fix(deps): Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY]#22497
Conversation
ℹ️ Artifact update noticeFile name: plugins/destination/azblob/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/bigquery/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/clickhouse/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/duckdb/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/elasticsearch/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/file/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/firehose/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/gcs/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/gremlin/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/kafka/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/meilisearch/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/mongodb/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/mssql/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/mysql/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/neo4j/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/postgresql/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/s3/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/snowflake/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/sqlite/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/destination/test/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/source/hackernews/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/source/test/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/source/xkcd/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/transformer/basic/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/transformer/jsonflattener/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: plugins/transformer/test/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/azblob |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/bigquery |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/clickhouse |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/duckdb |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/elasticsearch |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/file |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/firehose |
|
/gen sha=e0c1cd98ccd0294cde147f10ead80e082b2dbbb2 dir=plugins/destination/gcs |
🤖 I have created a release *beep* *boop* --- ## [2.8.36](plugins-destination-test-v2.8.35...plugins-destination-test-v2.8.36) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.7.7](plugins-destination-kafka-v5.7.6...plugins-destination-kafka-v5.7.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [3.0.4](plugins-destination-meilisearch-v3.0.3...plugins-destination-meilisearch-v3.0.4) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [8.14.7](plugins-destination-postgresql-v8.14.6...plugins-destination-postgresql-v8.14.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [2.1.18](plugins-transformer-jsonflattener-v2.1.17...plugins-transformer-jsonflattener-v2.1.18) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [2.14.7](plugins-destination-sqlite-v2.14.6...plugins-destination-sqlite-v2.14.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [3.9.7](plugins-source-hackernews-v3.9.6...plugins-source-hackernews-v3.9.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [2.6.20](plugins-transformer-basic-v2.6.19...plugins-transformer-basic-v2.6.20) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.3.8](plugins-destination-mssql-v5.3.7...plugins-destination-mssql-v5.3.8) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [4.8.18](plugins-source-test-v4.8.17...plugins-source-test-v4.8.18) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.6.7](plugins-destination-mysql-v5.6.6...plugins-destination-mysql-v5.6.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.5.7](plugins-destination-neo4j-v5.5.6...plugins-destination-neo4j-v5.5.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [1.5.39](plugins-source-xkcd-v1.5.38...plugins-source-xkcd-v1.5.39) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [1.1.36](plugins-transformer-test-v1.1.35...plugins-transformer-test-v1.1.36) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [8.2.1](plugins-destination-clickhouse-v8.2.0...plugins-destination-clickhouse-v8.2.1) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [4.0.2](plugins-destination-elasticsearch-v4.0.1...plugins-destination-elasticsearch-v4.0.2) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [4.7.8](plugins-destination-bigquery-v4.7.7...plugins-destination-bigquery-v4.7.8) (2026-04-15) ### Bug Fixes * **deps:** Update module cloud.google.com/go/bigquery to v1.75.0 ([#22523](#22523)) ([477d7d8](477d7d8)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) * **deps:** Update module google.golang.org/api to v0.273.0 ([#22476](#22476)) ([826e24f](826e24f)) * **deps:** Update module google.golang.org/api to v0.274.0 ([#22524](#22524)) ([f5067c6](f5067c6)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [6.3.7](plugins-destination-duckdb-v6.3.6...plugins-destination-duckdb-v6.3.7) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [7.10.10](plugins-destination-s3-v7.10.9...plugins-destination-s3-v7.10.10) (2026-04-15) ### Bug Fixes * **deps:** Update aws-sdk-go-v2 monorepo ([#22475](#22475)) ([c9cb3cf](c9cb3cf)) * **deps:** Update aws-sdk-go-v2 monorepo ([#22519](#22519)) ([ab37fc2](ab37fc2)) * **deps:** Update module github.com/aws/smithy-go to v1.24.3 ([#22522](#22522)) ([b86973d](b86973d)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.2.7](plugins-destination-snowflake-v5.2.6...plugins-destination-snowflake-v5.2.7) (2026-04-15) ### Bug Fixes * **deps:** Update module github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream to v1.7.8 [SECURITY] ([#22493](#22493)) ([bfc0e61](bfc0e61)) * **deps:** Update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.97.3 [SECURITY] ([#22494](#22494)) ([605bf84](605bf84)) * **deps:** Update module github.com/snowflakedb/gosnowflake to v2 ([#22439](#22439)) ([5417c8e](5417c8e)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [2.8.8](plugins-destination-firehose-v2.8.7...plugins-destination-firehose-v2.8.8) (2026-04-15) ### Bug Fixes * **deps:** Update aws-sdk-go-v2 monorepo ([#22472](#22472)) ([8d5c016](8d5c016)) * **deps:** Update module github.com/aws/aws-sdk-go-v2/config to v1.32.14 ([#22520](#22520)) ([56296bb](56296bb)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [2.8.2](plugins-destination-gremlin-v2.8.1...plugins-destination-gremlin-v2.8.2) (2026-04-15) ### Bug Fixes * **deps:** Update aws-sdk-go-v2 monorepo ([#22473](#22473)) ([8d1340d](8d1340d)) * **deps:** Update module github.com/aws/aws-sdk-go-v2/config to v1.32.14 ([#22521](#22521)) ([21cb00b](21cb00b)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [3.0.3](plugins-destination-mongodb-v3.0.2...plugins-destination-mongodb-v3.0.3) (2026-04-15) ### Bug Fixes * **deps:** Update aws-sdk-go-v2 monorepo ([#22474](#22474)) ([edab21c](edab21c)) * **deps:** Update aws-sdk-go-v2 monorepo ([#22518](#22518)) ([4c835e4](4c835e4)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [4.5.8](plugins-destination-azblob-v4.5.7...plugins-destination-azblob-v4.5.8) (2026-04-15) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.5.8](plugins-destination-gcs-v5.5.7...plugins-destination-gcs-v5.5.8) (2026-04-15) ### Bug Fixes * **deps:** Update module github.com/go-jose/go-jose/v4 to v4.1.4 [SECURITY] ([#22467](#22467)) ([5ea6f26](5ea6f26)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) * **deps:** Update module google.golang.org/api to v0.273.0 ([#22477](#22477)) ([8fd4bea](8fd4bea)) * **deps:** Update module google.golang.org/api to v0.274.0 ([#22525](#22525)) ([b6d8afa](b6d8afa)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
🤖 I have created a release *beep* *boop* --- ## [5.5.7](plugins-destination-file-v5.5.6...plugins-destination-file-v5.5.7) (2026-04-16) ### Bug Fixes * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] ([#22495](#22495)) ([c0a38fd](c0a38fd)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] ([#22496](#22496)) ([1cf6439](1cf6439)) * **deps:** Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] ([#22497](#22497)) ([122ba44](122ba44)) --- This PR was generated with [Release Please](https://github.com/googleapis/release-please). See [documentation](https://github.com/googleapis/release-please#release-please).
This PR contains the following updates:
v1.42.0→v1.43.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
GitHub Vulnerability Alerts
CVE-2026-39882
overview:
this report shows that the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory
bytes.Bufferwithout a size cap.this is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can mitm the exporter connection).
severity
HIGH
not claiming: this is a remote dos against every default deployment.
claiming: if the exporter sends traces to an untrusted collector endpoint (or over a network segment where mitm is realistic), that endpoint can crash the process via a large response body.
callsite (pinned):
permalinks (pinned):
root cause:
each exporter client reads
resp.Bodyusingio.Copy(&respData, resp.Body)into abytes.Bufferon both success and error paths, with no upper bound.impact:
a malicious collector can force large transient heap allocations during export (peak memory scales with attacker-chosen response size) and can potentially crash the instrumented process (oom).
affected component:
repro (local-only):
unzip poc.zip -d poc cd poc make canonical resp_bytes=33554432 chunk_delay_ms=0expected output contains:
control (same env, patched target):
unzip poc.zip -d poc cd poc make control resp_bytes=33554432 chunk_delay_ms=0expected control output contains:
attachments: poc.zip (attached)
PR_DESCRIPTION.md
attack_scenario.md
poc.zip
Fixed in: https://github.com/open-telemetry/opentelemetry-go/pull/8108
Release Notes
open-telemetry/opentelemetry-go (go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp)
v1.43.0: /v0.65.0/v0.19.0Compare Source
Added
IsRandomandWithRandomonTraceFlags, andIsRandomonSpanContextingo.opentelemetry.io/otel/tracefor W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
WithServiceingo.opentelemetry.io/otel/sdk/resource. (#7642)DefaultWithContextandEnvironmentWithContextingo.opentelemetry.io/otel/sdk/resourceto support plumbingcontext.Contextthrough default and environment detectors. (#8051)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)attribute.EMPTY) ingo.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)go.opentelemetry.io/otel/sdk/metric.Set
OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=trueto enable. (#8060)WithCardinalityLimitSelectorfor metric reader for configuring cardinality limits specific to the instrument kind. (#7855)Changed
EMPTYType ingo.opentelemetry.io/otel/attributeto reflect that an empty value is now a valid value, withINVALIDremaining as a deprecated alias ofEMPTY. (#8038)go.opentelemetry.io/otel/attributeto optimize short slice values with fixed-size fast paths. (#8039)go.opentelemetry.io/otel/sdk/traceby returning early if self-observability is not enabled. (#8067)go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)Deprecated
INVALIDingo.opentelemetry.io/otel/attribute. UseEMPTYinstead. (#8038)Fixed
TraceIdRatioBaseddescription. This is a breaking behavioral change, but it is necessary tomake the implementation spec-compliant. (#8027)
go.opentelemetry.io/otel/sdk/metricwhere the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpto mitigate excessive memory usage caused by a misconfigured or malicious server.Responses exceeding the limit are treated as non-retryable errors. (#8108)
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttpto mitigate excessive memory usage caused by a misconfigured or malicious server.Responses exceeding the limit are treated as non-retryable errors. (#8108)
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttpto mitigate excessive memory usage caused by a misconfigured or malicious server.Responses exceeding the limit are treated as non-retryable errors. (#8108)
WithHostIDdetector ingo.opentelemetry.io/otel/sdk/resourceto use full path forkenvcommand on BSD. (#8113)request.GetBodyingo.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttpto correctly handle HTTP2 GOAWAY frame. (#8096)What's Changed
190d7d4by @renovate[bot] in #8013a57be14by @renovate[bot] in #80318895462by @renovate[bot] in #80366e66a94by @renovate[bot] in #804384a4fc4by @renovate[bot] in #8048b7b2c7bby @renovate[bot] in #8044befce8dby @renovate[bot] in #8053c2dfcecby @renovate[bot] in #8055dec52c4by @renovate[bot] in #8063744bfb5by @renovate[bot] in #8064internal/observpackage to stdoutlog by @yumosx in #7735de6f1ccby @renovate[bot] in #8082d00831aby @renovate[bot] in #8078b6b0c46by @renovate[bot] in #8076d5a96adby @renovate[bot] in #81129d38bb4by @renovate[bot] in #8117c99c5cfby @renovate[bot] in #8122New Contributors
Full Changelog: open-telemetry/opentelemetry-go@v1.42.0...v1.43.0
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Renovate Bot.