deps: bump the minor-and-patch group across 1 directory with 15 updates by dependabot[bot] · Pull Request #213 · szibis/metrics-governor

dependabot · 2026-03-23T16:08:31Z

Bumps the minor-and-patch group with 8 updates in the / directory:

Package	From	To
github.com/klauspost/compress	`1.18.4`	`1.18.5`
go.opentelemetry.io/contrib/bridges/prometheus	`0.65.0`	`0.67.0`
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	`0.16.0`	`0.18.0`
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp	`0.16.0`	`0.18.0`
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	`1.40.0`	`1.42.0`
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp	`1.40.0`	`1.42.0`
go.opentelemetry.io/proto/otlp	`1.9.0`	`1.10.0`
golang.org/x/sync	`0.19.0`	`0.20.0`

Updates github.com/klauspost/compress from 1.18.4 to 1.18.5

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.5

What's Changed

zstd: Fix crash when changing encoder dictionary with same ID by @klauspost in klauspost/compress#1135

zstd: Default to full zero frames by @klauspost in klauspost/compress#1134

flate: Clean up histogram order by @klauspost in klauspost/compress#1133

Full Changelog: klauspost/compress@v1.18.4...v1.18.5

Commits

c5e0077 zstd: Fix encoder changing dictionary with same ID (#1135)
fd3f23e zstd: Default to full zero frames (#1134)
8233c58 flate: Clean up histogram order (#1133)
bcf0d12 build(deps): bump the github-actions group with 3 updates (#1132)
cf758fe ci: Upgrade Go versions, clean up (#1130)
77cc520 Add v1.18.4
See full diff in compare view

Updates go.opentelemetry.io/contrib/bridges/prometheus from 0.65.0 to 0.67.0

Release notes

Sourced from go.opentelemetry.io/contrib/bridges/prometheus's releases.

v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Added

Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:

RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.

rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.

rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

See semantic-conventions v1.40.0 release for complete details.

Fixed

Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6913)

Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8618)

Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8642)

Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#8578)

Removed

Drop support for Go 1.24. (#8628)

What's Changed

chore(deps): update github artifact actions to v7 (major) by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8605

chore(deps): update module github.com/sonatard/noctx to v0.5.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8610

chore(deps): update github/codeql-action action to v4.32.5 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8620

fix(deps): update module github.com/aws/smithy-go to v1.24.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8614

chore(deps): update go-openapi packages by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8621

fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8622

chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8608

chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8609

chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.147.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8625

chore(deps): update module github.com/daixiang0/gci to v0.14.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8623

Drop support for 1.24 by @dmathieu in open-telemetry/opentelemetry-go-contrib#8628

fix(deps): update golang.org/x by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8554

fix(deps): update kubernetes packages to v0.35.2 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8626

fix(deps): update aws-sdk-go-v2 monorepo by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8598

fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8630

otelgrpc: modernize the example project by @ash2k in open-telemetry/opentelemetry-go-contrib#8619

chore(deps): update googleapis to a57be14 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8606

fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8627

chore(deps): update module github.com/prometheus/procfs to v0.20.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8624

fix(otelhttp): make Body handling in Transport consistent with stdlib by @ash2k in open-telemetry/opentelemetry-go-contrib#8618

otelhttp: Ignore informational response status codes when persisting status by @VirrageS in open-telemetry/opentelemetry-go-contrib#6913

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/bridges/prometheus's changelog.

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:

RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.

rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.

rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

See semantic-conventions v1.40.0 release for complete details.

Fixed

Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6913)

Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8618)

Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8642)

Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#8578)

Removed

Drop support for [Go 1.24]. (#8628)

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of [Go 1.26]. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

... (truncated)

Commits

d8dabf6 Release v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0 (#8649)
b1de2c7 otelconf: host detector should include os as well (#8578)
b228c0f fix(deps): update module google.golang.org/grpc to v1.79.2 (#8644)
e70fd97 Use correct bucket boundaries for otelgrpc client and server histograms (#8642)
b018d98 fix(deps): update aws-sdk-go-v2 monorepo (#8643)
fb6a351 chore(deps): update github/codeql-action action to v4.32.6 (#8641)
2c9c10e chore(deps): update dependency codespell to v2.4.2 (#8640)
22248d4 chore: enable modernize linter (#8583)
324662a envcar: add environment carrier (#8442)
69addb4 chore(deps): update k8s.io/kube-openapi digest to 5b3e3fd (#8636)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.16.0 to 0.18.0

Release notes

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's releases.

Release v0.18.0

Added

Added resource.Default() for use with meter and tracer providers. (#1507)

AttributePerEventCountLimit and AttributePerLinkCountLimit for SpanLimits. (#1535)

Added Keys() method to propagation.TextMapCarrier and propagation.HeaderCarrier to adapt http.Header to this interface. (#1544)

Added code attributes to go.opentelemetry.io/otel/semconv package. (#1558)

Compatibility testing suite in the CI system for the following systems. (#1567)

OS Go Version Architecture

Ubuntu 1.15 amd64

Ubuntu 1.14 amd64

Ubuntu 1.15 386

Ubuntu 1.14 386

MacOS 1.15 amd64

MacOS 1.14 amd64

Windows 1.15 amd64

Windows 1.14 amd64

Windows 1.15 386

Windows 1.14 386

Changed

Replaced interface oteltest.SpanRecorder with its existing implementation StandardSpanRecorder (#1542).

Default span limit values to 128. (#1535)

Rename MaxEventsPerSpan, MaxAttributesPerSpan and MaxLinksPerSpan to EventCountLimit, AttributeCountLimit and LinkCountLimit, and move these fields into SpanLimits. (#1535)

Renamed the otel/label package to otel/attribute. (#1541)

Vendor the Jaeger exporter's dependency on Apache Thrift. (#1551)

Parallelize the CI linting and testing. (#1567)

Stagger timestamps in exact aggregator tests. (#1569)

Changed all examples to use WithBatchTimeout(5 * time.Second) rather than WithBatchTimeout(5). (#1621)

Prevent end-users from implementing some interfaces (#1575)
      "otel/exporters/otlp/otlphttp".Option
      "otel/exporters/stdout".Option
      "otel/oteltest".Option
      "otel/trace".TracerOption
      "otel/trace".SpanOption
      "otel/trace".EventOption
      "otel/trace".LifeCycleOption
      "otel/trace".InstrumentationOption
      "otel/sdk/resource".Option
      "otel/sdk/trace".ParentBasedSamplerOption
      "otel/sdk/trace".ReadOnlySpan
      "otel/sdk/trace".ReadWriteSpan
Removed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

bb4c297 Pre release v0.18.0 (#1635)
712c3dc Fix makefile ci target and coverage test packages (#1634)
841d2a5 Rename local var new to not collide with builtin (#1610)
13938ab Update SpanProcessor docs (#1611)
e25503a Add compatibility tests to CI (#1567)
1519d95 Use reasonable interval in sdktrace.WithBatchTimeout (#1621)
7d4496e Pass metric labels when transforming to gaugeArray (#1570)
6d4a5e0 Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /exporters/otlp (#1619)
a93393a Bump google.golang.org/grpc in /example/prom-collector (#1620)
e499ca8 Fix validation for tracestate with vendor and add tests (#1581)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp from 0.16.0 to 0.18.0

Release notes

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp's releases.

Release v0.18.0

Added

Added resource.Default() for use with meter and tracer providers. (#1507)

AttributePerEventCountLimit and AttributePerLinkCountLimit for SpanLimits. (#1535)

Added Keys() method to propagation.TextMapCarrier and propagation.HeaderCarrier to adapt http.Header to this interface. (#1544)

Added code attributes to go.opentelemetry.io/otel/semconv package. (#1558)

Compatibility testing suite in the CI system for the following systems. (#1567)

OS Go Version Architecture

Ubuntu 1.15 amd64

Ubuntu 1.14 amd64

Ubuntu 1.15 386

Ubuntu 1.14 386

MacOS 1.15 amd64

MacOS 1.14 amd64

Windows 1.15 amd64

Windows 1.14 amd64

Windows 1.15 386

Windows 1.14 386

Changed

Replaced interface oteltest.SpanRecorder with its existing implementation StandardSpanRecorder (#1542).

Default span limit values to 128. (#1535)

Rename MaxEventsPerSpan, MaxAttributesPerSpan and MaxLinksPerSpan to EventCountLimit, AttributeCountLimit and LinkCountLimit, and move these fields into SpanLimits. (#1535)

Renamed the otel/label package to otel/attribute. (#1541)

Vendor the Jaeger exporter's dependency on Apache Thrift. (#1551)

Parallelize the CI linting and testing. (#1567)

Stagger timestamps in exact aggregator tests. (#1569)

Changed all examples to use WithBatchTimeout(5 * time.Second) rather than WithBatchTimeout(5). (#1621)

Prevent end-users from implementing some interfaces (#1575)
      "otel/exporters/otlp/otlphttp".Option
      "otel/exporters/stdout".Option
      "otel/oteltest".Option
      "otel/trace".TracerOption
      "otel/trace".SpanOption
      "otel/trace".EventOption
      "otel/trace".LifeCycleOption
      "otel/trace".InstrumentationOption
      "otel/sdk/resource".Option
      "otel/sdk/trace".ParentBasedSamplerOption
      "otel/sdk/trace".ReadOnlySpan
      "otel/sdk/trace".ReadWriteSpan
Removed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

bb4c297 Pre release v0.18.0 (#1635)
712c3dc Fix makefile ci target and coverage test packages (#1634)
841d2a5 Rename local var new to not collide with builtin (#1610)
13938ab Update SpanProcessor docs (#1611)
e25503a Add compatibility tests to CI (#1567)
1519d95 Use reasonable interval in sdktrace.WithBatchTimeout (#1621)
7d4496e Pass metric labels when transforming to gaugeArray (#1570)
6d4a5e0 Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /exporters/otlp (#1619)
a93393a Bump google.golang.org/grpc in /example/prom-collector (#1620)
e499ca8 Fix validation for tracestate with vendor and add tests (#1581)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp from 1.40.0 to 1.42.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)

Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)

Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (

Bumps the minor-and-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.4` | `1.18.5` | | [go.opentelemetry.io/contrib/bridges/prometheus](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.67.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go) | `0.16.0` | `0.18.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go) | `0.16.0` | `0.18.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.9.0` | `1.10.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.19.0` | `0.20.0` | Updates `github.com/klauspost/compress` from 1.18.4 to 1.18.5 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.4...v1.18.5) Updates `go.opentelemetry.io/contrib/bridges/prometheus` from 0.65.0 to 0.67.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.67.0) Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.16.0 to 0.18.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.16.0...v0.18.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` from 0.16.0 to 0.18.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.16.0...v0.18.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0) Updates `go.opentelemetry.io/otel/log` from 0.16.0 to 0.18.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.16.0...v0.18.0) Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0) Updates `go.opentelemetry.io/otel/sdk/log` from 0.16.0 to 0.18.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.16.0...v0.18.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.42.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0) Updates `go.opentelemetry.io/proto/otlp` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.9.0...v1.10.0) Updates `golang.org/x/net` from 0.50.0 to 0.51.0 - [Commits](golang/net@v0.50.0...v0.51.0) Updates `golang.org/x/sync` from 0.19.0 to 0.20.0 - [Commits](golang/sync@v0.19.0...v0.20.0) Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.79.1...v1.79.2) --- updated-dependencies: - dependency-name: github.com/klauspost/compress dependency-version: 1.18.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/contrib/bridges/prometheus dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/log dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/sdk/log dependency-version: 0.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.42.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: golang.org/x/net dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: golang.org/x/sync dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-and-patch - dependency-name: google.golang.org/grpc dependency-version: 1.79.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2026-03-23T16:11:03Z

🔬 Pipeline Integrity Report

Status	Result
Overall	✅ PASS
Total Tests	49
Passed	49
Failed	0

Test Results

Suite	Tests	Passed	Status
Data Integrity	20	20	✅ Passed
Durability	8	8	✅ Passed
Resilience	11	11	✅ Passed
Consistency	10	10	✅ Passed
Total	49	49	✅

What these tests check

Data Integrity: End-to-end datapoint accounting — every metric pushed into the pipeline comes out through the exporter
Durability: FIFO ordering, crash recovery, corruption tolerance, mixed compression, graceful shutdown preservation
Resilience: Network failure recovery, circuit breaker lifecycle, drain-on-shutdown, split-on-error, concurrent failure races
Consistency: Batch splitting correctness, byte-split limits, flush count accuracy, metadata state consistency

Last updated: 2026-03-23T16:11:03.394Z

github-actions · 2026-03-23T16:12:01Z

🔒 Security Scan Report

Status	Result
Overall	❌ FAILED
Policy	Block on Critical/High only

Scan Results

Scanner	Status	Findings	Blocks PR
govulncheck	🔴	Found 3 vulnerability(ies)	Yes
Trivy (filesystem)	🔴	Critical: 2, High: 1, Medium: 0, Low: 0	Yes
Trivy (container)	🔴	Critical: 1, High: 3, Medium: 2, Low: 2	Yes
gitleaks	🟢	No secrets detected	No
checkov	🟢	Helm: 0, Dockerfile: 0	No
cargo-audit	🟢	No vulnerabilities found	No
SBOM (syft)	🟢	Generated (SPDX + CycloneDX)	N/A

What these scanners check

govulncheck: Go dependency vulnerabilities (call-graph aware, confirmed reachable)
Trivy (filesystem): CVEs in go.mod, Dockerfile, YAML files
Trivy (container): OS and application CVEs in the built Docker image
gitleaks: Leaked secrets, keys, and tokens in git history
checkov: Infrastructure-as-code misconfigurations in Helm charts and Dockerfile
cargo-audit: Rust dependency vulnerabilities (for optional native compression FFI)
SBOM (syft): Software Bill of Materials generation (informational)

Last updated: 2026-03-23T16:12:00.899Z

github-actions · 2026-03-23T16:12:39Z

🧠 Memory Check Report

Status	Result
Overall	❌ FAIL
Total Memory Tests	423
Passed	421
Failed	2

Test Results

Suite	Tests	Passed	Failed	Status
Resource Tests	34	34	0	✅ Passed
Goroutine Leak Tests	20	20	0	✅ Passed
Memory Stress Tests	7	7	0	✅ Passed
Race Condition Tests	105	105	0	✅ Passed
Memory Leak Tests	45	45	0	✅ Passed
Pool Regression Tests	212	210	2	❌ Failed
Total	423	421	2	❌

What these tests check

Resource Tests: Verify components release memory after shutdown
Goroutine Leak Tests: Verify no goroutines leaked after component lifecycle (using goleak)
Memory Stress Tests: Verify memory growth stays bounded under sustained load
Race Condition Tests: Verify concurrent access patterns are data-race free (using -race detector)
Memory Leak Tests: Verify heap growth is bounded after repeated create/destroy and reset cycles
Pool Regression Tests: Verify sync.Pool objects (protobuf requests, compression buffers) are correctly returned and don't leak

Last updated: 2026-03-23T16:12:38.743Z

github-actions · 2026-03-23T16:16:56Z

📊 Test Coverage Report

Build	Release
`0.9.14-700451f`	v1.2.1 (🟢 Patch)

Metric	Value	Status
Code Coverage	92.9%	🟢
Required Threshold	90%	✅ Passed
Coverage Change	+.3%	📈
Base Coverage	92.6%	-

Test Results

Suite	Packages	Status
Unit Tests	21	❌ Failed
Functional Tests	0	❌ Failed
E2E Tests	0	❌ Failed
Docker E2E	-	✅ Passed
Total	21	❌ Some Failed

Coverage Thresholds

🟢 Good: >= 90%
🟡 Warning: 80-89%
🔴 Critical: < 80%

See Benchmark Comparison comment for performance results.

Last updated: 2026-03-23T16:16:55.800Z

dependabot Bot added dependencies Dependency updates go Pull requests that update go code labels Mar 23, 2026

github-actions Bot added the size/M Medium PR (≤200 lines) label Mar 23, 2026

szibis merged commit 16c1726 into main May 25, 2026
100 of 105 checks passed

szibis deleted the dependabot/go_modules/minor-and-patch-8d484cea90 branch May 25, 2026 16:41

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps: bump the minor-and-patch group across 1 directory with 15 updates#213

deps: bump the minor-and-patch group across 1 directory with 15 updates#213
szibis merged 1 commit into
mainfrom
dependabot/go_modules/minor-and-patch-8d484cea90

dependabot Bot commented on behalf of github Mar 23, 2026 •

edited

Loading

Uh oh!

github-actions Bot commented Mar 23, 2026

Uh oh!

github-actions Bot commented Mar 23, 2026

Uh oh!

github-actions Bot commented Mar 23, 2026

Uh oh!

github-actions Bot commented Mar 23, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

OS	Go Version	Architecture
Ubuntu	1.15	amd64
Ubuntu	1.14	amd64
Ubuntu	1.15	386
Ubuntu	1.14	386
MacOS	1.15	amd64
MacOS	1.14	amd64
Windows	1.15	amd64
Windows	1.14	amd64
Windows	1.15	386
Windows	1.14	386

Conversation

dependabot Bot commented on behalf of github Mar 23, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.18.5

What's Changed

v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Added

Changed

Fixed

Removed

What's Changed

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

Added

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

Release v0.18.0

Added

Changed

Removed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

Release v0.18.0

Added

Changed

Removed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Changed

Fixed

Removed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

Uh oh!

github-actions Bot commented Mar 23, 2026

🔬 Pipeline Integrity Report

Test Results

Uh oh!

github-actions Bot commented Mar 23, 2026

🔒 Security Scan Report

Scan Results

Uh oh!

github-actions Bot commented Mar 23, 2026

🧠 Memory Check Report

Test Results

Uh oh!

dependabot Bot commented on behalf of github Mar 23, 2026 •

edited

Loading