1
0
mirror of https://github.com/open-telemetry/opentelemetry-go.git synced 2026-06-03 18:35:08 +02:00
Commit Graph

1403 Commits

Author SHA1 Message Date
renovate[bot] 3157d0a7d9 fix(deps): update module golang.org/x/sys to v0.43.0 (#8156)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/sys](https://pkg.go.dev/golang.org/x/sys) | [`v0.42.0` →
`v0.43.0`](https://cs.opensource.google/go/x/sys/+/refs/tags/v0.42.0...refs/tags/v0.43.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsys/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsys/v0.42.0/v0.43.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-08 14:40:06 +02:00
renovate[bot] 9cb68628ff fix(deps): update googleapis to 6f92a3b (#8140)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `9d38bb4` → `6f92a3b` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `9d38bb4` → `6f92a3b` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `9d38bb4` → `6f92a3b` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-07 09:11:39 +02:00
Damien Mathieu 9276201a64 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
Release issue:
https://github.com/open-telemetry/opentelemetry-go/issues/8127

## Added

- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on
`SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID
Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag)
support. (#8012)
- Add service detection with `WithService` in
`go.opentelemetry.io/otel/sdk/resource`. (#7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in
`go.opentelemetry.io/otel/sdk/resource` to support plumbing
`context.Context` through default and environment detectors. (#8051)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8038)
- Add support for per-series start time tracking for cumulative metrics
in `go.opentelemetry.io/otel/sdk/metric`.
  Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. (#8060)
- Add `WithCardinalityLimitSelector` for metric reader for configuring
cardinality limits specific to the instrument kind. (#7855)

## Changed

- Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to
reflect that an empty value is now a valid value, with `INVALID`
remaining as a deprecated alias of `EMPTY`. (#8038)
- Refactor slice handling in `go.opentelemetry.io/otel/attribute` to
optimize short slice values with fixed-size fast paths. (#8039)
- Improve performance of span metric recording in
`go.opentelemetry.io/otel/sdk/trace` by returning early if
self-observability is not enabled. (#8067)
- Improve formatting of metric data diffs in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8073)

## Deprecated

- Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use
`EMPTY` instead. (#8038)

## Fixed

- Return spec-compliant `TraceIdRatioBased` description. This is a
breaking behavioral change, but it is necessary to
make the implementation
[spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased).
(#8027)
- Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where
the lastvalue aggregation could collect the value 0 even when no
zero-value measurements were recorded. (#8056)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to
use full path for `kenv` command on BSD. (#8113)
- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
correctly handle HTTP2 GOAWAY frame. (#8096)

---------

Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
2026-04-03 10:30:03 +02:00
Robert Pająk 5e363de517 limit response body size for OTLP HTTP exporters (#8108)
Per https://github.com/open-telemetry/opentelemetry-proto/pull/781
2026-04-01 11:48:05 +02:00
renovate[bot] 290024ceaf fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.3` → `v1.80.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.80.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.3/v1.80.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.80.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.80.0):
Release 1.80.0

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0)

### Behavior Changes

- balancer: log a warning if a balancer is registered with uppercase
letters, as balancer names should be lowercase. In a future release,
balancer names will be treated as case-insensitive; see
[#&#8203;5288](https://redirect.github.com/grpc/grpc-go/issues/5288) for
details.
([#&#8203;8837](https://redirect.github.com/grpc/grpc-go/issues/8837))
- xds: update resource error handling and re-resolution logic
([#&#8203;8907](https://redirect.github.com/grpc/grpc-go/issues/8907))
- Re-resolve all `LOGICAL_DNS` clusters simultaneously when
re-resolution is requested.
- Fail all in-flight RPCs immediately upon receipt of listener or route
resource errors, instead of allowing them to complete.

### Bug Fixes

- xds: support the LB policy configured in `LOGICAL_DNS` cluster
resources instead of defaulting to `pick_first`.
([#&#8203;8733](https://redirect.github.com/grpc/grpc-go/issues/8733))
- credentials/tls: perform per-RPC authority validation against the leaf
certificate instead of the entire peer certificate chain.
([#&#8203;8831](https://redirect.github.com/grpc/grpc-go/issues/8831))
- xds: enabling A76 ring hash endpoint keys no longer causes EDS
resources with invalid proxy metadata to be NACKed when HTTP CONNECT
(gRFC A86) is disabled.
([#&#8203;8875](https://redirect.github.com/grpc/grpc-go/issues/8875))
- xds: validate that the sum of endpoint weights in a locality does not
exceed the maximum `uint32` value.
([#&#8203;8899](https://redirect.github.com/grpc/grpc-go/issues/8899))
- Special Thanks: [@&#8203;RAVEYUS](https://redirect.github.com/RAVEYUS)
- xds: fix incorrect proto field access in the weighted round robin
(WRR) configuration where `blackout_period` was used instead of
`weight_expiration_period`.
([#&#8203;8915](https://redirect.github.com/grpc/grpc-go/issues/8915))
- Special Thanks:
[@&#8203;gregbarasch](https://redirect.github.com/gregbarasch)
- xds/rbac: handle addresses with ports in IP matchers.
([#&#8203;8990](https://redirect.github.com/grpc/grpc-go/issues/8990))

### New Features

- ringhash: enable gRFC A76 (endpoint hash keys and request hash
headers) by default.
([#&#8203;8922](https://redirect.github.com/grpc/grpc-go/issues/8922))

### Performance Improvements

- credentials/alts: pool write buffers to reduce memory allocations and
usage.
([#&#8203;8919](https://redirect.github.com/grpc/grpc-go/issues/8919))
- grpc: enable the use of pooled write buffers for buffering HTTP/2
frame writes by default. This reduces memory usage when connections are
idle. Use the
[WithSharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer)
dial option or the
[SharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer)
server option to disable this feature.
([#&#8203;8957](https://redirect.github.com/grpc/grpc-go/issues/8957))
- xds/priority: stop caching child LB policies removed from the
configuration. This will help reduce memory and cpu usage when
localities are constantly switching between priorities.
([#&#8203;8997](https://redirect.github.com/grpc/grpc-go/issues/8997))
- mem: add a faster tiered buffer pool; use the experimental
[mem.NewBinaryTieredBufferPool](https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool)
function to create such pools.
([#&#8203;8775](https://redirect.github.com/grpc/grpc-go/issues/8775))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 10:38:36 +02:00
Toma Puljak e70658e098 fix: support getBody in otelploghttp (#8096)
Based on #7931

Adding another `getBody` PR to the chain 😄.

This one is harder to catch if it's a problem since logs aren't being
sent in case of error.

---------

Signed-off-by: Toma Puljak <toma.puljak@hotmail.com>
Co-authored-by: Robert Pająk <pellared@hotmail.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-04-01 09:48:12 +02:00
renovate[bot] 4afe468e3b fix(deps): update googleapis to 9d38bb4 (#8117)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d5a96ad` → `9d38bb4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d5a96ad` → `9d38bb4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `d5a96ad` → `9d38bb4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 09:32:45 +02:00
renovate[bot] 493504d12a fix(deps): update googleapis to d5a96ad (#8112)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d00831a` → `d5a96ad` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d00831a` → `d5a96ad` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `d00831a` → `d5a96ad` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 09:17:24 +02:00
Matthieu MOREL e9449e3b34 chore: fix noctx issues (#8008)
***Description***

Fixes
[noctx](https://golangci-lint.run/docs/linters/configuration/#noctx)
issues and enables the linter

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-23 14:28:38 +01:00
renovate[bot] e604da5eec fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#8075)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.2` → `v1.79.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.2/v1.79.3?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

### GitHub Vulnerability Alerts

####
[CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3)

### Impact
_What kind of vulnerability is it? Who is impacted?_

It is an **Authorization Bypass** resulting from **Improper Input
Validation** of the HTTP/2 `:path` pseudo-header.

The gRPC-Go server was too lenient in its routing logic, accepting
requests where the `:path` omitted the mandatory leading slash (e.g.,
`Service/Method` instead of `/Service/Method`). While the server
successfully routed these requests to the correct handler, authorization
interceptors (including the official `grpc/authz` package) evaluated the
raw, non-canonical path string. Consequently, "deny" rules defined using
canonical paths (starting with `/`) failed to match the incoming
request, allowing it to bypass the policy if a fallback "allow" rule was
present.

**Who is impacted?**
This affects gRPC-Go servers that meet both of the following criteria:
1. They use path-based authorization interceptors, such as the official
RBAC implementation in `google.golang.org/grpc/authz` or custom
interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`.
2. Their security policy contains specific "deny" rules for canonical
paths but allows other requests by default (a fallback "allow" rule).

The vulnerability is exploitable by an attacker who can send raw HTTP/2
frames with malformed `:path` headers directly to the gRPC server.

### Patches
_Has the problem been patched? What versions should users upgrade to?_

Yes, the issue has been patched. The fix ensures that any request with a
`:path` that does not start with a leading slash is immediately rejected
with a `codes.Unimplemented` error, preventing it from reaching
authorization interceptors or handlers with a non-canonical path string.

Users should upgrade to the following versions (or newer):
* **v1.79.3**
* The latest **master** branch.

It is recommended that all users employing path-based authorization
(especially `grpc/authz`) upgrade as soon as the patch is available in a
tagged release.

### Workarounds
_Is there a way for users to fix or remediate the vulnerability without
upgrading?_

While upgrading is the most secure and recommended path, users can
mitigate the vulnerability using one of the following methods:

#### 1. Use a Validating Interceptor (Recommended Mitigation)
Add an "outermost" interceptor to your server that validates the path
before any other authorization logic runs:

```go
func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) {
    if info.FullMethod == "" || info.FullMethod[0] != '/' {
        return nil, status.Errorf(codes.Unimplemented, "malformed method name")
    }   
    return handler(ctx, req)
}

// Ensure this is the FIRST interceptor in your chain
s := grpc.NewServer(
    grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor),
)
```

#### 2. Infrastructure-Level Normalization
If your gRPC server is behind a reverse proxy or load balancer (such as
Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to
enforce strict HTTP/2 compliance for pseudo-headers and reject or
normalize requests where the `:path` header does not start with a
leading slash.

#### 3. Policy Hardening
Switch to a "default deny" posture in your authorization policies
(explicitly listing all allowed paths and denying everything else) to
reduce the risk of bypasses via malformed inputs.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3):
Release 1.79.3

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3)

### Security

- server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted "deny"
rules in interceptors like `grpc/authz`. Any request with a
non-canonical path is now immediately rejected with an `Unimplemented`
error.
([#&#8203;8981](https://redirect.github.com/grpc/grpc-go/issues/8981))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 11:13:47 +01:00
renovate[bot] 8ae173e566 fix(deps): update googleapis to d00831a (#8078)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `84a4fc4` → `d00831a` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `84a4fc4` → `d00831a` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `84a4fc4` → `d00831a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:47:36 +01:00
ian 768e930779 Added the internal/observ package to stdoutlog (#7735)
a part of #7020 

```txt
goos: windows
goarch: amd64
pkg: go.opentelemetry.io/otel/exporters/stdout/stdoutlog/internal/observ
cpu: Intel(R) Core(TM) i7-14700
                                          │  result.txt  │
                                          │    sec/op    │
InstrumentationExportLogs/NoError-28        47.68n ±  5%
InstrumentationExportLogs/PartialError-28   471.6n ±  2%
InstrumentationExportLogs/FullError-28      471.9n ± 10%
geomean                                     219.7n

                                          │  result.txt  │
                                          │     B/op     │
InstrumentationExportLogs/NoError-28        0.000 ± 0%
InstrumentationExportLogs/PartialError-28   305.0 ± 0%
InstrumentationExportLogs/FullError-28      305.0 ± 0%
geomean                                                ¹
¹ summaries must be >0 to compute geomean

                                          │  result.txt  │
                                          │  allocs/op   │
InstrumentationExportLogs/NoError-28        0.000 ± 0%
InstrumentationExportLogs/PartialError-28   4.000 ± 0%
InstrumentationExportLogs/FullError-28      4.000 ± 0%
geomean                                                ¹
¹ summaries must be >0 to compute geomean
```

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-18 09:48:36 +01:00
renovate[bot] 6d79ac3936 fix(deps): update golang.org/x (#8045)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) |
[`v0.48.0` →
`v0.49.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.48.0...refs/tags/v0.49.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.49.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.48.0/v0.49.0?slim=true)
| indirect | minor |
| [golang.org/x/mod](https://pkg.go.dev/golang.org/x/mod) | [`v0.33.0` →
`v0.34.0`](https://cs.opensource.google/go/x/mod/+/refs/tags/v0.33.0...refs/tags/v0.34.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fmod/v0.34.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fmod/v0.33.0/v0.34.0?slim=true)
| indirect | minor |
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.51.0` →
`v0.52.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.51.0...refs/tags/v0.52.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.52.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.51.0/v0.52.0?slim=true)
| indirect | minor |
| [golang.org/x/telemetry](https://pkg.go.dev/golang.org/x/telemetry) |
`e526e8a` → `579e4da` |
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftelemetry/v0.0.0-20260311193753-579e4da9a98c?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftelemetry/v0.0.0-20260306145045-e526e8a188f5/v0.0.0-20260311193753-579e4da9a98c?slim=true)
| indirect | digest |
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.34.0`
→
`v0.35.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.35.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.34.0/v0.35.0?slim=true)
| indirect | minor |
| [golang.org/x/tools](https://pkg.go.dev/golang.org/x/tools) |
[`v0.42.0` →
`v0.43.0`](https://cs.opensource.google/go/x/tools/+/refs/tags/v0.42.0...refs/tags/v0.43.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools/v0.43.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools/v0.42.0/v0.43.0?slim=true)
| require | minor |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: dmathieu <damien.mathieu@elastic.co>
2026-03-12 15:40:07 +01:00
Robert Pająk f4da59e651 attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (#8038)
Fixes https://github.com/open-telemetry/opentelemetry-go/issues/7932

Noticeable comment from previous PR:
https://github.com/open-telemetry/opentelemetry-go/pull/7942#discussion_r2913179215

Print the empty value as empty string per
https://opentelemetry.io/docs/specs/otel/common/#empty-values
2026-03-12 09:43:04 +01:00
renovate[bot] 205e24407e fix(deps): update googleapis to 84a4fc4 (#8048)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `a57be14` → `84a4fc4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `a57be14` → `84a4fc4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `a57be14` → `84a4fc4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-12 09:34:03 +01:00
Marc Schäfer 526b68f39b docs(otlp): document HTTP/protobuf insecure env vars (#8037)
Update  the package documentation for:

- otlptracehttp
- otlpmetrichttp
- otlploghttp

to document the already-supported OTEL_EXPORTER_OTLP_INSECURE and
signal-specific *_INSECURE environment variables.
2026-03-11 15:30:24 +01:00
renovate[bot] 8d19296aff chore(deps): update module github.com/prometheus/procfs to v0.20.1 (#8034)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/prometheus/procfs](https://redirect.github.com/prometheus/procfs)
| `v0.19.2` → `v0.20.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprometheus%2fprocfs/v0.20.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprometheus%2fprocfs/v0.19.2/v0.20.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>prometheus/procfs (github.com/prometheus/procfs)</summary>

###
[`v0.20.1`](https://redirect.github.com/prometheus/procfs/releases/tag/v0.20.1)

[Compare
Source](https://redirect.github.com/prometheus/procfs/compare/v0.20.0...v0.20.1)

#### What's Changed

- nvme: Parse NVMe namespace details by
[@&#8203;ShashwatHiregoudar](https://redirect.github.com/ShashwatHiregoudar)
in [#&#8203;765](https://redirect.github.com/prometheus/procfs/pull/765)
- Fix bcachefs parsing by
[@&#8203;ananthb](https://redirect.github.com/ananthb) in
[#&#8203;789](https://redirect.github.com/prometheus/procfs/pull/789)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;788](https://redirect.github.com/prometheus/procfs/pull/788)
- Update sysfs/class\_thermal: continue on EINVAL in
parseClassThermalZone to ignore only invalid thermal zones which raise
"invalid argument" by
[@&#8203;ccastiglione-reply](https://redirect.github.com/ccastiglione-reply)
in [#&#8203;763](https://redirect.github.com/prometheus/procfs/pull/763)

#### New Contributors

-
[@&#8203;ccastiglione-reply](https://redirect.github.com/ccastiglione-reply)
made their first contribution in
[#&#8203;763](https://redirect.github.com/prometheus/procfs/pull/763)

**Full Changelog**:
<https://github.com/prometheus/procfs/compare/v0.20.0...v0.20.1>

###
[`v0.20.0`](https://redirect.github.com/prometheus/procfs/releases/tag/v0.20.0)

[Compare
Source](https://redirect.github.com/prometheus/procfs/compare/v0.19.2...v0.20.0)

#### What's Changed

- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;747](https://redirect.github.com/prometheus/procfs/pull/747)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;766](https://redirect.github.com/prometheus/procfs/pull/766)
- build(deps): bump golang.org/x/sync from 0.17.0 to 0.19.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;773](https://redirect.github.com/prometheus/procfs/pull/773)
- build(deps): bump golang.org/x/sys from 0.37.0 to 0.39.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;772](https://redirect.github.com/prometheus/procfs/pull/772)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;774](https://redirect.github.com/prometheus/procfs/pull/774)
- Fix /proc/interrupts by
[@&#8203;ffyuanda](https://redirect.github.com/ffyuanda) in
[#&#8203;775](https://redirect.github.com/prometheus/procfs/pull/775)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;778](https://redirect.github.com/prometheus/procfs/pull/778)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;779](https://redirect.github.com/prometheus/procfs/pull/779)
- Migrate to GitHub actions by
[@&#8203;SuperQ](https://redirect.github.com/SuperQ) in
[#&#8203;780](https://redirect.github.com/prometheus/procfs/pull/780)
- build(deps): bump golang.org/x/sys from 0.40.0 to 0.41.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;782](https://redirect.github.com/prometheus/procfs/pull/782)
- Synchronize common files from prometheus/prometheus by
[@&#8203;prombot](https://redirect.github.com/prombot) in
[#&#8203;785](https://redirect.github.com/prometheus/procfs/pull/785)
- bcachefs support by
[@&#8203;ananthb](https://redirect.github.com/ananthb) in
[#&#8203;750](https://redirect.github.com/prometheus/procfs/pull/750)
- build(deps): bump actions/checkout from 6.0.1 to 6.0.2 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;781](https://redirect.github.com/prometheus/procfs/pull/781)
- feat: parse capabilities in /proc/pid/status by
[@&#8203;biscout42](https://redirect.github.com/biscout42) in
[#&#8203;784](https://redirect.github.com/prometheus/procfs/pull/784)
- class\_cooling\_device: ignore EINVAL (etc) when reading files. by
[@&#8203;malcolmr](https://redirect.github.com/malcolmr) in
[#&#8203;783](https://redirect.github.com/prometheus/procfs/pull/783)
- Add type and name to the DRM parser class by
[@&#8203;Deezzir](https://redirect.github.com/Deezzir) in
[#&#8203;672](https://redirect.github.com/prometheus/procfs/pull/672)

#### New Contributors

- [@&#8203;ffyuanda](https://redirect.github.com/ffyuanda) made their
first contribution in
[#&#8203;775](https://redirect.github.com/prometheus/procfs/pull/775)
- [@&#8203;ananthb](https://redirect.github.com/ananthb) made their
first contribution in
[#&#8203;750](https://redirect.github.com/prometheus/procfs/pull/750)
- [@&#8203;biscout42](https://redirect.github.com/biscout42) made their
first contribution in
[#&#8203;784](https://redirect.github.com/prometheus/procfs/pull/784)
- [@&#8203;malcolmr](https://redirect.github.com/malcolmr) made their
first contribution in
[#&#8203;783](https://redirect.github.com/prometheus/procfs/pull/783)
- [@&#8203;Deezzir](https://redirect.github.com/Deezzir) made their
first contribution in
[#&#8203;672](https://redirect.github.com/prometheus/procfs/pull/672)

**Full Changelog**:
<https://github.com/prometheus/procfs/compare/v0.19.2...v0.20.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-10 13:39:48 +01:00
renovate[bot] d15b533be3 fix(deps): update googleapis to a57be14 (#8031)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `4cfbd41` → `a57be14` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `4cfbd41` → `a57be14` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `4cfbd41` → `a57be14` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-10 12:34:43 +01:00
renovate[bot] 1d91055e24 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (#8028)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/proto/otlp](https://redirect.github.com/open-telemetry/opentelemetry-proto-go)
| `v1.9.0` → `v1.10.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fproto%2fotlp/v1.10.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fproto%2fotlp/v1.9.0/v1.10.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-proto-go
(go.opentelemetry.io/proto/otlp)</summary>

###
[`v1.10.0`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/releases/tag/v1.10.0):
/v0.3.0

[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/compare/v1.9.0...v1.10.0)

Release of the [`v1.10.0`][otlp] version of the OTLP.

> \[!NOTE]
> This is the last version that will support Go 1.24. Subsequent minor
releases will require Go >= 1.25.

[otlp]:
https://redirect.github.com/open-telemetry/opentelemetry-proto/releases/tag/v1.10.0

#### What's Changed

- Drop support for Go 1.23 by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;467](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/467)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;420](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/420)
- fix(deps): update module go.opentelemetry.io/proto/otlp to v1.9.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;468](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/468)
- fix(deps): update module go.opentelemetry.io/proto/slim/otlp to v1.9.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;469](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/469)
- fix(deps): update module go.opentelemetry.io/build-tools/multimod to
v0.29.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;475](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/475)
- fix(deps): update module google.golang.org/grpc to v1.76.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;476](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/476)
- chore(deps): update googleapis to
[`ab9386a`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/ab9386a)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;472](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/472)
- chore(deps): update googleapis to
[`f26f940`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/f26f940)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;477](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/477)
- Update releasing process by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;471](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/471)
- Fix `find` command error by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;470](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/470)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;478](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/478)
- chore(deps): update googleapis to
[`83f4791`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/83f4791)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;479](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/479)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;481](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/481)
- chore(deps): update googleapis to
[`95abcf5`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/95abcf5)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;480](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/480)
- chore(deps): update github/codeql-action action to v4.31.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;482](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/482)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;483](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/483)
- fix(deps): update module google.golang.org/grpc to v1.77.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;485](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/485)
- chore(deps): update actions/checkout action to v5.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;484](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/484)
- chore(deps): update github/codeql-action action to v4.31.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;486](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/486)
- chore(deps): update module golang.org/x/crypto to v0.45.0 \[security]
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;489](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/489)
- chore(deps): update module github.com/cyphar/filepath-securejoin to
v0.6.1 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;487](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/487)
- chore(deps): update actions/checkout action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;490](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/490)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.16.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;491](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/491)
- chore(deps): update github/codeql-action action to v4.31.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;492](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/492)
- chore(deps): update googleapis to
[`79d6a2a`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/79d6a2a)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;493](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/493)
- chore(deps): update github/codeql-action action to v4.31.6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;494](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/494)
- chore(deps): update actions/checkout action to v6.0.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;495](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/495)
- chore(deps): update google.golang.org/genproto/googleapis/api digest
to
[`ff82c1b`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/ff82c1b)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;496](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/496)
- chore(deps): update google.golang.org/genproto/googleapis/rpc digest
to
[`ff82c1b`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/ff82c1b)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;497](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/497)
- chore(deps): update module github.com/spf13/cobra to v1.10.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;498](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/498)
- chore(deps): update github/codeql-action action to v4.31.7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;499](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/499)
- chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;500](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/500)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;501](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/501)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;502](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/502)
- chore(deps): update module golang.org/x/net to v0.48.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;503](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/503)
- fix(deps): update module google.golang.org/protobuf to v1.36.11 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;505](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/505)
- chore(deps): update github/codeql-action action to v4.31.8 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;504](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/504)
- chore(deps): update actions/upload-artifact action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;506](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/506)
- chore(deps): update googleapis to
[`97cd9d5`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/97cd9d5)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;507](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/507)
- chore(deps): update github/codeql-action action to v4.31.9 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;508](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/508)
- fix(deps): update module google.golang.org/grpc to v1.78.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;511](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/511)
- chore(deps): update googleapis to
[`0a764e5`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/0a764e5)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;509](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/509)
- chore(deps): update module github.com/cloudflare/circl to v1.6.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;510](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/510)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;512](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/512)
- chore(deps): update module golang.org/x/sys to v0.40.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;513](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/513)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;514](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/514)
- chore(deps): update module golang.org/x/crypto to v0.47.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;516](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/516)
- chore(deps): update github/codeql-action action to v4.31.10 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;515](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/515)
- chore(deps): update googleapis to
[`99fd39f`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/99fd39f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;517](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/517)
- chore(deps): update module github.com/go-viper/mapstructure/v2 to
v2.5.0 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;518](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/518)
- chore(deps): update module golang.org/x/net to v0.49.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;519](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/519)
- chore(deps): update googleapis to
[`3f89685`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/3f89685)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;520](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/520)
- chore(deps): update googleapis to
[`b8f7ae3`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/b8f7ae3)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;521](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/521)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;522](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/522)
- chore(deps): update module github.com/cloudflare/circl to v1.6.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;525](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/525)
- chore(deps): update googleapis to
[`8e98ce8`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/8e98ce8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;524](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/524)
- chore(deps): update actions/checkout action to v6.0.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;523](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/523)
- chore(deps): update github/codeql-action action to v4.31.11 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;526](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/526)
- chore(deps): update googleapis to
[`d11affd`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/d11affd)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;528](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/528)
- chore(deps): update github/codeql-action action to v4.32.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;527](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/527)
- chore(deps): update googleapis to
[`8636f87`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/8636f87)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;529](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/529)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;530](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/530)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;531](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/531)
- chore(deps): update github/codeql-action action to v4.32.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;532](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/532)
- chore(deps): update googleapis to
[`ce8ad4c`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/ce8ad4c)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;533](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/533)
- chore(deps): update googleapis to
[`546029d`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/546029d)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;534](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/534)
- chore(deps): update fossas/fossa-action action to v1.8.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;536](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/536)
- chore(deps): update github/codeql-action action to v4.32.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;535](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/535)
- chore(deps): update module golang.org/x/sys to v0.41.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;537](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/537)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;538](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/538)
- chore(deps): update googleapis to
[`4cfbd41`](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/commit/4cfbd41)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;540](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/540)
- chore(deps): update all golang.org/x packages by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;539](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/539)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27.8 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;541](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/541)
- fix(deps): update module google.golang.org/grpc to v1.79.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;542](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/542)
- fix(deps): update module google.golang.org/grpc to v1.79.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;543](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/543)
- chore(deps): update github/codeql-action action to v4.32.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;545](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/545)
- chore(deps): update module github.com/kevinburke/ssh\_config to v1.5.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;546](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/546)
- Add support for Go 1.26 by
[@&#8203;dmathieu](https://redirect.github.com/dmathieu) in
[#&#8203;544](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/544)
- chore(deps): update module github.com/kevinburke/ssh\_config to v1.6.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;547](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/547)
- fix(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.28.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;548](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/548)
- chore(deps): update github/codeql-action action to v4.32.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;551](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/551)
- chore(deps): update module github.com/go-git/go-billy/v5 to v5.8.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;553](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/553)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.17.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;554](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/554)
- chore(deps): update module github.com/protonmail/go-crypto to v1.4.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;558](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/558)
- chore(deps): update actions/upload-artifact action to v7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;556](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/556)
- chore(deps): update github/codeql-action action to v4.32.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;559](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/559)
- chore(deps): update github/codeql-action action to v4.32.6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;560](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/560)
- fix(deps): update module google.golang.org/grpc to v1.79.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;561](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/561)
- Release v1.10.0 by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;566](https://redirect.github.com/open-telemetry/opentelemetry-proto-go/pull/566)

**Full Changelog**:
<https://github.com/open-telemetry/opentelemetry-proto-go/compare/v1.9.0...v1.10.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-09 14:07:26 -07:00
renovate[bot] 1f39f186db fix(deps): update golang.org/x (#8023)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/sync](https://pkg.go.dev/golang.org/x/sync) | [`v0.19.0`
→
`v0.20.0`](https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsync/v0.20.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsync/v0.19.0/v0.20.0?slim=true)
|
| [golang.org/x/sys](https://pkg.go.dev/golang.org/x/sys) | [`v0.41.0` →
`v0.42.0`](https://cs.opensource.google/go/x/sys/+/refs/tags/v0.41.0...refs/tags/v0.42.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsys/v0.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsys/v0.41.0/v0.42.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-09 09:48:14 +01:00
renovate[bot] 8b05173581 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (#8011)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/golangci/golangci-lint/v2](https://redirect.github.com/golangci/golangci-lint)
| `v2.8.0` → `v2.11.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgolangci%2fgolangci-lint%2fv2/v2.11.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgolangci%2fgolangci-lint%2fv2/v2.8.0/v2.11.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>golangci/golangci-lint
(github.com/golangci/golangci-lint/v2)</summary>

###
[`v2.11.1`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2111)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.0...v2.11.1)

*Released on 2026-03-06*

Due to an error related to AUR, some artifacts of the v2.11.0 release
have not been published.

This release contains the same things as v2.11.0.

###
[`v2.11.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2110)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.10.1...v2.11.0)

*Released on 2026-03-06*

1. Linters new features or changes
- `errcheck`: from 1.9.0 to 1.10.0 (exclude `crypto/rand.Read` by
default)
- `gosec`: from 2.23.0 to 2.24.6 (new rules: `G113`, `G118`, `G119`,
`G120`, `G121`, `G122`, `G123`, `G408`, `G707`)
- `noctx`: from 0.4.0 to 0.5.0 (new detection:
`httptest.NewRequestWithContext`)
   - `prealloc`: from 1.0.2 to 1.1.0
- `revive`: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related
checks moved from `var-naming` to a new rule `package-naming`)
2. Linters bug fixes
   - `gocognit`: from 1.2.0 to 1.2.1
   - `gosec`: from 2.24.6 to 2.24.7
   - `unqueryvet`: from 1.5.3 to 1.5.4

###
[`v2.10.1`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2101)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.10.0...v2.10.1)

*Released on 2026-02-17*

1. Fixes
   - buildssa panic

###
[`v2.10.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2100)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.9.0...v2.10.0)

*Released on 2026-02-17*

1. Linters new features or changes
   - `ginkgolinter`: from 0.22.0 to 0.23.0
- `gosec`: from 2.22.11 to 2.23.0 (new rules: `G117`, `G602`, `G701`,
`G702`, `G703`, `G704`, `G705`, `G706`)
   - `staticcheck`: from 0.6.1 to 0.7.0
2. Linters bug fixes
   - `godoclint`: from 0.11.1 to 0.11.2

###
[`v2.9.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v290)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.8.0...v2.9.0)

*Released on 2026-02-10*

1. Enhancements
   - 🎉 go1.26 support
2. Linters new features or changes
- `arangolint`: from 0.3.1 to 0.4.0 (new rule: detect potential query
injections)
   - `ginkgolinter`: from 0.21.2 to 0.22.0 (support for wrappers)
   - `golines`: from 0.14.0 to 0.15.0
   - `misspell`: from 0.7.0 to 0.8.0
- `unqueryvet`: from 1.4.0 to 1.5.3 (new options: `check-n1`,
`check-sql-injection`, `check-tx-leaks`, `allow`, `custom-rules`)
   - `wsl`: from 5.3.0 to 5.6.0 (new rule: `after-block`)
3. Linters bug fixes
   - `modernize`: from 0.41.0 to 0.42.0
   - `prealloc`: from 1.0.1 to 1.0.2
   - `protogetter`: from 0.3.18 to 0.3.20
4. Misc.
   - Log information about files when configuration verification
   - Emit an error when no linters enabled
   - Do not collect VCS information when loading code

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41Ni4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Tyler Yahn <codingalias@gmail.com>
2026-03-06 17:09:22 -08:00
renovate[bot] fad8e9080e chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (#8016)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [go.yaml.in/yaml/v2](https://redirect.github.com/yaml/go-yaml) |
`v2.4.3` → `v2.4.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.yaml.in%2fyaml%2fv2/v2.4.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.yaml.in%2fyaml%2fv2/v2.4.3/v2.4.4?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>yaml/go-yaml (go.yaml.in/yaml/v2)</summary>

###
[`v2.4.4`](https://redirect.github.com/yaml/go-yaml/compare/v2.4.3...v2.4.4)

[Compare
Source](https://redirect.github.com/yaml/go-yaml/compare/v2.4.3...v2.4.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41OS4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTkuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-06 15:46:55 -08:00
Robert Pająk a3941ff595 Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
### Added

- Add `go.opentelemetry.io/otel/semconv/v1.40.0` package.
The package contains semantic conventions from the `v1.40.0` version of
the OpenTelemetry Semantic Conventions.
See the [migration documentation](./semconv/v1.40.0/MIGRATION.md) for
information on how to upgrade from
`go.opentelemetry.io/otel/semconv/v1.39.0`. (#7985)
- Add `Err` and `SetErr` on `Record` in `go.opentelemetry.io/otel/log`
to attach an error and set record exception attributes in
`go.opentelemetry.io/otel/log/sdk`. (#7924)

### Changed

- `TracerProvider.ForceFlush` in `go.opentelemetry.io/otel/sdk/trace`
joins errors together and continues iteration through SpanProcessors as
opposed to returning the first encountered error without attempting
exports on subsequent SpanProcessors. (#7856)

### Fixed

- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
correctly handle HTTP2 GOAWAY frame. (#7931)
- Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty. (#7964)
- Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
`go.opentelemetry.io/otel/propagation`. (#7834)

### Removed

- Drop support for [Go 1.24]. (#7984)
2026-03-06 20:13:23 +01:00
renovate[bot] de5fb3ad10 fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.1` → `v1.79.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.1/v1.79.2?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.2`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.2):
Release 1.79.2

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.1...v1.79.2)

### Bug Fixes

- stats: Prevent redundant error logging in health/ORCA producers by
skipping stats/tracing processing when no stats handler is configured.
([#&#8203;8874](https://redirect.github.com/grpc/grpc-go/pull/8874))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My41Ni4wIiwidXBkYXRlZEluVmVyIjoiNDMuNTYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-06 09:52:28 +01:00
Oleksandr Redko 60161f97c4 refactor: replace uint64 and int32 with atomic types in tests (#7941)
Because [atomic types](https://go.dev/doc/go1.19#atomic_types) are
easier to use.
2026-03-04 17:20:31 +01:00
Tyler Yahn 5b5c2c5d6d Upgrade to semconv/v1.40.0 (#7991) 2026-03-04 12:13:40 +01:00
renovate[bot] a18614cbc2 chore(deps): update module github.com/securego/gosec/v2 to v2.24.7 (#7988)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/securego/gosec/v2](https://redirect.github.com/securego/gosec)
| `v2.23.0` → `v2.24.7` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsecurego%2fgosec%2fv2/v2.24.7?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsecurego%2fgosec%2fv2/v2.23.0/v2.24.7?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>securego/gosec (github.com/securego/gosec/v2)</summary>

###
[`v2.24.7`](https://redirect.github.com/securego/gosec/releases/tag/v2.24.7)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.6...v2.24.7)

#### Changelog

-
[`bb17e42`](https://redirect.github.com/securego/gosec/commit/bb17e422fc34bf4c0a2e5cab9d07dc45a68c040c)
Ignore nosec comments in action integration workflow to generate some
warnings
([#&#8203;1573](https://redirect.github.com/securego/gosec/issues/1573))
-
[`e1502ad`](https://redirect.github.com/securego/gosec/commit/e1502ad21653d1c6717e33f1221c3ce2d5c8581f)
Add a workflow for action integration test
([#&#8203;1571](https://redirect.github.com/securego/gosec/issues/1571))
-
[`f8691bd`](https://redirect.github.com/securego/gosec/commit/f8691bd77bab5430ccb538e6f253275e82577afc)
fix(sarif): avoid invalid null relationships in SARIF output
([#&#8203;1569](https://redirect.github.com/securego/gosec/issues/1569))
-
[`ade1d0e`](https://redirect.github.com/securego/gosec/commit/ade1d0e0a04ec8ae98da98614d42524621d40df2)
chore: migrate gosec container image references to GHCR
([#&#8203;1567](https://redirect.github.com/securego/gosec/issues/1567))

###
[`v2.24.6`](https://redirect.github.com/securego/gosec/releases/tag/v2.24.6)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.5...v2.24.6)

#### Changelog

-
[`88835e8`](https://redirect.github.com/securego/gosec/commit/88835e86bba381290c2f60a1c73610995b1502eb)
Update gorelease to use the latest cosign bundle argument
([#&#8203;1565](https://redirect.github.com/securego/gosec/issues/1565))

###
[`v2.24.5`](https://redirect.github.com/securego/gosec/compare/v2.24.4...v2.24.5)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.4...v2.24.5)

###
[`v2.24.4`](https://redirect.github.com/securego/gosec/compare/v2.24.3...v2.24.4)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.3...v2.24.4)

###
[`v2.24.3`](https://redirect.github.com/securego/gosec/compare/v2.24.2...v2.24.3)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.2...v2.24.3)

###
[`v2.24.2`](https://redirect.github.com/securego/gosec/compare/v2.24.1...v2.24.2)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.1...v2.24.2)

###
[`v2.24.1`](https://redirect.github.com/securego/gosec/compare/v2.24.0...v2.24.1)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.0...v2.24.1)

###
[`v2.24.0`](https://redirect.github.com/securego/gosec/releases/tag/v2.24.0)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.23.0...v2.24.0)

#### Changelog

-
[`271492b`](https://redirect.github.com/securego/gosec/commit/271492bcd930ef72dfb9d00e5bb9544b3b407fb5)
fix: G704 false positive on const URL
([#&#8203;1551](https://redirect.github.com/securego/gosec/issues/1551))
-
[`1341aea`](https://redirect.github.com/securego/gosec/commit/1341aeadb4c334014c4834c745344edb9dcf85b0)
fix(G705): eliminate false positive for non-HTTP io.Writer
([#&#8203;1550](https://redirect.github.com/securego/gosec/issues/1550))
-
[`f2262c8`](https://redirect.github.com/securego/gosec/commit/f2262c88ffdfc9eb7be8444db19caa17cc71810f)
G120: avoid false positive when MaxBytesReader is applied in middleware
([#&#8203;1547](https://redirect.github.com/securego/gosec/issues/1547))
-
[`5b580c7`](https://redirect.github.com/securego/gosec/commit/5b580c76e4714fa553b2ceb8169a071e45bf6428)
Fix G602 regression coverage for issue
[#&#8203;1545](https://redirect.github.com/securego/gosec/issues/1545)
and stabilize G117 TOML test dependency
([#&#8203;1546](https://redirect.github.com/securego/gosec/issues/1546))
-
[`eba2d15`](https://redirect.github.com/securego/gosec/commit/eba2d1582b13e37d5b6c991b643827bc60e58156)
taint: skip `context.Context` arguments during taint propagation to fix
false positives
([#&#8203;1543](https://redirect.github.com/securego/gosec/issues/1543))
-
[`a6381c1`](https://redirect.github.com/securego/gosec/commit/a6381c1e2fe9a9a33ef105c76bea3191402ea4b3)
test: add missing rules to formatter report tests
([#&#8203;1540](https://redirect.github.com/securego/gosec/issues/1540))
-
[`fea9725`](https://redirect.github.com/securego/gosec/commit/fea9725934065d3dd5c96352f89f75d117ac12f6)
chore(deps): update all dependencies
([#&#8203;1541](https://redirect.github.com/securego/gosec/issues/1541))
-
[`f3e2fac`](https://redirect.github.com/securego/gosec/commit/f3e2fac4d58b7eca54307cd40ce2a836a12e4d95)
Regenrate the TLS config rule
([#&#8203;1539](https://redirect.github.com/securego/gosec/issues/1539))
-
[`200461f`](https://redirect.github.com/securego/gosec/commit/200461fcf74ed836305bf95f72568c20925730c5)
Improve documentation
([#&#8203;1538](https://redirect.github.com/securego/gosec/issues/1538))
-
[`078a62a`](https://redirect.github.com/securego/gosec/commit/078a62afc3331206fec1cd9a03637983ec4f9fc8)
Expand analyzer-core test coverage for orchestration, go/analysis
adapter logic, and taint integration
([#&#8203;1537](https://redirect.github.com/securego/gosec/issues/1537))
-
[`ffdc620`](https://redirect.github.com/securego/gosec/commit/ffdc6205c82278cee0b62923814141923794219e)
Add unit tests for CLI orchestration, TLS config generation, and SSA
cache behavior
([#&#8203;1536](https://redirect.github.com/securego/gosec/issues/1536))
-
[`c13a486`](https://redirect.github.com/securego/gosec/commit/c13a48626bc160ef1caa293679044b5667d4d8ef)
Add G707 taint analyzer for SMTP command/header injection
([#&#8203;1535](https://redirect.github.com/securego/gosec/issues/1535))
-
[`f61ed31`](https://redirect.github.com/securego/gosec/commit/f61ed314c2467116ec3a5126150cb2b29a623406)
Add G123 analyzer for tls.VerifyPeerCertificate resumption bypass risk
([#&#8203;1534](https://redirect.github.com/securego/gosec/issues/1534))
-
[`b568aa1`](https://redirect.github.com/securego/gosec/commit/b568aa1445e110ed12abe5c2433b3cfbcd0a5935)
Add G122 SSA analyzer for filepath.Walk/WalkDir symlink TOCTOU race
risks
([#&#8203;1532](https://redirect.github.com/securego/gosec/issues/1532))
-
[`1735e5a`](https://redirect.github.com/securego/gosec/commit/1735e5a9acd155702b8c6137d323df886c0252b5)
fix(G602): avoid false positives for range-over-array indexing
([#&#8203;1531](https://redirect.github.com/securego/gosec/issues/1531))
-
[`caf93d0`](https://redirect.github.com/securego/gosec/commit/caf93d07f10ef7d07006011b17f1d9bd218b5a9d)
Improve taint analyzer performance with shared SSA cache, parallel
analyzer execution, and CI regression guard
([#&#8203;1530](https://redirect.github.com/securego/gosec/issues/1530))
-
[`bd11fbe`](https://redirect.github.com/securego/gosec/commit/bd11fbe2bacb0abf1e541df8b6ec6b040bbe2723)
fix: taint analysis false positives with G703,G705
([#&#8203;1522](https://redirect.github.com/securego/gosec/issues/1522))
-
[`e34e8dd`](https://redirect.github.com/securego/gosec/commit/e34e8dd8e880694cfa801d79977e2d9973df3fa1)
Extend the G117 rule to cover other types of serialization such as
yaml/xml/toml
([#&#8203;1529](https://redirect.github.com/securego/gosec/issues/1529))
-
[`b940702`](https://redirect.github.com/securego/gosec/commit/b940702d5e385d1a68def10326b1658e780655fe)
Fix the G117 rule to take the JSON serialization into account
([#&#8203;1528](https://redirect.github.com/securego/gosec/issues/1528))
-
[`4f84627`](https://redirect.github.com/securego/gosec/commit/4f846273804abaf7e040f77b26bf2866336e8af9)
(docs) fix justification format
([#&#8203;1524](https://redirect.github.com/securego/gosec/issues/1524))
-
[`36ba72b`](https://redirect.github.com/securego/gosec/commit/36ba72bb7f91306f5210a821f409696c03dcbf2b)
Add G121 analyzer for unsafe CORS bypass patterns in
CrossOriginProtection
([#&#8203;1521](https://redirect.github.com/securego/gosec/issues/1521))
-
[`238f982`](https://redirect.github.com/securego/gosec/commit/238f9823256b1c4a6d7b0ccd7fa0f2ce1123c820)
Add G120 SSA analyzer for unbounded form parsing in HTTP handlers
([#&#8203;1520](https://redirect.github.com/securego/gosec/issues/1520))
-
[`89cde27`](https://redirect.github.com/securego/gosec/commit/89cde277b5e2b4a5dc47eb710911c51a0cb33b63)
Add G119 analyzer for unsafe redirect header propagation in
CheckRedirect callbacks
([#&#8203;1519](https://redirect.github.com/securego/gosec/issues/1519))
-
[`14fdd9c`](https://redirect.github.com/securego/gosec/commit/14fdd9cb07c02ab1506fcc336f49c84bf27a5c2d)
Fix G115 false positives and negatives (Issue
[#&#8203;1501](https://redirect.github.com/securego/gosec/issues/1501))
([#&#8203;1518](https://redirect.github.com/securego/gosec/issues/1518))
-
[`cec54ec`](https://redirect.github.com/securego/gosec/commit/cec54ec685eda3083e2ab1adf72b6b7ec6cfdb6e)
chore(deps): update all dependencies
([#&#8203;1517](https://redirect.github.com/securego/gosec/issues/1517))
-
[`2b2077e`](https://redirect.github.com/securego/gosec/commit/2b2077e921b56c7ce6545cccceea0556ff8d5d91)
Add G118 SSA analyzer for context propagation failures that can cause
goroutine/resource leaks
([#&#8203;1516](https://redirect.github.com/securego/gosec/issues/1516))
-
[`a7666f3`](https://redirect.github.com/securego/gosec/commit/a7666f3c70c94d07dfb03e81613fed34bccc89ae)
Add G113: Detect HTTP Request Smuggling via conflicting headers
(CVE-2025-22891, CWE-444)
([#&#8203;1515](https://redirect.github.com/securego/gosec/issues/1515))
-
[`47f8b52`](https://redirect.github.com/securego/gosec/commit/47f8b52fb8700c7ba017ffcc0ea6a32c83e33115)
Add G408: SSH PublicKeyCallback Authentication Bypass Analyzer
([#&#8203;1513](https://redirect.github.com/securego/gosec/issues/1513))
-
[`4f1f362`](https://redirect.github.com/securego/gosec/commit/4f1f362671654660f7145c3c8655ffeaed037d55)
Add more unit tests to improve coverage
([#&#8203;1512](https://redirect.github.com/securego/gosec/issues/1512))
-
[`9344582`](https://redirect.github.com/securego/gosec/commit/9344582ee4bd87b8fa5bc2e483d90fa661f8aa71)
Improve test coverage in various areas
([#&#8203;1511](https://redirect.github.com/securego/gosec/issues/1511))
-
[`8d1b2c6`](https://redirect.github.com/securego/gosec/commit/8d1b2c63ae44e315fb0232813e535891ff0568fc)
Imprve the test coverage
([#&#8203;1510](https://redirect.github.com/securego/gosec/issues/1510))
-
[`993c1c4`](https://redirect.github.com/securego/gosec/commit/993c1c4da2d4426f7567591e23f53ee9f613d07c)
Fix incorrect detection of fixed iv in G407
([#&#8203;1509](https://redirect.github.com/securego/gosec/issues/1509))
-
[`8668b74`](https://redirect.github.com/securego/gosec/commit/8668b748925d8995cf7712d22bde62cbc96f2304)
Add support for go 1.26.x and removed support for go 1.24.x
([#&#8203;1508](https://redirect.github.com/securego/gosec/issues/1508))
-
[`514225c`](https://redirect.github.com/securego/gosec/commit/514225c8cb01a6bab714db1dd557aeb0d7ab9dc9)
Fix the sonar report to follow the latest schema
([#&#8203;1507](https://redirect.github.com/securego/gosec/issues/1507))
-
[`000384e`](https://redirect.github.com/securego/gosec/commit/000384e510a84a1e2a1118e0fbc56518d290113d)
fix: broken taint analysis causing false positives
([#&#8203;1506](https://redirect.github.com/securego/gosec/issues/1506))
-
[`616192c`](https://redirect.github.com/securego/gosec/commit/616192c9d92792998e2ff38530c080cd0fe293a8)
fix: panic on float constants in overflow analyzer
([#&#8203;1505](https://redirect.github.com/securego/gosec/issues/1505))
-
[`79956a3`](https://redirect.github.com/securego/gosec/commit/79956a3b4cdedc9a4cde5f567c57fc8b367448cf)
fix: panic when scanning multi-module repos from root
([#&#8203;1504](https://redirect.github.com/securego/gosec/issues/1504))
-
[`5736e8b`](https://redirect.github.com/securego/gosec/commit/5736e8b88b6ca97fc7e09ef1bf24b205ab35fd9c)
fix: G602 false positive for array element access
([#&#8203;1499](https://redirect.github.com/securego/gosec/issues/1499))
-
[`1b7e1e9`](https://redirect.github.com/securego/gosec/commit/1b7e1e94bc2077fc1adccfc1358399fad2958d5a)
Update gosec to version v2.23.0 in the Github action
([#&#8203;1496](https://redirect.github.com/securego/gosec/issues/1496))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My40OC4xIiwidXBkYXRlZEluVmVyIjoiNDMuNDguMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

---------

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Tyler Yahn <codingalias@gmail.com>
Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
2026-03-03 11:59:53 -08:00
Mariana Farias a8665644e1 support stdlib request.GetBody on metrics (#7931)
Based on https://github.com/open-telemetry/opentelemetry-go/pull/7794

This solves the exact same problem but on metrics. 

> traces export: Post "https://***/v1/metrics": http2: Transport: cannot
retry err [http2: Transport received Server's graceful shutdown GOAWAY]
after Request.Body was written; define Request.GetBody to avoid this
error

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-03 10:23:05 +01:00
renovate[bot] 232b9332aa fix(deps): update golang.org/x (#7907)
This PR contains the following updates:

| Package | Type | Update | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|---|---|
| [golang.org/x/exp](https://pkg.go.dev/golang.org/x/exp) | require |
digest | `2842357` → `3dfff04` |
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fexp/v0.0.0-20260218203240-3dfff04db8fa?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fexp/v0.0.0-20260209203927-2842357ff358/v0.0.0-20260218203240-3dfff04db8fa?slim=true)
|
|
[golang.org/x/exp/typeparams](https://pkg.go.dev/golang.org/x/exp/typeparams)
| indirect | digest | `2842357` → `3dfff04` |
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fexp%2ftypeparams/v0.0.0-20260218203240-3dfff04db8fa?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fexp%2ftypeparams/v0.0.0-20260209203927-2842357ff358/v0.0.0-20260218203240-3dfff04db8fa?slim=true)
|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | indirect |
minor | [`v0.50.0` →
`v0.51.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.51.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.51.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.50.0/v0.51.0?slim=true)
|
| [golang.org/x/telemetry](https://pkg.go.dev/golang.org/x/telemetry) |
indirect | digest | `9f66fae` → `e0ab670` |
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftelemetry/v0.0.0-20260213145524-e0ab670178e1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftelemetry/v0.0.0-20260211150929-9f66fae5fbe0/v0.0.0-20260213145524-e0ab670178e1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My40My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-02 13:54:20 -08:00
Tyler Yahn d5febb955e Drop support for Go 1.24 (#7984) 2026-03-02 22:25:05 +01:00
Robert Pająk 4575a9774d Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].

### Added

- Support testing of [Go 1.26]. (#7902)

### Fixed

- Update `Baggage` in `go.opentelemetry.io/otel/propagation` and `Parse`
and `New` in `go.opentelemetry.io/otel/baggage` to comply with W3C
Baggage specification limits.
`New` and `Parse` now return partial baggage along with an error when
limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(#7880)

[Go 1.26]: https://go.dev/doc/go1.26
[Go 1.25]: https://go.dev/doc/go1.25
[Go 1.24]: https://go.dev/doc/go1.24
2026-03-02 19:39:57 +01:00
Sandy Chen 66fc10d9df fix: add error handling for insecure HTTP endpoints with TLS client configuration (#7914)
## Summary

This PR moves the `insecure + TLS config` validation into the core OTLP
HTTP exporters in `opentelemetry-go` (trace, metric, and log), instead
of relying on validation in external/config-wrapper code.

This aligns with feedback from `open-telemetry/opentelemetry-go-contrib`
PR https://github.com/open-telemetry/opentelemetry-go-contrib/pull/8560:
these packages are maintained/released together, so the check should be
enforced in this repo as well.

## What changed

- Added exporter-level validation error:
  - `"insecure HTTP endpoint cannot use TLS client configuration"`
- Enforced in:
  - `otlpmetrichttp` client construction
  - `otlploghttp` client construction
- `otlptracehttp` client startup (`Start`, since `NewClient` does not
return an error)
- Added tests in all three exporters to cover:
- Error when `WithInsecure()` and `WithTLSClientConfig(...)` are both
set
- No error when a custom `WithHTTPClient(...)` is provided (preserves
existing precedence semantics)

## Behavior

- Invalid config (`insecure` + TLS config) now fails fast directly in
exporters.
- Existing `WithHTTPClient` override behavior remains unchanged.

## Testing

Ran:

- `go test ./...` in `exporters/otlp/otlpmetric/otlpmetrichttp`
- `go test ./...` in `exporters/otlp/otlplog/otlploghttp`
- `go test ./...` in `exporters/otlp/otlptrace/otlptracehttp`

## Related

- `open-telemetry/opentelemetry-go-contrib` PR
(https://github.com/open-telemetry/opentelemetry-go-contrib/pull/8560)

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-02 15:46:50 +01:00
renovate[bot] 0f1a22484e chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899) 2026-02-28 21:51:27 +01:00
Saharsh Tibrewala 248da95837 Checked if Operation Enabled in otlptracehttp before performing operation (#7881)
This PR adds the Enabled functionality to checked if the field is
enabled before performing computational heavy work.
Tracked in #7800
2026-02-20 15:39:49 -08:00
renovate[bot] 64f28b0675 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.28.0 (#7921)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/grpc-ecosystem/grpc-gateway/v2](https://redirect.github.com/grpc-ecosystem/grpc-gateway)
| `v2.27.8` → `v2.28.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.28.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.27.8/v2.28.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>grpc-ecosystem/grpc-gateway
(github.com/grpc-ecosystem/grpc-gateway/v2)</summary>

###
[`v2.28.0`](https://redirect.github.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.28.0)

[Compare
Source](https://redirect.github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.8...v2.28.0)

#### What's Changed

- feat: add option to disable chunked headers by
[@&#8203;irenarindos](https://redirect.github.com/irenarindos) in
[#&#8203;6354](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6354)
- fix(protoc-gen-openapiv2): fix panic on enum resolution in nested
messages by [@&#8203;franchb](https://redirect.github.com/franchb) in
[#&#8203;6367](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6367)

#### New Contributors

- [@&#8203;irenarindos](https://redirect.github.com/irenarindos) made
their first contribution in
[#&#8203;6354](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6354)

**Full Changelog**:
<https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.8...v2.28.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yMi4wIiwidXBkYXRlZEluVmVyIjoiNDMuMjIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-17 15:53:24 -08:00
renovate[bot] 0f3d79d25c fix(deps): update module google.golang.org/grpc to v1.79.1 (#7908)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.0` → `v1.79.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.0/v1.79.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.1):
Release 1.79.1

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.0...v1.79.1)

### Bug Fixes

- grpc: Remove the -dev suffix from the User-Agent header
([#&#8203;8902](https://redirect.github.com/grpc/grpc-go/pull/8902))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-13 09:42:41 +01:00
renovate[bot] ca531e4255 fix(deps): update module google.golang.org/grpc to v1.79.0 (#7906)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.78.0` → `v1.79.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.78.0/v1.79.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.0):
Release 1.79.0

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.78.0...v1.79.0)

### API Changes

- mem: Add experimental API `SetDefaultBufferPool` to change the default
buffer pool.
([#&#8203;8806](https://redirect.github.com/grpc/grpc-go/issues/8806))
- Special Thanks: [@&#8203;vanja-p](https://redirect.github.com/vanja-p)
- experimental/stats: Update `MetricsRecorder` to require embedding the
new `UnimplementedMetricsRecorder` (a no-op struct) in all
implementations for forward compatibility.
([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780))

### Behavior Changes

- balancer/weightedtarget: Remove handling of `Addresses` and only
handle `Endpoints` in resolver updates.
([#&#8203;8841](https://redirect.github.com/grpc/grpc-go/issues/8841))

### New Features

- experimental/stats: Add support for asynchronous gauge metrics through
the new `AsyncMetricReporter` and `RegisterAsyncReporter` APIs.
([#&#8203;8780](https://redirect.github.com/grpc/grpc-go/issues/8780))
- pickfirst: Add support for weighted random shuffling of endpoints, as
described in [gRFC
A113](https://redirect.github.com/grpc/proposal/pull/535).
- This is enabled by default, and can be turned off using the
environment variable `GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING`.
([#&#8203;8864](https://redirect.github.com/grpc/grpc-go/issues/8864))
- xds: Implement `:authority` rewriting, as specified in [gRFC
A81](https://redirect.github.com/grpc/proposal/blob/master/A81-xds-authority-rewriting.md).
([#&#8203;8779](https://redirect.github.com/grpc/grpc-go/issues/8779))
- balancer/randomsubsetting: Implement the `random_subsetting` LB
policy, as specified in [gRFC
A68](https://redirect.github.com/grpc/proposal/blob/master/A68-random-subsetting.md).
([#&#8203;8650](https://redirect.github.com/grpc/grpc-go/issues/8650))
- Special Thanks:
[@&#8203;marek-szews](https://redirect.github.com/marek-szews)
- server: Include status detail headers, if available, when terminating
a stream during request header processing.
([#&#8203;8754](https://redirect.github.com/grpc/grpc-go/issues/8754))
- Special Thanks:
[@&#8203;joybestourous](https://redirect.github.com/joybestourous)

### Bug Fixes

- credentials/tls: Fix a bug where the port was not stripped from the
authority override before validation.
([#&#8203;8726](https://redirect.github.com/grpc/grpc-go/issues/8726))
- Special Thanks:
[@&#8203;Atul1710](https://redirect.github.com/Atul1710)
- xds/priority: Fix a bug causing delayed failover to lower-priority
clusters when a higher-priority cluster is stuck in `CONNECTING` state.
([#&#8203;8813](https://redirect.github.com/grpc/grpc-go/issues/8813))
- health: Fix a bug where health checks failed for clients using legacy
compression options (`WithDecompressor` or `RPCDecompressor`).
([#&#8203;8765](https://redirect.github.com/grpc/grpc-go/issues/8765))
- Special Thanks: [@&#8203;sanki92](https://redirect.github.com/sanki92)
- transport: Fix an issue where the HTTP/2 server could skip header size
checks when terminating a stream early.
([#&#8203;8769](https://redirect.github.com/grpc/grpc-go/issues/8769))
- Special Thanks:
[@&#8203;joybestourous](https://redirect.github.com/joybestourous)

### Performance Improvements

- credentials/alts: Optimize read buffer alignment to reduce copies.
([#&#8203;8791](https://redirect.github.com/grpc/grpc-go/issues/8791))
- mem: Optimize pooling and creation of `buffer` objects.
([#&#8203;8784](https://redirect.github.com/grpc/grpc-go/issues/8784))
- transport: Reduce slice re-allocations by reserving slice capacity.
([#&#8203;8797](https://redirect.github.com/grpc/grpc-go/issues/8797))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My44LjUiLCJ1cGRhdGVkSW5WZXIiOiI0My44LjUiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-12 13:38:32 -08:00
renovate[bot] b61271aad6 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27.8 (#7892)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/grpc-ecosystem/grpc-gateway/v2](https://redirect.github.com/grpc-ecosystem/grpc-gateway)
| `v2.27.7` → `v2.27.8` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.27.8?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgrpc-ecosystem%2fgrpc-gateway%2fv2/v2.27.7/v2.27.8?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>grpc-ecosystem/grpc-gateway
(github.com/grpc-ecosystem/grpc-gateway/v2)</summary>

###
[`v2.27.8`](https://redirect.github.com/grpc-ecosystem/grpc-gateway/releases/tag/v2.27.8)

[Compare
Source](https://redirect.github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.7...v2.27.8)

#### What's Changed

- Fix opaque missing imports casing by
[@&#8203;kellen-miller](https://redirect.github.com/kellen-miller) in
[#&#8203;6304](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6304)
- Revert "fix(protoc-gen-openapiv2): prevent panic when generating
OpenAPI for multiple files" by
[@&#8203;johanbrandhorst](https://redirect.github.com/johanbrandhorst)
in
[#&#8203;6309](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6309)
- fix(protoc-gen-openapiv2): fix naming cache for multi-file generation
by [@&#8203;franchb](https://redirect.github.com/franchb) in
[#&#8203;6315](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6315)
- fix(openapiv2): exclude oneof fields from required with proto3 field
semantics by [@&#8203;sessa](https://redirect.github.com/sessa) in
[#&#8203;6335](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6335)

#### New Contributors

- [@&#8203;sessa](https://redirect.github.com/sessa) made their first
contribution in
[#&#8203;6335](https://redirect.github.com/grpc-ecosystem/grpc-gateway/pull/6335)

**Full Changelog**:
<https://github.com/grpc-ecosystem/grpc-gateway/compare/v2.27.7...v2.27.8>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-10 13:50:38 -08:00
Saharsh Tibrewala 490fd7f632 Checked if Instrument Enabled before measuring in otlpgrpc (#7824)
This pr updates otlploggprc for cecking if the operation is enabled
before addinng any metric or performing operation.

tracked in #7800

---------

Co-authored-by: David Ashpole <dashpole@google.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-02-10 09:36:30 +01:00
Saharsh Tibrewala 53c10af64f Checked if instrument enabled before measuring in oteltracegrpc (#7825)
This pr updates otltracegrpc for checking if the operation is enabled
before adding any metric or performing operation.

tracked in #7800

---------

Co-authored-by: David Ashpole <dashpole@google.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-02-10 09:27:27 +01:00
renovate[bot] 101e9696bd fix(deps): update googleapis to 4cfbd41 (#7889)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `546029d` → `4cfbd41` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `546029d` → `4cfbd41` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `546029d` → `4cfbd41` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: dmathieu <42@dmathieu.com>
2026-02-10 09:19:11 +01:00
renovate[bot] 2066b6514f fix(deps): update golang.org/x (#7890)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.49.0` →
`v0.50.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.49.0...refs/tags/v0.50.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.50.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.49.0/v0.50.0?slim=true)
|
| [golang.org/x/tools](https://pkg.go.dev/golang.org/x/tools) |
[`v0.41.0` →
`v0.42.0`](https://cs.opensource.google/go/x/tools/+/refs/tags/v0.41.0...refs/tags/v0.42.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftools/v0.42.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftools/v0.41.0/v0.42.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-09 14:05:07 -08:00
renovate[bot] a3a9b4bf19 chore(deps): update golang.org/x (#7887)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) | Type |
Update |
|---|---|---|---|---|---|
| [golang.org/x/crypto](https://pkg.go.dev/golang.org/x/crypto) |
[`v0.47.0` →
`v0.48.0`](https://cs.opensource.google/go/x/crypto/+/refs/tags/v0.47.0...refs/tags/v0.48.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fcrypto/v0.48.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fcrypto/v0.47.0/v0.48.0?slim=true)
| indirect | minor |
| [golang.org/x/mod](https://pkg.go.dev/golang.org/x/mod) | [`v0.32.0` →
`v0.33.0`](https://cs.opensource.google/go/x/mod/+/refs/tags/v0.32.0...refs/tags/v0.33.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fmod/v0.33.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fmod/v0.32.0/v0.33.0?slim=true)
| indirect | minor |
| [golang.org/x/telemetry](https://pkg.go.dev/golang.org/x/telemetry) |
`86a5c4b` → `e7419c6` |
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftelemetry/v0.0.0-20260209163413-e7419c687ee4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftelemetry/v0.0.0-20260205145544-86a5c4bf3c8d/v0.0.0-20260209163413-e7419c687ee4?slim=true)
| indirect | digest |
| [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.33.0`
→
`v0.34.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.33.0...refs/tags/v0.34.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.34.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.33.0/v0.34.0?slim=true)
| indirect | minor |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45Ny4wIiwidXBkYXRlZEluVmVyIjoiNDIuOTcuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-09 11:00:48 -08:00
Nesterov Yehor 12277523bf exporter/otlploghttp: guard observ metrics with Enabled checks (#7813)
This PR updates the OTLP HTTP log exporter observability instrumentation
to check instrument Enabled(ctx) before building options/attributes and
recording measurements.

Behavior is unchanged when metrics are enabled; this reduces overhead
when exporter self-metrics are disabled/no-op.

Part of the work tracked in #7800.

---------

Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
2026-02-09 08:20:38 -08:00
Saharsh Tibrewala c3f955a9cd Checked if instrument enabled before measuring in prometheus (#7866)
This pr updates proemetheus instrumentation file to check if instrument
enabled before measuring in prometheus.
tracked in #7800

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-02-09 10:01:29 +01:00
renovate[bot] dbeb92241a fix(deps): update module golang.org/x/sys to v0.41.0 (#7885)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [golang.org/x/sys](https://pkg.go.dev/golang.org/x/sys) | [`v0.40.0` →
`v0.41.0`](https://cs.opensource.google/go/x/sys/+/refs/tags/v0.40.0...refs/tags/v0.41.0)
|
![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsys/v0.41.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsys/v0.40.0/v0.41.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-09 09:16:59 +01:00
Nesterov Yehor 1ee4a4126d stdoutmetric observ: skip metric work when instruments are disabled (#7868)
Avoid unnecessary metric work in stdoutmetric exporter observability
paths by Enabled() checks of metrics.

Benchmark
BenchmarkExportMetrics
Before: ~354 ns/op, 216 B/op, 2 allocs/op (error path)
After: ~55 ns/op, 0 B/op, 0 allocs/op

This change is internal and I think does not need to be mentioned in the
changelog.
Issue: #7800

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-02-04 11:20:38 +01:00
renovate[bot] f98bb30fe0 fix(deps): update googleapis to 546029d (#7871)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `ce8ad4c` → `546029d` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `ce8ad4c` → `546029d` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `ce8ad4c` → `546029d` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-03 14:31:40 -08:00
Nesterov Yehor 90c75c4b66 stdouttrace observability: skip metric work when instruments are disabled (#7853)
Add `Enabled(ctx)` checks to stdout trace exporter observability.

Benchmarks improved from ~120–370 ns/op to ~67 ns/op.

No user-facing changes.

Existing tests still cover behavior and i think this change doesn’t need
a changelog entry.
Issue: #7800

Co-authored-by: David Ashpole <dashpole@google.com>
Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
2026-02-03 13:52:02 -08:00
renovate[bot] faaf9005d9 fix(deps): update googleapis to ce8ad4c (#7860)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `8636f87` → `ce8ad4c` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `8636f87` → `ce8ad4c` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `8636f87` → `ce8ad4c` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0Mi45NS4yIiwidXBkYXRlZEluVmVyIjoiNDIuOTUuMiIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-02-02 11:34:14 -08:00