build(deps): bump the all-updates group across 1 directory with 16 updates by dependabot[bot] · Pull Request #7148 · caddyserver/caddy

dependabot · 2025-07-29T18:02:20Z

Bumps the all-updates group with 9 updates in the / directory:

Package	From	To
github.com/KimMachineGun/automemlimit	`0.7.1`	`0.7.4`
github.com/google/cel-go	`0.24.1`	`0.26.0`
github.com/prometheus/client_golang	`1.19.1`	`1.22.0`
github.com/smallstep/certificates	`0.26.1`	`0.28.4`
github.com/yuin/goldmark	`1.7.8`	`1.7.13`
go.opentelemetry.io/contrib/propagators/autoprop	`0.42.0`	`0.62.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.31.0`	`1.37.0`
github.com/libdns/libdns	`1.0.0-beta.1`	`1.1.0`
github.com/pires/go-proxyproto	`0.7.1-0.20240628150027-b718e7ce4964`	`0.8.1`

Updates github.com/KimMachineGun/automemlimit from 0.7.1 to 0.7.4

Release notes

Sourced from github.com/KimMachineGun/automemlimit's releases.

v0.7.4

What's Changed

fix(memlimit): use memory.stat instead of memory.stats by @sergeysedoy97 in KimMachineGun/automemlimit#30

New Contributors

@sergeysedoy97 made their first contribution in KimMachineGun/automemlimit#30

Full Changelog: KimMachineGun/automemlimit@v0.7.3...v0.7.4

v0.7.3

What's Changed

fix(memlimit): move goroutine execution inside refresh function by @KimMachineGun in KimMachineGun/automemlimit@b2c01e8

Full Changelog: KimMachineGun/automemlimit@v0.7.2...v0.7.3

v0.7.2

What's Changed

fix(memlimit): fix mountinfo validation logic when super options have spaces by @KimMachineGun in KimMachineGun/automemlimit@a659ed1

Full Changelog: KimMachineGun/automemlimit@v0.7.1...v0.7.2

Commits

e8d0135 fix(memlimit): use memory.stat instead of memory.stats (#30)
b2c01e8 fix(memlimit): move goroutine execution inside refresh function
a9a712b ci: bump ubuntu version
a659ed1 fix(memlimit): fix mountinfo validation logic when super options have spaces
b5e3683 chore(examples/gosigar): remove gosigar example
See full diff in compare view

Updates github.com/google/cel-go from 0.24.1 to 0.26.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.26.0

New Features ✨

Add support for global constants to constant folder by @zeitgeist87 in #1180

Adding CEL Regex Extensions by @maskri17 in #1187

Sqrt func by @haribalan in #1166

Add bazel rule to trigger cel tests and return policy metadata while creating CEL programs by @aakash070 in #1176

Create an util method to convert rpc status to eval status by @ChinmayMadeshi in #1178

Add test runner option to configure a custom test suite parser by @aakash070 in #1189

Cost tracking for list operations by @TristonianJones in #1192

Bug Fixes 🐛

Fix lastIndexOf behavior against an empty string in strings extension by @l46kok in #1173

Fix container setting for cel test all types example in online REPL by @l46kok in #1182

fix(checker): Correct Sprintf argument count by @cuishuang in #1185

Test Updates 🧪

fix test runner test cases by @aakash070 in #1170

Update test runner to avoid using flags when not necessary by @TristonianJones in #1174

add support for handling unknown expression ids in test result by @aakash070 in #1183

Test case for aliasing container imports by @TristonianJones in #1193

Documentation 📚

Add documentation for YAML quirks in celpolicy by @jnthntatum in #1186

Dependency Updates ⬆️

Bump the npm_and_yarn group across 1 directory with 2 updates by @dependabot[bot] in #1188

Release v0.25.0

Features & Enhancements

This release introduces features for richer configuration-based CEL, AI prompt generation from config files, additional documentation, and 3x performance when evaluating traced / state-tracking expressions. This release also introduces a unit test runner framwork.

#1141: Expose extension option factory as a public method

#1143: Add a new compiler tool which can be used to compile CEL expressions and policies using serialized environment

#1151: Lightweight observable evaluation

#1155: Utilities for formatting and parsing documentation strings

#1156: Support for documentation and example strings in CEL environments

#1158: Re-export interpreter.AttributePattern in package cel.

#1159: Document the standard library macros and functions

... (truncated)

Commits

b023645 Cost tracking for list operations (#1192)
41023c5 Test case for aliasing container imports (#1193)
41e7392 Add test runner option to configure a custom test suite parser (#1189)
a4b169a Add Regex Extension Library (#1187)
050981e fix(checker): Correct Sprintf argument count in notAnOptionalFieldSelectionCa...
be08958 Bump the npm_and_yarn group across 1 directory with 2 updates (#1188)
66a441f Add support for global constants to constant folder (#1180)
dc36eaa Add documentation for YAML quirks in celpolicy (#1186)
c55aebf add support for handling unknown expression ids in test result (#1183)
746d711 Fix container setting for cel test all types example in online REPL (#1182)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.19.1 to 1.22.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.22.0 - 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

build(deps): bump golang.org/x/sys from 0.28.0 to 0.29.0 by @dependabot in prometheus/client_golang#1720

build(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.3 by @dependabot in prometheus/client_golang#1719

Update RELEASE.md by @bwplotka in prometheus/client_golang#1721

chore(docs): Add links for the upstream PRs by @kakkoyun in prometheus/client_golang#1722

Added tips on releasing client and checking with k8s. by @bwplotka in prometheus/client_golang#1723

feat: Add new CollectorFunc utility by @Saumya40-codes in prometheus/client_golang#1724

build(deps): bump google.golang.org/protobuf from 1.36.3 to 1.36.4 by @dependabot in prometheus/client_golang#1725

build(deps): bump the github-actions group with 5 updates by @dependabot in prometheus/client_golang#1726

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1727

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1731

build(deps): bump golang.org/x/sys from 0.29.0 to 0.30.0 by @dependabot in prometheus/client_golang#1739

build(deps): bump google.golang.org/protobuf from 1.36.4 to 1.36.5 by @dependabot in prometheus/client_golang#1740

Cleanup dependabot config by @SuperQ in prometheus/client_golang#1741

Upgrade Golang version v1.24 by @dongjiang1989 in prometheus/client_golang#1738

build(deps): bump the github-actions group with 2 updates by @dependabot in prometheus/client_golang#1742

Merging 1.21 release back to main. by @bwplotka in prometheus/client_golang#1744

Synchronize common files from prometheus/prometheus by @prombot in prometheus/client_golang#1745

Add support for undocumented query options for API by @mahendrapaipuri in prometheus/client_golang#1743

exp/api: Add experimental exp module; Add remote API with write client and handler. by @bwplotka in prometheus/client_golang#1658

exp/api: Add accepted msg type validation to handler by @saswatamcode in prometheus/client_golang#1750

build(deps): bump the github-actions group with 5 updates by @dependabot in prometheus/client_golang#1751

build(deps): bump github.com/klauspost/compress from 1.17.11 to 1.18.0 by @dependabot in prometheus/client_golang#1752

build(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 by @dependabot in prometheus/client_golang#1753

exp: Reset snappy buf by @saswatamcode in prometheus/client_golang#1756

Merge release 1.21.1 to main. by @bwplotka in prometheus/client_golang#1762

exp: Add dependabot config by @saswatamcode in prometheus/client_golang#1754

build(deps): bump peter-evans/create-pull-request from 7.0.7 to 7.0.8 in the github-actions group by @dependabot in prometheus/client_golang#1764

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

[BUGFIX] prometheus: Revert of Inc, Add and Observe cumulative metric CAS optimizations (#1661), causing regressions on low contention cases.

[BUGFIX] prometheus: Fix GOOS=ios build, broken due to process_collector_* wrong build tags.

1.21.0 / 2025-02-17

⚠️ This release contains potential breaking change if you upgrade github.com/prometheus/common to 0.62+ together with client_golang. ⚠️

New common version changes model.NameValidationScheme global variable, which relaxes the validation of label names and metric name, allowing all UTF-8 characters. Typically, this should not break any user, unless your test or usage expects strict certain names to panic/fail on client_golang metric registration, gathering or scrape. In case of problems change model.NameValidationScheme to old model.LegacyValidation value in your project init function.

[BUGFIX] gocollector: Fix help message for runtime/metric metrics. #1583

[BUGFIX] prometheus: Fix Desc.String() method for no labels case. #1687

[ENHANCEMENT] prometheus: Optimize popular prometheus.BuildFQName function; now up to 30% faster. #1665

[ENHANCEMENT] prometheus: Optimize Inc, Add and Observe cumulative metrics; now up to 50% faster under high concurrent contention. #1661

[CHANGE] Upgrade prometheus/common to 0.62.0 which changes model.NameValidationScheme global variable. #1712

[CHANGE] Add support for Go 1.23. #1602

[FEATURE] process_collector: Add support for Darwin systems. #1600 #1616 #1625 #1675 #1715

[FEATURE] api: Add ability to invoke CloseIdleConnections on api.Client using api.Client.(CloseIdler).CloseIdleConnections() casting. #1513

[FEATURE] promhttp: Add promhttp.HandlerOpts.EnableOpenMetricsTextCreatedSamples option to create OpenMetrics _created lines. Not recommended unless you want to use opt-in Created Timestamp feature. Community works on OpenMetrics 2.0 format that should make those lines obsolete (they increase cardinality significantly). #1408

[FEATURE] prometheus: Add NewConstNativeHistogram function. #1654

1.20.5 / 2024-10-15

[BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input.

1.20.4 / 2024-09-07

... (truncated)

Commits

d50be25 Cut 1.22.0 (#1793)
1043db7 Cut 1.22.0-rc.0 (#1768)
e575c9c promhttp: Isolate zstd support and klauspost/compress library use to promhttp...
f2276aa Merge pull request #1764 from prometheus/dependabot/github_actions/github-act...
9df772c build(deps): bump peter-evans/create-pull-request
a3548c5 Merge pull request #1754 from saswatamcode/exp-eh
60fd2b0 Remove go.work file for now
8f9d0de exp: Add dependabot config
c5cf981 Merge pull request #1762 from prometheus/release-1.21
8a42da3 Fix ios build. (#1758)
Additional commits viewable in compare view

Updates github.com/smallstep/certificates from 0.26.1 to 0.28.4

Release notes

Sourced from github.com/smallstep/certificates's releases.

Step CA v0.28.4 (25-07-14)

Official Release Artifacts

Linux

📦 step-ca_linux_0.28.4_amd64.tar.gz

📦 step-ca_0.28.4-1_amd64.deb

📦 step-ca-0.28.4-1.x86_64.rpm

📦 step-ca_0.28.4-1_arm64.deb

📦 step-ca-0.28.4-1.aarch64.rpm

OSX Darwin

📦 step-ca_darwin_0.28.4_amd64.tar.gz

📦 step-ca_darwin_0.28.4_arm64.tar.gz

Windows

📦 step-ca_windows_0.28.4_amd64.zip

For more builds across platforms and architectures, see the Assets section below. And for packaged versions (Docker, k8s, Homebrew), see our installation docs.

Don't see the artifact you need? Open an issue here.

Signatures and Checksums

step-ca uses sigstore/cosign for signing and verifying release artifacts.

Below is an example using cosign to verify a release artifact:
cosign verify-blob \
  --certificate step-ca_darwin_0.28.4_amd64.tar.gz.pem \
  --signature step-ca_darwin_0.28.4_amd64.tar.gz.sig \
  --certificate-identity-regexp "https://github\.com/smallstep/workflows/.*" \
  --certificate-oidc-issuer https://token.actions.githubusercontent.com \
  step-ca_darwin_0.28.4_amd64.tar.gz
The checksums.txt file (in the Assets section below) contains a checksum for every artifact in the release.

Changelog

2c61c44176a89885ea69dd341dca16fb2875d868 Update changelog (#2332)

c86cf07be9c5909a08e631ca0490662f734c3505 Merge pull request #2331 from smallstep/mariano/fix-tests

831d005df8f245ba2cc98028524488f6d0a7442c Fix gcp unit tests

bc09e46c3c8263b1d10cd5afcf50da34a1c97b82 Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking

0d9f0513cfd5506398f972dd8c40a5f3973be769 Merge branch 'master' into feat-gcp-enable-organization-checking

197d0d3508d5f424865682a4df61a05850331487 Changelog updates (#2330)

293222505539eed2e3dff9078070f1368dd55d99 Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.org/api-0.240.0

... (truncated)

Changelog

Sourced from github.com/smallstep/certificates's changelog.

[0.28.4] - unreleased

Added

Add support for using key usage, extended key usage, and basic constraints smallstep/crypto#767

smallstep/certificates#2326

smallstep/certificates#2290

Enable dynamic validation of project ownership within a GCP organization smallstep/certificates#2133

Changed

Introduce poolhttp package for improved memory performance of Authority smallstep/certificates#2325

[0.28.3] - 2025-03-17

dependabot updates

[0.28.2] - 2025-02-20

Added

smallstep/certificates#2113

smallstep/certificates#2114

smallstep/certificates#2124

Changed

smallstep/certificates#2098smallstep/certificates#2103, smallstep/certificates#2104)

For example, replacing http.DefaultTransport clone in provisioner webhook business logic.

[0.28.1] - 2024-11-19

Added

smallstep/certificates#2065

smallstep/certificates#2066smallstep/certificates#2069)

smallstep/certificates#2076

smallstep/certificates#2077

Changed

smallstep/certificates#2076

... (truncated)

Commits

2c61c44 Update changelog (#2332)
c86cf07 Merge pull request #2331 from smallstep/mariano/fix-tests
831d005 Fix gcp unit tests
bc09e46 Merge pull request #2133 from ericnorris/feat-gcp-enable-organization-checking
0d9f051 Merge branch 'master' into feat-gcp-enable-organization-checking
197d0d3 Changelog updates (#2330)
2932225 Merge pull request #2329 from smallstep/dependabot/go_modules/google.golang.o...
312d1a2 Merge pull request #2325 from smallstep/mariano/httpclient
b1dd5a6 Bump google.golang.org/api from 0.239.0 to 0.240.0
244e610 Merge pull request #2326 from smallstep/mariano/fix-2323
Additional commits viewable in compare view

Updates github.com/smallstep/nosql from 0.6.1 to 0.7.0

Commits

cea08a0 Merge pull request #63 from smallstep/mariano/pgx
383be78 Upgrade postgres library
709752c Merge pull request #62 from smallstep/dependabot/go_modules/go.etcd.io/bbolt-...
83bae70 Update go version in go.mod to v1.21
ceebe5d Bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
220ba2c Merge pull request #59 from smallstep/dependabot/go_modules/github.com/go-sql...
08700c9 Bump github.com/go-sql-driver/mysql from 1.7.1 to 1.8.1
See full diff in compare view

Updates github.com/yuin/goldmark from 1.7.8 to 1.7.13

Commits

9a7f4c9 fix: panics when negative indent with tabs in fenced code block. Fixes #522
9676021 Merge pull request #517 from wjkoh/add-treeblood
8422226 Add goldmark-treeblood extension
afcb7ff Update issue templates
25aa773 Fixes #509
31bbeb2 Cleanup codes
85b270b Fixes #503
af6c0b5 Fix bug in AST names
6951ff3 Improve static map builds
04410ff Merge pull request #487 from n-peugnet/patch-1
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.56.0 to 0.61.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release 1.37.0/0.62.0/0.31.0/0.17.0/0.12.0/0.10.0/0.9.0

Added

Add the WithPublicEndpoint and WithPublicEndpointFn options to go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7407)

Changed

go.opentelemetry.io/contrib/instrumentation/runtime now produces the new metrics by default. Set OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=true environment variable to additionally produce the deprecated metrics. (#7418)

The semantic conventions have been upgraded from v1.30.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7361)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/aws/ec2. (#7373, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/aws/eks. (#7375, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/aws/ecs. (#7374, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/aws/lambda. (#7376, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#7377, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/bridges/otelslog. (#7361, #7484)

The semantic conventions have been upgraded from v1.27.0 to v1.34.0 in go.opentelemetry.io/contrib/bridges/otellogr. (#7387, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/bridges/otelzap. (#7389, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/detectors/gcp. (#7378, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful. (#7383, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#7383, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7383, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#7383, #7484)

The semantic conventions have been upgraded from v1.26.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#7383, #7484)

The semantic conventions have been upgraded in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo to v1.34.0. (#7393, #7484)

The semantic conventions have been upgraded in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo to v1.34.0. (#7393, #7484)

The semantic conventions have been upgraded in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws to v1.34.0. (#7394, #7484)

The messaging.system=AmazonSQS attribute has been corrected to messaging.system=aws.sqs.

The net.peer.addr attribute key has been upgraded to server.address.

The http.status_code attribute key has been upgraded to http.response.status_code.

The db.system=dynamodb attribute has been corrected to db.system.name=aws.dynamodb.

The deprecated messaging.operation.type=publish attribute has been corrected to messaging.operation.type=send.

The semantic conventions have been upgraded from v1.21.0 to v1.34.0 in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda. (#7400, #7484)

The semantic conventions in go.opentelemetry.io/contrib/instrumentation/host have been upgraded to v1.34.0. (#7390, #7484)

The description of process.cpu.time is updated to comply with semantic conventions.

process.cpu.time now uses the state attribute instead of cpu.mode.

The system.cpu.time metric is renamed to cpu.time.

cpu.time now uses the state attribute instead of cpu.mode.

system.memory.usage now uses the state attribute instead of system.memory.state.

system.memory.utilization now uses the state attribute instead of system.memory.state.

The system.memory.state attribute (now state) value of available is now free instead.

Deprecated

AttributeCPUTimeUser in go.opentelemetry.io/contrib/instrumentation/host is deprecated. Use go.opentelemetry.io/otel/semconv instead. (#7390)

AttributeCPUTimeSystem in go.opentelemetry.io/contrib/instrumentation/host is deprecated. Use go.opentelemetry.io/otel/semconv instead. (#7390)

AttributeCPUTimeOther in go.opentelemetry.io/contrib/instrumentation/host is deprecated. Use go.opentelemetry.io/otel/semconv instead. (#7390)

AttributeCPUTimeIdle in go.opentelemetry.io/contrib/instrumentation/host is deprecated.

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.36.0/0.61.0/0.30.0/0.16.0/0.11.0/0.9.0/0.8.0] - 2025-05-21

Added

http.route attribute to otelhttp server request spans, when net/http.Request.Pattern is set in the modules below. (#6905, #6937)

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Add WithAttributes option to set instrumentation scope attributes on the created log.Logger in go.opentelemetry.io/contrib/bridges/otelzap. (#6962)

Add WithAttributes option to set instrumentation scope attributes on the created log.Logger in go.opentelemetry.io/contrib/bridges/otelslog. (#6965)

Add WithAttributes option to set instrumentation scope attributes on the created log.Logger in go.opentelemetry.io/contrib/bridges/otellogrus. (#6966)

Add WithAttributes option to set instrumentation scope attributes on the created log.Logger in go.opentelemetry.io/contrib/bridges/otellogr. (#6967)

Add the WithGinMetricAttributes option to allow setting dynamic, per-request metric attributes based on *gin.Context in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#6932)

Use Gin's own ClientIP method to detect the client's IP, which supports custom proxy headers in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#6095)

Added test for Fields in go.opentelemetry.io/contrib/propagators/jaeger. (#7119)

Allow configuring samplers in go.opentelemetry.io/contrib/otelconf. (#7148)

Slog log bridge now sets SeverityText attribute using source value in go.opentelemetry.io/contrib/bridges/otelslog. (#7198)

Add http.route metric attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#7275)

Add the WithSpanStartOptions option to add custom options to new spans go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#7261)

Add instrumentation support for go.mongodb.org/mongo-driver/v2 in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#6539)

Rerun the span name formatter after the request ran if a req.Pattern is set, so the span name can include it in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#7192)

Changed

Jaeger remote sampler's probabilistic strategy now uses the same sampling algorithm as trace.TraceIDRatioBased in go.opentelemetry.io/contrib/samplers/jaegerremote. (#6892)

Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.26.0 semantic conventions by default in the following modules.

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp The OTEL_SEMCONV_STABILITY_OPT_IN=http/dup environment variable can be still used to emit both the v1.20.0 and v1.26.0 semantic conventions. It is however impossible to emit only the 1.20.0 semantic conventions, as the next release will drop support for that environment variable. (#6899)

Improve performance by reducing allocations for http request when using OTEL_SEMCONV_STABILITY_OPT_IN=http/dup in the modules below. (#7180)

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the Jaeger remote sampler to use "github.com/jaegertracing/jaeger-idl/proto-gen/api_v2" in go.opentelemetry.io/contrib/samplers/jaegerremote. (#7061)

Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7186)

Update http.route attribute to support request.Pattern in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7108)

Change the default span name to be GET /path so it complies with the HTTP semantic conventions in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#6381)

Set url.scheme attribute to the request URL.Scheme when possible for HTTP client metrics in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6938)

The semantic conventions have been upgraded from v1.17.0 to v1.30.0 in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7270)

... (truncated)

Commits

934fb13 Release v1.36.0/v0.61.0/v0.30.0/v0.16.0/v0.11.0/v0.9.0/v0.8.0 (#7350)
ea9b739 fix(deps): update module github.com/labstack/echo/v4 to v4.13.4 (#7352)
461e409 otelhttp: Add client-side test for OTEL_SEMCONV_STABILITY_OPT_IN=http/dup w...
a91d747 chore(deps): update module github.com/uudashr/iface to v1.4.0 (#7346)
394163b fix(deps): update module github.com/gin-gonic/gin to v1.10.1 (#7344)
d1b0749 fix(deps): update go.opentelemetry.io/otel digest to e578799 (#7342)
b76d20b chore(deps): update googleapis to 55703ea (#7341)
2896fea refactor: move example from otelmux to make it a testable example (#7121)
158bafc feat: Support mixed categories for semconv opt-in (#7274)

CLAassistant · 2025-07-29T18:07:54Z

All committers have signed the CLA.

mohammed90 · 2025-07-31T01:31:50Z

@dependabot rebase

dependabot · 2025-07-31T01:31:55Z

Looks like this PR has been edited by someone other than Dependabot. That means Dependabot can't rebase it - sorry!

If you're happy for Dependabot to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

mohammed90 · 2025-07-31T01:32:16Z

@dependabot recreate

mohammed90 · 2025-08-01T01:35:16Z

@dependabot rebase

…dates Bumps the all-updates group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/KimMachineGun/automemlimit](https://github.com/KimMachineGun/automemlimit) | `0.7.1` | `0.7.4` | | [github.com/google/cel-go](https://github.com/google/cel-go) | `0.24.1` | `0.26.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.1` | `1.22.0` | | [github.com/smallstep/certificates](https://github.com/smallstep/certificates) | `0.26.1` | `0.28.4` | | [github.com/yuin/goldmark](https://github.com/yuin/goldmark) | `1.7.8` | `1.7.13` | | [go.opentelemetry.io/contrib/propagators/autoprop](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.42.0` | `0.62.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.31.0` | `1.37.0` | | [github.com/libdns/libdns](https://github.com/libdns/libdns) | `1.0.0-beta.1` | `1.1.0` | | [github.com/pires/go-proxyproto](https://github.com/pires/go-proxyproto) | `0.7.1-0.20240628150027-b718e7ce4964` | `0.8.1` | Updates `github.com/KimMachineGun/automemlimit` from 0.7.1 to 0.7.4 - [Release notes](https://github.com/KimMachineGun/automemlimit/releases) - [Commits](KimMachineGun/automemlimit@v0.7.1...v0.7.4) Updates `github.com/google/cel-go` from 0.24.1 to 0.26.0 - [Release notes](https://github.com/google/cel-go/releases) - [Commits](google/cel-go@v0.24.1...v0.26.0) Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.22.0) Updates `github.com/smallstep/certificates` from 0.26.1 to 0.28.4 - [Release notes](https://github.com/smallstep/certificates/releases) - [Changelog](https://github.com/smallstep/certificates/blob/master/CHANGELOG.md) - [Commits](smallstep/certificates@v0.26.1...v0.28.4) Updates `github.com/smallstep/nosql` from 0.6.1 to 0.7.0 - [Commits](smallstep/nosql@v0.6.1...v0.7.0) Updates `github.com/yuin/goldmark` from 1.7.8 to 1.7.13 - [Release notes](https://github.com/yuin/goldmark/releases) - [Commits](yuin/goldmark@v1.7.8...v1.7.13) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.56.0 to 0.61.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.56.0...zpages/v0.61.0) Updates `go.opentelemetry.io/contrib/propagators/autoprop` from 0.42.0 to 0.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.42.0...zpages/v0.62.0) Updates `go.opentelemetry.io/otel` from 1.31.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.31.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0) Updates `go.opentelemetry.io/otel/sdk` from 1.31.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0) Updates `github.com/libdns/libdns` from 1.0.0-beta.1 to 1.1.0 - [Release notes](https://github.com/libdns/libdns/releases) - [Commits](libdns/libdns@v1.0.0-beta.1...v1.1.0) Updates `github.com/pires/go-proxyproto` from 0.7.1-0.20240628150027-b718e7ce4964 to 0.8.1 - [Release notes](https://github.com/pires/go-proxyproto/releases) - [Commits](https://github.com/pires/go-proxyproto/commits/v0.8.1) Updates `github.com/prometheus/client_model` from 0.5.0 to 0.6.1 - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.5.0...v0.6.1) Updates `go.opentelemetry.io/otel/trace` from 1.31.0 to 1.37.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.31.0...v1.37.0) Updates `go.step.sm/crypto` from 0.45.0 to 0.67.0 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.45.0...v0.67.0) --- updated-dependencies: - dependency-name: github.com/KimMachineGun/automemlimit dependency-version: 0.7.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: github.com/google/cel-go dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/smallstep/certificates dependency-version: 0.28.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/smallstep/nosql dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/yuin/goldmark dependency-version: 1.7.13 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-updates - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.61.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.opentelemetry.io/contrib/propagators/autoprop dependency-version: 0.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.opentelemetry.io/otel dependency-version: 1.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/libdns/libdns dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/pires/go-proxyproto dependency-version: 0.8.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: github.com/prometheus/client_model dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.37.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates - dependency-name: go.step.sm/crypto dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-updates ... Signed-off-by: dependabot[bot] <support@github.com>

mholt · 2025-08-01T02:51:04Z

Oh. It's working! Weird!

mohammed90

LGTM from my side, but I'd like a second opinion.

mholt

This looks way better than having them all separate! Thanks Mohammed!

I just know that sometimes upgrading Otel and smallstep and prometheus stuff can cause breakages pretty easily. We can try this, I'll just be keeping an eye out for anything that breaks...

mholt · 2025-08-05T03:14:33Z

I am not sure I understand the CI failure: "go: github.com/caddyserver/caddy/v2@dependabot/go_modules/all-updates-0b5537362f: invalid version: version "dependabot/go_modules/all-updates-0b5537362f" invalid: disallowed version string"

mohammed90 · 2025-08-05T06:25:51Z

I am not sure I understand the CI failure: "go: github.com/caddyserver/caddy/v2@dependabot/go_modules/all-updates-0b5537362f: invalid version: version "dependabot/go_modules/all-updates-0b5537362f" invalid: disallowed version string"

Our workflow tries to build the PR using our goreleaser flow to validate whatever changes happening aren't breaking goreleaser. The go mod -replace doesn't like branch codes with slashes*, so the build breaks. We have a condition to skip it on triggers by dependabot, but the actor is us/you when we do the "Update branch", so the condition was not triggered.

I since learned there's an option to change the delimiter, so I might do that at one point.

@dependabot recreate

dependabot · 2025-08-05T06:27:30Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 29, 2025

dependabot bot force-pushed the dependabot/go_modules/all-updates-0b5537362f branch from 04566f7 to 1e962a4 Compare July 31, 2025 01:33

dependabot bot force-pushed the dependabot/go_modules/all-updates-0b5537362f branch from 1e962a4 to fcb06d8 Compare August 1, 2025 01:37

mohammed90 approved these changes Aug 1, 2025

View reviewed changes

mohammed90 requested a review from mholt August 1, 2025 15:25

Merge branch 'master' into dependabot/go_modules/all-updates-0b5537362f

13b2a28

mholt approved these changes Aug 4, 2025

View reviewed changes

dependabot bot closed this Aug 5, 2025

dependabot bot deleted the dependabot/go_modules/all-updates-0b5537362f branch August 5, 2025 06:27

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the all-updates group across 1 directory with 16 updates#7148

build(deps): bump the all-updates group across 1 directory with 16 updates#7148
dependabot[bot] wants to merge 2 commits intomasterfrom
dependabot/go_modules/all-updates-0b5537362f

dependabot bot commented on behalf of github Jul 29, 2025 •

edited

Loading

Uh oh!

CLAassistant commented Jul 29, 2025 •

edited

Loading

Uh oh!

mohammed90 commented Jul 31, 2025

Uh oh!

dependabot bot commented on behalf of github Jul 31, 2025

Uh oh!

mohammed90 commented Jul 31, 2025

Uh oh!

mohammed90 commented Aug 1, 2025

Uh oh!

mholt commented Aug 1, 2025

Uh oh!

mohammed90 left a comment

Uh oh!

mholt left a comment

Uh oh!

mholt commented Aug 5, 2025

Uh oh!

mohammed90 commented Aug 5, 2025

Uh oh!

dependabot bot commented on behalf of github Aug 5, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Uh oh!

Conversation

dependabot bot commented on behalf of github Jul 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v0.7.4

What's Changed

New Contributors

v0.7.3

What's Changed

v0.7.2

What's Changed

Release v0.26.0

New Features ✨

Bug Fixes 🐛

Test Updates 🧪

Documentation 📚

Dependency Updates ⬆️

Release v0.25.0

Features & Enhancements

v1.22.0 - 2025-04-07

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

1.21.0 / 2025-02-17

1.20.5 / 2024-10-15

1.20.4 / 2024-09-07

Step CA v0.28.4 (25-07-14)

Official Release Artifacts

Linux

OSX Darwin

Windows

Signatures and Checksums

Changelog

[0.28.4] - unreleased

Added

Changed

[0.28.3] - 2025-03-17

[0.28.2] - 2025-02-20

Added

Changed

[0.28.1] - 2024-11-19

Added

Changed

Release 1.37.0/0.62.0/0.31.0/0.17.0/0.12.0/0.10.0/0.9.0

Added

Changed

Deprecated

[1.36.0/0.61.0/0.30.0/0.16.0/0.11.0/0.9.0/0.8.0] - 2025-05-21

Added

Changed

Uh oh!

CLAassistant commented Jul 29, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

mohammed90 commented Jul 31, 2025

Uh oh!

dependabot bot commented on behalf of github Jul 31, 2025

Uh oh!

mohammed90 commented Jul 31, 2025

Uh oh!

mohammed90 commented Aug 1, 2025

Uh oh!

mholt commented Aug 1, 2025

Uh oh!

mohammed90 left a comment

Choose a reason for hiding this comment

Uh oh!

mholt left a comment

Choose a reason for hiding this comment

Uh oh!

mholt commented Aug 5, 2025

Uh oh!

mohammed90 commented Aug 5, 2025

Uh oh!

dependabot bot commented on behalf of github Aug 5, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

dependabot bot commented on behalf of github Jul 29, 2025 •

edited

Loading

CLAassistant commented Jul 29, 2025 •

edited

Loading