Bump the go-modules group with 9 updates #513

dependabot · 2025-09-26T15:03:54Z

Bumps the go-modules group with 9 updates:

Package	From	To
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	`1.29.0`	`1.30.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	`0.53.0`	`0.54.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	`0.53.0`	`0.54.0`
github.com/cyphar/filepath-securejoin	`0.4.1`	`0.5.0`
github.com/mattn/go-runewidth	`0.0.16`	`0.0.17`
google.golang.org/api	`0.249.0`	`0.250.0`
google.golang.org/genproto	`0.0.0-20250603155806-513f23925822`	`0.0.0-20250922171735-9219d122eba9`
google.golang.org/genproto/googleapis/api	`0.0.0-20250818200422-3122310a409c`	`0.0.0-20250922171735-9219d122eba9`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20250825161204-c5933d9347a5`	`0.0.0-20250922171735-9219d122eba9`

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from 1.29.0 to 1.30.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp's releases.

v1.5.1 and v0.29.1

What's Changed

Handle explicit reset points in the disabled normalizer by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#378

Add struct tag for sum of squared deviations estimate and factory test. by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#379

Prerelease v1.5.1 and v0.29.1 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#380

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Add integration test with metrics from the prometheus receiver by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#348

Add make commands for release by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#354

Send timeseries synchronously by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#358

Drop histograms without a sum by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#359

Add sum of squared deviation estimate by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#341

Add missing otel attributes to Spans exported to Cloud Trace by @jsuereth in GoogleCloudPlatform/opentelemetry-operations-go#365

Normalize histograms, summaries, and exponential histograms by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#360

Use the timeout passed to the metrics exporter by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#369

Collector logging exporter by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#373

Update logging exporter to use "gcp.*" prefix for attributes by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#374

Add logging exporter info to readme by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#375

Prepare release for v0.29/v1.5.0 by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#376

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

Allow users to override useragent by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#322

Address a bunch of small TODOs by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#314

Update release.go for latest release by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#321

Rename files to be easier to understand, and add comment by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#327

Fix formatting of summary quantile labels to match prometheus by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#325

Update opentelemetry collector dependency, and switch away from deprecated functions. by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#328

Sanitize label keys for metric descriptors by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#331

Add attribute mapping function by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#324

Normalize sums prior to exporting them by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#323

Do not use IsZero on timestamps obtained from pdata by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#336

Send summary counts as doubles instead of integers by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#338

Drop data points with no value set by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#339

Handle NaN sums in histograms and exponential histograms by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#340

Fix typos around integration tests by @damemi in GoogleCloudPlatform/opentelemetry-operations-go#345

Update fixtures based on upstream changes to the prometheus receiver by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#346

feat(propagator): create a new one-way propagator by @muncus in GoogleCloudPlatform/opentelemetry-operations-go#343

Demonstrate that integration tests aren't catching failures by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#349

Update dependencies by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#347

Address remaining nits from #347 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#351

Prepare for releasing v1.4.0 and v0.28.0 by @dashpole in GoogleCloudPlatform/opentelemetry-operations-go#353

... (truncated)

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.53.0 to 0.54.0

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping from 0.53.0 to 0.54.0

Commits

7130d1a prepare for v1.30.0/v0.54.0 (#1072)
9a749d9 Update all dependencies, bump go version (#1069)
f8a4910 post-release: fix segfault in script when no replace is found (#1025)
1ea43a4 Bump mapstructure dependency manually (#1066)
20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
339f1ae log project name when metric requests fail (#1059)
53263ae Show structured logging in Go (#1057)
44cf856 Update slog example (#1056)
e5c657d Add OTel Logging sample (#1055)
See full diff in compare view

Updates github.com/cyphar/filepath-securejoin from 0.4.1 to 0.5.0

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.5.0] - 2025-09-26

Let the past die. Kill it if you have to.

NOTE: With this release, some parts of github.com/cyphar/filepath-securejoin are now licensed under the Mozilla Public License (version 2). Please see COPYING.md as well as the the license header in each file for more details.

Breaking

The new API introduced in the [0.3.0][] release has been moved to a new subpackage called pathrs-lite. This was primarily done to better indicate the split between the new and old APIs, as well as indicate to users the purpose of this subpackage (it is a less complete version of [libpathrs][]).

We have added some wrappers to the top-level package to ease the transition, but those are deprecated and will be removed in the next minor release of filepath-securejoin. Users should update their import paths.

This new subpackage has also been relicensed under the Mozilla Public License (version 2), please see COPYING.md for more details.

Added

Most of the key bits the safe procfs API have now been exported and are available in github.com/cyphar/filepath-securejoin/pathrs-lite/procfs. At the moment this primarily consists of a new procfs.Handle API:

OpenProcRoot returns a new handle to /proc, endeavouring to make it safe if possible (subset=pid to protect against mistaken write attacks and leaks, as well as using fsopen(2) to avoid racing mount attacks).

OpenUnsafeProcRoot returns a handle without attempting to create one with subset=pid, which makes it more dangerous to leak. Most users should use OpenProcRoot (even if you need to use ProcRoot as the base of an operation, as filepath-securejoin will internally open a handle when necessary).

The (*procfs.Handle).Open* family of methods lets you get a safe O_PATH handle to subpaths within /proc for certain subpaths.

For OpenThreadSelf, the returned ProcThreadSelfCloser needs to be called after you completely finish using the handle (this is necessary because Go is multi-threaded and ProcThreadSelf references /proc/thread-self which may disappear if we do not runtime.LockOSThread -- ProcThreadSelfCloser is currently equivalent to runtime.UnlockOSThread).

Note that you cannot open any procfs symlinks (most notably magic-links)

... (truncated)

Commits

bb9e81f VERSION: release 0.5.0
17e58e1 CHANGELOG: minor updates
cc071b2 hack: properly test ./...
a1c1895 CHANGELOG: fix kernel version for open_tree(2)
432c95e doc: minor godoc improvements
90002f2 CHANGELOG: mention MPLv2 in pathrs-lite entry
59fcb8b COPYING: fix reference to pathrs-lite internal pkgs
43797e7 pathrs-lite: add Close to procfs wrapper
2a0e2b6 pathrs-lite: move Reopen impl to internal/procfs
3c5e239 *: update and improve godocs
Additional commits viewable in compare view

Updates github.com/mattn/go-runewidth from 0.0.16 to 0.0.17

Commits

94c0db1 Merge pull request #85 from mattn/fix-windows-terminal
76bca58 fix comment
74c2b32 add trick for Windows Terminal
d62f699 Merge pull request #81 from mattn/fix-build
239943a fix benchmark code
See full diff in compare view

Updates google.golang.org/api from 0.249.0 to 0.250.0

Release notes

Sourced from google.golang.org/api's releases.

v0.250.0

0.250.0 (2025-09-25)

Features

all: Auto-regenerate discovery clients (#3306) (04e9340)

all: Auto-regenerate discovery clients (#3308) (b85955a)

all: Auto-regenerate discovery clients (#3309) (6d11ef4)

all: Auto-regenerate discovery clients (#3310) (5ed74f3)

all: Auto-regenerate discovery clients (#3311) (ffae061)

all: Auto-regenerate discovery clients (#3312) (7f0983c)

all: Auto-regenerate discovery clients (#3314) (0e5a06d)

all: Auto-regenerate discovery clients (#3315) (a6d27cf)

all: Auto-regenerate discovery clients (#3316) (e4eefd9)

all: Auto-regenerate discovery clients (#3318) (2242712)

Changelog

Sourced from google.golang.org/api's changelog.

0.250.0 (2025-09-25)

Features

all: Auto-regenerate discovery clients (#3306) (04e9340)

all: Auto-regenerate discovery clients (#3308) (b85955a)

all: Auto-regenerate discovery clients (#3309) (6d11ef4)

all: Auto-regenerate discovery clients (#3310) (5ed74f3)

all: Auto-regenerate discovery clients (#3311) (ffae061)

all: Auto-regenerate discovery clients (#3312) (7f0983c)

all: Auto-regenerate discovery clients (#3314) (0e5a06d)

all: Auto-regenerate discovery clients (#3315) (a6d27cf)

all: Auto-regenerate discovery clients (#3316) (e4eefd9)

all: Auto-regenerate discovery clients (#3318) (2242712)

Commits

307f588 chore(main): release 0.250.0 (#3307)
2242712 feat(all): auto-regenerate discovery clients (#3318)
d41bfb6 chore(google-api-go-generator): add aiplatform:v1beta1 to skipAPIGeneration (...
34bbc4b chore(all): update all (#3313)
e4eefd9 feat(all): auto-regenerate discovery clients (#3316)
a6d27cf feat(all): auto-regenerate discovery clients (#3315)
0e5a06d feat(all): auto-regenerate discovery clients (#3314)
7f0983c feat(all): auto-regenerate discovery clients (#3312)
ffae061 feat(all): auto-regenerate discovery clients (#3311)
5ed74f3 feat(all): auto-regenerate discovery clients (#3310)
Additional commits viewable in compare view

Updates google.golang.org/genproto from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250922171735-9219d122eba9

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250922171735-9219d122eba9

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20250825161204-c5933d9347a5 to 0.0.0-20250922171735-9219d122eba9

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 9 updates: | Package | From | To | | --- | --- | --- | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.29.0` | `1.30.0` | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` | | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.53.0` | `0.54.0` | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.4.1` | `0.5.0` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.16` | `0.0.17` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.249.0` | `0.250.0` | | [google.golang.org/genproto](https://github.com/googleapis/go-genproto) | `0.0.0-20250603155806-513f23925822` | `0.0.0-20250922171735-9219d122eba9` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20250818200422-3122310a409c` | `0.0.0-20250922171735-9219d122eba9` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20250825161204-c5933d9347a5` | `0.0.0-20250922171735-9219d122eba9` | Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp` from 1.29.0 to 1.30.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.29.0...detectors/gcp/v1.30.0) Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.53.0 to 0.54.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0) Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping` from 0.53.0 to 0.54.0 - [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases) - [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0) Updates `github.com/cyphar/filepath-securejoin` from 0.4.1 to 0.5.0 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.4.1...v0.5.0) Updates `github.com/mattn/go-runewidth` from 0.0.16 to 0.0.17 - [Commits](mattn/go-runewidth@v0.0.16...v0.0.17) Updates `google.golang.org/api` from 0.249.0 to 0.250.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.249.0...v0.250.0) Updates `google.golang.org/genproto` from 0.0.0-20250603155806-513f23925822 to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20250818200422-3122310a409c to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250825161204-c5933d9347a5 to 0.0.0-20250922171735-9219d122eba9 - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp dependency-version: 1.30.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric dependency-version: 0.54.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping dependency-version: 0.54.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.5.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/mattn/go-runewidth dependency-version: 0.0.17 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/api dependency-version: 0.250.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-version: 0.0.0-20250922171735-9219d122eba9 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 26, 2025

dependabot bot requested a review from a team as a code owner September 26, 2025 15:03

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 26, 2025

paketo-bot added the semver:patch A change requiring a patch version bump label Sep 26, 2025

paketo-bot-reviewer approved these changes Sep 26, 2025

View reviewed changes

paketo-bot merged commit a444ff0 into main Sep 26, 2025
11 of 12 checks passed

paketo-bot deleted the dependabot/go_modules/go-modules-694da8606d branch September 26, 2025 15:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump the go-modules group with 9 updates #513

Bump the go-modules group with 9 updates #513

Uh oh!

dependabot bot commented on behalf of github Sep 26, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Bump the go-modules group with 9 updates #513

Bump the go-modules group with 9 updates #513

Uh oh!

Conversation

dependabot bot commented on behalf of github Sep 26, 2025

v1.5.1 and v0.29.1

What's Changed

v1.5.0 and v0.29.0

What's Changed

v1.4.0 and v0.28.0

What's Changed

[0.5.0] - 2025-09-26

Breaking

Added

v0.250.0

0.250.0 (2025-09-25)

Features

0.250.0 (2025-09-25)

Features

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants