chore(deps): Update go minor and patch - #2254
Open
renovate[bot] wants to merge 1 commit into
Open
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
|
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
4 times, most recently
from
February 11, 2026 10:05
6a1608f to
b9ce655
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
from
February 12, 2026 22:02
b9ce655 to
af6dbd5
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
from
February 26, 2026 15:17
af6dbd5 to
36c46d1
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
4 times, most recently
from
March 9, 2026 22:40
bcf867e to
5f60cc9
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
3 times, most recently
from
March 27, 2026 20:50
09f1fcc to
e655702
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
3 times, most recently
from
April 10, 2026 08:54
4ea87b6 to
0328640
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
7 times, most recently
from
April 20, 2026 00:26
26f05c2 to
f31a390
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
4 times, most recently
from
May 8, 2026 13:50
6b3a127 to
ba28352
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
5 times, most recently
from
June 13, 2026 02:08
d550958 to
da26553
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
3 times, most recently
from
June 22, 2026 04:38
b0b4acb to
7a6c07c
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
8 times, most recently
from
July 10, 2026 02:40
446f431 to
aa61f85
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
3 times, most recently
from
July 11, 2026 13:56
a5a91cb to
10db2ea
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
7 times, most recently
from
July 26, 2026 22:07
d41387b to
f5ff3fa
Compare
renovate
Bot
force-pushed
the
renovate/go-minor-and-patch
branch
3 times, most recently
from
August 7, 2026 22:12
6579027 to
82d44b5
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v2.2.0→v2.4.2v25.2.10+incompatible→v25.12.19+incompatiblev1.18.0→v1.19.2v1.9.1→v1.10.2v0.66.0→v0.70.0v1.41.0→v1.45.0v0.41.0→v0.47.0v1.36.7→v1.36.11Release Notes
dgraph-io/ristretto (github.com/dgraph-io/ristretto/v2)
v2.4.2Compare Source
Fixed
sampledLFUkeyCostsmap (#482), which allocatedNumCounters/10map buckets at boot and caused a large RSS regression for caches with highNumCountersFull Changelog: dgraph-io/ristretto@v2.4.1...v2.4.2
v2.4.1Compare Source
Changed
keyCostsmap insampledLFU(#482)Fixed
Full Changelog: dgraph-io/ristretto@v2.4.0...v2.4.1
v2.4.0Compare Source
Added
Cache.IterValues()method (#475)Fixed
Full Changelog: dgraph-io/ristretto@v2.3.0...v2.4.0
v2.3.0: Ristretto v2.3.0Compare Source
What's Changed
New Contributors
Full Changelog: dgraph-io/ristretto@v2.2.0...v2.3.0
google/flatbuffers (github.com/google/flatbuffers)
v25.12.19+incompatibleCompare Source
v25.9.23+incompatibleCompare Source
klauspost/compress (github.com/klauspost/compress)
v1.19.2Compare Source
What's Changed
New Contributors
Full Changelog: klauspost/compress@v1.19.1...v1.19.2
v1.19.1Compare Source
What's Changed
Peekinstead ofReadBytefor thebufio.Readerdecode path by @joechenrh in #1169New Contributors
Full Changelog: klauspost/compress@v1.19.0...v1.19.1
v1.19.0Compare Source
What's Changed
decodedLenby @eustas in #1148New Contributors
Full Changelog: klauspost/compress@v1.18.6...v1.19.0
v1.18.7Compare Source
Security release without other changes.
Full Changelog: klauspost/compress@v1.18.6...v1.18.7
v1.18.6Compare Source
What's Changed
New Contributors
Full Changelog: klauspost/compress@v1.18.5...v1.18.6
v1.18.5Compare Source
What's Changed
Full Changelog: klauspost/compress@v1.18.4...v1.18.5
v1.18.4Compare Source
What's Changed
New Contributors
Full Changelog: klauspost/compress@v1.18.2...v1.18.4
v1.18.3Compare Source
Downstream CVE-2025-61728
See golang/go#77102
Full Changelog: klauspost/compress@v1.18.2...v1.18.3
v1.18.2Compare Source
What's Changed
v1.18.1is marked "retracted" due to invalid flate/zip/gzip encoding.New Contributors
Full Changelog: klauspost/compress@v1.18.1...v1.18.2
v1.18.1Compare Source
What's Changed
New Contributors
Full Changelog: klauspost/compress@v1.18.0...v1.18.1
spf13/cobra (github.com/spf13/cobra)
v1.10.2Compare Source
🔧 Dependencies
gopkg.in/yaml.v3togo.yaml.in/yaml/v3by @dims in #2336 - thegopkg.in/yaml.v3package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers ofspf13/cobra📈 CI/CD
🔥✍🏼 Docs
🍂 Refactors
🤗 New Contributors
Full Changelog: spf13/cobra@v1.10.1...v1.10.2
Thank you to our amazing contributors!!!!! 🐍 🚀
v1.10.1Compare Source
🐛 Fix
v1.0.9 of pflags brought back
ParseErrorsWhitelistand marked it as deprecatedFull Changelog: spf13/cobra@v1.10.0...v1.10.1
v1.10.0Compare Source
What's Changed
🚨 Attention!
This version of
pflagcarried a breaking change: it renamedParseErrorsWhitelisttoParseErrorsAllowlistwhich can break builds if bothpflagandcobraare dependencies in your project.pflag andcobra, upgradepflagto 1.0.8 andcobrato1.10.0`pflagv1.0.9 which keeps the deprecatedParseErrorsWhitelistMore details can be found here: #2303 (comment)
✨ Features
🐛 Fix
🪠 Testing
📝 Docs
New Contributors
Full Changelog: spf13/cobra@v1.9.1...v1.9.2
open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)
v1.45.0Compare Source
v1.44.0: /v0.66.0/v0.20.0/v0.0.17Compare Source
Added
ByteSliceandByteSliceValuefunctions for newBYTESLICEattribute type ingo.opentelemetry.io/otel/attribute. (#7948)KindBytesattribute type ingo.opentelemetry.io/otel/sdk/log. (#7990)BYTESLICEattribute type ingo.opentelemetry.io/otel/sdk/trace. (#7990)BYTESLICEattributes ingo.opentelemetry.io/otel/trace. (#8153)BYTESLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8153)BYTESLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlplog. (#8153)BYTESLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8153)BYTESLICEattributes ingo.opentelemetry.io/otel/exporters/zipkin. (#8153)Stringmethod forValuetype ingo.opentelemetry.io/otel/attribute. (#8142)SliceandSliceValuefunctions for newSLICEattribute type ingo.opentelemetry.io/otel/attribute. (#8166)SLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8216)SLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlplog. (#8216)SLICEattributes ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8216)SLICEattributes ingo.opentelemetry.io/otel/exporters/zipkin. (#8216)AttributeValueLengthLimittoattribute.SLICEtype attribute values ingo.opentelemetry.io/otel/sdk/trace, recursively truncating contained string values. (#8217)Errorfield onRecordtype ingo.opentelemetry.io/otel/log/logtest. (#8148)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8157)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8157)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8157)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8157)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8157)WithMaxRequestSizeoption ingo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8157)Settabletogo.opentelemetry.io/otel/metric/xto allow reusing attribute options. (#8178)go.opentelemetry.io/otel/sdk/metric.Set
OTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=<max_size>to enable for all periodic readers.See
go.opentelemetry.io/otel/sdk/metric/internal/xfor feature documentation. (#8071)go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc.Enable with
OTEL_GO_X_SELF_OBSERVABILITY=trueenvironment variable.See
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/xfor feature documentation. (#8192)go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp.Enable with
OTEL_GO_X_SELF_OBSERVABILITY=trueenvironment variable.See
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp/internal/xfor feature documentation. (#8194)go.opentelemetry.io/otel/exporters/stdout/stdoutlog.Enable with
OTEL_GO_X_SELF_OBSERVABILITY=trueenvironment variable.See
go.opentelemetry.io/otel/stdout/stdoutlog/internal/xfor feature documentation. (#8263)WithDefaultAttributestogo.opentelemetry.io/otel/metric/xto support setting default attributes on instruments. (#8135)go.opentelemetry.io/otel/semconv/v1.41.0package.The package contains semantic conventions from the
v1.41.0version of the OpenTelemetry Semantic Conventions.See the migration documentation for information on how to upgrade from
go.opentelemetry.io/otel/semconv/v1.40.0. (#8324)go.opentelemetry.io/otel/semconv/v1.41.0package. (#8350)go.opentelemetry.io/otel/semconv/v1.41.0. (#8002)Changed
go.opentelemetry.io/otel/sdk/metricnow applies a default cardinality limit of 2000 to comply with the Metrics SDK specification recommendation.New attribute sets are dropped when the cardinality limit is reached. The measurement of these sets are aggregated into a special attribute set containing
attribute.Bool("otel.metric.overflow", true).This can break users who relied on the previous unlimited default.
Set
WithCardinalityLimit(0)or the deprecatedOTEL_GO_X_CARDINALITY_LIMIT=0environment variable to preserve unlimited cardinality.Note that support for
OTEL_GO_X_CARDINALITY_LIMITmay be removed in a future release. (#8247)ErrorTypeingo.opentelemetry.io/otel/semconvnow unwraps errors created withfmt.Errorfwhen deriving theerror.typeattribute. (#8133)go.opentelemetry.io/otel/sdk/lognow unwraps error chains created withfmt.Errorfwhen deriving theerror.typeattribute from errors on log records. (#8133)Set.MarshalLogmethod ingo.opentelemetry.io/otel/attributenow usesValue.Stringformatting following the OpenTelemetry AnyValue representation for non-OTLP protocols. (#8169)go.opentelemetry.io/otel/sdk/metricto return a drop reservoir and short-circuitOffercalls to the exemplar reservoir whenexemplar.AlwaysOffFilteris configured. (#8211) (#8267)go.opentelemetry.io/otel/sdk/metricto return a drop reservoir for asynchronous instruments whenexemplar.TraceBasedFilteris configured. (#8286)Deprecated
Value.Emitmethod ingo.opentelemetry.io/otel/attribute.Use
Value.Stringinstead. (#8176)Fixed
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp.The limit applies before compression, oversized requests are treated as non-retryable errors, and the limit can be configured with the new
WithMaxRequestSizeoption. (#8157, #8365)go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8135)go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8152)go.opentelemetry.io/otel/exporters/prometheusnow usesValue.Stringformatting for label values following the OpenTelemetry AnyValue representation for non-OTLP protocols. (#8170)ShutdownonBatchSpanProcessoringo.opentelemetry.io/otel/sdk/trace. (#8197)go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpandgo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8226)Collectdata race and potential panic ingo.opentelemetry.io/otel/exporters/prometheuswhenWithResourceAsConstantLabelsoption is used. (#8227)FixedSizeReservoiringo.opentelemetry.io/otel/sdk/metric/exemplarby reverting #7447. (#8249)FixedSizeReservoiringo.opentelemetry.io/otel/sdk/metric/exemplarto safely handle zero size.A capacity check in the constructor initializes the reservoir safely and skips initialization for zero-cap; early returns in
Offer()andCollect()ensure no-op behavior. (#8295)go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc,go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp,go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, andgo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8254)name,version, orschema_urlfrom metric labels ingo.opentelemetry.io/otel/exporters/prometheus, preserving the dedicatedotel_scope_name,otel_scope_version, andotel_scope_schema_urllabels. (#8264)ParseFileingo.opentelemetry.io/otel/schema/v1.0andgo.opentelemetry.io/otel/schema/v1.1. (GHSA-995v-fvrw-c78m)go.opentelemetry.io/otel/baggageandgo.opentelemetry.io/otel/propagation. (#8222)go.opentelemetry.io/otel/semconv/v1.41.0to includeAttr*helper methods for required attributes on observable instruments. (#8361)go.opentelemetry.io/otel/propagationto prevent malformed or oversized baggage headers from flooding logs. (GHSA-5wrp-cwcj-q835)What's Changed
e5db982by @renovate[bot] in #813632cd848by @renovate[bot] in #81416f92a3bby @renovate[bot] in #814093c7c8aby @renovate[bot] in #81586b4d2bcby @renovate[bot] in #8160BYTESLICEattributes across trace and exporter paths by @MrAlias in #8153746e56fby @renovate[bot] in #81753e5c5a5by @renovate[bot] in #8190afd174aby @renovate[bot] in #8195Configuration
📅 Schedule: (UTC)
* 0-3 1 * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.