chore(deps): update all dependencies #178
Merged
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=80&v=4){kind=small}
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
bot
force-pushed
the
renovate/all
branch
5 times, most recently
from
5365e0d to
f22d206
Compare
renovate
bot
force-pushed
the
renovate/all
branch
8 times, most recently
from
628ee6d to
cc3ee21
Compare
renovate
bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
73c7ded to
872e8a3
Compare
renovate
bot
force-pushed
the
renovate/all
branch
9 times, most recently
from
3b03789 to
e149c32
Compare
renovate
bot
force-pushed
the
renovate/all
branch
2 times, most recently
from
a9f0a9c to
416042b
Compare
renovate
bot
force-pushed
the
renovate/all
branch
from
416042b to
4aeae26
Compare
csatib02
approved these changes
Oct 2, 2025
Signed-off-by: Bence Csati <bence.csati@axoflow.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Note
Mend has cancelled the proposed renaming of the Renovate GitHub app being renamed to
mend[bot].This notice will be removed on 2025-10-07.
This PR contains the following updates:
v4.2.4->v4.3.00.32.0->0.33.1v3.5.0->v3.6.0cdf4daa->e8a4044v2.25.1->v2.25.3v1.38.1->v1.38.2v0.131.0->v0.136.0v1.23.0->v1.23.2v1.11.0->v1.11.1v3.29.11->v3.30.5v1.38.0->v1.42.0v0.132.0->v0.136.0v1.38.0->v1.42.0v1.38.0->v1.42.0v0.132.0->v0.136.0v0.132.0->v0.136.0v1.38.0->v1.42.0v0.132.0->v0.136.02.4.0->2.5.0v0.33.4->v0.33.5v0.34.1(+1)v0.33.4->v0.33.5v0.34.1(+1)v0.33.4->v0.33.5v0.34.1(+1)0.18.0->0.19.00.95.3->0.97.1v0.21.0->v0.22.1v3.9.2->v3.10.0Release Notes
actions/cache (actions/cache)
v4.3.0Compare Source
What's Changed
v4.3.0release by @Link- in #1655New Contributors
Full Changelog: actions/cache@v4...v4.3.0
aquasecurity/trivy-action (aquasecurity/trivy-action)
v0.33.1Compare Source
What's Changed
Full Changelog: aquasecurity/trivy-action@0.33.0...0.33.1
v0.33.0Compare Source
What's Changed
New Contributors
Full Changelog: aquasecurity/trivy-action@0.32.0...0.33.0
docker/login-action (docker/login-action)
v3.6.0Compare Source
onsi/ginkgo (github.com/onsi/ginkgo/v2)
v2.25.3Compare Source
2.25.3
Fixes
f01aed1]v2.25.2Compare Source
2.25.2
Fixes
Add github output group for progress report content
Maintenance
Bump Gomega
onsi/gomega (github.com/onsi/gomega)
v1.38.2Compare Source
1.38.2
c404969]open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)
v0.136.0Compare Source
0.136.0
🧰 Bug fixes 🧰
target-allocator: Fixes the incorrect k8s version for the traffic distribution feature. (#4394)collector: Fix statefulset serviceName field change handling. (#4371)The Operator 0.129.1 introduced a new feature which allows setting the serviceName of the collector statefulset (#4041).
This feature introduced two issues:
Components
v0.135.0Compare Source
0.135.0
💡 Enhancements 💡
collector, target allocator: Add TrafficDistribution support for OpenTelemetryCollector and TargetAllocator Services (#4285)The TrafficDistribution field is now available in OpenTelemetryCollector and TargetAllocator.
This field allows setting the traffic distribution policy for Kubernetes Services.
Components
v0.134.0Compare Source
0.134.0
💡 Enhancements 💡
target allocator: Add CollectorTargetReloadInterval option to configure the interval at which the Prometheus receiver reloads targets from the target allocator (#4095)🧰 Bug fixes 🧰
collector: Always return a valid OpenTelemetryCollector configuration during v1beta1 conversion. (#4288)Components
0.133.0
operator: Skipped OpenTelemetry Operator release due to an issue on the collectors protobuf parsing that caused HTTP 400 errors for metric submissions. In case of expecitly using the collector v0.133.0 this behavior can be by passed by disabling the collector feature gatepdata.useCustomProtoEncoding.For more details see: (opentelemetry-collector#13727)[open-telemetry/opentelemetry-collector#13727]
v0.132.0Compare Source
0.132.0
🚩 Deprecations 🚩
collector: Remove opencensus receiver from parsing logic as it is no longer supported in OpenTelemetry Collector (#4239)The opencensus receiver has been removed from the operator's receiver parsing logic.
Since 2025-02-14 its no longer supported and got removed from the Collector Distributions.
💡 Enhancements 💡
collector: enable native sidecar on OpenShift 4.16+ with k8s version newer then v1.29 by default. (#4247)collector: Use native sidecar on k8s 1.29+ (#3356)The operator will automatically use native sidecars whenever a Kubernetes
version 1.29 or higher is discovered.
The usage of native sidecars can be disabled with
--feature-gates=-sidecarcontainers.native.See: https://kubernetes.io/blog/2023/08/25/native-sidecar-containers/
collector: Add network policy for the collector. (#4231)This change adds a network policy to the collector to allow traffic to all collector receivers and egress traffic from the collector pod.
The collector network policy can be enabled in the collector CR.
By default it is disabled, however the default value is configured with a feature gate
--feature-gates=operand.networkpolicy.The feature gate will be enabled in the future releases.
operator: Operator now creates a NetworkPolicy to restrict access to the operator pod. (#4230)The operator network policy can be enabled with
--feature-gates=+operator.networkpolicy.The feature gate is disabled by default and it will be enabled in the future releases.
Following APIs are allowe: ingress on port 9443 (webhook), 8080 (metrics port), 8443 (metrics RBAC proxy) and egress on port 6443 (API server).
target allocator: Add network policy for the target allocator. (#4231)This change adds a network policy to the target allocator which allows traffic to the port
8080and outgoing traffic to the API server.The target allocator network policy can be enabled in the target allocator CR.
By default it is disabled, however the default value is configured with a feature gate
--feature-gates=operand.networkpolicy.The feature gate will be enabled in the future releases.
opamp: Correlates the OpAMP data from the proxy server with the bridge's own OpAMP data. (#3837)collector: k8sattributes: Add automatic RBAC for new service.name resource attribute generator (#4131)The k8sattributes processor recently added support for automatic service.name resource attribute generation.
This change ensures that when service.name is configured in the k8sattributes processor, the operator
automatically adds the necessary RBAC rules for replicasets access, which is required for extracting
k8s.deployment.name.
🧰 Bug fixes 🧰
opamp: fixes a bug where the bridge deployment wouldn't rollout on a config change. (#4020)collector: Fix a Deployment restart issue caused when the HPA settings changed, the webhook would modify spec.replicas. (#2585)collector: Operator no longer overwrites ingress annoations on change (#4322)The operator now respects external manipulations of the Ingress object — instead of
overwriting annotations it respects existing to prevent annotation-overwrite issues
that caused reconciliation loops with external controllers (e.g., Rancher).
collector, target allocator, opamp: Remove unnecessary cert-manager CA annotation from CRDs (#4321)Remove annotation
cert-manager.io/inject-ca-fromfrom all OpenShift CRD manifests. The CRDs on OpenShift are installed via OLM which handles the CA injection.The annotation is also not needed for non-OpenShift installations on CRDs that do not have a conversion webhook.
Components
prometheus/client_golang (github.com/prometheus/client_golang)
v1.23.2: - 2025-09-05Compare Source
This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.
All Changes
Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2
v1.23.1: - 2025-09-04Compare Source
This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.
All Changes
Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1
stretchr/testify (github.com/stretchr/testify)
v1.11.1Compare Source
This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (
String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.What's Changed
Full Changelog: stretchr/testify@v1.11.0...v1.11.1
github/codeql-action (github/codeql-action)
v3.30.5Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.5 - 26 Sep 2025
3.30.4withupload-sarifwhich resulted in files without a.sarifextension not getting uploaded. #3160See the full CHANGELOG.md for more information.
v3.30.4Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.4 - 25 Sep 2025
codeql-action/initstep if different versions of the CodeQL Action are detected in the workflow file. Additionally, an error will now be thrown by the other CodeQL Action steps if they load a configuration file that was generated by a different version of thecodeql-action/initstep. #3099 and #3100tools: nightlyto theinitaction. In general, the nightly bundle is unstable and we only recommend running it when directed by GitHub staff. #3130See the full CHANGELOG.md for more information.
v3.30.3Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.3 - 10 Sep 2025
No user facing changes.
See the full CHANGELOG.md for more information.
v3.30.2Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.2 - 09 Sep 2025
quality-queriesinput that was added in3.29.2as part of an internal experiment is now deprecated and will be removed in an upcoming version of the CodeQL Action. It has been superseded by a newanalysis-kindsinput, which is part of the same internal experiment. Do not use this in production as it is subject to change at any time. #3064See the full CHANGELOG.md for more information.
v3.30.1Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.1 - 05 Sep 2025
See the full CHANGELOG.md for more information.
v3.30.0Compare Source
CodeQL Action Changelog
See the releases page for the relevant changes to the CodeQL CLI and language packs.
3.30.0 - 01 Sep 2025
See the full CHANGELOG.md for more information.
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)
v1.42.0💡 Enhancements 💡
xpdata: Add Serialization and Deserialization of AnyValue (#12826)debugexporter: add support for batching (#13791)The default queue size is 1
configtls: Add early validation for TLS server configurations to fail fast when certificates are missing instead of failing at runtime. (#13130, #13245)mdatagen: Expose stability level in generated metric documentation (#13748)internal/tools: Add support for modernize in Makefile (#13796)🧰 Bug fixes 🧰
otelcol: Fix a potential deadlock during collector shutdown. (#13740)otlpexporter: fix the validation of unix socket endpoints (#13826)v1.41.0💡 Enhancements 💡
exporterhelper: Add newexporter_queue_batch_send_sizeandexporter_queue_batch_send_size_bytesmetrics, showing the size of telemetry batches from the exporter. (#12894)v1.40.0💡 Enhancements 💡
pdata: Add custom grpc/encoding that replaces proto and calls into the custom marshal/unmarshal logic in pdata. (#13631)This change should not affect other gRPC calls since it fallbacks to the default grpc/proto encoding if requests are not pdata/otlp requests.
pdata: Avoid copying the pcommon.Map when same origin (#13731)This is a very large improvement if using OTTL with map functions since it will avoid a map copy.
exporterhelper: Respectnum_consumerswhen batching and partitioning are enabled. (#13607)🧰 Bug fixes 🧰
pdata: Correctly parse OTLP payloads containing non-packed repeated primitive fields (#13727, #13730)This bug prevented the Collector from ingesting most Histogram, ExponentialHistogram,
and Profile payloads.
v1.39.0🛑 Breaking changes 🛑
all: Increase minimum Go version to 1.24 (#13627)💡 Enhancements 💡
otlphttpexporter: Addprofiles_endpointconfiguration option to allow custom endpoint for profiles data export (#13504)The
profiles_endpointconfiguration follows the same pattern astraces_endpoint,metrics_endpoint, andlogs_endpoint.When specified, profiles data will be sent to the custom URL instead of the default
{endpoint}/v1development/profiles.pdata: Add support for local memory pooling for data objects. (#13678)This is still an early experimental (alpha) feature. Do not recommended to be used production. To enable use "--featuregate=+pdata.useProtoPooling"
pdata: Optimize CopyTo messages to avoid any copy when same source and destination (#13680)receiverhelper: New feature flag to make receiverhelper distinguish internal vs. downstream errors using newotelcol_receiver_failed_xandotelcol_receiver_requestsmetrics (#12207, #12802)This is a breaking change for the semantics of the otelcol_receiver_refused_metric_points, otelcol_receiver_refused_log_records and otelcol_receiver_refused_spans metrics.
These new metrics and semantics are enabled through the
receiverhelper.newReceiverMetricsfeature gate.debugexporter: Add support for entity references in debug exporter output (#13324)pdata: Fix unnecessary allocation of a new state when adding new values to pcommon.Map (#13634)service: Implement refcounting for pipeline data owned memory. (#13631)This feature is protected by
--featuregate=+pdata.useProtoPooling.service: Add a debug-level log message when a consumer returns an error. (#13357)xpdata: Optimize xpdata/context for persistent queue when only one value for key (#13636)otlpreceiver: Log the listening addresses of the receiver, rather than the configured endpoints. (#13654)pdata: Use the newly added proto marshaler/unmarshaler for the official proto Marshaler/Unmarshaler (#13637)If any problems observed with this consider to disable the featuregate
--feature-gates=-pdata.useCustomProtoEncodingconfigtls: Enable X25519MLKEM768 as per draft-ietf-tls-ecdhe-mlkem (#13670)🧰 Bug fixes 🧰
exporterhelper: Prevent uncontrolled goroutines in batcher due to a incorrect worker pool behaviour. (#13689)service: Ensure the insecure configuration is accounted for when normalizing the endpoint. (#13691)configoptional: Allow validating nested types (#13579)configoptional.Optionalnow implementsxconfmap.Validatorbatchprocessor: Fix UB in batch processor when trying to read bytes size after adding request to pipeline (#13698)This bug only happens id detailed metrics are enabled and also an async (sending queue enabled) exporter that mutates data is configure.
golangci/golangci-lint (golangci/golangci-lint)
v2.5.0Compare Source
godoclintlinter https://github.com/godoc-lint/godoc-lintunqueryvetlinter https://github.com/MirrexOne/unqueryvetiotamixinglinter https://github.com/AdminBenni/iota-mixingembeddedstructfieldcheck: from 0.3.0 to 0.4.0 (new option:empty-line)err113: fromaea10b5to 0.1.1 (skip internals ofIsmethods forerrortype)ginkgolinter: from 0.20.0 to 0.21.0 (new option:force-tonot)gofumpt: from 0.8.0 to 0.9.1 (new rule is to "clothe" naked returns for the sake of clarity)ineffassign: from 0.1.0 to 0.2.0 (new option:check-escaping-errors)musttag: from 0.13.1 to 0.14.0 (support interface methods)revive: from 1.11.0 to 1.12.0 (new options:identical-ifelseif-branches,identical-ifelseif-conditions,identical-switch-branches,identical-switch-conditions,package-directory-mismatch,unsecure-url-scheme,use-waitgroup-go,useless-fallthrough)thelper: from 0.6.3 to 0.7.1 (skipt.Helperin functions passed tosynctest.Test)wsl: from 5.1.1 to 5.2.0 (improvements related to subexpressions)asciicheck: from 0.4.1 to 0.5.0errname: from 1.1.0 to 1.1.1fatcontext: from 0.8.0 to 0.8.1go-printf-func-name: from 0.1.0 to 0.1.1godot: from 1.5.1 to 1.5.4gosec: from 2.22.7 to 2.22.8nilerr: from 0.1.1 to a temporary forknilnil: from 1.1.0 to 1.1.1protogetter: from 0.3.15 to 0.3.16tagliatelle: from 0.7.1 to 0.7.2testifylint: from 1.6.1 to 1.6.4kubernetes/api (k8s.io/api)
v0.33.5Compare Source
kubernetes/apimachinery (k8s.io/apimachinery)
v0.33.5Compare Source
kubernetes/client-go (k8s.io/client-go)
v0.33.5Compare Source
kubernetes-sigs/controller-tools (kubernetes-sigs/controller-tools)
v0.19.0Compare Source
What's Changed
Misc
.golangci.yamlfrom controller-runtime by @dongjiang1989 in #1249envtest
Dependency bumps
Configuration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.