Bump the all-deps group with 18 updates by dependabot[bot] · Pull Request #915 · transparency-dev/tesseract

dependabot · 2026-08-10T02:21:26Z

Bumps the all-deps group with 18 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.43.2`	`1.43.4`
github.com/aws/aws-sdk-go-v2/config	`1.32.33`	`1.32.35`
github.com/aws/aws-sdk-go-v2/credentials	`1.19.32`	`1.19.34`
github.com/aws/aws-sdk-go-v2/service/s3	`1.106.2`	`1.107.0`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.44.2`	`1.44.4`
github.com/aws/smithy-go	`1.27.5`	`1.27.6`
github.com/dgraph-io/badger/v4	`4.9.5`	`4.9.6`
github.com/transparency-dev/tessera	`1.0.3-0.20260724123142-d0e58a3ffd75`	`1.0.4`
go.opentelemetry.io/contrib/detectors/gcp	`1.44.0`	`1.45.0`
go.opentelemetry.io/contrib/exporters/autoexport	`0.69.0`	`0.70.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.69.0`	`0.70.0`
go.opentelemetry.io/contrib/instrumentation/runtime	`0.69.0`	`0.70.0`
go.opentelemetry.io/otel	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/metric	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/sdk	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/sdk/metric	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/trace	`1.44.0`	`1.45.0`
google.golang.org/api	`0.291.0`	`0.292.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.43.2 to 1.43.4

Commits

ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
e830452 Update API model
5d3779f Release 2026-08-03
27a73ff Regenerated Clients
8b197b7 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.33 to 1.32.35

Commits

ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
e830452 Update API model
5d3779f Release 2026-08-03
27a73ff Regenerated Clients
8b197b7 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.32 to 1.19.34

Commits

ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
e830452 Update API model
5d3779f Release 2026-08-03
27a73ff Regenerated Clients
8b197b7 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.106.2 to 1.107.0

Commits

8e53001 Release 2026-08-06
c1512a0 Regenerated Clients
655c574 Update endpoints model
22a51fa Update API model
ebd1f6a Release 2026-08-05
bc99825 Regenerated Clients
8868ff7 Update API model
9604fe3 Set FIPS-approved TLS curve preferences when the FIPS module is active (#3499)
4af61eb Release 2026-08-04
73d66ab Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.44.2 to 1.44.4

Commits

fa369bd Release 2026-06-03
960ee4d Regenerated Clients
4b6df8b Update endpoints model
30b15dd Update API model
e8c72af enable schema-serde (#3421)
b4d02c5 Release 2026-06-02
48e375b Regenerated Clients
b8a4fc1 Update API model
e8627b4 Merge pull request #3430 from aws/fix-remove-ioutil
4e258a3 chore: update changelog description per review
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.27.5 to 1.27.6

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-08-07)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.7

Bug Fix: Don't serialize unset JSON documents as nil in structure members.

Bug Fix: Fix a deserialization panic around collection members in recursive shape configs.

Release (2026-07-31)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.6

Bug Fix: Fix failure to deserialize any @httpPayload struct with a non-string member.

Bug Fix: Fix failure to serialize any @httpPayload struct with a nested struct.

Release (2026-07-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.5

Bug Fix: Fix a performance issue in awsQuery with large response payloads.

Release (2026-07-16)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go/aws-http-auth: v1.2.1

Bug Fix: Use r.URL.Host when r.Host is unset.

github.com/aws/smithy-go/aws-http-auth-schemes: v1.0.0

Release: Module github.com/aws/smithy-go/aws-http-auth-schemes adds generic smithy-go client support for AWS Sigv4 and Sigv4a.

Release (2026-06-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.3

Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

Release (2026-06-05)

... (truncated)

Commits

adb847f Release 2026-07-31
96461b2 fix bad http binding deser (#690)
055e50f handle null cbor struct val (#689)
See full diff in compare view

Updates github.com/dgraph-io/badger/v4 from 4.9.5 to 4.9.6

Release notes

Sourced from github.com/dgraph-io/badger/v4's releases.

v4.9.6

What's Changed

fix(compaction): restore size-ratio base level selection, clamped to the first non-empty level by @shiva-istari in dgraph-io/badger#2330

Full Changelog: dgraph-io/badger@v4.9.5...v4.9.6

Commits

fbd8d2e fix(compaction): restore size-ratio base level selection, clamped to the firs...
See full diff in compare view

Updates github.com/transparency-dev/tessera from 1.0.3-0.20260724123142-d0e58a3ffd75 to 1.0.4

Release notes

Sourced from github.com/transparency-dev/tessera's releases.

v1.0.4

v1.0.3 was missing important fixes:

#955 Avoid calling potentially nil func @AlCutter

#1019 Fix aws antispam @AlCutter

Full Changelog: transparency-dev/tessera@v1.0.3...v1.0.4

v1.0.3

Cherry pick fixes from main.

What's Changed

Fixes and updates

• Fix witness goroutine leak by buffering results channel by @roger2hk in #865 • Avoid deep recursion in witness handling by @mhutchinson in #868 • [Awaiter] Fix bug with context cancellation spreading to other processes by @mhutchinson in #885 • Update shutdown process to ensure followers catch up to the target index by @roger2hk in #938 • Fix terminator bug by @AlCutter in #949 • Prevent panic in badger antispam follower by @roger2hk in #956 • Refactor signer name consistency enforcement in AppendOptions validation by @roger2hk in #958 • [POSIX] Don't loop forever creating temp files by @mhutchinson in #974 • [POSIX] Don't create symlinks for partial tiles by @mhutchinson in #999 • [POSIX] Clean up temp files in error cases by @mhutchinson in #1020

Full Changelog: transparency-dev/tessera@v1.0.2...v1.0.3

Commits

See full diff in compare view

Updates go.opentelemetry.io/contrib/detectors/gcp from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/contrib/detectors/gcp's changelog.

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)

Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)

Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)

The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)

Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)

Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)

Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)

Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)

Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)

Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)

TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)

Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)

Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)

Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)

Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)

Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)

Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)

Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)

Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#9359)

Strip connection number suffix from connection ID in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo to prevent unbounded metric cardinality. (#9352)

... (truncated)

Commits

c8a87a6 Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0 (#9413)
cde125c fix(deps): update aws-sdk-go-v2 monorepo (#9384)
88572a7 chore(deps): update googleapis to 6ac0973 (#9409)
e4f511a chore(deps): update github/codeql-action action to v4.37.5 (#9410)
265eb0b fix(deps): update go.opentelemetry.io/otel digest to 48db2c6 (#9317)
941ba46 chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
ededd3b chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#9406)
7c6e819 fix(deps): update module github.com/atombender/go-jsonschema to v0.24.1 (#9405)
ec1e544 chore(deps): update github.com/lufia/plan9stats digest to 341c2f0 (#9403)
5d7e16a chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#9402)
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/exporters/autoexport from 0.69.0 to 0.70.0

Release notes

Sourced from go.opentelemetry.io/contrib/exporters/autoexport's releases.

Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0

Overview

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)

Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)

Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)

The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)

Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)

Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)

Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)

Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)

Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)

Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)

TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)

Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)

Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)

Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)

Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)

Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)

Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)

Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)

Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#9359)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/exporters/autoexport's changelog.

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)

Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)

Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)

The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)

Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)

Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)

Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)

Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)

Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)

Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)

TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)

Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)

Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)

Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)

Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)

Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)

Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)

Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)
...
Description has been truncated

Bumps the all-deps group with 18 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.43.2` | `1.43.4` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.33` | `1.32.35` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.19.32` | `1.19.34` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.106.2` | `1.107.0` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.44.2` | `1.44.4` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.5` | `1.27.6` | | [github.com/dgraph-io/badger/v4](https://github.com/dgraph-io/badger) | `4.9.5` | `4.9.6` | | [github.com/transparency-dev/tessera](https://github.com/transparency-dev/tessera) | `1.0.3-0.20260724123142-d0e58a3ffd75` | `1.0.4` | | [go.opentelemetry.io/contrib/detectors/gcp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/contrib/exporters/autoexport](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.70.0` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.70.0` | | [go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.70.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.291.0` | `0.292.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.43.2 to 1.43.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.43.2...v1.43.4) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.33 to 1.32.35 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.33...config/v1.32.35) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.32 to 1.19.34 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.32...credentials/v1.19.34) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.106.2 to 1.107.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.106.2...service/s3/v1.107.0) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.44.2 to 1.44.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ecr/v1.44.2...service/mgn/v1.44.4) Updates `github.com/aws/smithy-go` from 1.27.5 to 1.27.6 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.5...v1.27.6) Updates `github.com/dgraph-io/badger/v4` from 4.9.5 to 4.9.6 - [Release notes](https://github.com/dgraph-io/badger/releases) - [Changelog](https://github.com/dgraph-io/badger/blob/main/CHANGELOG.md) - [Commits](dgraph-io/badger@v4.9.5...v4.9.6) Updates `github.com/transparency-dev/tessera` from 1.0.3-0.20260724123142-d0e58a3ffd75 to 1.0.4 - [Release notes](https://github.com/transparency-dev/tessera/releases) - [Commits](https://github.com/transparency-dev/tessera/commits/v1.0.4) Updates `go.opentelemetry.io/contrib/detectors/gcp` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/contrib/exporters/autoexport` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.70.0) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.70.0) Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.70.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `google.golang.org/api` from 0.291.0 to 0.292.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.291.0...v0.292.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.107.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.44.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/dgraph-io/badger/v4 dependency-version: 4.9.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: github.com/transparency-dev/tessera dependency-version: 1.0.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all-deps - dependency-name: go.opentelemetry.io/contrib/detectors/gcp dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/contrib/exporters/autoexport dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/contrib/instrumentation/runtime dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps - dependency-name: google.golang.org/api dependency-version: 0.292.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all-deps ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2026-08-12T11:45:28Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 10, 2026

dependabot Bot requested a review from a team as a code owner August 10, 2026 02:21

dependabot Bot requested review from roger2hk and removed request for a team August 10, 2026 02:21

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 10, 2026

dependabot Bot closed this Aug 12, 2026

dependabot Bot deleted the dependabot/go_modules/all-deps-eacbabcf24 branch August 12, 2026 11:45

Navigation Menu

Uh oh!

Bump the all-deps group with 18 updates - #915

Bump the all-deps group with 18 updates#915
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-deps-eacbabcf24

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release (2026-08-07)

General Highlights

Module Highlights

Release (2026-07-31)

General Highlights

Module Highlights

Release (2026-07-27)

General Highlights

Module Highlights

Release (2026-07-16)

General Highlights

Module Highlights

Release (2026-06-26)

General Highlights

Module Highlights

Release (2026-06-05)

v4.9.6

What's Changed

v1.0.4

v1.0.3

What's Changed

Fixes and updates

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Changed

Fixed

Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0

Overview

Added

Changed

Fixed

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Changed

Fixed

Uh oh!

dependabot Bot commented on behalf of github Aug 12, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 10, 2026 •

edited

Loading