X Tutup
Skip to content

fix(deps): update vulnfeeds-go#4944

Merged
cuixq merged 1 commit intogoogle:masterfrom
renovate-bot:renovate/vulnfeeds-go
Mar 10, 2026
Merged

fix(deps): update vulnfeeds-go#4944
cuixq merged 1 commit intogoogle:masterfrom
renovate-bot:renovate/vulnfeeds-go

Conversation

@renovate-bot
Copy link
Collaborator

@renovate-bot renovate-bot commented Mar 3, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
charm.land/lipgloss/v2 v2.0.0 → v2.0.1 age confidence
github.com/gkampitakis/go-snaps v0.5.19 → v0.5.20 age confidence
github.com/go-git/go-git/v5 v5.16.5 → v5.17.0 age confidence
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.42.0 age confidence
go.opentelemetry.io/otel v1.40.0 → v1.42.0 age confidence
go.opentelemetry.io/otel/sdk v1.40.0 → v1.42.0 age confidence
go.opentelemetry.io/otel/trace v1.40.0 → v1.42.0 age confidence
google.golang.org/api v0.268.0 → v0.270.0 age confidence

Release Notes

charmbracelet/lipgloss (charm.land/lipgloss/v2)

v2.0.1

Compare Source

A small release to properly set style underline colors, as well as handling partial reads while querying the terminal.

Changelog

Fixed
Docs
Other stuff

The Charm logo

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.20

Compare Source

What's Changed

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

go-git/go-git (github.com/go-git/go-git/v5)

v5.17.0

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.16.5...v5.17.0

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)

v1.42.0: /v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Compare Source

Added
  • Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#​8442)
Changed

  • Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#​8631)

    • The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:
      • RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.
      • rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
      • rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

    See semantic-conventions v1.40.0 release for complete details.

Fixed
  • Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#​6913)
  • Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#​8618)
  • Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8642)
  • Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#​8578)
Removed

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-go-contrib@v1.41.0...v1.42.0

v1.41.0: /v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

Compare Source

This release is the last to support Go 1.24.
The next release will require at least Go 1.25.

Added
  • Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#​8506)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#​8544)
  • Support testing of Go 1.26. (#​8549)
  • Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#​8555)
  • Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#​8553)
  • Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#​8557)
  • Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#​8510)
  • Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#​8488)
  • Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#​8590)
  • Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#​8612)
Fixed
  • Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8509)
  • Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8565)
  • Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#​8450)
  • Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#​8502)
  • Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#​8595)
Removed
  • Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#​8501)
Changed
  • Reduce allocations in the generated HTTP internal/semconv packages. (#​8511)
    Updated modules include:
    • go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
    • go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
    • go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
    • go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
    • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
    • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  • Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#​8505)
Deprecated
  • WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#​8587)

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-go-contrib@v1.40.0...v1.41.0

v1.40.0: /v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0

Compare Source

Overview

Added
  • WithMetricAttributesFn option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to define dynamic attributes on auto-instrumented metrics. (#​8191)
  • Add support for configuring propagators in go.opentelemetry.io/contrib/otelconf. (#​8281)
  • Add const Version in go.opentelemetry.io/contrib/bridges/prometheus. (#​8401)
  • Add const Version in go.opentelemetry.io/contrib/otelconf. (#​8461)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otellogr. (#​8477)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otellogrus. (#​8485)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otelslog. (#​8480)
Fixed
  • Fix panic when passing nil TracerProvider or MeterProvider to WithTracerProvider or WithMeterProvider in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8323)
  • Transport in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now supports reading request body multiple times for subsequent requests that reuse http.Request. (#​8352)
Changed
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp has been replaced by const Version. (#​8142)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace has been replaced by const Version. (#​8302)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc has been replaced by const Version. (#​8317)
  • The Version() function in go.opentelemetry.io/contrib/zpages has been replaced by const Version. (#​8325)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo has been replaced by const Version. (#​8340)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin has been replaced by const Version. (#​8341)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/runtime has been replaced by const Version string. (#​8349)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws has been replaced by const Version. (#​8356)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda has been replaced by const Version. (#​8357)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/host has been replaced by const Version. (#​8358)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful has been replaced by const Version. (#​8360)
  • The Version() function in go.opentelemetry.io/contrib/propagators/opencensus has been replaced by const Version. (#​8361)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho has been replaced by const Version. (#​8365)
  • The Version() function in go.opentelemetry.io/contrib/samplers/probability/consistent has been replaced by const Version. (#​8366)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo has been replaced by const Version. (#​8370)
  • Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#​8386)
  • Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#​8386)
  • Upgrade go.opentelemetry.io/otel/semconv to v1.39.0, including updates across all instrumentation and detector modules. (#​8404)

    • The semantic conventions v1.39.0 release introduces breaking changes, including:

      • rpc span and metric attributes have been renamed to align with naming guidelines:
        • rpc.system → rpc.system.name (values: grpc, grpc_web, connectrpc, thrift, dubbo, etc.)
        • rpc.method and rpc.service have been merged into a fully-qualified rpc.method attribute
        • rpc.client|server.duration → rpc.client|server.call.duration (unit changed to seconds)
        • rpc.grpc.request.metadata/rpc.grpc.response.metadata → rpc.request.metadata/rpc.response.metadata
        • rpc.grpc.status_code → deprecated in favor of rpc.response.status_code
        • rpc.jsonrpc.request_id → jsonrpc.request.id
        • rpc.jsonrpc.version → jsonrpc.protocol.version
      • system and process metrics:
        • *.linux.memory metrics renamed to *.memory.linux
        • system.process.status → process.state
        • system.paging.type and process.paging.fault_type → system.paging.fault.type
      • peer.service attribute has been deprecated in favor of service.peer.name

      See semantic-conventions v1.39.0 release and v1.38.0 release for complete breaking change details.

    • Updated modules include:

      • go.opentelemetry.io/contrib/bridges/otellogr
      • go.opentelemetry.io/contrib/bridges/otellogrus
      • go.opentelemetry.io/contrib/bridges/otelslog
      • go.opentelemetry.io/contrib/bridges/otelzap
      • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
        • Uses service.peer.name attribute (deprecated peer.service)
      • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
      • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
        • Merged rpc.method and rpc.service into fully-qualified rpc.method (e.g., grpc.testing.TestService/EmptyCall)
        • rpc.system → rpc.system.name with updated values (e.g., RPCSystemNameGRPC)
        • rpc.grpc.status_code → rpc.response.status_code (e.g., RPCResponseStatusCode("OK"))
      • go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws
        • Merged rpc.method and rpc.service attributes (service/operation → fully-qualified method)
        • rpc.system → rpc.system.name with AWSSystemVal
        • New MethodAttr() function for combined service/operation attribute
      • go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda
      • go.opentelemetry.io/contrib/instrumentation/runtime
      • go.opentelemetry.io/contrib/instrumentation/host
      • go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver (both v1 and v2)
      • go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
      • go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
      • go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
      • go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
      • go.opentelemetry.io/contrib/detectors/gcp
      • go.opentelemetry.io/contrib/detectors/aws/ec2/v2
      • go.opentelemetry.io/contrib/detectors/aws/ecs
      • go.opentelemetry.io/contrib/detectors/aws/eks
      • go.opentelemetry.io/contrib/detectors/azure/azurevm
      • go.opentelemetry.io/contrib/otelconf
Deprecated
  • ServiceAttr() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws is deprecated. Use MethodAttr() instead, as rpc.service has been merged into rpc.method in semantic conventions v1.39.0. (#​8404)
  • OperationAttr() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws is deprecated. Use MethodAttr() instead, as rpc.service has been merged into rpc.method in semantic conventions v1.39.0. (#​8404)
Removed
  • The deprecated DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#​8266)
  • The deprecated WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. Use WithPublicEndpointFn instead. (#​8267)
  • The deprecated WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#​8268)

What's Changed

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Mar 3, 2026
@forking-renovate
Copy link

forking-renovate bot commented Mar 3, 2026 •
edited
Loading

ℹ️ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 9 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/auth v0.18.1 -> v0.18.2
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 -> v1.31.0
github.com/go-git/go-billy/v5 v5.6.2 -> v5.8.0
github.com/googleapis/enterprise-certificate-proxy v0.3.11 -> v0.3.14
go.opentelemetry.io/otel/metric v1.40.0 -> v1.42.0
go.opentelemetry.io/otel/sdk/metric v1.40.0 -> v1.42.0
golang.org/x/sys v0.41.0 -> v0.42.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 -> v0.0.0-20260226221140-a57be14db171
google.golang.org/grpc v1.79.1 -> v1.79.2

@renovate-bot renovate-bot force-pushed the renovate/vulnfeeds-go branch 13 times, most recently from bc7b016 to d2f850a Compare March 9, 2026 23:00
@renovate-bot renovate-bot force-pushed the renovate/vulnfeeds-go branch from d2f850a to 9b901de Compare March 10, 2026 04:14
@cuixq cuixq merged commit 241a2e4 into google:master Mar 10, 2026
22 checks passed
@renovate-bot renovate-bot deleted the renovate/vulnfeeds-go branch March 10, 2026 04:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cuixq cuixq cuixq approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@renovate-bot @cuixq
X Tutup