chore(deps): Bump the go-dependencies group across 1 directory with 23 updates by dependabot[bot] · Pull Request #7754 · cortexproject/cortex

dependabot · 2026-08-07T13:29:08Z

Bumps the go-dependencies group with 14 updates in the / directory:

Package	From	To
github.com/go-openapi/strfmt	`0.26.4`	`0.27.0`
github.com/hashicorp/consul/api	`1.34.3`	`1.34.4`
github.com/hashicorp/go-metrics	`0.6.0`	`0.6.1`
go.opentelemetry.io/otel	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/bridge/opentracing	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.44.0`	`1.45.0`
github.com/aws/aws-sdk-go-v2	`1.42.0`	`1.43.3`
github.com/aws/aws-sdk-go-v2/config	`1.32.26`	`1.32.34`
github.com/aws/aws-sdk-go-v2/service/dynamodb	`1.59.1`	`1.62.3`
github.com/go-openapi/swag/jsonutils	`0.27.0`	`0.28.0`
github.com/oklog/ulid/v2	`2.1.1`	`2.1.2`
github.com/tjhop/slog-gokit	`0.2.0`	`0.2.2`
go.opentelemetry.io/collector/pdata	`1.61.0`	`1.64.0`

Updates github.com/go-openapi/strfmt from 0.26.4 to 0.27.0

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.0

0.27.0 - 2026-07-16

Full Changelog: go-openapi/strfmt@v0.26.4...v0.27.0

11 commits in this release.

Implemented enhancements

feat: new formats for currencies (ISO-4217 alpha-3) and countries (ISO-3166 alpha-3 & alpha-2) by @fredbi in #285 ...

feat(duration): add ISO 8601 / RFC 3339 duration format (duration-iso8601) by @fredbi in #284 ...

Fixed bugs

fix(base64): use standard RFC 4648 alphabet on the text path (#87) by @fredbi in #283 ...

fix(duration): fix panic with trailing space, added fuzz by @fredbi in #281 ...

Documentation

Doc: typo in Readme by @fredbi ...

doc: updated contributors file by @bot-go-openapi[bot] in #275 ...

Testing

test(fuzz): added systematic fuzzing of formats by @fredbi in #282 ...

Miscellaneous tasks

chore: prepare release v0.27.0 by @bot-go-openapi[bot] in #286 ...

Updates

build(deps): bump the other-dependencies group across 3 directories with 1 update by @dependabot[bot] in #277 ...

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-dependencies group across 1 directory by @dependabot[bot] in #276 ...

Other (technical)

Add comments for ISO 3166 countries source data by @fredbi ...

People who contributed to this release

@fredbi

... (truncated)

Commits

8364821 chore: prepare release v0.27.0
a98cfd0 Add comments for ISO 3166 countries source data
09c6110 Doc: typo in Readme
12fcdc1 feat: new formats for currencies (ISO-4217 alpha-3) and countries (ISO-3166 a...
a9ba012 feat(duration): add ISO 8601 / RFC 3339 duration format (duration-iso8601) (#...
4de561f fix(base64): use standard RFC 4648 alphabet on the text path (#87) (#283)
7f8ff38 test(fuzz): added systematic fuzzing of formats (#282)
f33c701 fix(duration): fix panic with trailing space, added fuzz (#281)
9f0fa2d build(deps): bump the other-dependencies group across 3 directories with 1 up...
5be05e6 build(deps): bump golang.org/x/net
Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.34.3 to 1.34.4

Commits

50d22e5 sub module release go mod update
5efece6 Backport of chore: update memberlist dependency from v0.5.4 to v0.6.0 across ...
c171789 Backport of update all actions which were using deprecated node20 to node24 i...
8aef944 Backport of upgrade alpine base image to 3.24 into release/2.0.x (#23715)
1f5b203 post release 2.0.1 changelog and version upgrade 2.0.2-dev (#23714)
695e7a8 Backport of Consul ENT: Addition of ext-proc changes to consul into release/2...
5c48b0b Backport of config-entry(api-gateway): add ext_authz filter surface (Enterpri...
451537c Backport: Compatibility testing for nomad and vault versions with latest vers...
c9606f6 Backport of fix: don't request client cert SDS when only CAFile is set into r...
b80641a Backport of xds: return errors from public listener finalization into release...
Additional commits viewable in compare view

Updates github.com/hashicorp/go-metrics from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/hashicorp/go-metrics's releases.

v0.6.1

What's Changed

Added NewStatsdSinkWithLogger and NewStatsiteSinkWithLogger functions to allow passing a logger to capture errors. hashicorp/go-metrics#217

Updated prometheus client library hashicorp/go-metrics#215

Full Changelog: hashicorp/go-metrics@v0.6.0...v0.6.1

Commits

ba58708 VAULT-48025: fixing telemetry statsd/statsite sink and formatting errors (#217)
0f8560f [chore] : Bump the go group across 1 directory with 2 updates (#215)
f7b3292 [chore] : Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group (#216)
96fa24e [chore] : Bump actions/setup-go from 6.5.0 to 7.0.0 in the actions group (#214)
110cec7 [chore] : Bump github.com/prometheus/common (#213)
409c090 [chore] : Bump golangci/golangci-lint-action in the actions group (#212)
3d24197 [chore] : Bump the go group across 1 directory with 2 updates (#211)
5ed9ef0 [chore] : Bump the actions group with 2 updates (#210)
See full diff in compare view

Updates github.com/klauspost/compress from 1.18.7 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

zstd: Validate SnappyConverter literal copies by @klauspost in klauspost/compress#1170

flate: use Peek instead of ReadByte for the bufio.Reader decode path by @joechenrh in klauspost/compress#1169

zstd: bump avo pin, regenerate arm64 asm by @lizthegrey in klauspost/compress#1167

New Contributors

@joechenrh made their first contribution in klauspost/compress#1169

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

Commits

2602f4a Update changelog for version 1.19.0
983acec add defensive checks
9960386 zstd: Validate SnappyConverter literal copies (#1170)
e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

d6087ee release: cut v1.24.1 (#2076)
48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.69.0 to 0.70.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.1

What's Changed

Update CHANGELOG for v0.70.0 by @roidelapluie in prometheus/common#945

config: clarify sensitive redirect headers match net/http by @roidelapluie in prometheus/common#924

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#946

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/common#950

build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in prometheus/common#949

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#948

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/common#947

Full Changelog: prometheus/common@v0.70.0...v0.70.1

v0.70.0

What's Changed

config: fix TLSVersion.String() printing pointer address by @s3onghyun in prometheus/common#929

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in prometheus/common#933

Manually go mod tidy by @SuperQ in prometheus/common#934

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#937

route: add support for the QUERY HTTP method by @roidelapluie in prometheus/common#932

Combine and extend Prometheus text and OpenMetrics 1.0 encoder benchmarks by @dashpole in prometheus/common#943

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#938

build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by @dependabot[bot] in prometheus/common#940

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in prometheus/common#942

build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by @dependabot[bot] in prometheus/common#939

build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by @dependabot[bot] in prometheus/common#941

New Contributors

@s3onghyun made their first contribution in prometheus/common#929

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

route: add support for the QUERY HTTP method. #932

Bugfixes

config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943

Update Go dependencies. #933 #934

Synchronize common files from prometheus/prometheus. #923 #927 #930 #937

Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Commits

b63d8c0 build(deps): bump golang.org/x/net (#947)
4109c3e build(deps): bump the codeql group with 4 updates (#948)
5270b62 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#949)
1167ca3 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#950)
d28d382 Update common Prometheus files (#946)
f915876 Merge pull request #924 from roidelapluie/roidelapluie/redirect-header-comment
dfbebd0 Merge pull request #945 from roidelapluie/roidelapluie/changelog-0.70.0
c8a0019 Update CHANGELOG for v0.70.0
5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/bridge/opentracing from 1.44.0 to 1.45.0

Changelog

Sourced from ...

Description has been truncated

…3 updates Bumps the go-dependencies group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.26.4` | `0.27.0` | | [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.34.3` | `1.34.4` | | [github.com/hashicorp/go-metrics](https://github.com/hashicorp/go-metrics) | `0.6.0` | `0.6.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/bridge/opentracing](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.43.3` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.26` | `1.32.34` | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.59.1` | `1.62.3` | | [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.27.0` | `0.28.0` | | [github.com/oklog/ulid/v2](https://github.com/oklog/ulid) | `2.1.1` | `2.1.2` | | [github.com/tjhop/slog-gokit](https://github.com/tjhop/slog-gokit) | `0.2.0` | `0.2.2` | | [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.61.0` | `1.64.0` | Updates `github.com/go-openapi/strfmt` from 0.26.4 to 0.27.0 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.26.4...v0.27.0) Updates `github.com/hashicorp/consul/api` from 1.34.3 to 1.34.4 - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](hashicorp/consul@api/v1.34.3...api/v1.34.4) Updates `github.com/hashicorp/go-metrics` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/hashicorp/go-metrics/releases) - [Commits](hashicorp/go-metrics@v0.6.0...v0.6.1) Updates `github.com/klauspost/compress` from 1.18.7 to 1.19.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.7...v1.19.1) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.1 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.1) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/bridge/opentracing` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `golang.org/x/net` from 0.56.0 to 0.57.0 - [Commits](golang/net@v0.56.0...v0.57.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.43.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.43.3) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.26 to 1.32.34 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.26...config/v1.32.34) Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.59.1 to 1.62.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.59.1...service/fsx/v1.62.3) Updates `github.com/go-openapi/swag/jsonutils` from 0.27.0 to 0.28.0 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.27.0...v0.28.0) Updates `github.com/oklog/ulid/v2` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/oklog/ulid/releases) - [Changelog](https://github.com/oklog/ulid/blob/main/CHANGELOG.md) - [Commits](oklog/ulid@v2.1.1...v2.1.2) Updates `github.com/prometheus/procfs` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.21.0...v0.21.1) Updates `github.com/tjhop/slog-gokit` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/tjhop/slog-gokit/releases) - [Commits](tjhop/slog-gokit@v0.2.0...v0.2.2) Updates `go.opentelemetry.io/collector/pdata` from 1.61.0 to 1.64.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.61.0...pdata/v1.64.0) --- updated-dependencies: - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/hashicorp/consul/api dependency-version: 1.34.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/hashicorp/go-metrics dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/klauspost/compress dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.70.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/bridge/opentracing dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.62.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/go-openapi/swag/jsonutils dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/oklog/ulid/v2 dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/procfs dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/tjhop/slog-gokit dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 7, 2026

dosubot Bot added the type/chore Something that needs to be done; not a bug or a feature label Aug 7, 2026

Navigation Menu

Uh oh!

chore(deps): Bump the go-dependencies group across 1 directory with 23 updates - #7754

chore(deps): Bump the go-dependencies group across 1 directory with 23 updates#7754
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-b14bd52961

dependabot Bot commented on behalf of github Aug 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 7, 2026

v0.27.0

0.27.0 - 2026-07-16

Implemented enhancements

Fixed bugs

Documentation

Testing

Miscellaneous tasks

Updates

Other (technical)

People who contributed to this release

v0.6.1

What's Changed

v1.19.1

What's Changed

New Contributors

v1.19.0

What's Changed

New Contributors

v1.24.1 / 2026-07-23

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.1 / 2026-07-23

1.24.0 / 2026-07-20

v0.70.1

What's Changed

v0.70.0

What's Changed

New Contributors

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

Bugfixes

Internal

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants