chore(deps): bump the go-modules group with 3 updates

[dependabot]

Bumps the go-modules group with 3 updates: github.com/getsentry/sentry-go, github.com/hashicorp/consul/api and golang.org/x/net.

Updates github.com/getsentry/sentry-go from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.43.0

Breaking Changes 🛠

• Add support for go 1.26 by @​giortzisg in #1193
  • bump minimum supported go version to 1.24
• change type signature of attributes for Logs and Metrics. by @​giortzisg in #1205
  • users are not supposed to modify Attributes directly on the Log/Metric itself, but this is still is a breaking change on the type.
• Send uint64 overflowing attributes as numbers. by @​giortzisg in #1198
  • The SDK was converting overflowing uint64 attributes to strings for slog and logrus integrations. To eliminate double types for these attributes, the SDK now sends the overflowing attribute as is, and lets the server handle the overflow appropriately.
  • It is expected that overflowing unsigned integers would now get dropped, instead of converted to strings.

New Features ✨

• Add zap logging integration by @​giortzisg in #1184
• Log specific message for RequestEntityTooLarge by @​giortzisg in #1185

Bug Fixes 🐛

• Improve otel span map cleanup performance by @​giortzisg in #1200
• Ensure correct signal delivery on multi-client setups by @​giortzisg in #1190

Internal Changes 🔧

Deps

• Bump golang.org/x/crypto to 0.48.0 by @​giortzisg in #1196
• Use go1.24.0 by @​giortzisg in #1195
• Bump github.com/gofiber/fiber/v2 from 2.52.9 to 2.52.11 in /fiber by @​dependabot in #1191
• Bump getsentry/craft from 2.19.0 to 2.20.1 by @​dependabot in #1187

Other

• Add omitzero and remove custom serialization by @​giortzisg in #1197
• Rename Telemetry Processor components by @​giortzisg in #1186

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.43.0

Breaking Changes 🛠

• Add support for go 1.26 by @​giortzisg in #1193
  • bump minimum supported go version to 1.24
• change type signature of attributes for Logs and Metrics. by @​giortzisg in #1205
  • users are not supposed to modify Attributes directly on the Log/Metric itself, but this is still is a breaking change on the type.
• Send uint64 overflowing attributes as numbers. by @​giortzisg in #1198
  • The SDK was converting overflowing uint64 attributes to strings for slog and logrus integrations. To eliminate double types for these attributes, the SDK now sends the overflowing attribute as is, and lets the server handle the overflow appropriately.
  • It is expected that overflowing unsigned integers would now get dropped, instead of converted to strings.

New Features ✨

• Add zap logging integration by @​giortzisg in #1184
• Log specific message for RequestEntityTooLarge by @​giortzisg in #1185

Bug Fixes 🐛

• Improve otel span map cleanup performance by @​giortzisg in #1200
• Ensure correct signal delivery on multi-client setups by @​giortzisg in #1190

Internal Changes 🔧

Deps

• Bump golang.org/x/crypto to 0.48.0 by @​giortzisg in #1196
• Use go1.24.0 by @​giortzisg in #1195
• Bump github.com/gofiber/fiber/v2 from 2.52.9 to 2.52.11 in /fiber by @​dependabot in #1191
• Bump getsentry/craft from 2.19.0 to 2.20.1 by @​dependabot in #1187

Other

• Add omitzero and remove custom serialization by @​giortzisg in #1197
• Rename Telemetry Processor components by @​giortzisg in #1186

Commits

• 8dbf970 release: 0.43.0
• 44caaae ref!: modify Attributes type for Logs and Metrics (#1205)
• 71a7230 fix: improve otel span map cleanup performance (#1200)
• 0fe1ae5 feat: add zap logging integration (#1184)
• e1e8ceb feat!: Send uint64 overflowing attributes as numbers for slog and logrus (#1198)
• 0faba36 chore: add omitzero and remove custom serialization (#1197)
• 648d2d2 build(deps): bump golang.org/x/crypt to 0.48.0 (#1196)
• 18c50b9 fix(deps): use go1.24.0 (#1195)
• 2d5637b build(deps)!: add support for go1.26 (#1193)
• f057a8d fix: ensure correct signal delivery on multi-client setups (#1190)
• Additional commits viewable in compare view

Updates github.com/hashicorp/consul/api from 1.33.3 to 1.33.4

Commits

• 2a06921 Update submodule dependencies for api release
• 5c7eb1c Backport of increase default HTTP timeouts for blocking queries and long poll...
• 9a42780 Prepare flow fix for 1.22.x (#23264)
• f6d4f4d Backport of Fix for cache context to save cache data in entries on context ca...
• 8f5205a Backport of docs(#22739): update security note with HTTP server timeout defau...
• 53eab0d Backport of bumps: update body-parser to 2.2.1+ into release/1.22.x (#23240)
• a989831 Backport of Fix for arbitrary file reads vulnerabilities into release/1.22.x ...
• See full diff in compare view

Updates golang.org/x/net from 0.50.0 to 0.51.0

Commits

• 60b3f6f internal/http3: prevent Server handler from writing longer body than declared
• b0ca456 internal/http3: fix Write in Server Handler returning the wrong value
• 1558ba7 publicsuffix: update to 2026-02-06
• 4e1c745 internal/http3: make Server response include headers that can be inferred
• 19f580f http2: fix nil panic in typeFrameParser for unassigned frame types
• 818aad7 internal/http3: add server to client trailer header support
• c1bbe1a internal/http3: add client to server trailer header support
• 29181b8 all: remove go1.25 and older build constraints
• 8109305 all: upgrade go directive to at least 1.25.0 [generated]
• 0b37bdf quic: don't run TestStreamsCreateConcurrency in synctest bubble
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions