build(deps): bump the minor-patch group across 1 directory with 16 updates by dependabot[bot] · Pull Request #529 · zapier/kubechecks

dependabot · 2026-05-20T00:35:26Z

Bumps the minor-patch group with 13 updates in the / directory:

Package	From	To
github.com/anthropics/anthropic-sdk-go	`1.43.0`	`1.44.1`
github.com/aws/aws-sdk-go-v2	`1.38.1`	`1.41.7`
github.com/aws/aws-sdk-go-v2/config	`1.31.3`	`1.32.17`
github.com/aws/aws-sdk-go-v2/service/eks	`1.66.2`	`1.83.0`
github.com/bradleyfalzon/ghinstallation/v2	`2.16.0`	`2.18.0`
github.com/go-git/go-git/v5	`5.16.5`	`5.19.1`
github.com/labstack/echo/v4	`4.13.4`	`4.15.2`
github.com/olekukonko/tablewriter	`1.1.2`	`1.1.4`
github.com/rs/zerolog	`1.34.0`	`1.35.1`
github.com/ziflex/lecho/v3	`3.8.0`	`3.11.0`
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	`1.38.0`	`1.43.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.38.0`	`1.43.0`
helm.sh/helm/v3	`3.18.5`	`3.21.0`

Updates github.com/anthropics/anthropic-sdk-go from 1.43.0 to 1.44.1

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.44.1

1.44.1 (2026-05-19)

Full Changelog: v1.44.0...v1.44.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (93afc65)

v1.44.0

1.44.0 (2026-05-19)

Full Changelog: v1.43.0...v1.44.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (34354c4)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.44.1 (2026-05-19)

Full Changelog: v1.44.0...v1.44.1

Bug Fixes

runner: skip tool calls SessionToolRunner does not own (93afc65)

1.44.0 (2026-05-19)

Full Changelog: v1.43.0...v1.44.0

Features

client: Add support for self-hosted sandboxes in CMA with sandbox helpers (34354c4)

Commits

d138190 release: 1.44.1
d0a73a5 fix(runner): skip tool calls SessionToolRunner does not own
2888573 release: 1.44.0 (#340)
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.38.1 to 1.41.7

Commits

2223642 Release 2026-04-29
04c7e46 Regenerated Clients
5f56925 Update endpoints model
aac6d2b Update API model
bdaead7 upgrade to smithy-go v1.25.1 (#3399)
008e12c Release 2026-04-27
ef109d9 Regenerated Clients
6411e63 Update API model
e5bf970 Release 2026-04-24
bdbb88c Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.31.3 to 1.32.17

Commits

2223642 Release 2026-04-29
04c7e46 Regenerated Clients
5f56925 Update endpoints model
aac6d2b Update API model
bdaead7 upgrade to smithy-go v1.25.1 (#3399)
008e12c Release 2026-04-27
ef109d9 Regenerated Clients
6411e63 Update API model
e5bf970 Release 2026-04-24
bdbb88c Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/eks from 1.66.2 to 1.83.0

Commits

e9a9720 Release 2025-07-02
ea7d5af Regenerated Clients
84d2564 Update API model
b51b976 update min go version in README (#3130)
eef5dc4 Release 2025-07-01
bde0647 Regenerated Clients
2f67ffa Update endpoints model
7fd9b44 Update API model
47c51f3 Release 2025-06-30
5392cce Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.38.0 to 1.42.1

Commits

5aa6e2b Release 2023-11-09
7dbcd52 Regenerated Clients
9b17844 Update API model
efa5486 Allowlist bucket owner header (#2358)
5118d3b Release 2023-11-08
f3c195f Regenerated Clients
f24b6a0 Update endpoints model
f5a0876 Update API model
3674c38 Release 2023-11-07
b856b28 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.22.5 to 1.25.1

Release notes

Sourced from github.com/aws/smithy-go's releases.

v1.25.0

Release (2026-04-15)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.25.0

Feature: Add support for endpointBdd trait

Release (2026-02-27)

General Highlights

Dependency Update: Bump minimum go version to 1.24.

Release (2026-02-20)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.24.1

Feature: Add new middleware functions to get event stream output from middleware

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-04-23)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.25.1

Bug Fix: Fixed a memory leak in the LRU cache implementation used by some AWS services.

Release (2026-04-15)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.25.0

Feature: Add support for endpointBdd trait

Release (2026-04-02)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.24.3

Bug Fix: Add additional sigv4 configuration.

github.com/aws/smithy-go/aws-http-auth: v1.1.3

Bug Fix: Add additional sigv4 configuration.

Release (2026-02-27)

General Highlights

Dependency Update: Bump minimum go version to 1.24.

Release (2026-02-20)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.24.1

Feature: Add new middleware functions to get event stream output from middleware

Release (2025-12-01)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.24.0

... (truncated)

Commits

e094f45 Release 2026-04-23
214d45b changelog
3477da0 fix lrucache memory leak on existing item put (#652)
0d0b4d0 Bump Smithy version to 1.69.0 (#650)
be5e5ef check @enum on strings for cbor (#649)
5beb80e Ensure javadoc uses utf-8 (#648)
73bb8a7 Release 2026-04-15
f056c6f Changelog
ee36afc Implement BDD generator for @endpointBdd Smithy trait (#647)
3dbea70 Release 2026-04-02
Additional commits viewable in compare view

Updates github.com/bradleyfalzon/ghinstallation/v2 from 2.16.0 to 2.18.0

Release notes

Sourced from github.com/bradleyfalzon/ghinstallation/v2's releases.

v2.18.0

What's Changed

Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in bradleyfalzon/ghinstallation#165

bump github.com/google/go-github to v83 and ci updates by @cpanato in bradleyfalzon/ghinstallation#184

Update google/go-github to v84 by @asvoboda in bradleyfalzon/ghinstallation#185

Bump actions/checkout from 5.0.0 to 6.0.2 by @dependabot[bot] in bradleyfalzon/ghinstallation#180

Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by @dependabot[bot] in bradleyfalzon/ghinstallation#176

Full Changelog: bradleyfalzon/ghinstallation@v2.17.0...v2.18.0

v2.17.0

What's Changed

Update README: improve formatting, replace GoDoc with GoReference by @alexandear in bradleyfalzon/ghinstallation#161

Update go-github to v73 by @asvoboda in bradleyfalzon/ghinstallation#162

update golangci-lint to v2.2.x by @cpanato in bradleyfalzon/ghinstallation#163

Update google/go-github to v75 by @asvoboda in bradleyfalzon/ghinstallation#167

New Contributors

@alexandear made their first contribution in bradleyfalzon/ghinstallation#161

Full Changelog: bradleyfalzon/ghinstallation@v2.16.0...v2.17.0

Commits

1237274 Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0
c9c5e67 Bump actions/checkout from 5.0.0 to 6.0.2
f5640e5 Update google/go-github to v84
6e26acb drop deprecated go versions
0e0f2d4 fix lints
bc61e9f apply best practices to ci
ee71ad0 bump golangci-lint to v2.10
4ec07cc add go 1.25 and 1.26 to tests
8f035f2 bump github.com/google/go-github to v83
a2705da Bump actions/checkout from 4.2.2 to 5.0.0
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.16.5 to 5.19.1

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.19.1

What's Changed

v5: plumbing: transport/ssh, Shell-quote path by @hiddeco in go-git/go-git#2068

v5: git: submodule, Fix relative URL resolution by @hiddeco in go-git/go-git#2070

v5: git: submodule, canonical remote for relative URLs by @hiddeco in go-git/go-git#2074

v5: git: submodule, error on remote without URLs by @hiddeco in go-git/go-git#2078

v5: plumbing: format/idxfile, Validate offset64 indices by @hiddeco in go-git/go-git#2084

v5: *: Reject malformed variable-length integers by @hiddeco in go-git/go-git#2092

v5: plumbing: format/packfile, Tighten delta validation by @hiddeco in go-git/go-git#2091

v5: Add worktreeFilesystem wrapper for worktree and hardening by @hiddeco in go-git/go-git#2100

v5: config: validate submodule names by @hiddeco in go-git/go-git#2082

build: Update module github.com/go-git/go-git/v5 to v5.19.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2111

v5: git: Allow MkdirAll on worktree-root paths by @hiddeco in go-git/go-git#2117

v5: git: Stop validating symlink target paths by @pjbgf in go-git/go-git#2116

v5: plumbing: format decoder input bounds and contracts by @hiddeco in go-git/go-git#2125

plumbing: format/packfile, cap delta chain depth in parser by @pjbgf in go-git/go-git#2137

Full Changelog: go-git/go-git@v5.19.0...v5.19.1

v5.19.0

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.18.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#2010

v5: Bump sha1cd and go-billy by @pjbgf in go-git/go-git#2060

v5: Align object encoding with upstream by @pjbgf in go-git/go-git#2065

Full Changelog: go-git/go-git@v5.18.0...v5.19.0

v5.18.0

What's Changed

plumbing: transport/http, Add support for followRedirects policy by @pjbgf in go-git/go-git#2004

Full Changelog: go-git/go-git@v5.17.2...v5.18.0

v5.17.2

What's Changed

build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#1941

dotgit: skip writing pack files that already exist on disk by @pjbgf in go-git/go-git#1944

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

v5.17.1

What's Changed

build: Update module github.com/cloudflare/circl to v1.6.3 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in go-git/go-git#1930

[v5] plumbing: format/index, Improve v4 entry name validation by @pjbgf in go-git/go-git#1935

[v5] plumbing: format/idxfile, Fix version and fanout checks by @pjbgf in go-git/go-git#1937

... (truncated)

Commits

3c3be60 Merge pull request #2137 from go-git/validate-v5
3fba897 plumbing: format/packfile, cap delta chain depth in parser
a97d660 Merge pull request #2125 from hiddeco/v5/format-input-bounds
aeaa125 plumbing: format/objfile, require Header before Read
1f38e17 plumbing: format/packfile, bound inflate size
f7545a0 plumbing: format/idxfile, bound nr by file size
170b881 Merge pull request #2116 from pjbgf/symlink-v5
7b6d994 Merge pull request #2117 from hiddeco/v5/worktree-fs-mkdirall-root-noop
f0709b3 git: Stop validating symlink target paths
776d00f git: Allow MkdirAll on worktree-root paths
Additional commits viewable in compare view

Updates github.com/labstack/echo/v4 from 4.13.4 to 4.15.2

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.15.1

What's Changed

CSRF: support older token-based CSRF protection handler that want to render token into template by @aldas in labstack/echo#2905

Full Changelog: labstack/echo@v4.15.0...v4.15.1

v4.15.0

Security

WARNING: If your application relies on cross-origin or same-site (same subdomain) requests do not blindly push this version to production

The CSRF middleware now supports the Sec-Fetch-Site header as a modern, defense-in-depth approach to CSRF protection, implementing the OWASP-recommended Fetch Metadata API alongside the traditional token-based mechanism.

How it works:

Modern browsers automatically send the Sec-Fetch-Site header with all requests, indicating the relationship between the request origin and the target. The middleware uses this to make security decisions:

same-origin or none: Requests are allowed (exact origin match or direct user navigation)

same-site: Falls back to token validation (e.g., subdomain to main domain)

cross-site: Blocked by default with 403 error for unsafe methods (POST, PUT, DELETE, PATCH)

For browsers that don't send this header (older browsers), the middleware seamlessly falls back to traditional token-based CSRF protection.

New Configuration Options:

TrustedOrigins []string: Allowlist specific origins for cross-site requests (useful for OAuth callbacks, webhooks)

AllowSecFetchSiteFunc func(echo.Context) (bool, error): Custom logic for same-site/cross-site request validation

Example:
e.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
    // Allow OAuth callbacks from trusted provider
    TrustedOrigins: []string{"https://oauth-provider.com"},
// Custom validation for same-site requests
AllowSecFetchSiteFunc: func(c echo.Context) (bool, error) {
    // Your custom authorization logic here
    return validateCustomAuth(c), nil
    // return true, err  // blocks request with error
    // return true, nil  // allows CSRF request through
    // return false, nil // falls back to legacy token logic
},

}))
PR: labstack/echo#2858

... (truncated)

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.15.2 - 2026-05-01

Security

Context.Scheme() should validate values taken from header by @aldas in labstack/echo#2962

Thanks to @shblue21 for reporting this issue.

v4.15.1 - 2026-02-22

Enhancements

CSRF: support older token-based CSRF protection handler that want to render token into template by @aldas in labstack/echo#2905

v4.15.0 - 2026-01-01

Security

NB: If your application relies on cross-origin or same-site (same subdomain) requests do not blindly push this version to production

The CSRF middleware now supports the Sec-Fetch-Site header as a modern, defense-in-depth approach to CSRF protection, implementing the OWASP-recommended Fetch Metadata API alongside the traditional token-based mechanism.

How it works:

Modern browsers automatically send the Sec-Fetch-Site header with all requests, indicating the relationship between the request origin and the target. The middleware uses this to make security decisions:

same-origin or none: Requests are allowed (exact origin match or direct user navigation)

same-site: Falls back to token validation (e.g., subdomain to main domain)

cross-site: Blocked by default with 403 error for unsafe methods (POST, PUT, DELETE, PATCH)

For browsers that don't send this header (older browsers), the middleware seamlessly falls back to traditional token-based CSRF protection.

New Configuration Options:

TrustedOrigins []string: Allowlist specific origins for cross-site requests (useful for OAuth callbacks, webhooks)

AllowSecFetchSiteFunc func(echo.Context) (bool, error): Custom logic for same-site/cross-site request validation

Example:
e.Use(middleware.CSRFWithConfig(middleware.CSRFConfig{
    // Allow OAuth callbacks from trusted provider
    TrustedOrigins: []string{"https://oauth-provider.com"},
// Custom validation for same-site requests

</tr></table>

... (truncated)

Commits

25685e6 Merge pull request #2963 from aldas/v4_changelog_4_15_2
f9d7689 Changelog for v4.15.2
37fff28 Merge pull request #2962 from aldas/v4_valid_proto
ca4f38a Context.Scheme should validate values taken from header
2e527a7 Update CI, update deps
6f3a84a Merge pull request #2905 from aldas/v4_crsf_token_fallback
24fa4d0 CSRF: support older token-based CSRF protection handler that want to render t...
482bb46 v4.15.0 changelog
d0f9d1e CRSF with Sec-Fetch-Site=same-site falls back to legacy token
f3fc618 CRSF with Sec-Fetch-Site checks
Additional commits viewable in compare view

Updates github.com/olekukonko/tablewriter from 1.1.2 to 1.1.4

Commits

a0dea8a no need to disable twice
a4fb40a Merge pull request #314 from sducamp/fix/rendition-debug-leak
6bc4cb4 fix: prevent debug output leak from renderer during Options() reconfiguration
54408fe update ll to v0.1.6
5ea5f3c add mote tab test ans update go mod
1455dd8 Merge pull request #311 from olekukonko/tabber
d7b0a55 improve tab and make test more predictable
62117a2 add space default #312 for colorized renderer
4958831 ll v0.1.5 update enables logging by default hence disable
1c68e06 use space for padding as default #312
Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.34.0 to 1.35.1

Commits

116c806 event: restore Err() logging when ErrorStackMarshaler returns nil (#763)
1396655 Bump CI Go matrix minimum from 1.21 to 1.23
4b65a2f Bump actions/cache from 4 to 5 (#741)
b835796 Bump actions/setup-go from 5 to 6 (#742)
134caf8 Added sanitization of journald keys (#751)
e133b6a Added variadic StrsV, ObjectsV, and StringersV (#752)
82017d8 Bump github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0 (#753)
2f5b8a9 fix: UpdateContext skips Nop and zero-value loggers (#754)
d64c9a7 Add slog.Handler implementation for zerolog (#755)
a0d61dc fix: return dict to Event pool (#749)
Additional commits viewable in compare view

Updates github.com/ziflex/lecho/v3 from 3.8.0 to 3.11.0

Release notes

Sourced from github.com/ziflex/lecho/v3's releases.

v3.11.0

What's Changed

Adding possibility to skip default log attributes by @svergin in ziflex/lecho#45

New Contributors

@svergin made their first contribution in ziflex/lecho#45

Full Changelog: ziflex/lecho@v3.10.0...v3.11.0

v3.10.0

What's Changed

Bump golang.org/x/crypto from 0.36.0 to 0.45.0 in the go_modules group across 1 directory by @dependabot[bot] in ziflex/lecho#42

Add AfterNextEnricher to middleware config for post-handler logging by @ziflex in ziflex/lecho#43

Full Changelog: ziflex/lecho@v3.9.0...v3.10.0

v3.9.0

What's Changed

Fix GlobalLevel support for existing Zerolog instances by @Copilot in ziflex/lecho#41

Full Changelog: ziflex/lecho@v3.8.1...v3.9.0

v3.8.1

What's Changed

Bump the go_modules group across 1 directory with 2 updates by @dependabot[bot] in ziflex/lecho#39

Full Changelog: ziflex/lecho@v3.8.0...v3.8.1

Commits

02b2e77 Adding possibility to skip default log attributes (#45)
9608e4e Add AfterNextEnricher to middleware config for post-handler logging (#43)
7597f18 Bump golang.org/x/crypto in the go_modules group across 1 directory (#42)
4979022 Fix GlobalLevel support for existing Zerolog instances (#41)
ffa2d2e Bump the go_modules group across 1 directory with 2 updates (#39)
1122237 Add Dependabot configuration file
a2bcc87 Improve README documentation with clearer examples and comprehensive feature ...
See full diff in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.38.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)

Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)

Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)

Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)

Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits

9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
5e363de limit response body size for OTLP HTTP exporters (#8108)
35214b6 Use an absolute path when calling bsd kenv (#8113)
290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
e70658e fix: support getBody in otelploghttp (#8096)
4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.38.0 to 1.43.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)

Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)

Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)

Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)

Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)

Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)

Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)

Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)

Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (

…dates Bumps the minor-patch group with 13 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/anthropics/anthropic-sdk-go](https://github.com/anthropics/anthropic-sdk-go) | `1.43.0` | `1.44.1` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.38.1` | `1.41.7` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.31.3` | `1.32.17` | | [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) | `1.66.2` | `1.83.0` | | [github.com/bradleyfalzon/ghinstallation/v2](https://github.com/bradleyfalzon/ghinstallation) | `2.16.0` | `2.18.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.16.5` | `5.19.1` | | [github.com/labstack/echo/v4](https://github.com/labstack/echo) | `4.13.4` | `4.15.2` | | [github.com/olekukonko/tablewriter](https://github.com/olekukonko/tablewriter) | `1.1.2` | `1.1.4` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.34.0` | `1.35.1` | | [github.com/ziflex/lecho/v3](https://github.com/ziflex/lecho) | `3.8.0` | `3.11.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.43.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.43.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.5` | `3.21.0` | Updates `github.com/anthropics/anthropic-sdk-go` from 1.43.0 to 1.44.1 - [Release notes](https://github.com/anthropics/anthropic-sdk-go/releases) - [Changelog](https://github.com/anthropics/anthropic-sdk-go/blob/main/CHANGELOG.md) - [Commits](anthropics/anthropic-sdk-go@v1.43.0...v1.44.1) Updates `github.com/aws/aws-sdk-go-v2` from 1.38.1 to 1.41.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.1...v1.41.7) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.31.3 to 1.32.17 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.31.3...config/v1.32.17) Updates `github.com/aws/aws-sdk-go-v2/service/eks` from 1.66.2 to 1.83.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.66.2...service/s3/v1.83.0) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.38.0 to 1.42.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.38.0...service/s3/v1.42.1) Updates `github.com/aws/smithy-go` from 1.22.5 to 1.25.1 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.22.5...v1.25.1) Updates `github.com/bradleyfalzon/ghinstallation/v2` from 2.16.0 to 2.18.0 - [Release notes](https://github.com/bradleyfalzon/ghinstallation/releases) - [Commits](bradleyfalzon/ghinstallation@v2.16.0...v2.18.0) Updates `github.com/go-git/go-git/v5` from 5.16.5 to 5.19.1 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.16.5...v5.19.1) Updates `github.com/labstack/echo/v4` from 4.13.4 to 4.15.2 - [Release notes](https://github.com/labstack/echo/releases) - [Changelog](https://github.com/labstack/echo/blob/v4.15.2/CHANGELOG.md) - [Commits](labstack/echo@v4.13.4...v4.15.2) Updates `github.com/olekukonko/tablewriter` from 1.1.2 to 1.1.4 - [Release notes](https://github.com/olekukonko/tablewriter/releases) - [Commits](olekukonko/tablewriter@v1.1.2...v1.1.4) Updates `github.com/rs/zerolog` from 1.34.0 to 1.35.1 - [Commits](rs/zerolog@v1.34.0...v1.35.1) Updates `github.com/ziflex/lecho/v3` from 3.8.0 to 3.11.0 - [Release notes](https://github.com/ziflex/lecho/releases) - [Commits](ziflex/lecho@v3.8.0...v3.11.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.38.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.43.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.38.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.43.0) Updates `golang.org/x/exp` from 0.0.0-20251125195548-87e1e737ad39 to 0.0.0-20260410095643-746e56fc9e2f - [Commits](https://github.com/golang/exp/commits) Updates `helm.sh/helm/v3` from 3.18.5 to 3.21.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.18.5...v3.21.0) --- updated-dependencies: - dependency-name: github.com/anthropics/anthropic-sdk-go dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.41.7 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.17 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/eks dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/aws/smithy-go dependency-version: 1.25.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/bradleyfalzon/ghinstallation/v2 dependency-version: 2.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/labstack/echo/v4 dependency-version: 4.15.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/olekukonko/tablewriter dependency-version: 1.1.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: github.com/rs/zerolog dependency-version: 1.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: github.com/ziflex/lecho/v3 dependency-version: 3.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch - dependency-name: golang.org/x/exp dependency-version: 0.0.0-20260410095643-746e56fc9e2f dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor-patch - dependency-name: helm.sh/helm/v3 dependency-version: 3.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-05-24T06:11:41Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 20, 2026

dependabot Bot closed this May 24, 2026

dependabot Bot deleted the dependabot/go_modules/minor-patch-2ef42b7d1f branch May 24, 2026 06:11

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

build(deps): bump the minor-patch group across 1 directory with 16 updates#529

build(deps): bump the minor-patch group across 1 directory with 16 updates#529
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/minor-patch-2ef42b7d1f

dependabot Bot commented on behalf of github May 20, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github May 24, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github May 20, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.44.1

1.44.1 (2026-05-19)

Bug Fixes

v1.44.0

1.44.0 (2026-05-19)

Features

1.44.1 (2026-05-19)

Bug Fixes

1.44.0 (2026-05-19)

Features

v1.25.0

Release (2026-04-15)

General Highlights

Module Highlights

Release (2026-02-27)

General Highlights

Release (2026-02-20)

General Highlights

Module Highlights

Release (2026-04-23)

General Highlights

Module Highlights

Release (2026-04-15)

General Highlights

Module Highlights

Release (2026-04-02)

General Highlights

Module Highlights

Release (2026-02-27)

General Highlights

Release (2026-02-20)

General Highlights

Module Highlights

Release (2025-12-01)

General Highlights

Module Highlights

v2.18.0

What's Changed

v2.17.0

What's Changed

New Contributors

v5.19.1

What's Changed

v5.19.0

What's Changed

v5.18.0

What's Changed

v5.17.2

What's Changed

v5.17.1

What's Changed

v4.15.1

What's Changed

v4.15.0

v4.15.2 - 2026-05-01

v4.15.1 - 2026-02-22

v4.15.0 - 2026-01-01

v3.11.0

What's Changed

New Contributors

v3.10.0

What's Changed

v3.9.0

What's Changed

v3.8.1

What's Changed

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

Deprecated

Fixed

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

Changed

dependabot Bot commented on behalf of github May 20, 2026 •

edited

Loading