Bump the go-modules group with 7 updates by dependabot[bot] · Pull Request #832 · paketo-buildpacks/npm-start

dependabot · 2026-03-09T02:22:13Z

Bumps the go-modules group with 7 updates:

Package	From	To
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.66.0`	`0.67.0`
go.opentelemetry.io/otel	`1.41.0`	`1.42.0`
go.opentelemetry.io/otel/metric	`1.41.0`	`1.42.0`
go.opentelemetry.io/otel/trace	`1.41.0`	`1.42.0`
golang.org/x/sync	`0.19.0`	`0.20.0`
golang.org/x/sys	`0.41.0`	`0.42.0`
google.golang.org/grpc	`1.79.1`	`1.79.2`

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.66.0 to 0.67.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Added

Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:

RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.

rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.

rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

See semantic-conventions v1.40.0 release for complete details.

Fixed

Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6913)

Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8618)

Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8642)

Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#8578)

Removed

Drop support for Go 1.24. (#8628)

What's Changed

chore(deps): update github artifact actions to v7 (major) by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8605

chore(deps): update module github.com/sonatard/noctx to v0.5.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8610

chore(deps): update github/codeql-action action to v4.32.5 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8620

fix(deps): update module github.com/aws/smithy-go to v1.24.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8614

chore(deps): update go-openapi packages by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8621

fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8622

chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8608

chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8609

chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.147.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8625

chore(deps): update module github.com/daixiang0/gci to v0.14.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8623

Drop support for 1.24 by @dmathieu in open-telemetry/opentelemetry-go-contrib#8628

fix(deps): update golang.org/x by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8554

fix(deps): update kubernetes packages to v0.35.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8626

fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8598

fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8630

otelgrpc: modernize the example project by @ash2k in open-telemetry/opentelemetry-go-contrib#8619

chore(deps): update googleapis to a57be14 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8606

fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8627

chore(deps): update module github.com/prometheus/procfs to v0.20.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8624

fix(otelhttp): make Body handling in Transport consistent with stdlib by @ash2k in open-telemetry/opentelemetry-go-contrib#8618

otelhttp: Ignore informational response status codes when persisting status by @VirrageS in open-telemetry/opentelemetry-go-contrib#6913

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:

RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.

rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.

rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

See semantic-conventions v1.40.0 release for complete details.

Fixed

Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6913)

Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8618)

Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8642)

Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#8578)

Removed

Drop support for [Go 1.24]. (#8628)

Commits

d8dabf6 Release v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0 (#8649)
b1de2c7 otelconf: host detector should include os as well (#8578)
b228c0f fix(deps): update module google.golang.org/grpc to v1.79.2 (#8644)
e70fd97 Use correct bucket boundaries for otelgrpc client and server histograms (#8642)
b018d98 fix(deps): update aws-sdk-go-v2 monorepo (#8643)
fb6a351 chore(deps): update github/codeql-action action to v4.32.6 (#8641)
2c9c10e chore(deps): update dependency codespell to v2.4.2 (#8640)
22248d4 chore: enable modernize linter (#8583)
324662a envcar: add environment carrier (#8442)
69addb4 chore(deps): update k8s.io/kube-openapi digest to 5b3e3fd (#8636)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.41.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

Commits

a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/metric from 1.41.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

Commits

a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.41.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

Commits

a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits

ec11c4a errgroup: fix a typo in the documentation
1a58307 all: modernize interface{} -> any
3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates golang.org/x/sys from 0.41.0 to 0.42.0

Commits

eaaaaee windows/registry: correct KeyInfo.ModTime calculation
942780b cpu: darwin/arm64 feature detection
acef388 unix/linux: Prefixmsg and PrefixCacheinfo structs
3687fbd cpu: better defaults on darwin ARM64
48062e9 plan9: change Note to alias syscall.Note
4f23f80 windows: change Signal to alias syscall.Signal
7548802 all: upgrade go directive to at least 1.25.0 [generated]
See full diff in compare view

Updates google.golang.org/grpc from 1.79.1 to 1.79.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.79.2

Bug Fixes

stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Commits

8902ab6 Change the version to release 1.79.2 (#8947)
a928670 Cherry-pick #8874 to v1.79.x (#8904)
06df363 Change version to 1.79.2-dev (#8903)
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 7 updates: | Package | From | To | | --- | --- | --- | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.66.0` | `0.67.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.41.0` | `1.42.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.41.0` | `1.42.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.41.0` | `1.42.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.20.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.1` | `1.79.2` | Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.66.0 to 0.67.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.66.0...zpages/v0.67.0) Updates `go.opentelemetry.io/otel` from 1.41.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.41.0...v1.42.0) Updates `go.opentelemetry.io/otel/metric` from 1.41.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.41.0...v1.42.0) Updates `go.opentelemetry.io/otel/trace` from 1.41.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.41.0...v1.42.0) Updates `golang.org/x/sync` from 0.19.0 to 0.20.0 - [Commits](golang/sync@v0.19.0...v0.20.0) Updates `golang.org/x/sys` from 0.41.0 to 0.42.0 - [Commits](golang/sys@v0.41.0...v0.42.0) Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.1...v1.79.2) --- updated-dependencies: - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.67.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sync dependency-version: 0.20.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-version: 0.42.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.79.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 9, 2026

dependabot Bot requested review from a team as code owners March 9, 2026 02:22

dependabot Bot requested review from mhdawson and pacostas and removed request for a team March 9, 2026 02:22

paketo-bot added the semver:patch A change requiring a patch version bump label Mar 9, 2026

paketo-bot-reviewer approved these changes Mar 9, 2026

View reviewed changes

paketo-bot merged commit 19c7a83 into main Mar 9, 2026
14 of 15 checks passed

paketo-bot deleted the dependabot/go_modules/go-modules-56aaa08155 branch March 9, 2026 02:28

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group with 7 updates#832

Bump the go-modules group with 7 updates#832
paketo-bot merged 1 commit into
mainfrom
dependabot/go_modules/go-modules-56aaa08155

dependabot Bot commented on behalf of github Mar 9, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Mar 9, 2026

v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Added

Changed

Fixed

Removed

What's Changed

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

Changed

Fixed

Removed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

Release 1.79.2

Bug Fixes

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants