Skip to content

Bump the go-modules group across 1 directory with 23 updates#17

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e87f474735
Closed

Bump the go-modules group across 1 directory with 23 updates#17
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-e87f474735

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 27, 2026 •
edited
Loading

Bumps the go-modules group with 10 updates in the / directory:

Package From To
github.com/paketo-buildpacks/occam 0.31.1 0.31.3
github.com/docker/go-connections 0.6.0 0.7.0
github.com/ebitengine/purego 0.9.1 0.10.0
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.7 2.29.0
github.com/moby/patternmatcher 0.6.0 0.6.1
github.com/paketo-buildpacks/freezer 0.2.2 0.2.3
github.com/shirou/gopsutil/v4 4.25.12 4.26.3
github.com/testcontainers/testcontainers-go 0.40.0 0.42.0
github.com/vbatts/tar-split 0.12.2 0.12.3
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.64.0 0.68.0

Updates github.com/paketo-buildpacks/occam from 0.31.1 to 0.31.3

Commits
  • 0a7c1ac chore(deps): updated module github.com/google/go-containerregistry from v0.21...
  • e3a5bde chore(deps): updated module github.com/paketo-buildpacks/packit/v2 from v2.25...
  • 6914d4b Updates go mod version to 1.26.1
  • a2ee454 Fix linter issues (#456)
  • 99c82d2 Updating github-config
  • 0277272 Updating github-config
  • cdd83bd Updating github-config
  • f46bf41 chore(deps): updated module github.com/onsi/gomega from v1.38.3 to v1.39.1 (#...
  • 1c6c42d chore(deps): updated module github.com/docker/docker from v28.5.1+incompatibl...
  • 7162009 chore(deps): updated module github.com/testcontainers/testcontainers-go from ...
  • See full diff in compare view

Updates github.com/containerd/platforms from 0.2.1 to 1.0.0-rc.2

Commits
  • 2e51fd9 Merge pull request #25 from helio/windows-os-version-sort
  • 8c0d9f9 use windowsMatchComparer for OSVersion match order
  • 2fec6c4 Merge pull request #24 from kiashok/add-ws2025
  • 8447b0a Update ci.yml
  • 4549974 Add WS2025 to Windows matcher and code optimizations
  • e3566b8 Merge pull request #22 from cpuguy83/windows_everywhere
  • 7c58292 Move windows matcher logic so all platforms can use
  • 9ada2e3 Merge pull request #21 from thaJeztah/stdlib_testing
  • 458d3b7 Merge pull request #18 from harryzcy/arm64-lookup
  • 86a86b7 replace testify with stdlib in tests
  • Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.6.0 to 0.7.0

Commits
  • 7997b0f Merge pull request #156 from thaJeztah/bump_go_winio
  • 329724a chore(deps): bump github.com/Microsoft/go-winio v0.6.2
  • 161dc9b Merge pull request #155 from thaJeztah/pin_actions
  • b115e42 Merge pull request #154 from thaJeztah/fix_non_linux_tests
  • 4c35b2a ci: pin actions to sha
  • b4454a6 tlsconfig: make root pool tests deterministic across platforms
  • 0819711 tlsconfig: certPool: pass options as argument
  • 0329635 tlsconfig: rename some vars that shadowed
  • 894d811 Merge pull request #150 from thaJeztah/deprecate_SystemCertPool
  • 0a1293a Merge pull request #153 from thaJeztah/chachacha
  • Additional commits viewable in compare view

Updates github.com/ebitengine/purego from 0.9.1 to 0.10.0

Commits
  • bb9b1f4 all: v0.10.0 released
  • 585a4c5 purego: add support for s390x (#413)
  • d685103 .github/workflows: reduce CI time for minor architectures (#417)
  • d8dcb88 return errno value on darwin amd64/arm64 (#416)
  • 587d406 .github/workflows: test against 1.26 and update patch versions (#414)
  • 1a5155f purego: extend struct argument support to Linux amd64/arm64 (#361)
  • 071d22a purego: add support for ppc64le (#408)
  • e8ef616 .github/workflows: Update Go version to 1.26.0-rc.3 (#409)
  • 2fe737a purego: add benchmarks for calling methods (#363)
  • 49bede1 purego: add support for linux/386 (#403)
  • Additional commits viewable in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.12 to 1.4.13

Commits
  • 8822588 build(deps): bump the github-actions group across 1 directory with 3 updates
  • dfcfd00 m3u: check NL after signature for fewer false-positives
  • b40e4de ndjson: remove duplicate testcase
  • b9d4202 m3u: add x-mpegurl alias (#755)
  • 913ef6e Extend: Ensure MIME string normalization (#756)
  • 02cce61 bufr: add support (#754)
  • fe42f3e framemaker: add support (#752)
  • 0beb64f ttf: use ints instead of string for better performance (#751)
  • 3e267fc fonts: harden TTF and OTF detection (#750)
  • 789eb1d misc: remove an outdated TODO
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.7 to 0.21.3

Commits
  • 3888fb8 bump golang to 1.25.7 (#2236)
  • f439624 tarball: detect symlink cycles in extractFileFromTar (#2232)
  • 400c263 mutate: reject path traversal and symlink escape in Extract (#2227)
  • 47eedc9 Bump goreleaser/goreleaser-action in the actions group (#2220)
  • be0a845 Bump the go-deps group across 4 directories with 7 updates (#2233)
  • e916301 migrate to github.com/moby/moby modules (#2228)
  • 8b2478e Adds local file support to the crane index subcommand (#2223)
  • 9e0ccb0 Better handle redirects to https in ping (#2225)
  • 85f2bf5 crane: fix case in auth response json (#2218)
  • e971d63 Add WithFileBufferedOpener for file-backed daemon image buffering (#2214)
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.27.7 to 2.29.0

Commits
  • ba9b55c chore(deps): update dependency rules_shell to v0.8.0 (#6626)
  • 284a82e chore(deps): update googleapis digest to bcfcbda (#6625)
  • f74bc7f chore(deps): update google/oss-fuzz digest to d58fd64 (#6624)
  • efb665d Add edition 2024 support (#6622)
  • c58da15 chore(deps): update google/oss-fuzz digest to 32b8df7 (#6621)
  • 42997a1 Deprecate fields and methods if file is deprecated (#6613)
  • 6f4af8b chore(deps): update googleapis digest to bf85cad (#6620)
  • 68fde5f chore(deps): update google/oss-fuzz digest to 7b814a1 (#6619)
  • 6da2a46 chore(deps): update googleapis digest to 898f25c (#6617)
  • c9c7ad4 chore(deps): update googleapis digest to fc96870 (#6616)
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.3 to 1.18.4

Commits

Updates github.com/moby/patternmatcher from 0.6.0 to 0.6.1

Commits
  • 5a6d842 Merge pull request #9 from thaJeztah/fix_panic
  • e5d80c7 fix panic / nil pointer dereference on invalid patterns
  • 7f236f5 Merge pull request #8 from thaJeztah/update_ci
  • a95e09c ci: update actions and test against "oldest", "oldstable" and "stable"
  • See full diff in compare view

Updates github.com/paketo-buildpacks/freezer from 0.2.2 to 0.2.3

Release notes

Sourced from github.com/paketo-buildpacks/freezer's releases.

0.2.3

⛏ Dependency Upgrades

  • Bump github.com/paketo-buildpacks/packit/v2 from 2.25.3 to 2.25.4 (#36) @​dependabot
  • Bump github.com/paketo-buildpacks/packit/v2 from 2.24.0 to 2.25.2 (#32) @​dependabot

🚧 Tasks

Commits
  • 4ec7aab Merge pull request #39 from paketo-buildpacks/update/pipeline
  • 9d5fafa Bump pipeline from 1.44.0 to 1.45.0
  • 3ef05cd Merge pull request #40 from paketo-buildpacks/update/go
  • b6b5517 Bump Go Modules
  • 2d2e7e0 Merge pull request #38 from paketo-buildpacks/update/go
  • 31ee674 Bump Go Modules
  • da71d6d Merge pull request #37 from paketo-buildpacks/update/go
  • 09cafb5 Bump Go Modules
  • 7ff0cd2 Merge pull request #35 from paketo-buildpacks/update/pipeline
  • f21c51d Bump pipeline from 1.43.0 to 1.44.0
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.25.4 to 2.25.5

Commits
  • 388f655 Updates go mod version to 1.26.1
  • ec5163e Updating github-config
  • 1ed4352 Structure re-usability for the extension (#754)
  • 1178810 Bump modernc.org/sqlite from 1.46.2 to 1.47.0
  • dc41ad0 Bump modernc.org/sqlite from 1.46.1 to 1.46.2
  • 66b11fa Bump github.com/anchore/syft from 1.42.1 to 1.42.2
  • 0172ef8 Bump go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0
  • f3c1964 Bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
  • 82aea99 Bump github.com/anchore/syft from 1.42.0 to 1.42.1
  • e16f8b8 Bump modernc.org/sqlite from 1.46.0 to 1.46.1
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.25.12 to 4.26.3

Commits
  • c2a1624 Merge pull request #2033 from Dylan-M/dylanmyers/disk-3b-iocounters
  • b32e3a1 Merge pull request #2032 from Dylan-M/dylanmyers/disk-3a-usage-fix
  • 730f763 Merge pull request #2063 from lubeschanin/fix/sensors-darwin-arm64-crash
  • 76137fe Fix SIGBUS/SIGSEGV crash on macOS ARM64: keep libraries open, fix data race
  • be66821 disk: implement IOCountersWithContext for AIX nocgo via iostat
  • 416f4ed disk: use unix.Statfs for fstype in UsageWithContext on AIX nocgo
  • 7661a67 Merge pull request #2031 from shirou/fix/net_linux_connection_unix_socket_dedup
  • 3095963 Merge pull request #2012 from shirou/fix/revert_opt-outed_mem_used_calc
  • bf942de [net][linux]: prevent incorrect deduplication of unnamed UNIX sockets
  • d7abb9a Merge pull request #2029 from skartikey/fix/openbsd-mem-cached
  • Additional commits viewable in compare view

Updates github.com/testcontainers/testcontainers-go from 0.40.0 to 0.42.0

Commits
  • 6e58418 chore: use new version (v0.42.0) in modules and examples
  • f713dc0 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetr...
  • 300827a chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetr...
  • 7a15ac1 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace...
  • 5bae3d2 fix: return an error when docker host cannot be retrieved (#3613)
  • fc19484 chore(deps): bump mkdocs-include-markdown-plugin from 7.2.1 to 7.2.2 (#3626)
  • 95bdc0c chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 (#3638)
  • 75aa226 chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptrace...
  • 2f59938 chore(deps): bump go.opentelemetry.io/otel/sdk in /modules/milvus (#3644)
  • 580abf6 chore: update to Go 1.25.9, 1.26.9 (#3647)
  • Additional commits viewable in compare view

Updates github.com/vbatts/tar-split from 0.12.2 to 0.12.3

Commits

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.64.0 to 0.68.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
  • Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
  • Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
  • Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
  • Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
  • Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
  • Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

  • Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
  • Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
  • Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

  • Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
  • Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
  • Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

  • Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

  • Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

  • Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

  • Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

    • The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:
      • RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.
      • rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
      • rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

    See semantic-conventions v1.40.0 release for complete details.

Fixed

... (truncated)

Commits
  • 45977a4 Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0 (#8769)
  • 0fcc152 fix(deps): update module github.com/googlecloudplatform/opentelemetry-operati...
  • eaba3cd chore(deps): update googleapis to 6f92a3b (#8776)
  • 6df430c chore(deps): update module github.com/jgautheron/goconst to v1.10.0 (#8771)
  • ae90e32 Fix otelconf prometheus label escaping (#8763)
  • f202c3f otelconf: move experimental types to otelconf/x (#8529)
  • 8ddaece fix(deps): update aws-sdk-go-v2 monorepo (#8764)
  • c7c03a4 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8766)
  • 717a85a envcar: normalize cached environment variable names (#8761)
  • ad990b6 fix(deps): update module github.com/aws/smithy-go to v1.24.3 (#8765)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.39.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits
  • 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
  • 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
  • 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
  • 5e363de limit response body size for OTLP HTTP exporters (#8108)
  • 35214b6 Use an absolute path when calling bsd kenv (#8113)
  • 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
  • e70658e fix: support getBody in otelploghttp (#8096)
  • 4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
  • b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
  • 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/metric from 1.39.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#81...

    Description has been truncated

@dependabot
Bump the go-modules group across 1 directory with 23 updates
0626f71 
Bumps the go-modules group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.31.1` | `0.31.3` |
| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.6.0` | `0.7.0` |
| [github.com/ebitengine/purego](https://github.com/ebitengine/purego) | `0.9.1` | `0.10.0` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.7` | `2.29.0` |
| [github.com/moby/patternmatcher](https://github.com/moby/patternmatcher) | `0.6.0` | `0.6.1` |
| [github.com/paketo-buildpacks/freezer](https://github.com/paketo-buildpacks/freezer) | `0.2.2` | `0.2.3` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.12` | `4.26.3` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.40.0` | `0.42.0` |
| [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.12.2` | `0.12.3` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.64.0` | `0.68.0` |



Updates `github.com/paketo-buildpacks/occam` from 0.31.1 to 0.31.3
- [Commits](paketo-buildpacks/occam@v0.31.1...v0.31.3)

Updates `github.com/containerd/platforms` from 0.2.1 to 1.0.0-rc.2
- [Commits](containerd/platforms@v0.2.1...v1.0.0-rc.2)

Updates `github.com/docker/go-connections` from 0.6.0 to 0.7.0
- [Commits](docker/go-connections@v0.6.0...v0.7.0)

Updates `github.com/ebitengine/purego` from 0.9.1 to 0.10.0
- [Commits](ebitengine/purego@v0.9.1...v0.10.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.12 to 1.4.13
- [Commits](gabriel-vasile/mimetype@v1.4.12...v1.4.13)

Updates `github.com/google/go-containerregistry` from 0.20.7 to 0.21.3
- [Commits](google/go-containerregistry@v0.20.7...v0.21.3)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.7 to 2.29.0
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.7...v2.29.0)

Updates `github.com/klauspost/compress` from 1.18.3 to 1.18.4
- [Commits](klauspost/compress@v1.18.3...v1.18.4)

Updates `github.com/moby/patternmatcher` from 0.6.0 to 0.6.1
- [Commits](moby/patternmatcher@v0.6.0...v0.6.1)

Updates `github.com/paketo-buildpacks/freezer` from 0.2.2 to 0.2.3
- [Release notes](https://github.com/paketo-buildpacks/freezer/releases)
- [Commits](paketo-buildpacks/freezer@v0.2.2...v0.2.3)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.25.4 to 2.25.5
- [Commits](paketo-buildpacks/packit@v2.25.4...v2.25.5)

Updates `github.com/shirou/gopsutil/v4` from 4.25.12 to 4.26.3
- [Commits](shirou/gopsutil@v4.25.12...v4.26.3)

Updates `github.com/testcontainers/testcontainers-go` from 0.40.0 to 0.42.0
- [Commits](testcontainers/testcontainers-go@v0.40.0...v0.42.0)

Updates `github.com/vbatts/tar-split` from 0.12.2 to 0.12.3
- [Commits](vbatts/tar-split@v0.12.2...v0.12.3)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.64.0 to 0.68.0
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.64.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.43.0
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/metric` from 1.39.0 to 1.43.0
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/trace` from 1.39.0 to 1.43.0
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `golang.org/x/crypto` from 0.47.0 to 0.48.0
- [Commits](golang/crypto@v0.47.0...v0.48.0)

Updates `golang.org/x/net` from 0.49.0 to 0.51.0
- [Commits](golang/net@v0.49.0...v0.51.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.40.0 to 0.42.0
- [Commits](golang/sys@v0.40.0...v0.42.0)

Updates `golang.org/x/text` from 0.33.0 to 0.36.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.33.0...v0.36.0)

---
updated-dependencies:
- dependency-name: github.com/paketo-buildpacks/occam
  dependency-version: 0.31.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/containerd/platforms
  dependency-version: 1.0.0-rc.2
  dependency-type: indirect
  update-type: version-update:semver-major
  dependency-group: go-modules
- dependency-name: github.com/docker/go-connections
  dependency-version: 0.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/ebitengine/purego
  dependency-version: 0.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.13
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.21.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.29.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/moby/patternmatcher
  dependency-version: 0.6.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/freezer
  dependency-version: 0.2.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-version: 2.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.26.3
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/vbatts/tar-split
  dependency-version: 0.12.3
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.68.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 27, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Apr 29, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Apr 29, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/go-modules-e87f474735 branch April 29, 2026 13:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants