Skip to content

Bump the go-dependencies group across 1 directory with 24 updates#7300

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/go-dependencies-45e2d5fc16
Open

Bump the go-dependencies group across 1 directory with 24 updates#7300
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/go-dependencies-45e2d5fc16

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 26, 2026 •
edited
Loading

Bumps the go-dependencies group with 21 updates in the / directory:

Package From To
github.com/alicebob/miniredis/v2 2.35.0 2.37.0
github.com/golang-migrate/migrate/v4 4.18.1 4.19.1
github.com/hashicorp/consul/api 1.32.0 1.33.4
github.com/klauspost/compress 1.18.2 1.18.4
github.com/spf13/afero 1.11.0 1.15.0
go.etcd.io/etcd/api/v3 3.5.17 3.6.8
go.etcd.io/etcd/client/pkg/v3 3.5.17 3.6.8
go.etcd.io/etcd/client/v3 3.5.17 3.6.8
go.opentelemetry.io/contrib/propagators/aws 1.36.0 1.40.0
go.opentelemetry.io/otel/bridge/opentracing 1.36.0 1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.39.0 1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.39.0 1.40.0
golang.org/x/net 0.49.0 0.51.0
github.com/VictoriaMetrics/fastcache 1.12.2 1.13.3
github.com/aws/aws-sdk-go-v2 1.41.1 1.41.2
github.com/aws/aws-sdk-go-v2/config 1.32.7 1.32.10
github.com/aws/aws-sdk-go-v2/service/dynamodb 1.50.1 1.56.0
github.com/parquet-go/parquet-go 0.26.4 0.28.0
github.com/prometheus/procfs 0.16.1 0.20.0
github.com/tjhop/slog-gokit 0.1.4 0.1.5
go.opentelemetry.io/collector/pdata 1.45.0 1.52.0

Updates github.com/alicebob/miniredis/v2 from 2.35.0 to 2.37.0

Release notes

Sourced from github.com/alicebob/miniredis/v2's releases.

HEXPIRE

support CLUSTER SHARDS

redis 8.4.0, DUMP/RESTORE, EVALRO, WAIT

Changelog

Sourced from github.com/alicebob/miniredis/v2's changelog.

v2.37.0

v2.36.1

v2.36.0

Commits

Updates github.com/golang-migrate/migrate/v4 from 4.18.1 to 4.19.1

Release notes

Sourced from github.com/golang-migrate/migrate/v4's releases.

v4.19.1

What's Changed

New Contributors

Full Changelog: golang-migrate/migrate@v4.19.0...v4.19.1

v4.19.0

What's Changed

New Contributors

Full Changelog: golang-migrate/migrate@v4.18.3...v4.19.0

v4.18.3

Changelog

  • a4d0a1b Bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2
  • f37ef79 Bump golang.org/x/crypto from 0.31.0 to 0.35.0
  • 5b97c92 Bump golang.org/x/net from 0.33.0 to 0.38.0
  • e6d84f6 Drop support for Go 1.22 and add support for Go 1.24
  • fccd197 Mention CLI install instructions in main README
  • 34c2b4a Remove redundant build tags
  • a868033 Update FAQ.md - typo
  • 7269490 Update golangci-lint version used in GitHub Actions
  • c5137c4 Update migrate -help output for the readme file
  • 033835a Update to dktest v0.4.5
  • 8b09191 fix: typo limited not limitted

... (truncated)

Commits
  • 89e308c chore: remove dependency on "hashicorp/go-multierror" (#1322)
  • 472ef2e Merge pull request #1336 from golang-migrate/dependabot/go_modules/golang.org...
  • 8d76259 Bump golang.org/x/crypto from 0.43.0 to 0.45.0
  • 9f9df7c chore: Update cloud.google.com/go/spanner version (#1330)
  • a371c8e Merge pull request #1304 from iamonah/fix/clarify-databaseName-meaning
  • 43cc3b3 Merge pull request #1325 from HaraldNordgren/linter_issues
  • f939a89 Merge pull request #1335 from golang-migrate/dependabot/go_modules/golang.org...
  • 6dd86e0 Bump golang.org/x/crypto from 0.36.0 to 0.45.0
  • 70e6d6d Merge pull request #1333 from matsoob/updateGoInBaseImage
  • a51d0da Merge pull request #1334 from golang-migrate/dependabot/go_modules/github.com...
  • Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.32.0 to 1.33.4

Commits
  • 2a06921 Update submodule dependencies for api release
  • 5c7eb1c Backport of increase default HTTP timeouts for blocking queries and long poll...
  • 9a42780 Prepare flow fix for 1.22.x (#23264)
  • f6d4f4d Backport of Fix for cache context to save cache data in entries on context ca...
  • 8f5205a Backport of docs(#22739): update security note with HTTP server timeout defau...
  • 53eab0d Backport of bumps: update body-parser to 2.2.1+ into release/1.22.x (#23240)
  • a989831 Backport of Fix for arbitrary file reads vulnerabilities into release/1.22.x ...
  • 803992d Post release 1.22.x (#23233)
  • dd775d8 Backport of migrate to aws-sdk-go-v2 into release/1.22.x (#23225)
  • ba05bd5 Backport of manage visibility of admin partition selector into release/1.22.x...
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.2 to 1.18.4

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.4

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

Commits

Updates github.com/spf13/afero from 1.11.0 to 1.15.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.15.0

What's Changed

New Contributors

Full Changelog: spf13/afero@v1.14.0...v1.15.0

v1.14.0

What's Changed

Full Changelog: spf13/afero@v1.13.0...v1.14.0

v1.13.0

What's Changed

... (truncated)

Commits
  • 399bb34 Merge pull request #523 from MarkRosemaker/fix-spelling
  • 9b67716 Merge pull request #538 from spf13/deps
  • f5f4f7b chore: update deps
  • c245c4f ci: update ci
  • 85c4956 Merge pull request #527 from spf13/dependabot/github_actions/actions/checkout...
  • 41206fd build(deps): bump actions/checkout from 4.2.2 to 5.0.0
  • a583fad Merge pull request #533 from spf13/dependabot/github_actions/actions/dependen...
  • 673c03e Merge pull request #536 from spf13/dependabot/github_actions/actions/setup-go...
  • ac849f6 Merge pull request #537 from spf13/dependabot/github_actions/github/codeql-ac...
  • 9596fe8 build(deps): bump github/codeql-action from 3.29.7 to 3.30.1
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/api/v3 from 3.5.17 to 3.6.8

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.8

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • 4e814e2 version: bump up to 3.6.8
  • d552466 Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.3
  • 2d3c79c [release-3.6] Bump go version to 1.24.13
  • b17ff7e Merge pull request #21241 from ahrtr/20260203_metadata_3.6
  • bf78336 Remove the use of grpc-go's Metadata field
  • 451c7d5 Merge pull request #21216 from ahrtr/20260130_go_3.6
  • ef87996 Bump go version to 1.24.11
  • cb073ab Merge pull request #21163 from ahrtr/20260119_snapshot_count_3.6
  • e830821 Keep the --snapshot-count flag
  • 45dbe3c Merge pull request #21161 from ahrtr/20260119_max_snapshots_3.6
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/pkg/v3 from 3.5.17 to 3.6.8

Release notes

Sourced from go.etcd.io/etcd/client/pkg/v3's releases.

v3.6.8

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • 4e814e2 version: bump up to 3.6.8
  • d552466 Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.3
  • 2d3c79c [release-3.6] Bump go version to 1.24.13
  • b17ff7e Merge pull request #21241 from ahrtr/20260203_metadata_3.6
  • bf78336 Remove the use of grpc-go's Metadata field
  • 451c7d5 Merge pull request #21216 from ahrtr/20260130_go_3.6
  • ef87996 Bump go version to 1.24.11
  • cb073ab Merge pull request #21163 from ahrtr/20260119_snapshot_count_3.6
  • e830821 Keep the --snapshot-count flag
  • 45dbe3c Merge pull request #21161 from ahrtr/20260119_max_snapshots_3.6
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.5.17 to 3.6.8

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.8

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.8
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • 4e814e2 version: bump up to 3.6.8
  • d552466 Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.3
  • 2d3c79c [release-3.6] Bump go version to 1.24.13
  • b17ff7e Merge pull request #21241 from ahrtr/20260203_metadata_3.6
  • bf78336 Remove the use of grpc-go's Metadata field
  • 451c7d5 Merge pull request #21216 from ahrtr/20260130_go_3.6
  • ef87996 Bump go version to 1.24.11
  • cb073ab Merge pull request #21163 from ahrtr/20260119_snapshot_count_3.6
  • e830821 Keep the --snapshot-count flag
  • 45dbe3c Merge pull request #21161 from ahrtr/20260119_max_snapshots_3.6
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/propagators/aws from 1.36.0 to 1.40.0

Changelog

Sourced from go.opentelemetry.io/contrib/propagators/aws's changelog.

[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] - 2026-02-02

Added

  • WithMetricAttributesFn option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to define dynamic attributes on auto-instrumented metrics. (#8191)
  • Add support for configuring propagators in go.opentelemetry.io/contrib/otelconf. (#8281)
  • Add const Version in go.opentelemetry.io/contrib/bridges/prometheus. (#8401)
  • Add const Version in go.opentelemetry.io/contrib/otelconf. (#8461)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otellogr. (#8477)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otellogrus. (#8485)
  • Add const Version in go.opentelemetry.io/contrib/bridges/otelslog. (#8480)

Fixed

  • Fix panic when passing nil TracerProvider or MeterProvider to WithTracerProvider or WithMeterProvider in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8323)
  • Transport in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now supports reading request body multiple times for subsequent requests that reuse http.Request. (#8352)

Changed

  • The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp has been replaced by const Version. (#8142)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace has been replaced by const Version. (#8302)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc has been replaced by const Version. (#8317)
  • The Version() function in go.opentelemetry.io/contrib/zpages has been replaced by const Version. (#8325)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo has been replaced by const Version. (#8340)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin has been replaced by const Version. (#8341)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/runtime has been replaced by const Version string. (#8349)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws has been replaced by const Version. (#8356)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda has been replaced by const Version. (#8357)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/host has been replaced by const Version. (#8358)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful has been replaced by const Version. (#8360)
  • The Version() function in go.opentelemetry.io/contrib/propagators/opencensus has been replaced by const Version. (#8361)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho has been replaced by const Version. (#8365)
  • The Version() function in go.opentelemetry.io/contrib/samplers/probability/consistent has been replaced by const Version. (#8366)
  • The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo has been replaced by const Version. (#8370)
  • Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8386)
  • Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#8386)
  • Upgrade go.opentelemetry.io/otel/semconv to v1.39.0, including updates across all instrumentation and detector modules. (#8404)
    • The semantic conventions v1.39.0 release introduces breaking changes, including:
      • rpc span and metric attributes have been renamed to align with naming guidelines:
        • rpc.system → rpc.system.name (values: grpc, grpc_web, connectrpc, thrift, dubbo, etc.)
        • rpc.method and rpc.service have been merged into a fully-qualified rpc.method attribute
        • rpc.client|server.duration → rpc.client|server.call.duration (unit changed to seconds)
        • rpc.grpc.request.metadata/rpc.grpc.response.metadata → rpc.request.metadata/rpc.response.metadata
        • rpc.grpc.status_code → deprecated in favor of rpc.response.status_code
        • rpc.jsonrpc.request_id → jsonrpc.request.id
        • rpc.jsonrpc.version → jsonrpc.protocol.version
      • system and process metrics:
        • *.linux.memory metrics renamed to *.memory.linux
        • system.process.status → process.state
        • system.paging.type and process.paging.fault_type → system.paging.fault.type

... (truncated)

Commits
  • a89d958 Release v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0 (#8493)
  • 1530d71 Upgrade semconv to v1.39.0 (#8481)
  • 135bb60 Upgrade autoexport to latest otel dep (#8483)
  • 8e92105 chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.13 (#8486)
  • 147148e fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.1 (#8487)
  • d387510 Add version file for otellogrus bridge (#8485)
  • fad49c8 add version file for otelslog bridge (#8480)
  • 9e1e573 fix(deps): update module go.mongodb.org/mongo-driver to v1.17.8 (#8479)
  • 37aa475 Add version file for otellogr bridge (#8477)
  • fc8ef39 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.39.0 to 1.40.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

  • Add AlwaysRecord sampler in go.opentelemetry.io/otel/sdk/trace. (#7724)
  • Add Enabled method to all synchronous instrument interfaces (Float64Counter, Float64UpDownCounter, Float64Histogram, Float64Gauge, Int64Counter, Int64UpDownCounter, Int64Histogram, Int64Gauge,) in go.opentelemetry.io/otel/metric. This stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (#7763)
  • Add go.opentelemetry.io/otel/semconv/v1.39.0 package. The package contains semantic conventions from the v1.39.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.38.0. (#7783, #7789)

Changed

  • Improve the concurrent performance of HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar by 4x. (#7443)
  • Improve the concurrent performance of FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar. (#7447)
  • Improve performance of concurrent histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7474)
  • Improve performance of concurrent synchronous gauge measurements in go.opentelemetry.io/otel/sdk/metric. (

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 26, 2026
@dependabot dependabot bot mentioned this pull request Feb 26, 2026
Closed
@dependabot
Bump the go-dependencies group across 1 directory with 24 updates
0fdd5c8 
Bumps the go-dependencies group with 21 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) | `2.35.0` | `2.37.0` |
| [github.com/golang-migrate/migrate/v4](https://github.com/golang-migrate/migrate) | `4.18.1` | `4.19.1` |
| [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.32.0` | `1.33.4` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.2` | `1.18.4` |
| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.15.0` |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.8` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.8` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.5.17` | `3.6.8` |
| [go.opentelemetry.io/contrib/propagators/aws](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.36.0` | `1.40.0` |
| [go.opentelemetry.io/otel/bridge/opentracing](https://github.com/open-telemetry/opentelemetry-go) | `1.36.0` | `1.40.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.40.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.40.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.49.0` | `0.51.0` |
| [github.com/VictoriaMetrics/fastcache](https://github.com/VictoriaMetrics/fastcache) | `1.12.2` | `1.13.3` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.41.1` | `1.41.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.7` | `1.32.10` |
| [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.50.1` | `1.56.0` |
| [github.com/parquet-go/parquet-go](https://github.com/parquet-go/parquet-go) | `0.26.4` | `0.28.0` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.20.0` |
| [github.com/tjhop/slog-gokit](https://github.com/tjhop/slog-gokit) | `0.1.4` | `0.1.5` |
| [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.45.0` | `1.52.0` |



Updates `github.com/alicebob/miniredis/v2` from 2.35.0 to 2.37.0
- [Release notes](https://github.com/alicebob/miniredis/releases)
- [Changelog](https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md)
- [Commits](alicebob/miniredis@v2.35.0...v2.37.0)

Updates `github.com/golang-migrate/migrate/v4` from 4.18.1 to 4.19.1
- [Release notes](https://github.com/golang-migrate/migrate/releases)
- [Commits](golang-migrate/migrate@v4.18.1...v4.19.1)

Updates `github.com/hashicorp/consul/api` from 1.32.0 to 1.33.4
- [Release notes](https://github.com/hashicorp/consul/releases)
- [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md)
- [Commits](hashicorp/consul@api/v1.32.0...api/v1.33.4)

Updates `github.com/klauspost/compress` from 1.18.2 to 1.18.4
- [Release notes](https://github.com/klauspost/compress/releases)
- [Commits](klauspost/compress@v1.18.2...v1.18.4)

Updates `github.com/spf13/afero` from 1.11.0 to 1.15.0
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](spf13/afero@v1.11.0...v1.15.0)

Updates `go.etcd.io/etcd/api/v3` from 3.5.17 to 3.6.8
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.17...v3.6.8)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.5.17 to 3.6.8
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.17...v3.6.8)

Updates `go.etcd.io/etcd/client/v3` from 3.5.17 to 3.6.8
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.5.17...v3.6.8)

Updates `go.opentelemetry.io/contrib/propagators/aws` from 1.36.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@v1.36.0...v1.40.0)

Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0)

Updates `go.opentelemetry.io/otel/bridge/opentracing` from 1.36.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.40.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0)

Updates `go.opentelemetry.io/otel/trace` from 1.39.0 to 1.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0)

Updates `golang.org/x/net` from 0.49.0 to 0.51.0
- [Commits](golang/net@v0.49.0...v0.51.0)

Updates `github.com/VictoriaMetrics/fastcache` from 1.12.2 to 1.13.3
- [Release notes](https://github.com/VictoriaMetrics/fastcache/releases)
- [Commits](VictoriaMetrics/fastcache@v1.12.2...v1.13.3)

Updates `github.com/aws/aws-sdk-go-v2` from 1.41.1 to 1.41.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.41.1...v1.41.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.7 to 1.32.10
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.32.7...config/v1.32.10)

Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.50.1 to 1.56.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.50.1...service/s3/v1.56.0)

Updates `github.com/parquet-go/parquet-go` from 0.26.4 to 0.28.0
- [Release notes](https://github.com/parquet-go/parquet-go/releases)
- [Changelog](https://github.com/parquet-go/parquet-go/blob/main/CHANGELOG.md)
- [Commits](parquet-go/parquet-go@v0.26.4...v0.28.0)

Updates `github.com/prometheus/procfs` from 0.16.1 to 0.20.0
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.16.1...v0.20.0)

Updates `github.com/tjhop/slog-gokit` from 0.1.4 to 0.1.5
- [Release notes](https://github.com/tjhop/slog-gokit/releases)
- [Commits](tjhop/slog-gokit@v0.1.4...v0.1.5)

Updates `go.opentelemetry.io/collector/pdata` from 1.45.0 to 1.52.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.45.0...pdata/v1.52.0)

---
updated-dependencies:
- dependency-name: github.com/alicebob/miniredis/v2
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/golang-migrate/migrate/v4
  dependency-version: 4.19.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/hashicorp/consul/api
  dependency-version: 1.33.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-version: 1.18.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/afero
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.8
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/contrib/propagators/aws
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/bridge/opentracing
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.51.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/VictoriaMetrics/fastcache
  dependency-version: 1.13.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb
  dependency-version: 1.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/parquet-go/parquet-go
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/tjhop/slog-gokit
  dependency-version: 0.1.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/collector/pdata
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-45e2d5fc16 branch from 219a26a to 0fdd5c8 Compare February 27, 2026 13:26
@CharlieTLe CharlieTLe requested a review from Copilot March 1, 2026 18:59
Copilot AI reviewed Mar 1, 2026
View reviewed changes
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the repository’s Go module configuration by bumping a set of Go dependencies (and the declared Go version) to newer releases.

Changes:

  • Bumped go version declaration in go.mod.
  • Updated multiple direct and indirect Go module dependencies (etcd, OpenTelemetry, AWS SDK, etc.).
  • Added/removed some indirect dependencies as part of the upgrade set.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

go.mod
module github.com/cortexproject/cortex

go 1.25.5
go 1.25.7
Copy link

Copilot AI Mar 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The go directive in go.mod is expected to use a language version in major.minor form (e.g., 1.25), not a patch version. Using go 1.25.7 can cause go tooling to reject the module file. Consider changing this to go 1.25 and (if you want to pin the toolchain) add a separate toolchain go1.25.7 directive.

Suggested change
go 1.25.7
go 1.25
toolchain go1.25.7

Copilot uses AI. Check for mistakes.
go.mod
Comment on lines +60 to +66
go.opentelemetry.io/contrib/propagators/aws v1.40.0
go.opentelemetry.io/otel v1.40.0
go.opentelemetry.io/otel/bridge/opentracing v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go.opentelemetry.io/otel/sdk v1.40.0
go.opentelemetry.io/otel/trace v1.40.0
Copy link

Copilot AI Mar 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

OpenTelemetry modules are generally intended to be upgraded in lockstep. In this file, several go.opentelemetry.io/otel/... modules are pinned to v1.40.0, but go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp remains at v1.39.0 (later in the file). Align otlptracehttp to v1.40.0 (or remove the explicit requirement and let MVS select a consistent version) to avoid subtle API/version skew.

Suggested change
go.opentelemetry.io/contrib/propagators/aws v1.40.0
go.opentelemetry.io/otel v1.40.0
go.opentelemetry.io/otel/bridge/opentracing v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.40.0
go.opentelemetry.io/otel/sdk v1.40.0
go.opentelemetry.io/otel/trace v1.40.0
go.opentelemetry.io/contrib/propagators/aws v1.39.0
go.opentelemetry.io/otel v1.39.0
go.opentelemetry.io/otel/bridge/opentracing v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
go.opentelemetry.io/otel/sdk v1.39.0
go.opentelemetry.io/otel/trace v1.39.0

Copilot uses AI. Check for mistakes.
go.mod
Comment on lines 269 to 274
go.opentelemetry.io/collector/confmap v1.45.0 // indirect
go.opentelemetry.io/collector/confmap/xconfmap v0.139.0 // indirect
go.opentelemetry.io/collector/consumer v1.45.0 // indirect
go.opentelemetry.io/collector/featuregate v1.45.0 // indirect
go.opentelemetry.io/collector/featuregate v1.52.0 // indirect
go.opentelemetry.io/collector/pipeline v1.45.0 // indirect
go.opentelemetry.io/collector/processor v1.45.0 // indirect
Copy link

Copilot AI Mar 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

There is a clear version skew within go.opentelemetry.io/collector/... dependencies: featuregate is bumped to v1.52.0 while other collector components here remain at v1.45.0. These collector modules typically evolve together and can have internal API compatibility expectations. Align these collector module versions to the same release series (e.g., bump the remaining collector modules to v1.52.0 if that’s the intended target) to prevent build/runtime incompatibilities.

Copilot uses AI. Check for mistakes.
Copilot AI mentioned this pull request Mar 1, 2026
Draft
3 tasks
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot Copilot left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant