Skip to content

Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.43.0#1381

Open
dependabot[bot] wants to merge 4309 commits into
mainfrom
dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0
Open

Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.43.0#1381
dependabot[bot] wants to merge 4309 commits into
mainfrom
dependabot/go_modules/go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp-1.43.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Copy link
Copy Markdown

Bumps go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.21.0 to 1.43.0.

Release notes

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's releases.

Release v1.23.0-rc.1

This is a release candidate for the v1.23.0 release. That release is expected to include the v1 release of the following modules:

  • go.opentelemetry.io/otel/bridge/opencensus
  • go.opentelemetry.io/otel/bridge/opencensus/test
  • go.opentelemetry.io/otel/example/opencensus
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
  • go.opentelemetry.io/otel/exporters/stdout/stdoutmetric

See our versioning policy for more information about these stability guarantees.

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits
  • 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
  • 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
  • 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
  • 5e363de limit response body size for OTLP HTTP exporters (#8108)
  • 35214b6 Use an absolute path when calling bsd kenv (#8113)
  • 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
  • e70658e fix: support getBody in otelploghttp (#8096)
  • 4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
  • b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
  • 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

dholms and others added 30 commits December 18, 2025 14:51
One might need custom plc directory endpoint other than
<https://plc.directory> for testing purposes or for plc mirrors.

As tap supports full network backfill, it would be better to test that
on sandboxed atproto infra than public infra with ~40M repos.

So I added a `plc-url` flag and `TAP_PLC_URL` env var.
Same as relay, `ATP_PLC_HOST` env var can also be used instead.
As indicated in the comment, adding an actual foreign key relationship
would probably help with this. But doing it as a query tweak is a
simpler change to deploy (no schema change).
Seeing lots of crashes in rainbow due to us sending to `s.outgoing` even
though it's already been closed.

This is clearly a bandaid, but we need a fix ASAP, and this should
probably be in there anyways

<img width="1608" height="823" alt="image"
src="https://github.com/user-attachments/assets/ce0ba2d3-b9a4-4564-9de9-3b69070ef67b"
/>

^ note that large recent missing data blip was me cutting the rainbow
process over to a new management system. Had a bit of downtime (sorry!)
Resyncer was setting `retry_after` but then not actually respecting it
when claiming a job

Closes #1239
We were verifying structure of commit, but not verifying the signature
itself.

Closes #1238
Follow up to #1247

Ensure we're retrying errored repos and increase backoff to 1-60min as
opposed to 1-60s
…rrors (#1257)

When Tap restarts, the EventManager loads existing events from the
database but doesn't initialize the nextID counter. This causes new
events to be assigned IDs starting from 0, which collide with existing
database records.

The fix restores the nextID counter as events are loaded, ensuring new
IDs are always greater than any existing database IDs.

Fixes #1253
This reverts commit 2c00289.


We need to remove this field here and from `@atproto/bsky`, deploy the
lexicon without it, and then re-add it as string.

Long story short: `recId` is an `int64` and TS/JS cannot get the machine
ID out of it because it can't handle big integers unless with explicity
`BigInt` — which is not the case in our stack. So we're gonna pass it
ias string instead.

Related PRs:

* bluesky-social/atproto#4440
* #1263
* bluesky-social/seeemore#155 
* bluesky-social/seeemore#158
github.com/bluesky-social/indigo/api/atproto was imported twice, the second time
under an alias. This commit removes the duplicated import.
github.com/bluesky-social/indigo/api/atproto was imported twice, the
second time under an alias. This commit removes the duplicated import.
bnewbold and others added 25 commits April 8, 2026 13:38
(this is on top of the Go v1.26 PR; we should merge that first)

An initial batch of `go fix ./...` changes. We are likely to want to
merge in more auto-fixes, but this is a broad start for things like
for/range, `interface{}` to `any`, `wg.Go()`, etc. I manually skimmed
all of these and they seem safe.
Simply updates to Go v1.26.

Have a follow-up PR with some `go fix ./...` updates.

Most of our go repos which depend on indigo have already been updated,
but I have separate PRs out for some straglers.
This fixes two dropped `err` variables in `atproto/auth`. I tried to
follow the most canonical use of `%w` in a `fmt.Errorf`. If this project
follows a different standard, I'll happily change it.

Unit tests passed both before and after changes.
This picks up a dropped test error in `lex/util`.
The motivation is that we are looking at doing a "gallery" embed type on
bsky posts, and want to constrain the increase in concurrent goroutines.
In particular, the number of concurrent HTTP requests being made by
automod to PDS instances to download the blobs: we don't want automod to
get rate-limited if it is doing dozens of concurrent blob requests to a
small/simple PDS due to a single record; or to DDoS that type of PDS
instance if it does not have limits on concurrent requests in place.

Note that this patch does *not* add concurrency limits on processing
rules for individual blobs. If an automod process had 20 blob rules, and
concurrent blob processing of 8x, it might start 160 processing
goroutines at the same time. This is expected to be fine because blob
rules are usually "per service", and these requests would be going to
separate backend services. The best way to constrain concurrency there
is to limit the overall number of worker queues.

Note that i'm not using `errgroup.WithContext` (doesn't seem needed),
and that i'm doing the old-fashioned `blob := blob` variable
re-assignment in the for-loops out of habit, even though loop vars were
fixed in Go 1.22.

Mostly requesting review from Rafael, but also tagging Jim for review
(if he has time) just for idiomatic Go concurrency patterns.
In this new version of the relay, only the account limit is actually
editable. This clarifies this by making the other event limits static
(not editable)
Adds a **non-breaking change** to `backfill` package.

* With `.Start()` it would use the default logger
* This PR adds `StartWithLogger(*slog.Logger)` so the user can use a
custom logger
* Now `Start()` just wraps the default logger in a `StartWithLogger`
call (so, not breaking the API)

(the two other minor changes are from the linter)
Motivation is to make it clearer how to operate the relay, eg when
bumping limits. Only the account limit is actually editable.

Also a small patch to improve logging/printing at startup (uses slog
instead of 'echo' web framework default port printing).
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) from 1.21.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.