chore(deps): update all dependencies #178
Open
+241
−235
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
5365e0d to
f22d206
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
f22d206 to
86ad131
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
0.32.0->0.33.1cdf4daa->a9f88e0v2.25.1->v2.25.3v1.38.1->v1.38.2v0.131.0->v0.132.0v1.23.0->v1.23.2v1.11.0->v1.11.1v3.29.11->v3.30.1v1.38.0->v1.40.0v0.132.0->v0.134.0v1.38.0->v1.40.0v1.38.0->v1.40.0v0.132.0->v0.134.0v0.132.0->v0.134.0v1.38.0->v1.40.0v0.132.0->v0.134.00.18.0->0.19.00.93.0->0.93.1v0.21.0->v0.22.0Release Notes
aquasecurity/trivy-action (aquasecurity/trivy-action)
v0.33.1Compare Source
What's Changed
Full Changelog: aquasecurity/trivy-action@0.33.0...0.33.1
v0.33.0Compare Source
What's Changed
New Contributors
Full Changelog: aquasecurity/trivy-action@0.32.0...0.33.0
onsi/ginkgo (github.com/onsi/ginkgo/v2)
v2.25.3Compare Source
2.25.3
Fixes
f01aed1]v2.25.2Compare Source
2.25.2
Fixes
Add github output group for progress report content
Maintenance
Bump Gomega
onsi/gomega (github.com/onsi/gomega)
v1.38.2Compare Source
1.38.2
c404969]open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)
v0.132.0Compare Source
0.132.0
🚩 Deprecations 🚩
collector: Remove opencensus receiver from parsing logic as it is no longer supported in OpenTelemetry Collector (#4239)The opencensus receiver has been removed from the operator's receiver parsing logic.
Since 2025-02-14 its no longer supported and got removed from the Collector Distributions.
💡 Enhancements 💡
collector: enable native sidecar on OpenShift 4.16+ with k8s version newer then v1.29 by default. (#4247)collector: Use native sidecar on k8s 1.29+ (#3356)The operator will automatically use native sidecars whenever a Kubernetes
version 1.29 or higher is discovered.
The usage of native sidecars can be disabled with
--feature-gates=-sidecarcontainers.native.See: https://kubernetes.io/blog/2023/08/25/native-sidecar-containers/
collector: Add network policy for the collector. (#4231)This change adds a network policy to the collector to allow traffic to all collector receivers and egress traffic from the collector pod.
The collector network policy can be enabled in the collector CR.
By default it is disabled, however the default value is configured with a feature gate
--feature-gates=operand.networkpolicy.The feature gate will be enabled in the future releases.
operator: Operator now creates a NetworkPolicy to restrict access to the operator pod. (#4230)The operator network policy can be enabled with
--feature-gates=+operator.networkpolicy.The feature gate is disabled by default and it will be enabled in the future releases.
Following APIs are allowe: ingress on port 9443 (webhook), 8080 (metrics port), 8443 (metrics RBAC proxy) and egress on port 6443 (API server).
target allocator: Add network policy for the target allocator. (#4231)This change adds a network policy to the target allocator which allows traffic to the port
8080and outgoing traffic to the API server.The target allocator network policy can be enabled in the target allocator CR.
By default it is disabled, however the default value is configured with a feature gate
--feature-gates=operand.networkpolicy.The feature gate will be enabled in the future releases.
opamp: Correlates the OpAMP data from the proxy server with the bridge's own OpAMP data. (#3837)collector: k8sattributes: Add automatic RBAC for new service.name resource attribute generator (#4131)The k8sattributes processor recently added support for automatic service.name resource attribute generation.
This change ensures that when service.name is configured in the k8sattributes processor, the operator
automatically adds the necessary RBAC rules for replicasets access, which is required for extracting
k8s.deployment.name.
🧰 Bug fixes 🧰
opamp: fixes a bug where the bridge deployment wouldn't rollout on a config change. (#4020)collector: Fix a Deployment restart issue caused when the HPA settings changed, the webhook would modify spec.replicas. (#2585)collector: Operator no longer overwrites ingress annoations on change (#4322)The operator now respects external manipulations of the Ingress object — instead of
overwriting annotations it respects existing to prevent annotation-overwrite issues
that caused reconciliation loops with external controllers (e.g., Rancher).
collector, target allocator, opamp: Remove unnecessary cert-manager CA annotation from CRDs (#4321)Remove annotation
cert-manager.io/inject-ca-fromfrom all OpenShift CRD manifests. The CRDs on OpenShift are installed via OLM which handles the CA injection.The annotation is also not needed for non-OpenShift installations on CRDs that do not have a conversion webhook.
Components
prometheus/client_golang (github.com/prometheus/client_golang)
v1.23.2: - 2025-09-05Compare Source
This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.
All Changes
Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2
v1.23.1: - 2025-09-04Compare Source
This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.
All Changes
* [release-1.23] Upgrade to prometheus/common v0.66 by @aknuds1 in https://github.com/prometheus/client_golang/pull/1866 * [release-1.23] Cut v1.23.1 by @aknuds1 in https://github.com/prometheus/client_golang/pull/1867Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1
stretchr/testify (github.com/stretchr/testify)
v1.11.1Compare Source
This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (
String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.What's Changed
Full Changelog: stretchr/testify@v1.11.0...v1.11.1
github/codeql-action (github/codeql-action)
v3.30.1Compare Source
v3.30.0Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.0 - 01 Sep 2025
No user facing changes.
See the full CHANGELOG.md for more information.
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)
v1.40.0💡 Enhancements 💡
pdata: Add custom grpc/encoding that replaces proto and calls into the custom marshal/unmarshal logic in pdata. (#13631)This change should not affect other gRPC calls since it fallbacks to the default grpc/proto encoding if requests are not pdata/otlp requests.
pdata: Avoid copying the pcommon.Map when same origin (#13731)This is a very large improvement if using OTTL with map functions since it will avoid a map copy.
exporterhelper: Respectnum_consumerswhen batching and partitioning are enabled. (#13607)🧰 Bug fixes 🧰
pdata: Correctly parse OTLP payloads containing non-packed repeated primitive fields (#13727, #13730)This bug prevented the Collector from ingesting most Histogram, ExponentialHistogram,
and Profile payloads.
v1.39.0🛑 Breaking changes 🛑
all: Increase minimum Go version to 1.24 (#13627)💡 Enhancements 💡
otlphttpexporter: Addprofiles_endpointconfiguration option to allow custom endpoint for profiles data export (#13504)The
profiles_endpointconfiguration follows the same pattern astraces_endpoint,metrics_endpoint, andlogs_endpoint.When specified, profiles data will be sent to the custom URL instead of the default
{endpoint}/v1development/profiles.pdata: Add support for local memory pooling for data objects. (#13678)This is still an early experimental (alpha) feature. Do not recommended to be used production. To enable use "--featuregate=+pdata.useProtoPooling"
pdata: Optimize CopyTo messages to avoid any copy when same source and destination (#13680)receiverhelper: New feature flag to make receiverhelper distinguish internal vs. downstream errors using newotelcol_receiver_failed_xandotelcol_receiver_requestsmetrics (#12207, #12802)This is a breaking change for the semantics of the otelcol_receiver_refused_metric_points, otelcol_receiver_refused_log_records and otelcol_receiver_refused_spans metrics.
These new metrics and semantics are enabled through the
receiverhelper.newReceiverMetricsfeature gate.debugexporter: Add support for entity references in debug exporter output (#13324)pdata: Fix unnecessary allocation of a new state when adding new values to pcommon.Map (#13634)service: Implement refcounting for pipeline data owned memory. (#13631)This feature is protected by
--featuregate=+pdata.useProtoPooling.service: Add a debug-level log message when a consumer returns an error. (#13357)xpdata: Optimize xpdata/context for persistent queue when only one value for key (#13636)otlpreceiver: Log the listening addresses of the receiver, rather than the configured endpoints. (#13654)pdata: Use the newly added proto marshaler/unmarshaler for the official proto Marshaler/Unmarshaler (#13637)If any problems observed with this consider to disable the featuregate
--feature-gates=-pdata.useCustomProtoEncodingconfigtls: Enable X25519MLKEM768 as per draft-ietf-tls-ecdhe-mlkem (#13670)🧰 Bug fixes 🧰
exporterhelper: Prevent uncontrolled goroutines in batcher due to a incorrect worker pool behaviour. (#13689)service: Ensure the insecure configuration is accounted for when normalizing the endpoint. (#13691)configoptional: Allow validating nested types (#13579)configoptional.Optionalnow implementsxconfmap.Validatorbatchprocessor: Fix UB in batch processor when trying to read bytes size after adding request to pipeline (#13698)This bug only happens id detailed metrics are enabled and also an async (sending queue enabled) exporter that mutates data is configure.
kubernetes-sigs/controller-tools (kubernetes-sigs/controller-tools)
v0.19.0Compare Source
What's Changed
Misc
.golangci.yamlfrom controller-runtime by @dongjiang1989 in #1249envtest
Dependency bumps
New Contributors
Full Changelog: kubernetes-sigs/controller-tools@v0.18.0...v0.19.0
open-telemetry/opentelemetry-helm-charts (opentelemetry-operator)
v0.93.1Compare Source
OpenTelemetry Operator Helm chart for Kubernetes
What's Changed
New Contributors
Full Changelog: open-telemetry/opentelemetry-helm-charts@opentelemetry-demo-0.37.7...opentelemetry-operator-0.93.1
kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)
v0.22.0Compare Source
🔆 Highlights
MatchingLabelsSelectorandMatchingFieldsSelectorby @acumino in #3279✨ Features
🐛 Bugfixes
🌱 Other
📖 Documentation
Dependencies
Added
Changed
e6fa225→a0af3efe6fa225→a0af3ef1244d31→85fd79dc8a335a→f3f2b993ea5e8c→4c0f3b29aa6b5e→cfa47c3Removed
ef43131New Contributors
Full Changelog: kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0
Thanks to all our contributors! 😊
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.