merge pull request #592 from wneessen/dependabot/github_actions/github/codeql...
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/bridges/otelslog from 0.18.0 to 0.19.0

Release notes

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's releases.

Release v0.19.0

Changed

  • Upgrade to v0.19.0 of go.opentelemetry.io/otel.

Raw changes made between v0.18.0 and v0.19.0

e78bad21a591832e3b8ec81c7b382d94194b1295 (tag: v0.19.0, tag: propagators/v0.19.0, tag: propagators/opencensus/v0.19.0, tag: propagators/opencensus/examples/v0.19.0, tag: propagators/aws/v0.19.0, tag: instrumentation/runtime/v0.19.0, tag: instrumentation/runtime/example/v0.19.0, tag: instrumentation/net/http/otelhttp/v0.19.0, tag: instrumentation/net/http/otelhttp/example/v0.19.0, tag: instrumentation/net/http/httptrace/otelhttptrace/v0.19.0, tag: instrumentation/net/http/httptrace/otelhttptrace/example/v0.19.0, tag: instrumentation/host/v0.19.0, tag: instrumentation/host/example/v0.19.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/v0.19.0, tag: instrumentation/gopkg.in/macaron.v1/otelmacaron/example/v0.19.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/v0.19.0, tag: instrumentation/google.golang.org/grpc/otelgrpc/example/v0.19.0, tag: instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo/v0.19.0, tag: instrumentation/github.com/labstack/echo/otelecho/v0.19.0, tag: instrumentation/github.com/labstack/echo/otelecho/example/v0.19.0, tag: instrumentation/github.com/gorilla/mux/otelmux/v0.19.0, tag: instrumentation/github.com/gorilla/mux/otelmux/example/v0.19.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/v0.19.0, tag: instrumentation/github.com/gocql/gocql/otelgocql/example/v0.19.0, tag: instrumentation/github.com/go-kit/kit/otelkit/v0.19.0, tag: instrumentation/github.com/go-kit/kit/otelkit/example/v0.19.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/v0.19.0, tag: instrumentation/github.com/gin-gonic/gin/otelgin/example/v0.19.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/v0.19.0, tag: instrumentation/github.com/emicklei/go-restful/otelrestful/example/v0.19.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/v0.19.0, tag: instrumentation/github.com/bradfitz/gomemcache/memcache/otelmemcache/example/v0.19.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/v0.19.0, tag: instrumentation/github.com/astaxie/beego/otelbeego/example/v0.19.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/v0.19.0, tag: instrumentation/github.com/Shopify/sarama/otelsarama/example/v0.19.0, tag: exporters/metric/dogstatsd/v0.19.0, tag: exporters/metric/datadog/v0.19.0, tag: exporters/metric/cortex/v0.19.0, tag: exporters/metric/cortex/utils/v0.19.0, tag: exporters/metric/cortex/example/v0.19.0, tag: detectors/gcp/v0.19.0, tag: detectors/aws/v0.19.0, tag: detectors/aws/eks/v0.19.0, tag: detectors/aws/ecs/v0.19.0, upstream/main) Release v0.19.0 (#624) ef9035683464d7a2fab6b483fb4729904d9f5a94 Use SingleHeader format for unspecified B3 inject encoding (#614) 7a8e6f588651f5bbe78dd809be4d40f79627d60c Bump github.com/labstack/echo/v4 from 4.2.0 to 4.2.1 in /instrumentation/github.com/labstack/echo/otelecho (#617) 542f258c607f02b7b987adee1e296c2e53124c0a Bump github.com/aws/aws-sdk-go from 1.37.25 to 1.37.30 in /detectors/aws (#616) a12fd5659285d35d45827e0fc7ea652bf6c0ea8a Bump github.com/aws/aws-sdk-go from 1.37.24 to 1.37.25 in /detectors/aws (#608) 3fcec9422000d4adb4eda8e15bfd9388b01144d2 Add docs on when reviews should be cleared (#583) 542d97419af3a61833da72cd0bda97f35755d599 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /detectors/gcp (#607) e5c4835bf0715374d6b408ed70d000854de5367e Bump github.com/aws/aws-sdk-go from 1.37.20 to 1.37.24 in /detectors/aws (#605) e438852d5d361c797844595da6ae31af1a016cc4 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /propagators/opencensus (#604) 1b4820c74d5ae5e98fdefe1341a2894869e2649a Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /exporters/metric/cortex (#603) c4d426fdd9c1ecef0ef1b7f371c1a97c557bd0ff Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /propagators (#602) d953e15449a71d8b0950d1b89969c96fb4c1b2fe Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 in /instrumentation/net/http/httptrace/otelhttptrace (#601) 384173e80a7d2192bd0a3ff296a2e581180d285e Bump github.com/golangci/golangci-lint from 1.37.1 to 1.38.0 in /tools (#606) cc31f437f73aed5f8aeecb2bcc8b3ee180248962 Add go-kit instrumentation library (#456)

Changelog

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's changelog.

[1.44.0/2.5.1/0.69.0/0.37.1/0.24.0/0.19.0/0.16.1/0.16.0] - 2026-05-28

Added

  • Add error.type attribute to http.client.request.duration for transport failures in otelhttp. (#8801)
  • Add examples for prometheus compatibility document. (#8716)
  • Add support for cardinality_limits in PeriodicMetricReader in otelconf. (#8885)
  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/x to expose the resolved SDK resource from declarative configuration. (#8913)
  • Add go.opentelemetry.io/contrib/detectors/hetzner, a new resource detector for Hetzner Cloud servers, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/hetzner. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, host.id, and host.name. (#8979)

Changed

  • Set error field as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otellogrus. (#8776)
  • Set the "error" field (e.g. created via zap.Error) as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otelzap. (#8719)
  • Set fields implementing error interface from slog records as record.SetErr instead of plain attributes in go.opentelemetry.io/contrib/bridges/otelslog. (#8774)
  • Set emitted errors in go.opentelemetry.io/contrib/bridges/otellogr as record errors (Record.SetErr) instead of exception.message attributes. (#8775)

Fixed

  • Fix header attributes lost when using sub-spans in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#8797)
  • Validate encoding configuration for OTLP HTTP exporters in go.opentelemetry.io/contrib/otelconf. (#8772)
  • Remove the custom body wrapper from the request's body after the request is processed to allow body type comparisons with the original type in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6914)
  • Unknown or empty HTTP methods now report "_OTHER" instead of "GET" across all HTTP instrumentations to align with OpenTelemetry semantic conventions. (#8868)
  • The default span name formatter in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now conforms to the OpenTelemetry HTTP semantic conventions for server span names. (#8871)
    • The default span name is now {method} {route} (e.g. GET /foo/{id}) when a route pattern is available, or {method} (e.g. GET) otherwise.

Removed

  • Remove the deprecated WithSpanOptions option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8991)
Commits
  • e78bad2 Release v0.19.0 (#624)
  • ef90356 Use SingleHeader format for unspecified B3 inject encoding (#614)
  • 7a8e6f5 Bump github.com/labstack/echo/v4 from 4.2.0 to 4.2.1 in /instrumentation/gith...
  • 542f258 Bump github.com/aws/aws-sdk-go from 1.37.25 to 1.37.30 in /detectors/aws (#616)
  • a12fd56 Bump github.com/aws/aws-sdk-go from 1.37.24 to 1.37.25 in /detectors/aws (#608)
  • 3fcec94 Add docs on when reviews should be cleared (#583)

@dependabot
build(deps): bump the golang group across 1 directory with 24 updates
53b0e30 
Bumps the golang group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/amacneil/dbmate/v2](https://github.com/amacneil/dbmate) | `2.33.0` | `2.34.1` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.7` | `1.42.1` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.17` | `1.32.30` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.101.0` | `1.105.1` |
| [github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma) | `2.37.3` | `2.39.0` |
| [github.com/go-chi/httprate](https://github.com/go-chi/httprate) | `0.15.0` | `0.16.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.9.2` | `5.10.0` |
| [github.com/wneessen/go-mail](https://github.com/wneessen/go-mail) | `0.7.2` | `0.8.1` |
| [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.18.0` | `0.19.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go) | `0.19.0` | `0.20.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.43.0` | `1.44.0` |
| [github.com/ThreeDotsLabs/watermill](https://github.com/ThreeDotsLabs/watermill) | `1.5.1` | `1.5.2` |
| [github.com/go-chi/httplog/v3](https://github.com/go-chi/httplog) | `3.3.0` | `3.4.0` |
| [github.com/oschwald/geoip2-golang/v2](https://github.com/oschwald/geoip2-golang) | `2.1.0` | `2.2.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` |



Updates `github.com/amacneil/dbmate/v2` from 2.33.0 to 2.34.1
- [Release notes](https://github.com/amacneil/dbmate/releases)
- [Commits](amacneil/dbmate@v2.33.0...v2.34.1)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.7 to 1.42.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.7...v1.42.1)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.17 to 1.32.30
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.32.17...config/v1.32.30)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.16 to 1.19.29
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.19.16...credentials/v1.19.29)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.101.0 to 1.105.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.101.0...service/s3/v1.105.1)

Updates `github.com/danielgtaylor/huma/v2` from 2.37.3 to 2.39.0
- [Release notes](https://github.com/danielgtaylor/huma/releases)
- [Commits](danielgtaylor/huma@v2.37.3...v2.39.0)

Updates `github.com/go-chi/chi/v5` from 5.2.5 to 5.3.0
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.2.5...v5.3.0)

Updates `github.com/go-chi/httprate` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/go-chi/httprate/releases)
- [Commits](go-chi/httprate@v0.15.0...v0.16.0)

Updates `github.com/jackc/pgx/v5` from 5.9.2 to 5.10.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.9.2...v5.10.0)

Updates `github.com/wneessen/go-mail` from 0.7.2 to 0.8.1
- [Release notes](https://github.com/wneessen/go-mail/releases)
- [Commits](wneessen/go-mail@v0.7.2...v0.8.1)

Updates `go.opentelemetry.io/contrib/bridges/otelslog` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@v0.18.0...v0.19.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/log` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk/log` from 0.19.0 to 0.20.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.19.0...v0.20.0)

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.22.0
- [Commits](golang/sync@v0.20.0...v0.22.0)

Updates `github.com/ThreeDotsLabs/watermill` from 1.5.1 to 1.5.2
- [Release notes](https://github.com/ThreeDotsLabs/watermill/releases)
- [Changelog](https://github.com/ThreeDotsLabs/watermill/blob/master/RELEASE-PROCEDURE.md)
- [Commits](ThreeDotsLabs/watermill@v1.5.1...v1.5.2)

Updates `github.com/go-chi/httplog/v3` from 3.3.0 to 3.4.0
- [Release notes](https://github.com/go-chi/httplog/releases)
- [Commits](go-chi/httplog@v3.3.0...v3.4.0)

Updates `github.com/oschwald/geoip2-golang/v2` from 2.1.0 to 2.2.0
- [Release notes](https://github.com/oschwald/geoip2-golang/releases)
- [Changelog](https://github.com/oschwald/geoip2-golang/blob/main/CHANGELOG.md)
- [Commits](oschwald/geoip2-golang@v2.1.0...v2.2.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.68.0 to 0.69.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.68.0...zpages/v0.69.0)

Updates `go.opentelemetry.io/otel` from 1.43.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.43.0...v1.44.0)

---
updated-dependencies:
- dependency-name: github.com/amacneil/dbmate/v2
  dependency-version: 2.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.42.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.30
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.29
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.105.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/danielgtaylor/huma/v2
  dependency-version: 2.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/go-chi/chi/v5
  dependency-version: 5.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/go-chi/httprate
  dependency-version: 0.16.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/jackc/pgx/v5
  dependency-version: 5.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/wneessen/go-mail
  dependency-version: 0.8.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/contrib/bridges/otelslog
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/log
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/sdk/log
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel/sdk/metric
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: golang.org/x/sync
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/ThreeDotsLabs/watermill
  dependency-version: 1.5.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: golang
- dependency-name: github.com/go-chi/httplog/v3
  dependency-version: 3.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: github.com/oschwald/geoip2-golang/v2
  dependency-version: 2.2.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: golang
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 16, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 23, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jul 23, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/main/golang-4f1ea910b6 branch July 23, 2026 03:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants