chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #664 · securesign/rekor

red-hat-konflux · 2026-07-18T02:17:09Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	patch	`v0.25.1` → `v0.25.2`
cloud.google.com/go/iam	indirect	minor	`v1.5.3` → `v1.12.0`
cloud.google.com/go/kms	indirect	minor	`v1.26.0` → `v1.33.0`
cloud.google.com/go/longrunning	indirect	major	`v0.8.0` → `v1.2.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.24.3` → `v1.30.0`
cloud.google.com/go/profiler	require	minor	`v0.4.3` → `v0.6.0`
cloud.google.com/go/pubsub	require	major	`v1.50.1` → `v2.6.1`
cloud.google.com/go/pubsub/v2	indirect	minor	`v2.0.0` → `v2.6.1`
cloud.google.com/go/storage	indirect	minor	`v1.56.0` → `v1.64.0`
filippo.io/edwards25519	indirect	minor	`v1.1.0` → `v1.2.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.18.0` → `v1.22.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.10.1` → `v1.14.0`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.11.1` → `v1.12.0`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	minor	`v1.4.0` → `v1.5.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.4.2` → `v1.8.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.32.0` → `v1.35.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.53.0` → `v0.59.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.53.0` → `v0.59.0`
github.com/Masterminds/semver/v3	indirect	minor	`v3.2.1` → `v3.5.0`
github.com/Masterminds/sprig/v3	indirect	minor	`v3.2.3` → `v3.3.0`
github.com/aws/aws-sdk-go	indirect	patch	`v1.55.6` → `v1.55.8`
github.com/aws/aws-sdk-go-v2	indirect	minor	`v1.42.1` → `v1.43.2`	`v1.43.3`
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream	indirect	minor	`v1.6.10` → `v1.7.15`	`v1.7.16`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.17.69` → `v1.19.32`	`v1.19.33`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.16.31` → `v1.18.33`	`v1.18.34`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	indirect	minor	`v1.17.77` → `v1.22.37`	`v1.22.38`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.3.35` → `v1.4.33`	`v1.4.34`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	minor	`v2.6.35` → `v2.7.33`	`v2.7.34`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.3` → `v1.8.6`
github.com/aws/aws-sdk-go-v2/internal/v4a	indirect	minor	`v1.3.34` → `v1.4.34`	`v1.4.35`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	minor	`v1.12.3` → `v1.13.14`	`v1.13.15`
github.com/aws/aws-sdk-go-v2/service/internal/checksum	indirect	minor	`v1.7.2` → `v1.9.27`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.12.16` → `v1.13.33`	`v1.13.34`
github.com/aws/aws-sdk-go-v2/service/internal/s3shared	indirect	minor	`v1.18.15` → `v1.19.34`	`v1.19.35`
github.com/aws/aws-sdk-go-v2/service/kms	indirect	minor	`v1.41.0` → `v1.55.2`	`v1.55.3`
github.com/aws/aws-sdk-go-v2/service/s3	indirect	minor	`v1.80.0` → `v1.106.2`	`v1.106.3`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	minor	`v1.30.2` → `v1.38.2`	`v1.38.3`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	minor	`v1.33.21` → `v1.45.2`	`v1.45.3`
github.com/aws/smithy-go	indirect	patch	`v1.27.3` → `v1.27.5`	`v1.27.6`
github.com/cavaliercoder/go-rpm	require	major	`v0.0.0-20200122174316-8cb9fd9c31a8` → `v1.3.0`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.0`
github.com/danieljoos/wincred	indirect	patch	`v1.2.2` → `v1.2.3`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	indirect	minor	`v1.9.0` → `v1.10.1`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.7.0` → `v2.9.2`
github.com/go-chi/chi	require	major	`v4.1.2+incompatible` → `v5.3.1`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/go-openapi/analysis	indirect	minor	`v0.23.0` → `v0.25.5`
github.com/go-openapi/errors	indirect	patch	`v0.22.1` → `v0.22.8`
github.com/go-openapi/inflect	indirect	major	`v0.21.2` → `v1.0.0`
github.com/go-openapi/jsonpointer	indirect	major	`v0.21.1` → `v1.0.0`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.0` → `v1.0.0`
github.com/go-openapi/loads	indirect	minor	`v0.22.0` → `v0.25.0`
github.com/go-openapi/loads	require	minor	`v0.22.0` → `v0.25.0`
github.com/go-openapi/spec	indirect	minor	`v0.21.0` → `v0.22.9`
github.com/go-openapi/spec	require	minor	`v0.21.0` → `v0.22.9`
github.com/go-openapi/strfmt	indirect	minor	`v0.23.0` → `v0.27.0`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` → `v0.28.0`
github.com/go-openapi/swag	require	minor	`v0.23.1` → `v0.28.0`
github.com/go-openapi/validate	indirect	minor	`v0.24.0` → `v0.26.1`
github.com/go-openapi/validate	require	minor	`v0.24.0` → `v0.26.1`
github.com/go-sql-driver/mysql	require	minor	`v1.9.2` → `v1.10.0`
github.com/go-swagger/go-swagger	require	minor	`v0.32.3` → `v0.35.3`	`v0.36.1` (+1)
github.com/go-viper/mapstructure/v2	indirect	minor	`v2.2.1` → `v2.5.0`
github.com/godbus/dbus/v5	indirect	minor	`v5.1.0` → `v5.2.2`
github.com/google/go-containerregistry	indirect	minor	`v0.20.3` → `v0.21.7`	`v0.21.8`
github.com/google/rpmpack	require	patch	`v0.7.0` → `v0.7.1`
github.com/google/trillian	require	patch	`v1.7.2` → `v1.7.3`
github.com/google/wire	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.17` → `v0.3.19`
github.com/hashicorp/hcl	indirect	major	`v1.0.1-vault-7` → `v2.24.0`
github.com/hashicorp/vault/api	indirect	minor	`v1.22.0` → `v1.23.0`
github.com/imdario/mergo	indirect	major	`v0.3.16` → `v1.0.2`
github.com/in-toto/in-toto-golang	require	minor	`v0.9.0` → `v0.11.0`
github.com/jedisct1/go-minisign	require	digest	`d2f9f49` → `a09352b`
github.com/klauspost/compress	indirect	minor	`v1.18.0` → `v1.19.1`
github.com/letsencrypt/boulder	indirect	minor	`v0.0.0-20240620165639-de9c06129bec` → `v0.20260729.0`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` → `v0.9.2`
github.com/oklog/ulid	indirect	major	`v1.3.1` → `v2.1.2`
github.com/oklog/ulid/v2	indirect	patch	`v2.1.1` → `v2.1.2`
github.com/pelletier/go-toml/v2	indirect	minor	`v2.2.3` → `v2.4.3`
github.com/planetscale/vtprotobuf	indirect	digest	`ba97887` → `8ae5a48`
github.com/prometheus/client_golang	require	minor	`v1.23.2` → `v1.24.1`
github.com/prometheus/common	indirect	patch	`v0.70.0` → `v0.70.1`
github.com/redis/go-redis/v9	require	minor	`v9.9.0` → `v9.21.0`
github.com/rogpeppe/go-internal	indirect	minor	`v1.14.1` → `v1.15.0`
github.com/sagikazarmark/locafero	indirect	minor	`v0.9.0` → `v0.12.0`
github.com/sassoftware/relic/v7	require	major	`v7.6.2` → `v8.2.0`
github.com/secure-systems-lab/go-securesystemslib	require	minor	`v0.9.0` → `v0.11.0`
github.com/sigstore/sigstore	require	minor	`v1.9.5` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.9.4` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.9.4` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.9.4` → `v1.10.8`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.9.4` → `v1.10.8`
github.com/spf13/afero	indirect	minor	`v1.14.0` → `v1.15.0`
github.com/spf13/cast	indirect	minor	`v1.9.0` → `v1.10.0`
github.com/spf13/cobra	require	minor	`v1.9.1` → `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.6` → `v1.0.10`
github.com/spf13/pflag	require	patch	`v1.0.6` → `v1.0.10`
github.com/spf13/viper	indirect	minor	`v1.20.1` → `v1.21.0`
github.com/spf13/viper	require	minor	`v1.20.1` → `v1.21.0`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.6.0` → `v2.8.1`
github.com/theupdateframework/go-tuf	require	major	`v0.7.0` → `v2.4.2`
github.com/tink-crypto/tink-go-awskms/v2	require	major	`v2.1.0` → `v3.0.0`
github.com/tink-crypto/tink-go-gcpkms/v2	require	minor	`v2.2.0` → `v2.3.0`
github.com/tink-crypto/tink-go/v2	require	minor	`v2.4.0` → `v2.7.0`
github.com/toqueteos/webbrowser	indirect	patch	`v1.2.0` → `v1.2.1`
github.com/ulikunitz/xz	indirect	patch	`v0.5.12` → `v0.5.16`
github.com/zalando/go-keyring	indirect	patch	`v0.2.6` → `v0.2.8`
go.mongodb.org/mongo-driver	indirect	major	`v1.17.3` → `v2.8.0`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.43.0` → `v1.44.0`
go.step.sm/crypto	require	minor	`v0.67.0` → `v0.87.0`
go.uber.org/zap	require	minor	`v1.27.0` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.5`
gocloud.dev	require	minor	`v0.40.0` → `v0.46.0`
golang.org/x/crypto	indirect	minor	`v0.53.0` → `v0.54.0`
golang.org/x/exp	require	digest	`b6e5de4` → `b88d891`
golang.org/x/mod	indirect	minor	`v0.36.0` → `v0.38.0`
golang.org/x/sync	indirect	minor	`v0.21.0` → `v0.22.0`
golang.org/x/sys	indirect	minor	`v0.46.0` → `v0.47.0`
golang.org/x/text	indirect	minor	`v0.38.0` → `v0.40.0`
golang.org/x/tools	indirect	minor	`v0.45.0` → `v0.48.0`
google.golang.org/api	require	minor	`v0.287.1` → `v0.291.0`
google.golang.org/genproto	indirect	digest	`d00831a` → `8efbd57`
google.golang.org/genproto/googleapis/api	indirect	digest	`925bb5d` → `8efbd57`
google.golang.org/genproto/googleapis/rpc	require	digest	`925bb5d` → `8efbd57`
google.golang.org/grpc	require	minor	`v1.82.0` → `v1.83.0`
gopkg.in/ini.v1	require	patch	`v1.67.0` → `v1.67.3`
gopkg.in/yaml.v2	indirect	major	`v2.4.0` → `v3.0.1`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
k8s.io/klog/v2	indirect	minor	`v2.130.1` → `v2.140.0`
sigs.k8s.io/release-utils	require	minor	`v0.11.1` → `v0.12.4`
sigs.k8s.io/yaml	require	minor	`v1.5.0` → `v1.6.0`
software.sslmate.com/src/go-pkcs12	indirect	minor	`v0.5.0` → `v0.7.3`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in google#491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in google#495
Add automated BCR publishing on release tags by @mmorel-35 in google#498
Add clarification on scoping rules. by @jnthntatum in google#506
Networking extension conformance tests by @TristonianJones in google#507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in google#510

New Contributors

@mmorel-35 made their first contribution in google#498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

`v0.13.0`

Compare Source

bigquery: UseLegacySQL options for CreateTable and QueryConfig. Use these
options to continue using Legacy SQL after the client switches its default
to Standard SQL.
bigquery: Support for updating dataset labels.
bigquery: Set DatasetIterator.ProjectID to list datasets in a project other
than the client's. DatasetsInProject is no longer needed and is deprecated.
bigtable: Fail ListInstances when any zones fail.
spanner: support decoding of slices of basic types (e.g. []string, []int64,
etc.)
logging/logadmin: UpdateSink no longer creates a sink if it is missing
(actually a change to the underlying service, not the client)
profiler: Service and ServiceVersion replace Target in Config.

`v0.12.0`

Compare Source

pubsub: Subscription.Receive now uses streaming pull.
pubsub: add Client.TopicInProject to access topics in a different project
than the client.
errors: renamed errorreporting. The errors package will be removed shortly.
datastore: improved retry behavior.
bigquery: support updates to dataset metadata, with etags.
bigquery: add etag support to Table.Update (BREAKING: etag argument added).
bigquery: generate all job IDs on the client.
storage: support bucket lifecycle configurations.

`v0.11.0`

Compare Source

Clients for spanner, pubsub and video are now in beta.
New client for DLP.
spanner: performance and testing improvements.
storage: requester-pays buckets are supported.
storage, profiler, bigtable, bigquery: bug fixes and other minor improvements.
pubsub: bug fixes and other minor improvements

`v0.10.0`

Compare Source

pubsub: Subscription.ModifyPushConfig replaced with Subscription.Update.
pubsub: Subscription.Receive now runs concurrently for higher throughput.
vision: cloud.google.com/go/vision is deprecated. Use
cloud.google.com/go/vision/apiv1 instead.
translation: now stable.
trace: several changes to the surface. See the link below.

Code changes required from v0.9.0

pubsub: Replace

sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})

with

sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
    PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
})

trace: traceGRPCServerInterceptor will be provided from *trace.Client.
Given an initialized *trace.Client named tc, instead of

s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))

write

s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))

trace trace.GRPCClientInterceptor will also provided from *trace.Client.
Instead of

conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))

write

conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))

trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC
interceptor as a dial option as shown below when initializing Cloud package
clients:

c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
if err != nil {
    ...
}

`v0.9.0`

Compare Source

Breaking changes to some autogenerated clients.
rpcreplay package added.

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.8.0`

Compare Source

What's Changed

Recover from panics in json.Unmarshal to prevent token-cache crashes (fixes #579) by @4gust in #614
fix(base.go): empty partition key causing external cache miss by @MatteoCalabro-TomTom in #615
Add User Federated Identity Credential (user_fic) grant type support by @Avery-Dunn in #619

New Contributors

@MatteoCalabro-TomTom made their first contribution in #615

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.2...1.8.0

`v1.7.2`

Compare Source

What's Changed

Adjust constants used in FMI tests by @Avery-Dunn in #608
Update version to 1.7.1 by @Avery-Dunn in #607
Add MSAL client metadata headers to IMDS managed identity requests by @Copilot in #611
Disable gzip compression #613 by @4gust in #616
Update version.go by @4gust in #617

New Contributors

@Copilot made their first contribution in #611

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.1...v1.7.2

`v1.7.1`: 1.7.1

Compare Source

What's Changed

Add FMI (Federated Managed Identity) Design Specification for MSAL Go by @4gust in #583
Fix bug in refresh token partition check by @Avery-Dunn in #606
Improve instance discovery resiliency and sovereign cloud support by @Avery-Dunn in #604

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.7.0...v1.7.1

`v1.7.0`: 1.7.0

Compare Source

What's Changed

Add WithPrompt option for AuthCodeURL by @szogoon in #585
Use form_post response mode for interactive authentication by @ashok672 in #596

New Contributors

@szogoon made their first contribution in #585
@ashok672 made their first contribution in #596

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.6.0...v1.7.0

`v1.6.0`

Compare Source

What's Changed

Deprecate ROPC flow by @Ugonnaak1 in #584
Added a cache lookup for AcquireTokenByCredential by @4gust in #590
Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
Adding support for FMI (Federated Managed Identity) by @4gust in #586
Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

@Ugonnaak1 made their first contribution in #584

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
Added a FIC test by @4gust in #557
Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
#572 - Update spelling of client by @equalsgibson in #573

New Contributors

@dependabot[bot] made their first contribution in #563
@fengga made their first contribution in #566
@Achiket123 made their first contribution in #575
@Avery-Dunn made their first contribution in #576
@equalsgibson made their first contribution in #573

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.2...v1.5.0

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.59.0`

Compare Source

What's Changed

Adds support for resolving OpenTelemetry authentication extensions by @Angelawork in #1181
update golang.org/x/crypto by @braydonk in #1182
Update module google.golang.org/grpc to v1.82.1 [SECURITY] by @renovate-bot in #1184
Prepare release 0.59.0/1.35.0 by @braydonk in #1183

New Contributors

@Angelawork made their first contribution in #1181

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.58.0...v0.59.0

`v0.58.0`: v1.34.0/v0.58.0

Compare Source

What's Changed

googlemanagedprometheus: Add destination_project_quota by @braydonk in #1175
Prepare release v1.34.0/v0.58.0 by @braydonk in #1178

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

Compare Source

What's Changed

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @renovate-bot in #1146
Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @renovate-bot in #1145
Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @renovate-bot in #1144
[chore] retry_on_failure is removed from our exporter by @braydonk in #1151
downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @thaJeztah in #1152
Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @renovate-bot in #1149
Update e2e-testing image to fix presubmits by @dashpole in #1155
Update go.opentelemetry.io/collector by @renovate-bot in #1073
Auto comment /gcbrun for dependency updates by @dashpole in #1154
Revert "Auto comment /gcbrun for dependency updates" by @dashpole in #1157
Update module github.com/prometheus/common to v0.67.5 by @renovate-bot in #1156
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @dependabot[bot] in #1118
Update golang.org/x by @renovate-bot in #1008
Combine dependency bumps by @dashpole in #1158
Update All Dependencies by @renovate-bot in #1161
Update all major dependencies by @dashpole in #1164
Update All Dependencies by @renovate-bot in #1163
Add AGENTS.md by @dashpole in #1165
Fix CodeQL permissions to allow uploading results by @dashpole in #1166
collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @dashpole in #1170
Migrate impersonate to use cloud.google.com/go/auth by @dashpole in #1169
fix: Support OTLP event_name field in logs exporter by @putcho01 in #1088
exporter/collector/logs: accept string-typed line in sourceLocation by @alliasgher in #1142
exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @alliasgher in #1143
exporter/trace: sanitize invalid UTF-8 in span fields by @alliasgher in #1141
chore: update E2E tests to use centralized async cleanup 0.22.0 by @aabmass in #1171
Add support for cloud run worker pools by @dashpole in #1112
Prerelease 1.33.0/v0.57.0 by @avilevy18 in #1173

New Contributors

@thaJeztah made their first contribution in #1152
@putcho01 made their first contribution in #1088
@alliasgher made their first contribution in #1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

`v0.56.0`: v1.32.0/v0.56.0

Compare Source

What's Changed

Support universe domains in collector exporter client configuration by @dashpole in #1097
Don't pass credentials fetched using FindDefaultCredentials by @dashpole in #1098
googleclientauthextension: support Proxy-Authorization header by @lindeskar in #1105
Improve unit tests for gcp auth extension by @dashpole in #1103
Allow providing a context to create the monitoring client by @dashpole in #1096
Add support for go 1.26 by @dashpole in #1107
chore(deps): update module golang.org/x/crypto to v0.45.0 [security] by @renovate-bot in #1102
Don't allow modifying the default scopes by @dashpole in #1109
Ignore versions in the user agent header when comparing fixtures by @dashpole in #1115
Bump go version to resolve govulncheck failures by @dashpole in #1114
Separate out govulncheck into its own CI job by @dashpole in #1113
Normalize user agents in span attributes as well by @dashpole in #1117
fix(deps): update module google.golang.org/grpc to v1.79.3 [security] by @jefferbrecht in #1131
Prepare for v1.32.0/v0.56.0 by @dashpole in #1132

New Contributors

@lindeskar made their first contribution in #1105
@jefferbrecht made their first contribution in #1131

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

Compare Source

What's Changed

Add feature gate to allow sending log trace context without a prefix by @dashpole in #1079
[exporter/collector/logs] Support httpRequest.status field as integer or string containing an integer. by @franciscovalentecastro in #1080
Fix CI by @dashpole in #1086
precompile regex from resource filters by @dashpole in #1085
Add region tags in OTLP Trace Sample by @psx95 in #1089
[exporter/collector/logs] Create Int32OrString and Int64OrString to handle integer fields in gcp.http_request. by @franciscovalentecastro in #1091
[chore] Pre-release steps for opentelemetry-operations-go repo release. by @franciscovalentecastro in #1092

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.54.0...v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

Compare Source

What's Changed

Add OTel Logging sample by @psx95 in #1055
Update slog example by @psx95 in #1056
Show structured logging in Go by @psx95 in #1057
log project name when metric requests fail by @dashpole in #1059
Migrate from pkg/translator/prometheus to otlptranslator by @dashpole in #1061
feat: Populate description for gcm.TimeSeries by @bwplotka in #1063
Bump mapstructure dependency manually by @braydonk in #1066
post-release: fix segfault in script when no replace is found by @ridwanmsharif in #1025
Update all dependencies, bump go version by @dashpole in #1069
prepare for v1.30.0/v0.54.0 by @dashpole in #1072

New Contributors

@bwplotka made their first contribution in #1063

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.53.0...v0.54.0

Masterminds/semver (github.com/Masterminds/semver/v3)

`v3.5.0`

Compare Source

What's Changed

Adding more prerelease tests by @mattfarina in #273
Update constraint error messages by @mattfarina in #278
Fix edge cases by @mattfarina in #279
Adding some checks in by @mattfarina in #280
Updating deps by @mattfarina in #281
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #282
Bump actions/cache from 4.2.3 to 5.0.5 by @dependabot[bot] in #283
Bump golangci/golangci-lint-action from 7.0.1 to 9.2.0 by @dependabot[bot] in #284
Updating gitignore for devcontainers by @mattfarina in #286
Fixing some quality issues by @mattfarina in #287

New Contributors

@dependabot[bot] made their first contribution in #282

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

`v3.4.0`

Compare Source

There are a few changes in this release to highlight:

Constraints now has a property IncludePrerelease. When set to true the Check and Validate methods will include prereleases.
When an AND group has one constraint with a prerelease but more than one constraint then prereleases will be included. For example, >1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example, >1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against >3.
NewVersion coercion with leading "0"'s is restored. This can be disabled by setting the package level property CoerceNewVersion to false.

What's Changed

fix the CodeQL link by @dmitris in #257
Restore detailed errors when failed to parse with NewVersion by @mattfarina in #262
updating go version tested with by @mattfarina in #263
Restore the ability to have leading 0's with NewVersion by @mattfarina in #266
Handle pre-releases on all in an and group by @mattfarina in #267
Add property to include prereleases by @mattfarina in #268
Updating the error message handling by @mattfarina in #269
Update the release notes and readme for new version by @mattfarina in #270

New Contributors

@dmitris made their first contribution in #257

*Full Changelog

✂ Note

PR body was truncated to here.

red-hat-konflux · 2026-07-18T02:17:12Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: downloading github.com/go-chi/chi/v5 v5.3.1
go: downloading github.com/sassoftware/relic/v8 v8.2.0
go: downloading github.com/theupdateframework/go-tuf/v2 v2.4.2
go: downloading github.com/tink-crypto/tink-go-awskms/v3 v3.0.0
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/lib/pq v1.12.0
go: downloading github.com/mattn/go-sqlite3 v1.14.49
go: downloading github.com/bsm/ginkgo/v2 v2.12.0
go: downloading github.com/bsm/gomega v1.27.10
go: downloading github.com/go-openapi/testify/v2 v2.6.0
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading k8s.io/api v0.35.3
go: downloading github.com/ProtonMail/go-crypto v1.0.0
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.6.0
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/onsi/gomega v1.25.0
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
go: downloading github.com/cavaliercoder/badio v0.0.0-20160213150051-ce5280129e9e
go: downloading github.com/zeebo/xxh3 v1.1.0
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.28.0
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/fatih/color v1.18.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/kr/pretty v0.3.1
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.44.0
go: downloading github.com/google/go-replayers/grpcreplay v1.3.0
go: downloading github.com/google/go-replayers/httpreplay v1.2.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity/cache v0.4.0
go: downloading github.com/go-test/deep v1.1.1
go: downloading github.com/golang/protobuf v1.5.4
go: downloading go.einride.tech/aip v0.83.0
go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
go: downloading github.com/klauspost/cpuid/v2 v2.2.10
go: downloading k8s.io/apimachinery v0.35.3
go: downloading go.opentelemetry.io/otel/metric/x v0.66.0
go: downloading github.com/cloudflare/circl v1.3.8
go: downloading github.com/nxadm/tail v1.4.11
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.59.0
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.15.0
go: downloading github.com/c2sp/wycheproof v0.0.0-20260105152342-fca0d3ba9f12
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading k8s.io/utils v0.0.0-20251002143259-bc988d571ff4
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.0
go: downloading gonum.org/v1/gonum v0.17.0
go: downloading github.com/envoyproxy/go-control-plane v0.14.0
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading cloud.google.com/go/logging v1.19.0
go: downloading cloud.google.com/go/trace v1.16.0
go: downloading github.com/google/martian/v3 v3.3.3
go: downloading github.com/jmespath/go-jmespath/internal/testify v1.5.1
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/envoyproxy/go-control-plane/ratelimit v0.1.0
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/AzureAD/microsoft-authentication-extensions-for-go/cache v0.1.1
go: downloading github.com/keybase/go-keychain v0.0.1
go: finding module for package github.com/theupdateframework/go-tuf/v2/pkg/keys
go: finding module for package github.com/theupdateframework/go-tuf/v2/data
go: finding module for package github.com/theupdateframework/go-tuf/v2/verify
go: finding module for package github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa
go: finding module for package github.com/theupdateframework/go-tuf/v2
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/data: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/data
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/pkg/keys: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/pkg/keys
go: github.com/sigstore/rekor/pkg/pki/tuf imports
	github.com/theupdateframework/go-tuf/v2/verify: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/verify
go: github.com/sigstore/rekor/pkg/types/tuf/v0.0.1 imports
	github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2/pkg/deprecated/set_ecdsa
go: github.com/sigstore/rekor/pkg/pki/tuf tested by
	github.com/sigstore/rekor/pkg/pki/tuf.test imports
	github.com/theupdateframework/go-tuf/v2: module github.com/theupdateframework/go-tuf/v2@latest found (v2.4.2), but does not contain package github.com/theupdateframework/go-tuf/v2

File name: hack/tools/go.sum

Command failed: go get -t ./...
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Jul 18, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 28 times, most recently from b489666 to cff1ec6 Compare July 23, 2026 17:20

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 29 times, most recently from 5e110c0 to 13311d7 Compare July 31, 2026 05:36

chore(deps): update go dependencies

f94bf5d

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies - #664

chore(deps): update go dependencies#664
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/go-deps

red-hat-konflux Bot commented Jul 18, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jul 18, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

Code changes required from v0.9.0

What's Changed

New Contributors

What's Changed

New Contributors

v1.7.1: 1.7.1

What's Changed

v1.7.0: 1.7.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

v0.58.0: v1.34.0/v0.58.0

What's Changed

v0.57.0: v1.33.0/v0.57.0

What's Changed

New Contributors

v0.56.0: v1.32.0/v0.56.0

What's Changed

New Contributors

v0.55.0: v1.31.0/v0.55.0

What's Changed

v0.54.0: v1.30.0/v0.54.0

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Uh oh!

red-hat-konflux Bot commented Jul 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

File name: hack/tools/go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Jul 18, 2026 •

edited

Loading

`v1.7.1`: 1.7.1

`v1.7.0`: 1.7.0

`v0.58.0`: v1.34.0/v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

`v0.56.0`: v1.32.0/v0.56.0

`v0.55.0`: v1.31.0/v0.55.0

`v0.54.0`: v1.30.0/v0.54.0

red-hat-konflux Bot commented Jul 18, 2026 •

edited

Loading