Skip to content

build(deps): bump the go-dev-dependencies group with 19 updates#274

Merged
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-75c1f176bc
Dec 16, 2025
Merged

build(deps): bump the go-dev-dependencies group with 19 updates#274
mgoetzegb merged 1 commit intomainfrom
dependabot/go_modules/go-dev-dependencies-75c1f176bc

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Dec 15, 2025

Bumps the go-dev-dependencies group with 19 updates:

Package From To
github.com/go-playground/validator/v10 10.28.0 10.29.0
golang.org/x/crypto 0.45.0 0.46.0
github.com/gabriel-vasile/mimetype 1.4.11 1.4.12
github.com/go-openapi/jsonpointer 0.22.3 0.22.4
github.com/go-openapi/jsonreference 0.21.3 0.21.4
github.com/go-openapi/spec 0.22.1 0.22.2
github.com/morikuni/aec 1.0.0 1.1.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.63.0 0.64.0
go.opentelemetry.io/otel 1.38.0 1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.38.0 1.39.0
go.opentelemetry.io/otel/metric 1.38.0 1.39.0
go.opentelemetry.io/otel/trace 1.38.0 1.39.0
golang.org/x/mod 0.30.0 0.31.0
golang.org/x/net 0.47.0 0.48.0
golang.org/x/sync 0.18.0 0.19.0
golang.org/x/sys 0.38.0 0.39.0
golang.org/x/text 0.31.0 0.32.0
golang.org/x/tools 0.39.0 0.40.0
google.golang.org/protobuf 1.36.10 1.36.11

Updates github.com/go-playground/validator/v10 from 10.28.0 to 10.29.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.29.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.28.0...v10.29.0

Commits

Updates golang.org/x/crypto from 0.45.0 to 0.46.0

Commits
  • 19acf81 go.mod: update golang.org/x dependencies
  • 3a1c6b4 x509roots/fallback: update bundle
  • f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory
  • See full diff in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.11 to 1.4.12

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.12 RFC822, GRIB, Zlib support

What's Changed

Full Changelog: gabriel-vasile/mimetype@v1.4.11...v1.4.12

Commits

Updates github.com/go-openapi/jsonpointer from 0.22.3 to 0.22.4

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.4

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks


People who contributed to this release


jsonpointer license terms

License

Commits
  • 51b82ce ci: aligned CI to use shared workflows
  • b3a47c4 chore(deps): bump the development-dependencies group with 6 updates
  • cadf52c doc: updated contributors file
  • 9bac24e chore(deps): bump the development-dependencies group with 3 updates
  • a05f70b doc: replaced go.mod badge by github version
  • a95d3c2 chore(deps): bump github.com/go-openapi/swag/jsonname
  • cdc3f14 ci: fixed a few details
  • 6fc6e74 ci: fixed typo in action sha set manually
  • 3873ddc doc: updated ci action that keeps CONTRIBUTORS.md
  • 5462cea chore(deps): bump the development-dependencies group across 1 directory with ...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.3 to 0.21.4

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v0.21.4

0.21.4 - 2025-12-08

Full Changelog: go-openapi/jsonreference@v0.21.3...v0.21.4

1 commits in this release.


Documentation


People who contributed to this release


New Contributors


jsonreference license terms

License

Commits
  • a073f3a doc: updated contributors file
  • 7187c08 chore: updated jsonpointer
  • e8774d8 ci: aligned CI with shared workflows and common docs
  • 92dc147 build(deps): bump actions/checkout in the development-dependencies group
  • fd2b1a9 build(deps): bump github.com/go-openapi/jsonpointer
  • b8b88e5 chore(lint): aligned linting rules with jsonpointer - fixed remaining issues
  • 760d080 build(deps): bump golangci/golangci-lint-action
  • 52494f5 docs: fixed typo in NOTICE
  • See full diff in compare view

Updates github.com/go-openapi/spec from 0.22.1 to 0.22.2

Release notes

Sourced from github.com/go-openapi/spec's releases.

v0.22.2

0.22.2 - 2025-12-08

Full Changelog: go-openapi/spec@v0.22.1...v0.22.2

1 commits in this release.


Documentation


People who contributed to this release


spec license terms

License

Commits
  • 324f6d9 doc: removed old version of the README
  • e58b915 chore: updated jsonpointer and reference
  • 1ffcd7a doc: updated contributors file
  • 90bc044 test(readability): used embedded FS for fixtures
  • b75931b fix: added guard for edge case causing potential panic
  • 4f79daa ci: aligned CI and doc with go-openapi repos
  • a637b92 build(deps): bump actions/checkout in the development-dependencies group
  • f532082 build(deps): bump the go-openapi-dependencies group with 5 updates
  • f0c3eff build(deps): bump the go-openapi-dependencies group with 6 updates
  • 817d7f9 build(deps): bump golangci/golangci-lint-action
  • Additional commits viewable in compare view

Updates github.com/morikuni/aec from 1.0.0 to 1.1.0

Release notes

Sourced from github.com/morikuni/aec's releases.

v1.1.0

What's Changed

New Contributors

Full Changelog: morikuni/aec@v1.0.0...v1.1.0

Commits
  • ea8ec34 Merge pull request #6 from morikuni/add-go-mod
  • 8c1fc2a Add go.mod
  • b7ec452 Merge pull request #5 from ndeloof/sco_dec
  • ef8a0ba send both SCO and DEC proprietary sequence for terminal compatibility
  • See full diff in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.63.0 to 0.64.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.39.0/v2.1.0/v0.64.0/v0.33.0/v0.19.0/v0.14.0/v0.12.0/v0.11.0

Overview

Added

  • ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
  • Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
  • Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
  • WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
  • Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
  • Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
  • Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
  • Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
  • Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
  • Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
  • Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
  • Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
  • Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
  • Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

  • Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
  • Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
  • Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

  • WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
  • WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
  • DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

  • Drop support for Go 1.23. (#7831)
  • Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
  • Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.39.0/2.1.0/0.64.0/0.33.0/0.19.0/0.14.0/0.12.0/0.11.0] - 2025-12-08

Added

  • ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
  • Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
  • Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
  • WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
  • Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
  • Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
  • Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
  • Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
  • Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
  • Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
  • Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
  • Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
  • Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
  • Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

  • Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
  • Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
  • Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

  • WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
  • WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
  • DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

  • Drop support for [Go 1.23]. (#7831)
  • Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
  • Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)
Commits
  • 9a6a4d7 Release v1.39.0 (#8261)
  • 14c6a7a chore(deps): update module golang.org/x/sys to v0.39.0 (#8260)
  • 829f498 chore(deps): update module golang.org/x/sync to v0.19.0 (#8259)
  • a77cdda chore(deps): update module golang.org/x/oauth2 to v0.34.0 (#8257)
  • a98be56 chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#8255)
  • 4385fbc chore(deps): update github/codeql-action action to v4.31.7 (#8253)
  • 3c3e7b2 otelconf: add support for parsing resource detectors (#8180)
  • 6497853 otelconf: add support for OTEL_EXPERIMENTAL_CONFIG_FILE (#8106)
  • 3f4d49c Fix flaky canceled context in otelconf/trace test (#8250)
  • 3ce5839 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.1 (#8252)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.38.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

  • Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)
  • Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)
  • Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)
  • Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)
  • Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)
  • Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)
  • Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)
  • Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)
  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)
  • Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)
  • The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

  • Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)
  • Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)
  • Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)
  • Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)
  • Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)
  • The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)
  • Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)
  • Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)
  • The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

  • Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)
  • The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits
  • 6ce1429 Release v1.39.0 (#7676)
  • 12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
  • 5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
  • 9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
  • ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
  • 9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
  • d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
  • 61765e7 Fix flaky TestClientInstrumentation (#7677)
  • a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
  • 746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.38.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

  • Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)
  • Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)
  • Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)
  • Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)
  • Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)
  • Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)
  • Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)
  • Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (

Bumps the go-dev-dependencies group with 19 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.28.0` | `10.29.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.45.0` | `0.46.0` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.11` | `1.4.12` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.3` | `0.22.4` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.3` | `0.21.4` |
| [github.com/go-openapi/spec](https://github.com/go-openapi/spec) | `0.22.1` | `0.22.2` |
| [github.com/morikuni/aec](https://github.com/morikuni/aec) | `1.0.0` | `1.1.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.63.0` | `0.64.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.30.0` | `0.31.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.48.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.38.0` | `0.39.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.31.0` | `0.32.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.39.0` | `0.40.0` |
| google.golang.org/protobuf | `1.36.10` | `1.36.11` |


Updates `github.com/go-playground/validator/v10` from 10.28.0 to 10.29.0
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.28.0...v10.29.0)

Updates `golang.org/x/crypto` from 0.45.0 to 0.46.0
- [Commits](golang/crypto@v0.45.0...v0.46.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.11 to 1.4.12
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.11...v1.4.12)

Updates `github.com/go-openapi/jsonpointer` from 0.22.3 to 0.22.4
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.3...v0.22.4)

Updates `github.com/go-openapi/jsonreference` from 0.21.3 to 0.21.4
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v0.21.3...v0.21.4)

Updates `github.com/go-openapi/spec` from 0.22.1 to 0.22.2
- [Release notes](https://github.com/go-openapi/spec/releases)
- [Commits](go-openapi/spec@v0.22.1...v0.22.2)

Updates `github.com/morikuni/aec` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/morikuni/aec/releases)
- [Commits](morikuni/aec@v1.0.0...v1.1.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.63.0 to 0.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.63.0...zpages/v0.64.0)

Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/metric` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/trace` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `golang.org/x/mod` from 0.30.0 to 0.31.0
- [Commits](golang/mod@v0.30.0...v0.31.0)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

Updates `golang.org/x/sync` from 0.18.0 to 0.19.0
- [Commits](golang/sync@v0.18.0...v0.19.0)

Updates `golang.org/x/sys` from 0.38.0 to 0.39.0
- [Commits](golang/sys@v0.38.0...v0.39.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

Updates `golang.org/x/tools` from 0.39.0 to 0.40.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.39.0...v0.40.0)

Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11

---
updated-dependencies:
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-version: 1.4.12
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/go-openapi/spec
  dependency-version: 0.22.2
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
- dependency-name: github.com/morikuni/aec
  dependency-version: 1.1.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.64.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/mod
  dependency-version: 0.31.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.19.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: golang.org/x/tools
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-dev-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.11
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-dev-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 15, 2025
@dependabot dependabot bot requested review from a team as code owners December 15, 2025 04:07
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 15, 2025
@greenbonebot
Copy link
Copy Markdown
Member

Scanning the following files:

go.mod
go.sum

Scan: 'go.mod'

Nothing detected in go.mod
Scan took 0.00 seconds

Scan: 'go.sum'

Nothing detected in go.sum
Scan took 0.00 seconds

@github-actions
Copy link
Copy Markdown

Conventional Commits Report

😢 No conventional commits found.

👉 Learn more about the conventional commits usage at Greenbone.

@codecov
Copy link
Copy Markdown

codecov bot commented Dec 15, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.36%. Comparing base (ddfc347) to head (94af018).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main     #274      +/-   ##
==========================================
- Coverage   57.47%   57.36%   -0.11%     
==========================================
  Files          68       68              
  Lines        3781     3781              
==========================================
- Hits         2173     2169       -4     
- Misses       1430     1432       +2     
- Partials      178      180       +2     
Flag Coverage Δ
opensearch-tests 95.66% <ø> (ø)
postgres-tests 91.96% <ø> (ø)
unit-tests 51.76% <ø> (-0.13%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@mgoetzegb mgoetzegb merged commit 236ac1c into main Dec 16, 2025
12 of 13 checks passed
@mgoetzegb mgoetzegb deleted the dependabot/go_modules/go-dev-dependencies-75c1f176bc branch December 16, 2025 11:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants