chore(deps): bump the go_modules group across 1 directory with 2 updates by dependabot[bot] · Pull Request #667 · launchdarkly/observability-sdk

dependabot · 2026-07-03T17:13:02Z

Bumps the go_modules group with 1 update in the /e2e/nextjs/go-service directory: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp.

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.54.0 to 0.55.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)

Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)

Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)

Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)

Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits

9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
5e363de limit response body size for OTLP HTTP exporters (#8108)
35214b6 Use an absolute path when calling bsd kenv (#8113)
290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
e70658e fix: support getBody in otelploghttp (#8096)
4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
Additional commits viewable in compare view

Updates golang.org/x/net from 0.51.0 to 0.52.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)

Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)

Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)

Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)

Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits

9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
5e363de limit response body size for OTLP HTTP exporters (#8108)
35214b6 Use an absolute path when calling bsd kenv (#8113)
290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
e70658e fix: support getBody in otelploghttp (#8096)
4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
Additional commits viewable in compare view

Updates golang.org/x/net from 0.51.0 to 0.52.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)

Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)

Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)

Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)

Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits

9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
5e363de limit response body size for OTLP HTTP exporters (#8108)
35214b6 Use an absolute path when calling bsd kenv (#8113)
290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
e70658e fix: support getBody in otelploghttp (#8096)
4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
Additional commits viewable in compare view

Updates golang.org/x/net from 0.51.0 to 0.52.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates golang.org/x/net from 0.51.0 to 0.52.0

Commits

7770ec4 go.mod: update golang.org/x dependencies
4ece7b6 html: escape greater-than symbol in doctype identifiers
08be507 html: improve Noah's Ark clause performance
a8fb2fe html: properly render fostered elements in foreign content
0dc5b7a html: properly check namespace in "in body" any other end tag
a452f3c html: ignore duplicate attributes during tokenization
f865199 quic: fix appendMaxDataFrame erroneously accumulating sentLimit
210ed3c quic: establish a "happened-before" relationship between stream write and read
ad8140e quic: fix buffer slicing when handling overlapping stream data
23ee2ef http2: avoid API changes when built with go1.27
See full diff in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.24.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty val...
Description has been truncated

[!NOTE]
Low Risk
Lockfile-only dependency upgrades with no logic changes; main validation is that e2e and SDK tests still pass against the new OTel/gRPC stack.

Overview
Bumps Go module lockfiles across the observability SDK (go/), Highlight Go SDK (sdk/highlight-go/), and several e2e apps—no application source changes.

Most modules move the OpenTelemetry stack from 1.43.0 → 1.44.0 (including OTLP trace exporters), plus aligned bumps for grpc-gateway/v2 (2.28.0 → 2.29.0 where applicable), golang.org/x/net (0.54.0 → 0.55.0), google.golang.org/grpc (patch to 1.81.1), and newer genproto pins. The root SDK module also refreshes golang.org/x/sys and golang.org/x/text.

e2e/nextjs/go-service gets a larger indirect refresh (e.g. cenkalti/backoff v5, OTLP HTTP exporters 1.24.0 → 1.43.0, otlp proto 1.10.0) while its direct otel requires stay at 1.43.0 in this diff.

^{Reviewed by Cursor Bugbot for commit 888b37f. Bugbot is set up for automated code reviews on this repo. Configure here.}

@kparkinson-ld

## Summary Remediates 21 critical Dependabot alerts (the recent SSH/x/crypto CVE cluster, patched in 0.52.0) across the three Go modules that carry the vulnerable `golang.org/x/crypto` (all indirect): ``` e2e/go-plugin/go.mod: golang.org/x/crypto v0.49.0 → v0.52.0 e2e/go/go.mod: golang.org/x/crypto v0.49.0 → v0.52.0 sdk/highlight-go/go.mod: golang.org/x/crypto v0.49.0 → v0.52.0 ``` `go mod tidy` also carried the required transitive bumps (`x/net 0.52→0.54`, `x/sys 0.42→0.45`, `x/text 0.35→0.37`). The `go` directive stays at **1.25.0** in every module (0.52.0 needs Go ≥1.25, already satisfied) — no toolchain cascade. Manifest/lockfile changes only, no source changes. No existing PR fully covered this — the closest (Dependabot #667) only reached x/crypto 0.51.0, which does **not** satisfy the advisory (needs ≥0.52.0). ## How did you test this change? Per module: `go build ./...` and `go vet ./...` pass for `e2e/go-plugin` and `sdk/highlight-go`. In `e2e/go`, the individual example apps compile; `go build ./...` reports a pre-existing `main redeclared` (echo.go/fiber.go share a package), which exists on `main` and is unrelated to this bump. ## Are there any deployment considerations? No. Dependency/lockfile bumps only; no migrations or data changes. Link to Devin session: https://app.devin.ai/sessions/80cb21c20f43409c867eef56680a601b Requested by: @kparkinson-ld  --- > [!NOTE] > **Low Risk** > Lockfile-only dependency bumps with no runtime code changes; risk is limited to transitive crypto/network library behavior in e2e and SDK builds. > > **Overview** > Bumps **indirect** `golang.org/x/crypto` from **v0.49.0** to **v0.52.0** in `e2e/go-plugin`, `e2e/go`, and `sdk/highlight-go`, with matching `go.sum` updates, to address Dependabot/CVE advisories that require ≥0.52.0. > > `go mod tidy` also refreshes related transitive pins: `golang.org/x/net` (0.52→0.54), `x/sys` (0.42→0.45), and `x/text` (0.35→0.37). **No application source changes**—only module manifests and lockfiles. > > <sup>Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 5ff9d98. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).</sup>  Co-authored-by: Devin AI <devin-ai-integration[bot]@users.noreply.github.com>

Bumps the go_modules group with 1 update in the /e2e/nextjs/go-service directory: [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go). Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.24.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.43.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.24.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.43.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.24.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.43.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.24.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.43.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.24.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.43.0) Updates `golang.org/x/net` from 0.51.0 to 0.52.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.52.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.52.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.52.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.52.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.52.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) Updates `golang.org/x/net` from 0.54.0 to 0.55.0 - [Commits](golang/net@v0.54.0...v0.55.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.43.0 dependency-type: indirect - dependency-name: golang.org/x/net dependency-version: 0.52.0 dependency-type: indirect - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect - dependency-name: golang.org/x/net dependency-version: 0.55.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 3, 2026

dependabot Bot requested a review from a team as a code owner July 3, 2026 17:13

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 3, 2026

kparkinson-ld mentioned this pull request Jul 9, 2026

chore(deps): bump golang.org/x/crypto to v0.52.0 #672

Merged

dependabot Bot force-pushed the dependabot/go_modules/e2e/go/go_modules-241da90fb2 branch from 2019afc to 888b37f Compare July 10, 2026 01:46

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go_modules group across 1 directory with 2 updates#667

chore(deps): bump the go_modules group across 1 directory with 2 updates#667
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/e2e/go/go_modules-241da90fb2

dependabot Bot commented on behalf of github Jul 3, 2026 •

edited by cursor Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 3, 2026 • edited by cursor Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

Deprecated

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

Deprecated

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

Deprecated

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 3, 2026 •

edited by cursor Bot

Loading