1
0
mirror of https://github.com/open-telemetry/opentelemetry-go.git synced 2026-06-03 18:35:08 +02:00
Commit Graph

4490 Commits

Author SHA1 Message Date
Damien Mathieu 9276201a64 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
Release issue:
https://github.com/open-telemetry/opentelemetry-go/issues/8127

## Added

- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on
`SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID
Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag)
support. (#8012)
- Add service detection with `WithService` in
`go.opentelemetry.io/otel/sdk/resource`. (#7642)
- Add `DefaultWithContext` and `EnvironmentWithContext` in
`go.opentelemetry.io/otel/sdk/resource` to support plumbing
`context.Context` through default and environment detectors. (#8051)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`.
(#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (#8038)
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8038)
- Add support for per-series start time tracking for cumulative metrics
in `go.opentelemetry.io/otel/sdk/metric`.
  Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. (#8060)
- Add `WithCardinalityLimitSelector` for metric reader for configuring
cardinality limits specific to the instrument kind. (#7855)

## Changed

- Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to
reflect that an empty value is now a valid value, with `INVALID`
remaining as a deprecated alias of `EMPTY`. (#8038)
- Refactor slice handling in `go.opentelemetry.io/otel/attribute` to
optimize short slice values with fixed-size fast paths. (#8039)
- Improve performance of span metric recording in
`go.opentelemetry.io/otel/sdk/trace` by returning early if
self-observability is not enabled. (#8067)
- Improve formatting of metric data diffs in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8073)

## Deprecated

- Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use
`EMPTY` instead. (#8038)

## Fixed

- Return spec-compliant `TraceIdRatioBased` description. This is a
breaking behavioral change, but it is necessary to
make the implementation
[spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased).
(#8027)
- Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where
the lastvalue aggregation could collect the value 0 even when no
zero-value measurements were recorded. (#8056)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
(#8108)
- `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to
use full path for `kenv` command on BSD. (#8113)
- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
correctly handle HTTP2 GOAWAY frame. (#8096)

---------

Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
exporters/otlp/otlplog/otlploghttp/v0.19.0 exporters/stdout/stdoutlog/v0.19.0 sdk/log/v0.19.0 sdk/log/logtest/v0.19.0 exporters/otlp/otlplog/otlploggrpc/v0.19.0 log/v0.19.0 log/logtest/v0.19.0 exporters/prometheus/v0.65.0 bridge/opencensus/v1.43.0 bridge/opencensus/test/v1.43.0 exporters/otlp/otlptrace/otlptracegrpc/v1.43.0 exporters/stdout/stdoutmetric/v1.43.0 exporters/stdout/stdouttrace/v1.43.0 exporters/zipkin/v1.43.0 exporters/otlp/otlpmetric/otlpmetrichttp/v1.43.0 exporters/otlp/otlpmetric/otlpmetricgrpc/v1.43.0 metric/v1.43.0 bridge/opentracing/v1.43.0 exporters/otlp/otlptrace/v1.43.0 sdk/metric/v1.43.0 sdk/v1.43.0 trace/v1.43.0 v1.43.0 exporters/otlp/otlptrace/otlptracehttp/v1.43.0
2026-04-03 10:30:03 +02:00
renovate[bot] 61b8c9466c chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/mattn/go-runewidth](https://redirect.github.com/mattn/go-runewidth)
| `v0.0.21` → `v0.0.22` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmattn%2fgo-runewidth/v0.0.22?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmattn%2fgo-runewidth/v0.0.21/v0.0.22?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>mattn/go-runewidth (github.com/mattn/go-runewidth)</summary>

###
[`v0.0.22`](https://redirect.github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22)

[Compare
Source](https://redirect.github.com/mattn/go-runewidth/compare/v0.0.21...v0.0.22)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ1cGRhdGVkSW5WZXIiOiI0My4xMDIuMTEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbIlNraXAgQ2hhbmdlbG9nIiwiZGVwZW5kZW5jaWVzIl19-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-03 09:28:06 +02:00
renovate[bot] 97a086e82f chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/golangci/dupl](https://redirect.github.com/golangci/dupl)
| indirect | digest | `f665c8d` → `c99c5cf` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 11:57:51 +02:00
Robert Pająk 5e363de517 limit response body size for OTLP HTTP exporters (#8108)
Per https://github.com/open-telemetry/opentelemetry-proto/pull/781
2026-04-01 11:48:05 +02:00
Damien Mathieu 35214b6013 Use an absolute path when calling bsd kenv (#8113)
Co-authored-by: Robert Pająk <pellared@hotmail.com>
2026-04-01 11:05:13 +02:00
renovate[bot] 290024ceaf fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.3` → `v1.80.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.80.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.3/v1.80.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.80.0`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.80.0):
Release 1.80.0

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.3...v1.80.0)

### Behavior Changes

- balancer: log a warning if a balancer is registered with uppercase
letters, as balancer names should be lowercase. In a future release,
balancer names will be treated as case-insensitive; see
[#&#8203;5288](https://redirect.github.com/grpc/grpc-go/issues/5288) for
details.
([#&#8203;8837](https://redirect.github.com/grpc/grpc-go/issues/8837))
- xds: update resource error handling and re-resolution logic
([#&#8203;8907](https://redirect.github.com/grpc/grpc-go/issues/8907))
- Re-resolve all `LOGICAL_DNS` clusters simultaneously when
re-resolution is requested.
- Fail all in-flight RPCs immediately upon receipt of listener or route
resource errors, instead of allowing them to complete.

### Bug Fixes

- xds: support the LB policy configured in `LOGICAL_DNS` cluster
resources instead of defaulting to `pick_first`.
([#&#8203;8733](https://redirect.github.com/grpc/grpc-go/issues/8733))
- credentials/tls: perform per-RPC authority validation against the leaf
certificate instead of the entire peer certificate chain.
([#&#8203;8831](https://redirect.github.com/grpc/grpc-go/issues/8831))
- xds: enabling A76 ring hash endpoint keys no longer causes EDS
resources with invalid proxy metadata to be NACKed when HTTP CONNECT
(gRFC A86) is disabled.
([#&#8203;8875](https://redirect.github.com/grpc/grpc-go/issues/8875))
- xds: validate that the sum of endpoint weights in a locality does not
exceed the maximum `uint32` value.
([#&#8203;8899](https://redirect.github.com/grpc/grpc-go/issues/8899))
- Special Thanks: [@&#8203;RAVEYUS](https://redirect.github.com/RAVEYUS)
- xds: fix incorrect proto field access in the weighted round robin
(WRR) configuration where `blackout_period` was used instead of
`weight_expiration_period`.
([#&#8203;8915](https://redirect.github.com/grpc/grpc-go/issues/8915))
- Special Thanks:
[@&#8203;gregbarasch](https://redirect.github.com/gregbarasch)
- xds/rbac: handle addresses with ports in IP matchers.
([#&#8203;8990](https://redirect.github.com/grpc/grpc-go/issues/8990))

### New Features

- ringhash: enable gRFC A76 (endpoint hash keys and request hash
headers) by default.
([#&#8203;8922](https://redirect.github.com/grpc/grpc-go/issues/8922))

### Performance Improvements

- credentials/alts: pool write buffers to reduce memory allocations and
usage.
([#&#8203;8919](https://redirect.github.com/grpc/grpc-go/issues/8919))
- grpc: enable the use of pooled write buffers for buffering HTTP/2
frame writes by default. This reduces memory usage when connections are
idle. Use the
[WithSharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#WithSharedWriteBuffer)
dial option or the
[SharedWriteBuffer](https://pkg.go.dev/google.golang.org/grpc#SharedWriteBuffer)
server option to disable this feature.
([#&#8203;8957](https://redirect.github.com/grpc/grpc-go/issues/8957))
- xds/priority: stop caching child LB policies removed from the
configuration. This will help reduce memory and cpu usage when
localities are constantly switching between priorities.
([#&#8203;8997](https://redirect.github.com/grpc/grpc-go/issues/8997))
- mem: add a faster tiered buffer pool; use the experimental
[mem.NewBinaryTieredBufferPool](https://pkg.go.dev/google.golang.org/grpc/mem@master#NewBinaryTieredBufferPool)
function to create such pools.
([#&#8203;8775](https://redirect.github.com/grpc/grpc-go/issues/8775))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 10:38:36 +02:00
Toma Puljak e70658e098 fix: support getBody in otelploghttp (#8096)
Based on #7931

Adding another `getBody` PR to the chain 😄.

This one is harder to catch if it's a problem since logs aren't being
sent in case of error.

---------

Signed-off-by: Toma Puljak <toma.puljak@hotmail.com>
Co-authored-by: Robert Pająk <pellared@hotmail.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-04-01 09:48:12 +02:00
renovate[bot] 4afe468e3b fix(deps): update googleapis to 9d38bb4 (#8117)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d5a96ad` → `9d38bb4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d5a96ad` → `9d38bb4` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `d5a96ad` → `9d38bb4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 09:32:45 +02:00
renovate[bot] b9ca729776 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)
| `v5.17.1` → `v5.17.2` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.17.2?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.17.1/v5.17.2?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

###
[`v5.17.2`](https://redirect.github.com/go-git/go-git/releases/tag/v5.17.2)

[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.17.1...v5.17.2)

#### What's Changed

- build: Update module github.com/go-git/go-git/v5 to v5.17.1
\[SECURITY] (releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;1941](https://redirect.github.com/go-git/go-git/pull/1941)
- dotgit: skip writing pack files that already exist on disk by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[#&#8203;1944](https://redirect.github.com/go-git/go-git/pull/1944)

⚠️ This release fixes a bug
([#&#8203;1942](https://redirect.github.com/go-git/go-git/issues/1942))
that blocked some users from upgrading to `v5.17.1`. Thanks
[@&#8203;pskrbasu](https://redirect.github.com/pskrbasu) for reporting
it. 🙇

**Full Changelog**:
<https://github.com/go-git/go-git/compare/v5.17.1...v5.17.2>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 09:21:43 +02:00
renovate[bot] 69472ec56c chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [fossas/fossa-action](https://redirect.github.com/fossas/fossa-action)
| action | minor | `v1.8.0` → `v1.9.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>fossas/fossa-action (fossas/fossa-action)</summary>

###
[`v1.9.0`](https://redirect.github.com/fossas/fossa-action/releases/tag/v1.9.0)

[Compare
Source](https://redirect.github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0)

#### What's Changed

- Bump actions/checkout from 5 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;245](https://redirect.github.com/fossas/fossa-action/pull/245)
- Bump
[@&#8203;actions/tool-cache](https://redirect.github.com/actions/tool-cache)
from 3.0.1 to 4.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;267](https://redirect.github.com/fossas/fossa-action/pull/267)
- Bump undici from 6.23.0 to 6.24.1 by
[@&#8203;spatten](https://redirect.github.com/spatten) in
[#&#8203;275](https://redirect.github.com/fossas/fossa-action/pull/275)
- Add CI workflow to auto-rebuild dist by
[@&#8203;spatten](https://redirect.github.com/spatten) in
[#&#8203;276](https://redirect.github.com/fossas/fossa-action/pull/276)
- Bump actions/upload-artifact from 4 to 7 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;272](https://redirect.github.com/fossas/fossa-action/pull/272)
- Add CodeRabbit configuration by
[@&#8203;chad-fossa](https://redirect.github.com/chad-fossa) in
[#&#8203;271](https://redirect.github.com/fossas/fossa-action/pull/271)
- Bump [@&#8203;types/node](https://redirect.github.com/types/node) from
25.2.0 to 25.2.1 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;269](https://redirect.github.com/fossas/fossa-action/pull/269)

#### New Contributors

- [@&#8203;chad-fossa](https://redirect.github.com/chad-fossa) made
their first contribution in
[#&#8203;271](https://redirect.github.com/fossas/fossa-action/pull/271)

**Full Changelog**:
<https://github.com/fossas/fossa-action/compare/v1.8.0...v1.9.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 09:08:16 +02:00
renovate[bot] 07448a81c7 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (#8119)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector)
| `v1.54.0` → `v1.55.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.55.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.54.0/v1.55.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-collector
(go.opentelemetry.io/collector/pdata)</summary>

###
[`v1.55.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1550v01490)

##### 🛑 Breaking changes 🛑

- `pkg/service`: Remove `service_name`, `service_instance_id`, and
`service_version` as constant labels on every internal metric datapoint.
These attributes are already present in `target_info` and were being
duplicated on each series for OpenCensus backwards compatibility.
([#&#8203;14811](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14811))
Previously, the collector stamped every internal metric series (e.g.
`otelcol_process_runtime_heap_alloc_bytes`)
with `service_name`, `service_instance_id`, and `service_version` labels
to match the old OpenCensus behavior.
These attributes are now only present in the `target_info` metric, which
is the correct Prometheus/OTel convention.
Users who filter or group by these labels on individual metrics will
need to update their queries to use
  `target_info` joins instead.

##### 💡 Enhancements 💡

- `all`: Move aix/ppc64 to tier 3 support
([#&#8203;13380](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13380))

- `all`: Upgrade the profiles stability status to alpha
([#&#8203;14817](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14817))
The following components have their profiles status upgraded from
development to alpha:

  - pdata/pprofile
  - connector/forward
  - exporter/debug
  - receiver/nop
  - exporter/nop
  - exporter/otlp\_grpc
  - exporter/otlp\_http

- `cmd/mdatagen`: Add semconv reference for attributes
([#&#8203;13297](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13297))

##### 🧰 Bug fixes 🧰

- `cmd/mdatagen`: Fix entity code generation so `extra_attributes` are
emitted as resource attributes instead of entity descriptive attributes.
([#&#8203;14778](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14778))

<!-- previous-version -->

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-04-01 07:56:42 +02:00
renovate[bot] 858cabfd3c chore(deps): update codspeedhq/action action to v4.13.0 (#8114)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) |
action | minor | `v4.12.1` → `v4.13.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

###
[`v4.13.0`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.13.0)

[Compare
Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.12.1...v4.13.0)

#### Release Notes

We added support for a new experimental flag `--experimental-fair-sched`
to have valgrind use the `--fair-sched` argument.

Usage in the action:

```yaml
      - name: Run the benchmarks
        uses: CodSpeedHQ/action@v4
        env:
          CODSPEED_EXPERIMENTAL_FAIR_SCHED: "true"
        with:
          run: cargo codspeed run # Replace with your command
          mode: simulation
```

**Full Runner Changelog**:
<https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 15:01:13 +02:00
renovate[bot] 493504d12a fix(deps): update googleapis to d5a96ad (#8112)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d00831a` → `d5a96ad` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `d00831a` → `d5a96ad` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `d00831a` → `d5a96ad` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-31 09:17:24 +02:00
David Ashpole ab27913693 metricdatatest: Improve printing of diffs (#8073)
I've been getting tired of trying to parse blobs of OTLP-like text when
debugging metrics SDK test failures. This PR updating the printing of
diffs between metrics.

### Changes

This combines the `compareDiff`, and `diffSlices` functions into a
single `diffSlices` function. The `compare` parameter now returns a
`[]string` instead of a bool, to allow us to get a list of specific
differences between elements. `diffSlices` now also accepts a
`formatContext` parameter that provides the context (e.g. which scope,
which metric, etc) to print before printing the difference itself.

I've chosen to use the scope name, metric name, and attributes as the
context for scope, metric, and datapoint respectively. We could print
out more (as those are not the only identifying fields), but that is
usually enough to point to the problem.

### Example

I "broke" one of the OpenCensus tests by changing the expected SpanID
from 2 -> 1. You can see the resulting error message before and after
below:

Before:
```
--- FAIL: TestConvertMetrics (0.00s)
    --- FAIL: TestConvertMetrics/normal_Histogram,_summary,_gauges,_and_sums (0.00s)
        metric_test.go:940: [ScopeMetrics Metrics not equal:
            missing expected values:
            metricdata.Metrics{Name:"foo.com/histogram-a", Description:"a testing histogram", Unit:"1", 
Data:metricdata.Histogram[float64]{DataPoints:[]metricdata.HistogramDataPoint[float64]
{metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello", 
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world", 
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local), 
Time:time.Date(2026, time.March, 18, 15, 47, 53, 77753334, time.Local), Count:0x8, Bounds:[]float64{1, 2, 3}, 
BucketCounts:[]uint64{0x1, 0x2, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false}, 
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:100, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue{attribute.KeyValue{Key:"bool", 
Value:attribute.Value{vtype:1, numeric:0x1, stringly:"", slice:interface {}(nil)}}}, Time:time.Date(2026, time.March, 18, 15, 
47, 43, 77753334, time.Local), Value:0.8, SpanID:[]uint8{0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x1, 0x0, 
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.5, SpanID:
[]uint8{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, 
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.6, SpanID:[]uint8{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 
TraceID:[]uint8{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}, 
metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello", 
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world", 
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local), 
Time:time.Date(2026, time.March, 18, 15, 47, 53, 76753334, time.Local), Count:0xa, Bounds:[]float64{1, 2, 3}, 
BucketCounts:[]uint64{0x1, 0x4, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false}, 
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:110, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 
43, 77753334, time.Local), Value:0.9, SpanID:[]uint8{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x7, 0x0, 
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.1, SpanID:
[]uint8{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, 
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.7, SpanID:[]uint8{0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 
TraceID:[]uint8{0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}}, Temporality:0x1}}
            unexpected additional values:
            metricdata.Metrics{Name:"foo.com/histogram-a", Description:"a testing histogram", Unit:"1", 
Data:metricdata.Histogram[float64]{DataPoints:[]metricdata.HistogramDataPoint[float64]
{metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello", 
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world", 
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local), 
Time:time.Date(2026, time.March, 18, 15, 47, 53, 77753334, time.Local), Count:0x8, Bounds:[]float64{1, 2, 3}, 
BucketCounts:[]uint64{0x1, 0x2, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false}, 
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:100, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue{attribute.KeyValue{Key:"bool", 
Value:attribute.Value{vtype:1, numeric:0x1, stringly:"", slice:interface {}(nil)}}}, Time:time.Date(2026, time.March, 18, 15, 
47, 43, 77753334, time.Local), Value:0.8, SpanID:[]uint8{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x1, 0x0, 
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.5, SpanID:
[]uint8{0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, 
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.6, SpanID:[]uint8{0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 
TraceID:[]uint8{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}, 
metricdata.HistogramDataPoint[float64]{Attributes:attribute.Set{hash:0x83dbf482c8017da3, data:
[2]attribute.KeyValue{attribute.KeyValue{Key:"a", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"hello", 
slice:interface {}(nil)}}, attribute.KeyValue{Key:"b", Value:attribute.Value{vtype:4, numeric:0x0, stringly:"world", 
slice:interface {}(nil)}}}}, StartTime:time.Date(2026, time.March, 18, 15, 46, 53, 76753334, time.Local), 
Time:time.Date(2026, time.March, 18, 15, 47, 53, 76753334, time.Local), Count:0xa, Bounds:[]float64{1, 2, 3}, 
BucketCounts:[]uint64{0x1, 0x4, 0x5}, Min:metricdata.Extrema[float64]{value:0, valid:false}, 
Max:metricdata.Extrema[float64]{value:0, valid:false}, Sum:110, Exemplars:[]metricdata.Exemplar[float64]
{metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 
43, 77753334, time.Local), Value:0.9, SpanID:[]uint8{0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x7, 0x0, 
0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:
[]attribute.KeyValue(nil), Time:time.Date(2026, time.March, 18, 15, 47, 43, 77753334, time.Local), Value:1.1, SpanID:
[]uint8{0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, TraceID:[]uint8{0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 
0x0, 0x0, 0x0, 0x0}}, metricdata.Exemplar[float64]{FilteredAttributes:[]attribute.KeyValue(nil), Time:time.Date(2026, 
time.March, 18, 15, 47, 43, 77753334, time.Local), Value:2.7, SpanID:[]uint8{0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 
TraceID:[]uint8{0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}}}, Temporality:0x1}}
            ]
FAIL
FAIL    go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric    0.037s
```

After:

```
--- FAIL: TestConvertMetrics (0.00s)
    --- FAIL: TestConvertMetrics/normal_Histogram,_summary,_gauges,_and_sums (0.00s)
        metric_test.go:940: [ScopeMetrics Metrics not equal:
            Metric "foo.com/histogram-a":
                Metrics Data not equal:
                Histogram not equal:
                Histogram DataPoints not equal:
                HistogramDataPoint [a=hello,b=world]:
                        Exemplars not equal:
                        Exemplar:
                                SpanID not equal:
                                expected: [2 0 0 0 0 0 0 0]
                                actual: [1 0 0 0 0 0 0 0]
            ]
FAIL
FAIL    go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric    0.036s
```
2026-03-30 15:51:15 -04:00
renovate[bot] 3ff9ad7291 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (#8109)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/hashicorp/go-version](https://redirect.github.com/hashicorp/go-version)
| `v1.8.0` → `v1.9.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fgo-version/v1.9.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fgo-version/v1.8.0/v1.9.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>hashicorp/go-version
(github.com/hashicorp/go-version)</summary>

###
[`v1.9.0`](https://redirect.github.com/hashicorp/go-version/releases/tag/v1.9.0)

[Compare
Source](https://redirect.github.com/hashicorp/go-version/compare/v1.8.0...v1.9.0)

#### What's Changed

##### Enhancements

- Add support for prefix of any character by
[@&#8203;brondum](https://redirect.github.com/brondum) in
[#&#8203;79](https://redirect.github.com/hashicorp/go-version/pull/79)

##### Internal

- Update CHANGELOG for version 1.8.0 enhancements by
[@&#8203;sonamtenzin2](https://redirect.github.com/sonamtenzin2) in
[#&#8203;178](https://redirect.github.com/hashicorp/go-version/pull/178)
- Bump the github-actions-backward-compatible group across 1 directory
with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;179](https://redirect.github.com/hashicorp/go-version/pull/179)
- Bump the github-actions-breaking group with 4 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;180](https://redirect.github.com/hashicorp/go-version/pull/180)
- Bump the github-actions-backward-compatible group with 3 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;182](https://redirect.github.com/hashicorp/go-version/pull/182)
- Update GitHub Actions to trigger on pull requests and update go
version by
[@&#8203;ssagarverma](https://redirect.github.com/ssagarverma) in
[#&#8203;185](https://redirect.github.com/hashicorp/go-version/pull/185)
- Bump actions/upload-artifact from 6.0.0 to 7.0.0 in the
github-actions-breaking group across 1 directory by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;183](https://redirect.github.com/hashicorp/go-version/pull/183)
- Bump the github-actions-backward-compatible group across 1 directory
with 2 updates by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;186](https://redirect.github.com/hashicorp/go-version/pull/186)

#### New Contributors

- [@&#8203;sonamtenzin2](https://redirect.github.com/sonamtenzin2) made
their first contribution in
[#&#8203;178](https://redirect.github.com/hashicorp/go-version/pull/178)
- [@&#8203;brondum](https://redirect.github.com/brondum) made their
first contribution in
[#&#8203;79](https://redirect.github.com/hashicorp/go-version/pull/79)
- [@&#8203;ssagarverma](https://redirect.github.com/ssagarverma) made
their first contribution in
[#&#8203;185](https://redirect.github.com/hashicorp/go-version/pull/185)

**Full Changelog**:
<https://github.com/hashicorp/go-version/compare/v1.8.0...v1.9.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEwMC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 15:05:14 +02:00
renovate[bot] f932c7e165 chore(deps): update github/codeql-action action to v4.35.1 (#8102)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.35.0` → `v4.35.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.35.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.35.0...v4.35.1)

- Fix incorrect minimum required Git version for [improved incremental
analysis](https://redirect.github.com/github/roadmap/issues/1158): it
should have been 2.36.0, not 2.11.0.
[#&#8203;3781](https://redirect.github.com/github/codeql-action/pull/3781)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 09:54:26 +02:00
renovate[bot] c2abc1e22d chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (#8103)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/lucasb-eyer/go-colorful](https://redirect.github.com/lucasb-eyer/go-colorful)
| `v1.3.0` → `v1.4.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flucasb-eyer%2fgo-colorful/v1.4.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flucasb-eyer%2fgo-colorful/v1.3.0/v1.4.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>lucasb-eyer/go-colorful
(github.com/lucasb-eyer/go-colorful)</summary>

###
[`v1.4.0`](https://redirect.github.com/lucasb-eyer/go-colorful/releases/tag/v1.4.0)

[Compare
Source](https://redirect.github.com/lucasb-eyer/go-colorful/compare/v1.3.0...v1.4.0)

This release adds support for CSS Color Level 4 wide-gamut RGB color
spaces, along with D50 XYZ helpers and a small `HexColor` usability
improvement.

#### Added

- Constructors, decomposers, and blend functions for the CSS Color Level
4 wide-gamut RGB color spaces `DisplayP3`, `A98Rgb`, `ProPhotoRgb`, and
`Rec2020`
([#&#8203;81](https://redirect.github.com/lucasb-eyer/go-colorful/issues/81))
- `XyzD50`, `Color.XyzD50`, `D50ToD65`, and `D65ToD50` for working with
D50-based color spaces
([#&#8203;81](https://redirect.github.com/lucasb-eyer/go-colorful/issues/81))
- `HexColor` now implements `fmt.Stringer`

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 09:34:34 +02:00
renovate[bot] 624f64631b chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (#8106)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git)
| `v5.17.0` → `v5.17.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-git%2fgo-git%2fv5/v5.17.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-git%2fgo-git%2fv5/v5.17.0/v5.17.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

###
[`v5.17.1`](https://redirect.github.com/go-git/go-git/releases/tag/v5.17.1)

[Compare
Source](https://redirect.github.com/go-git/go-git/compare/v5.17.0...v5.17.1)

#### What's Changed

- build: Update module github.com/cloudflare/circl to v1.6.3 \[SECURITY]
(releases/v5.x) by
[@&#8203;go-git-renovate](https://redirect.github.com/go-git-renovate)\[bot]
in [#&#8203;1930](https://redirect.github.com/go-git/go-git/pull/1930)
- \[v5] plumbing: format/index, Improve v4 entry name validation by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[#&#8203;1935](https://redirect.github.com/go-git/go-git/pull/1935)
- \[v5] plumbing: format/idxfile, Fix version and fanout checks by
[@&#8203;pjbgf](https://redirect.github.com/pjbgf) in
[#&#8203;1937](https://redirect.github.com/go-git/go-git/pull/1937)

**Full Changelog**:
<https://github.com/go-git/go-git/compare/v5.17.0...v5.17.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 09:27:14 +02:00
renovate[bot] 47e4b06017 chore(deps): update actions/setup-go action to v6.4.0 (#8107)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/setup-go](https://redirect.github.com/actions/setup-go) |
action | minor | `v6.3.0` → `v6.4.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>actions/setup-go (actions/setup-go)</summary>

###
[`v6.4.0`](https://redirect.github.com/actions/setup-go/releases/tag/v6.4.0)

[Compare
Source](https://redirect.github.com/actions/setup-go/compare/v6.3.0...v6.4.0)

##### What's Changed

##### Enhancement

- Add go-download-base-url input for custom Go distributions by
[@&#8203;gdams](https://redirect.github.com/gdams) in
[#&#8203;721](https://redirect.github.com/actions/setup-go/pull/721)

##### Dependency update

- Upgrade minimatch from 3.1.2 to 3.1.5 by
[@&#8203;dependabot](https://redirect.github.com/dependabot) in
[#&#8203;727](https://redirect.github.com/actions/setup-go/pull/727)

##### Documentation update

- Rearrange README.md, add advanced-usage.md by
[@&#8203;priyagupta108](https://redirect.github.com/priyagupta108) in
[#&#8203;724](https://redirect.github.com/actions/setup-go/pull/724)
- Fix Microsoft build of Go link by
[@&#8203;gdams](https://redirect.github.com/gdams) in
[#&#8203;734](https://redirect.github.com/actions/setup-go/pull/734)

##### New Contributors

- [@&#8203;gdams](https://redirect.github.com/gdams) made their first
contribution in
[#&#8203;721](https://redirect.github.com/actions/setup-go/pull/721)

**Full Changelog**:
<https://github.com/actions/setup-go/compare/v6...v6.4.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45NC4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTQuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-30 09:17:19 +02:00
renovate[bot] eb698ed5ce chore(deps): update github/codeql-action action to v4.35.0 (#8101)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.34.1` → `v4.35.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.35.0`](https://redirect.github.com/github/codeql-action/releases/tag/v4.35.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.34.1...v4.35.0)

- Reduced the minimum Git version required for [improved incremental
analysis](https://redirect.github.com/github/roadmap/issues/1158) from
2.38.0 to 2.11.0.
[#&#8203;3767](https://redirect.github.com/github/codeql-action/pull/3767)
- Update default CodeQL bundle version to
[2.25.1](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.25.1).
[#&#8203;3773](https://redirect.github.com/github/codeql-action/pull/3773)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45My4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 14:12:30 +01:00
renovate[bot] 099a8d1263 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (#8100)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/butuzov/ireturn](https://redirect.github.com/butuzov/ireturn)
| `v0.4.0` → `v0.4.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbutuzov%2fireturn/v0.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbutuzov%2fireturn/v0.4.0/v0.4.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>butuzov/ireturn (github.com/butuzov/ireturn)</summary>

###
[`v0.4.1`](https://redirect.github.com/butuzov/ireturn/releases/tag/v0.4.1)

[Compare
Source](https://redirect.github.com/butuzov/ireturn/compare/v0.4.0...v0.4.1)

#### Changelog

-
[`e838a2d`](https://redirect.github.com/butuzov/ireturn/commit/e838a2dee944f8b38eeea39a468ab685156da7b2)
Update Go version requirement to 1.25
([#&#8203;127](https://redirect.github.com/butuzov/ireturn/issues/127))
-
[`e203b16`](https://redirect.github.com/butuzov/ireturn/commit/e203b1697899911b6afd54491f99bb79e33289cf)
Update readme.md
([#&#8203;107](https://redirect.github.com/butuzov/ireturn/issues/107))
-
[`0db6434`](https://redirect.github.com/butuzov/ireturn/commit/0db6434fcd64f04bb69eb6dd88d2350a2e8df65c)
build(deps): bump actions/checkout from 4 to 6
([#&#8203;115](https://redirect.github.com/butuzov/ireturn/issues/115))
-
[`ea5d5d3`](https://redirect.github.com/butuzov/ireturn/commit/ea5d5d3ee2b749ed88ffaa89a37138cc4098d5c5)
chore: update CI
([#&#8203;119](https://redirect.github.com/butuzov/ireturn/issues/119))
-
[`c7bfd5b`](https://redirect.github.com/butuzov/ireturn/commit/c7bfd5b308585d806737475cbb00095fbc52b6ef)
chore: update dependencies
([#&#8203;122](https://redirect.github.com/butuzov/ireturn/issues/122))
-
[`46c7ed6`](https://redirect.github.com/butuzov/ireturn/commit/46c7ed6151b68be7eabd4f3ae3b7d17b831568cc)
chore: use an interface
([#&#8203;123](https://redirect.github.com/butuzov/ireturn/issues/123))
-
[`ae28990`](https://redirect.github.com/butuzov/ireturn/commit/ae289905dc117bce0bfebf7e2839af15d58db286)
chores: improve code coverage reporting
([#&#8203;125](https://redirect.github.com/butuzov/ireturn/issues/125))
-
[`8ddfd4a`](https://redirect.github.com/butuzov/ireturn/commit/8ddfd4a79889fe3f588050767652d46ca6389548)
chres: update std to go1.26
([#&#8203;124](https://redirect.github.com/butuzov/ireturn/issues/124))
-
[`901815d`](https://redirect.github.com/butuzov/ireturn/commit/901815d0fb666519794019de9c9bd8e521f6d8f5)
fix: remove found field
([#&#8203;120](https://redirect.github.com/butuzov/ireturn/issues/120))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45My4wIiwidXBkYXRlZEluVmVyIjoiNDMuOTMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 14:04:13 +01:00
renovate[bot] 0d3cd1d917 chore(deps): update module github.com/tetafro/godot to v1.5.6 (#8099)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/tetafro/godot](https://redirect.github.com/tetafro/godot)
| `v1.5.4` → `v1.5.6` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2ftetafro%2fgodot/v1.5.6?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2ftetafro%2fgodot/v1.5.4/v1.5.6?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>tetafro/godot (github.com/tetafro/godot)</summary>

###
[`v1.5.6`](https://redirect.github.com/tetafro/godot/releases/tag/v1.5.6)

[Compare
Source](https://redirect.github.com/tetafro/godot/compare/v1.5.5...v1.5.6)

#### Changelog

-
[`88cf245`](https://redirect.github.com/tetafro/godot/commit/88cf24521d87cf1a946c5b876f10713945dec6fd)
Fix working with //line directive
-
[`c1ee1ed`](https://redirect.github.com/tetafro/godot/commit/c1ee1eda4d664955c4f54d35fc4e6f68db1710cb)
Update golangci-lint to v2.
-
[`fd5b12e`](https://redirect.github.com/tetafro/godot/commit/fd5b12eeb894312c97bcb8cc422587df6cd88a5e)
Update golangci-lint to v2.8.

###
[`v1.5.5`](https://redirect.github.com/tetafro/godot/releases/tag/v1.5.5)

[Compare
Source](https://redirect.github.com/tetafro/godot/compare/v1.5.4...v1.5.5)

#### Changelog

-
[`f4f097a`](https://redirect.github.com/tetafro/godot/commit/f4f097a009c5934967e3ff425693418c1a8e3a76)
Fix goreleaser configs.
-
[`a7be78a`](https://redirect.github.com/tetafro/godot/commit/a7be78ae484e14ad889c30f9342f12ff80767831)
Fix inline comments replacements.

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-27 10:51:57 +01:00
renovate[bot] 5c12b73f7f chore(deps): update codecov/codecov-action action to v6 (#8098)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)
| action | major | `v5.5.4` → `v6.0.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v6.0.0`](https://redirect.github.com/codecov/codecov-action/compare/v5.5.4...v6.0.0)

[Compare
Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.4...v6.0.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 19:12:43 +01:00
renovate[bot] b8ea873e38 chore(deps): update codecov/codecov-action action to v5.5.4 (#8097)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)
| action | patch | `v5.5.3` → `v5.5.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v5.5.4`](https://redirect.github.com/codecov/codecov-action/releases/tag/v5.5.4)

[Compare
Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.3...v5.5.4)

This is a mirror of `v5.5.2`. `v6` will be released which requires
`node24`

#### What's Changed

- Revert "build(deps): bump actions/github-script from 7.0.1 to 8.0.0"
by
[@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov)
in
[#&#8203;1926](https://redirect.github.com/codecov/codecov-action/pull/1926)
- chore(release): 5.5.4 by
[@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov)
in
[#&#8203;1927](https://redirect.github.com/codecov/codecov-action/pull/1927)

**Full Changelog**:
<https://github.com/codecov/codecov-action/compare/v5.5.3...v5.5.4>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45MS41IiwidXBkYXRlZEluVmVyIjoiNDMuOTEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-26 18:02:20 +01:00
renovate[bot] 853704bf99 chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (#8095)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/pelletier/go-toml/v2](https://redirect.github.com/pelletier/go-toml)
| `v2.2.4` → `v2.3.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpelletier%2fgo-toml%2fv2/v2.3.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpelletier%2fgo-toml%2fv2/v2.2.4/v2.3.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>pelletier/go-toml (github.com/pelletier/go-toml/v2)</summary>

###
[`v2.3.0`](https://redirect.github.com/pelletier/go-toml/compare/v2.2.4...v2.3.0)

[Compare
Source](https://redirect.github.com/pelletier/go-toml/compare/v2.2.4...v2.3.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-24 18:36:39 +01:00
Matthieu MOREL e9449e3b34 chore: fix noctx issues (#8008)
***Description***

Fixes
[noctx](https://golangci-lint.run/docs/linters/configuration/#noctx)
issues and enables the linter

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-23 14:28:38 +01:00
renovate[bot] 717c1b3505 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (#8092)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/golangci/golangci-lint/v2](https://redirect.github.com/golangci/golangci-lint)
| `v2.11.3` → `v2.11.4` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgolangci%2fgolangci-lint%2fv2/v2.11.4?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgolangci%2fgolangci-lint%2fv2/v2.11.3/v2.11.4?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>golangci/golangci-lint
(github.com/golangci/golangci-lint/v2)</summary>

###
[`v2.11.4`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2114)

[Compare
Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.3...v2.11.4)

*Released on 2026-03-22*

1. Linters bug fixes
   - `govet-modernize`: from 0.42.0 to 0.43.0
   - `noctx`: from 0.5.0 to 0.5.1
   - `sqlclosecheck`: from 0.5.1 to 0.6.0

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-22 22:32:12 +01:00
renovate[bot] edcfb1a5ab chore(deps): update github/codeql-action action to v4.34.1 (#8090)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | patch | `v4.34.0` → `v4.34.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.34.1`](https://redirect.github.com/github/codeql-action/releases/tag/v4.34.1)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.34.0...v4.34.1)

- Downgrade default CodeQL bundle version to
[2.24.3](https://redirect.github.com/github/codeql-action/releases/tag/codeql-bundle-v2.24.3)
due to issues with a small percentage of Actions and JavaScript
analyses.
[#&#8203;3762](https://redirect.github.com/github/codeql-action/pull/3762)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-22 09:33:34 +01:00
renovate[bot] b8301a29d9 chore(deps): update codspeedhq/action action to v4.12.1 (#8089)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [CodSpeedHQ/action](https://redirect.github.com/CodSpeedHQ/action) |
action | minor | `v4.11.1` → `v4.12.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>CodSpeedHQ/action (CodSpeedHQ/action)</summary>

###
[`v4.12.1`](https://redirect.github.com/CodSpeedHQ/action/releases/tag/v4.12.1)

[Compare
Source](https://redirect.github.com/CodSpeedHQ/action/compare/v4.11.1...v4.12.1)

#### Release Notes

In this release, we've focused on improving the local user experience.\
We've revamped the output of the cli to provide tailed logs while the
benchmarks are being executed, and polished a bit the display of results
after your run.

We also added support to run multiple modes in a single command
invocation, both for local and CI runs!\
For instance, that means you can now do
`codspeed run --mode simulation --mode memory --mode walltime -- cargo
codspeed run`

Last but not least, you can now define `entrypoints` in your project
config

```yaml

# codspeed.yml
# List of commands that are run when running `codspeed run` without further arguments
benchmarks:
  - name: My ls command
    # Mutually exclusive with entrypoint
    # Expects a command that will run a benchmark for an arbitrary command
    exec: ls -al /usr/bin
   
  - name: My pytest-codspeed benchmark
    # Mutually exclusive with exec
    # Expects a command that will run a benchmark program that is using a codspeed integration
    entrypoint: pytest --codspeed src
```

Fix a bug where memory profiling with `codspeed exec` for binaries that
use statically-linked allocators (e.g. jemalloc in Rust). Previously, we
reported incorrect memory usage because it didn't attach to the
statically linked allocators.

#### Details

##### <!-- 0 -->🚀 Features

- Set NODE\_OPTIONS to get perf map from node by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;267](https://redirect.github.com/CodSpeedHQ/runner/pull/267)
- Disable node instrospection for exec-harness by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Support CODSPEED\_MEMTRACK\_BINARIES for static allocator discovery by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Gracefully handle logs from the runner while rolling buffer is active
by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Add `--show-full-output` to bypass the new rolling buffer by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Add a spinner while waiting for results by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Clean up group headers and emoji usage, make the executor title not
dim after run by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Add rolling buffer to display logs from executors by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Polish impact reporting and upload feedback by
[@&#8203;art049](https://redirect.github.com/art049)
- Add color-coded metrics to benchmark result tables by
[@&#8203;art049](https://redirect.github.com/art049)
- Enhance local logger with richer visual hierarchy by
[@&#8203;art049](https://redirect.github.com/art049)
- Style the ASCII banner with CodSpeed orange by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Enforce CodSpeed CLI as single source of truth for all measurements by
[@&#8203;art049](https://redirect.github.com/art049)
- Add optimize and setup-harness skills by
[@&#8203;art049](https://redirect.github.com/art049)
- Add the cursor plugin by
[@&#8203;art049](https://redirect.github.com/art049)
- Check if user is logged in before doing a local run by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;263](https://redirect.github.com/CodSpeedHQ/runner/pull/263)
- Skip respository resolve with `--skip-upload` by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Use an enum and fix schema for entry/entrypoint by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;260](https://redirect.github.com/CodSpeedHQ/runner/pull/260)
- Accept a mix of entrypoint and exec targets in project config by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Introduce OrchestratorConfig and ExecutorConfig by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Unify run\_part\_id suffix computation between ci providers and local
by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Add the claude plugin by
[@&#8203;art049](https://redirect.github.com/art049)
- Add local\_data to upload metadata by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Use repositoryOverview resolver rather than repository by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

##### <!-- 1 -->🐛 Bug Fixes

- Use fp unwinding mode when running `go test` by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;269](https://redirect.github.com/CodSpeedHQ/runner/pull/269)
- Improve error message when no benchmarks are found by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;264](https://redirect.github.com/CodSpeedHQ/runner/pull/264)

##### <!-- 2 -->🏗️ Refactor

- Extract shared test helpers for compile and track by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Pass extra env via config instead of unsafe set\_var by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias)
- Remove the closure argument to poll in favor of polling options by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Move EXEC\_HARNESS\_VERSION and EXEC\_HARNESS\_COMMAND to orchestrator
mod by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Flatten orchestrator execution loop over (command, mode) pairs by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
- Introduce Orchestrator to support multi-mode execution by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;259](https://redirect.github.com/CodSpeedHQ/runner/pull/259)
- Consolidate poll\_results into upload module by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)

##### <!-- 3 -->📚 Documentation

- docs: add documentation about multiple modes in a single run by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;195](https://redirect.github.com/CodSpeedHQ/action/pull/195)

##### <!-- 6 -->🧪 Testing

- Add spawn wrapper integration test for static allocator discovery by
[@&#8203;not-matthias](https://redirect.github.com/not-matthias) in
[#&#8203;266](https://redirect.github.com/CodSpeedHQ/runner/pull/266)

##### <!-- 7 -->⚙️ Internals

- Bump linux-perf-data to use upstream version by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;271](https://redirect.github.com/CodSpeedHQ/runner/pull/271)
- Remove lazy\_static in favor of LazyLock by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;265](https://redirect.github.com/CodSpeedHQ/runner/pull/265)
- Rename skill directories with codspeed prefix by
[@&#8203;art049](https://redirect.github.com/art049)
- Move architecture docs out of this repo by
[@&#8203;GuillaumeLagrange](https://redirect.github.com/GuillaumeLagrange)
in [#&#8203;262](https://redirect.github.com/CodSpeedHQ/runner/pull/262)
- Typo in plugin description by
[@&#8203;art049](https://redirect.github.com/art049)
- Bump memtrack version
- chore: bump runner version to 4.12.0 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;194](https://redirect.github.com/CodSpeedHQ/action/pull/194)
- chore: bump runner version to 4.12.1 by
[@&#8203;github-actions](https://redirect.github.com/github-actions)\[bot]
in [#&#8203;196](https://redirect.github.com/CodSpeedHQ/action/pull/196)

#### Install codspeed-runner 4.12.1

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-installer.sh | sh
```

#### Download codspeed-runner 4.12.1

| File | Platform | Checksum |
|
-----------------------------------------------------------------------------------------------------------------------------------------------------------------------
| ---------------- |
-------------------------------------------------------------------------------------------------------------------------------------
|
|
[codspeed-runner-aarch64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz)
| ARM64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-aarch64-unknown-linux-musl.tar.gz.sha256)
|
|
[codspeed-runner-x86\_64-unknown-linux-musl.tar.gz](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz)
| x64 MUSL Linux |
[checksum](https://redirect.github.com/CodSpeedHQ/codspeed/releases/download/v4.12.1/codspeed-runner-x86_64-unknown-linux-musl.tar.gz.sha256)
|

**Full Runner Changelog**:
<https://github.com/CodSpeedHQ/codspeed/blob/main/CHANGELOG.md>

**Full Changelog**:
<https://github.com/CodSpeedHQ/action/compare/v4.11.1...v4.12.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 18:13:25 +01:00
renovate[bot] 94ec25a242 chore(deps): update github/codeql-action action to v4.34.0 (#8088)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github/codeql-action](https://redirect.github.com/github/codeql-action)
| action | minor | `v4.33.0` → `v4.34.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>github/codeql-action (github/codeql-action)</summary>

###
[`v4.34.0`](https://redirect.github.com/github/codeql-action/compare/v4.33.0...v4.34.0)

[Compare
Source](https://redirect.github.com/github/codeql-action/compare/v4.33.0...v4.34.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 13:42:27 +01:00
Peter Nguyen 015ed1a7a4 sdk/metric: Support specifying cardinality limits per instrument kinds (#7855)
Previously, we only had `WithCardinalityLimit()`, which adds a global
cardinality limit.

This PR adds a new API on the reader `WithCardinalityLimitSelector` that
can be used to specify limits per instrument kinds.


[spec](https://github.com/open-telemetry/opentelemetry-specification/blob/49845849d2d8df07059f82033f39e96c561927cf/specification/metrics/sdk.md?plain=1#L1282)


[schema](https://github.com/open-telemetry/opentelemetry-configuration/blob/3dbebe292912f0c0c96ce5dcfefc45dfe5e20f39/snippets/CardinalityLimits_kitchen_sink.yaml#L11-L18)

closes #7786

---------

Co-authored-by: David Ashpole <dashpole@google.com>
Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-20 11:24:19 +01:00
renovate[bot] e604da5eec fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#8075)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) |
`v1.79.2` → `v1.79.3` |
![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.79.3?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.79.2/v1.79.3?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

### GitHub Vulnerability Alerts

####
[CVE-2026-33186](https://redirect.github.com/grpc/grpc-go/security/advisories/GHSA-p77j-4mvh-x3m3)

### Impact
_What kind of vulnerability is it? Who is impacted?_

It is an **Authorization Bypass** resulting from **Improper Input
Validation** of the HTTP/2 `:path` pseudo-header.

The gRPC-Go server was too lenient in its routing logic, accepting
requests where the `:path` omitted the mandatory leading slash (e.g.,
`Service/Method` instead of `/Service/Method`). While the server
successfully routed these requests to the correct handler, authorization
interceptors (including the official `grpc/authz` package) evaluated the
raw, non-canonical path string. Consequently, "deny" rules defined using
canonical paths (starting with `/`) failed to match the incoming
request, allowing it to bypass the policy if a fallback "allow" rule was
present.

**Who is impacted?**
This affects gRPC-Go servers that meet both of the following criteria:
1. They use path-based authorization interceptors, such as the official
RBAC implementation in `google.golang.org/grpc/authz` or custom
interceptors relying on `info.FullMethod` or `grpc.Method(ctx)`.
2. Their security policy contains specific "deny" rules for canonical
paths but allows other requests by default (a fallback "allow" rule).

The vulnerability is exploitable by an attacker who can send raw HTTP/2
frames with malformed `:path` headers directly to the gRPC server.

### Patches
_Has the problem been patched? What versions should users upgrade to?_

Yes, the issue has been patched. The fix ensures that any request with a
`:path` that does not start with a leading slash is immediately rejected
with a `codes.Unimplemented` error, preventing it from reaching
authorization interceptors or handlers with a non-canonical path string.

Users should upgrade to the following versions (or newer):
* **v1.79.3**
* The latest **master** branch.

It is recommended that all users employing path-based authorization
(especially `grpc/authz`) upgrade as soon as the patch is available in a
tagged release.

### Workarounds
_Is there a way for users to fix or remediate the vulnerability without
upgrading?_

While upgrading is the most secure and recommended path, users can
mitigate the vulnerability using one of the following methods:

#### 1. Use a Validating Interceptor (Recommended Mitigation)
Add an "outermost" interceptor to your server that validates the path
before any other authorization logic runs:

```go
func pathValidationInterceptor(ctx context.Context, req any, info *grpc.UnaryServerInfo, handler grpc.UnaryHandler) (any, error) {
    if info.FullMethod == "" || info.FullMethod[0] != '/' {
        return nil, status.Errorf(codes.Unimplemented, "malformed method name")
    }   
    return handler(ctx, req)
}

// Ensure this is the FIRST interceptor in your chain
s := grpc.NewServer(
    grpc.ChainUnaryInterceptor(pathValidationInterceptor, authzInterceptor),
)
```

#### 2. Infrastructure-Level Normalization
If your gRPC server is behind a reverse proxy or load balancer (such as
Envoy, NGINX, or an L7 Cloud Load Balancer), ensure it is configured to
enforce strict HTTP/2 compliance for pseudo-headers and reject or
normalize requests where the `:path` header does not start with a
leading slash.

#### 3. Policy Hardening
Switch to a "default deny" posture in your authorization policies
(explicitly listing all allowed paths and denying everything else) to
reduce the risk of bypasses via malformed inputs.

---

### Release Notes

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

###
[`v1.79.3`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.79.3):
Release 1.79.3

[Compare
Source](https://redirect.github.com/grpc/grpc-go/compare/v1.79.2...v1.79.3)

### Security

- server: fix an authorization bypass where malformed :path headers
(missing the leading slash) could bypass path-based restricted "deny"
rules in interceptors like `grpc/authz`. Any request with a
non-canonical path is now immediately rejected with an `Unimplemented`
error.
([#&#8203;8981](https://redirect.github.com/grpc/grpc-go/issues/8981))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 11:13:47 +01:00
renovate[bot] 8742ba9cdc chore(deps): update golang.org/x/telemetry digest to b6b0c46 (#8076)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [golang.org/x/telemetry](https://pkg.go.dev/golang.org/x/telemetry) |
indirect | digest | `1546bf4` → `b6b0c46` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:58:43 +01:00
renovate[bot] 8ae173e566 fix(deps): update googleapis to d00831a (#8078)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[google.golang.org/genproto/googleapis/api](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `84a4fc4` → `d00831a` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| indirect | digest | `84a4fc4` → `d00831a` |
|
[google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto)
| require | digest | `84a4fc4` → `d00831a` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about these
updates again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:47:36 +01:00
renovate[bot] e6120a6f77 chore(deps): update module github.com/fatih/color to v1.19.0 (#8087)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
| [github.com/fatih/color](https://redirect.github.com/fatih/color) |
`v1.18.0` → `v1.19.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2ffatih%2fcolor/v1.19.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2ffatih%2fcolor/v1.18.0/v1.19.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>fatih/color (github.com/fatih/color)</summary>

###
[`v1.19.0`](https://redirect.github.com/fatih/color/releases/tag/v1.19.0)

[Compare
Source](https://redirect.github.com/fatih/color/compare/v1.18.0...v1.19.0)

#### What's Changed

- Bump golang.org/x/sys from 0.25.0 to 0.28.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;246](https://redirect.github.com/fatih/color/pull/246)
- Fix for issue
[#&#8203;230](https://redirect.github.com/fatih/color/issues/230)
set/unsetwriter symmetric wrt color support detection by
[@&#8203;ataypamart](https://redirect.github.com/ataypamart) in
[#&#8203;243](https://redirect.github.com/fatih/color/pull/243)
- chore: go mod cleanup by
[@&#8203;sashamelentyev](https://redirect.github.com/sashamelentyev) in
[#&#8203;244](https://redirect.github.com/fatih/color/pull/244)
- Bump golang.org/x/sys from 0.28.0 to 0.30.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;249](https://redirect.github.com/fatih/color/pull/249)
- Bump github.com/mattn/go-colorable from 0.1.13 to 0.1.14 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;248](https://redirect.github.com/fatih/color/pull/248)
- Update CI and go deps by
[@&#8203;fatih](https://redirect.github.com/fatih) in
[#&#8203;254](https://redirect.github.com/fatih/color/pull/254)
- Bump golang.org/x/sys from 0.31.0 to 0.37.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;268](https://redirect.github.com/fatih/color/pull/268)
- fix: include escape codes in byte counts from `Fprint`, `Fprintf` by
[@&#8203;qualidafial](https://redirect.github.com/qualidafial) in
[#&#8203;282](https://redirect.github.com/fatih/color/pull/282)
- Bump golang.org/x/sys from 0.37.0 to 0.40.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;277](https://redirect.github.com/fatih/color/pull/277)
- fix: add nil check for os.Stdout to prevent panic on Windows services
by [@&#8203;majiayu000](https://redirect.github.com/majiayu000) in
[#&#8203;275](https://redirect.github.com/fatih/color/pull/275)
- Bump dominikh/staticcheck-action from 1.3.1 to 1.4.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;259](https://redirect.github.com/fatih/color/pull/259)
- Bump actions/checkout from 4 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;273](https://redirect.github.com/fatih/color/pull/273)
- Optimize Color.Equals performance (O(n²) → O(n)) by
[@&#8203;UnSubble](https://redirect.github.com/UnSubble) in
[#&#8203;269](https://redirect.github.com/fatih/color/pull/269)
- Bump actions/setup-go from 5 to 6 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;266](https://redirect.github.com/fatih/color/pull/266)

#### New Contributors

- [@&#8203;ataypamart](https://redirect.github.com/ataypamart) made
their first contribution in
[#&#8203;243](https://redirect.github.com/fatih/color/pull/243)
- [@&#8203;sashamelentyev](https://redirect.github.com/sashamelentyev)
made their first contribution in
[#&#8203;244](https://redirect.github.com/fatih/color/pull/244)
- [@&#8203;qualidafial](https://redirect.github.com/qualidafial) made
their first contribution in
[#&#8203;282](https://redirect.github.com/fatih/color/pull/282)
- [@&#8203;majiayu000](https://redirect.github.com/majiayu000) made
their first contribution in
[#&#8203;275](https://redirect.github.com/fatih/color/pull/275)
- [@&#8203;UnSubble](https://redirect.github.com/UnSubble) made their
first contribution in
[#&#8203;269](https://redirect.github.com/fatih/color/pull/269)

**Full Changelog**:
<https://github.com/fatih/color/compare/v1.18.0...v1.19.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:35:56 +01:00
renovate[bot] 69e9181c6b chore(deps): update actions/cache action to v5.0.4 (#8079)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [actions/cache](https://redirect.github.com/actions/cache) | action |
patch | `v5.0.3` → `v5.0.4` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>actions/cache (actions/cache)</summary>

###
[`v5.0.4`](https://redirect.github.com/actions/cache/compare/v5.0.3...v5.0.4)

[Compare
Source](https://redirect.github.com/actions/cache/compare/v5.0.3...v5.0.4)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:27:48 +01:00
renovate[bot] 09fb3e0f17 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (#8086)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector)
| `v1.53.0` → `v1.54.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.54.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.53.0/v1.54.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-collector
(go.opentelemetry.io/collector/pdata)</summary>

###
[`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480)

#####  Known Issues 

- `service`: The collector's internal Prometheus metrics endpoint
(`:8888`) now emits OTel service labels with underscore
names (`service_name`, `service_instance_id`, `service_version`) instead
of dot-notation names (`service.name`,
`service.instance.id`, `service.version`). Users scraping this endpoint
with the Prometheus receiver will see these renamed
labels in resource and datapoint attributes. As a workaround, add the
following `metric_relabel_configs` to your scrape
  config in prometheus receiver:
  ```yaml
  metric_relabel_configs:
    - source_labels: [service_name]
      target_label: service.name
    - source_labels: [service_instance_id]
      target_label: service.instance.id
    - source_labels: [service_version]
      target_label: service.version
    - regex: service_name|service_instance_id|service_version
      action: labeldrop
  ```
See
[#&#8203;14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814)
for details and updates.

##### 🛑 Breaking changes 🛑

- `all`: Change metric units to be singular to match OTel specification,
e.g. `{requests}` -> `{request}`
([#&#8203;14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753))

##### 💡 Enhancements 💡

- `cmd/mdatagen`: Add deprecated\_type field to allow specifying an
alias for component types.
([#&#8203;14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718))
- `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that
enforces entity-metric associations at compile time
([#&#8203;14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659))
- `cmd/mdatagen`: Skip generating reaggregation config options for
metrics that have no aggregatable attributes.
([#&#8203;14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689))
- `pkg/service`: The internal status reporter no longer drops repeated
Ok and RecoverableError statuses
([#&#8203;14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282))
Status events can now carry metadata and there's value in allowing them
to be emitted despite the status value itself
  not changing.

##### 🧰 Bug fixes 🧰

- `cmd/builder`: Add `.exe` to output binary names when building for
Windows targets.
([#&#8203;12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591))

- `exporter/debug`: Add printing of metric metadata in detailed
verbosity.
([#&#8203;14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667))

- `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are
called before the OTLP exporter initializes its gRPC clients.
([#&#8203;14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663))
  When the sending queue and retry are disabled, calling ConsumeTraces,
ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter
initializes its gRPC clients could cause a nil pointer dereference
panic.
  The push methods now return an error instead of panicking.

- `exporter/otlp_http`: Show the actual destination URL in error
messages when request URL is modified by middleware.
([#&#8203;14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673))
Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent
misleading error logs when a middleware extension dynamically updates
the endpoint.

- `pdata/pprofile`: Switch the dictionary of dictionary tables entries
only once when merging profiles
([#&#8203;14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709))
For dictionary table data, we used to switch their dictionaries when
doing
  the switch for the data that uses them.
  However, when an entry is associated with multiple other data (several
  samples can use the same stack), we would have been switching the
  dictionaries of the entry multiple times.

  We now switch dictionaries for dictionary table data only once, before
  switching the resource profiles.

<!-- previous-version -->

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:18:06 +01:00
renovate[bot] 68f28d61db chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (#8081)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/ProtonMail/go-crypto](https://redirect.github.com/ProtonMail/go-crypto)
| `v1.4.0` → `v1.4.1` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fProtonMail%2fgo-crypto/v1.4.1?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fProtonMail%2fgo-crypto/v1.4.0/v1.4.1?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>ProtonMail/go-crypto
(github.com/ProtonMail/go-crypto)</summary>

###
[`v1.4.1`](https://redirect.github.com/ProtonMail/go-crypto/releases/tag/v1.4.1)

[Compare
Source](https://redirect.github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1)

##### What's Changed

- Properly handle ECC keys with invalid points in
[#&#8203;304](https://redirect.github.com/ProtonMail/go-crypto/pull/304)

**Full Changelog**:
<https://github.com/ProtonMail/go-crypto/compare/v1.4.0...v1.4.1>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 10:08:53 +01:00
renovate[bot] 47509accbc chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (#8084)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/securego/gosec/v2](https://redirect.github.com/securego/gosec)
| `v2.24.8-0.20260316110558-744bfb5ef06e` → `v2.25.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsecurego%2fgosec%2fv2/v2.25.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsecurego%2fgosec%2fv2/v2.24.8-0.20260316110558-744bfb5ef06e/v2.25.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>securego/gosec (github.com/securego/gosec/v2)</summary>

###
[`v2.25.0`](https://redirect.github.com/securego/gosec/releases/tag/v2.25.0)

[Compare
Source](https://redirect.github.com/securego/gosec/compare/v2.24.7...v2.25.0)

#### Changelog

-
[`223e19b`](https://redirect.github.com/securego/gosec/commit/223e19b8856e00f02cc67804499a83f77e208f3c)
chore(deps): bump google.golang.org/grpc from 1.75.0 to 1.79.3
([#&#8203;1617](https://redirect.github.com/securego/gosec/issues/1617))
-
[`b23a9e5`](https://redirect.github.com/securego/gosec/commit/b23a9e534822ec656207d6d33116b9c48fcde6c7)
fix: allow barry action to access secrets on fork PRs
([#&#8203;1616](https://redirect.github.com/securego/gosec/issues/1616))
-
[`355cfa5`](https://redirect.github.com/securego/gosec/commit/355cfa5a43916c57b7727eece120dd54665c1427)
fix: reduce G117 false positives for custom marshalers and transformed
values
([#&#8203;1614](https://redirect.github.com/securego/gosec/issues/1614))
([#&#8203;1615](https://redirect.github.com/securego/gosec/issues/1615))
-
[`744bfb5`](https://redirect.github.com/securego/gosec/commit/744bfb5ef06e24230087a2470dd1eda8cf5ac48a)
Add barry security scanner as a step in the CI
([#&#8203;1612](https://redirect.github.com/securego/gosec/issues/1612))
-
[`4fde15d`](https://redirect.github.com/securego/gosec/commit/4fde15d2287caa7ba8480e14d3ccd49579d17f42)
chore(deps): update all dependencies
([#&#8203;1611](https://redirect.github.com/securego/gosec/issues/1611))
-
[`dec52c4`](https://redirect.github.com/securego/gosec/commit/dec52c4101b534ac9bc8cf22ac051a65c90d75e0)
fix: prevent taint analysis hang on packages with many CHA call graph
edges
([#&#8203;1608](https://redirect.github.com/securego/gosec/issues/1608))
([#&#8203;1610](https://redirect.github.com/securego/gosec/issues/1610))
-
[`a0de8b6`](https://redirect.github.com/securego/gosec/commit/a0de8b6aab054e0fe97bec94d1f5e635dc5dc495)
Add some skills for claude code to automate some tasks
([#&#8203;1609](https://redirect.github.com/securego/gosec/issues/1609))
-
[`c2dfcec`](https://redirect.github.com/securego/gosec/commit/c2dfcec7f34bdbb3591c1dccd4aafde1d49c5bd6)
Add G701-G706 rule-to-CWE mappings and CWE-117, CWE-918 entries
([#&#8203;1606](https://redirect.github.com/securego/gosec/issues/1606))
-
[`8aec3f4`](https://redirect.github.com/securego/gosec/commit/8aec3f48a22ee5404185b01ac7667302ba73e51c)
fix: skip SSA analysis on ill-typed packages to prevent panic
([#&#8203;1607](https://redirect.github.com/securego/gosec/issues/1607))
-
[`1ced32d`](https://redirect.github.com/securego/gosec/commit/1ced32df147e2dd7bb9400023c246235bb32be92)
Port G120 from SSA-based to taint analysis (fixes
[#&#8203;1600](https://redirect.github.com/securego/gosec/issues/1600),
[#&#8203;1603](https://redirect.github.com/securego/gosec/issues/1603))
([#&#8203;1605](https://redirect.github.com/securego/gosec/issues/1605))
-
[`befce8d`](https://redirect.github.com/securego/gosec/commit/befce8de5da965121ad143b3c1eba58b0c3941bb)
fix(G118): eliminate false positive for package-level cancel variables
([#&#8203;1602](https://redirect.github.com/securego/gosec/issues/1602))
-
[`b7b2c7b`](https://redirect.github.com/securego/gosec/commit/b7b2c7b668f3f2bef8a8ae04d72f0eb60492322c)
feat: add G124 rule for insecure HTTP cookie configuration
([#&#8203;1599](https://redirect.github.com/securego/gosec/issues/1599))
-
[`6e66a94`](https://redirect.github.com/securego/gosec/commit/6e66a943db54eb8d235ac766fa2fd414d44e8821)
feat: add G709 rule for unsafe deserialization of untrusted data
([#&#8203;1598](https://redirect.github.com/securego/gosec/issues/1598))
-
[`e7ea237`](https://redirect.github.com/securego/gosec/commit/e7ea2377aa2138d550e6d466ceef7a3164b4d7ea)
feat: add G708 rule for server-side template injection via text/template
([#&#8203;1597](https://redirect.github.com/securego/gosec/issues/1597))
-
[`8895462`](https://redirect.github.com/securego/gosec/commit/889546214c90564feb348e14fd1bf526295e0b2d)
fix(G118): eliminate false positive when cancel is called via struct
field in a closure
([#&#8203;1596](https://redirect.github.com/securego/gosec/issues/1596))
-
[`619ce21`](https://redirect.github.com/securego/gosec/commit/619ce2117e086b696f9357dc3422c18c2d0262bf)
Fix infinite recursion in interprocedural taint analysis
([#&#8203;1594](https://redirect.github.com/securego/gosec/issues/1594))
-
[`0e0eb17`](https://redirect.github.com/securego/gosec/commit/0e0eb1792f3ced1edfe332daa388f088d4bd2f08)
Fix G118 false positive when cancel is stored in returned struct field
([#&#8203;1593](https://redirect.github.com/securego/gosec/issues/1593))
-
[`59a9da0`](https://redirect.github.com/securego/gosec/commit/59a9da022f37d928b5c26c2b720e5f43f4a3e9b4)
Fix G118 false positive on cancel called inside goroutine closure
([#&#8203;1592](https://redirect.github.com/securego/gosec/issues/1592))
-
[`cbf46b8`](https://redirect.github.com/securego/gosec/commit/cbf46b8771cfe2f02d3f935469c7898198d901f4)
fix(analyzer): per-package rule instantiation eliminates concurrent map
crash
([#&#8203;1589](https://redirect.github.com/securego/gosec/issues/1589))
-
[`c6c3ba8`](https://redirect.github.com/securego/gosec/commit/c6c3ba865980cf3333c8bcaa93b4b9b7a4858bba)
chore(deps): update all dependencies
([#&#8203;1588](https://redirect.github.com/securego/gosec/issues/1588))
-
[`c709ed8`](https://redirect.github.com/securego/gosec/commit/c709ed8be30a01d52ef51a099f5da6fc23dd3e31)
fix(G118): treat returned cancel func as called (fixes
[#&#8203;1584](https://redirect.github.com/securego/gosec/issues/1584))
([#&#8203;1585](https://redirect.github.com/securego/gosec/issues/1585))
-
[`fa74dd7`](https://redirect.github.com/securego/gosec/commit/fa74dd7069d482a37b1207afbeffbfc7681a47f8)
chore(go): update supported Go versions to 1.25.8 and 1.26.1
([#&#8203;1583](https://redirect.github.com/securego/gosec/issues/1583))
-
[`cd1f29e`](https://redirect.github.com/securego/gosec/commit/cd1f29ec710ed24a305edf5908f52240addb1811)
Update the README with the correct version of the Github action for
gosec
([#&#8203;1582](https://redirect.github.com/securego/gosec/issues/1582))
-
[`5887aee`](https://redirect.github.com/securego/gosec/commit/5887aee36f8b982ecb71885fde827ec0e84d98a2)
chore(deps): update all dependencies
([#&#8203;1579](https://redirect.github.com/securego/gosec/issues/1579))
-
[`6641fcf`](https://redirect.github.com/securego/gosec/commit/6641fcf966593bf52ed426aa262839b340d56375)
Fix G115 false positives for guarded int64-to-byte conversions
([#&#8203;1578](https://redirect.github.com/securego/gosec/issues/1578))
-
[`3c9c3da`](https://redirect.github.com/securego/gosec/commit/3c9c3da6924bb1daeea428e28ec9ac5fa5a09c25)
Update the container image migration notice
([#&#8203;1576](https://redirect.github.com/securego/gosec/issues/1576))
-
[`973e94e`](https://redirect.github.com/securego/gosec/commit/973e94e8fc181de08ab86b212e6475221e777069)
chore(action): bump gosec to 2.24.7
([#&#8203;1575](https://redirect.github.com/securego/gosec/issues/1575))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:58:56 +01:00
renovate[bot] 02d1881218 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (#8085)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/collector/featuregate](https://redirect.github.com/open-telemetry/opentelemetry-collector)
| `v1.53.0` → `v1.54.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.54.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.53.0/v1.54.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-collector
(go.opentelemetry.io/collector/featuregate)</summary>

###
[`v1.54.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1540v01480)

#####  Known Issues 

- `service`: The collector's internal Prometheus metrics endpoint
(`:8888`) now emits OTel service labels with underscore
names (`service_name`, `service_instance_id`, `service_version`) instead
of dot-notation names (`service.name`,
`service.instance.id`, `service.version`). Users scraping this endpoint
with the Prometheus receiver will see these renamed
labels in resource and datapoint attributes. As a workaround, add the
following `metric_relabel_configs` to your scrape
  config in prometheus receiver:
  ```yaml
  metric_relabel_configs:
    - source_labels: [service_name]
      target_label: service.name
    - source_labels: [service_instance_id]
      target_label: service.instance.id
    - source_labels: [service_version]
      target_label: service.version
    - regex: service_name|service_instance_id|service_version
      action: labeldrop
  ```
See
[#&#8203;14814](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14814)
for details and updates.

##### 🛑 Breaking changes 🛑

- `all`: Change metric units to be singular to match OTel specification,
e.g. `{requests}` -> `{request}`
([#&#8203;14753](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14753))

##### 💡 Enhancements 💡

- `cmd/mdatagen`: Add deprecated\_type field to allow specifying an
alias for component types.
([#&#8203;14718](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14718))
- `cmd/mdatagen`: Generate entity-scoped MetricsBuilder API that
enforces entity-metric associations at compile time
([#&#8203;14659](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14659))
- `cmd/mdatagen`: Skip generating reaggregation config options for
metrics that have no aggregatable attributes.
([#&#8203;14689](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14689))
- `pkg/service`: The internal status reporter no longer drops repeated
Ok and RecoverableError statuses
([#&#8203;14282](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14282))
Status events can now carry metadata and there's value in allowing them
to be emitted despite the status value itself
  not changing.

##### 🧰 Bug fixes 🧰

- `cmd/builder`: Add `.exe` to output binary names when building for
Windows targets.
([#&#8203;12591](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12591))

- `exporter/debug`: Add printing of metric metadata in detailed
verbosity.
([#&#8203;14667](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14667))

- `exporter/otlp_grpc`: Prevent nil pointer panic when push methods are
called before the OTLP exporter initializes its gRPC clients.
([#&#8203;14663](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14663))
  When the sending queue and retry are disabled, calling ConsumeTraces,
ConsumeMetrics, ConsumeLogs, or ConsumeProfiles before the OTLP exporter
initializes its gRPC clients could cause a nil pointer dereference
panic.
  The push methods now return an error instead of panicking.

- `exporter/otlp_http`: Show the actual destination URL in error
messages when request URL is modified by middleware.
([#&#8203;14673](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14673))
Unwraps the `*url.Error` returned by `http.Client.Do()` to prevent
misleading error logs when a middleware extension dynamically updates
the endpoint.

- `pdata/pprofile`: Switch the dictionary of dictionary tables entries
only once when merging profiles
([#&#8203;14709](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14709))
For dictionary table data, we used to switch their dictionaries when
doing
  the switch for the data that uses them.
  However, when an entry is associated with multiple other data (several
  samples can use the same stack), we would have been switching the
  dictionaries of the entry multiple times.

  We now switch dictionaries for dictionary table data only once, before
  switching the resource profiles.

<!-- previous-version -->

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:48:22 +01:00
renovate[bot] b471ef15b4 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (#8082)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/opentracing-contrib/go-grpc/test](https://redirect.github.com/opentracing-contrib/go-grpc)
| require | digest | `190d7d4` → `de6f1cc` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:34:39 +01:00
renovate[bot] ec4a15962c chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (#8083)
This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/ryanrolds/sqlclosecheck](https://redirect.github.com/ryanrolds/sqlclosecheck)
| `v0.5.1` → `v0.6.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fryanrolds%2fsqlclosecheck/v0.6.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fryanrolds%2fsqlclosecheck/v0.5.1/v0.6.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>ryanrolds/sqlclosecheck
(github.com/ryanrolds/sqlclosecheck)</summary>

###
[`v0.6.0`](https://redirect.github.com/ryanrolds/sqlclosecheck/releases/tag/v0.6.0)

[Compare
Source](https://redirect.github.com/ryanrolds/sqlclosecheck/compare/v0.5.1...v0.6.0)

#### What's Changed

- \[WIP] Support correct non-defer usage by
[@&#8203;ryanrolds](https://redirect.github.com/ryanrolds) in
[#&#8203;28](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/28)
- Add support for deferred closer functions which are not methods by
[@&#8203;vanntile](https://redirect.github.com/vanntile) in
[#&#8203;33](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/33)
- (cont) Add support for deferred closer functions which are not methods
by [@&#8203;vanntile](https://redirect.github.com/vanntile) in
[#&#8203;34](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/34)
- bump golang.org/x/tools to v0.13.0 to fix panic in tests by
[@&#8203;alexandear](https://redirect.github.com/alexandear) in
[#&#8203;38](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/38)
- CVE-2024-27304 with vendoring by
[@&#8203;ryanrolds](https://redirect.github.com/ryanrolds) in
[#&#8203;41](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/41)
- Bump golang.org/x/crypto from 0.17.0 to 0.35.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;42](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/42)
- fix: Referrers() may return nil by
[@&#8203;didebughu](https://redirect.github.com/didebughu) in
[#&#8203;46](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/46)
- Upgrade for Go 1.25 compatibility, and upgrade crypto dependency for
CVE by [@&#8203;LeMikaelF](https://redirect.github.com/LeMikaelF) in
[#&#8203;47](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/47)

#### New Contributors

- [@&#8203;vanntile](https://redirect.github.com/vanntile) made their
first contribution in
[#&#8203;33](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/33)
- [@&#8203;alexandear](https://redirect.github.com/alexandear) made
their first contribution in
[#&#8203;38](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/38)
- [@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot]
made their first contribution in
[#&#8203;42](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/42)
- [@&#8203;didebughu](https://redirect.github.com/didebughu) made their
first contribution in
[#&#8203;46](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/46)
- [@&#8203;LeMikaelF](https://redirect.github.com/LeMikaelF) made their
first contribution in
[#&#8203;47](https://redirect.github.com/ryanrolds/sqlclosecheck/pull/47)

**Full Changelog**:
<https://github.com/ryanrolds/sqlclosecheck/compare/v0.5.1...v0.6.0>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 09:24:39 +01:00
renovate[bot] 8f3f09505c chore(deps): update codecov/codecov-action action to v5.5.3 (#8080)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[codecov/codecov-action](https://redirect.github.com/codecov/codecov-action)
| action | patch | `v5.5.2` → `v5.5.3` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>codecov/codecov-action (codecov/codecov-action)</summary>

###
[`v5.5.3`](https://redirect.github.com/codecov/codecov-action/releases/tag/v5.5.3)

[Compare
Source](https://redirect.github.com/codecov/codecov-action/compare/v5.5.2...v5.5.3)

##### What's Changed

- build(deps): bump actions/github-script from 7.0.1 to 8.0.0 by
[@&#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in
[#&#8203;1874](https://redirect.github.com/codecov/codecov-action/pull/1874)
- chore(release): bump to 5.5.3 by
[@&#8203;thomasrockhu-codecov](https://redirect.github.com/thomasrockhu-codecov)
in
[#&#8203;1922](https://redirect.github.com/codecov/codecov-action/pull/1922)

**Full Changelog**:
<https://github.com/codecov/codecov-action/compare/v5.5.2...v5.5.3>

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-20 08:48:15 +01:00
David Ashpole 911ed35fa0 Cleanup exemplar featuregate readme (#8072)
Exemplars are no longer behind a feature gate.
2026-03-19 09:12:17 +01:00
yoshimura 528ebabbf0 sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (#8067)
Guards SpanStarted and spanLive with Enabled(ctx) to avoid building
metric
options/attributes when instruments are disabled.

```
BenchmarkTracer (noop MeterProvider):

  SpanStarted: ~1.77 ns/op -> ~0.48 ns/op (~3.7x)
  SpanLive:    ~2.05 ns/op -> ~0.52 ns/op (~3.9x)
  SpanEnded:   ~2.05 ns/op -> ~0.52 ns/op (~3.9x)
```

No behavior change when enabled; existing tests cover enabled path.
~~No CHANGELOG entry, following #7848.~~

Issue: #7800

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-18 16:11:37 +01:00
David Ashpole 025b01be59 Add support for the development per-series starttime feature (#8060)
Add a feature to use per-series start times to match the spec:
https://github.com/open-telemetry/opentelemetry-specification/blob/main/specification/metrics/sdk.md#start-timestamps

This is a prerequisite to [finishing /
closing](https://github.com/open-telemetry/opentelemetry-specification/pull/4702).

Previous prototype:
https://github.com/open-telemetry/opentelemetry-go/pull/7719

---------

Co-authored-by: Tyler Yahn <MrAlias@users.noreply.github.com>
Co-authored-by: Robert Pająk <pellared@hotmail.com>
2026-03-18 09:46:12 -04:00
ian 768e930779 Added the internal/observ package to stdoutlog (#7735)
a part of #7020 

```txt
goos: windows
goarch: amd64
pkg: go.opentelemetry.io/otel/exporters/stdout/stdoutlog/internal/observ
cpu: Intel(R) Core(TM) i7-14700
                                          │  result.txt  │
                                          │    sec/op    │
InstrumentationExportLogs/NoError-28        47.68n ±  5%
InstrumentationExportLogs/PartialError-28   471.6n ±  2%
InstrumentationExportLogs/FullError-28      471.9n ± 10%
geomean                                     219.7n

                                          │  result.txt  │
                                          │     B/op     │
InstrumentationExportLogs/NoError-28        0.000 ± 0%
InstrumentationExportLogs/PartialError-28   305.0 ± 0%
InstrumentationExportLogs/FullError-28      305.0 ± 0%
geomean                                                ¹
¹ summaries must be >0 to compute geomean

                                          │  result.txt  │
                                          │  allocs/op   │
InstrumentationExportLogs/NoError-28        0.000 ± 0%
InstrumentationExportLogs/PartialError-28   4.000 ± 0%
InstrumentationExportLogs/FullError-28      4.000 ± 0%
geomean                                                ¹
¹ summaries must be >0 to compute geomean
```

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-18 09:48:36 +01:00
David Ashpole 5576bc22e7 Use atomics for exponential histogram buckets (#8057)
Follows https://github.com/open-telemetry/opentelemetry-go/pull/8025

This is the second PR towards a lockless fast-path for the exponential
histogram aggregation. It replaces use of uint64 with atomic.Uint64. It
does not make buckets concurrent-safe. That will come in future PRs.
This is a refactor to make future PRs easier to review since it has a
large diff, but is relatively simple.

The record and measure calls are still guarded by a lock at this point.

You can see the full set of planned changes in
https://github.com/open-telemetry/opentelemetry-go/compare/main...dashpole:opentelemetry-go:lockless_exphist_ai.
The implementation is largely based on
https://github.com/open-telemetry/opentelemetry-go/pull/7535 (which I
implemented by hand), but with help from an AI to break it down into
smaller PRs, and simplify aspects of the design.

Part of https://github.com/open-telemetry/opentelemetry-go/issues/7796
2026-03-17 10:45:24 -04:00
Ijas d5f403cab5 sdk/resource: add WithContext variants for Default and Environment (#7808) (#8051)
## Description
Address issue #7808 by plumbing `context.Context` through
`resource.Environment` and `resource.Default`.

Currently, these functions hardcode `context.Background()`, which
prevents detectors (especially those that might perform network lookups
or OS calls) from respecting timeouts or cancellations provided by the
caller.

## Changes

- Adds `EnvironmentWithContext(ctx context.Context)` as a new public
function.
- Adds `DefaultWithContext(ctx context.Context)` as a new public
function.
- Maintains backward compatibility by making `Environment()` and
`Default()` thin wrappers around the new WithContext variants.

## Testing

- Added unit tests in `sdk/resource/resource_test.go` to verify the new
functions.
- Verified that all `sdk/resource` tests pass.
- Verified that make `golangci-lint` passes repository-wide.

Fixes #7808

---------

Co-authored-by: Damien Mathieu <42@dmathieu.com>
2026-03-17 09:35:03 +01:00
Trask Stalnaker 08efeb47e7 Migrate to new bare metal runner (Ubuntu 24) (#8068)
Old runner:

- name: `oracle-bare-metal-64cpu-512gb-x86-64`
- 512gb memory
- Oracle Linux 8

New runner:

-  name: `oracle-bare-metal-64cpu-1024gb-x86-64-ubuntu-24`
- 1024gb memory
-  Ubuntu 24

I realize this could have some impact on benchmark baselines, so please
post on https://github.com/open-telemetry/community/issues/3333 once you
have migrated and are comfortable with the old one being removed.
2026-03-17 09:15:58 +01:00