Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jan 6, 2026

This PR contains the following updates:

Package Type Update Change Age Confidence
gcr.io/distroless/static final digest 2b7c93fcba10d7
github.com/onsi/ginkgo/v2 require patch v2.27.3v2.27.5 age confidence
github.com/onsi/gomega require minor v1.38.3v1.39.0 age confidence
github.com/open-telemetry/opentelemetry-operator require minor v0.141.0v0.143.0 age confidence
go.opentelemetry.io/collector/component require minor v1.48.0v1.49.0 age confidence
go.opentelemetry.io/collector/config/configauth require minor v1.48.0v1.49.0 age confidence
go.opentelemetry.io/collector/config/configcompression require minor v1.48.0v1.49.0 age confidence
go.opentelemetry.io/collector/config/configopaque require minor v1.48.0v1.49.0 age confidence
go.opentelemetry.io/collector/config/configtelemetry require minor v0.142.0v0.143.0 age confidence
go.opentelemetry.io/collector/otelcol require minor v0.142.0v0.143.0 age confidence
go.opentelemetry.io/collector/pipeline require minor v1.48.0v1.49.0 age confidence
go.opentelemetry.io/collector/service require minor v0.142.0v0.143.0 age confidence
golang stage patch 1.25.5-alpine3.221.25.6-alpine3.22 age confidence
golangci/golangci-lint minor 2.7.22.8.0 age confidence

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.27.5

Compare Source

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

v2.27.4

Compare Source

2.27.4

Fixes
  • CurrentTreeConstructionNodeReport: fix for nested container nodes [59bc751]
onsi/gomega (github.com/onsi/gomega)

v1.39.0

Compare Source

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)

v0.143.0

Compare Source

0.143.0
🧰 Bug fixes 🧰
  • operator: Fix operator ServiceMonitor not created on OpenShift (#​4603)
    Two issues prevented the operator ServiceMonitor from being created on OpenShift:
    1. The OpenShift kustomize patches were incorrectly overwriting operator args, removing flags like --create-sm-operator-metrics=true.
    2. The prometheus-operator library SchemeHTTPS constant uses uppercase "HTTPS" which is rejected by ServiceMonitor CRD validation.
Components

v0.142.0

Compare Source

0.142.0
🛑 Breaking changes 🛑
  • operator: Remove kube-rbac-proxy from operator deployment and use controller-runtime built-in auth (#​3369)
    The operator now uses controller-runtime built-in auth for the metrics server. It is disabled by default.
    The client accessing the metrics endpoint must have the following RBAC rule nonResourceURLs: "/metrics", verbs: get.
    Which didn't change from the previous approach of using kube-rbac-proxy.

    This changes adds following flags to the operator:
    metrics-secure - enables authentication and authorization for the metrics server. If no TLS certificates are provided, self signed certificates will be generated.
    metrics-tls-cert-file - TLS certificate file for the metrics server
    metrics-tls-key-file - TLS private key file for the metrics server

    This change changes the following flags on the operator:
    --metrics-addr - changes from 127.0.0.1:8080 to :8443 which matches the operator's metrics service port.

💡 Enhancements 💡
  • target allocator: Add support for prometheus scrape classes (#​3600)
    Added support for configuring scrapeClasses when using the PrometheusCR-feature of the target allocator. The format of the scrapeClasses array is exactly as same as spec.scrapeClasses of the Prometheus CRD.
  • operator: Add support for Kubernetes 1.35 (#​4575)
  • collector: exposes the spec.hostPID field for the collector. (#​4214)
    This will allow to set the spec.HostPID field for the collector. By default this the field is false.
🧰 Bug fixes 🧰
  • target allocator: Fix CA certificate race condition with client cert renewals by extending its duration and and renewal attempt. (#​4441)
    The CA certificate now has a 2-year duration (instead of the default 90 days) to prevent race conditions
    where client and server certificates could be signed by different CA versions during simultaneous renewal.
    This ensures the CA remains stable while dependent certificates renew regularly.

  • collector: Add finalizers to OpenTelemetryCollector CR only when cluster roles and bindings for SA are created by Operator. (#​4367)
    Finalizer usage was restricted to cluster scoped resources only. Namespaced resources no longer receive finalizers,
    preventing blocked namespace deletion if the operator is removed first. The change aligns finalizer behavior with
    cluster-level RBAC availability, ensuring finalizers are applied only when the operator has the required
    cluster scoped permissions.

  • config: Fix manager logger initialization (#​4584)
    Apply config before setting up logger to configure it properly.

  • operator: Fix the --annotations-filter and --labels-filter CLI flags. (#​4594)

Components
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)

v1.49.0

💡 Enhancements 💡
  • all: Update semconv import to 1.38.0 (#​14305)
  • exporter/nop: Add profiles support to nop exporter (#​14331)
  • pkg/pdata: Optimize the size and pointer bytes for pdata structs (#​14339)
  • pkg/pdata: Avoid using interfaces/oneof like style for optional fields (#​14333)
golangci/golangci-lint (golangci/golangci-lint)

v2.8.0

Compare Source

Released on 2026-01-07

  1. Linters new features or changes
    • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
    • golines: from 442fd00 to 0.14.0
    • gomoddirectives: from 0.7.1 to 0.8.0
    • gosec: from daccba6 to 2.22.11 (new rule: G116)
    • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
    • prealloc: from 1.0.0 to 1.0.1 (message changes)
    • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
  2. Linters bug fixes
    • go-critic: from 0.14.2 to 0.14.3
    • go-errorlint: from 1.8.0 to 1.9.0
    • govet: from 0.39.0 to 0.40.0
    • protogetter: from 0.3.17 to 0.3.18
    • revive: add missing enable-default-rules setting
  3. Documentation
    • docs: split installation page

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Contributor Author

renovate bot commented Jan 6, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 59 additional dependencies were updated

Details:

Package Change
github.com/antlr4-go/antlr/v4 v4.13.0 -> v4.13.1
github.com/emicklei/go-restful/v3 v3.12.2 -> v3.13.0
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1
github.com/go-openapi/jsonreference v0.21.0 -> v0.21.2
github.com/go-openapi/swag v0.23.0 -> v0.25.1
github.com/goccy/go-yaml v1.18.0 -> v1.19.2
github.com/google/cel-go v0.26.0 -> v0.26.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.2 -> v2.27.3
github.com/prometheus/common v0.67.1 -> v0.67.4
github.com/prometheus/otlptranslator v0.0.2 -> v1.0.0
github.com/prometheus/procfs v0.17.0 -> v0.19.2
github.com/spf13/pflag v1.0.9 -> v1.0.10
github.com/stoewer/go-strcase v1.3.0 -> v1.3.1
go.opentelemetry.io/collector/component/componentstatus v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/component/componenttest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/confmap v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/confmap/xconfmap v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/connector v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/connector/connectortest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/connector/xconnector v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/consumer v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/consumer/consumererror v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/consumer/consumertest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/consumer/xconsumer v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/exporter v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/exporter/exportertest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/exporter/xexporter v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/extension v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/extension/extensionauth v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/extension/extensioncapabilities v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/extension/extensiontest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/featuregate v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/internal/fanoutconsumer v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/internal/telemetry v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/pdata v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/pdata/pprofile v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/pdata/testdata v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/pdata/xpdata v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/pipeline/xpipeline v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/processor v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/processor/processortest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/processor/xprocessor v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/receiver v1.48.0 -> v1.49.0
go.opentelemetry.io/collector/receiver/receivertest v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/receiver/xreceiver v0.142.0 -> v0.143.0
go.opentelemetry.io/collector/service/hostcapabilities v0.142.0 -> v0.143.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.38.0 -> v1.39.0
go.opentelemetry.io/otel/exporters/prometheus v0.60.0 -> v0.61.0
go.opentelemetry.io/proto/otlp v1.7.1 -> v1.9.0
golang.org/x/exp v0.0.0-20250106191152-7588d65b2ba8 -> v0.0.0-20251002181428-27f1f14c8bb9
golang.org/x/time v0.9.0 -> v0.13.0
google.golang.org/genproto/googleapis/api v0.0.0-20251022142026-3a174f9686a8 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20251022142026-3a174f9686a8 -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/grpc v1.77.0 -> v1.78.0
google.golang.org/protobuf v1.36.10 -> v1.36.11
k8s.io/apiextensions-apiserver v0.34.1 -> v0.34.2
k8s.io/apiserver v0.34.1 -> v0.34.2
k8s.io/component-base v0.34.1 -> v0.34.2
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.31.2 -> v0.33.0

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jan 6, 2026
@renovate renovate bot force-pushed the renovate/all branch 5 times, most recently from 088da2b to a4d3f66 Compare January 13, 2026 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant