This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/securego/gosec/v2](https://redirect.github.com/securego/gosec) | `v2.21.4` -> `v2.22.0` | [![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsecurego%2fgosec%2fv2/v2.22.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fsecurego%2fgosec%2fv2/v2.22.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fsecurego%2fgosec%2fv2/v2.21.4/v2.22.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | [![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsecurego%2fgosec%2fv2/v2.21.4/v2.22.0?slim=true)](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>securego/gosec (github.com/securego/gosec/v2)</summary> ### [`v2.22.0`](https://redirect.github.com/securego/gosec/releases/tag/v2.22.0) [Compare Source](https://redirect.github.com/securego/gosec/compare/v2.21.4...v2.22.0) #### Changelog - [`e0cca6f`](e0cca6fe95
) Update what message for G104 ([#​1282](https://redirect.github.com/securego/gosec/issues/1282)) - [`534689b`](534689b08f
) chore(deps): update module github.com/onsi/ginkgo/v2 to v2.22.2 ([#​1281](https://redirect.github.com/securego/gosec/issues/1281)) - [`eb95db1`](eb95db1c76
) chore(deps): update all dependencies ([#​1280](https://redirect.github.com/securego/gosec/issues/1280)) - [`6c6da40`](6c6da403f0
) chore(deps): update all dependencies ([#​1279](https://redirect.github.com/securego/gosec/issues/1279)) - [`b12f51f`](b12f51f7d6
) Simplify sortIssues implementation ([#​1277](https://redirect.github.com/securego/gosec/issues/1277)) - [`54c2185`](54c2185ae6
) Enable testifylint and fix up lint issues ([#​1276](https://redirect.github.com/securego/gosec/issues/1276)) - [`36c81ed`](36c81ed69b
) Refactor AppendError to check for build.NoGoError ([#​1273](https://redirect.github.com/securego/gosec/issues/1273)) - [`9a2d74f`](9a2d74ffe0
) chore(deps): update module golang.org/x/net to v0.33.0 \[security] ([#​1275](https://redirect.github.com/securego/gosec/issues/1275)) - [`4c5ad91`](4c5ad914f3
) Update README.md ([#​1274](https://redirect.github.com/securego/gosec/issues/1274)) - [`e21b4d4`](e21b4d42cf
) Rule documentation updates ([#​1272](https://redirect.github.com/securego/gosec/issues/1272)) - [`92de0ee`](92de0ee7a2
) Replace old golang.org links with new go.dev ([#​1271](https://redirect.github.com/securego/gosec/issues/1271)) - [`4fda076`](4fda076e5d
) Refactor AppendError to use strings.Contains ([#​1270](https://redirect.github.com/securego/gosec/issues/1270)) - [`b01f49e`](b01f49e366
) Simplify Analyzer.ignore by reducing nesting ([#​1269](https://redirect.github.com/securego/gosec/issues/1269)) - [`b62cc33`](b62cc3316d
) Improve capitalization in AI API flags descriptions ([#​1267](https://redirect.github.com/securego/gosec/issues/1267)) - [`bc77d16`](bc77d16301
) Remove unused golint dependency ([#​1266](https://redirect.github.com/securego/gosec/issues/1266)) - [`ef1a35f`](ef1a35faf9
) Simplify tests by using GinkgoT().TempDir() ([#​1265](https://redirect.github.com/securego/gosec/issues/1265)) - [`09b9143`](09b914371e
) Documentation on adding new rules and analyzers ([#​1262](https://redirect.github.com/securego/gosec/issues/1262)) - [`1bd92a8`](1bd92a8e30
) chore(deps): update all dependencies ([#​1268](https://redirect.github.com/securego/gosec/issues/1268)) - [`ca55eca`](ca55eca3de
) Update to go 1.22.10 and 1.23.4 versions ([#​1264](https://redirect.github.com/securego/gosec/issues/1264)) - [`329cad8`](329cad89ee
) chore(deps): update module golang.org/x/crypto to v0.31.0 \[security] ([#​1263](https://redirect.github.com/securego/gosec/issues/1263)) - [`08beb25`](08beb25d41
) chore(deps): update all dependencies ([#​1261](https://redirect.github.com/securego/gosec/issues/1261)) - [`d566be2`](d566be274e
) chore(deps): update module github.com/onsi/gomega to v1.36.0 ([#​1259](https://redirect.github.com/securego/gosec/issues/1259)) - [`8c602d0`](8c602d0bc4
) fix: revive.redefines-builtin-id lint warnings ([#​1257](https://redirect.github.com/securego/gosec/issues/1257)) - [`399e835`](399e835157
) Fix typos in comments and fields - [`229cf63`](229cf63a09
) Remove the decryption funtions/methods from G407 check - [`699cb55`](699cb55eb3
) Upate go to version 1.23.3 and 1.22.9 - [`9b13cd5`](9b13cd5ab4
) Fix G115 false positive when going from parsed uint to larger int - [`08ea2a5`](08ea2a57db
) chore(deps): update all dependencies - [`4415613`](44156135bf
) chore(deps): update all dependencies - [`3274716`](3274716ce3
) chore(deps): update all dependencies - [`1fb6a46`](1fb6a46eed
) chore(deps): update all dependencies - [`d2c92ed`](d2c92ed7b3
) chore(deps): update all dependencies - [`4fd9872`](4fd98728a7
) Update go version to 1.23.2 and 1.22.8 - [`1501618`](1501618b90
) chore(deps): update module google.golang.org/api to v0.201.0 - [`7d33bc1`](7d33bc1991
) chore(deps): update all dependencies - [`bd8b4b4`](bd8b4b4ece
) chore(deps): update all dependencies - [`1216c9b`](1216c9b96b
) Fix the cosign step to authenticate with the container registry - [`50d1b4a`](50d1b4ae6b
) chore(deps): update module google.golang.org/api to v0.199.0 - [`c0ba7c7`](c0ba7c7a74
) Update the gosec to v2.21.4 in the Github action - [`a3299ce`](a3299ce10c
) Add the version into goreleaser config </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/open-telemetry/opentelemetry-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzOS45Mi4wIiwidXBkYXRlZEluVmVyIjoiMzkuOTIuMCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
OpenTelemetry-Go
OpenTelemetry-Go is the Go implementation of OpenTelemetry. It provides a set of APIs to directly measure performance and behavior of your software and send this data to observability platforms.
Project Status
Signal | Status |
---|---|
Traces | Stable |
Metrics | Stable |
Logs | Beta1 |
Progress and status specific to this repository is tracked in our project boards and milestones.
Project versioning information and stability guarantees can be found in the versioning documentation.
Compatibility
OpenTelemetry-Go ensures compatibility with the current supported versions of the Go language:
Each major Go release is supported until there are two newer major releases. For example, Go 1.5 was supported until the Go 1.7 release, and Go 1.6 was supported until the Go 1.8 release.
For versions of Go that are no longer supported upstream, opentelemetry-go will stop ensuring compatibility with these versions in the following manner:
- A minor release of opentelemetry-go will be made to add support for the new supported release of Go.
- The following minor release of opentelemetry-go will remove compatibility testing for the oldest (now archived upstream) version of Go. This, and future, releases of opentelemetry-go may include features only supported by the currently supported versions of Go.
Currently, this project supports the following environments.
OS | Go Version | Architecture |
---|---|---|
Ubuntu | 1.23 | amd64 |
Ubuntu | 1.22 | amd64 |
Ubuntu | 1.23 | 386 |
Ubuntu | 1.22 | 386 |
Linux | 1.23 | arm64 |
Linux | 1.22 | arm64 |
macOS 13 | 1.23 | amd64 |
macOS 13 | 1.22 | amd64 |
macOS | 1.23 | arm64 |
macOS | 1.22 | arm64 |
Windows | 1.23 | amd64 |
Windows | 1.22 | amd64 |
Windows | 1.23 | 386 |
Windows | 1.22 | 386 |
While this project should work for other systems, no compatibility guarantees are made for those systems currently.
Getting Started
You can find a getting started guide on opentelemetry.io.
OpenTelemetry's goal is to provide a single set of APIs to capture distributed traces and metrics from your application and send them to an observability platform. This project allows you to do just that for applications written in Go. There are two steps to this process: instrument your application, and configure an exporter.
Instrumentation
To start capturing distributed traces and metric events from your application it first needs to be instrumented. The easiest way to do this is by using an instrumentation library for your code. Be sure to check out the officially supported instrumentation libraries.
If you need to extend the telemetry an instrumentation library provides or want to build your own instrumentation for your application directly you will need to use the Go otel package. The examples are a good way to see some practical uses of this process.
Export
Now that your application is instrumented to collect telemetry, it needs an export pipeline to send that telemetry to an observability platform.
All officially supported exporters for the OpenTelemetry project are contained in the exporters directory.
Exporter | Logs | Metrics | Traces |
---|---|---|---|
OTLP | ✓ | ✓ | ✓ |
Prometheus | ✓ | ||
stdout | ✓ | ✓ | ✓ |
Zipkin | ✓ |
Contributing
See the contributing documentation.