Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 1, 2026

Bumps the go-deps group with 15 updates in the / directory:

Package From To
github.com/DataDog/datadog-api-client-go/v2 2.43.0 2.52.0
github.com/fluxcd/cli-utils 0.36.0-flux.15 0.37.0-flux.1
github.com/fluxcd/pkg/runtime 0.91.0 0.92.0
github.com/getsentry/sentry-go 0.35.3 0.40.0
github.com/ktrysmt/go-bitbucket 0.9.87 0.9.88
github.com/nats-io/nats.go 1.46.1 1.48.0
github.com/onsi/gomega 1.38.2 1.38.3
github.com/sethvargo/go-limiter 1.0.0 1.1.0
gitlab.com/gitlab-org/api/client-go 0.147.0 1.10.0
go.opentelemetry.io/otel 1.38.0 1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.38.0 1.39.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp 1.38.0 1.39.0
golang.org/x/oauth2 0.33.0 0.34.0
golang.org/x/text 0.31.0 0.32.0
google.golang.org/api 0.256.0 0.258.0

Updates github.com/DataDog/datadog-api-client-go/v2 from 2.43.0 to 2.52.0

Release notes

Sourced from github.com/DataDog/datadog-api-client-go/v2's releases.

v2.52.0

See ./CHANGELOG.md for details

v2.51.0

See ./CHANGELOG.md for details

v2.50.0

See ./CHANGELOG.md for details

v2.49.0

See ./CHANGELOG.md for details

v2.48.0

See ./CHANGELOG.md for details

v2.47.0

See ./CHANGELOG.md for details

v2.46.0

See ./CHANGELOG.md for details

v2.45.0

See ./CHANGELOG.md for details

v2.44.0

See ./CHANGELOG.md for details

Changelog

Sourced from github.com/DataDog/datadog-api-client-go/v2's changelog.

2.52.0/2025-12-17

Changed

  • Mark Incident Impact Endpoints stable #3530
  • Vulnerability Management - Update ListVulnerabilities endpoint query params and response schema #3521
  • Update specs for AWS account updates and creation for CCM configs #3514
  • add suppression version history #3490
  • Add processors groups to Observability Pipelines #3450

Added

  • Update security finding triage specs #3522
  • Add routes for managing On-Call user notification channels #3517
  • Add host field to Post an event V2 API #3515
  • Add GET /api/v2/apm/services endpoint to public documentation #3512
  • Dashboards - Add semantic_mode support to FormulaAndFunctionMetricQueryDefinition #3506
  • Cloud SIEM - Add instantaneousBaseline feature parameter. #3503
  • Add new fields to usage metering api spec #3501
  • update geomap widget definition about conditional_format and text_formats and view focus #3495
  • Add new endpoint for listing rules for a gate #3481

Removed

  • Tag security findings Jira endpoints as unstable #3510

Fixed

  • Add field attribute to the Workload Protection hash action #3487

2.51.0/2025-12-08

Added

  • On-Call Add positioned schedule policy target #3491
  • Introduced new APIs to manage team hierarchy links #3482
  • Add Row Update Endpoints to Reference Tables API spec #3472
  • Add incident management seats to spec #3469
  • Support provisioning teams from external sources #3467
  • security_monitoring - Add signalOutput field to ThreatHuntingJobResponseAttributes schema #3465
  • Add filter.scope to Monitor Notification Rules #3462
  • Add Support for Monitor Assets #3452
  • Add api specs for deployment gates #3412

Changed

  • Add Security Finding Ticketing endpoints #3485
  • Flatten file_metadata response schema to avoid OneOf unmarshaling issues #3471

Fixed

  • obs_pipelines: make google auth optional #3476

2.50.0/2025-11-14

Added

  • Add suppression tags #3456

... (truncated)

Commits
  • c224caf Bump versions and add changelog entries. (#3536)
  • 0001d44 Add GET /api/v2/apm/services endpoint to public documentation (#3512)
  • ce11823 Add field attribute to the Workload Protection hash action (#3487)
  • 935ce0c Cloud SIEM - Add instantaneousBaseline feature parameter. (#3503)
  • 6e3ded7 Add routes for managing On-Call user notification channels (#3517)
  • 58d892e add suppression version history (#3490)
  • 4bf2b08 Regenerate client from commit fcf2546 of spec repo (#3521)
  • 156713a Mark Incident Impact Endpoints stable (#3530)
  • 2a004b3 Update security finding triage specs (#3522)
  • 2abe96a Add processors groups to Observability Pipelines (#3450)
  • Additional commits viewable in compare view

Updates github.com/fluxcd/cli-utils from 0.36.0-flux.15 to 0.37.0-flux.1

Commits

Updates github.com/fluxcd/pkg/runtime from 0.91.0 to 0.92.0

Commits
  • cac5502 Merge pull request #1054 from cappyzawa/proxy-url-validation
  • e4755ca Prepare for release
  • 8a1b950 runtime/secrets: validate proxy URL scheme and length
  • c346f72 Merge pull request #1052 from fluxcd/dependabot/github_actions/ci-5da62fd8be
  • 1f716af build(deps): bump the ci group across 1 directory with 6 updates
  • See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.35.3 to 0.40.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

  • Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

  • Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

  • Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features

  • Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

    • Advantages:
      • Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load
      • Batching for high-volume logs (up to 100 items or 5s) cuts network overhead
      • Bounded memory with eviction policies
      • Improved flush behavior with context-aware flushing
  • Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).

    err := sentry.Init(sentry.ClientOptions{
      Dsn: "__DSN__",
      DisableTelemetryBuffer: true, // fallback to legacy transport
    })

Notes

  • If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

  • Behavioral change for the TraceIgnoreStatusCodes option. The option now defaults to ignoring 404 status codes (#1122).

Features

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.40.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.40.0.

Bug Fixes

  • Disable DisableTelemetryBuffer flag and noop Telemetry Buffer, to prevent a panic at runtime (#1149).

0.39.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.39.0.

Features

  • Drop events from the telemetry buffer when rate-limited or transport is full, allowing the buffer queue to empty itself under load (#1138).

Bug Fixes

  • Fix scheduler's hasWork() method to check if buffers are ready to flush. The previous implementation was causing CPU spikes (#1143).

0.38.0

Breaking Changes

Features

  • Introduce a new async envelope transport and telemetry buffer to prioritize and batch events (#1094, #1093, #1107).

    • Advantages:
      • Prioritized, per-category buffers (errors, transactions, logs, check-ins) reduce starvation and improve resilience under load
      • Batching for high-volume logs (up to 100 items or 5s) cuts network overhead
      • Bounded memory with eviction policies
      • Improved flush behavior with context-aware flushing
  • Add ClientOptions.DisableTelemetryBuffer to opt out and fall back to the legacy transport layer (HTTPTransport / HTTPSyncTransport).

    err := sentry.Init(sentry.ClientOptions{
      Dsn: "__DSN__",
      DisableTelemetryBuffer: true, // fallback to legacy transport
    })

Notes

  • If a custom Transport is provided, the SDK automatically disables the telemetry buffer and uses the legacy transport for compatibility.

0.37.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.37.0.

Breaking Changes

... (truncated)

Commits

Updates github.com/ktrysmt/go-bitbucket from 0.9.87 to 0.9.88

Release notes

Sourced from github.com/ktrysmt/go-bitbucket's releases.

v0.9.88

Commits
  • c7bddf1 fix: replace log.Fatal with proper error returns in client constructors (#327)
  • 978aad8 Bump golang.org/x/oauth2 from 0.30.0 to 0.33.0 (#324)
  • 46cb7d2 Bump golang.org/x/net from 0.41.0 to 0.43.0 (#315)
  • See full diff in compare view

Updates github.com/nats-io/nats.go from 1.46.1 to 1.48.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.48.0

Changelog

ADDED

  • Core NATS:
    • Add publish subject validation and a connection option to skip it (#1974, #1979)
  • KeyValue:
    • Enable custom subject transforms on KV sourcing (#1960)

FIXED

  • JetStream:
    • Fix function pointer check in js.apiRequestWithContext. Thanks @​svenfoo for the contribution (#1957)
    • Use QueueSubscribe if DeliverGroup is configured on PushConsumer (#1966)
  • KeyValue:
    • Fix data race when closing watcher updates channel in kv.go (#1965)

IMPROVED

  • Remove extraneous PullThresholdMessages type definition from README. Thanks @​PeterBParker for the contribution (#1959)
  • Fix typo in README for service creation method (#1962)
  • Mention performance implications of using Consumer.Fetch in docs (#1983)

Complete Changes

nats-io/nats.go@v1.47.0...v1.48.0

Release v1.47.0

Changelog

ADDED

  • Core NATS:
    • Support sending custom WebSocket headers on connect. Thanks @​saurabhojha for the contribution (#1919)

FIXED

  • Core NATS:
    • Capture async callbacks before pushing on dispatch queue (#1955)
  • Object Store:
    • Fixed data race when cancelling context while getting object (#1949)
  • JetStream:
    • Fixed double channel close on simultaneous Stop and Drain (#1953)

IMPROVED

  • Clarify MessagesContext.Next() doc (#1951)

Complete Changes

nats-io/nats.go@v1.46.1...v1.47.0

Commits
  • a0e7b70 Release v1.48.0 (#1984)
  • 3ad4204 [IMPROVED] Mention performance in Fetch docs (#1983)
  • 34d93ec [ADDED] Enable using non-kv streams as KV sources (#1960)
  • 7bb976d [IMPROVED] Re-add subject validation (#1979)
  • a2b6c93 [IMPROVED] Fix typo in README for service creation method (#1962)
  • 97bfc32 [IMPROVED] Add publish subject validation (#1974)
  • 1949406 [FIXED] Fix data race when closing watcher updates channel in kv.go (#1965)
  • bc57480 [FIXED] Use QueueSubscribe if DeliverGroup is configured on PushConsumer (#1966)
  • 4ec2f44 [FIXED] Fix function pointer check in js.apiRequestWithContext() (#1957)
  • 93fcbd0 Remove extraneous PullThresholdMessages type definition (#1959)
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.38.2 to 1.38.3

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

Commits
  • a3ca2ca v1.38.3
  • 4dada36 fix failing have http tests
  • d40c691 make string formatitng more consistent for users who use format.Object directly
  • 2a37b46 doc: fix typos
  • ee26170 docs: fix HaveValue example
  • cc85c05 Bump actions/setup-go from 5 to 6 (#866)
  • 8905788 Bump github.com/onsi/ginkgo/v2 from 2.25.1 to 2.25.3 (#865)
  • 67552c5 chore: apply fixes from Go modernize command
  • See full diff in compare view

Updates github.com/sethvargo/go-limiter from 1.0.0 to 1.1.0

Release notes

Sourced from github.com/sethvargo/go-limiter's releases.

v1.1.0

What's Changed

New Contributors

Full Changelog: sethvargo/go-limiter@v1.0.0...v1.1.0

Commits

Updates gitlab.com/gitlab-org/api/client-go from 0.147.0 to 1.10.0

Release notes

Sourced from gitlab.com/gitlab-org/api/client-go's releases.

v1.10.0

1.10.0

🚀 Features

🔄 Other Changes

1.10.0 (2025-12-19)

Features

  • implement Runner Controller API (66f19f4)

v1.9.1

1.9.1

🐛 Bug Fixes

🔄 Other Changes

1.9.1 (2025-12-17)

Bug Fixes

  • use parameters in config.NewClient and Jobs.DownloadArtifactsFile (28b7cd7)

v1.9.0

1.9.0

🚀 Features

... (truncated)

Changelog

Sourced from gitlab.com/gitlab-org/api/client-go's changelog.

1.10.0

🚀 Features

🔄 Other Changes

1.10.0 (2025-12-19)

Features

  • implement Runner Controller API (66f19f4)

1.9.1

🐛 Bug Fixes

🔄 Other Changes

1.9.1 (2025-12-17)

Bug Fixes

  • use parameters in config.NewClient and Jobs.DownloadArtifactsFile (28b7cd7)

1.9.0

🚀 Features

1.9.0 (2025-12-16)

... (truncated)

Commits
  • dd8a488 chore(release): 1.10.0 [skip ci]
  • 1e97591 Merge branch 'duo/feature/2190-implement-runner-controller-api' into 'main'
  • 66f19f4 feat: implement Runner Controller API
  • ed6c2ec Merge branch 'renovate/github.com-godbus-dbus-v5-5.x' into 'main'
  • f0bfef4 chore(deps): update module github.com/godbus/dbus/v5 to v5.2.1
  • 5d6c6f6 chore(release): 1.9.1 [skip ci]
  • e23ea4a Merge branch 'fix/unused-parameters' into 'main'
  • 28b7cd7 fix: use parameters in config.NewClient and Jobs.DownloadArtifactsFile
  • 3038a18 Merge branch 'fix/TestCreateMergeRequestContextCommits' into 'main'
  • 5d7f7df test: fix TestCreateMergeRequestContextCommits failing locally
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.38.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

  • Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)
  • Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)
  • Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)
  • Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)
  • Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)
  • Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)
  • Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)
  • Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)
  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)
  • Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)
  • The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

  • Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)
  • Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)
  • Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)
  • Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)
  • Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)
  • The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)
  • Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)
  • Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)
  • The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

  • Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)
  • The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits
  • 6ce1429 Release v1.39.0 (#7676)
  • 12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
  • 5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
  • 9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
  • ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
  • 9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
  • d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
  • 61765e7 Fix flaky TestClientInstrumentation (#7677)
  • a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
  • 746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.38.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

  • Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)
  • Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)
  • Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)
  • Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)
  • Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)
  • Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)
  • Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)
  • Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)
  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)
  • Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)
  • The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

  • Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)
  • WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)
  • Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)
  • Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)
  • Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus. ⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)
  • Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)
  • The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)
  • Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)
  • Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)
  • The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

  • Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)
  • The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits
  • 6ce1429 Release v1.39.0 (#7676)
  • 12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
  • 5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
  • 9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
  • ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
  • 9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
  • d03b033 Check context prior to delaying retry in OTLP exporters (

Bumps the go-deps group with 15 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/DataDog/datadog-api-client-go/v2](https://github.com/DataDog/datadog-api-client-go) | `2.43.0` | `2.52.0` |
| [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `0.36.0-flux.15` | `0.37.0-flux.1` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.91.0` | `0.92.0` |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.35.3` | `0.40.0` |
| [github.com/ktrysmt/go-bitbucket](https://github.com/ktrysmt/go-bitbucket) | `0.9.87` | `0.9.88` |
| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.46.1` | `1.48.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.38.2` | `1.38.3` |
| [github.com/sethvargo/go-limiter](https://github.com/sethvargo/go-limiter) | `1.0.0` | `1.1.0` |
| [gitlab.com/gitlab-org/api/client-go](https://gitlab.com/gitlab-org/api/client-go) | `0.147.0` | `1.10.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.33.0` | `0.34.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.31.0` | `0.32.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.256.0` | `0.258.0` |



Updates `github.com/DataDog/datadog-api-client-go/v2` from 2.43.0 to 2.52.0
- [Release notes](https://github.com/DataDog/datadog-api-client-go/releases)
- [Changelog](https://github.com/DataDog/datadog-api-client-go/blob/master/CHANGELOG.md)
- [Commits](DataDog/datadog-api-client-go@v2.43.0...v2.52.0)

Updates `github.com/fluxcd/cli-utils` from 0.36.0-flux.15 to 0.37.0-flux.1
- [Commits](fluxcd/cli-utils@v0.36.0-flux.15...v0.37.0-flux.1)

Updates `github.com/fluxcd/pkg/runtime` from 0.91.0 to 0.92.0
- [Commits](fluxcd/pkg@runtime/v0.91.0...runtime/v0.92.0)

Updates `github.com/getsentry/sentry-go` from 0.35.3 to 0.40.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.35.3...v0.40.0)

Updates `github.com/ktrysmt/go-bitbucket` from 0.9.87 to 0.9.88
- [Release notes](https://github.com/ktrysmt/go-bitbucket/releases)
- [Commits](ktrysmt/go-bitbucket@v0.9.87...v0.9.88)

Updates `github.com/nats-io/nats.go` from 1.46.1 to 1.48.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.46.1...v1.48.0)

Updates `github.com/onsi/gomega` from 1.38.2 to 1.38.3
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.2...v1.38.3)

Updates `github.com/sethvargo/go-limiter` from 1.0.0 to 1.1.0
- [Release notes](https://github.com/sethvargo/go-limiter/releases)
- [Commits](sethvargo/go-limiter@v1.0.0...v1.1.0)

Updates `gitlab.com/gitlab-org/api/client-go` from 0.147.0 to 1.10.0
- [Release notes](https://gitlab.com/gitlab-org/api/client-go/tags)
- [Changelog](https://gitlab.com/gitlab-org/api/client-go/blob/main/CHANGELOG.md)
- [Commits](https://gitlab.com/gitlab-org/api/client-go/compare/v0.147.0...v1.10.0)

Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/trace` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `golang.org/x/oauth2` from 0.33.0 to 0.34.0
- [Commits](golang/oauth2@v0.33.0...v0.34.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

Updates `google.golang.org/api` from 0.256.0 to 0.258.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.256.0...v0.258.0)

---
updated-dependencies:
- dependency-name: github.com/DataDog/datadog-api-client-go/v2
  dependency-version: 2.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/cli-utils
  dependency-version: 0.37.0-flux.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.92.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/getsentry/sentry-go
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/ktrysmt/go-bitbucket
  dependency-version: 0.9.88
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.48.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/sethvargo/go-limiter
  dependency-version: 1.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: gitlab.com/gitlab-org/api/client-go
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: google.golang.org/api
  dependency-version: 0.258.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency label Jan 1, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant