Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 6, 2025

Bumps the gomodupdates group with 7 updates in the / directory:

Package From To
github.com/cockroachdb/errors 1.11.3 1.12.0
github.com/go-jose/go-jose/v3 3.0.3 3.0.4
github.com/google/go-cmp 0.6.0 0.7.0
github.com/rs/zerolog 1.33.0 1.34.0
go.opentelemetry.io/otel 1.32.0 1.36.0
golang.org/x/crypto 0.30.0 0.39.0
google.golang.org/protobuf 1.35.2 1.36.6

Updates github.com/cockroachdb/errors from 1.11.3 to 1.12.0

Release notes

Sourced from github.com/cockroachdb/errors's releases.

v1.12.0

What's Changed

Full Changelog: cockroachdb/errors@v1.11.3...v1.12.0

Commits
  • 2008f7c Merge pull request #152 from dhartunian/davidh/push-nzwovrxnkxmz
  • 3a6e335 Merge branch 'master' into davidh/push-nzwovrxnkxmz
  • 529b853 Merge pull request #150 from dhartunian/fix-readme
  • 766aa4d build: min supported version is go 1.23
  • f9a2c03 with safe details are visible in +v output
  • 5b23426 Merge pull request #144 from alexandear/fix/example-name
  • cb2348e Fix example names for HasType and HasInterface
  • See full diff in compare view

Updates github.com/go-jose/go-jose/v3 from 3.0.3 to 3.0.4

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

v3.0.4

What's Changed

Backport fix for GHSA-c6gw-w398-hv78 CVE-2025-27144 go-jose/go-jose#174

Full Changelog: go-jose/go-jose@v3.0.3...v3.0.4

Commits

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

  • (#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

  • (#370) Detect proto.Message types when failing to export a field
Commits

Updates github.com/rs/zerolog from 1.33.0 to 1.34.0

Commits
  • db9d1be Update go versions covered by CI
  • 5f4b880 Delete _config.yml
  • ffb2708 Remove CNAME file
  • cc4dde7 Create CONTRIBUTING.md
  • 04ea0f4 Implement Close() for zerolog.FilteredLevelWriter (#715)
  • 0398600 fix: reset condition in burst sampler (#711) (#712)
  • 1869fa5 FormatPartValueByName for flexible custom formatting for ConsoleWriter (#541)
  • 31e7995 remove unnecessary nil checks (#701)
  • 582f820 Get BasicSampler(0), RandomSampler(0), and BurstSampler(0) to behave the same...
  • 6abadab Bump github.com/rs/xid from 1.5.0 to 1.6.0 (#684)
  • See full diff in compare view

Updates go.opentelemetry.io/otel from 1.32.0 to 1.36.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.36.0/0.58.0/0.12.0] 2025-05-20

Added

  • Add exponential histogram support in go.opentelemetry.io/otel/exporters/prometheus. (#6421)
  • The go.opentelemetry.io/otel/semconv/v1.31.0 package. The package contains semantic conventions from the v1.31.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.30.0. (#6479)
  • Add Recording, Scope, and Record types in go.opentelemetry.io/otel/log/logtest. (#6507)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#6751)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#6752)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#6688)
  • Add ValuesGetter in go.opentelemetry.io/otel/propagation, a TextMapCarrier that supports retrieving multiple values for a single key. (#5973)
  • Add Values method to HeaderCarrier to implement the new ValuesGetter interface in go.opentelemetry.io/otel/propagation. (#5973)
  • Update Baggage in go.opentelemetry.io/otel/propagation to retrieve multiple values for a key when the carrier implements ValuesGetter. (#5973)
  • Add AssertEqual function in go.opentelemetry.io/otel/log/logtest. (#6662)
  • The go.opentelemetry.io/otel/semconv/v1.32.0 package. The package contains semantic conventions from the v1.32.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.31.0(#6782)
  • Add Transform option in go.opentelemetry.io/otel/log/logtest. (#6794)
  • Add Desc option in go.opentelemetry.io/otel/log/logtest. (#6796)

Removed

  • Drop support for [Go 1.22]. (#6381, #6418)
  • Remove Resource field from EnabledParameters in go.opentelemetry.io/otel/sdk/log. (#6494)
  • Remove RecordFactory type from go.opentelemetry.io/otel/log/logtest. (#6492)
  • Remove ScopeRecords, EmittedRecord, and RecordFactory types from go.opentelemetry.io/otel/log/logtest. (#6507)
  • Remove AssertRecordEqual function in go.opentelemetry.io/otel/log/logtest, use AssertEqual instead. (#6662)

Changed

  • ⚠️ Update github.com/prometheus/client_golang to v1.21.1, which changes the NameValidationScheme to UTF8Validation. This allows metrics names to keep original delimiters (e.g. .), rather than replacing with underscores. This can be reverted by setting github.com/prometheus/common/model.NameValidationScheme to LegacyValidation in github.com/prometheus/common/model. (#6433)
  • Initialize map with len(keys) in NewAllowKeysFilter and NewDenyKeysFilter to avoid unnecessary allocations in go.opentelemetry.io/otel/attribute. (#6455)
  • go.opentelemetry.io/otel/log/logtest is now a separate Go module. (#6465)
  • go.opentelemetry.io/otel/sdk/log/logtest is now a separate Go module. (#6466)
  • Recorder in go.opentelemetry.io/otel/log/logtest no longer separately stores records emitted by loggers with the same instrumentation scope. (#6507)
  • Improve performance of BatchProcessor in go.opentelemetry.io/otel/sdk/log by not exporting when exporter cannot accept more. (#6569, #6641)

Deprecated

  • Deprecate support for model.LegacyValidation for go.opentelemetry.io/otel/exporters/prometheus. (#6449)

Fixes

  • Stop percent encoding header environment variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#6392)
  • Ensure the noopSpan.tracerProvider method is not inlined in go.opentelemetry.io/otel/trace so the go.opentelemetry.io/auto instrumentation can instrument non-recording spans. (#6456)
  • Use a sync.Pool instead of allocating metricdata.ResourceMetrics in go.opentelemetry.io/otel/exporters/prometheus. (#6472)

... (truncated)

Commits
  • a85ae98 Release v1.36.0/v0.58.0/v0.12.0 (#6793)
  • 3f85c35 logtest: add Desc (#6796)
  • d2fff76 chore(deps): update module github.com/uudashr/iface to v1.4.0 (#6798)
  • 2d4c9dc Add semconv/v1.32.0 (#6782)
  • fe523bd logtest: add Transform (#6794)
  • e578799 fix(deps): update googleapis to 55703ea (#6795)
  • af189e5 chore(deps): update module github.com/golangci/misspell to v0.7.0 (#6792)
  • 836a2ce chore(deps): update module github.com/alecthomas/chroma/v2 to v2.18.0 (#6790)
  • 93f8f13 chore(deps): update github/codeql-action action to v3.28.18 (#6789)
  • 1556ff2 chore(deps): update codecov/codecov-action action to v5.4.3 (#6785)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.32.0 to 1.36.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.36.0/0.58.0/0.12.0] 2025-05-20

Added

  • Add exponential histogram support in go.opentelemetry.io/otel/exporters/prometheus. (#6421)
  • The go.opentelemetry.io/otel/semconv/v1.31.0 package. The package contains semantic conventions from the v1.31.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.30.0. (#6479)
  • Add Recording, Scope, and Record types in go.opentelemetry.io/otel/log/logtest. (#6507)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#6751)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#6752)
  • Add WithHTTPClient option to configure the http.Client used by go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#6688)
  • Add ValuesGetter in go.opentelemetry.io/otel/propagation, a TextMapCarrier that supports retrieving multiple values for a single key. (#5973)
  • Add Values method to HeaderCarrier to implement the new ValuesGetter interface in go.opentelemetry.io/otel/propagation. (#5973)
  • Update Baggage in go.opentelemetry.io/otel/propagation to retrieve multiple values for a key when the carrier implements ValuesGetter. (#5973)
  • Add AssertEqual function in go.opentelemetry.io/otel/log/logtest. (#6662)
  • The go.opentelemetry.io/otel/semconv/v1.32.0 package. The package contains semantic conventions from the v1.32.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.31.0(#6782)
  • Add Transform option in go.opentelemetry.io/otel/log/logtest. (#6794)
  • Add Desc option in go.opentelemetry.io/otel/log/logtest. (#6796)

Removed

  • Drop support for [Go 1.22]. (#6381, #6418)
  • Remove Resource field from EnabledParameters in go.opentelemetry.io/otel/sdk/log. (#6494)
  • Remove RecordFactory type from go.opentelemetry.io/otel/log/logtest. (#6492)
  • Remove ScopeRecords, EmittedRecord, and RecordFactory types from go.opentelemetry.io/otel/log/logtest. (#6507)
  • Remove AssertRecordEqual function in go.opentelemetry.io/otel/log/logtest, use AssertEqual instead. (#6662)

Changed

  • ⚠️ Update github.com/prometheus/client_golang to v1.21.1, which changes the NameValidationScheme to UTF8Validation. This allows metrics names to keep original delimiters (e.g. .), rather than replacing with underscores. This can be reverted by setting github.com/prometheus/common/model.NameValidationScheme to LegacyValidation in github.com/prometheus/common/model. (#6433)
  • Initialize map with len(keys) in NewAllowKeysFilter and NewDenyKeysFilter to avoid unnecessary allocations in go.opentelemetry.io/otel/attribute. (#6455)
  • go.opentelemetry.io/otel/log/logtest is now a separate Go module. (#6465)
  • go.opentelemetry.io/otel/sdk/log/logtest is now a separate Go module. (#6466)
  • Recorder in go.opentelemetry.io/otel/log/logtest no longer separately stores records emitted by loggers with the same instrumentation scope. (#6507)
  • Improve performance of BatchProcessor in go.opentelemetry.io/otel/sdk/log by not exporting when exporter cannot accept more. (#6569, #6641)

Deprecated

  • Deprecate support for model.LegacyValidation for go.opentelemetry.io/otel/exporters/prometheus. (#6449)

Fixes

  • Stop percent encoding header environment variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#6392)
  • Ensure the noopSpan.tracerProvider method is not inlined in go.opentelemetry.io/otel/trace so the go.opentelemetry.io/auto instrumentation can instrument non-recording spans. (#6456)
  • Use a sync.Pool instead of allocating metricdata.ResourceMetrics in go.opentelemetry.io/otel/exporters/prometheus. (#6472)

... (truncated)

Commits
  • a85ae98 Release v1.36.0/v0.58.0/v0.12.0 (#6793)
  • 3f85c35 logtest: add Desc (#6796)
  • d2fff76 chore(deps): update module github.com/uudashr/iface to v1.4.0 (#6798)
  • 2d4c9dc Add semconv/v1.32.0 (#6782)
  • fe523bd logtest: add Transform (#6794)
  • e578799 fix(deps): update googleapis to 55703ea (#6795)
  • af189e5 chore(deps): update module github.com/golangci/misspell to v0.7.0 (#6792)
  • 836a2ce chore(deps): update module github.com/alecthomas/chroma/v2 to v2.18.0 (#6790)
  • 93f8f13 chore(deps): update github/codeql-action action to v3.28.18 (#6789)
  • 1556ff2 chore(deps): update codecov/codecov-action action to v5.4.3 (#6785)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.30.0 to 0.39.0

Commits
  • 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client
  • 9bab967 go.mod: update golang.org/x dependencies
  • 4f9f0ca x509roots/fallback: add init time benchmark
  • eac7cf0 x509roots/fallback: move parsing code to a non-generated file
  • 18228cd acme: return err from deprecated TLS-SNI-[01|02] functions
  • 73f6362 acme: remove dead code
  • ebc8e46 ssh: add server side support for Diffie Hellman Group Exchange
  • e944286 ssh: expose negotiated algorithms
  • 78a1fd7 ssh: automatically add [email protected] KEX alias
  • ac58737 ssh: export supported algorithms
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.35.2 to 1.36.6

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomodupdates group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cockroachdb/errors](https://github.com/cockroachdb/errors) | `1.11.3` | `1.12.0` |
| [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.3` | `3.0.4` |
| [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.6.0` | `0.7.0` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.34.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.32.0` | `1.36.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.30.0` | `0.39.0` |
| google.golang.org/protobuf | `1.35.2` | `1.36.6` |



Updates `github.com/cockroachdb/errors` from 1.11.3 to 1.12.0
- [Release notes](https://github.com/cockroachdb/errors/releases)
- [Commits](cockroachdb/errors@v1.11.3...v1.12.0)

Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.4
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md)
- [Commits](go-jose/go-jose@v3.0.3...v3.0.4)

Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0
- [Commits](rs/zerolog@v1.33.0...v1.34.0)

Updates `go.opentelemetry.io/otel` from 1.32.0 to 1.36.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.32.0...v1.36.0)

Updates `go.opentelemetry.io/otel/trace` from 1.32.0 to 1.36.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.32.0...v1.36.0)

Updates `golang.org/x/crypto` from 0.30.0 to 0.39.0
- [Commits](golang/crypto@v0.30.0...v0.39.0)

Updates `google.golang.org/protobuf` from 1.35.2 to 1.36.6

---
updated-dependencies:
- dependency-name: github.com/cockroachdb/errors
  dependency-version: 1.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-version: 3.0.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomodupdates
- dependency-name: github.com/google/go-cmp
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: github.com/rs/zerolog
  dependency-version: 1.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: golang.org/x/crypto
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomodupdates
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 6, 2025
@chris-rock chris-rock merged commit cb137fd into main Jun 6, 2025
7 checks passed
@chris-rock chris-rock deleted the dependabot/go_modules/gomodupdates-3d320493b9 branch June 6, 2025 14:49
@github-actions github-actions bot locked and limited conversation to collaborators Jun 6, 2025
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant