Skip to content

deps: bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0#40

Merged
felixgeelhaar merged 1 commit into
mainfrom
dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0
May 9, 2026
Merged

deps: bump go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0#40
felixgeelhaar merged 1 commit into
mainfrom
dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Apr 8, 2026

Copy link
Copy Markdown
Contributor

Bumps go.opentelemetry.io/otel/sdk from 1.42.0 to 1.43.0.

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)
Commits
  • 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
  • 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
  • 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
  • 5e363de limit response body size for OTLP HTTP exporters (#8108)
  • 35214b6 Use an absolute path when calling bsd kenv (#8113)
  • 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
  • e70658e fix: support getBody in otelploghttp (#8096)
  • 4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
  • b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
  • 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.42.0 to 1.43.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 8, 2026
@felixgeelhaar felixgeelhaar merged commit 988ee53 into main May 9, 2026
3 of 4 checks passed
@felixgeelhaar felixgeelhaar deleted the dependabot/go_modules/go.opentelemetry.io/otel/sdk-1.43.0 branch May 9, 2026 15:04
felixgeelhaar added a commit that referenced this pull request May 9, 2026
Two competitor-issue counter-tests that lock in differentiation:

- cancellation_recovery_test.go targets the looplab/fsm #115 pattern
  (cancelled context leaves FSM in InTransitionError limbo with no
  recovery). statekit doesn't tie an external context.Context to the
  Send path; the analog is service errors routed via OnError. Test
  asserts the interpreter cleanly recovers and continues processing
  events — the assertion looplab cannot make.

- snapshot_serialization_test.go targets looplab/fsm #40 (FSM type
  has no exported fields, blocking gob persistence). Verifies
  Snapshot[C] round-trips through both encoding/json and encoding/gob,
  then Restore()s into a fresh interpreter that resumes work
  identically.

Both tests double as regression guards and as documented public
guarantees.

Source: ICP signal sweep — direct verbatim quotes from the two top
open issues across the incumbent Go FSM libraries.
felixgeelhaar added a commit that referenced this pull request May 9, 2026
ICP signal sweep findings (verbatim quotes from competitor open issues)
informed two new README sections above the "Why" block:

- "Two jobs" — explicit narrative thread linking the backend wedge
  (Stripe webhook saga example) with the AI wedge (llm_agent + ai +
  aiplugin). Same primitives, two adjacent shapes. Vellum's 2026
  industry articulation matches statekit's narrative directly.
- "Coming from another FSM library?" — addresses the verbatim pain
  documented in looplab/fsm #40 (unexported persistence), looplab/fsm
  #115 (stuck-transition after context cancellation), qmuntal/stateless
  #98/#99 (OnEntry hierarchy bugs). Each callout links the
  counter-test that locks in the differentiation, plus the existing
  migration guides.

Reframes Stately compatibility from positioning identity to feature:
"XState v5 export for Stately Studio round-trip editing" instead of
the previous "Stately.ai-compatible JSON" framing — the "XState for
Go" naming space is already occupied by dstotijn/go-xstate and
CorrectRoadH/XState-For-Golang.

Source: ICP signal sweep across HN, /r/golang, GitHub issues on
looplab/fsm + qmuntal/stateless, and 2026 agentic-runtime landscape.
felixgeelhaar added a commit that referenced this pull request May 9, 2026
README fixes:
- Bump Go requirement 1.24 → 1.25 (matches go.mod).
- Standardize on `defer interp.Close()` everywhere (was mixed
  Stop/Close/none across Quick Start, hierarchical, delayed,
  parallel examples).
- Refresh "Additional Packages" table — adds ai, aiplugin, mcp tier
  notes, replaces "XState JSON exporter" with "Native + XState v5
  JSON exporters", points generate at Native JSON.
- Refresh "Design Philosophy" bullets — drops the "XState
  compatibility for free tooling" framing (taken naming space) in
  favor of statecharts + visualization + determinism + tier model.
- Add MCP server "Inverting the loop" callout for the v1.4.0
  ExposeInterpreter helper.

Migration guides:
- looplab/fsm guide adds explicit callouts to issues #40 (snapshot
  serialization) and #115 (cancellation recovery), plus a
  TransitionBudget reference.
- qmuntal/stateless guide adds TransitionBudget reference for the
  runaway-halt pattern (#77).

No code changes; tests still 33/33 green.
felixgeelhaar added a commit that referenced this pull request May 9, 2026
Replaces the visualizer-as-homepage that all four expert reviews
flagged as the top issue (wrong category framing, zero conversion
path, no positioning).

New /:
- Hero with concrete-pain headline + 10-line code sample
- "Why Statekit" 6-card grid lifted from README positioning
- Comparison table vs looplab/fsm + qmuntal/stateless with direct
  links to the three open issues that informed v1.4.1 (#40, #115,
  #77)
- "Two jobs, one library" — backend wedge (Stripe webhook) + AI
  wedge (llm_agent)
- Migration callouts to all three guides
- Three CTAs: Read docs / Try visualizer / Star on GitHub

New /play:
- Existing Visualizer.vue mounted, header marks Play active
- README's "Live Visualizer" link updated to /play

Layout.astro now accepts title/description/canonical/ogImage props
and emits Open Graph + Twitter Card + canonical + JSON-LD
(SoftwareSourceCode) per page.

Header.astro grew a primary nav (Home / Play / Docs) with active
state, focus-visible styling, and ARIA labels on icon buttons.
Shortcuts button now only renders on /play (where it has a target).

Public assets:
- og-card.svg — branded OG image
- robots.txt + sitemap.xml — both reference the canonical URL

Accessibility (UX review fixes):
- Global :focus-visible rule (was outline:none across .btn family)
- @media (prefers-reduced-motion: reduce) collapses animations
- --text-secondary 8b949e → adbac7 and --text-muted 484f58 → 7d8590
  for ≥4.5:1 contrast against --bg-primary #0a0e14
- aria-label / role="img" on Header SVGs and icon-only buttons
- Mobile breakpoint hides nav cleanly at <720px

Source: 4-expert website review (UX/GTM/Product/Frontend) — top
consensus actions across all four dimensions.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant