Bump the all group across 1 directory with 17 updates by dependabot[bot] · Pull Request #557 · dependabot/cli (original) (raw)

Bumps the all group with 7 updates in the / directory:

Updates github.com/google/go-containerregistry from 0.20.6 to 0.20.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.7

What's Changed

• Fix ArgsEscaped lint directive by @​Subserial in google/go-containerregistry#2137
• transport: Fix broken links to distribution docs by @​guzalv in google/go-containerregistry#2136
• fix(remote): using customized retry predicate func if provided by @​derekhjray in google/go-containerregistry#2135
• Adding docker file by @​HassanJasim in google/go-containerregistry#2138
• crane: Add timestamp to flatten layer by @​Stephanie0829 in google/go-containerregistry#2117
• feat(remote): pass retryBackoff option to transport by @​aslafy-z in google/go-containerregistry#1628
• Expose clobber refusal error by @​pjbgf in google/go-containerregistry#2146
• Build artifacts for riscv64 by @​ffgan in google/go-containerregistry#2159
• Update dependencies and deprecate DockerVersion field by @​Subserial in google/go-containerregistry#2164

New Contributors

• @​guzalv made their first contribution in google/go-containerregistry#2136
• @​derekhjray made their first contribution in google/go-containerregistry#2135
• @​HassanJasim made their first contribution in google/go-containerregistry#2138
• @​Stephanie0829 made their first contribution in google/go-containerregistry#2117
• @​pjbgf made their first contribution in google/go-containerregistry#2146
• @​ffgan made their first contribution in google/go-containerregistry#2159

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

Commits

• e075f20 go mod tidy on dependabot update (#2171)
• 45aacf4 Bump the actions group across 1 directory with 3 updates (#2170)
• 073b936 Update dependencies and deprecate DockerVersion field (#2164)
• 390dacd Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)
• ca44d47 Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)
• 999cc1f Bump github.com/docker/docker (#2161)
• d1809c8 Build artifacts for riscv64 (#2159)
• 7471efd Bump the auxiliary-deps group across 3 directories with 4 updates (#2156)
• 2bb5bb0 Bump the actions group with 5 updates (#2155)
• 16371c1 Remove manual vendor setting for dependabot (#2151)
• Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.10.1 to 1.10.2

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.10.2

🔧 Dependencies

• chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in spf13/cobra#2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

• Fix linter and allow CI to pass by @​marckhouzam in spf13/cobra#2327
• fix: actions/setup-go v6 by @​jpmcb in spf13/cobra#2337

🔥✍🏼 Docs

• Add documentation for repeated flags functionality by @​rvergis in spf13/cobra#2316

🍂 Refactors

• refactor: replace several vars with consts by @​htoyoda18 in spf13/cobra#2328
• refactor: change minUsagePadding from var to const by @​ssam18 in spf13/cobra#2325

🤗 New Contributors

• @​rvergis made their first contribution in spf13/cobra#2316
• @​htoyoda18 made their first contribution in spf13/cobra#2328
• @​ssam18 made their first contribution in spf13/cobra#2325
• @​dims made their first contribution in spf13/cobra#2336

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

Commits

• 88b30ab chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)
• 346d408 fix: actions/setup-go v6 (#2337)
• fc81d20 refactor: change minUsagePadding from var to const (#2325)
• 117698a refactor: replace several vars with consts (#2328)
• e2dd29d Add documentation for repeated flags functionality (#2316)
• 0629892 Fix linter (#2327)
• See full diff in compare view

Updates github.com/containerd/stargz-snapshotter/estargz from 0.17.0 to 0.18.1

Release notes

Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.

v0.18.1

Notable Changes

• Avoid repeated decompression and further utilize the --GH option to speed up conversion (#2145), thanks to @​escapefreeg
• Improved sortEntries performance (#2153), thanks to @​wswsmao

v0.18.0

Notable Changes

• Fixed restoring error of snapshots on unexpected restart of stargz snapshotter (#2091, #2092), thanks to @​wswsmao
• Added FadvDontNeed option to reduce pagecache consumption in stargz snapshotter (#2095), thanks to @​wswsmao
• Removed testing dependency from code outside tests (#2098), thanks to @​rosstimothy
• Added all option for the ctr-remote's --gpus flag (#2102, #2118), thanks to @​wswsmao
• Added --prefetch-list flag to ctr-remote (#2113, #2148), thanks to @​wswsmao
• Enabled deduplication in ImageRecorder.Record (#2116), thanks to @​wswsmao
• Fixed potential data race in nativeconverter/estargz (#2133), thanks to @​escapefreeg
• Added support of decompression helpers in ctr-remote for better conversion speed (#2117), thanks to @​escapefreeg
• Improved logging behaviour in fusemanager (#2135), thanks to @​mmonaco
• Fixed to preserve normal snapshots during cleanup in stargz snapshotter (#2127), thanks to @​ChengyuZhu6
• Fixed lazy pulling failure on images with empty layers (#2137)
• Fixed stargz snapshotter to run without depending on fusermount by default (#2146)
• Enabled ctr-remote to capture early file access (#2129), thanks to @​wswsmao
• Refactors and document fixes (#2112, #2150), thanks to @​wswsmao

Commits

• 60de78b Merge pull request #2167 from ktock/prepare-v0.18.1
• d676264 Prepare for v0.18.1
• b53f30b Merge pull request #2164 from containerd/dependabot/go_modules/gomod-30043e7df9
• 9f66f8d Merge pull request #2165 from AkihiroSuda/containerd-2.1.5
• 7a0b484 Dockerfile: update runc (1.3.3)
• abedc76 Dockerfile: update containerd (2.1.5)
• 0caa3c2 go.mod: github.com/containerd/containerd/v2 v2.1.5
• 1274e2a build(deps): bump github.com/docker/cli
• dca1521 Merge pull request #2162 from ktock/golangci-lint-2.6
• 7c03a01 Fix golangci-lint "misspell" error
• Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.0 to 1.18.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.18.1

What's Changed

• zstd: Fix incorrect buffer size in dictionary encodes by @​klauspost in klauspost/compress#1059
• s2: check for cap, not len of buffer in EncodeBetter/Best by @​vdarulis in klauspost/compress#1080
• zstd: Add simple zstd EncodeTo/DecodeTo functions by @​klauspost in klauspost/compress#1079
• zlib: Avoiding extra allocation in zlib.reader.Reset by @​travelpolicy in klauspost/compress#1086
• gzhttp: remove redundant err check in zstdReader by @​ryanfowler in klauspost/compress#1090
• Run modernize. Deprecate Go 1.22 by @​klauspost in klauspost/compress#1095
• flate: Simplify matchlen by @​klauspost in klauspost/compress#1101
• flate: Add examples by @​klauspost in klauspost/compress#1102
• flate: Use exact sizes for huffman tables by @​klauspost in klauspost/compress#1103
• flate: Faster load+store by @​klauspost in klauspost/compress#1104
• Add notice to S2 about MinLZ by @​klauspost in klauspost/compress#1065

New Contributors

• @​wooffie made their first contribution in klauspost/compress#1069
• @​vdarulis made their first contribution in klauspost/compress#1080
• @​travelpolicy made their first contribution in klauspost/compress#1086
• @​ryanfowler made their first contribution in klauspost/compress#1090

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

Commits

• d10b525 build(deps): bump the github-actions group with 2 updates (#1105)
• 3c0d308 flate: Faster load+st0re (#1104)
• 6e2f5d5 flate: Use exact sizes for huffman tables (#1103)
• bda824b flate: Add examples (#1102)
• f44517c flate: Simplify matchlen (#1101)
• 54cb7a5 build(deps): bump the github-actions group with 3 updates (#1096)
• c43fcbb Run modernize. Deprecate Go 1.22 (#1095)
• 86a9489 gzhttp: remove redundant err check in zstdReader (#1090)
• ad4a030 build(deps): bump github/codeql-action in the github-actions group (#1087)
• 1a8c0e4 Avoiding extra allocation in Reset (#1086)
• Additional commits viewable in compare view

Updates github.com/sirupsen/logrus from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.4

Notable changes

• go.mod: update minimum supported go version to v1.17 sirupsen/logrus#1460
• go.mod: bump up dependencies sirupsen/logrus#1460
• Touch-up godoc and add "doc" links.
• README: fix links, grammar, and update examples.
• Add GNU/Hurd support sirupsen/logrus#1364
• Add WASI wasip1 support sirupsen/logrus#1388
• Remove uses of deprecated ioutil package sirupsen/logrus#1472
• CI: update actions and golangci-lint sirupsen/logrus#1459
• CI: remove appveyor, add macOS sirupsen/logrus#1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

Commits

• b61f268 Merge pull request #1472 from goldlinker/master
• 15c29db refactor: replace the deprecated function in the ioutil package
• cb253f3 Merge pull request #1464 from thaJeztah/touchup_godoc
• 29b2337 Merge pull request #1468 from thaJeztah/touchup_readme
• d916819 Merge pull request #1427 from dolmen/fix-testify-usage
• 135e482 README: small touch-ups
• 2c5fa36 Merge pull request #1467 from thaJeztah/rm_old_badge
• 877ecec README: remove travis badge
• 55cf256 Merge pull request #1393 from jsoref/grammar
• 21bae50 Merge pull request #1426 from dolmen/testing-fix-use-of-math-rand
• Additional commits viewable in compare view

Updates github.com/vbatts/tar-split from 0.12.1 to 0.12.2

Release notes

Sourced from github.com/vbatts/tar-split's releases.

v0.12.2

What's Changed

• Port a fix for CVE-2025-58183 by @​mtrmac in vbatts/tar-split#85

Full Changelog: vbatts/tar-split@v0.12.1...v0.12.2

Commits

• e93e901 Merge pull request #85 from mtrmac/backport
• 55da7d6 archive/tar: set a limit on the size of GNU sparse file 1.0 regions
• See full diff in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.63.0 to 0.64.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.39.0/v2.1.0/v0.64.0/v0.33.0/v0.19.0/v0.14.0/v0.12.0/v0.11.0

Overview

Added

• ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
• Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
• Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
• WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
• Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
• Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
• Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
• Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
• Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
• Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
• Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
• Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
• Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
• Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

• Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
• Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
• Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

• WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
• WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
• DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

• Drop support for Go 1.23. (#7831)
• Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
• Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)

What's Changed

• chore(deps): update go-openapi packages by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7830
• chore(deps): update module github.com/spf13/pflag to v1.0.9 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7833
• fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.8 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7834
• Remove support for Go 1.23 by @​MrAlias in open-telemetry/opentelemetry-go-contrib#7831
• fix(deps): update golang.org/x by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7733
• chore(deps): update googleapis to ef028d9 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7835
• chore(deps): update module github.com/securego/gosec/v2 to v2.22.8 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#7836

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.39.0/2.1.0/0.64.0/0.33.0/0.19.0/0.14.0/0.12.0/0.11.0] - 2025-12-08

Added

• ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
• Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
• Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
• WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
• Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
• Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
• Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
• Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
• Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
• Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
• Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
• Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
• Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
• Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

• Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
• Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
• Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

• WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
• WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
• DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

• Drop support for [Go 1.23]. (#7831)
• Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
• Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)

Commits

• 9a6a4d7 Release v1.39.0 (#8261)
• 14c6a7a chore(deps): update module golang.org/x/sys to v0.39.0 (#8260)
• 829f498 chore(deps): update module golang.org/x/sync to v0.19.0 (#8259)
• a77cdda chore(deps): update module golang.org/x/oauth2 to v0.34.0 (#8257)
• a98be56 chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#8255)
• 4385fbc chore(deps): update github/codeql-action action to v4.31.7 (#8253)
• 3c3e7b2 otelconf: add support for parsing resource detectors (#8180)
• 6497853 otelconf: add support for OTEL_EXPERIMENTAL_CONFIG_FILE (#8106)
• 3f4d49c Fix flaky canceled context in otelconf/trace test (#8250)
• 3ce5839 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.1 (#8252)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.38.0 to 1.39.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.39.0/0.61.0/0.15.0/0.0.14] 2025-12-05

Added

• Greatly reduce the cost of recording metrics in go.opentelemetry.io/otel/sdk/metric using hashing for map keys. (#7175)
• Add WithInstrumentationAttributeSet option to go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace packages. This provides a concurrent-safe and performant alternative to WithInstrumentationAttributes by accepting a pre-constructed attribute.Set. (#7287)
• Add experimental observability for the Prometheus exporter in go.opentelemetry.io/otel/exporters/prometheus. Check the go.opentelemetry.io/otel/exporters/prometheus/internal/x package documentation for more information. (#7345)
• Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#7353)
• Add temporality selector functions DeltaTemporalitySelector, CumulativeTemporalitySelector, LowMemoryTemporalitySelector to go.opentelemetry.io/otel/sdk/metric. (#7434)
• Add experimental observability metrics for simple log processor in go.opentelemetry.io/otel/sdk/log. (#7548)
• Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#7459)
• Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7486)
• Add experimental observability metrics for simple span processor in go.opentelemetry.io/otel/sdk/trace. (#7374)
• Add experimental observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7512)
• Add experimental observability metrics for manual reader in go.opentelemetry.io/otel/sdk/metric. (#7524)
• Add experimental observability metrics for periodic reader in go.opentelemetry.io/otel/sdk/metric. (#7571)
• Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environmental variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7608)
• Add Enabled method to the Processor interface in go.opentelemetry.io/otel/sdk/log. All Processor implementations now include an Enabled method. (#7639)
• The go.opentelemetry.io/otel/semconv/v1.38.0 package. The package contains semantic conventions from the v1.38.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.37.0.(#7648)

Changed

• Distinct in go.opentelemetry.io/otel/attribute is no longer guaranteed to uniquely identify an attribute set. Collisions between Distinct values for different Sets are possible with extremely high cardinality (billions of series per instrument), but are highly unlikely. (#7175)
• WithInstrumentationAttributes in go.opentelemetry.io/otel/trace synchronously de-duplicates the passed attributes instead of delegating it to the returned TracerOption. (#7266)
• WithInstrumentationAttributes in go.opentelemetry.io/otel/meter synchronously de-duplicates the passed attributes instead of delegating it to the returned MeterOption. (#7266)
• WithInstrumentationAttributes in go.opentelemetry.io/otel/log synchronously de-duplicates the passed attributes instead of delegating it to the returned LoggerOption. (#7266)
• Rename the OTEL_GO_X_SELF_OBSERVABILITY environment variable to OTEL_GO_X_OBSERVABILITY in go.opentelemetry.io/otel/sdk/trace, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7302)
• Improve performance of histogram Record in go.opentelemetry.io/otel/sdk/metric when min and max are disabled using NoMinMax. (#7306)
• Improve error handling for dropped data during translation by using prometheus.NewInvalidMetric in go.opentelemetry.io/otel/exporters/prometheus.⚠️ Breaking Change: Previously, these cases were only logged and scrapes succeeded. Now, when translation would drop data (e.g., invalid label/value), the exporter emits a NewInvalidMetric, and Prometheus scrapes fail with HTTP 500 by default. To preserve the prior behavior (scrapes succeed while errors are logged), configure your Prometheus HTTP handler with: promhttp.HandlerOpts{ ErrorHandling: promhttp.ContinueOnError }. (#7363)
• Replace fnv hash with xxhash in go.opentelemetry.io/otel/attribute for better performance. (#7371)
• The default TranslationStrategy in go.opentelemetry.io/exporters/prometheus is changed from otlptranslator.NoUTF8EscapingWithSuffixes to otlptranslator.UnderscoreEscapingWithSuffixes. (#7421)
• Improve performance of concurrent measurements in go.opentelemetry.io/otel/sdk/metric. (#7427)
• Include W3C TraceFlags (bits 0–7) in the OTLP Span.Flags field in go.opentelemetry.io/exporters/otlp/otlptrace/otlptracehttp and go.opentelemetry.io/exporters/otlp/otlptrace/otlptracegrpc. (#7438)
• The ErrorType function in go.opentelemetry.io/otel/semconv/v1.37.0 now handles custom error types. If an error implements an ErrorType() string method, the return value of that method will be used as the error type. (#7442)

Fixed

• Fix WithInstrumentationAttributes options in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/log to properly merge attributes when passed multiple times instead of replacing them. Attributes with duplicate keys will use the last value passed. (#7300)
• The equality of attribute.Set when using the Equal method is not affected by the user overriding the empty set pointed to by attribute.EmptySet in go.opentelemetry.io/otel/attribute. (#7357)

... (truncated)

Commits

• 6ce1429 Release v1.39.0 (#7676)
• 12e421a sdk/log: move Enabled method from FilterProcessor to Processor (#7639)
• 5982f16 fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)
• 9288378 chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)
• ee3dfef chore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)
• 9345d1f fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)
• d03b033 Check context prior to delaying retry in OTLP exporters (#7678)
• 61765e7 Fix flaky TestClientInstrumentation (#7677)
• a54721c chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)
• 746d086 chore(deps): update github/codeql-action action to v4.31.7 (#7675)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.38.0 to 1.39...

Description has been truncated