deps(go): bump the go-minor group in /apps/control-plane with 6 updates by dependabot[bot] · Pull Request #15 · all-source-os/all-source

dependabot · 2026-01-29T17:47:12Z

Bumps the go-minor group in /apps/control-plane with 6 updates:

Package	From	To
github.com/gin-gonic/gin	`1.9.1`	`1.11.0`
github.com/go-resty/resty/v2	`2.11.0`	`2.17.1`
github.com/prometheus/client_golang	`1.19.0`	`1.19.1`
go.opentelemetry.io/otel	`1.21.0`	`1.39.0`
go.opentelemetry.io/otel/sdk	`1.21.0`	`1.39.0`
go.opentelemetry.io/otel/trace	`1.21.0`	`1.39.0`

Updates github.com/gin-gonic/gin from 1.9.1 to 1.11.0

Release notes

Sourced from github.com/gin-gonic/gin's releases.

v1.11.0

Changelog

Features

6ca8ddb1aed78d9ffaf984e5489111838242fedb: feat(binding): add BindPlain (#3904) (@guonaihong)

4ccfa7c275c449990818e46759d5974a953cc1c1: feat(binding): add support for unixMilli and unixMicro (#4190) (@takanuva15)

9d7c0e9e1a301f417df9dc89a8cadc3bf9063db2: feat(context): GetXxx added support for more go native types (#3633) (@CC11001100)

fb09c825e8e13134daaa90debfda198520e1b347: feat(context): add SetCookieData (#4240) (@Narita-1095305)

f05f966a0824b1d302ee556183e2579c91954266: feat(form): Support default values for collections in form binding (#4048) (@takanuva15)

3cb30679b5e3021db16c776ed7e70d380586e9ce: feat(form): add array collection format in form binding (#3986) (@slowhigh)

24d67647cb9b4e0bbdcdec7f0c2086e8004e1572: feat(form): add custom string slice for form tag unmarshal (#3970) (#3971) (@bruceNu1l)

8791c96960e719ff2f41e24163c5898656cee474: feat(fs): Export, test and document OnlyFilesFS (#3939) (@joeig)

71496abe6836462e2ed70436b7d72ea2a3585417: feat(fs): Implement loading HTML from http.FileSystem (#4053) (@sunshineplan)

3ac729dc4a497d360a23b9d7e766c622b3c99f51: feat(gin): support http3 using quic-go/quic-go (#3210) (@thinkerou)

4621b7ac982335d9a74432e182dd2bfc6d841431: feat(router): add literal colon support (#1432) (#2857) (@wssccc)

dbd8a2515093ad47cadc5c1fface89861a0b765c: feat: added AbortWithStatusPureJSON() in Context (#4290) (@ddevsr)

688a429d19d8c804447bb889d3635e2c31a5564d: feat: support custom json codec at runtime (#3391) (@timandy)

Bug fixes

8fb3136664254d7c592127f00d52849caba18a67: Revert "fix(time): binding time with empty value (#4103)" (#4245) (@appleboy)

e737e3e267beb4dc3bab16cc8be59e3902d98a94: fix(binding): prevent duplicate decoding and add validation in decodeToml (#4193) (@revevide)

4f339e6a35b163d31b30916b37f4176d385f41bd: fix(context): YAML judgment logic in Negotiate (#3966) (@RedCrazyGhost)

36b0dede4b8c4a67d92c4107cebc5a068364321d: fix(context): check handler is nil (#3413) (@hktalent)

e0d46ded6cb6974d55a255ab122d1aa6ca0cd60e: fix(context): verify URL is Non-nil in initQueryCache() (#3969) (@adrianosela)

dd33ff793861cee3baa77d575ff319119c366f3a: fix(docs): missing go markdown codeblock (#4266) (@vdusart)

b38c59de7fef67400a1c98efeae700a689c45783: fix(errors): change Unwrap method receiver to value type (#4232) (@OrkhanAlikhanov)

28e57f58b184b2305ace192e02496bb89f6fd8cb: fix(form): Set default value for form fields (#4047) (@ahmadSaeedGoda)

626d55b0c02937645c21774cacc021713de88604: fix(gin): Do not panic when handling method not allowed on empty tree (#4003) (@phsym)

7d147928ee232fce156ea7ce8ae6329e148aeb41: fix(gin): data race warning for gin mode (#1580) (@kplachkov)

c677ccc40a60386565dd0d755efacb85d153feca: fix(go): invalid Go toolchain version (#3961) (@thinkerou)

3319038418656a268c889393cb2dd4224c4469ec: fix(readme): fix broken link to English documentation (#4222) (@eduardo-ax)

674522db91d637d179c16c372d87756ea26fa089: fix(time): binding time with empty value (#4103) (@ksw2000)

ea53388e6ee4a6a0a1647b390c56eeed780e7e56: fix(tree): Keep panic infos consistent when wildcard type build faild (#4077) (@kingcanfish)

8763f33c65f7df8be5b9fe7504ab7fcf20abb41d: fix: prevent middleware re-entry issue in HandleContext (#3987) (@bound2)

7a1b655074c313f9491c83bb8ea164cdc4a9afe9: fix: sonic on arm64 (#4234) (@yashgorana)

5826722a87cf5855fcc4b794cbef11612352771d: fix: version number discrepancy (#4299) (@suwakei)

Enhancements

40725d85badd647870df6f9fa7a75ac76341f804: chore(bind): return 413 status code when error is http.MaxBytesError (#4227) (@ItalyPaleAle)

f875d8728306c2c2c6f504900ab08cd1d8c47f12: chore(context): test context initialization and handler logic (#4087) (@appleboy)

e7693e67c23005743502962d3bb9839a354d6688: chore(deps): bump actions/setup-go from 5 to 6 (#4351) (@dependabot[bot])

afa0c31d97e1b112ccfe7652957f7d8514580c72: chore(deps): bump github.com/gin-contrib/sse from 0.1.0 to 1.1.0 (#4216) (@dependabot[bot])

255af882db4baf0ed6209f1a5471f1663c5d0060: chore(deps): bump github.com/go-playground/validator/v10 (#4208) (@dependabot[bot])

545fd74379a0b167a918e38626ae5f7eb83fb243: chore(deps): bump github.com/go-playground/validator/v10 (#4289) (@dependabot[bot])

c3c8620a7fb4e09c7845feca4e8e8a8678a2685d: chore(deps): bump github.com/go-playground/validator/v10 from 10.20.0 to 10.22.1 (#4052) (@dependabot[bot])

cf32d2dcf8c7534f59727c5e213e45f2412c593a: chore(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.4 (#4212) (@dependabot[bot])

bb824731032856460aa3ffc23bd90e11bf7d5199: chore(deps): bump github.com/quic-go/quic-go from 0.48.2 to 0.50.1 (#4197) (@dependabot[bot])

61c2b1c28f0c5a754330545e31f02cd6d6f7944e: chore(deps): bump github.com/quic-go/quic-go from 0.51.0 to 0.52.0 (#4250) (@dependabot[bot])

b7d6308bcc84066df79a047ae363a6120fe87808: chore(deps): bump github.com/quic-go/quic-go from 0.52.0 to 0.53.0 (#4281) (@dependabot[bot])

077a2f39c85700ba0823f85ed29cec0c8f2cbdfc: chore(deps): bump github.com/quic-go/quic-go from 0.53.0 to 0.54.0 (#4328) (@dependabot[bot])

46150257b3eec60e3e0bf1cee7c03439099aef83: chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 (#4347) (@dependabot[bot])

a6287825c95821a378a34f8a5c9139ea1f6ebd96: chore(deps): bump github.com/ugorji/go/codec from 1.2.12 to 1.3.0 (#4268) (@dependabot[bot])

cc4e11438cd6c0bcc632fe3492d3817dfa21c337: chore(deps): bump golang.org/x/net from 0.25.0 to 0.27.0 (#4013) (@dependabot[bot])

... (truncated)

Changelog

Sourced from github.com/gin-gonic/gin's changelog.

Gin v1.11.0

Features

feat(gin): Experimental support for HTTP/3 using quic-go/quic-go (#3210)

feat(form): add array collection format in form binding (#3986), add custom string slice for form tag unmarshal (#3970)

feat(binding): add BindPlain (#3904)

feat(fs): Export, test and document OnlyFilesFS (#3939)

feat(binding): add support for unixMilli and unixMicro (#4190)

feat(form): Support default values for collections in form binding (#4048)

feat(context): GetXxx added support for more go native types (#3633)

Enhancements

perf(context): optimize getMapFromFormData performance (#4339)

refactor(tree): replace string(/) with "/" in node.insertChild (#4354)

refactor(render): remove headers parameter from writeHeader (#4353)

refactor(context): simplify "GetType()" functions (#4080)

refactor(slice): simplify SliceValidationError Error method (#3910)

refactor(context):Avoid using filepath.Dir twice in SaveUploadedFile (#4181)

refactor(context): refactor context handling and improve test robustness (#4066)

refactor(binding): use strings.Cut to replace strings.Index (#3522)

refactor(context): add an optional permission parameter to SaveUploadedFile (#4068)

refactor(context): verify URL is Non-nil in initQueryCache() (#3969)

refactor(context): YAML judgment logic in Negotiate (#3966)

tree: replace the self-defined 'min' to official one (#3975)

context: Remove redundant filepath.Dir usage (#4181)

Bug Fixes

fix: prevent middleware re-entry issue in HandleContext (#3987)

fix(binding): prevent duplicate decoding and add validation in decodeToml (#4193)

fix(gin): Do not panic when handling method not allowed on empty tree (#4003)

fix(gin): data race warning for gin mode (#1580)

fix(context): verify URL is Non-nil in initQueryCache() (#3969)

fix(context): YAML judgment logic in Negotiate (#3966)

fix(context): check handler is nil (#3413)

fix(readme): fix broken link to English documentation (#4222)

fix(tree): Keep panic infos consistent when wildcard type build faild (#4077)

Build process updates / CI

ci: integrate Trivy vulnerability scanning into CI workflow (#4359)

ci: support Go 1.25 in CI/CD (#4341)

build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#4342)

ci: add Go version 1.24 to GitHub Actions (#4154)

build: update Gin minimum Go version to 1.21 (#3960)

ci(lint): enable new linters (testifylint, usestdlibvars, perfsprint, etc.) (#4010, #4091, #4090)

ci(lint): update workflows and improve test request consistency (#4126)

... (truncated)

Commits

6ad6205 docs(changelog): upgrade Gin to v1.11.0 and add release notes (#4361)
7858527 docs(changelog): update release notes for Gin v1.10.1 (#4360)
cb000f5 ci: integrate Trivy vulnerability scanning into CI workflow (#4359)
2119046 ci: support Go 1.25 (#4341)
da372fc build(deps): upgrade github.com/bytedance/sonic from v1.13.2 to v1.14.0 (#4342)
e198f6e refactor(render): remove headers parameter from writeHeader (#4353)
cca98d2 chore(deps): bump google.golang.org/protobuf from 1.36.8 to 1.36.9 (#4356)
9b1e353 refactor(tree): replace string(/) with "/" in node.insertChild (#4354)
f9bd00a perf(context): optimize getMapFromFormData performance (#4339)
28172fa chore(deps): bump google.golang.org/protobuf from 1.36.6 to 1.36.8 (#4346)
Additional commits viewable in compare view

Updates github.com/go-resty/resty/v2 from 2.11.0 to 2.17.1

Release notes

Sourced from github.com/go-resty/resty/v2's releases.

v2.17.1

Release Notes

Bug Fixes

fix: content type request header on http.NoBody type #1074 by @jeevatkm in go-resty/resty#1079

Full Changelog: go-resty/resty@v2.17.0...v2.17.1

v2.17.0

Release Notes

Bug Fixes

Fix off-by-one error in key/value resolution by @mbsulliv in go-resty/resty#975

Fix/missing content length header on empty post req by @Libero-Dev in go-resty/resty#1003

Backport

backport: potential wrong total time in trace info from PR #1017 by @git-hulk in go-resty/resty#1018

backport: negative trace substraction when using SetTimeout by @nicolasbeauvais in go-resty/resty#1065

Release Updates

For v2.17.0 release by @jeevatkm in go-resty/resty#1066

New Contributors

@mbsulliv made their first contribution in go-resty/resty#975

@Libero-Dev made their first contribution in go-resty/resty#1003

Full Changelog: go-resty/resty@v2.16.5...v2.17.0

v2.16.5

Release Notes

Bug Fixes

fix: auth scheme and token from client level #959 by @jeevatkm in go-resty/resty#960

Documentation

chore(release): version bump and readme update by @jeevatkm in go-resty/resty#961

Full Changelog: go-resty/resty@v2.16.4...v2.16.5

v2.16.4

Release Notes

Bug Fixes

fix: retry not reset multipartField reader by @wxip in go-resty/resty#953

fix: auth scheme override with empty value #954 by @jeevatkm in go-resty/resty#956

Documentation

chore(release): version bump and readme update by @jeevatkm in go-resty/resty#958

... (truncated)

Commits

52f3f39 Merge pull request #1079 from go-resty/fix-cnt-type-hdr-on-emptybody
16e2701 release: v2.17.1 readme update
203bf14 fix: content type request header on http.NoBody type #1074
061e449 chore: version bump to v2.17.1
d4c3576 Merge pull request #1066 from go-resty/for-v2.17.0-release
6452271 chore: update readme for release v2.17.0
2eab959 ci: update go version 1.23.0
795d6c2 chore: update go.mod package versions
b10a1aa backport: negative trace substraction when using SetTimeout (#1065)
2b771ba backport: potential worng total time in trace info for invalid request from P...
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

@lukasauk made their first contribution in prometheus/client_golang#1494

Full Changelog: prometheus/client_golang@v1.19.0...v1.19.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

[FEATURE] HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

Unreleased exp module

[BUGFIX] exp/api: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917.

1.23.2 / 2025-09-05

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

1.23.1 / 2025-09-04

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

1.23.0 / 2025-07-30

[CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #1812

[FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #1766

[FEATURE] Add exemplars for native histograms #1686

[ENHANCEMENT] exp/api: Bubble up status code from writeResponse #1823

[ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #1833

[BUGFIX] exp/api: client prompt return on context cancellation #1729

1.22.0 / 2025-04-07

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header. It was enabled by default since version 1.20, but now you need to add a blank import to enable it. The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon, golang/go#62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:
import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
[FEATURE] prometheus: Add new CollectorFunc utility #1724

[CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #1738

[FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #1743

[CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #1765

1.21.1 / 2025-03-04

... (truncated)

Commits

6e3f4b1 Cut 1.19.1 (#1494)
cad1bfa Merge pull request #1454 from prometheus/small-nits
0aa8c9f Rephrase incompatibility with common v0.48.0
See full diff in compare view

Updates go.opentelemetry.io/otel from 1.21.0 to 1.39.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

Release v1.23.0-rc.1

This is a release candidate for the v1.23.0 release. That release is expected to include the v1 release of the following modules:

go.opentelemetry.io/otel/bridge/opencensus

go.opentelemetry.io/otel/bridge/opencensus/test

go.opentelemetry.io/otel/example/opencensus

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp

go.opentelemetry.io/otel/exporters/stdout/stdoutmetric

See our versioning policy for more information about these stability guarantees.

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)

Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)

Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)

Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)

Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)

Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)

Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)

Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)

Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)

Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)

The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)

WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)

Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)

Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)

Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)

Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)

The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)

Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)

Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)

The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)

The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits

6ce1429 Release v1.39.0 (#7676)
12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
61765e7 Fix flaky TestClientInstrumentation (#7677)
a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.21.0 to 1.39.0

Release notes

Sourced from go.opentelemetry.io/otel/sdk's releases.

Release v1.23.0-rc.1

This is a release candidate for the v1.23.0 release. That release is expected to include the v1 release of the following modules:

go.opentelemetry.io/otel/bridge/opencensus

go.opentelemetry.io/otel/bridge/opencensus/test

go.opentelemetry.io/otel/example/opencensus

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp

go.opentelemetry.io/otel/exporters/stdout/stdoutmetric

See our versioning policy for more information about these stability guarantees.

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)

Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)

Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)

Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)

Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)

Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)

Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)

Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)

Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)

Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)

The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)

WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)

WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)

Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)

Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)

Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)

Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)

The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)

Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)

Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)

The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)

The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits

6ce1429 Release v1.39.0 (#7676)
12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
61765e7 Fix flaky TestClientInstrumentation (#7677)
a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.21.0 to 1.39.0

Release notes

Sourced from go.opentelemetry.io/otel/trace's releases.

Release v1.23.0-rc.1

This is a release candidate for the v1.23.0 release. That release is expected to include the v1 release of the following modules:

go.opentelemetry.io/otel/bridge/opencensus

go.opentelemetry.io/otel/bridge/opencensus/test

go.opentelemetry.io/otel/example/opencensus

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc

go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp

go.opentelemetry.io/otel/exporters/stdout/stdoutmetric

See our versioning policy for more information about these stability guarantees.

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)

Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)

Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)

Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)

Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)

Add e...
Description has been truncated

Bumps the go-minor group in /apps/control-plane with 6 updates: | Package | From | To | | --- | --- | --- | | [github.com/gin-gonic/gin](https://github.com/gin-gonic/gin) | `1.9.1` | `1.11.0` | | [github.com/go-resty/resty/v2](https://github.com/go-resty/resty) | `2.11.0` | `2.17.1` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.0` | `1.19.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.21.0` | `1.39.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.21.0` | `1.39.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.21.0` | `1.39.0` | Updates `github.com/gin-gonic/gin` from 1.9.1 to 1.11.0 - [Release notes](https://github.com/gin-gonic/gin/releases) - [Changelog](https://github.com/gin-gonic/gin/blob/master/CHANGELOG.md) - [Commits](gin-gonic/gin@v1.9.1...v1.11.0) Updates `github.com/go-resty/resty/v2` from 2.11.0 to 2.17.1 - [Release notes](https://github.com/go-resty/resty/releases) - [Commits](go-resty/resty@v2.11.0...v2.17.1) Updates `github.com/prometheus/client_golang` from 1.19.0 to 1.19.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.0...v1.19.1) Updates `go.opentelemetry.io/otel` from 1.21.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.39.0) Updates `go.opentelemetry.io/otel/sdk` from 1.21.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.39.0) Updates `go.opentelemetry.io/otel/trace` from 1.21.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.21.0...v1.39.0) --- updated-dependencies: - dependency-name: github.com/gin-gonic/gin dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/go-resty/resty/v2 dependency-version: 2.17.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: github.com/prometheus/client_golang dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor - dependency-name: go.opentelemetry.io/otel dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-01-29T17:47:13Z

Labels

The following labels could not be found: dependencies, go. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

dependabot · 2026-01-29T19:05:05Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot closed this Jan 29, 2026

dependabot bot deleted the dependabot/go_modules/apps/control-plane/go-minor-bad497290b branch January 29, 2026 19:05

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

deps(go): bump the go-minor group in /apps/control-plane with 6 updates#15

deps(go): bump the go-minor group in /apps/control-plane with 6 updates#15
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/apps/control-plane/go-minor-bad497290b

dependabot bot commented on behalf of github Jan 29, 2026 •

edited

Loading

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Jan 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.11.0

Changelog

Features

Bug fixes

Enhancements

Gin v1.11.0

Features

Enhancements

Bug Fixes

Build process updates / CI

v2.17.1

Release Notes

Bug Fixes

v2.17.0

Release Notes

Bug Fixes

Backport

Release Updates

New Contributors

v2.16.5

Release Notes

Bug Fixes

Documentation

v2.16.4

Release Notes

Bug Fixes

Documentation

v1.19.1

What's Changed

New Contributors

Unreleased

Unreleased exp module

1.23.2 / 2025-09-05

1.23.1 / 2025-09-04

1.23.0 / 2025-07-30

1.22.0 / 2025-04-07

1.21.1 / 2025-03-04

Release v1.23.0-rc.1

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Changed

Fixed

Release v1.23.0-rc.1

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Changed

Fixed

Release v1.23.0-rc.1

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Labels

Uh oh!

dependabot bot commented on behalf of github Jan 29, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Jan 29, 2026 •

edited

Loading

Unreleased `exp` module