mirror of
https://github.com/open-telemetry/opentelemetry-go.git
synced 2026-06-03 18:35:08 +02:00
sdk/log/v0.19.0
4490 Commits
| Author | SHA1 | Message | Date | |
|---|---|---|---|---|
|
|
9276201a64 |
Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
Release issue: https://github.com/open-telemetry/opentelemetry-go/issues/8127 ## Added - Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace` for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (#8012) - Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (#7642) - Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (#8051) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (#8038) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8038) - Add support for per-series start time tracking for cumulative metrics in `go.opentelemetry.io/otel/sdk/metric`. Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. (#8060) - Add `WithCardinalityLimitSelector` for metric reader for configuring cardinality limits specific to the instrument kind. (#7855) ## Changed - Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to reflect that an empty value is now a valid value, with `INVALID` remaining as a deprecated alias of `EMPTY`. (#8038) - Refactor slice handling in `go.opentelemetry.io/otel/attribute` to optimize short slice values with fixed-size fast paths. (#8039) - Improve performance of span metric recording in `go.opentelemetry.io/otel/sdk/trace` by returning early if self-observability is not enabled. (#8067) - Improve formatting of metric data diffs in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8073) ## Deprecated - Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use `EMPTY` instead. (#8038) ## Fixed - Return spec-compliant `TraceIdRatioBased` description. This is a breaking behavioral change, but it is necessary to make the implementation [spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased). (#8027) - Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108) - `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to use full path for `kenv` command on BSD. (#8113) - Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to correctly handle HTTP2 GOAWAY frame. (#8096) --------- Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>exporters/otlp/otlplog/otlploghttp/v0.19.0 exporters/stdout/stdoutlog/v0.19.0 sdk/log/v0.19.0 sdk/log/logtest/v0.19.0 exporters/otlp/otlplog/otlploggrpc/v0.19.0 log/v0.19.0 log/logtest/v0.19.0 exporters/prometheus/v0.65.0 bridge/opencensus/v1.43.0 bridge/opencensus/test/v1.43.0 exporters/otlp/otlptrace/otlptracegrpc/v1.43.0 exporters/stdout/stdoutmetric/v1.43.0 exporters/stdout/stdouttrace/v1.43.0 exporters/zipkin/v1.43.0 exporters/otlp/otlpmetric/otlpmetrichttp/v1.43.0 exporters/otlp/otlpmetric/otlpmetricgrpc/v1.43.0 metric/v1.43.0 bridge/opentracing/v1.43.0 exporters/otlp/otlptrace/v1.43.0 sdk/metric/v1.43.0 sdk/v1.43.0 trace/v1.43.0 v1.43.0 exporters/otlp/otlptrace/otlptracehttp/v1.43.0 |
||
|
|
61b8c9466c |
chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mattn/go-runewidth](https://redirect.github.com/mattn/go-runewidth) | `v0.0.21` → `v0.0.22` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>mattn/go-runewidth (github.com/mattn/go-runewidth)</summary> ### [`v0.0.22`](https://redirect.github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22) [Compare Source](https://redirect.github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
97a086e82f |
chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/golangci/dupl](https://redirect.github.com/golangci/dupl) | indirect | digest | `f665c8d` → `c99c5cf` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
5e363de517 |
limit response body size for OTLP HTTP exporters (#8108)
Per https://github.com/open-telemetry/opentelemetry-proto/pull/781 |
||
|
|
35214b6013 |
Use an absolute path when calling bsd kenv (#8113)
Co-authored-by: Robert Pająk <pellared@hotmail.com> |
||
|
|
290024ceaf |
fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.79.3` → `v1.80.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.80.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.80.0): Release 1.80.0 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0) ### Behavior Changes - balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see [#​5288](https://redirect.github.com/grpc/grpc-go/issues/5288) for details. ([#​8837](https://redirect.github.com/grpc/grpc-go/issues/8837)) - xds: update resource error handling and re-resolution logic ([#​8907](https://redirect.github.com/grpc/grpc-go/issues/8907)) - Re-resolve all `LOGICAL_DNS` clusters simultaneously when re-resolution is requested. - Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete. ### Bug Fixes - xds: support the LB policy configured in `LOGICAL_DNS` cluster resources instead of defaulting to `pick_first`. ([#​8733](https://redirect.github.com/grpc/grpc-go/issues/8733)) - credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. ([#​8831](https://redirect.github.com/grpc/grpc-go/issues/8831)) - xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. ([#​8875](https://redirect.github.com/grpc/grpc-go/issues/8875)) - xds: validate that the sum of endpoint weights in a locality does not exceed the maximum `uint32` value. ([#​8899](https://redirect.github.com/grpc/grpc-go/issues/8899)) - Special Thanks: [@​RAVEYUS](https://redirect.github.com/RAVEYUS) - xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where `blackout_period` was used instead of `weight_expiration_period`. ([#​8915](https://redirect.github.com/grpc/grpc-go/issues/8915)) - Special Thanks: [@​gregbarasch](https://redirect.github.com/gregbarasch) - xds/rbac: handle addresses with ports in IP matchers. ([#​8990](https://redirect.github.com/grpc/grpc-go/issues/8990)) ### New Features - ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. ([#​8922](https://redirect.github.com/grpc/grpc-go/issues/8922)) ### Performance Improvements - credentials/alts: pool write buffers to reduce memory allocations and usage. ([#​8919](https://redirect.github.com/grpc/grpc-go/issues/8919)) - grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the [WithSharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer) dial option or the [SharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer) server option to disable this feature. ([#​8957](https://redirect.github.com/grpc/grpc-go/issues/8957)) - xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. ([#​8997](https://redirect.github.com/grpc/grpc-go/issues/8997)) - mem: add a faster tiered buffer pool; use the experimental [mem.NewBinaryTieredBufferPool](https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool) function to create such pools. ([#​8775](https://redirect.github.com/grpc/grpc-go/issues/8775)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
e70658e098 |
fix: support getBody in otelploghttp (#8096)
Based on #7931 Adding another `getBody` PR to the chain 😄. This one is harder to catch if it's a problem since logs aren't being sent in case of error. --------- Signed-off-by: Toma Puljak <toma.puljak@hotmail.com> Co-authored-by: Robert Pająk <pellared@hotmail.com> Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
4afe468e3b |
fix(deps): update googleapis to 9d38bb4 (#8117)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `d5a96ad` → `9d38bb4` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `d5a96ad` → `9d38bb4` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `d5a96ad` → `9d38bb4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b9ca729776 |
chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | `v5.17.1` → `v5.17.2` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.17.2`](https://redirect.github.com/go-git/go-git/releases/tag/v5.17.2) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.17.1...v5.17.2) #### What's Changed - build: Update module github.com/go-git/go-git/v5 to v5.17.1 \[SECURITY] (releases/v5.x) by [@​go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in [#​1941](https://redirect.github.com/go-git/go-git/pull/1941) - dotgit: skip writing pack files that already exist on disk by [@​pjbgf](https://redirect.github.com/pjbgf) in [#​1944](https://redirect.github.com/go-git/go-git/pull/1944) ⚠️ This release fixes a bug ([#​1942](https://redirect.github.com/go-git/go-git/issues/1942)) that blocked some users from upgrading to `v5.17.1`. Thanks [@​pskrbasu](https://redirect.github.com/pskrbasu) for reporting it. 🙇 **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
69472ec56c |
chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [fossas/fossa-action](https://redirect.github.com/fossas/fossa-action) | action | minor | `v1.8.0` → `v1.9.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>fossas/fossa-action (fossas/fossa-action)</summary> ### [`v1.9.0`](https://redirect.github.com/fossas/fossa-action/releases/tag/v1.9.0) [Compare Source](https://redirect.github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0) #### What's Changed - Bump actions/checkout from 5 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​245](https://redirect.github.com/fossas/fossa-action/pull/245) - Bump [@​actions/tool-cache](https://redirect.github.com/actions/tool-cache) from 3.0.1 to 4.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​267](https://redirect.github.com/fossas/fossa-action/pull/267) - Bump undici from 6.23.0 to 6.24.1 by [@​spatten](https://redirect.github.com/spatten) in [#​275](https://redirect.github.com/fossas/fossa-action/pull/275) - Add CI workflow to auto-rebuild dist by [@​spatten](https://redirect.github.com/spatten) in [#​276](https://redirect.github.com/fossas/fossa-action/pull/276) - Bump actions/upload-artifact from 4 to 7 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​272](https://redirect.github.com/fossas/fossa-action/pull/272) - Add CodeRabbit configuration by [@​chad-fossa](https://redirect.github.com/chad-fossa) in [#​271](https://redirect.github.com/fossas/fossa-action/pull/271) - Bump [@​types/node](https://redirect.github.com/types/node) from 25.2.0 to 25.2.1 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​269](https://redirect.github.com/fossas/fossa-action/pull/269) #### New Contributors - [@​chad-fossa](https://redirect.github.com/chad-fossa) made their first contribution in [#​271](https://redirect.github.com/fossas/fossa-action/pull/271) **Full Changelog**: <https://github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
07448a81c7 |
fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (#8119)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.54.0` → `v1.55.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.55.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1550v01490) ##### 🛑 Breaking changes 🛑 - `pkg/service`: Remove `service_name`, `service_instance_id`, and `service_version` as constant labels on every internal metric datapoint. These attributes are already present in `target_info` and were being duplicated on each series for OpenCensus backwards compatibility. ([#​14811](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14811)) Previously, the collector stamped every internal metric series (e.g. `otelcol_process_runtime_heap_alloc_bytes`) with `service_name`, `service_instance_id`, and `service_version` labels to match the old OpenCensus behavior. These attributes are now only present in the `target_info` metric, which is the correct Prometheus/OTel convention. Users who filter or group by these labels on individual metrics will need to update their queries to use `target_info` joins instead. ##### 💡 Enhancements 💡 - `all`: Move aix/ppc64 to tier 3 support ([#​13380](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13380)) - `all`: Upgrade the profiles stability status to alpha ([#​14817](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14817)) The following components have their profiles status upgraded from development to alpha: - pdata/pprofile - connector/forward - exporter/debug - receiver/nop - exporter/nop - exporter/otlp\_grpc - exporter/otlp\_http - `cmd/mdatagen`: Add semconv reference for attributes ([#​13297](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13297)) ##### 🧰 Bug fixes 🧰 - `cmd/mdatagen`: Fix entity code generation so `extra_attributes` are emitted as resource attributes instead of entity descriptive attributes. ([#​14778](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14778)) <!-- previous-version --> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
858cabfd3c |
chore(deps): update codspeedhq/action action to v4.13.0 (#8114)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.12.1` → `v4.13.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.13.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.13.0) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.12.1...v4.13.0) #### Release Notes We added support for a new experimental flag `--experimental-fair-sched` to have valgrind use the `--fair-sched` argument. Usage in the action: ```yaml - name: Run the benchmarks uses: CodSpeedHQ/action@v4 env: CODSPEED_EXPERIMENTAL_FAIR_SCHED: "true" with: run: cargo codspeed run # Replace with your command mode: simulation ``` **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
493504d12a |
fix(deps): update googleapis to d5a96ad (#8112)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `d00831a` → `d5a96ad` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `d00831a` → `d5a96ad` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `d00831a` → `d5a96ad` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
ab27913693 |
metricdatatest: Improve printing of diffs (#8073)
I've been getting tired of trying to parse blobs of OTLP-like text when
debugging metrics SDK test failures. This PR updating the printing of
diffs between metrics.
### Changes
This combines the `compareDiff`, and `diffSlices` functions into a
single `diffSlices` function. The `compare` parameter now returns a
`[]string` instead of a bool, to allow us to get a list of specific
differences between elements. `diffSlices` now also accepts a
`formatContext` parameter that provides the context (e.g. which scope,
which metric, etc) to print before printing the difference itself.
I've chosen to use the scope name, metric name, and attributes as the
context for scope, metric, and datapoint respectively. We could print
out more (as those are not the only identifying fields), but that is
usually enough to point to the problem.
### Example
I "broke" one of the OpenCensus tests by changing the expected SpanID
from 2 -> 1. You can see the resulting error message before and after
below:
Before:
```
--- FAIL: TestConvertMetrics (0.00s)
--- FAIL: TestConvertMetrics/normal_Histogram,_summary,_gauges,_and_sums (0.00s)
metric_test.go:940: [ScopeMetrics Metrics not equal:
missing expected values:
metricdata.Metrics{Name:"foo.com/histogram-a", Description:"a testing histogram", Unit:"1",
Data:metricdata.Histogram[float64]{DataPoints:[]metricdata.HistogramDataPoint[float64]
{metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello",
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world",
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local),
Time:time.Date(2026, time.March, 18, 15, 47, 53, 77753334, time.Local), Count:0x8, Bounds:[]float64{1, 2, 3},
BucketCounts:[]uint64{0x1, 0x2, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false},
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:100, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue{attribute.KeyValue{Key:"bool",
Value:attribute.Value{vtype:1, numeric:0x1, stringly:"", slice:interface {}(nil)}}}, Time:time.Date(2026, time.March, 18, 15,
47, 43, 77753334, time.Local), Value:0.8, SpanID:[]uint8{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x1, 0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.5, SpanID:
[]uint8{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026,
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.6, SpanID:[]uint8{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0},
TraceID:[]uint8{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}},
metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello",
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world",
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local),
Time:time.Date(2026, time.March, 18, 15, 47, 53, 76753334, time.Local), Count:0xa, Bounds:[]float64{1, 2, 3},
BucketCounts:[]uint64{0x1, 0x4, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false},
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:110, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47,
43, 77753334, time.Local), Value:0.9, SpanID:[]uint8{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x7, 0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.1, SpanID:
[]uint8{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026,
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.7, SpanID:[]uint8{0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0},
TraceID:[]uint8{0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}}, Temporality:0x1}}
unexpected additional values:
metricdata.Metrics{Name:"foo.com/histogram-a", Description:"a testing histogram", Unit:"1",
Data:metricdata.Histogram[float64]{DataPoints:[]metricdata.HistogramDataPoint[float64]
{metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello",
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world",
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local),
Time:time.Date(2026, time.March, 18, 15, 47, 53, 77753334, time.Local), Count:0x8, Bounds:[]float64{1, 2, 3},
BucketCounts:[]uint64{0x1, 0x2, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false},
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:100, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue{attribute.KeyValue{Key:"bool",
Value:attribute.Value{vtype:1, numeric:0x1, stringly:"", slice:interface {}(nil)}}}, Time:time.Date(2026, time.March, 18, 15,
47, 43, 77753334, time.Local), Value:0.8, SpanID:[]uint8{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x1, 0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.5, SpanID:
[]uint8{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026,
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.6, SpanID:[]uint8{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0},
TraceID:[]uint8{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}},
metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello",
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world",
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local),
Time:time.Date(2026, time.March, 18, 15, 47, 53, 76753334, time.Local), Count:0xa, Bounds:[]float64{1, 2, 3},
BucketCounts:[]uint64{0x1, 0x4, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false},
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:110, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47,
43, 77753334, time.Local), Value:0.9, SpanID:[]uint8{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x7, 0x0,
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.1, SpanID:
[]uint8{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0,
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026,
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.7, SpanID:[]uint8{0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0},
TraceID:[]uint8{0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}}, Temporality:0x1}}
]
FAIL
FAIL go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric 0.037s
```
After:
```
--- FAIL: TestConvertMetrics (0.00s)
--- FAIL: TestConvertMetrics/normal_Histogram,_summary,_gauges,_and_sums (0.00s)
metric_test.go:940: [ScopeMetrics Metrics not equal:
Metric "foo.com/histogram-a":
Metrics Data not equal:
Histogram not equal:
Histogram DataPoints not equal:
HistogramDataPoint [a=hello,b=world]:
Exemplars not equal:
Exemplar:
SpanID not equal:
expected: [2 0 0 0 0 0 0 0]
actual: [1 0 0 0 0 0 0 0]
]
FAIL
FAIL go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric 0.036s
```
|
||
|
|
3ff9ad7291 |
chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (#8109)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/hashicorp/go-version](https://redirect.github.com/hashicorp/go-version) | `v1.8.0` → `v1.9.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>hashicorp/go-version (github.com/hashicorp/go-version)</summary> ### [`v1.9.0`](https://redirect.github.com/hashicorp/go-version/releases/tag/v1.9.0) [Compare Source](https://redirect.github.com/hashicorp/go-version/compare/v1.8.0...v1.9.0) #### What's Changed ##### Enhancements - Add support for prefix of any character by [@​brondum](https://redirect.github.com/brondum) in [#​79](https://redirect.github.com/hashicorp/go-version/pull/79) ##### Internal - Update CHANGELOG for version 1.8.0 enhancements by [@​sonamtenzin2](https://redirect.github.com/sonamtenzin2) in [#​178](https://redirect.github.com/hashicorp/go-version/pull/178) - Bump the github-actions-backward-compatible group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​179](https://redirect.github.com/hashicorp/go-version/pull/179) - Bump the github-actions-breaking group with 4 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​180](https://redirect.github.com/hashicorp/go-version/pull/180) - Bump the github-actions-backward-compatible group with 3 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​182](https://redirect.github.com/hashicorp/go-version/pull/182) - Update GitHub Actions to trigger on pull requests and update go version by [@​ssagarverma](https://redirect.github.com/ssagarverma) in [#​185](https://redirect.github.com/hashicorp/go-version/pull/185) - Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the github-actions-breaking group across 1 directory by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​183](https://redirect.github.com/hashicorp/go-version/pull/183) - Bump the github-actions-backward-compatible group across 1 directory with 2 updates by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​186](https://redirect.github.com/hashicorp/go-version/pull/186) #### New Contributors - [@​sonamtenzin2](https://redirect.github.com/sonamtenzin2) made their first contribution in [#​178](https://redirect.github.com/hashicorp/go-version/pull/178) - [@​brondum](https://redirect.github.com/brondum) made their first contribution in [#​79](https://redirect.github.com/hashicorp/go-version/pull/79) - [@​ssagarverma](https://redirect.github.com/ssagarverma) made their first contribution in [#​185](https://redirect.github.com/hashicorp/go-version/pull/185) **Full Changelog**: <https://github.com/hashicorp/go-version/compare/v1.8.0...v1.9.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
f932c7e165 |
chore(deps): update github/codeql-action action to v4.35.1 (#8102)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.35.0` → `v4.35.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.35.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.35.0...v4.35.1) - Fix incorrect minimum required Git version for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158): it should have been 2.36.0, not 2.11.0. [#​3781](https://redirect.github.com/github/codeql-action/pull/3781) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
c2abc1e22d |
chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (#8103)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lucasb-eyer/go-colorful](https://redirect.github.com/lucasb-eyer/go-colorful) | `v1.3.0` → `v1.4.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>lucasb-eyer/go-colorful (github.com/lucasb-eyer/go-colorful)</summary> ### [`v1.4.0`](https://redirect.github.com/lucasb-eyer/go-colorful/releases/tag/v1.4.0) [Compare Source](https://redirect.github.com/lucasb-eyer/go-colorful/compare/v1.3.0...v1.4.0) This release adds support for CSS Color Level 4 wide-gamut RGB color spaces, along with D50 XYZ helpers and a small `HexColor` usability improvement. #### Added - Constructors, decomposers, and blend functions for the CSS Color Level 4 wide-gamut RGB color spaces `DisplayP3`, `A98Rgb`, `ProPhotoRgb`, and `Rec2020` ([#​81](https://redirect.github.com/lucasb-eyer/go-colorful/issues/81)) - `XyzD50`, `Color.XyzD50`, `D50ToD65`, and `D65ToD50` for working with D50-based color spaces ([#​81](https://redirect.github.com/lucasb-eyer/go-colorful/issues/81)) - `HexColor` now implements `fmt.Stringer` </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
624f64631b |
chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (#8106)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | `v5.17.0` → `v5.17.1` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>go-git/go-git (github.com/go-git/go-git/v5)</summary> ### [`v5.17.1`](https://redirect.github.com/go-git/go-git/releases/tag/v5.17.1) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.17.0...v5.17.1) #### What's Changed - build: Update module github.com/cloudflare/circl to v1.6.3 \[SECURITY] (releases/v5.x) by [@​go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot] in [#​1930](https://redirect.github.com/go-git/go-git/pull/1930) - \[v5] plumbing: format/index, Improve v4 entry name validation by [@​pjbgf](https://redirect.github.com/pjbgf) in [#​1935](https://redirect.github.com/go-git/go-git/pull/1935) - \[v5] plumbing: format/idxfile, Fix version and fanout checks by [@​pjbgf](https://redirect.github.com/pjbgf) in [#​1937](https://redirect.github.com/go-git/go-git/pull/1937) **Full Changelog**: <https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
47e4b06017 |
chore(deps): update actions/setup-go action to v6.4.0 (#8107)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/setup-go](https://redirect.github.com/actions/setup-go) | action | minor | `v6.3.0` → `v6.4.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>actions/setup-go (actions/setup-go)</summary> ### [`v6.4.0`](https://redirect.github.com/actions/setup-go/releases/tag/v6.4.0) [Compare Source](https://redirect.github.com/actions/setup-go/compare/v6.3.0...v6.4.0) ##### What's Changed ##### Enhancement - Add go-download-base-url input for custom Go distributions by [@​gdams](https://redirect.github.com/gdams) in [#​721](https://redirect.github.com/actions/setup-go/pull/721) ##### Dependency update - Upgrade minimatch from 3.1.2 to 3.1.5 by [@​dependabot](https://redirect.github.com/dependabot) in [#​727](https://redirect.github.com/actions/setup-go/pull/727) ##### Documentation update - Rearrange README.md, add advanced-usage.md by [@​priyagupta108](https://redirect.github.com/priyagupta108) in [#​724](https://redirect.github.com/actions/setup-go/pull/724) - Fix Microsoft build of Go link by [@​gdams](https://redirect.github.com/gdams) in [#​734](https://redirect.github.com/actions/setup-go/pull/734) ##### New Contributors - [@​gdams](https://redirect.github.com/gdams) made their first contribution in [#​721](https://redirect.github.com/actions/setup-go/pull/721) **Full Changelog**: <https://github.com/actions/setup-go/compare/v6...v6.4.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
eb698ed5ce |
chore(deps): update github/codeql-action action to v4.35.0 (#8101)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v4.34.1` → `v4.35.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.35.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.34.1...v4.35.0) - Reduced the minimum Git version required for [improved incremental analysis](https://redirect.github.com/github/roadmap/issues/1158) from 2.38.0 to 2.11.0. [#​3767](https://redirect.github.com/github/codeql-action/pull/3767) - Update default CodeQL bundle version to [2.25.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1). [#​3773](https://redirect.github.com/github/codeql-action/pull/3773) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45My4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
099a8d1263 |
chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (#8100)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/butuzov/ireturn](https://redirect.github.com/butuzov/ireturn) | `v0.4.0` → `v0.4.1` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>butuzov/ireturn (github.com/butuzov/ireturn)</summary> ### [`v0.4.1`](https://redirect.github.com/butuzov/ireturn/releases/tag/v0.4.1) [Compare Source](https://redirect.github.com/butuzov/ireturn/compare/v0.4.0...v0.4.1) #### Changelog - [`e838a2d`](https://redirect.github.com/butuzov/ireturn/commit/e838a2dee944f8b38eeea39a468ab685156da7b2) Update Go version requirement to 1.25 ([#​127](https://redirect.github.com/butuzov/ireturn/issues/127)) - [`e203b16`](https://redirect.github.com/butuzov/ireturn/commit/e203b1697899911b6afd54491f99bb79e33289cf) Update readme.md ([#​107](https://redirect.github.com/butuzov/ireturn/issues/107)) - [`0db6434`](https://redirect.github.com/butuzov/ireturn/commit/0db6434fcd64f04bb69eb6dd88d2350a2e8df65c) build(deps): bump actions/checkout from 4 to 6 ([#​115](https://redirect.github.com/butuzov/ireturn/issues/115)) - [`ea5d5d3`](https://redirect.github.com/butuzov/ireturn/commit/ea5d5d3ee2b749ed88ffaa89a37138cc4098d5c5) chore: update CI ([#​119](https://redirect.github.com/butuzov/ireturn/issues/119)) - [`c7bfd5b`](https://redirect.github.com/butuzov/ireturn/commit/c7bfd5b308585d806737475cbb00095fbc52b6ef) chore: update dependencies ([#​122](https://redirect.github.com/butuzov/ireturn/issues/122)) - [`46c7ed6`](https://redirect.github.com/butuzov/ireturn/commit/46c7ed6151b68be7eabd4f3ae3b7d17b831568cc) chore: use an interface ([#​123](https://redirect.github.com/butuzov/ireturn/issues/123)) - [`ae28990`](https://redirect.github.com/butuzov/ireturn/commit/ae289905dc117bce0bfebf7e2839af15d58db286) chores: improve code coverage reporting ([#​125](https://redirect.github.com/butuzov/ireturn/issues/125)) - [`8ddfd4a`](https://redirect.github.com/butuzov/ireturn/commit/8ddfd4a79889fe3f588050767652d46ca6389548) chres: update std to go1.26 ([#​124](https://redirect.github.com/butuzov/ireturn/issues/124)) - [`901815d`](https://redirect.github.com/butuzov/ireturn/commit/901815d0fb666519794019de9c9bd8e521f6d8f5) fix: remove found field ([#​120](https://redirect.github.com/butuzov/ireturn/issues/120)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45My4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
0d3cd1d917 |
chore(deps): update module github.com/tetafro/godot to v1.5.6 (#8099)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/tetafro/godot](https://redirect.github.com/tetafro/godot) | `v1.5.4` → `v1.5.6` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>tetafro/godot (github.com/tetafro/godot)</summary> ### [`v1.5.6`](https://redirect.github.com/tetafro/godot/releases/tag/v1.5.6) [Compare Source](https://redirect.github.com/tetafro/godot/compare/v1.5.5...v1.5.6) #### Changelog - [`88cf245`](https://redirect.github.com/tetafro/godot/commit/88cf24521d87cf1a946c5b876f10713945dec6fd) Fix working with //line directive - [`c1ee1ed`](https://redirect.github.com/tetafro/godot/commit/c1ee1eda4d664955c4f54d35fc4e6f68db1710cb) Update golangci-lint to v2. - [`fd5b12e`](https://redirect.github.com/tetafro/godot/commit/fd5b12eeb894312c97bcb8cc422587df6cd88a5e) Update golangci-lint to v2.8. ### [`v1.5.5`](https://redirect.github.com/tetafro/godot/releases/tag/v1.5.5) [Compare Source](https://redirect.github.com/tetafro/godot/compare/v1.5.4...v1.5.5) #### Changelog - [`f4f097a`](https://redirect.github.com/tetafro/godot/commit/f4f097a009c5934967e3ff425693418c1a8e3a76) Fix goreleaser configs. - [`a7be78a`](https://redirect.github.com/tetafro/godot/commit/a7be78ae484e14ad889c30f9342f12ff80767831) Fix inline comments replacements. </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
5c12b73f7f |
chore(deps): update codecov/codecov-action action to v6 (#8098)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | major | `v5.5.4` → `v6.0.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v6.0.0`](https://redirect.github.com/codecov/codecov-action/compare/v5.5.4...v6.0.0) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.4...v6.0.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b8ea873e38 |
chore(deps): update codecov/codecov-action action to v5.5.4 (#8097)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | patch | `v5.5.3` → `v5.5.4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v5.5.4`](https://redirect.github.com/codecov/codecov-action/releases/tag/v5.5.4) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.3...v5.5.4) This is a mirror of `v5.5.2`. `v6` will be released which requires `node24` #### What's Changed - Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0" by [@​thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#​1926](https://redirect.github.com/codecov/codecov-action/pull/1926) - chore(release): 5.5.4 by [@​thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#​1927](https://redirect.github.com/codecov/codecov-action/pull/1927) **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.3...v5.5.4> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
853704bf99 |
chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (#8095)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/pelletier/go-toml/v2](https://redirect.github.com/pelletier/go-toml) | `v2.2.4` → `v2.3.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>pelletier/go-toml (github.com/pelletier/go-toml/v2)</summary> ### [`v2.3.0`](https://redirect.github.com/pelletier/go-toml/compare/v2.2.4...v2.3.0) [Compare Source](https://redirect.github.com/pelletier/go-toml/compare/v2.2.4...v2.3.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
e9449e3b34 |
chore: fix noctx issues (#8008)
***Description*** Fixes [noctx](https://golangci-lint.run/docs/linters/configuration/#noctx) issues and enables the linter Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com> Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
717c1b3505 |
fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (#8092)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/golangci/golangci-lint/v2](https://redirect.github.com/golangci/golangci-lint) | `v2.11.3` → `v2.11.4` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>golangci/golangci-lint (github.com/golangci/golangci-lint/v2)</summary> ### [`v2.11.4`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2114) [Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.3...v2.11.4) *Released on 2026-03-22* 1. Linters bug fixes - `govet-modernize`: from 0.42.0 to 0.43.0 - `noctx`: from 0.5.0 to 0.5.1 - `sqlclosecheck`: from 0.5.1 to 0.6.0 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
edcfb1a5ab |
chore(deps): update github/codeql-action action to v4.34.1 (#8090)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | patch | `v4.34.0` → `v4.34.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.34.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.34.1) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.34.0...v4.34.1) - Downgrade default CodeQL bundle version to [2.24.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3) due to issues with a small percentage of Actions and JavaScript analyses. [#​3762](https://redirect.github.com/github/codeql-action/pull/3762) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b8301a29d9 |
chore(deps): update codspeedhq/action action to v4.12.1 (#8089)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) | action | minor | `v4.11.1` → `v4.12.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary> ### [`v4.12.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.12.1) [Compare Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.11.1...v4.12.1) #### Release Notes In this release, we've focused on improving the local user experience.\ We've revamped the output of the cli to provide tailed logs while the benchmarks are being executed, and polished a bit the display of results after your run. We also added support to run multiple modes in a single command invocation, both for local and CI runs!\ For instance, that means you can now do `codspeed run --mode simulation --mode memory --mode walltime -- cargo codspeed run` Last but not least, you can now define `entrypoints` in your project config ```yaml # codspeed.yml # List of commands that are run when running `codspeed run` without further arguments benchmarks: - name: My ls command # Mutually exclusive with entrypoint # Expects a command that will run a benchmark for an arbitrary command exec: ls -al /usr/bin - name: My pytest-codspeed benchmark # Mutually exclusive with exec # Expects a command that will run a benchmark program that is using a codspeed integration entrypoint: pytest --codspeed src ``` Fix a bug where memory profiling with `codspeed exec` for binaries that use statically-linked allocators (e.g. jemalloc in Rust). Previously, we reported incorrect memory usage because it didn't attach to the statically linked allocators. #### Details ##### <!-- 0 -->🚀 Features - Set NODE\_OPTIONS to get perf map from node by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​267](https://redirect.github.com/CodSpeedHQ/runner/pull/267) - Disable node instrospection for exec-harness by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Support CODSPEED\_MEMTRACK\_BINARIES for static allocator discovery by [@​not-matthias](https://redirect.github.com/not-matthias) - Gracefully handle logs from the runner while rolling buffer is active by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add `--show-full-output` to bypass the new rolling buffer by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add a spinner while waiting for results by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Clean up group headers and emoji usage, make the executor title not dim after run by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add rolling buffer to display logs from executors by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Polish impact reporting and upload feedback by [@​art049](https://redirect.github.com/art049) - Add color-coded metrics to benchmark result tables by [@​art049](https://redirect.github.com/art049) - Enhance local logger with richer visual hierarchy by [@​art049](https://redirect.github.com/art049) - Style the ASCII banner with CodSpeed orange by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Enforce CodSpeed CLI as single source of truth for all measurements by [@​art049](https://redirect.github.com/art049) - Add optimize and setup-harness skills by [@​art049](https://redirect.github.com/art049) - Add the cursor plugin by [@​art049](https://redirect.github.com/art049) - Check if user is logged in before doing a local run by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​263](https://redirect.github.com/CodSpeedHQ/runner/pull/263) - Skip respository resolve with `--skip-upload` by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Use an enum and fix schema for entry/entrypoint by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​260](https://redirect.github.com/CodSpeedHQ/runner/pull/260) - Accept a mix of entrypoint and exec targets in project config by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Introduce OrchestratorConfig and ExecutorConfig by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Unify run\_part\_id suffix computation between ci providers and local by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Add the claude plugin by [@​art049](https://redirect.github.com/art049) - Add local\_data to upload metadata by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Use repositoryOverview resolver rather than repository by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) ##### <!-- 1 -->🐛 Bug Fixes - Use fp unwinding mode when running `go test` by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​269](https://redirect.github.com/CodSpeedHQ/runner/pull/269) - Improve error message when no benchmarks are found by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​264](https://redirect.github.com/CodSpeedHQ/runner/pull/264) ##### <!-- 2 -->🏗️ Refactor - Extract shared test helpers for compile and track by [@​not-matthias](https://redirect.github.com/not-matthias) - Pass extra env via config instead of unsafe set\_var by [@​not-matthias](https://redirect.github.com/not-matthias) - Remove the closure argument to poll in favor of polling options by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Move EXEC\_HARNESS\_VERSION and EXEC\_HARNESS\_COMMAND to orchestrator mod by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Flatten orchestrator execution loop over (command, mode) pairs by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) - Introduce Orchestrator to support multi-mode execution by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​259](https://redirect.github.com/CodSpeedHQ/runner/pull/259) - Consolidate poll\_results into upload module by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) ##### <!-- 3 -->📚 Documentation - docs: add documentation about multiple modes in a single run by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​195](https://redirect.github.com/CodSpeedHQ/action/pull/195) ##### <!-- 6 -->🧪 Testing - Add spawn wrapper integration test for static allocator discovery by [@​not-matthias](https://redirect.github.com/not-matthias) in [#​266](https://redirect.github.com/CodSpeedHQ/runner/pull/266) ##### <!-- 7 -->⚙️ Internals - Bump linux-perf-data to use upstream version by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​271](https://redirect.github.com/CodSpeedHQ/runner/pull/271) - Remove lazy\_static in favor of LazyLock by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​265](https://redirect.github.com/CodSpeedHQ/runner/pull/265) - Rename skill directories with codspeed prefix by [@​art049](https://redirect.github.com/art049) - Move architecture docs out of this repo by [@​GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange) in [#​262](https://redirect.github.com/CodSpeedHQ/runner/pull/262) - Typo in plugin description by [@​art049](https://redirect.github.com/art049) - Bump memtrack version - chore: bump runner version to 4.12.0 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​194](https://redirect.github.com/CodSpeedHQ/action/pull/194) - chore: bump runner version to 4.12.1 by [@​github-actions](https://redirect.github.com/github-actions)\[bot] in [#​196](https://redirect.github.com/CodSpeedHQ/action/pull/196) #### Install codspeed-runner 4.12.1 ##### Install prebuilt binaries via shell script ```sh curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-installer.sh | sh ``` #### Download codspeed-runner 4.12.1 | File | Platform | Checksum | | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------- | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------- | | [codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz) | ARM64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256) | | [codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz) | x64 MUSL Linux | [checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256) | **Full Runner Changelog**: <https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md> **Full Changelog**: <https://github.com/CodSpeedHQ/action/compare/v4.11.1...v4.12.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
94ec25a242 |
chore(deps): update github/codeql-action action to v4.34.0 (#8088)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github/codeql-action](https://redirect.github.com/github/codeql-action) | action | minor | `v4.33.0` → `v4.34.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>github/codeql-action (github/codeql-action)</summary> ### [`v4.34.0`](https://redirect.github.com/github/codeql-action/compare/v4.33.0...v4.34.0) [Compare Source](https://redirect.github.com/github/codeql-action/compare/v4.33.0...v4.34.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
015ed1a7a4 |
sdk/metric: Support specifying cardinality limits per instrument kinds (#7855)
Previously, we only had `WithCardinalityLimit()`, which adds a global cardinality limit. This PR adds a new API on the reader `WithCardinalityLimitSelector` that can be used to specify limits per instrument kinds. [spec](https://github.com/open-telemetry/opentelemetry-specification/blob/49845849d2d8df07059f82033f39e96c561927cf/specification/metrics/sdk.md?plain=1#L1282) [schema](https://github.com/open-telemetry/opentelemetry-configuration/blob/3dbebe292912f0c0c96ce5dcfefc45dfe5e20f39/snippets/CardinalityLimits_kitchen_sink.yaml#L11-L18) closes #7786 --------- Co-authored-by: David Ashpole <dashpole@google.com> Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
e604da5eec |
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#8075)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.79.2` → `v1.79.3` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3) ### Impact _What kind of vulnerability is it? Who is impacted?_ It is an **Authorization Bypass** resulting from **Improper Input Validation** of the HTTP/2 `:path` pseudo-header. The gRPC-Go server was too lenient in its routing logic, accepting requests where the `:path` omitted the mandatory leading slash (e.g., `Service/Method` instead of `/Service/Method`). While the server successfully routed these requests to the correct handler, authorization interceptors (including the official `grpc/authz` package) evaluated the raw, non-canonical path string. Consequently, "deny" rules defined using canonical paths (starting with `/`) failed to match the incoming request, allowing it to bypass the policy if a fallback "allow" rule was present. **Who is impacted?** This affects gRPC-Go servers that meet both of the following criteria: 1. They use path-based authorization interceptors, such as the official RBAC implementation in `google.golang.org/grpc/authz` or custom interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`. 2. Their security policy contains specific "deny" rules for canonical paths but allows other requests by default (a fallback "allow" rule). The vulnerability is exploitable by an attacker who can send raw HTTP/2 frames with malformed `:path` headers directly to the gRPC server. ### Patches _Has the problem been patched? What versions should users upgrade to?_ Yes, the issue has been patched. The fix ensures that any request with a `:path` that does not start with a leading slash is immediately rejected with a `codes.Unimplemented` error, preventing it from reaching authorization interceptors or handlers with a non-canonical path string. Users should upgrade to the following versions (or newer): * **v1.79.3** * The latest **master** branch. It is recommended that all users employing path-based authorization (especially `grpc/authz`) upgrade as soon as the patch is available in a tagged release. ### Workarounds _Is there a way for users to fix or remediate the vulnerability without upgrading?_ While upgrading is the most secure and recommended path, users can mitigate the vulnerability using one of the following methods: #### 1. Use a Validating Interceptor (Recommended Mitigation) Add an "outermost" interceptor to your server that validates the path before any other authorization logic runs: ```go func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) { if info.FullMethod == "" || info.FullMethod[0] != '/' { return nil, status.Errorf(codes.Unimplemented, "malformed method name") } return handler(ctx, req) } // Ensure this is the FIRST interceptor in your chain s := grpc.NewServer( grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor), ) ``` #### 2. Infrastructure-Level Normalization If your gRPC server is behind a reverse proxy or load balancer (such as Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to enforce strict HTTP/2 compliance for pseudo-headers and reject or normalize requests where the `:path` header does not start with a leading slash. #### 3. Policy Hardening Switch to a "default deny" posture in your authorization policies (explicitly listing all allowed paths and denying everything else) to reduce the risk of bypasses via malformed inputs. --- ### Release Notes <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3): Release 1.79.3 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3) ### Security - server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like `grpc/authz`. Any request with a non-canonical path is now immediately rejected with an `Unimplemented` error. ([#​8981](https://redirect.github.com/grpc/grpc-go/issues/8981)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
8742ba9cdc |
chore(deps): update golang.org/x/telemetry digest to b6b0c46 (#8076)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [golang.org/x/telemetry](https://pkg.go.dev/golang.org/x/telemetry) | indirect | digest | `1546bf4` → `b6b0c46` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
8ae173e566 |
fix(deps): update googleapis to d00831a (#8078)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `84a4fc4` → `d00831a` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | indirect | digest | `84a4fc4` → `d00831a` | | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `84a4fc4` → `d00831a` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
e6120a6f77 |
chore(deps): update module github.com/fatih/color to v1.19.0 (#8087)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/fatih/color](https://redirect.github.com/fatih/color) | `v1.18.0` → `v1.19.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>fatih/color (github.com/fatih/color)</summary> ### [`v1.19.0`](https://redirect.github.com/fatih/color/releases/tag/v1.19.0) [Compare Source](https://redirect.github.com/fatih/color/compare/v1.18.0...v1.19.0) #### What's Changed - Bump golang.org/x/sys from 0.25.0 to 0.28.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​246](https://redirect.github.com/fatih/color/pull/246) - Fix for issue [#​230](https://redirect.github.com/fatih/color/issues/230) set/unsetwriter symmetric wrt color support detection by [@​ataypamart](https://redirect.github.com/ataypamart) in [#​243](https://redirect.github.com/fatih/color/pull/243) - chore: go mod cleanup by [@​sashamelentyev](https://redirect.github.com/sashamelentyev) in [#​244](https://redirect.github.com/fatih/color/pull/244) - Bump golang.org/x/sys from 0.28.0 to 0.30.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​249](https://redirect.github.com/fatih/color/pull/249) - Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​248](https://redirect.github.com/fatih/color/pull/248) - Update CI and go deps by [@​fatih](https://redirect.github.com/fatih) in [#​254](https://redirect.github.com/fatih/color/pull/254) - Bump golang.org/x/sys from 0.31.0 to 0.37.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​268](https://redirect.github.com/fatih/color/pull/268) - fix: include escape codes in byte counts from `Fprint`, `Fprintf` by [@​qualidafial](https://redirect.github.com/qualidafial) in [#​282](https://redirect.github.com/fatih/color/pull/282) - Bump golang.org/x/sys from 0.37.0 to 0.40.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​277](https://redirect.github.com/fatih/color/pull/277) - fix: add nil check for os.Stdout to prevent panic on Windows services by [@​majiayu000](https://redirect.github.com/majiayu000) in [#​275](https://redirect.github.com/fatih/color/pull/275) - Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​259](https://redirect.github.com/fatih/color/pull/259) - Bump actions/checkout from 4 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​273](https://redirect.github.com/fatih/color/pull/273) - Optimize Color.Equals performance (O(n²) → O(n)) by [@​UnSubble](https://redirect.github.com/UnSubble) in [#​269](https://redirect.github.com/fatih/color/pull/269) - Bump actions/setup-go from 5 to 6 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​266](https://redirect.github.com/fatih/color/pull/266) #### New Contributors - [@​ataypamart](https://redirect.github.com/ataypamart) made their first contribution in [#​243](https://redirect.github.com/fatih/color/pull/243) - [@​sashamelentyev](https://redirect.github.com/sashamelentyev) made their first contribution in [#​244](https://redirect.github.com/fatih/color/pull/244) - [@​qualidafial](https://redirect.github.com/qualidafial) made their first contribution in [#​282](https://redirect.github.com/fatih/color/pull/282) - [@​majiayu000](https://redirect.github.com/majiayu000) made their first contribution in [#​275](https://redirect.github.com/fatih/color/pull/275) - [@​UnSubble](https://redirect.github.com/UnSubble) made their first contribution in [#​269](https://redirect.github.com/fatih/color/pull/269) **Full Changelog**: <https://github.com/fatih/color/compare/v1.18.0...v1.19.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
69e9181c6b |
chore(deps): update actions/cache action to v5.0.4 (#8079)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [actions/cache](https://redirect.github.com/actions/cache) | action | patch | `v5.0.3` → `v5.0.4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>actions/cache (actions/cache)</summary> ### [`v5.0.4`](https://redirect.github.com/actions/cache/compare/v5.0.3...v5.0.4) [Compare Source](https://redirect.github.com/actions/cache/compare/v5.0.3...v5.0.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
09fb3e0f17 |
fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (#8086)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.53.0` → `v1.54.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/pdata)</summary> ### [`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480) ##### ❗ Known Issues ❗ - `service`: The collector's internal Prometheus metrics endpoint (`:8888`) now emits OTel service labels with underscore names (`service_name`, `service_instance_id`, `service_version`) instead of dot-notation names (`service.name`, `service.instance.id`, `service.version`). Users scraping this endpoint with the Prometheus receiver will see these renamed labels in resource and datapoint attributes. As a workaround, add the following `metric_relabel_configs` to your scrape config in prometheus receiver: ```yaml metric_relabel_configs: - source_labels: [service_name] target_label: service.name - source_labels: [service_instance_id] target_label: service.instance.id - source_labels: [service_version] target_label: service.version - regex: service_name|service_instance_id|service_version action: labeldrop ``` See [#​14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814) for details and updates. ##### 🛑 Breaking changes 🛑 - `all`: Change metric units to be singular to match OTel specification, e.g. `{requests}` -> `{request}` ([#​14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753)) ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add deprecated\_type field to allow specifying an alias for component types. ([#​14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718)) - `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that enforces entity-metric associations at compile time ([#​14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659)) - `cmd/mdatagen`: Skip generating reaggregation config options for metrics that have no aggregatable attributes. ([#​14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689)) - `pkg/service`: The internal status reporter no longer drops repeated Ok and RecoverableError statuses ([#​14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282)) Status events can now carry metadata and there's value in allowing them to be emitted despite the status value itself not changing. ##### 🧰 Bug fixes 🧰 - `cmd/builder`: Add `.exe` to output binary names when building for Windows targets. ([#​12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591)) - `exporter/debug`: Add printing of metric metadata in detailed verbosity. ([#​14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667)) - `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are called before the OTLP exporter initializes its gRPC clients. ([#​14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663)) When the sending queue and retry are disabled, calling ConsumeTraces, ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter initializes its gRPC clients could cause a nil pointer dereference panic. The push methods now return an error instead of panicking. - `exporter/otlp_http`: Show the actual destination URL in error messages when request URL is modified by middleware. ([#​14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673)) Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent misleading error logs when a middleware extension dynamically updates the endpoint. - `pdata/pprofile`: Switch the dictionary of dictionary tables entries only once when merging profiles ([#​14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709)) For dictionary table data, we used to switch their dictionaries when doing the switch for the data that uses them. However, when an entry is associated with multiple other data (several samples can use the same stack), we would have been switching the dictionaries of the entry multiple times. We now switch dictionaries for dictionary table data only once, before switching the resource profiles. <!-- previous-version --> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
68f28d61db |
chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (#8081)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ProtonMail/go-crypto](https://redirect.github.com/ProtonMail/go-crypto) | `v1.4.0` → `v1.4.1` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)</summary> ### [`v1.4.1`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.4.1) [Compare Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1) ##### What's Changed - Properly handle ECC keys with invalid points in [#​304](https://redirect.github.com/ProtonMail/go-crypto/pull/304) **Full Changelog**: <https://github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
47509accbc |
chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (#8084)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/securego/gosec/v2](https://redirect.github.com/securego/gosec) | `v2.24.8-0.20260316110558-744bfb5ef06e` → `v2.25.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>securego/gosec (github.com/securego/gosec/v2)</summary> ### [`v2.25.0`](https://redirect.github.com/securego/gosec/releases/tag/v2.25.0) [Compare Source](https://redirect.github.com/securego/gosec/compare/v2.24.7...v2.25.0) #### Changelog - [`223e19b`](https://redirect.github.com/securego/gosec/commit/223e19b8856e00f02cc67804499a83f77e208f3c) chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3 ([#​1617](https://redirect.github.com/securego/gosec/issues/1617)) - [`b23a9e5`](https://redirect.github.com/securego/gosec/commit/b23a9e534822ec656207d6d33116b9c48fcde6c7) fix: allow barry action to access secrets on fork PRs ([#​1616](https://redirect.github.com/securego/gosec/issues/1616)) - [`355cfa5`](https://redirect.github.com/securego/gosec/commit/355cfa5a43916c57b7727eece120dd54665c1427) fix: reduce G117 false positives for custom marshalers and transformed values ([#​1614](https://redirect.github.com/securego/gosec/issues/1614)) ([#​1615](https://redirect.github.com/securego/gosec/issues/1615)) - [`744bfb5`](https://redirect.github.com/securego/gosec/commit/744bfb5ef06e24230087a2470dd1eda8cf5ac48a) Add barry security scanner as a step in the CI ([#​1612](https://redirect.github.com/securego/gosec/issues/1612)) - [`4fde15d`](https://redirect.github.com/securego/gosec/commit/4fde15d2287caa7ba8480e14d3ccd49579d17f42) chore(deps): update all dependencies ([#​1611](https://redirect.github.com/securego/gosec/issues/1611)) - [`dec52c4`](https://redirect.github.com/securego/gosec/commit/dec52c4101b534ac9bc8cf22ac051a65c90d75e0) fix: prevent taint analysis hang on packages with many CHA call graph edges ([#​1608](https://redirect.github.com/securego/gosec/issues/1608)) ([#​1610](https://redirect.github.com/securego/gosec/issues/1610)) - [`a0de8b6`](https://redirect.github.com/securego/gosec/commit/a0de8b6aab054e0fe97bec94d1f5e635dc5dc495) Add some skills for claude code to automate some tasks ([#​1609](https://redirect.github.com/securego/gosec/issues/1609)) - [`c2dfcec`](https://redirect.github.com/securego/gosec/commit/c2dfcec7f34bdbb3591c1dccd4aafde1d49c5bd6) Add G701-G706 rule-to-CWE mappings and CWE-117, CWE-918 entries ([#​1606](https://redirect.github.com/securego/gosec/issues/1606)) - [`8aec3f4`](https://redirect.github.com/securego/gosec/commit/8aec3f48a22ee5404185b01ac7667302ba73e51c) fix: skip SSA analysis on ill-typed packages to prevent panic ([#​1607](https://redirect.github.com/securego/gosec/issues/1607)) - [`1ced32d`](https://redirect.github.com/securego/gosec/commit/1ced32df147e2dd7bb9400023c246235bb32be92) Port G120 from SSA-based to taint analysis (fixes [#​1600](https://redirect.github.com/securego/gosec/issues/1600), [#​1603](https://redirect.github.com/securego/gosec/issues/1603)) ([#​1605](https://redirect.github.com/securego/gosec/issues/1605)) - [`befce8d`](https://redirect.github.com/securego/gosec/commit/befce8de5da965121ad143b3c1eba58b0c3941bb) fix(G118): eliminate false positive for package-level cancel variables ([#​1602](https://redirect.github.com/securego/gosec/issues/1602)) - [`b7b2c7b`](https://redirect.github.com/securego/gosec/commit/b7b2c7b668f3f2bef8a8ae04d72f0eb60492322c) feat: add G124 rule for insecure HTTP cookie configuration ([#​1599](https://redirect.github.com/securego/gosec/issues/1599)) - [`6e66a94`](https://redirect.github.com/securego/gosec/commit/6e66a943db54eb8d235ac766fa2fd414d44e8821) feat: add G709 rule for unsafe deserialization of untrusted data ([#​1598](https://redirect.github.com/securego/gosec/issues/1598)) - [`e7ea237`](https://redirect.github.com/securego/gosec/commit/e7ea2377aa2138d550e6d466ceef7a3164b4d7ea) feat: add G708 rule for server-side template injection via text/template ([#​1597](https://redirect.github.com/securego/gosec/issues/1597)) - [`8895462`](https://redirect.github.com/securego/gosec/commit/889546214c90564feb348e14fd1bf526295e0b2d) fix(G118): eliminate false positive when cancel is called via struct field in a closure ([#​1596](https://redirect.github.com/securego/gosec/issues/1596)) - [`619ce21`](https://redirect.github.com/securego/gosec/commit/619ce2117e086b696f9357dc3422c18c2d0262bf) Fix infinite recursion in interprocedural taint analysis ([#​1594](https://redirect.github.com/securego/gosec/issues/1594)) - [`0e0eb17`](https://redirect.github.com/securego/gosec/commit/0e0eb1792f3ced1edfe332daa388f088d4bd2f08) Fix G118 false positive when cancel is stored in returned struct field ([#​1593](https://redirect.github.com/securego/gosec/issues/1593)) - [`59a9da0`](https://redirect.github.com/securego/gosec/commit/59a9da022f37d928b5c26c2b720e5f43f4a3e9b4) Fix G118 false positive on cancel called inside goroutine closure ([#​1592](https://redirect.github.com/securego/gosec/issues/1592)) - [`cbf46b8`](https://redirect.github.com/securego/gosec/commit/cbf46b8771cfe2f02d3f935469c7898198d901f4) fix(analyzer): per-package rule instantiation eliminates concurrent map crash ([#​1589](https://redirect.github.com/securego/gosec/issues/1589)) - [`c6c3ba8`](https://redirect.github.com/securego/gosec/commit/c6c3ba865980cf3333c8bcaa93b4b9b7a4858bba) chore(deps): update all dependencies ([#​1588](https://redirect.github.com/securego/gosec/issues/1588)) - [`c709ed8`](https://redirect.github.com/securego/gosec/commit/c709ed8be30a01d52ef51a099f5da6fc23dd3e31) fix(G118): treat returned cancel func as called (fixes [#​1584](https://redirect.github.com/securego/gosec/issues/1584)) ([#​1585](https://redirect.github.com/securego/gosec/issues/1585)) - [`fa74dd7`](https://redirect.github.com/securego/gosec/commit/fa74dd7069d482a37b1207afbeffbfc7681a47f8) chore(go): update supported Go versions to 1.25.8 and 1.26.1 ([#​1583](https://redirect.github.com/securego/gosec/issues/1583)) - [`cd1f29e`](https://redirect.github.com/securego/gosec/commit/cd1f29ec710ed24a305edf5908f52240addb1811) Update the README with the correct version of the Github action for gosec ([#​1582](https://redirect.github.com/securego/gosec/issues/1582)) - [`5887aee`](https://redirect.github.com/securego/gosec/commit/5887aee36f8b982ecb71885fde827ec0e84d98a2) chore(deps): update all dependencies ([#​1579](https://redirect.github.com/securego/gosec/issues/1579)) - [`6641fcf`](https://redirect.github.com/securego/gosec/commit/6641fcf966593bf52ed426aa262839b340d56375) Fix G115 false positives for guarded int64-to-byte conversions ([#​1578](https://redirect.github.com/securego/gosec/issues/1578)) - [`3c9c3da`](https://redirect.github.com/securego/gosec/commit/3c9c3da6924bb1daeea428e28ec9ac5fa5a09c25) Update the container image migration notice ([#​1576](https://redirect.github.com/securego/gosec/issues/1576)) - [`973e94e`](https://redirect.github.com/securego/gosec/commit/973e94e8fc181de08ab86b212e6475221e777069) chore(action): bump gosec to 2.24.7 ([#​1575](https://redirect.github.com/securego/gosec/issues/1575)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
02d1881218 |
chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (#8085)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/featuregate](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.53.0` → `v1.54.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/featuregate)</summary> ### [`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480) ##### ❗ Known Issues ❗ - `service`: The collector's internal Prometheus metrics endpoint (`:8888`) now emits OTel service labels with underscore names (`service_name`, `service_instance_id`, `service_version`) instead of dot-notation names (`service.name`, `service.instance.id`, `service.version`). Users scraping this endpoint with the Prometheus receiver will see these renamed labels in resource and datapoint attributes. As a workaround, add the following `metric_relabel_configs` to your scrape config in prometheus receiver: ```yaml metric_relabel_configs: - source_labels: [service_name] target_label: service.name - source_labels: [service_instance_id] target_label: service.instance.id - source_labels: [service_version] target_label: service.version - regex: service_name|service_instance_id|service_version action: labeldrop ``` See [#​14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814) for details and updates. ##### 🛑 Breaking changes 🛑 - `all`: Change metric units to be singular to match OTel specification, e.g. `{requests}` -> `{request}` ([#​14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753)) ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add deprecated\_type field to allow specifying an alias for component types. ([#​14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718)) - `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that enforces entity-metric associations at compile time ([#​14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659)) - `cmd/mdatagen`: Skip generating reaggregation config options for metrics that have no aggregatable attributes. ([#​14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689)) - `pkg/service`: The internal status reporter no longer drops repeated Ok and RecoverableError statuses ([#​14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282)) Status events can now carry metadata and there's value in allowing them to be emitted despite the status value itself not changing. ##### 🧰 Bug fixes 🧰 - `cmd/builder`: Add `.exe` to output binary names when building for Windows targets. ([#​12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591)) - `exporter/debug`: Add printing of metric metadata in detailed verbosity. ([#​14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667)) - `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are called before the OTLP exporter initializes its gRPC clients. ([#​14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663)) When the sending queue and retry are disabled, calling ConsumeTraces, ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter initializes its gRPC clients could cause a nil pointer dereference panic. The push methods now return an error instead of panicking. - `exporter/otlp_http`: Show the actual destination URL in error messages when request URL is modified by middleware. ([#​14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673)) Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent misleading error logs when a middleware extension dynamically updates the endpoint. - `pdata/pprofile`: Switch the dictionary of dictionary tables entries only once when merging profiles ([#​14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709)) For dictionary table data, we used to switch their dictionaries when doing the switch for the data that uses them. However, when an entry is associated with multiple other data (several samples can use the same stack), we would have been switching the dictionaries of the entry multiple times. We now switch dictionaries for dictionary table data only once, before switching the resource profiles. <!-- previous-version --> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
b471ef15b4 |
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (#8082)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/opentracing-contrib/go-grpc/test](https://redirect.github.com/opentracing-contrib/go-grpc) | require | digest | `190d7d4` → `de6f1cc` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
ec4a15962c |
chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (#8083)
This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/ryanrolds/sqlclosecheck](https://redirect.github.com/ryanrolds/sqlclosecheck) | `v0.5.1` → `v0.6.0` |  |  | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>ryanrolds/sqlclosecheck (github.com/ryanrolds/sqlclosecheck)</summary> ### [`v0.6.0`](https://redirect.github.com/ryanrolds/sqlclosecheck/releases/tag/v0.6.0) [Compare Source](https://redirect.github.com/ryanrolds/sqlclosecheck/compare/v0.5.1...v0.6.0) #### What's Changed - \[WIP] Support correct non-defer usage by [@​ryanrolds](https://redirect.github.com/ryanrolds) in [#​28](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/28) - Add support for deferred closer functions which are not methods by [@​vanntile](https://redirect.github.com/vanntile) in [#​33](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/33) - (cont) Add support for deferred closer functions which are not methods by [@​vanntile](https://redirect.github.com/vanntile) in [#​34](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/34) - bump golang.org/x/tools to v0.13.0 to fix panic in tests by [@​alexandear](https://redirect.github.com/alexandear) in [#​38](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/38) - CVE-2024-27304 with vendoring by [@​ryanrolds](https://redirect.github.com/ryanrolds) in [#​41](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/41) - Bump golang.org/x/crypto from 0.17.0 to 0.35.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​42](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/42) - fix: Referrers() may return nil by [@​didebughu](https://redirect.github.com/didebughu) in [#​46](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/46) - Upgrade for Go 1.25 compatibility, and upgrade crypto dependency for CVE by [@​LeMikaelF](https://redirect.github.com/LeMikaelF) in [#​47](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/47) #### New Contributors - [@​vanntile](https://redirect.github.com/vanntile) made their first contribution in [#​33](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/33) - [@​alexandear](https://redirect.github.com/alexandear) made their first contribution in [#​38](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/38) - [@​dependabot](https://redirect.github.com/dependabot)\[bot] made their first contribution in [#​42](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/42) - [@​didebughu](https://redirect.github.com/didebughu) made their first contribution in [#​46](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/46) - [@​LeMikaelF](https://redirect.github.com/LeMikaelF) made their first contribution in [#​47](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/47) **Full Changelog**: <https://github.com/ryanrolds/sqlclosecheck/compare/v0.5.1...v0.6.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
8f3f09505c |
chore(deps): update codecov/codecov-action action to v5.5.3 (#8080)
This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [codecov/codecov-action](https://redirect.github.com/codecov/codecov-action) | action | patch | `v5.5.2` → `v5.5.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/5322) for more information. --- ### Release Notes <details> <summary>codecov/codecov-action (codecov/codecov-action)</summary> ### [`v5.5.3`](https://redirect.github.com/codecov/codecov-action/releases/tag/v5.5.3) [Compare Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.2...v5.5.3) ##### What's Changed - build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by [@​dependabot](https://redirect.github.com/dependabot)\[bot] in [#​1874](https://redirect.github.com/codecov/codecov-action/pull/1874) - chore(release): bump to 5.5.3 by [@​thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov) in [#​1922](https://redirect.github.com/codecov/codecov-action/pull/1922) **Full Changelog**: <https://github.com/codecov/codecov-action/compare/v5.5.2...v5.5.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> |
||
|
|
911ed35fa0 |
Cleanup exemplar featuregate readme (#8072)
Exemplars are no longer behind a feature gate. |
||
|
|
528ebabbf0 |
sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (#8067)
Guards SpanStarted and spanLive with Enabled(ctx) to avoid building metric options/attributes when instruments are disabled. ``` BenchmarkTracer (noop MeterProvider): SpanStarted: ~1.77 ns/op -> ~0.48 ns/op (~3.7x) SpanLive: ~2.05 ns/op -> ~0.52 ns/op (~3.9x) SpanEnded: ~2.05 ns/op -> ~0.52 ns/op (~3.9x) ``` No behavior change when enabled; existing tests cover enabled path. ~~No CHANGELOG entry, following #7848.~~ Issue: #7800 --------- Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
025b01be59 |
Add support for the development per-series starttime feature (#8060)
Add a feature to use per-series start times to match the spec: https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/metrics/sdk.md#start-timestamps This is a prerequisite to [finishing / closing](https://github.com/open-telemetry/opentelemetry-specification/pull/4702). Previous prototype: https://github.com/open-telemetry/opentelemetry-go/pull/7719 --------- Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com> Co-authored-by: Robert Pająk <pellared@hotmail.com> |
||
|
|
768e930779 |
Added the internal/observ package to stdoutlog (#7735)
a part of #7020 ```txt goos: windows goarch: amd64 pkg: go.opentelemetry.io/otel/exporters/stdout/stdoutlog/internal/observ cpu: Intel(R) Core(TM) i7-14700 │ result.txt │ │ sec/op │ InstrumentationExportLogs/NoError-28 47.68n ± 5% InstrumentationExportLogs/PartialError-28 471.6n ± 2% InstrumentationExportLogs/FullError-28 471.9n ± 10% geomean 219.7n │ result.txt │ │ B/op │ InstrumentationExportLogs/NoError-28 0.000 ± 0% InstrumentationExportLogs/PartialError-28 305.0 ± 0% InstrumentationExportLogs/FullError-28 305.0 ± 0% geomean ¹ ¹ summaries must be >0 to compute geomean │ result.txt │ │ allocs/op │ InstrumentationExportLogs/NoError-28 0.000 ± 0% InstrumentationExportLogs/PartialError-28 4.000 ± 0% InstrumentationExportLogs/FullError-28 4.000 ± 0% geomean ¹ ¹ summaries must be >0 to compute geomean ``` --------- Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
5576bc22e7 |
Use atomics for exponential histogram buckets (#8057)
Follows https://github.com/open-telemetry/opentelemetry-go/pull/8025 This is the second PR towards a lockless fast-path for the exponential histogram aggregation. It replaces use of uint64 with atomic.Uint64. It does not make buckets concurrent-safe. That will come in future PRs. This is a refactor to make future PRs easier to review since it has a large diff, but is relatively simple. The record and measure calls are still guarded by a lock at this point. You can see the full set of planned changes in https://github.com/open-telemetry/opentelemetry-go/compare/main...dashpole:opentelemetry-go:lockless_exphist_ai. The implementation is largely based on https://github.com/open-telemetry/opentelemetry-go/pull/7535 (which I implemented by hand), but with help from an AI to break it down into smaller PRs, and simplify aspects of the design. Part of https://github.com/open-telemetry/opentelemetry-go/issues/7796 |
||
|
|
d5f403cab5 |
sdk/resource: add WithContext variants for Default and Environment (#7808) (#8051)
## Description Address issue #7808 by plumbing `context.Context` through `resource.Environment` and `resource.Default`. Currently, these functions hardcode `context.Background()`, which prevents detectors (especially those that might perform network lookups or OS calls) from respecting timeouts or cancellations provided by the caller. ## Changes - Adds `EnvironmentWithContext(ctx context.Context)` as a new public function. - Adds `DefaultWithContext(ctx context.Context)` as a new public function. - Maintains backward compatibility by making `Environment()` and `Default()` thin wrappers around the new WithContext variants. ## Testing - Added unit tests in `sdk/resource/resource_test.go` to verify the new functions. - Verified that all `sdk/resource` tests pass. - Verified that make `golangci-lint` passes repository-wide. Fixes #7808 --------- Co-authored-by: Damien Mathieu <42@dmathieu.com> |
||
|
|
08efeb47e7 |
Migrate to new bare metal runner (Ubuntu 24) (#8068)
Old runner: - name: `oracle-bare-metal-64cpu-512gb-x86-64` - 512gb memory - Oracle Linux 8 New runner: - name: `oracle-bare-metal-64cpu-1024gb-x86-64-ubuntu-24` - 1024gb memory - Ubuntu 24 I realize this could have some impact on benchmark baselines, so please post on https://github.com/open-telemetry/community/issues/3333 once you have migrated and are comfortable with the old one being removed. |