Monthly dependency updates

[tvoran]

Overview

The usual monthly dependency updates, since this month's job failed during go mod tidy: https://github.com/hashicorp/vault-plugin-auth-kubernetes/actions/runs/9325869838:

go: github.com/hashicorp/vault-plugin-auth-kubernetes imports
    github.com/hashicorp/vault/sdk/logical imports
    github.com/hashicorp/vault/sdk/helper/pluginutil imports
    github.com/hashicorp/go-secure-stdlib/plugincontainer imports
    github.com/docker/docker/client tested by
    github.com/docker/docker/client.test imports
    github.com/docker/docker/testutil imports
    go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp imports
    go.opentelemetry.io/proto/otlp/collector/trace/v1 imports
    github.com/grpc-ecosystem/grpc-gateway/v2/runtime imports
    google.golang.org/genproto/googleapis/api/httpbody: ambiguous import: found package google.golang.org/genproto/googleapis/api/httpbody in multiple modules:
    google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013 (/home/runner/go/pkg/mod/google.golang.org/genproto@v0.0.0-20200526211855-cb27e3aa2013/googleapis/api/httpbody)
    google.golang.org/genproto/googleapis/api v0.0.0-20240520151616-dc85e6b867a5 (/home/runner/go/pkg/mod/google.golang.org/genproto/googleapis/api@v0.0.0-20240520151616-dc85e6b867a5/httpbody)
Error: Process completed with exit code 1.

It seems to be because of something in vault/sdk, and installing the same version of otlptracehttp as vault/sdk uses seems to get around it.

Design of Change

go list -u -m -json all | jq -r 'select(.Indirect != true and .Update != null) | .Path+"@"+.Update.Version' > deps.txt
xargs -L1 go get < deps.txt
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.19.0
go mod tidy

Related Issues/Pull Requests

• [x] https://github.com/hashicorp/vault/pull/27411

[tvoran]

Thanks!