chore(deps): bump the go-minor-and-patch group with 13 updates by dependabot[bot] · Pull Request #3266 · chainloop-dev/chainloop

dependabot · 2026-07-06T13:35:22Z

Bumps the go-minor-and-patch group with 13 updates:

Package	From	To
code.cloudfoundry.org/bytefmt	`0.77.0`	`0.78.0`
github.com/aws/smithy-go	`1.27.1`	`1.27.3`
google.golang.org/api	`0.285.0`	`0.286.0`
cloud.google.com/go/storage	`1.62.3`	`1.63.0`
github.com/open-policy-agent/opa	`1.17.1`	`1.18.1`
github.com/posthog/posthog-go	`1.16.0`	`1.17.2`
go.step.sm/crypto	`0.83.0`	`0.84.1`
google.golang.org/genproto/googleapis/api	`0.0.0-20260526163538-3dc84a4a5aaa`	`0.0.0-20260615183401-62b3387ff324`
github.com/vektah/gqlparser/v2	`2.5.34`	`2.5.35`
github.com/moby/moby/api	`1.54.2`	`1.55.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.68.0`	`0.69.0`
github.com/minio/minio-go/v7	`7.2.0`	`7.2.1`
k8s.io/apimachinery	`0.36.1`	`0.36.2`

Updates code.cloudfoundry.org/bytefmt from 0.77.0 to 0.78.0

Commits

2b2ca24 Update go.mod dependencies
See full diff in compare view

Updates github.com/aws/smithy-go from 1.27.1 to 1.27.3

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-06-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.3

Bug Fix: Fix bug in JSON doc encoder and endpoint host label format validation

Release (2026-06-05)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.2

Bug Fix: Fix incorrect serialization of unions in CBOR-based protocols.

Release (2026-06-04)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.1

Bug Fix: Fixed a deserialization failure in all protocols when encountering a union with explicit null members.

Bug Fix: Fixed a panic when deserializing nested unions in JSON- and CBOR-based protocols.

Release (2026-06-02)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.0

Feature: Add APIs for schema-based serialization.

Feature: Add support for all current AWS and Smithy protocols.

Bug Fix: Enforce max nesting depth of 128 on CBOR payloads.

github.com/aws/smithy-go/aws-http-auth: v1.2.0

Feature: Add event stream signer.

Release (2026-05-27)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.26.0

Feature: Add StringSlice to endpoint rulesfn.

... (truncated)

Commits

9445927 Release 2026-06-26
7617c7e add prefix/suffix hyphen rejection for host label validation based on rfc1123...
49402bd Fix document.Number serialization and BigDecimal negative zero sign loss (#681)
648e8ad feat: move common middlewares to shared addCommonMiddlewares (#674)
bff4b8c Release 2026-06-05
6b71b3a fix broken cbor union serialization (#676)
3c67717 serialize value types if @required (#675)
See full diff in compare view

Updates google.golang.org/api from 0.285.0 to 0.286.0

Release notes

Sourced from google.golang.org/api's releases.

v0.286.0

0.286.0 (2026-06-22)

Features

all: Auto-regenerate discovery clients (#3629) (f25a08b)

all: Auto-regenerate discovery clients (#3631) (b3bb97f)

all: Auto-regenerate discovery clients (#3632) (7332dd7)

all: Auto-regenerate discovery clients (#3634) (36081a0)

Changelog

Sourced from google.golang.org/api's changelog.

0.286.0 (2026-06-22)

Features

all: Auto-regenerate discovery clients (#3629) (f25a08b)

all: Auto-regenerate discovery clients (#3631) (b3bb97f)

all: Auto-regenerate discovery clients (#3632) (7332dd7)

all: Auto-regenerate discovery clients (#3634) (36081a0)

Commits

94e4ed9 chore(main): release 0.286.0 (#3630)
36081a0 feat(all): auto-regenerate discovery clients (#3634)
7332dd7 feat(all): auto-regenerate discovery clients (#3632)
b3bb97f feat(all): auto-regenerate discovery clients (#3631)
f25a08b feat(all): auto-regenerate discovery clients (#3629)
See full diff in compare view

Updates cloud.google.com/go/storage from 1.62.3 to 1.63.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

compute: v1.63.0

v1.63.0 (2026-05-14)

Features

update API sources and regenerate (#14581) (df96b2ec)

storage: v1.63.0

1.63.0 (2026-06-25)

Features

go: Add full object checksum for negative offsets > size (#20026) (a04d980)

storage: Add client feature tracking in HTTP client (#14691) (319cc4c)

storage: App Centric Observability (#14685) (c3273bb)

storage: Read checksums in gRPC partial reads (#14586) (d29f68a)

storage: Support deleteSourceObjects option in object compose (#14704) (0d2d680)

Update API sources and regenerate (#14701) (a9b7921)

Bug Fixes

storage: Add server closed idle connection to retriable errors (#14594) (a6bd392)

storage: Fix race condition during retries in gRPC writer (#14649) (c781a75)

Commits

66803b9 chore(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /inter...
86eb615 chore: bulk promote stable 0.x libraries to v1.0.0 (#14562)
942bbc1 feat: Add ListSkills and DeleteSkill methods in Vertex AI Skill Registry SDK
14ea3de fix: Fix name collision on SandboxEnvironment.state by renaming enum to Sandb...
d9de3a5 test(spanner): skip DirectPath-incompatible tests when DirectPath is enabled ...
043aa71 test(spanner): fix nil pointer panic in TestNewBuiltinMetricsTracerFactory un...
d6f00a2 test(spanner): disable TestIntegration_QueueMutations (#14550)
d10add3 refactor(pubsub/v2/pstest): implement custom filter parser (#14497)
94d24ca chore: librarian release pull request: 20260507T184113Z (#14549)
541569e docs: update README to reflect Gemini Enterprise Agent Platform
Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 1.17.1 to 1.18.1

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v1.18.1

This release fixes a memory leak introduced in OPA v1.17.0. It is advised to update if you notice excess memory usage when running OPA server.

Fixes

ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle (#8817) authored by @srenatus reported by @keydon and @gorsr01

v1.18.0

This release contains a mix of bugfixes and small features. Notably:

A breaking fix to the outbound User-Agent header so it conforms to RFC 9110 (see below)

Container-aware resource limits: automatic GOMAXPROCS is restored and automatic GOMEMLIMIT is now supported

Several opa fmt correctness fixes

Improvements to opa test --coverage (ranges in report, inline rule head tracking, conjunction-expression coverage)

Breaking: Fix User-Agent according to RFC9110 (#8792)

OPA's outbound HTTP requests (bundle, discovery, decision log, status, http.send, AWS KMS/ECR) previously sent User-Agent: Open Policy Agent/<version> (<os>, <arch>), which is not a valid RFC 9110 User-Agent value because the product token cannot contain spaces. The header is now Open-Policy-Agent/<version> (<os>, <arch>). Server-side log filters or WAF rules that exact-match the old string will need to be updated.

Authored by @sspaink, reported by @SpecLad

Runtime, SDK, Tooling

bundle: fix per-module rego version lookup (#8797) authored by @sspaink, reported by @xubinzheng

bundle: improve determinism of file_rego_versions patterns with overlap (#8733) authored by @philipaconrad

cover: Track inline rule head in post trace walk (#6531) authored by @charlieegan3, reported by @anderseknert

cover: Update report to include ranges (#8748) reported and authored by @charlieegan3

cover: Add support for coverage of conjunction exprs (#8809) authored by @charlieegan3

download/oci: Set Accept headers (#8720) authored by @charlieegan3

fmt: preserve the multiline but single entry iterables (#8557) authored by @unichronic, reported by @anderseknert

format: Fix dropped with-clause after comment in object value (#8765) authored by @sspaink, reported by @srabraham

format: keep lone with on the closing-bracket line of multi-line expressions (#8804) authored by @anneheartrecord, reported by @burnster

oracle: Fix find-definition on expressions inside ast.Not nodes (#8731) authored by @johanfylling

runtime: Restore goautomaxprocs, add automemlimit (#8784) authored by @charlieegan3

Compiler, Topdown and Rego

ast: Apply location to inner ast.Not expressions (#8717) authored by @johanfylling, reported by @anderseknert

ast: Clean up code for value comparisons (#8737) authored by @anderseknert

ast: Fix PE regression for future.keywords.not negation inside every (#8781) authored by @johanfylling

internal/edittree: Add recursive tree node recycling (#8693) authored by @philipaconrad

internal: compile,planner: improve determinism of plan/wasm bundle builds (#8732) authored by @philipaconrad

perf: avoid allocations in object.get (#8729) authored by @anderseknert

topdown: Fix PE not namespacing vars in comprehensions nested inside every (#8816) authored by @johanfylling

topdown: remove dst.Compare(src) shortcut (#8739) authored by @srenatus

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

1.18.1

This release fixes a memory leak introduced in OPA v1.17.0. It is advised to update if you notice excess memory usage when running OPA server.

Fixes

ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle (#8817) authored by @srenatus reported by @keydon and @gorsr01

1.18.0

This release contains a mix of bugfixes and small features. Notably:

A breaking fix to the outbound User-Agent header so it conforms to RFC 9110 (see below)

Container-aware resource limits: automatic GOMAXPROCS is restored and automatic GOMEMLIMIT is now supported

Several opa fmt correctness fixes

Improvements to opa test --coverage (ranges in report, inline rule head tracking, conjunction-expression coverage)

Breaking: Fix User-Agent according to RFC9110 (#8792)

OPA's outbound HTTP requests (bundle, discovery, decision log, status, http.send, AWS KMS/ECR) previously sent User-Agent: Open Policy Agent/<version> (<os>, <arch>), which is not a valid RFC 9110 User-Agent value because the product token cannot contain spaces. The header is now Open-Policy-Agent/<version> (<os>, <arch>). Server-side log filters or WAF rules that exact-match the old string will need to be updated.

Authored by @sspaink, reported by @SpecLad

Runtime, SDK, Tooling

bundle: fix per-module rego version lookup (#8797) authored by @sspaink, reported by @xubinzheng

bundle: improve determinism of file_rego_versions patterns with overlap (#8733) authored by @philipaconrad

cover: Track inline rule head in post trace walk (#6531) authored by @charlieegan3, reported by @anderseknert

cover: Update report to include ranges (#8748) reported and authored by @charlieegan3

cover: Add support for coverage of conjunction exprs (#8809) authored by @charlieegan3

download/oci: Set Accept headers (#8720) authored by @charlieegan3

fmt: preserve the multiline but single entry iterables (#8557) authored by @unichronic, reported by @anderseknert

format: Fix dropped with-clause after comment in object value (#8765) authored by @sspaink, reported by @srabraham

format: keep lone with on the closing-bracket line of multi-line expressions (#8804) authored by @anneheartrecord, reported by @burnster

oracle: Fix find-definition on expressions inside ast.Not nodes (#8731) authored by @johanfylling

runtime: Restore goautomaxprocs, add automemlimit (#8784) authored by @charlieegan3

Compiler, Topdown and Rego

ast: Apply location to inner ast.Not expressions (#8717) authored by @johanfylling, reported by @anderseknert

ast: Clean up code for value comparisons (#8737) authored by @anderseknert

ast: Fix PE regression for future.keywords.not negation inside every (#8781) authored by @johanfylling

internal/edittree: Add recursive tree node recycling (#8693) authored by @philipaconrad

internal: compile,planner: improve determinism of plan/wasm bundle builds (#8732) authored by @philipaconrad

perf: avoid allocations in object.get (#8729) authored by @anderseknert

... (truncated)

Commits

acc8bf9 Release v1.18.1
713dc6a ast: fix AnnotationSet memory leak via runtime.AddCleanup cycle
cc2c5c6 Prepare v1.18 release (#8820)
e72a98f format: keep lone with on the closing-bracket line of multi-line expression...
03646dd topdown: Fix PE not namespacing vars in comprehensions nested inside every ...
bf2bb52 benchmarks: split off script, emit markdown table
02ce276 version: fix ill-formed User-Agent header (#8796)
1fdbb77 build(deps): bump the dependencies group across 2 directories with 6 updates
954196a cover: Add support for coverage of conjunction exprs (#8809)
dec8333 deduplicate change-detection output in pr CI checks (#8808)
Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.16.0 to 1.17.2

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.17.2

Unreleased

1.17.1

Unreleased

1.17.0

Unreleased

1.16.2

Unreleased

1.16.1

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.17.2

Patch Changes

d98ef79: Retry feature flag requests after transient network errors only. The feature flag request retry count defaults to 1 and can be set to 0 to disable retries.

1.17.1

Patch Changes

651b303: Preserve caller-provided system context values when building capture v1 event properties.

e0eb8bd: Send capture batches uncompressed when request-body compression fails instead of failing the batch.

71f5c2e: Expose capture default properties to BeforeSend hooks before serialization.

1.17.0

Minor Changes

ff0e74b: Enrich capture-v1 failure reporting with typed errors and verbose result logging. When CaptureMode is CaptureModeAnalyticsV1, Callback.Failure now receives either a *CaptureEventError (a single event the server dropped, or one still asking to retry once attempts are exhausted — exposing EventUUID, Result, Details, and Exhausted) or a *CaptureRequestError (a whole request that failed on a non-2xx status, transport error, or malformed body — exposing StatusCode, Code, Description, and unwrapping to the underlying error). Inspect them with errors.As. Additionally, with Verbose: true the SDK logs one debug line per 2xx response summarizing the per-event directive counts (ok/warning/drop/retry/other) so partial-submission outcomes are easy to debug. The legacy path and its callback errors are unchanged.

ff0e74b: Add opt-in capture-v1 support via a new Config.CaptureMode option. It defaults to CaptureModeLegacy (the existing POST /batch/ endpoint), so upgrading is transparent and requires no code changes. Set CaptureMode: posthog.CaptureModeAnalyticsV1 to send events to POST /i/v1/analytics/events instead, which uses Bearer auth, per-event delivery results, and partial retry (only the events the server asks to retry are re-sent). For v1, the Callback interface is unchanged but outcomes become per-event: a drop result fails an individual event (and can fire Failure on an HTTP 200), warning counts as success, and a uuid missing from the results is silently dropped. All other configuration (host, API key, Callback, Logger, MaxRetries, Compression) is reused across both modes.

ff0e74b: Add zstd, deflate, and brotli compression for the capture-v1 path, alongside the existing gzip. Select one via Config.Compression (CompressionZstd, CompressionDeflate, CompressionBrotli) and the SDK sets the matching Content-Encoding header (zstd, deflate, br). These three codecs require CaptureMode: posthog.CaptureModeAnalyticsV1 — the legacy POST /batch/ endpoint only understands gzip, so configuring them with CaptureModeLegacy returns a validation error. CompressionGzip and CompressionNone continue to work on both capture modes. All codecs use pure-Go libraries (stdlib compress/zlib, github.com/klauspost/compress/zstd, github.com/andybalholm/brotli), so CGO_ENABLED=0 builds are unaffected.

1.16.2

Patch Changes

76de226: Dedupe $feature_flag_called events by feature flag response value.

1.16.1

Patch Changes

922cfff: Validate user-supplied event UUIDs before sending and generate a fallback UUID when invalid.

Commits

c2ee6b1 chore: release v1.17.2 [version bump] [skip ci]
d98ef79 fix(flags): retry flag requests on transient network errors (#240)
63feb5e chore: release v1.17.1 [version bump] [skip ci]
e0eb8bd fix: fall back to uncompressed on compression failure (#242)
651b303 fix: preserve v1 caller system context (#243)
71f5c2e fix: expose capture defaults to BeforeSend hooks (#244)
45e5e96 chore: release v1.17.0 [version bump] [skip ci]
ff0e74b feat(capture): add v1 wire types and serialization (unwired) (#235)
2832a6e chore: use pnpm setup runtime action (#241)
89309b8 chore: release v1.16.2 [version bump] [skip ci]
Additional commits viewable in compare view

Updates go.step.sm/crypto from 0.83.0 to 0.84.1

Release notes

Sourced from go.step.sm/crypto's releases.

Release v0.84.1

What's Changed

Delete CNG private keys when CleanupCredentials removes expired certs by @darkfronza in smallstep/crypto#1030

Full Changelog: smallstep/crypto@v0.84.0...v0.84.1

Release v0.84.0

What's Changed

Fix pull-requests: write permission for triage workflow by @hslatman in smallstep/crypto#1054

Use correct CNG-key value for 'dwKeySpec' when setting key provider info by @joshdrake in smallstep/crypto#1062

Dependencies

chore(deps): Bump golang.org/x/crypto from 0.52.0 to 0.53.0 by @dependabot[bot] in smallstep/crypto#1051

chore(deps): Bump golang.org/x/term from 0.43.0 to 0.44.0 by @dependabot[bot] in smallstep/crypto#1049

chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.1 to 1.22.0 by @dependabot[bot] in smallstep/crypto#1047

chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.2 to 1.53.4 by @dependabot[bot] in smallstep/crypto#1048

chore(deps): Bump github.com/google/go-tpm-tools from 0.4.8 to 0.4.9 by @dependabot[bot] in smallstep/crypto#1050

chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.22 to 1.32.25 by @dependabot[bot] in smallstep/crypto#1055

chore(deps): Bump modernc.org/sqlite from 1.51.0 to 1.52.0 by @dependabot[bot] in smallstep/crypto#1056

chore(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.13.1 to 1.14.0 by @dependabot[bot] in smallstep/crypto#1057

chore(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 by @dependabot[bot] in smallstep/crypto#1059

chore(deps): Bump google.golang.org/api from 0.283.0 to 0.285.0 by @dependabot[bot] in smallstep/crypto#1058

chore(deps): Bump google.golang.org/api from 0.285.0 to 0.286.0 by @dependabot[bot] in smallstep/crypto#1061

chore(deps): Bump modernc.org/sqlite from 1.52.0 to 1.53.0 by @dependabot[bot] in smallstep/crypto#1060

Full Changelog: smallstep/crypto@v0.83.0...v0.84.0

Commits

5939e29 Merge pull request #1030 from smallstep/diego/eff-232-cng-key-containers-not-...
dc133eb Merge branch 'master' into diego/eff-232-cng-key-containers-not-deleted-for-s...
fd2c8a0 Merge pull request #1062 from smallstep/josh/capi-fix-dwkeyspec
520ec32 Update comment re: 'LEGACY_KEY_SPEC_NONE'
884a66f Merge remote-tracking branch 'origin/master' into diego/eff-232-cng-key-conta...
855a7d1 tpmkms: document why SearchKeys can fail
2af46db Use correct CNG-key value for 'dwKeySpec' when setting key provider info
d2bf23c Merge pull request #1060 from smallstep/dependabot/go_modules/modernc.org/sql...
297be12 chore(deps): Bump modernc.org/sqlite from 1.52.0 to 1.53.0
d40d13f Merge pull request #1061 from smallstep/dependabot/go_modules/google.golang.o...
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260526163538-3dc84a4a5aaa to 0.0.0-20260615183401-62b3387ff324

Commits

See full diff in compare view

Updates github.com/vektah/gqlparser/v2 from 2.5.34 to 2.5.35

Release notes

Sourced from github.com/vektah/gqlparser/v2's releases.

v2.5.35

What's Changed

Migrate yaml dependency to go.yaml.in/yaml/v3 by @atzedus in vektah/gqlparser#437

fix nullable nested list variable coercion by @jbellenger in vektah/gqlparser#439

build(deps-dev): bump prettier from 3.8.3 to 3.8.4 in /validator/imported in the actions-deps group by @dependabot[bot] in vektah/gqlparser#438

Full Changelog: vektah/gqlparser@v2.5.34...v2.5.35

Commits

e3a8d38 Fix nullable nested list variable coercion (#439)
7edd6f7 build(deps-dev): bump prettier (#438)
5112c6b build(deps): migrate yaml import to go.yaml.in/yaml/v3 (#437)
See full diff in compare view

Updates github.com/moby/moby/api from 1.54.2 to 1.55.0

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.55.0

1.55.0

Changelog

POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651

The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

docs: clarify swarm join required fields. moby/moby#52763

api/v1.55.0-rc.1

1.55.0-rc.1

Changelog

POST /containers/{id}/update now supports per-device blkio resource settingss. moby/moby#52651

The new GET /images/{name}/attestations endpoint returns in-toto attestation statements (such as SLSA provenance and SPDX SBOM) attached to an image, with optional platform selection, predicate type filtering, and an opt-in statement query parameter for retrieving the verbatim statement bodies. Tools can now retrieve attestation metadata and content directly from the daemon instead of performing additional registry round-trips. moby/moby#52636

docs: clarify swarm join required fields. moby/moby#52763

Commits

b6c53c2 Merge pull request #52773 from vvoland/c8d-amd64-variants
01115e8 Merge pull request #52906 from vvoland/fix-TestContainerWithConflictingNoneNe...
b36296f Merge pull request #52913 from thaJeztah/windows_does_stats
a81aa78 TestContainerWithConflictingNoneNetwork: Extend Windows timeout
908a35a Merge pull request #52914 from thaJeztah/no_stderr
04d33b5 Merge pull request #52912 from thaJeztah/cleanup_GenerateRandomAlphaOnlyString
3b2f557 Merge pull request #52722 from notandruu/integration/migrate-TestInspectAPIIm...
62b3aae Merge pull request #52901 from vvoland/c8d-imageusage
11d3342 integration-cli: un-skip stats tests on Windows
a47b1b2 Merge pull request #52891 from smerkviladze/attestations-clearer-blob-missing...
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.68.0 to 0.69.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

v1.44.0/v2.5.1/v0.69.0/v0.37.1/v0.24.0/v0.19.0/v0.16.1/v0.16.0

Added

Add error.type attribute to http.client.request.duration for transport failures in otelhttp. (#8801)

Add examples for prometheus compatibility document. (#8716)

Add support for cardinality_limits in PeriodicMetricReader in otelconf. (#8885)

Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/x to expose the resolved SDK resource from declarative configuration. (#8913)

Add go.opentelemetry.io/contrib/detectors/hetzner, a new resource detector for Hetzner Cloud servers, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/hetzner. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, host.id, and host.name. (#8979)

Changed

Set error field as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otellogrus. (#8776)

Set the "error" field (e.g. created via zap.Error) as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otelzap. (#8719)

Set fields implementing error interface from slog records as record.SetErr instead of plain attributes in go.opentelemetry.io/contrib/bridges/otelslog. (#8774)

Set emitted errors in go.opentelemetry.io/contrib/bridges/otellogr as record errors (Record.SetErr) instead of exception.message attributes. (#8775)

Fixed

Fix header attributes lost when using sub-spans in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#8797)

Validate encoding configuration for OTLP HTTP exporters in go.opentelemetry.io/contrib/otelconf. (#8772)

Remove the custom body wrapper from the request's body after the request is processed to allow body type comparisons with the original type in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6914)

Unknown or empty HTTP methods now report "_OTHER" instead of "GET" across all HTTP instrumentations to align with OpenTelemetry semantic conventions. (#8868)

The default span name formatter in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now conforms to the OpenTelemetry HTTP semantic conventions for server span names. (#8871)

The default span name is now {method} {route} (e.g. GET /foo/{id}) when a route pattern is available, or {method} (e.g. GET) otherwise.

Removed

Remove the deprecated WithSpanOptions option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8991)

What's Changed

otelconf: validate encoding configuration for OTLP HTTP exporters by @sonalgaud12 in open-telemetry/opentelemetry-go-contrib#8772

fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.99.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8780

chore(deps): update prom/prometheus docker tag to v3.11.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8779

otellogrus: Set error field as record.SetErr by @sonalgaud12 in open-telemetry/opentelemetry-go-contrib#8778

chore(deps): update module golang.org/x/sys to v0.43.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8783

chore(deps): update golang.org/x/telemetry digest to 93c7c8a by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8786

chore(deps): update module github.com/mattn/go-isatty to v0.0.21 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8787

chore(deps): update module github.com/mattn/go-runewidth to v0.0.23 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8788

chore(deps): update golang.org/x by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8791

chore(deps): update actions/github-script action to v9 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8795

fix(deps): update golang.org/x by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8794

otelzap: set error field as record.SetErr by @iblancasa in open-telemetry/opentelemetry-go-contrib#8719

fix(deps): update golang.org/x to 746e56f by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8796

chore(deps): update module golang.org/x/arch to v0.26.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8798

Check if otelgrpc metrics are enabled by @dashpole in open-telemetry/opentelemetry-go-contrib#8792

chore(deps): update actions/upload-artifact action to v7.0.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8800

Check instrument enabled in deprecatedruntime by @dashpole in open-telemetry/opentelemetry-go-contrib#8793

chore(deps): update module github.com/ashanbrown/forbidigo/v2 to v2.3.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8804

chore(deps): update module github.com/ashanbrown/makezero/v2 to v2.2.1 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8802

chore(deps): update module github.com/manuelarte/funcorder to v0.6.0 by @renovate[bot] in open-telemetry/opentelemetry-go-contrib#8803

... (truncated)

Changelog

Sourced from

Bumps the go-minor-and-patch group with 13 updates: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.77.0` | `0.78.0` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.27.1` | `1.27.3` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.285.0` | `0.286.0` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.62.3` | `1.63.0` | | [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.17.1` | `1.18.1` | | [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.16.0` | `1.17.2` | | [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.83.0` | `0.84.1` | | [google.golang.org/genproto/googleapis/api](https://github.com/googleapis/go-genproto) | `0.0.0-20260526163538-3dc84a4a5aaa` | `0.0.0-20260615183401-62b3387ff324` | | [github.com/vektah/gqlparser/v2](https://github.com/vektah/gqlparser) | `2.5.34` | `2.5.35` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.54.2` | `1.55.0` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.68.0` | `0.69.0` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.2.0` | `7.2.1` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.36.1` | `0.36.2` | Updates `code.cloudfoundry.org/bytefmt` from 0.77.0 to 0.78.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.77.0...v0.78.0) Updates `github.com/aws/smithy-go` from 1.27.1 to 1.27.3 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.27.1...v1.27.3) Updates `google.golang.org/api` from 0.285.0 to 0.286.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.285.0...v0.286.0) Updates `cloud.google.com/go/storage` from 1.62.3 to 1.63.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@storage/v1.62.3...compute/v1.63.0) Updates `github.com/open-policy-agent/opa` from 1.17.1 to 1.18.1 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v1.17.1...v1.18.1) Updates `github.com/posthog/posthog-go` from 1.16.0 to 1.17.2 - [Release notes](https://github.com/posthog/posthog-go/releases) - [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md) - [Commits](PostHog/posthog-go@v1.16.0...v1.17.2) Updates `go.step.sm/crypto` from 0.83.0 to 0.84.1 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.83.0...v0.84.1) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260526163538-3dc84a4a5aaa to 0.0.0-20260615183401-62b3387ff324 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `github.com/vektah/gqlparser/v2` from 2.5.34 to 2.5.35 - [Release notes](https://github.com/vektah/gqlparser/releases) - [Commits](vektah/gqlparser@v2.5.34...v2.5.35) Updates `github.com/moby/moby/api` from 1.54.2 to 1.55.0 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.54.2...api/v1.55.0) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.68.0 to 0.69.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.68.0...zpages/v0.69.0) Updates `github.com/minio/minio-go/v7` from 7.2.0 to 7.2.1 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.2.0...v7.2.1) Updates `k8s.io/apimachinery` from 0.36.1 to 0.36.2 - [Commits](kubernetes/apimachinery@v0.36.1...v0.36.2) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/smithy-go dependency-version: 1.27.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: google.golang.org/api dependency-version: 0.286.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: cloud.google.com/go/storage dependency-version: 1.63.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.18.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/posthog/posthog-go dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: go.step.sm/crypto dependency-version: 0.84.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260615183401-62b3387ff324 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/vektah/gqlparser/v2 dependency-version: 2.5.35 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/moby/moby/api dependency-version: 1.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.69.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.2.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: k8s.io/apimachinery dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 6, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go-minor-and-patch group with 13 updates#3266

chore(deps): bump the go-minor-and-patch group with 13 updates#3266
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-eb87b46922

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 6, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release (2026-06-26)

General Highlights

Module Highlights

Release (2026-06-05)

General Highlights

Module Highlights

Release (2026-06-04)

General Highlights

Module Highlights

Release (2026-06-02)

General Highlights

Module Highlights

Release (2026-05-27)

General Highlights

Module Highlights

v0.286.0

0.286.0 (2026-06-22)

Features

0.286.0 (2026-06-22)

Features

compute: v1.63.0

v1.63.0 (2026-05-14)

Features

storage: v1.63.0

1.63.0 (2026-06-25)

Features

Bug Fixes

v1.18.1

Fixes

v1.18.0

Breaking: Fix User-Agent according to RFC9110 (#8792)

Runtime, SDK, Tooling

Compiler, Topdown and Rego

1.18.1

Fixes

1.18.0

Breaking: Fix User-Agent according to RFC9110 (#8792)

Runtime, SDK, Tooling

Compiler, Topdown and Rego

1.17.2

Unreleased

1.17.1

Unreleased

1.17.0

Unreleased

1.16.2

Unreleased

1.16.1

Unreleased

1.17.2

Patch Changes

1.17.1

Patch Changes

1.17.0

Minor Changes

1.16.2

Patch Changes

1.16.1

Patch Changes

Release v0.84.1

What's Changed

Release v0.84.0

What's Changed

Dependencies

v2.5.35

What's Changed

api/v1.55.0

1.55.0

Changelog

api/v1.55.0-rc.1

1.55.0-rc.1

Changelog

v1.44.0/v2.5.1/v0.69.0/v0.37.1/v0.24.0/v0.19.0/v0.16.1/v0.16.0

Added

Changed

Fixed

dependabot Bot commented on behalf of github Jul 6, 2026 •

edited by cubic-dev-ai Bot

Loading