search

mindersec / minder

Software Supply Chain Security Platform
https://minder-docs.stacklok.dev/
Apache License 2.0
258 stars 37 forks source link

build(deps): bump the otel group across 1 directory with 10 updates #4736

Closed dependabot[bot] closed 5 days ago

dependabot[bot] commented 6 days ago

Bumps the otel group with 6 updates in the / directory:

Package From To
github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql 1.19.0 1.20.0
github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq 1.19.0 1.20.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.54.0 0.55.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.54.0 0.55.0
go.opentelemetry.io/otel/exporters/prometheus 0.51.0 0.53.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace 1.29.0 1.31.0

Updates github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql's releases.

v1.20.0

This release upgrades OpenTelemetry Go to v1.30.0/v0.52.0/v0.6.0/v0.0.9 and OpenTelemetry Go Contrib to v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0. The release requires at least Go 1.22.

Removed

Changelog

Sourced from github.com/signalfx/splunk-otel-go/instrumentation/database/sql/splunksql's changelog.

[1.20.0] - 2024-09-13

This release upgrades [OpenTelemetry Go to v1.30.0/v0.52.0/v0.6.0/v0.0.9][otel-v1.30.0] and [OpenTelemetry Go Contrib to v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0][contrib-v1.30.0]. The release requires at least [Go 1.22].

Removed

  • Drop support for [Go 1.21]. (#3422)
Commits
  • 35d9570 Release 1.20.0 (#3428)
  • a3a71fb chore(deps): update module github.com/docker/docker to v27.2.1+incompatible (...
  • 4cbcc53 chore(deps): update kubernetes packages to v0.31.1 (#3424)
  • 08e97e0 fix(deps): update module github.com/ory/dockertest/v3 to v3.11.0 (#3425)
  • 17432b0 chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.109...
  • 7242598 chore(deps): update module google.golang.org/grpc to v1.66.2 (#3415)
  • b7b6bb6 chore(deps): update golang.org/x (#3420)
  • 9b84f10 fix(deps): update otel (#3422)
  • d35b82b chore(deps): update module github.com/jackc/pgx/v5 to v5.7.1 (#3412)
  • 50809f9 chore(deps): update module github.com/jackc/puddle/v2 to v2.2.2 (#3418)
  • Additional commits viewable in compare view


Updates github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq's releases.

v1.20.0

This release upgrades OpenTelemetry Go to v1.30.0/v0.52.0/v0.6.0/v0.0.9 and OpenTelemetry Go Contrib to v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0. The release requires at least Go 1.22.

Removed

Changelog

Sourced from github.com/signalfx/splunk-otel-go/instrumentation/github.com/lib/pq/splunkpq's changelog.

[1.20.0] - 2024-09-13

This release upgrades [OpenTelemetry Go to v1.30.0/v0.52.0/v0.6.0/v0.0.9][otel-v1.30.0] and [OpenTelemetry Go Contrib to v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0][contrib-v1.30.0]. The release requires at least [Go 1.22].

Removed

  • Drop support for [Go 1.21]. (#3422)
Commits
  • 35d9570 Release 1.20.0 (#3428)
  • a3a71fb chore(deps): update module github.com/docker/docker to v27.2.1+incompatible (...
  • 4cbcc53 chore(deps): update kubernetes packages to v0.31.1 (#3424)
  • 08e97e0 fix(deps): update module github.com/ory/dockertest/v3 to v3.11.0 (#3425)
  • 17432b0 chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.109...
  • 7242598 chore(deps): update module google.golang.org/grpc to v1.66.2 (#3415)
  • b7b6bb6 chore(deps): update golang.org/x (#3420)
  • 9b84f10 fix(deps): update otel (#3422)
  • d35b82b chore(deps): update module github.com/jackc/pgx/v5 to v5.7.1 (#3412)
  • 50809f9 chore(deps): update module github.com/jackc/puddle/v2 to v2.2.2 (#3418)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.54.0 to 0.55.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0

Overview

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.30.0/0.55.0/0.24.0/0.10.0/0.5.0/0.3.0/0.2.0] - 2024-09-10

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)
Commits
  • 4ccc9c6 Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0 (#6106)
  • d312469 fix(deps): update module github.com/golangci/golangci-lint to v1.61.0 (#6101)
  • 5425de9 Fix gosec lint issues (#6107)
  • 774b20e chore(deps): update kubernetes packages to v0.31.0 (#5926)
  • 38e6e1e chore(deps): update github.com/lufia/plan9stats digest to 873cd01 (#6098)
  • 9309161 fix(deps): update module google.golang.org/grpc to v1.66.1 (#6103)
  • 9a46844 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/dynamodb to v1....
  • f43f59e fix(deps): update golang.org/x/exp digest to 701f63a (#6099)
  • 53b99ae feat: add grpc support for log autoexport (#6083)
  • 23e6f6c chore(deps): update module github.com/go-playground/validator/v10 to v10.22.1...
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.54.0 to 0.55.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0

Overview

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.30.0/0.55.0/0.24.0/0.10.0/0.5.0/0.3.0/0.2.0] - 2024-09-10

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)
Commits
  • 4ccc9c6 Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0 (#6106)
  • d312469 fix(deps): update module github.com/golangci/golangci-lint to v1.61.0 (#6101)
  • 5425de9 Fix gosec lint issues (#6107)
  • 774b20e chore(deps): update kubernetes packages to v0.31.0 (#5926)
  • 38e6e1e chore(deps): update github.com/lufia/plan9stats digest to 873cd01 (#6098)
  • 9309161 fix(deps): update module google.golang.org/grpc to v1.66.1 (#6103)
  • 9a46844 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/dynamodb to v1....
  • f43f59e fix(deps): update golang.org/x/exp digest to 701f63a (#6099)
  • 53b99ae feat: add grpc support for log autoexport (#6083)
  • 23e6f6c chore(deps): update module github.com/go-playground/validator/v10 to v10.22.1...
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel/exporters/prometheus from 0.51.0 to 0.53.0

Release notes

Sourced from go.opentelemetry.io/otel/exporters/prometheus's releases.

Release v1.31.0/v0.53.0/v0.7.0/v0.0.10

Added

  • Add go.opentelemetry.io/otel/sdk/metric/exemplar package which includes Exemplar, Filter, TraceBasedFilter, AlwaysOnFilter, HistogramReservoir, FixedSizeReservoir, Reservoir, Value and ValueType types. These will be used for configuring the exemplar reservoir for the metrics sdk. (#5747, #5862)
  • Add WithExportBufferSize option to log batch processor.(#5877)

Changed

  • Enable exemplars by default in go.opentelemetry.io/otel/sdk/metric. Exemplars can be disabled by setting OTEL_METRICS_EXEMPLAR_FILTER=always_off (#5778)
  • Logger.Enabled in go.opentelemetry.io/otel/log now accepts a newly introduced EnabledParameters type instead of Record. (#5791)
  • FilterProcessor.Enabled in go.opentelemetry.io/otel/sdk/log/internal/x now accepts EnabledParameters instead of Record. (#5791)
  • The Record type in go.opentelemetry.io/otel/log is no longer comparable. (#5847)
  • Performance improvements for the trace SDK SetAttributes method in Span. (#5864)
  • Reduce memory allocations for the Event and Link lists in Span. (#5858)
  • Performance improvements for the trace SDK AddEvent, AddLink, RecordError and End methods in Span. (#5874)

Deprecated

Fixed

  • The race condition for multiple FixedSize exemplar reservoirs identified in #5814 is resolved. (#5819)
  • Fix log records duplication in case of heterogeneous resource attributes by correctly mapping each log record to it's resource and scope. (#5803)
  • Fix timer channel drain to avoid hanging on Go 1.23. (#5868)
  • Fix delegation for global meter providers, and panic when calling otel.SetMeterProvider. (#5827)
  • Change the reflect.TypeOf to use a nil pointer to not allocate on the heap unless necessary. (#5827)

Release v1.30.0/v0.52.0/v0.6.0/v0.0.9

Overview

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/exporters/prometheus's changelog.

[1.31.0/0.53.0/0.7.0/0.0.10] 2024-10-11

Added

  • Add go.opentelemetry.io/otel/sdk/metric/exemplar package which includes Exemplar, Filter, TraceBasedFilter, AlwaysOnFilter, HistogramReservoir, FixedSizeReservoir, Reservoir, Value and ValueType types. These will be used for configuring the exemplar reservoir for the metrics sdk. (#5747, #5862)
  • Add WithExportBufferSize option to log batch processor.(#5877)

Changed

  • Enable exemplars by default in go.opentelemetry.io/otel/sdk/metric. Exemplars can be disabled by setting OTEL_METRICS_EXEMPLAR_FILTER=always_off (#5778)
  • Logger.Enabled in go.opentelemetry.io/otel/log now accepts a newly introduced EnabledParameters type instead of Record. (#5791)
  • FilterProcessor.Enabled in go.opentelemetry.io/otel/sdk/log/internal/x now accepts EnabledParameters instead of Record. (#5791)
  • The Record type in go.opentelemetry.io/otel/log is no longer comparable. (#5847)
  • Performance improvements for the trace SDK SetAttributes method in Span. (#5864)
  • Reduce memory allocations for the Event and Link lists in Span. (#5858)
  • Performance improvements for the trace SDK AddEvent, AddLink, RecordError and End methods in Span. (#5874)

Deprecated

Fixed

  • The race condition for multiple FixedSize exemplar reservoirs identified in #5814 is resolved. (#5819)
  • Fix log records duplication in case of heterogeneous resource attributes by correctly mapping each log record to it's resource and scope. (#5803)
  • Fix timer channel drain to avoid hanging on Go 1.23. (#5868)
  • Fix delegation for global meter providers, and panic when calling otel.SetMeterProvider. (#5827)
  • Change the reflect.TypeOf to use a nil pointer to not allocate on the heap unless necessary. (#5827)

[1.30.0/0.52.0/0.6.0/0.0.9] 2024-09-09

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

Commits
  • bc2fe88 Release v1.31.0/v0.53.0/v0.7.0/v0.0.10 (#5883)
  • a7d5c1a Add an option to configure the exporter buffer of the BatchProcessor (#5877)
  • eb9279b fix(deps): update golang.org/x/exp digest to f66d83c (#5880)
  • 6441653 Performance improvements for the trace SDK in Span. (#5874)
  • 8e9baf2 chore(deps): update lycheeverse/lychee-action action to v2 (#5878)
  • 8fbaa97 Reduce newEvictedQueueLink and newEvictedQueueEvent memory allocations (#...
  • 4a911f9 chore(deps): update googleapis to 5fefd90 (#5876)
  • 98cbdcb fix(deps): update module google.golang.org/protobuf to v1.35.1 (#5875)
  • 3cbd967 Performance improvements for recordingSpan SetAttributes and `addOverCapA...
  • 9e791a6 fix(deps): update golang.org/x (#5872)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.29.0 to 1.31.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/stdout/stdouttrace's changelog.

[1.31.0/0.53.0/0.7.0/0.0.10] 2024-10-11

Added

  • Add go.opentelemetry.io/otel/sdk/metric/exemplar package which includes Exemplar, Filter, TraceBasedFilter, AlwaysOnFilter, HistogramReservoir, FixedSizeReservoir, Reservoir, Value and ValueType types. These will be used for configuring the exemplar reservoir for the metrics sdk. (#5747, #5862)
  • Add WithExportBufferSize option to log batch processor.(#5877)

Changed

  • Enable exemplars by default in go.opentelemetry.io/otel/sdk/metric. Exemplars can be disabled by setting OTEL_METRICS_EXEMPLAR_FILTER=always_off (#5778)
  • Logger.Enabled in go.opentelemetry.io/otel/log now accepts a newly introduced EnabledParameters type instead of Record. (#5791)
  • FilterProcessor.Enabled in go.opentelemetry.io/otel/sdk/log/internal/x now accepts EnabledParameters instead of Record. (#5791)
  • The Record type in go.opentelemetry.io/otel/log is no longer comparable. (#5847)
  • Performance improvements for the trace SDK SetAttributes method in Span. (#5864)
  • Reduce memory allocations for the Event and Link lists in Span. (#5858)
  • Performance improvements for the trace SDK AddEvent, AddLink, RecordError and End methods in Span. (#5874)

Deprecated

Fixed

  • The race condition for multiple FixedSize exemplar reservoirs identified in #5814 is resolved. (#5819)
  • Fix log records duplication in case of heterogeneous resource attributes by correctly mapping each log record to it's resource and scope. (#5803)
  • Fix timer channel drain to avoid hanging on Go 1.23. (#5868)
  • Fix delegation for global meter providers, and panic when calling otel.SetMeterProvider. (#5827)
  • Change the reflect.TypeOf to use a nil pointer to not allocate on the heap unless necessary. (#5827)

[1.30.0/0.52.0/0.6.0/0.0.9] 2024-09-09

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

Commits
  • bc2fe88 Release v1.31.0/v0.53.0/v0.7.0/v0.0.10 (#5883)
  • a7d5c1a Add an option to configure the exporter buffer of the BatchProcessor (#5877)
  • eb9279b fix(deps): update golang.org/x/exp digest to f66d83c (#5880)
  • 6441653 Performance improvements for the trace SDK in Span. (#5874)
  • 8e9baf2 chore(deps): update lycheeverse/lychee-action action to v2 (#5878)
  • 8fbaa97 Reduce newEvictedQueueLink and newEvictedQueueEvent memory allocations (#...
  • 4a911f9 chore(deps): updat... _Description has been truncated_
minder-staging[bot] commented 6 days ago

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 7a5b69be:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0
dependabot[bot] commented 5 days ago

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

dependabot[bot] commented 5 days ago

Looks like these dependencies are updatable in another way, so this is no longer needed.