chore(deps): Bump the go-dependencies group across 1 directory with 24 updates by dependabot[bot] · Pull Request #7756 · cortexproject/cortex

dependabot · 2026-08-10T13:29:30Z

Bumps the go-dependencies group with 14 updates in the / directory:

Package	From	To
github.com/go-openapi/strfmt	`0.26.4`	`0.27.0`
github.com/hashicorp/consul/api	`1.34.3`	`1.34.4`
github.com/hashicorp/go-metrics	`0.6.0`	`0.6.1`
go.opentelemetry.io/contrib/propagators/aws	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/bridge/opentracing	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.44.0`	`1.45.0`
github.com/aws/aws-sdk-go-v2	`1.42.0`	`1.43.4`
github.com/aws/aws-sdk-go-v2/config	`1.32.26`	`1.32.35`
github.com/aws/aws-sdk-go-v2/service/dynamodb	`1.59.1`	`1.63.1`
github.com/go-openapi/swag/jsonutils	`0.27.0`	`0.28.0`
github.com/oklog/ulid/v2	`2.1.1`	`2.1.2`
github.com/tjhop/slog-gokit	`0.2.0`	`0.2.2`
go.opentelemetry.io/collector/pdata	`1.61.0`	`1.64.0`

Updates github.com/go-openapi/strfmt from 0.26.4 to 0.27.0

Release notes

Sourced from github.com/go-openapi/strfmt's releases.

v0.27.0

0.27.0 - 2026-07-16

Full Changelog: go-openapi/strfmt@v0.26.4...v0.27.0

11 commits in this release.

Implemented enhancements

feat: new formats for currencies (ISO-4217 alpha-3) and countries (ISO-3166 alpha-3 & alpha-2) by @fredbi in #285 ...

feat(duration): add ISO 8601 / RFC 3339 duration format (duration-iso8601) by @fredbi in #284 ...

Fixed bugs

fix(base64): use standard RFC 4648 alphabet on the text path (#87) by @fredbi in #283 ...

fix(duration): fix panic with trailing space, added fuzz by @fredbi in #281 ...

Documentation

Doc: typo in Readme by @fredbi ...

doc: updated contributors file by @bot-go-openapi[bot] in #275 ...

Testing

test(fuzz): added systematic fuzzing of formats by @fredbi in #282 ...

Miscellaneous tasks

chore: prepare release v0.27.0 by @bot-go-openapi[bot] in #286 ...

Updates

build(deps): bump the other-dependencies group across 3 directories with 1 update by @dependabot[bot] in #277 ...

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-dependencies group across 1 directory by @dependabot[bot] in #276 ...

Other (technical)

Add comments for ISO 3166 countries source data by @fredbi ...

People who contributed to this release

@fredbi

... (truncated)

Commits

8364821 chore: prepare release v0.27.0
a98cfd0 Add comments for ISO 3166 countries source data
09c6110 Doc: typo in Readme
12fcdc1 feat: new formats for currencies (ISO-4217 alpha-3) and countries (ISO-3166 a...
a9ba012 feat(duration): add ISO 8601 / RFC 3339 duration format (duration-iso8601) (#...
4de561f fix(base64): use standard RFC 4648 alphabet on the text path (#87) (#283)
7f8ff38 test(fuzz): added systematic fuzzing of formats (#282)
f33c701 fix(duration): fix panic with trailing space, added fuzz (#281)
9f0fa2d build(deps): bump the other-dependencies group across 3 directories with 1 up...
5be05e6 build(deps): bump golang.org/x/net
Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.34.3 to 1.34.4

Commits

50d22e5 sub module release go mod update
5efece6 Backport of chore: update memberlist dependency from v0.5.4 to v0.6.0 across ...
c171789 Backport of update all actions which were using deprecated node20 to node24 i...
8aef944 Backport of upgrade alpine base image to 3.24 into release/2.0.x (#23715)
1f5b203 post release 2.0.1 changelog and version upgrade 2.0.2-dev (#23714)
695e7a8 Backport of Consul ENT: Addition of ext-proc changes to consul into release/2...
5c48b0b Backport of config-entry(api-gateway): add ext_authz filter surface (Enterpri...
451537c Backport: Compatibility testing for nomad and vault versions with latest vers...
c9606f6 Backport of fix: don't request client cert SDS when only CAFile is set into r...
b80641a Backport of xds: return errors from public listener finalization into release...
Additional commits viewable in compare view

Updates github.com/hashicorp/go-metrics from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/hashicorp/go-metrics's releases.

v0.6.1

What's Changed

Added NewStatsdSinkWithLogger and NewStatsiteSinkWithLogger functions to allow passing a logger to capture errors. hashicorp/go-metrics#217

Updated prometheus client library hashicorp/go-metrics#215

Full Changelog: hashicorp/go-metrics@v0.6.0...v0.6.1

Commits

ba58708 VAULT-48025: fixing telemetry statsd/statsite sink and formatting errors (#217)
0f8560f [chore] : Bump the go group across 1 directory with 2 updates (#215)
f7b3292 [chore] : Bump actions/checkout from 7.0.0 to 7.0.1 in the actions group (#216)
96fa24e [chore] : Bump actions/setup-go from 6.5.0 to 7.0.0 in the actions group (#214)
110cec7 [chore] : Bump github.com/prometheus/common (#213)
409c090 [chore] : Bump golangci/golangci-lint-action in the actions group (#212)
3d24197 [chore] : Bump the go group across 1 directory with 2 updates (#211)
5ed9ef0 [chore] : Bump the actions group with 2 updates (#210)
See full diff in compare view

Updates github.com/klauspost/compress from 1.18.7 to 1.19.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.1

What's Changed

zstd: Validate SnappyConverter literal copies by @klauspost in klauspost/compress#1170

flate: use Peek instead of ReadByte for the bufio.Reader decode path by @joechenrh in klauspost/compress#1169

zstd: bump avo pin, regenerate arm64 asm by @lizthegrey in klauspost/compress#1167

New Contributors

@joechenrh made their first contribution in klauspost/compress#1169

Full Changelog: klauspost/compress@v1.19.0...v1.19.1

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

Commits

2602f4a Update changelog for version 1.19.0
983acec add defensive checks
9960386 zstd: Validate SnappyConverter literal copies (#1170)
e29d4d3 flate: use Peek instead of ReadByte for the bufio.Reader decode path (#...
c0bbc84 zstd: bump avo pin, regenerate arm64 asm (#1167)
efdb6ed build(deps): bump the github-actions group with 6 updates (#1166)
f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.23.2 to 1.24.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.24.1 / 2026-07-23

Small bugfix release for promhttp.

What's Changed

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

Full Changelog: prometheus/client_golang@v1.24.0...v1.24.1

v1.24.0 - 2026-07-20

Changes

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

build(deps): bump github.com/prometheus/procfs from 0.16.1 to 0.17.0 by @dependabot[bot] in prometheus/client_golang#1839

build(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 by @dependabot[bot] in prometheus/client_golang#1838

prometheus/collectors: use godoc link for runtime/metrics supported metrics by @xieyuschen in prometheus/client_golang#1844

Fix doc typo by @torrca in prometheus/client_golang#1849

Merge release-1.23 into main by @vesari in prometheus/client_golang#1851

build(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-actions group by @dependabot[bot] in prometheus/client_golang#1852

Refactor LabelNames to return model.LabelNames type for consistency by @yshngg in prometheus/client_golang#1850

remote: simplified Store interface; renamed Handler to WriteHandler by @bwplotka in prometheus/client_golang#1855

feat(api/prometheus): add format_query endpoint for query formatting by @yshngg in prometheus/client_golang#1846

feat(api): add FormatQuery method to Prometheus v1 API by @yshngg in prometheus/client_golang#1856

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.24.1 / 2026-07-23

[BUGFIX] promhttp: Fix panic on requests with nil URL. #2065

1.24.0 / 2026-07-20

[CHANGE] Minimum required Go version is now 1.25, only the two latest Go versions (1.25 and 1.26) are supported from now on. #1862

[CHANGE] prometheus: Name validation now always uses the UTF-8 scheme instead of the deprecated model.NameValidationScheme global. Default behavior is unchanged; code that set NameValidationScheme = LegacyValidation no longer gets legacy enforcement at metric, label, and push-grouping construction. #2051

[CHANGE] api/prometheus/v1: Support matchers (matches[] parameter) in Rules method (Rules(ctx context.Context, matches []string) (RulesResult, error)). #1843

[CHANGE] api/prometheus/v1: Refactor LabelNames method to return model.LabelNames instead of []string for consistency across the API. #1850

[CHANGE] exp/api/remote: Simplify Store interface, rename Handler to WriteHandler, and encapsulate write response handling. #1855

[FEATURE] prometheus: Add new Go 1.26 runtime metrics (/sched/goroutines-created:goroutines, /sched/goroutines/not-in-go:goroutines, /sched/goroutines/runnable:goroutines, /sched/goroutines/running:goroutines, /sched/goroutines/waiting:goroutines, /sched/threads/total:threads). #1942

[FEATURE] prometheus: Add WithUnit(unit string) option and explicit OpenMetrics unit support in CounterOpts, GaugeOpts, SummaryOpts, and HistogramOpts. #1392

[FEATURE] prometheus: Expose descriptor construction error through public Err() method on Desc. #1902

[FEATURE] promhttp: Add opt-in HandlerOpts.CoalesceGather to deduplicate concurrent Gather calls so overlapping scrapes share one collection cycle, preventing goroutine pile-up when the scrape rate outpaces collection time. #1969

[FEATURE] promhttp: HTTP handlers created by promhttp package now support metrics filtering by providing one or more name[] query parameters. The default behavior when none are provided remains the same, returning all metrics. #1925

[FEATURE] api/prometheus/v1: Add query formatting endpoint support (/format_query) and FormatQuery(ctx context.Context, query string) (string, error) method. #1846, #1856

[FEATURE] api/prometheus/v1: Add support for /status/tsdb/blocks endpoint via TSDBBlocks(ctx context.Context) ([]TSDBBlock, error) method. #1896

[FEATURE] exp/api/remote: Export BackoffConfig to allow customization when using WithAPIBackoff. #1895

[FEATURE] exp/api/remote: Add RetryCallBack to allow custom logging or handling on retry attempts in the remote write client. #1888, #1890

[ENHANCEMENT] prometheus/collectors/version: Allow specifying custom labels when registering the version collector. #1860

[ENHANCEMENT] api: Use cloned http.DefaultTransport when constructing default HTTP clients to prevent accidental mutations of shared global transport state. #1885

[BUGFIX] prometheus: Recover from collector panics during Gather() and return an error instead of crashing the process. #1961

[BUGFIX] prometheus: Fix cpu-seconds unit suffix handling for metric go_cpu_classes_gc_mark_assist_cpu_seconds. #1991

[BUGFIX] promhttp: InstrumentHandlerDuration and InstrumentHandlerCounter no longer panic when given an observer/counter that does not implement ExemplarObserver/ExemplarAdder (e.g. a SummaryVec). The exemplar is dropped and the value is recorded via the plain Observe/Add path, matching the safe-cast already used by Timer.ObserveDurationWithExemplar. #2005

[BUGFIX] api/prometheus/v1: Fall back to GET requests when POST requests return 403 Forbidden or method not allowed. #2030

[BUGFIX] api: Respect context cancellation inside httpClient.Do. #1971

[BUGFIX] exp/api/remote: Fix compression buffer pooling where compressed buffers were released prematurely, causing corrupted remote-write payloads. #1889

[BUGFIX] exp/api/remote: Reject malformed snappy payloads declaring huge decoded sizes. Enforce a 32MB decoded-size limit to prevent OOM from oversized remote-write requests. #1917

[BUGFIX] exp/api/remote: Ensure remote write v2 headers cannot be returned on v1 requests. #1927

Commits

d6087ee release: cut v1.24.1 (#2076)
48dd383 Cut v1.24.0 (#2061)
a725305 Cut v1.24.0-rc.0 (#2058)
77c584f build(deps): update all Go dependencies in all go.mod files (#2059)
78262a7 feat(promhttp): add CoalesceGather option to deduplicate concurrent Gather ca...
34e9a7f Merge pull request #2055 from prombot/repo_sync
43749bc Update common Prometheus files
de19217 examples: improve simple main.go example (#1999)
20355eb fix: correct typos in comments and test error messages (#2049)
4cd2d3a test: fix two flaky tests (darwin start_time regex, memstats HeapReleased dri...
Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.69.0 to 0.70.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.70.1

What's Changed

Update CHANGELOG for v0.70.0 by @roidelapluie in prometheus/common#945

config: clarify sensitive redirect headers match net/http by @roidelapluie in prometheus/common#924

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#946

build(deps): bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in prometheus/common#950

build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in prometheus/common#949

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#948

build(deps): bump golang.org/x/net from 0.56.0 to 0.57.0 in the golang-org-x group across 1 directory by @dependabot[bot] in prometheus/common#947

Full Changelog: prometheus/common@v0.70.0...v0.70.1

v0.70.0

What's Changed

config: fix TLSVersion.String() printing pointer address by @s3onghyun in prometheus/common#929

build(deps): bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in prometheus/common#933

Manually go mod tidy by @SuperQ in prometheus/common#934

Synchronize common files from prometheus/prometheus by @prombot in prometheus/common#937

route: add support for the QUERY HTTP method by @roidelapluie in prometheus/common#932

Combine and extend Prometheus text and OpenMetrics 1.0 encoder benchmarks by @dashpole in prometheus/common#943

build(deps): bump the codeql group with 4 updates by @dependabot[bot] in prometheus/common#938

build(deps): bump actions/setup-go from 6.2.0 to 6.5.0 by @dependabot[bot] in prometheus/common#940

build(deps): bump actions/upload-artifact from 4.6.2 to 7.0.1 by @dependabot[bot] in prometheus/common#942

build(deps): bump ossf/scorecard-action from 2.1.2 to 2.4.3 by @dependabot[bot] in prometheus/common#939

build(deps): bump actions/checkout from 3.1.0 to 7.0.0 by @dependabot[bot] in prometheus/common#941

New Contributors

@s3onghyun made their first contribution in prometheus/common#929

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Changelog

Sourced from github.com/prometheus/common's changelog.

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

route: add support for the QUERY HTTP method. #932

Bugfixes

config: fix TLSVersion.String() printing a pointer address instead of the numeric version for unknown TLS versions. #929

Internal

expfmt: add BenchmarkConvertMetricFamily comparing the Prometheus text and OpenMetrics 1.0 encoders. #943

Update Go dependencies. #933 #934

Synchronize common files from prometheus/prometheus. #923 #927 #930 #937

Update GitHub Actions. #938 #939 #940 #941 #942

Full Changelog: prometheus/common@v0.69.0...v0.70.0

Commits

b63d8c0 build(deps): bump golang.org/x/net (#947)
4109c3e build(deps): bump the codeql group with 4 updates (#948)
5270b62 build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#949)
1167ca3 build(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#950)
d28d382 Update common Prometheus files (#946)
f915876 Merge pull request #924 from roidelapluie/roidelapluie/redirect-header-comment
dfbebd0 Merge pull request #945 from roidelapluie/roidelapluie/changelog-0.70.0
c8a0019 Update CHANGELOG for v0.70.0
5eff7a8 Merge pull request #941 from prometheus/dependabot/github_actions/actions/che...
a23c5b3 Merge pull request #939 from prometheus/dependabot/github_actions/ossf/scorec...
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/propagators/aws from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/contrib/propagators/aws's changelog.

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)

Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)

Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)

The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)

Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)

Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)

Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)

Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)

Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)

Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)

TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)

Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)

Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)

Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)

Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)

Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)

Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)

Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b... Description has been truncated

…4 updates Bumps the go-dependencies group with 14 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-openapi/strfmt](https://github.com/go-openapi/strfmt) | `0.26.4` | `0.27.0` | | [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.34.3` | `1.34.4` | | [github.com/hashicorp/go-metrics](https://github.com/hashicorp/go-metrics) | `0.6.0` | `0.6.1` | | [go.opentelemetry.io/contrib/propagators/aws](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/bridge/opentracing](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.43.4` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.26` | `1.32.35` | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.59.1` | `1.63.1` | | [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.27.0` | `0.28.0` | | [github.com/oklog/ulid/v2](https://github.com/oklog/ulid) | `2.1.1` | `2.1.2` | | [github.com/tjhop/slog-gokit](https://github.com/tjhop/slog-gokit) | `0.2.0` | `0.2.2` | | [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.61.0` | `1.64.0` | Updates `github.com/go-openapi/strfmt` from 0.26.4 to 0.27.0 - [Release notes](https://github.com/go-openapi/strfmt/releases) - [Commits](go-openapi/strfmt@v0.26.4...v0.27.0) Updates `github.com/hashicorp/consul/api` from 1.34.3 to 1.34.4 - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](hashicorp/consul@api/v1.34.3...api/v1.34.4) Updates `github.com/hashicorp/go-metrics` from 0.6.0 to 0.6.1 - [Release notes](https://github.com/hashicorp/go-metrics/releases) - [Commits](hashicorp/go-metrics@v0.6.0...v0.6.1) Updates `github.com/klauspost/compress` from 1.18.7 to 1.19.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.7...v1.19.1) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/v1.24.1/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.1 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.1) Updates `go.opentelemetry.io/contrib/propagators/aws` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/bridge/opentracing` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `golang.org/x/net` from 0.56.0 to 0.57.0 - [Commits](golang/net@v0.56.0...v0.57.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `google.golang.org/grpc` from 1.82.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.43.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.43.4) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.26 to 1.32.35 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.26...config/v1.32.35) Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.59.1 to 1.63.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.59.1...service/s3/v1.63.1) Updates `github.com/go-openapi/swag/jsonutils` from 0.27.0 to 0.28.0 - [Release notes](https://github.com/go-openapi/swag/releases) - [Commits](go-openapi/swag@v0.27.0...v0.28.0) Updates `github.com/oklog/ulid/v2` from 2.1.1 to 2.1.2 - [Release notes](https://github.com/oklog/ulid/releases) - [Changelog](https://github.com/oklog/ulid/blob/main/CHANGELOG.md) - [Commits](oklog/ulid@v2.1.1...v2.1.2) Updates `github.com/prometheus/procfs` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.21.0...v0.21.1) Updates `github.com/tjhop/slog-gokit` from 0.2.0 to 0.2.2 - [Release notes](https://github.com/tjhop/slog-gokit/releases) - [Commits](tjhop/slog-gokit@v0.2.0...v0.2.2) Updates `go.opentelemetry.io/collector/pdata` from 1.61.0 to 1.64.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.61.0...pdata/v1.64.0) --- updated-dependencies: - dependency-name: github.com/go-openapi/strfmt dependency-version: 0.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/hashicorp/consul/api dependency-version: 1.34.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/hashicorp/go-metrics dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/klauspost/compress dependency-version: 1.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/common dependency-version: 0.70.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/contrib/propagators/aws dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/bridge/opentracing dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/net dependency-version: 0.57.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.43.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.63.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/go-openapi/swag/jsonutils dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/oklog/ulid/v2 dependency-version: 2.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/prometheus/procfs dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/tjhop/slog-gokit dependency-version: 0.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 10, 2026

dosubot Bot added the type/chore Something that needs to be done; not a bug or a feature label Aug 10, 2026

Navigation Menu

Uh oh!

chore(deps): Bump the go-dependencies group across 1 directory with 24 updates - #7756

chore(deps): Bump the go-dependencies group across 1 directory with 24 updates#7756
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-a8347acb3e

dependabot Bot commented on behalf of github Aug 10, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Aug 10, 2026

v0.27.0

0.27.0 - 2026-07-16

Implemented enhancements

Fixed bugs

Documentation

Testing

Miscellaneous tasks

Updates

Other (technical)

People who contributed to this release

v0.6.1

What's Changed

v1.19.1

What's Changed

New Contributors

v1.19.0

What's Changed

New Contributors

v1.24.1 / 2026-07-23

What's Changed

v1.24.0 - 2026-07-20

Changes

1.24.1 / 2026-07-23

1.24.0 / 2026-07-20

v0.70.1

What's Changed

v0.70.0

What's Changed

New Contributors

Changelog

main / unreleased

What's Changed

v0.70.0 / 2026-07-10

Enhancements

Bugfixes

Internal

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Changed

Fixed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants