Bump the go-modules group with 6 updates by dependabot[bot] · Pull Request #828 · paketo-buildpacks/npm-start

dependabot · 2026-03-03T02:23:03Z

Bumps the go-modules group with 6 updates:

Package	From	To
github.com/google/go-containerregistry	`0.21.1`	`0.21.2`
github.com/paketo-buildpacks/freezer	`0.2.2`	`0.2.3`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.65.0`	`0.66.0`
go.opentelemetry.io/otel	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/metric	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/trace	`1.40.0`	`1.41.0`

Updates github.com/google/go-containerregistry from 0.21.1 to 0.21.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.2

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in google/go-containerregistry#2225

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

Commits

9e0ccb0 Better handle redirects to https in ping (#2225)
See full diff in compare view

Updates github.com/paketo-buildpacks/freezer from 0.2.2 to 0.2.3

Release notes

Sourced from github.com/paketo-buildpacks/freezer's releases.

0.2.3

⛏ Dependency Upgrades

Bump github.com/paketo-buildpacks/packit/v2 from 2.25.3 to 2.25.4 (#36) @dependabot

Bump github.com/paketo-buildpacks/packit/v2 from 2.24.0 to 2.25.2 (#32) @dependabot

🚧 Tasks

Bump pipeline from 1.44.0 to 1.45.0 (#39) @paketo-bot

Bump Go Modules (#40) @paketo-bot

Bump Go Modules (#38) @paketo-bot

Bump Go Modules (#37) @paketo-bot

Bump pipeline from 1.43.0 to 1.44.0 (#35) @paketo-bot

Bump Go Modules (#30) @paketo-bot

Bump Go Modules (#28) @paketo-bot

Bump Go Modules (#25) @paketo-bot

Commits

4ec7aab Merge pull request #39 from paketo-buildpacks/update/pipeline
9d5fafa Bump pipeline from 1.44.0 to 1.45.0
3ef05cd Merge pull request #40 from paketo-buildpacks/update/go
b6b5517 Bump Go Modules
2d2e7e0 Merge pull request #38 from paketo-buildpacks/update/go
31ee674 Bump Go Modules
da71d6d Merge pull request #37 from paketo-buildpacks/update/go
09cafb5 Bump Go Modules
7ff0cd2 Merge pull request #35 from paketo-buildpacks/update/pipeline
f21c51d Bump pipeline from 1.43.0 to 1.44.0
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.65.0 to 0.66.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of Go 1.26. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of [Go 1.26]. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

Commits

07fa424 Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 (#8617)
f64d6bb HTTP instrumentations cleanup (#8532)
5995ae8 add version file for Autodetect detector (#8555)
c0aa7c9 internal/shared/semconv: Reduce allocations (#8511)
e81a2b4 otelgrpc: Use canonical string status codes (#8565)
8096a3e otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler (#8587)
2dce245 otelconf: use translation strategy instead of deprecated funcs (#8595)
d2a5807 Add version file for autoexport module (#8612)
52dd987 ci: add govulncheck job to CI workflow and update lint target (#8613)
c4223d5 chore(deps): update prom/prometheus docker tag to v3.10.0 (#8603)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/metric from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.1` | `0.21.2` | | [github.com/paketo-buildpacks/freezer](https://github.com/paketo-buildpacks/freezer) | `0.2.2` | `0.2.3` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.66.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | Updates `github.com/google/go-containerregistry` from 0.21.1 to 0.21.2 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.1...v0.21.2) Updates `github.com/paketo-buildpacks/freezer` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/paketo-buildpacks/freezer/releases) - [Commits](paketo-buildpacks/freezer@v0.2.2...v0.2.3) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.65.0 to 0.66.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.66.0) Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/freezer dependency-version: 0.2.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.66.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 3, 2026

dependabot Bot requested review from a team as code owners March 3, 2026 02:23

dependabot Bot requested review from mhdawson and pacostas and removed request for a team March 3, 2026 02:23

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 3, 2026

paketo-bot added the semver:patch A change requiring a patch version bump label Mar 3, 2026

paketo-bot-reviewer approved these changes Mar 3, 2026

View reviewed changes

paketo-bot merged commit 1c1a47c into main Mar 3, 2026
14 of 15 checks passed

paketo-bot deleted the dependabot/go_modules/go-modules-0c2fd9d9cb branch March 3, 2026 02:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group with 6 updates#828

Bump the go-modules group with 6 updates#828
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-0c2fd9d9cb

dependabot Bot commented on behalf of github Mar 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Mar 3, 2026

v0.21.2

What's Changed

0.2.3

⛏ Dependency Upgrades

🚧 Tasks

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

Added

Fixed

Removed

Changed

Deprecated

What's Changed

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

Added

Fixed

Removed

Changed

Deprecated

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants