Bump the go-modules group across 1 directory with 61 updates

[dependabot]

Bumps the go-modules group with 26 updates in the / directory:

Package	From	To
github.com/onsi/gomega	1.38.2	1.38.3
cel.dev/expr	0.24.0	0.25.1
cloud.google.com/go/auth	0.16.4	0.17.0
cloud.google.com/go/compute/metadata	0.8.0	0.9.0
cloud.google.com/go/iam	1.5.2	1.5.3
cloud.google.com/go/monitoring	1.24.2	1.24.3
cloud.google.com/go/storage	1.56.0	1.58.0
github.com/anchore/syft	1.38.0	1.38.2
github.com/aws/aws-sdk-go-v2	1.40.1	1.41.0
github.com/aws/aws-sdk-go-v2/config	1.32.3	1.32.5
github.com/aws/aws-sdk-go-v2/internal/v4a	1.4.15	1.4.16
github.com/aws/aws-sdk-go-v2/service/internal/checksum	1.9.6	1.9.7
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	1.19.15	1.19.16
github.com/aws/aws-sdk-go-v2/service/s3	1.93.0	1.93.2
github.com/charmbracelet/colorprofile	0.3.3	0.4.1
github.com/containerd/cgroups/v3	3.0.3	3.1.2
github.com/envoyproxy/go-control-plane/envoy	1.32.4	1.36.0
github.com/envoyproxy/protoc-gen-validate	1.2.1	1.3.0
github.com/klauspost/compress	1.18.1	1.18.2
github.com/morikuni/aec	1.0.0	1.1.0
github.com/nwaples/rardecode/v2	2.2.1	2.2.2
github.com/spiffe/go-spiffe/v2	2.5.0	2.6.0
go.opentelemetry.io/contrib/detectors/gcp	1.36.0	1.39.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	0.63.0	0.64.0
golang.org/x/oauth2	0.33.0	0.34.0
google.golang.org/protobuf	1.36.10	1.36.11

Updates github.com/onsi/gomega from 1.38.2 to 1.38.3

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Commits

• a3ca2ca v1.38.3
• 4dada36 fix failing have http tests
• d40c691 make string formatitng more consistent for users who use format.Object directly
• 2a37b46 doc: fix typos
• ee26170 docs: fix HaveValue example
• cc85c05 Bump actions/setup-go from 5 to 6 (#866)
• 8905788 Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 (#865)
• 67552c5 chore: apply fixes from Go modernize command
• See full diff in compare view

Updates cel.dev/expr from 0.24.0 to 0.25.1

Release notes

Sourced from cel.dev/expr's releases.

Release v0.25.1

Minor additions to the v0.25.0 release

What's Changed

• Remove test/v1 directory and its protos by @​l46kok in google/cel-spec#487
• Add parsing tests for string and bytes literals by @​hudlow in google/cel-spec#489

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

Release v0.25.0

What's Changed

• Initial version of the policy specification by @​jcking in google/cel-spec#477
• Remove orphaned ToC entry for enums as ints from the specification by @​timostamm in google/cel-spec#476
• Tests for selector, function, and field names formerly defined as reserved by @​hudlow in google/cel-spec#480
• Add a test case for lastIndexOf in string_ext against an empty string by @​l46kok in google/cel-spec#468
• Remove TOC from language definition by @​hudlow in google/cel-spec#482
• Remove int(enum) -> int signature by @​hudlow in google/cel-spec#483
• Clarify formatting decimals, add %f formatting test cases around rounding by @​l46kok in google/cel-spec#485
• Remove remaining google.rpc.Status deps from cel-spec by @​TristonianJones in google/cel-spec#486

New Contributors

• @​timostamm made their first contribution in google/cel-spec#476

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

Commits

• 7f3c4c5 Add parsing tests for string and bytes literals (#489)
• d3430a8 Remove test/v1 directory and its protos (#487)
• 3c96c71 Remove remaining google.rpc.Status deps from cel-spec (#486)
• 750024a Clarify formatting decimals, add %f formatting test cases around rounding (#485)
• 9dd5f5c Remove int(enum) -> int signature (#483)
• 808c918 Remove TOC from language definition (#482)
• bad3928 Add a test case for lastIndexOf in string_ext against an empty string (#468)
• 14cdd3f Tests for selector, function, and field names formerly defined as reserved (#...
• 8a33394 Remove orphaned ToC entry for enums as ints from the specification (#476)
• a8f582a Initial version of the policy specification (#477)
• See full diff in compare view

Updates cloud.google.com/go/auth from 0.16.4 to 0.17.0

Changelog

Sourced from cloud.google.com/go/auth's changelog.

v0.17.0

• firestore BREAKING CHANGES:

  • Remove UpdateMap and UpdateStruct; rename UpdatePaths to Update. Change docref.UpdateMap(ctx, map[string]interface{}{"a.b", 1}) to docref.Update(ctx, []firestore.Update{{Path: "a.b", Value: 1}})

    Change docref.UpdateStruct(ctx, []string{"Field"}, aStruct) to docref.Update(ctx, []firestore.Update{{Path: "Field", Value: aStruct.Field}})

  • Rename MergePaths to Merge; require args to be FieldPaths

  • A value stored as an integer can be read into a floating-point field, and vice versa.

• bigtable/cmd/cbt:
  • Support deleting a column.
  • Add regex option for row read.
• spanner: Mark stable.
• storage:
  • Add Reader.ContentEncoding method.
  • Fix handling of SignedURL headers.
• bigquery:
  • If Uploader.Put is called with no rows, it returns nil without making a call.
  • Schema inference supports the "nullable" option in struct tags for non-required fields.
  • TimePartitioning supports "Field".

v0.16.0

• Other bigquery changes:

  • JobIterator.Next returns *Job; removed JobInfo (BREAKING CHANGE).
  • UseStandardSQL is deprecated; set UseLegacySQL to true if you need Legacy SQL.
  • Uploader.Put will generate a random insert ID if you do not provide one.
  • Support time partitioning for load jobs.
  • Support dry-run queries.
  • A Job remembers its last retrieved status.
  • Support retrieving job configuration.
  • Support labels for jobs and tables.
  • Support dataset access lists.
  • Improve support for external data sources, including data from Bigtable and Google Sheets, and tables with external data.
  • Support updating a table's view configuration.
  • Fix uploading civil times with nanoseconds.

• storage:

  • Support PubSub notifications.

... (truncated)

Commits

• 050b16d all: update version and README
• def6812 storage: fix SignedURL integration test
• ff434d4 all: make tests pass with go1.10beta1
• ad7ff91 storage: add header sanitisation for SignedURL.
• b97d364 internal/fields: fix test to match next Go version
• 6856ba4 bigquery: support inference of nullable fields
• 5fa930e bigquery: support time-partitioning field
• 9cfa4d0 bigtable: link to the cbt installation instructions in the cbt docs
• 3051b91 datatransfer: move into bigquery dir
• 5733118 firestore: remove UpdateMap and UpdateStruct
• Additional commits viewable in compare view

Updates cloud.google.com/go/compute/metadata from 0.8.0 to 0.9.0

Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Code changes required from v0.9.0

• pubsub: Replace

  sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})
  

  with

  sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
      PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
  })
  

• trace: traceGRPCServerInterceptor will be provided from *trace.Client. Given an initialized *trace.Client named tc, instead of

  s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))
  

  write

  s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))
  

• trace trace.GRPCClientInterceptor will also provided from *trace.Client. Instead of

  conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))
  

  write

  conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))
  

• trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC interceptor as a dial option as shown below when initializing Cloud package clients:

  c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
  if err != nil {
      ...
  

... (truncated)

Commits

• d4f8670 BREAKING: all: regenerate toolkit client
• 23179f2 readme: document Trace and Error Reporting clients
• c2e00bb trace: switch to grpc-trace-bin for gRPC calls
• 1de0ed4 rpcreplay: Fprintf functions
• 8878988 bigtable/bttest: Return proper error code when entity already exists
• e432073 bigtable: Don't retry on INTERNAL errors.
• 84bf648 rpcreplay: responses to code review comments from previous CL
• e687f27 rpcreplay: replay of unary RPCs
• 9da216d spanner: more integration tests
• a089e75 logging: document that Close flushes the loggers
• Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.5.2 to 1.5.3

Release notes

Sourced from cloud.google.com/go/iam's releases.

iam: v1.5.3

1.5.3 (2025-10-08)

Bug Fixes

• iam: Upgrade gRPC service registration func (9dd3adf)

Commits

• bf00b9d chore: release main (#13076)
• 9dd3adf chore: bump changed modules (#13075)
• 9f9d01f fix: upgrade gRPC service registration func (#13063)
• f14260d chore(.github): restore deep-remove-regex entries (#13073)
• e127d94 test(bigtable): refactor TestRetryApply for clarity (#13052)
• 2930b5c chore: release main (#13065)
• bc93e83 chore: bump changed modules (#13064)
• 0ce207f test(firestore): correct TestIntegration_WatchQuery (#13053)
• 04ac2d2 chore(.librarian): special-case fixes in state.yaml (#13062)
• b94c3ba fix(storage): remove default timeout for gRPC operations (#13022)
• Additional commits viewable in compare view

Updates cloud.google.com/go/monitoring from 1.24.2 to 1.24.3

Release notes

Sourced from cloud.google.com/go/monitoring's releases.

monitoring: v1.24.3

1.24.3 (2025-10-08)

Bug Fixes

• monitoring: Upgrade gRPC service registration func (9dd3adf)

Commits

• bf00b9d chore: release main (#13076)
• 9dd3adf chore: bump changed modules (#13075)
• 9f9d01f fix: upgrade gRPC service registration func (#13063)
• f14260d chore(.github): restore deep-remove-regex entries (#13073)
• e127d94 test(bigtable): refactor TestRetryApply for clarity (#13052)
• 2930b5c chore: release main (#13065)
• bc93e83 chore: bump changed modules (#13064)
• 0ce207f test(firestore): correct TestIntegration_WatchQuery (#13053)
• 04ac2d2 chore(.librarian): special-case fixes in state.yaml (#13062)
• b94c3ba fix(storage): remove default timeout for gRPC operations (#13022)
• Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.56.0 to 1.58.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage 1.58.0

1.58.0 (2025-12-03)

Features

• add object contexts in Go GCS SDK (#13390) (079c4d96)

• calculate crc32c by default and pass checksum in trailing and per-chunk request (#13205) (2ab1c778)

• add support for partial success in ListBuckets (#13320) (d91e47f2)

Bug Fixes

• omit empty filter in http list object request (#13434) (377eb13b)

storage 1.57.2

1.57.2 (2025-11-14)

Features

Bug Fixes

• Handle redirect on takeover. (#13354) (b0f13626)

• add env var to allow disabling bound token (#13236) (cdaf6a6d)

Documentation

• updates to docs and docs formatting (PiperOrigin-RevId: 828488192) (93ca68d5)

storage: v1.57.1

1.57.1 (2025-10-28)

Bug Fixes

• storage: Takeover idempotence. (#13230) (cc5d2a1)
• storage: Copy metadata when using Copier with grpc (#12919) (57a2e80)
• storage: Fix takeover response handling. (#13239) (26d75bc)
• storage: Remove default timeout for gRPC operations (#13022) (b94c3ba)
• storage: Skip download of file outside of target dir (#12945) (6259aee)
• storage: Upgrade gRPC service registration func (8fffca2)

storage: v1.56.3

1.56.3 (2025-10-14)

Bug Fixes

• storage: Persist resource in append retry (#13128) (9ad2100)

Commits

• e68777c chore(main): release spanner 1.58.0 (#9423)
• 6deb969 docs(pubsub): check for nil responses for receive examples (#9516)
• e54989e chore: remove old samples that no longer compile (#9510)
• 1cf28f6 docs(run): clarify some defaults and required or optional values (#9505)
• dbd8f28 chore(main): release firestore 1.15.0 (#8918)
• d320daa doc(datastore): Add document around FitlerField (#7536)
• 07ece0f chore: release main (#9484)
• b06f2b9 chore(all): update deps (#9467)
• e5d0c2f doc(storage): update gRPC docs (#9488)
• ae1f547 feat(compute): Update Compute Engine API to revision 20240220 (#886) (#9485)
• Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp from 1.27.0 to 1.29.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp's releases.

v1.5.1 and v0.29.1

What's Changed

• Handle explicit reset points in the disabled normalizer by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#378
• Add struct tag for sum of squared deviations estimate and factory test. by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#379
• Prerelease v1.5.1 and v0.29.1 by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#380

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

• Add integration test with metrics from the prometheus receiver by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#348
• Add make commands for release by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#354
• Send timeseries synchronously by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#358
• Drop histograms without a sum by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#359
• Add sum of squared deviation estimate by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#341
• Add missing otel attributes to Spans exported to Cloud Trace by @​jsuereth in GoogleCloudPlatform/opentelemetry-operations-go#365
• Normalize histograms, summaries, and exponential histograms by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#360
• Use the timeout passed to the metrics exporter by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#369
• Collector logging exporter by @​damemi in GoogleCloudPlatform/opentelemetry-operations-go#373
• Update logging exporter to use "gcp.*" prefix for attributes by @​damemi in GoogleCloudPlatform/opentelemetry-operations-go#374
• Add logging exporter info to readme by @​damemi in GoogleCloudPlatform/opentelemetry-operations-go#375
• Prepare release for v0.29/v1.5.0 by @​damemi in GoogleCloudPlatform/opentelemetry-operations-go#376

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

• Allow users to override useragent by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#322
• Address a bunch of small TODOs by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#314
• Update release.go for latest release by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#321
• Rename files to be easier to understand, and add comment by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#327
• Fix formatting of summary quantile labels to match prometheus by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#325
• Update opentelemetry collector dependency, and switch away from deprecated functions. by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#328
• Sanitize label keys for metric descriptors by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#331
• Add attribute mapping function by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#324
• Normalize sums prior to exporting them by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#323
• Do not use IsZero on timestamps obtained from pdata by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#336
• Send summary counts as doubles instead of integers by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#338
• Drop data points with no value set by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#339
• Handle NaN sums in histograms and exponential histograms by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#340
• Fix typos around integration tests by @​damemi in GoogleCloudPlatform/opentelemetry-operations-go#345
• Update fixtures based on upstream changes to the prometheus receiver by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#346
• feat(propagator): create a new one-way propagator by @​muncus in GoogleCloudPlatform/opentelemetry-operations-go#343
• Demonstrate that integration tests aren't catching failures by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#349
• Update dependencies by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#347
• Address remaining nits from #347 by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#351
• Prepare for releasing v1.4.0 and v0.28.0 by @​dashpole in GoogleCloudPlatform/opentelemetry-operations-go#353

... (truncated)

Commits

• 214376d prepare for v1.28.0/v0.53.0 (#1052)
• 5af7b07 update otlphttp example to properly refresh token (#1051)
• 6658b3a go.mod: use go 1.23 (#1048)
• d0b1fbf exporter/metric: add WithMetricClient option (#1033)
• 4f9a944 Update RELEASING.md (#1046)
• afa963e Prepare for v1.28.0/v0.52.0 (#1045)
• 93b3431 Update dependencies and tooling (#1042)
• 3364134 Allow overriding Project ID using env var (#1040)
• 9055911 exporter/collector: Add mapping for LogSeverity values set as SeverityText to...
• 5d05a51 chore(deps): update go version from 1.2x.x to 1.23.8 and 1.24.0 to 1.24.2...
• See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.53.0 to 0.54.0

Commits

• 7130d1a prepare for v1.30.0/v0.54.0 (#1072)
• 9a749d9 Update all dependencies, bump go version (#1069)
• f8a4910 post-release: fix segfault in script when no replace is found (#1025)
• 1ea43a4 Bump mapstructure dependency manually (#1066)
• 20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
• 48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
• 339f1ae log project name when metric requests fail (#1059)
• 53263ae Show structured logging in Go (#1057)
• 44cf856 Update slog example (#1056)
• e5c657d Add OTel Logging sample (#1055)
• See full diff in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping from 0.53.0 to 0.54.0

Commits

• 7130d1a prepare for v1.30.0/v0.54.0 (#1072)
• 9a749d9 Update all dependencies, bump go version (#1069)
• f8a4910 post-release: fix segfault in script when no replace is found (#1025)
• 1ea43a4 Bump mapstructure dependency manually (#1066)
• 20c2f35 feat: Populate description for gcm.TimeSeries (#1063)
• 48e79e1 migrate from pkg/translator/prometheus to otlptranslator (#1061)
• 339f1ae log project name when metric requests fail (#1059)
• 53263ae Show structured logging in Go (#1057)
• 44cf856 Update slog example (#1056)
• e5c657d Add OTel Logging sample (#1055)
• See full diff in compare view

Updates github.com/anchore/syft from 1.38.0 to 1.38.2

Release notes

Sourced from github.com/anchore/syft's releases.

v1.38.2

Bug Fixes

• drop cpe from gguf [#4383 @​spiffcs]
• emit lua rockspec dependencies in metadata [#4376 @​willmurphyscode]
• Invalid SBOMs are created when GO replace directive is used [#4415 #4419 @​VictorHuu]
• Incorrect CPE for Vercel's Next js [#4443 #4450 @​willmurphyscode]
• v1.38.0 generates empty sbom for tgz sources [#4416 #4421 @​VictorHuu]
• Syft: The dependency graph does not include all Requires-Dist relationships defined in the package’s METADATA file [#4401 #4408 @​willmurphyscode]

(Full Changelog)

Commits

• bfe63f8 chore(deps): update anchore dependencies (#4440)
• f01056d chore(deps): update tools to latest versions (#4442)
• 09b24bd chore(deps): bump peter-evans/create-pull-request from 7.0.8 to 7.0.11 (#4447)
• ae1fa09 chore(deps): bump actions/create-github-app-token from 2.1.4 to 2.2.1 (#4445)
• 6b0f924 chore(deps): bump github.com/go-git/go-billy/v5 from 5.6.2 to 5.7.0 (#4448)
• 6d56087 chore(deps): bump github/codeql-action from 4.31.6 to 4.31.7 (#4446)
• 1d718f3 chore(deps): bump golang.org/x/tools from 0.39.0 to 0.40.0 (#4453)
• 9e3150b fix: java archives excluded due to incorrect license glob results (#4449)
• d950ac1 fix: use vercel for vendor in nextjs CPE (#4450)
• baca32f fix:after compliance applied,the relationship concerning the original one sho...
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.40.1 to 1.41.0

Commits

• 2c5c1de Release 2025-12-08
• a968e75 Regenerated Clients
• b110f67 Update endpoints model
• 82760c3 Update API model
• 9e038d3 [merge 12/8/25] default MaxConnsPerHost to 2048 (#3245)
• 55b9a85 Release 2025-12-05
• cb36f84 Regenerated Clients
• 081bac0 Update API model
• 25f26c2 Release 2025-12-04
• aadf9d3 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.3 to 1.32.5

Commits

• d125de3 Release 2024-11-18
• fec51f3 Regenerated Clients
• fba5997 Update API model
• 0b8e5c8 Bump smithy-go dependency (#2902)
• 50ba45c Release 2024-11-15.2
• 444bdff Regenerated Clients
• 55ab381 Update endpoints model
• 94c0837 Update API model
• 2398a79 Remove elastictranscoder service's integration test (#2901)
• 93e0f29 Release 2024-11-15
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.3 to 1.19.5

Commits

• 676a8b1 Release 2025-01-24
• 1737386 Regenerated Clients
• 3bc09da Update API model
• cb98dee Fix flex checksum validation cfg (#2981)
• 9c76401 fix bad changelog type
• ed8a3ca Reduce fmt.Sprintf allocations in query encoding (#2919)
• d5773a9 Add FixUnmarshalIndividualSetValues option to DecoderOptions of dynamodb (#2896)
• 58e23dc fix codegen test failing in main
• 640d919 fix broken jmespath waiters in cloudwatch and autoscaling (#2984)

[pacostas]

@dependabot recreate