Bump the github-dependencies group across 1 directory with 22 updates #486

dependabot · 2025-03-17T07:13:46Z

Bumps the github-dependencies group with 11 updates in the / directory:

Package	From	To
github.com/google/go-cmp	`0.6.0`	`0.7.0`
golang.org/x/oauth2	`0.25.0`	`0.28.0`
golang.org/x/term	`0.28.0`	`0.30.0`
google.golang.org/grpc	`1.69.2`	`1.71.0`
github.com/emicklei/go-restful/v3	`3.12.1`	`3.12.2`
github.com/go-openapi/jsonpointer	`0.21.0`	`0.21.1`
github.com/klauspost/compress	`1.17.11`	`1.18.0`
github.com/prometheus/client_golang	`1.20.5`	`1.21.1`
github.com/spf13/cobra	`1.8.1`	`1.9.1`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.58.0`	`0.60.0`
golang.org/x/time	`0.9.0`	`0.11.0`

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates golang.org/x/oauth2 from 0.25.0 to 0.28.0

Commits

0042180 oauth2: Deep copy context client in NewClient
ce350bf oauth2: remove unneeded TokenSource implementation in transport test
44967ab google: fix typos
9c82a8c oauth2.go: use a more straightforward return value
681b4d8 jws: split token into fixed number of parts
3f78298 all: upgrade go directive to at least 1.23.0 [generated]
109dabf endpoints: add links/provider for Discord
ac571fa oauth2: fix docs for Config.DeviceAuth
314ee5b endpoints: add patreon endpoint
b9c813b google: add warning about externally-provided credentials
See full diff in compare view

Updates golang.org/x/term from 0.28.0 to 0.30.0

Commits

04218fd go.mod: update golang.org/x dependencies
208db03 all: upgrade go directive to at least 1.23.0 [generated]
743b270 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates google.golang.org/grpc from 1.69.2 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.0

API Changes

balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#8027)

balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#8026)

balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#8052)

New Features

xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this feature, set the environment variable GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS=false. (#8134)

stats/opentelemetry: Add experimental support for OpenTelemetry tracing. (#7852)

xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates. (#8038)

balancer/leastrequest, roundrobin: Add dualstack support. (#7969, #7966)

balancer/endpointsharding: Balancers created with the new DisableAutoReconnect option will not attempt to call ExitIdle automatically on their children when the children report idle. (#8052)

Bug Fixes

client: Fix support for proxies when using grpc.NewClient so the target is resolved by the proxy as expected. (#7881)

Added WithLocalDNSResolution() dial option to explicitly force target resolution on the client instead. (#7881)

weightedtarget: Return erroring picker when no targets are configured. (#8070)

xds: Fail RPCs with UNAVAILABLE when the EDS resource is missing or contains no endpoints (#8070)

xdsclient: Fix a bug where connectivity failures were reported to resource watchers before trying all listed servers. (#8075)

grpc: Fix the number of bytes reported in the error message when encoded messages are larger than 4GB. (#8033)

xds: Fixed a bug preventing tests from creating multiple servers or channels with different bootstrap configs. (#8050)

grpc: Fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (#7918)

Special Thanks: @vinothkumarr227

Documentation

client: Improve documentation of grpc.NewClient and ClientConn.CanonicalTarget by providing examples. (#8078)

examples/features/dualstack: New example demonstrating usage of endpoints and dualstack functionality. (#8098)

Release 1.70.0

Behavior Changes

client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)

Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)

experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)

These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

... (truncated)

Commits

d01db5c Change version to 1.71.0 (#8105)
012f8bf xds: Enable dualstack flag (#8134)
bf0c885 examples/features/dualstack: Demonstrate Dual Stack functionality (#8098) (#8...
05bdd66 ringhash: Remove TODO comment (#8096)
ddb2484 xds: remove obsolete xDS transport custom dialer option (#8079)
8528f43 cleanup: replace Dial with NewClient (#7975)
ae2a04f ringhash: Replace DNS resolver before sending xDS Update in test (#8091)
e55819e lazy: Use channel to wait for resolver error being received in test (#8088)
b524c08 xdsclient: include xds node ID in errors from the WatchResource API (#8093)
91eb6aa client: improve documentation of target strings (#8078)
Additional commits viewable in compare view

Updates github.com/emicklei/go-restful/v3 from 3.12.1 to 3.12.2

Changelog

Sourced from github.com/emicklei/go-restful/v3's changelog.

[v3.12.2] - 2025-02-21

allow empty payloads in post,put,patch, issue #580 ( thanks @liggitt, Jordan Liggitt)

Commits

d59fac5 Bump the github-actions group across 1 directory with 3 updates (#582)
35bc7ae allow empty payloads in post,put,patch, issue #580 (#581)
ffa1d91 Bump the github-actions group across 1 directory with 2 updates (#578)
2aacac8 Bump actions/setup-go from 5.1.0 to 5.2.0 in the github-actions group (#573)
60b49be Bump the github-actions group across 1 directory with 2 updates (#572)
bcbb0e6 Bump the github-actions group across 1 directory with 3 updates (#569)
e38aee0 Update CHANGES.md
2ad39f9 Bump step-security/harden-runner in the github-actions group (#566)
361c568 Bump the github-actions group across 1 directory with 4 updates (#564)
33de948 dependabot to group PRs (#557)
Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.21.0 to 0.21.1

Commits

6bb743a updated dependencies
ba7dfd1 re-enacted dependabot auto-merge
381b78e fixed undue move of reflect declarations
31411a0 Relint
2bee274 Merge pull request #39 from go-openapi/dependabot/go_modules/github.com/stret...
c1d9e8d Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
ad6963c Bump codecov/codecov-action in the development-dependencies group
6368b84 Bump golangci/golangci-lint-action in the development-dependencies group
5ef89de Bump golangci/golangci-lint-action in the development-dependencies group
026fa61 Bump the development-dependencies group with 1 update
See full diff in compare view

Updates github.com/go-openapi/swag from 0.23.0 to 0.23.1

Commits

87317ee re-enacted dependabot auto-merge
223b27e Relint
06305b8 Bump github.com/mailru/easyjson in the other-dependencies group (#98)
4bc9026 Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#97)
06326a3 Bump codecov/codecov-action in the development-dependencies group
0640ba3 Bump golangci/golangci-lint-action in the development-dependencies group
3d6928a Bump golangci/golangci-lint-action in the development-dependencies group
10a3a2f Bump the development-dependencies group with 1 update
See full diff in compare view

Updates github.com/klauspost/compress from 1.17.11 to 1.18.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.0

What's Changed

Deprecate Go 1.21 and add 1.24 by @klauspost in klauspost/compress#1055

Add unsafe little endian loaders by @klauspost in klauspost/compress#1036

fix: check r.err != nil but return a nil value error err by @alingse in klauspost/compress#1028

refactor: use built-in min function by @Juneezee in klauspost/compress#1038

zstd: use slices.Max for max value in slice by @Juneezee in klauspost/compress#1041

flate: Simplify L4-6 loading by @klauspost in klauspost/compress#1043

flate: Simplify matchlen (remove asm) by @klauspost in klauspost/compress#1045

s2: Add block decode fuzzer by @klauspost in klauspost/compress#1044

s2: Improve small block compression speed w/o asm by @klauspost in klauspost/compress#1048

flate: Fix matchlen L5+L6 by @klauspost in klauspost/compress#1049

flate: Cleanup & reduce casts by @klauspost in klauspost/compress#1050

New Contributors

@tcpdumppy made their first contribution in klauspost/compress#1021

@sam9291 made their first contribution in klauspost/compress#1022

@dezza made their first contribution in klauspost/compress#1023

@alingse made their first contribution in klauspost/compress#1028

@hyunsooda made their first contribution in klauspost/compress#1031

@Juneezee made their first contribution in klauspost/compress#1038

@Bbulatov made their first contribution in klauspost/compress#1052

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

Commits

8e79dc4 Deprecate Go 1.21 and add 1.24 (#1055)
df8e99c build(deps): bump the github-actions group with 2 updates (#1053)
7787431 zstd: fix unused debug code (#1052)
0bf3ecb flate: Cleanup & reduce casts (#1050)
e0f89a9 flate: Fix matchlen L5+L6 (#1049)
c8a8470 s2: Improve small block compression speed w/o asm (#1048)
b05b993 s2: Add block decode fuzzer (#1044)
aafbabd flate: Simplify matchlen (remove asm) (#1045)
dbaa9c1 flate: Simplify l4-6 loading (#1043)
4fa2036 Add unsafe little endian loaders (#1036)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.5 to 1.21.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.21.1 / 2025-03-04

This release addresses a performance regression introduced in #1661 -- thanks to all who reported this quickly: @chlunde, @dethi, @aaronbee @tsuna @kakkoyun 💪🏽. This patch release also fixes the iOS build.

We will be hardening the release process even further (#1759, #1761) to prevent this in future, sorry for the inconvenience!

The high concurrency optimization is planned to be eventually reintroduced, however in a much safer manner, potentially in a separate API.

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low concurrency cases #1757

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags. #1758

Revert "exponential backoff for CAS operations on floats" and cut 1.21.1 by @bwplotka in prometheus/client_golang#1757

Fix ios build for 1.21.1 by @bwplotka in prometheus/client_golang#1758

Full Changelog: prometheus/client_golang@v1.21.0...v1.21.1

v1.21.0 / 2025-02-19

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang (and depend on the strict, legacy validation for the label names). New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function. ⚠️

[BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583

[BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687

[PERF] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665

[PERF] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661

[CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712

[CHANGE] Add support for Go 1.23. #1602

[FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715

[FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513

[FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408

[FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

[BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583

[BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687

[ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665

[ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661

[CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712

[CHANGE] Add support for Go 1.23. #1602

[FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715

[FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513

[FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408

[FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

Commits

8a42da3 Fix ios build. (#1758)
40c62f7 Merge pull request #1757 from prometheus/revert-121cas
689f590 Cut 1.21.1
9e567a7 Revert "Add: exponential backoff for CAS operations on floats (#1661)"
eaf03ef Cut 1.21.0 (#1737)
f1f89dc Cut 1.21.0-rc.0 (#1718)
c923f7c Revert "ci: daggerize test and lint pipelines (#1534)" (#1717)
1bcda80 process collector: Fixed pedantic registry failures on darwin with cgo. (#1715)
038b37a tutorials/whatsup: Updated deps (#1716)
56a2431 docs: Add RELEASE.md for the release process (#1690)
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.61.0 to 0.62.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.62.0

⚠️ This releases switches internal global to UTF8Validation from LegacyValidation. This is a breaking change, relaxing the validation. We don't intend to add more schemas and we have to have a global for unmarshalling interfaces, thus the change was made ⚠️

What's Changed

Change default validation scheme to UTF8Validation by @ywwg in prometheus/common#724

Remove deprecated promlog package by @SuperQ in prometheus/common#738

Remove deprecated sigv4 module by @SuperQ in prometheus/common#737

update links to openmetrics to reference the v1.0.0 release by @dashpole in prometheus/common#740

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#742

Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by @dependabot in prometheus/common#744

Bump golang.org/x/net from 0.32.0 to 0.33.0 by @dependabot in prometheus/common#743

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#747

http_config: Allow customizing TLS config and settings. by @bwplotka in prometheus/common#748

New Contributors

@dashpole made their first contribution in prometheus/common#740

Full Changelog: prometheus/common@v0.61.0...v0.62.0

Commits

280b0e7 http_config: Allow customizing TLS config and settings. (#748)
aea8919 Update common Prometheus files (#747)
8d916fa Bump golang.org/x/net from 0.32.0 to 0.33.0 (#743)
fe88605 Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 (#744)
5d9961d Update common Prometheus files (#742)
0a89b98 Merge pull request #740 from dashpole/update_om_links
e3926e2 update links to openmetrics to reference the v1.0.0 release
d88ee1f Remove deprecated sigv4 module (#737)
c3fdb17 Remove deprecated promlog package (#738)
cf5f48f Change default validation scheme to UTF8Validation (#724)
See full diff in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.9.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.9.1

🐛 Fixes

Fix CompletionFunc implementation by @ccoVeille in spf13/cobra#2234

Revert "Make detection for test-binary more universal (#2173)" by @marckhouzam in spf13/cobra#2235

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

✨ Features

Allow linker to perform deadcode elimination for program using Cobra by @aarzilli in spf13/cobra#1956

Add default completion command even if there are no other sub-commands by @marckhouzam in spf13/cobra#1559

Add CompletionWithDesc helper by @ccoVeille in spf13/cobra#2231

🐛 Fixes

Fix deprecation comment for Command.SetOutput by @thaJeztah in spf13/cobra#2172

Replace deprecated ioutil usage by @nirs in spf13/cobra#2181

Fix --version help and output for plugins by @nirs in spf13/cobra#2180

Allow to reset the templates to the default by @marckhouzam in spf13/cobra#2229

🤖 Completions

Make Powershell completion work in constrained mode by @lstemplinger in spf13/cobra#2196

Improve detection for flags that accept multiple values by @thaJeztah in spf13/cobra#2210

add CompletionFunc type to help with completions by @ccoVeille in spf13/cobra#2220

Add similar whitespace escape logic to bash v2 completions than in other completions by @kangasta in spf13/cobra#1743

Print ActiveHelp for bash along other completions by @marckhouzam in spf13/cobra#2076

fix(completions): Complete map flags multiple times by @gabe565 in spf13/cobra#2174

fix(bash): nounset unbound file filter variable on empty extension by @scop in spf13/cobra#2228

🧪 Testing

Test also with go 1.23 by @nirs in spf13/cobra#2182

Make detection for test-binary more universal by @thaJeztah in spf13/cobra#2173

✍🏼 Documentation

docs: update README.md by @eltociear in spf13/cobra#2197

Improve site formatting by @nirs in spf13/cobra#2183

doc: add Conduit by @raulb in spf13/cobra#2230

doc: azion project added to the list of CLIs that use cobra by @maxwelbm in spf13/cobra#2198

Fix broken links in active_help.md by @vuil in spf13/cobra#2202

chore: fix function name in comment by @zhuhaicity in spf13/cobra#2216

🔧 Dependency upgrades

build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @thaJeztah in spf13/cobra#2206

Update to latest go-md2man by @mikelolasagasti in spf13/cobra#2201

... (truncated)

Commits

40b5bc1 Revert "Make detection for test-binary more universal (#2173)" (#2235)
a97f9fd fix CompletionFunc implementation (#2234)
5f9c408 chore: Upgrade dependencies for v1.9.0 (#2233)
24ada7f Remove the default "completion" cmd if it is alone (#1559)
680936a New logo
8cb30f9 feat: add CompletionWithDesc helper (#2231)
17b6dca doc: add Conduit (#2230)
ab5cadc Allow to reset the templates to the default (#2229)
4ba5566 fix(bash): nounset unbound file filter variable on empty extension (#2228)
41b26ec Print ActiveHelp for bash along other completions (#2076)
Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.5 to 1.0.6

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.6

What's Changed

Add exported functions to preserve pkg/flag compatibility by @mckern in spf13/pflag#220

remove dead code for checking error nil by @yashbhutwala in spf13/pflag#282

Add IPNetSlice and unit tests by @rpothier in spf13/pflag#170

allow for blank ip addresses by @duhruh in spf13/pflag#316

add github actions by @sagikazarmark in spf13/pflag#419

New Contributors

@mckern made their first contribution in spf13/pflag#220

@yashbhutwala made their first contribution in spf13/pflag#282

@rpothier made their first contribution in spf13/pflag#170

@duhruh made their first contribution in spf13/pflag#316

@sagikazarmark made their first contribution in spf13/pflag#419

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

Commits

5ca8134 Merge pull request #419 from spf13/ci
100ab0e disable unsupported dependency graph for now
a0f4ddd fix govet
f48cbd1 add github actions
d5e0c06 allow for blank ip addresses (#316)
85dd5c8 Add IPNetSlice and unit tests (#170)
6971c29 remove dead code for checking error nil (#282)
81378bb Add exported functions to preserve pkg/flag compatibility (#220)
See full diff in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.58.0 to 0.60.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.35.0/v0.60.0/v0.29.0/v0.15.0/v0.10.0/v0.8.0/v0.7.0

Overview

This release is the last to support [Go 1.22]. The next release will require at least [Go 1.23].

[!WARNING] This is the last version to use Semantic Conventions v1.20.0 for HTTP libraries by default. The next version (0.61.0) will default to v1.26.0, and the following one (0.62.0) will drop support for Semantic Conventions v1.20.0

You can switch to the new Semantic Conventions right now by setting the OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable in your application.

See also the HTTP semantic conventions stability migration

Added

Add support for configuring ClientCertificate and ClientKey field for OTLP exporters in go.opentelemetry.io/contrib/config. (#6378)

Add WithAttributeBuilder, AttributeBuilder, DefaultAttributeBuilder, DynamoDBAttributeBuilder, SNSAttributeBuilder to support adding attributes based on SDK input and output in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#6543)

Support for the OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#6652)

Added the WithMeterProvider option to allow passing a custom meter provider to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6648)

Added the WithMetricAttributesFn option to allow setting dynamic, per-request metric attributes in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6648)

Added metrics support, and emit all stable metrics from the Semantic Conventions in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6648)

Add support for configuring Insecure field for OTLP exporters in go.opentelemetry.io/contrib/config. (#6658)

Support for the OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable in instrumentation/net/http/httptrace/otelhttptrace to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#6720)

Support for the OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable in instrumentation/github.com/emicklei/go-restful/otelrestful to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#6710)

Added metrics support, and emit all stable metrics from the Semantic Conventions in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#6747)

Support for the OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#6778)

Support OTEL_SEMCONV_STABILITY_OP... Description has been truncated

Bumps the github-dependencies group with 11 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.6.0` | `0.7.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.25.0` | `0.28.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.28.0` | `0.30.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.69.2` | `1.71.0` | | [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.1` | `3.12.2` | | [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.0` | `0.21.1` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.11` | `1.18.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.21.1` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.9.1` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.58.0` | `0.60.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.9.0` | `0.11.0` | Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `golang.org/x/oauth2` from 0.25.0 to 0.28.0 - [Commits](golang/oauth2@v0.25.0...v0.28.0) Updates `golang.org/x/term` from 0.28.0 to 0.30.0 - [Commits](golang/term@v0.28.0...v0.30.0) Updates `google.golang.org/grpc` from 1.69.2 to 1.71.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.69.2...v1.71.0) Updates `github.com/emicklei/go-restful/v3` from 3.12.1 to 3.12.2 - [Release notes](https://github.com/emicklei/go-restful/releases) - [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md) - [Commits](emicklei/go-restful@v3.12.1...v3.12.2) Updates `github.com/go-openapi/jsonpointer` from 0.21.0 to 0.21.1 - [Commits](go-openapi/jsonpointer@v0.21.0...v0.21.1) Updates `github.com/go-openapi/swag` from 0.23.0 to 0.23.1 - [Commits](go-openapi/swag@v0.23.0...v0.23.1) Updates `github.com/klauspost/compress` from 1.17.11 to 1.18.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.11...v1.18.0) Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.21.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.20.5...v1.21.1) Updates `github.com/prometheus/common` from 0.61.0 to 0.62.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md) - [Commits](prometheus/common@v0.61.0...v0.62.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.5...v1.0.6) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.58.0 to 0.60.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.58.0...zpages/v0.60.0) Updates `go.opentelemetry.io/otel` from 1.33.0 to 1.35.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.35.0) Updates `go.opentelemetry.io/otel/metric` from 1.33.0 to 1.35.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.35.0) Updates `go.opentelemetry.io/otel/trace` from 1.33.0 to 1.35.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.35.0) Updates `golang.org/x/net` from 0.34.0 to 0.35.0 - [Commits](golang/net@v0.34.0...v0.35.0) Updates `golang.org/x/sys` from 0.29.0 to 0.31.0 - [Commits](golang/sys@v0.29.0...v0.31.0) Updates `golang.org/x/text` from 0.21.0 to 0.22.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.21.0...v0.22.0) Updates `golang.org/x/time` from 0.9.0 to 0.11.0 - [Commits](golang/time@v0.9.0...v0.11.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250106144421-5f5ef82da422 to 0.0.0-20250218202821-56aae31c358a - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/protobuf` from 1.36.2 to 1.36.5 --- updated-dependencies: - dependency-name: github.com/google/go-cmp dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/oauth2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/term dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/emicklei/go-restful/v3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/go-openapi/jsonpointer dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/go-openapi/swag dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/prometheus/client_golang dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/prometheus/common dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/spf13/cobra dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: github.com/spf13/pflag dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/metric dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: golang.org/x/time dependency-type: indirect update-type: version-update:semver-minor dependency-group: github-dependencies - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-patch dependency-group: github-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

k8s-ci-robot · 2025-03-17T07:13:54Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign msau42 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

k8s-ci-robot · 2025-03-17T07:13:56Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Mar 17, 2025

k8s-ci-robot requested review from chrishenzie and gnufied March 17, 2025 07:13

k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Mar 17, 2025

k8s-ci-robot added the size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. label Mar 17, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the github-dependencies group across 1 directory with 22 updates #486

Bump the github-dependencies group across 1 directory with 22 updates #486

dependabot bot commented on behalf of github Mar 17, 2025 •

edited

Loading

k8s-ci-robot commented Mar 17, 2025

k8s-ci-robot commented Mar 17, 2025

Bump the github-dependencies group across 1 directory with 22 updates #486

Are you sure you want to change the base?

Bump the github-dependencies group across 1 directory with 22 updates #486

Conversation

dependabot bot commented on behalf of github Mar 17, 2025 • edited Loading

v0.7.0

Release 1.71.0

API Changes

New Features

Bug Fixes

Documentation

Release 1.70.0

Behavior Changes

New Features

Bug Fixes

Performance

[v3.12.2] - 2025-02-21

v1.18.0

What's Changed

New Contributors

v1.21.1 / 2025-03-04

v1.21.0 / 2025-02-19

1.21.1 / 2025-03-04

1.21.0 / 2025-02-17

v0.62.0

What's Changed

New Contributors

v1.9.1

🐛 Fixes

v1.9.0

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades

v1.0.6

What's Changed

New Contributors

Release v1.35.0/v0.60.0/v0.29.0/v0.15.0/v0.10.0/v0.8.0/v0.7.0

Overview

Added

k8s-ci-robot commented Mar 17, 2025

k8s-ci-robot commented Mar 17, 2025

dependabot bot commented on behalf of github Mar 17, 2025 •

edited

Loading