Repository navigation
chore(deps): update all dependencies - #227
Open
renovate[bot] wants to merge 1 commit into
Open
renovate[bot] wants to merge 1 commit into
renovate[bot] wants to merge 1 commit into
Conversation
renovate
Bot
force-pushed
the
renovate/all
branch
4 times, most recently
from
September 24, 2026 21:47
4daa517 to
5e7c84c
Compare
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
October 5, 2026 19:10
3957605 to
8e3e40a
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
9 times, most recently
from
October 15, 2026 04:22
4324d78 to
9d8712e
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
6 times, most recently
from
October 22, 2026 17:13
7dbeead to
37c4857
Compare
renovate
Bot
force-pushed
the
renovate/all
branch
from
October 23, 2026 00:10
37c4857 to
31c0ded
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
e2e927e→d620678v2.32.2→v2.33.1v1.43.0→v1.44.0v0.159.0→v0.161.0v1.24.1→v1.25.0v1.67.0→v1.69.0v1.67.0→v1.69.0v1.67.0→v1.69.0v1.67.0→v1.69.0v0.161.0→v0.163.0v0.161.0→v0.163.0v1.67.0→v1.69.0v0.161.0→v0.163.01.27.1-alpine3.23→1.27.3-alpine3.232.13.2→2.15.0v0.37.0→v0.37.1v0.37.0→v0.37.1v0.37.0→v0.37.10.22.0→0.23.00.159.0→0.161.00.123.0→0.126.2v0.25.1→v0.25.2Release Notes
onsi/ginkgo (github.com/onsi/ginkgo/v2)
v2.33.1Compare Source
Fixes
v2.33.0Compare Source
Features
ReportEntrys as<properties>on its<testcase>element, with the entry's name and its JSON-encoded value. Thanks @pohly! [23db51a]Maintenance
## Unreleasedas the work happens. See RELEASING.md. [8616ecb]onsi/gomega (github.com/onsi/gomega)
v1.44.0Compare Source
Fixes
BeNumericallycompares signed and unsigned integers by value:-1no longer equalsuint64(math.MaxUint64)anduint(5)is now greater than-3(#925) [26e3c6b]BeNumerically("~")no longer overflows when computing the distance between extreme integers (#928) [1955764]BeNumerically("==", x, threshold)now honors the threshold for floats, as it already did for integers (#927) [10e2aca]HaveKeyWithValuesucceeds if any key accepted by the key matcher has a matching value, rather than depending on map iteration order (#929) [ffc577a]HaveKeyandHaveKeyWithValuetreat key and value matcher errors likeContainElementdoes: a match wins, and an error is only reported when nothing matches (#926) [dc91598]MatchJSONno longer treats numbers too large for a float64 as equal to one another (#930) [9d619a5]MatchJSONcompares integers beyond ±2^53 exactly, so neighboring large integers (e.g. IDs) no longer match; all other numbers are still compared as float64s (#931) [8ef1aa7,630fe12]HaveExactElementsreports missing or extra elements that start at index 0, and reports the first extra element's index rather than the last (#934) [af1b777]MatchYAMLcompares every document in a multi-document stream rather than only the first; empty documents (e.g. a leading or trailing---) are ignored (#933) [2773796]MatchXMLignores namespace prefixes: elements and attributes are compared by namespace URI, and the URIs declared on each element must match whatever prefix they are bound to (#932) [c0dbd89,2565350]v1.43.1Compare Source
Maintenance
d547015]## Unreleasedas the work happens. Releases still ship the stripped-down tree onmaster-lite- tests removed and Ginkgo dropped fromgo.mod- and the workflow now builds it and checks it on every push. See RELEASING.md. [e9dc84d]open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator/apis)
v0.161.0Compare Source
0.161.0
🛑 Breaking changes 🛑
opamp: Use the Kubernetes cluster ID to compute standalone OpAMP Bridge agent instance IDs. (#5689)collector: Remove the deprecated--create-rbac-permissionsCLI flag. RBAC permission creation is now exclusively autodetected at startup. (#2588)The flag was deprecated in v0.88.0. The operator now always autodetects whether its service account can create ClusterRoles and ClusterRoleBindings.
💡 Enhancements 💡
collector: AddrevisionHistoryLimitfield to OpenTelemetryCommonFields to control the number of old ReplicaSets retained for Deployment and StatefulSet workloads, and for the TargetAllocator Deployment. (#0)collector: Skip the automaticGOMEMLIMITandGOMAXPROCSenvironment variables when the collector config enables thecgroup_runtimeextension. (#5651)The extension sets both variables from the cgroup limits and does nothing when they are already present.
The deprecated
cgroupruntimetype name is recognized as well.Each variable is skipped only while its
gomemlimit.enabledorgomaxprocs.enabledsetting is true.collector, target allocator: AddimagePullSecretsto the OpenTelemetryCollector and TargetAllocator CRs, passed through to the pod spec of the generated workloads. A target allocator embedded in an OpenTelemetryCollector uses the collector'simagePullSecrets. (#4376)collector: Register thewebhook_eventreceiver (aliaswebhookevent) so the operator derives its Service port fromendpoint, which the receiver requires, and rejects a configuration that omits it. (#5631)🧰 Bug fixes 🧰
collector: Fix the collector defaulting webhook panicking whenreceiversorexportersis missing. (#5735)The request is now rejected by CRD validation, as it already was when no component defaults apply.
target allocator: Honor the cumulative temporality preference for counters bridged from the Prometheus registry in OTLP self-telemetry. (#5700)Bridged counters, such as the Prometheus service discovery metrics, were converted to delta regardless of
temporality_preference. They are now converted only when the preference selects delta for counters(
deltaorlow_memory), and are exported as cumulative otherwise.target allocator: Keep the Kubernetes API server addresses in the target allocator NetworkPolicy up to date. (#5551)The operator now watches the EndpointSlices of the
default/kubernetesService and updates the target allocatorNetworkPolicy when they change, instead of using the addresses discovered once at operator startup.
Addresses which disappear from the EndpointSlices remain allowed for 5 minutes, to tolerate transient changes.
The NetworkPolicy also allows egress to the
kubernetesService ClusterIP, and uses correct CIDRs for IPv6 addresses.The operator now requires the
watchpermission onendpointslicesin thediscovery.k8s.ioAPI group.operator: Fix the--tls-min-versionCLI flag being ignored because it was matched against the wrong flag name. (#3565)sidecar: Prevent sidecar injection into invalid pods with zero regular containers (#5737)Pods without containers are invalid in Kubernetes. Skipping injection allows Kubernetes to reject the invalid Pod rather than mutating it into a valid one.
Components
v0.160.0Compare Source
0.160.0
🛑 Breaking changes 🛑
operator, collector, target allocator: Disable operator, collector, and target allocator network policies by default. (#5551, #5558, #5621, #5624, #5654)The
operator.networkpolicyandoperand.networkpolicyfeature gates are moved back to alpha and are disabled by default.The generated network policies can block API server access on some clusters.
To keep creating network policies, enable them with
--feature-gates=+operator.networkpolicy,+operand.networkpolicy,or set
spec.networkPolicy.enabled: trueon individual collectors and target allocators.🚩 Deprecations 🚩
auto-instrumentation: Remove autoinstrumentation-php image definition from the repository (#932)The PHP autoinstrumentation image will be hosted by the packaging SIG.
The one released image (v0.1.0) of the image in the operator registry will
eventually be deleted. This image was never used for any functionality shipped by the operator.
💡 Enhancements 💡
collector: Add RBAC support for extracting labels and annotations from CronJobs (and Jobs) via thek8sattributesprocessor. (#5527)The operator's own ServiceAccount must itself hold
get/list/watchonbatch/jobsandbatch/cronjobsfor this to take effect, since Kubernetes RBAC only lets a ServiceAccountgrant permissions it already has. This PR also extends the operator's own ClusterRole
accordingly (
config/rbac/role.yaml).collector, target allocator: AddenableServiceLinksto the OpenTelemetryCollector and TargetAllocator CRs, passed through to the pod spec of the generated workloads. It defaults to true, matching the Kubernetes Pod field. (#5569)operator: Add support for Kubernetes 1.37 (#5650)🧰 Bug fixes 🧰
auto-instrumentation: Honor Instrumentation CRD/API json tags when loading--config-file(no-CRD webhook configs). (#5618)Operator Config fields still load with gopkg.in/yaml.v3 (yaml tags). The
instrumentationsblock is re-parsed with sigs.k8s.io/yaml so embedded APItypes keep their json tags (for example
apacheHttpd,imagePullPolicy,resourceAttributes,valueFrom,volumeLimitSize,configPath).collector: Preserve TCP and UDP protocols when generating NetworkPolicy ports. (#5611)target allocator: Use the.svcFQDN for the TargetAllocator endpoint injected into the collector's Prometheus receiver so it works on clusters behind an HTTP proxy. (#5586)The bare service name (http://-targetallocator:80) does not match the standard NO_PROXY
entries (.svc, .cluster.local), so Go routes the request through the proxy. Using
-targetallocator..svc matches NO_PROXY=.svc while staying compatible with
custom cluster domains (unlike the full .svc.cluster.local endpoint reverted in #3248).
target allocator: Restorepromhttp_metric_handler_requests_totalandpromhttp_metric_handler_requests_in_flighton the/metricsendpoint when a custom gatherer is configured. (#5622)#5294switched the/metricshandler topromhttp.HandlerForwhen a custom gathereris set, but omitted the
InstrumentMetricHandlerwrapper that registers these two metrics.The handler is now built once in
NewServer(after options are applied) usingInstrumentMetricHandler, restoring the missing metrics for both code paths.target allocator: Watch and prune all the resources the TargetAllocator controller creates. (#5657)The controller now watches the resources it creates, so manual changes to them are reverted.
It also deletes the resources it no longer needs, for example the NetworkPolicy after
spec.networkPolicy.enabledis set to false, or the ServiceMonitor afterspec.observability.metrics.enableMetricsis set to false.collector: Fix string values that look like numbers, booleans, timestamps or special floats (e.g."0e12",".inf") being written unquoted to the collector ConfigMap, which made the collector read them as a different type and fail to start. (#4314)The ConfigMap is now rendered with the same YAML library the collector parses it with (
go.yaml.in/yaml/v3),and the rendered document is checked to decode back to the values held by the CR before it is written.
The target allocator rewrite of the Prometheus receiver no longer re-parses the rendered config, and the
resulting ConfigMap uses the same formatting as configs without a target allocator (2-space indentation).
collector: Detect Gateway API availability by theHTTPRoutekind served ingateway.networking.k8s.io/v1instead of the API group alone, so the operator no longer crash-loops on clusters with a partial Gateway API bundle (for example onlyGatewayClass). (#5571)target allocator: Stop assigning targets to collector pods that are being deleted. A terminating pod keeps reporting Ready until the kubelet confirms the deletion, which never happens while its node is unreachable, so its targets were never reassigned. (#5576)webhook: Configure the standalone OpenShift webhook with the environment variables required for cert-manager autodetection. (#5660)This allows TargetAllocator mTLS admission to discover cert-manager when the webhook is
installed through the OpenShift/OLM deployment path.
opamp: Only require workload patch permissions when the AcceptsRestartCommand capability is enabled, and reject restart commands when it is not. (#5573)Components
prometheus/client_golang (github.com/prometheus/client_golang)
v1.25.0Compare Source
api/prometheus/v1(see the [CHANGE] entries below).1.25.0 / 2026-10-07
Query,QueryRange,Series,LabelNames, andLabelValuesnow returnInfosannotations in addition toWarnings, matching the Prometheus server's info annotations. This changes the signatures of these methods and ofapi.Client'sDo/DoGetFallback; custom API client implementations must be updated. #1963TSDBBlocksresult types to align with the Prometheus server'stsdb.BlockMeta:TSDBBlocksResultnow containsBlocks []TSDBBlockMetadirectly instead of mirroring the full API envelope, nested types are renamed (TSDBBlockMeta,TSDBBlockStats,TSDBBlockMetaCompaction), stat fields areuint64withomitemptytags, and the optional compactionparentsfield is included. #1928GatherAndFormatto encode a subset of metrics from a Gatherer. #2091HandlerOpts.AcceptedFormatsto customize the formats negotiated from the incomingAcceptheader, enabling opt-in to experimental formats such as OpenMetrics 2.0 without changing default negotiation. #2146Varyheader. #2142GatherAndFormatandCollectAndFormat(terminating# EOF). #2125:fooargument no longer substitutes inside:foobar. #2136What's changed
What's Changed
New Contributors
Full Changelog: prometheus/client_golang@v1.24.1...v1.25.0
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)
v1.69.0💡 Enhancements 💡
cmd/builder: Adddist.resource.detection.detectorsto the builder config, letting distributions opt into a smaller set of resourcedetectionprocessor detectors via generated go build tags. (#16075)cmd/mdatagen: Generate exporter queue/batch sender defaults from an opt-insending_queuefield in metadata.yaml. See the batching migration RFC. (#15963)Declaring
sending_queueis opt-in; an exporter that omits it is unaffected until it explicitly opts in one at a time during Phase 2 of the migration. Set MDATAGEN_SENDING_QUEUE_OPT_OUT=true to generate the standard default for every undeclared exporter while auditing a whole repository.pkg/pprofile: Implement Profiles development-version metadata in the OTLP receiver and exporters. (#16147, #16009)The receiver rejects malformed, repeated, or unsupported versions before decoding.
OTLP exporters send the version associated with their compiled-in Profiles schema.
The version is not configurable, and existing clients without metadata identify
the initial development version.
🧰 Bug fixes 🧰
cmd/mdatagen: Replace the O(n) scan in generatedrecordDataPointwith an O(1) hash lookup, fixing an O(n²) cost per scrape when many data points land on one resource. (#15912)cmd/mdatagen: When both migration gates are enabled, only the latest metric with its v1 attributes is emitted (legacy attributes are no longer included). (#15979)pkg/exporterhelper: Fix sending queue deadlocks when blocked offers are cancelled with block_on_overflow enabled. (#15700)pkg/exporterhelper: Drop only the oversized profile when splitting a profiles batch, instead of discarding every profile queued behind it (#16087)Same fix as
pkg/exporterhelper: Drop only the oversized span when splitting a traces batch, instead of discarding every span queued behind it (#16087)Same fix as
pkg/pprofile: Use the profiles dictionary for resource and scope attribute strings sent over OTLP/gRPC. (#15861)The OTLP/gRPC profiles client now interns attribute strings before transmission, matching the OTLP/HTTP path. The server resolves the references before exposing pdata to consumers.
pkg/xpdata: Fixxhashproducing the same hash for different maps by length-prefixing keys, strings and bytes. (#16048)All hash values produced by
xhashchange.v1.68.0🛑 Breaking changes 🛑
cmd/mdatagen: Generated processor lifecycle tests now assert that the processor propagates the incoming context unchanged to the next consumer by default. (#15994)Disable with
skip_context_propagation: trueprocessor/queue_batch: Renamequeuebatchprocessor toqueue_batchprocessor. (#14396)💡 Enhancements 💡
extension/memory_limiter: Add otelcol_memorylimiter_refused_requests metric to record network request refusals in extension mode. (#15561)pkg/confighttp: Enable keepalive configuration by default. (#16026)Introduces the feature gate
pkg.confighttp.PrioritizeNewKeepalive. When disabled, this flagrestores the old behaviour of removing the keepalive configuration in favour
of the deprecated fields
IdleConnTimeout,MaxIdleConns,MaxIdleConnsPerHost,DisableKeepAliveswhen the flag is disabled.pkg/exporterhelper: Make the partition idle timeout configurable viabatch::partition::idle_timeoutand raise the default to 90s. (#15894)pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526)Adds
sending_queue::batch::partition::cache_size(default 10000) to cap thenumber of active partition batchers. The value
must be positive. Current size and configured capacity are exported as
otelcol_exporter_queue_batch_partition_cache_sizeand
otelcol_exporter_queue_batch_partition_cache_capacity.pkg/pprofile: Speed up profiles dictionary merging during exporter-queue batching by replacing the linear-scan dedup in switchDictionary with an indexed lookup, reducing per-merge cost from O(N*L^2) to O(N+L). (#15544)No behavior change: merged dictionary contents and remapped indices are identical to before.
pkg/receiverhelper: Stop allocating a span link that is always discarded when a long-lived-context receiver starts an operation without a parent span context. (#15998)Receivers created with
LongLivedCtx: trueno longer build atrace.Linkwhen thelong-lived context carries no valid span context. The SDK already discarded such a link,
so behaviour is unchanged. This removes 3 of 7 allocations per receive operation.
pkg/xpdata: Reduce the timexhash.MapHashtakes for maps with many entries. (#15990)🧰 Bug fixes 🧰
exporter/debug: Support known sync error handling on AIX (#15924)Enable the debug exporter to handle known synchronous errors on AIX.
pkg/exporterhelper: Drop only the oversized item when splitting a batch, instead of discarding every item queued behind it (#15936)Applied to logs only for now
pkg/exporterhelper: Add exporter and data_type attributes to exporter/enqueue spans. (#16022)receiver/otlp: Error handler preserves the HTTP status code when the request Content-Type is not one a Status can be encoded in (#15995)Extends the fix in #13414, which handled a missing Content-Type. A Content-Type that was
present but unsupported, or malformed, still fell through to
500 {"code": 13, "message": "failed to marshal error message"}, reporting client errorssuch as 401 from a server auth extension or 400 from an unsupported Content-Encoding as
server faults.
golangci/golangci-lint
v2.15.0Compare Source
Released on 2026-10-16
errcheck: from 1.20.0 to 1.30.0exhaustive: from 0.13.0 to 0.15.0 (gocognit: from 1.2.1 to 1.3.0golines: from 0.15.0 to 0.16.0govet-modernize: from 0.50.0 to 0.52.0loggercheck: from 0.12.0 to 0.13.0predeclared: from 0.2.2 to 0.3.0wrapcheck: from 2.12.0 to 2.13.0bidichk: from 0.3.3 to 0.3.4canonicalheader: froma25c71ctoe18e5c5gofumpt: improve deprecation logsgosec: improve concurrency default valueiface: from 1.5.1 to 1.5.3paralleltest: from 1.0.15 to 1.0.16revive: from 1.17.0 to 1.17.1revive: the rulescontext-keys-type,errorf,modifies-value-receiver,range-val-address,string-of-int,time-equal,time-naming,unexported-return,unhandled-error,var-declarationare working (less randomly).rowserrcheck: fromc5f79b8toe0740d5staticcheck: from 0.8.1 to 0.8.2revive)exhaustivelinter:explicit-exhaustive-switchandexplicit-exhaustive-maphave been replaced byexplicit-exhaustive.checkthe valuemaphas been replaced bymapliteral.ignore-enum-members(string) has been replaced byignore-constants(slice).ignore-enum-types(string) has been replaced byignore-types(slice).v2.14.0Compare Source
Configuration
📅 Schedule: (in timezone Etc/UTC)
* 0-3 * * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.