Bump the all group across 1 directory with 11 updates

[dependabot]

Bumps the all group with 8 updates in the / directory:

Package	From	To
github.com/grafana/cog	0.0.57	0.1.4
github.com/grafana/grafana-app-sdk/logging	0.50.4	0.51.4
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	1.40.0	1.42.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	1.40.0	1.42.0
golang.org/x/sync	0.19.0	0.20.0
golang.org/x/tools	0.42.0	0.43.0
k8s.io/apiextensions-apiserver	0.35.1	0.35.2
k8s.io/klog/v2	2.130.1	2.140.0

Updates github.com/grafana/cog from 0.0.57 to 0.1.4

Release notes

Sourced from github.com/grafana/cog's releases.

v0.1.4

Changelog

• 6e8ee52097736a9fbb36476036230abe92a16a2c: Use zensical to generate the docs website (@​K-Phoen)
• 69b96786592be06e227c16d181f98edceb4cc939: Terraform: Generate types (#1010) (@​spinillos)
• 1f5df47036881ba69ac64666cce91d6a612728b7: Use zensical to generate the docs website (#1015) (@​K-Phoen)
• 9f3853fc116d409d9fb51738b7381a86d28c51c6: Support explicitly nil assignments in options (@​K-Phoen)
• be7fc815a4285aef3cbb7ce6da2d04eb7ee3e95d: Support explicitly nil assignments in options (#1016) (@​K-Phoen)

v0.1.3

Changelog

• ca05855834f11f135857994c02c416a535e53196: Do not try to assign into a constant field in PHP/Python (@​K-Phoen)
• ca687fe786e3fe17823a47dbbed33182b57bd8c6: Do not try to assign into a constant field in PHP/Python (#1013) (@​K-Phoen)

v0.1.2

Changelog

• 9d4b43093e570ae7bcf5f94beca3df16768098bb: Use the SDK's pipeline to validate the code and run examples (@​K-Phoen)
• 6861493425593025829a001f35d726783b54b93f: Remove SDK-related examples (@​K-Phoen)
• dd76005fec57aafcd30bca9136e958311be8c5ae: Avoid using make generate (@​K-Phoen)
• 5d31182aef371a38747ed17a7b3033a4ff1a02a6: Improve runtime converters detection (@​K-Phoen)
• 411d3be72cbe5ffaf21582604ba68d569164db1c: Improve runtime converters detection (#1011) (@​K-Phoen)

v0.1.1

Changelog

• d4662dc077b2fe9c57a20277a90f847f852634a0: Fix factories signatures in java (@​K-Phoen)
• ed69c2d1969315df268db72fbe7db405eca2f087: Fix CI (@​K-Phoen)

v0.1.0

Changelog

• 118dafd5659d5d5053868a81383665ad8c727913: Terraform: Boilerplate (#1001) (@​spinillos)
• 9a5c08f6c61e7c3aee489f321915f013805f73a1: add_factory.builder_ref refers to builders by their name (@​K-Phoen)
• 538319fd02a2195a9e8f1c0b7468d44c55fa48eb: Support targeting multiple languages in builder transformations YAML (@​K-Phoen)
• a733424f88646394a7e0ee7126e3ed80f13bc0c6: Descriptive builder transformation rules (@​K-Phoen)
• 9378d3d81a7cb82bc2cde7951fd1a33c0dcc364f: Use a proper logger (@​K-Phoen)
• 05c9d4339cc5d4dedfc6350707b40f6aebb44a73: Update tests (@​K-Phoen)
• 4a109ac40fa380fca292c74ba24c5a49d60a5ee4: Descriptive option selectors (@​K-Phoen)
• 47891780ef73413037a38aa927f0f445d917cb1e: Descriptive option actions (@​K-Phoen)
• 1c52145b0bd687a937eb2ad05ed42c052f01e75d: Cleanup builder transform rule definitions (@​K-Phoen)
• 5338731287470e101ca4a6cd57826db2955c43ca: Fix docs generation for builders/options transformations (@​K-Phoen)
• 3e1acd589ea40f2f98ed16b92ce807755716cd47: Little simplification in StructFieldsAs*Action (@​K-Phoen)
• 0e82ea036bd52311f84c3190768f82e106824c62: Inject logger into builder rules (@​K-Phoen)
• 2444cd168f4d48dd2f6e8e37538991039b387750: Fix tests (@​K-Phoen)
• 70a5db6bd3accc760f7917b376972712af630ed3: Inject logger into option rules (@​K-Phoen)
• 6145417cf4c2796cc23649f19d9b03e73eee6ac3: Support returning errors in option transformations (@​K-Phoen)
• 6fae4483c5781962c967d8431d2638159ebbeacd: More logs in option transforms (@​K-Phoen)
• 1b4dfaf7029c094810959eaa3ed80ff7f7332803: Update internal/veneers/option/selectors.go (@​K-Phoen)
• 45166388dd4ba49195f814c41e5f24f815cb24f6: Update SDK config (@​K-Phoen)
• f752b27f0d67bad6b99416965d15a9debdc26e71: chore(deps): update dependency mkdocs-material to v9.7.2 (@​renovate-sh-app[bot])
• 0ad568ceb8c2c18fa7a214491b24ba595888ad19: chore(deps): update dependency regex to v2026.2.19 (@​renovate-sh-app[bot])
• 34370a0f09c66e0822c8817311ba9f3fda2fd174: Remove foundation-sdk submodule (@​K-Phoen)
• 0f8f20d6690fecd1fba2a11a4ecc27f0ccc4c9bb: Group SDK CI jobs together (@​K-Phoen)

... (truncated)

Commits

• be7fc81 Support explicitly nil assignments in options (#1016)
• 9f3853f Support explicitly nil assignments in options
• 1f5df47 Use zensical to generate the docs website (#1015)
• 69b9678 Terraform: Generate types (#1010)
• 6e8ee52 Use zensical to generate the docs website
• ca687fe Do not try to assign into a constant field in PHP/Python (#1013)
• ca05855 Do not try to assign into a constant field in PHP/Python
• 411d3be Improve runtime converters detection (#1011)
• 5d31182 Improve runtime converters detection
• dd76005 Avoid using make generate
• Additional commits viewable in compare view

Updates github.com/grafana/grafana-app-sdk/logging from 0.50.4 to 0.51.4

Release notes

Sourced from github.com/grafana/grafana-app-sdk/logging's releases.

v0.51.4

Changelog

• 29cceba Revert "Upgrade to Go 1.26 and golangci-lint v2.9.0" (#1256)

v0.51.3

Changelog

• c9bec44 Bump the all group in /plugin with 2 updates (#1247)
• b01cf09 Bump the all group with 2 updates (#1246)
• af7ef90 [codegen] If rolebindings are absent in the codegen, don't include in generated manifest (#1251)

v0.51.2

Changelog

• 2b03c14 [apiserver] Set a default 'produces' in created WebServices (#1250)

v0.51.1

Changelog

• 7dfcfa4 Add renovate config (#1241)
• a7fb6c0 Fix nil pointer panic when no rolebindings are present when roles are (#1242)
• 6c55a56 Require role title in CUE (#1245)
• 14902de [codegen] Don't validate role subresources when not generating manifest schemas (#1244)

v0.51.0

What Changed in this Release

This release contains a few codegen fixes for generate and project component add commands, enhancements to the AppManifest, and CUE changes to account for the AppManifest enhancements.

Breaking Changes

Custom routes using routes in a Kind or Version now require the name parameter, e.g.

routes: {
    "/foo": {
        "GET": {
            response: {...}
        }
    }
}

must now be:

routes: {
    "/foo": {
        "GET": {
            name: "getFoos"
            response: {...}
        }
    }
}

... (truncated)

Commits

• 29cceba Revert "Upgrade to Go 1.26 and golangci-lint v2.9.0" (#1256)
• b01cf09 Bump the all group with 2 updates (#1246)
• c9bec44 Bump the all group in /plugin with 2 updates (#1247)
• af7ef90 [codegen] If rolebindings are absent in the codegen, don't include in generat...
• 2b03c14 [apiserver] Set a default 'produces' in created WebServices (#1250)
• 6c55a56 Require role title in CUE (#1245)
• 14902de [codegen] Don't validate role subresources when not generating manifest schem...
• 7dfcfa4 Add renovate config (#1241)
• a7fb6c0 Fix nil pointer panic when no rolebindings are present when roles are (#1242)
• ade919b Bump the all group across 1 directory with 2 updates (#1239)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

• Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)
• Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

• TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

• Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)
• Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)
• Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

• Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

• Support testing of [Go 1.26]. (#7902)

Fixed

• Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

• a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
• 6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
• 44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
• de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
• 0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
• aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
• 9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
• c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
• fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
• 78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

• Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)
• Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

• TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

• Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)
• Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)
• Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

• Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

• Support testing of [Go 1.26]. (#7902)

Fixed

• Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

• a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
• 6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
• 44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
• de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
• 0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
• aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
• 9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
• c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
• fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
• 78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

• Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)
• Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

• TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

• Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)
• Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)
• Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

• Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

• Support testing of [Go 1.26]. (#7902)

Fixed

• Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

• a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
• 6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
• 44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
• de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
• 0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
• aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
• 9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
• c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
• fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
• 78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
• Additional commits viewable in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits

• ec11c4a errgroup: fix a typo in the documentation
• 1a58307 all: modernize interface{} -> any
• 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Updates golang.org/x/tools from 0.42.0 to 0.43.0

Commits

• 24a8e95 go.mod: update golang.org/x dependencies
• 3dd57fb gopls/internal/mcp: refactor unified diff generation
• fcc014d cmd/digraph: fix package doc
• 39f0f5c cmd/stress: add -failfast flag
• 063c264 gopls/test/integration/misc: add diagnostics to flaky test
• deb6130 gopls/internal/golang: fix hover panic in raw strings with CRLF
• 5f1186b gopls/internal/analysis/driverutil: remove unnecessary new imports
• ff45494 go/analysis: expose GoMod etc. to Pass.Module
• 62daff4 go/analysis/passes/inline: fix panic in inlineAlias with instantiated generic...
• fcb6088 x/tools: delete obsolete code
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.1 to 1.79.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.2

Bug Fixes

• stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Commits

• 8902ab6 Change the version to release 1.79.2 (#8947)
• a928670 Cherry-pick #8874 to v1.79.x (#8904)
• 06df363 Change version to 1.79.2-dev (#8903)
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.35.1 to 0.35.2

Commits

• 79000f4 Update dependencies to v0.35.2 tag
• See full diff in compare view

Updates k8s.io/apiserver from 0.35.1 to 0.35.2

Commits

• 9120deb Update dependencies to v0.35.2 tag
• See full diff in compare view

Updates k8s.io/klog/v2 from 2.130.1 to 2.140.0

Release notes

Sourced from k8s.io/klog/v2's releases.

Prepare klog release for Kubernetes v1.36

What's Changed

• Add dependabot by @​lucacome in kubernetes/klog#410
• Use strconv.AppendQuote instead of strconv.Quote for message formatting by @​astef in kubernetes/klog#413
• de-duplication of key/value pairs by @​pohly in kubernetes/klog#415
• Fix: Ensure constant format strings in fmt and printf calls by @​mikelolasagasti in kubernetes/klog#417
• Remove old note on Go version requirements by @​guettli in kubernetes/klog#425
• test with 1.24 and 1.25 by @​pohly in kubernetes/klog#428
• ktesting: fix vmodule support by @​pohly in kubernetes/klog#431
• ktesting: support multi-line result from AnyToStringHook by @​pohly in kubernetes/klog#433
• textlogger: optionally turn off header by @​pohly in kubernetes/klog#430
• feat: fix stderrthreshold not honored when logtostderr is set (#212) + two new flags by @​pierluigilenoci in kubernetes/klog#432

New Contributors

• @​lucacome made their first contribution in kubernetes/klog#410
• @​astef made their first contribution in kubernetes/klog#413
• @​mikelolasagasti made their first contribution in kubernetes/klog#417
• @​guettli made their first contribution in kubernetes/klog#425
• @​pierluigilenoci made their first contribution in kubernetes/klog#432

Full Changelog: kubernetes/klog@v2.130.1...v2.140.0

Commits

• ef4b370 Merge pull request #432 from pierluigilenoci/fix/stderr-threshold-issue-212
• 39c4c76 refactor: address code review feedback from @​pohly
• 764a9a3 Merge pull request #430 from pohly/textlogger-optional-header
• 015c613 Update stderr_threshold_test.go
• 2f517bd Update klog.go
• 36bc4ff textlogger: optionally turn off header
• 5f1f303 Merge pull request #433 from pohly/textlogger-hook-result
• c469d41 Merge pull request #431 from pohly/ktesting-vmodule-fix
• 8509d6a ktesting: support multi-line result from AnyToStringHook
• 08e6e8b Fix stderrthreshold not honored when logtostderr is set
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[IfSentient]

It looks like something in this batch of updates is causing one of the manifest codegen tests to take >10m, even when run locally. Will investigate what's going on.