Skip to content

build(deps): bump the go-dependencies group across 1 directory with 8 updates#4796

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-f2bd9814ef
Closed

build(deps): bump the go-dependencies group across 1 directory with 8 updates#4796
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-f2bd9814ef

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 23, 2026

Copy link
Copy Markdown
Contributor

Bumps the go-dependencies group with 5 updates in the / directory:

Package From To
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric 0.56.0 0.57.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace 1.32.0 1.33.0
github.com/prometheus/common 0.68.1 0.69.0
golang.org/x/net 0.55.0 0.56.0
google.golang.org/api 0.283.0 0.286.0

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric from 0.56.0 to 0.57.0

Commits
  • 059f723 Prepare for 1.33.0/v0.57.0 release (#1173)
  • 12f7c67 Add support for cloud run worker pools (#1112)
  • 631aa83 chore: update E2E tests to use centralized async cleanup v0.22.0 (#1171)
  • 6c5e750 exporter/trace: sanitize invalid UTF-8 in span fields (#1141)
  • 53d583c exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded...
  • 7d1578c exporter/collector/logs: accept string-typed line in sourceLocation (#1142)
  • 674d27d fix: Support OTLP event_name field in logs exporter (#1088)
  • 1ce8783 Migrate impersonate to use cloud.google.com/go/auth (#1169)
  • 3655304 collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 (#1170)
  • 4884c69 Fix CodeQL permissions to allow uploading results (#1166)
  • Additional commits viewable in compare view

Updates github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace from 1.32.0 to 1.33.0

Release notes

Sourced from github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace's releases.

v1.5.1 and v0.29.1

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.5.0...v1.5.1

v1.5.0 and v0.29.0

What's Changed

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v1.4.0...v1.5.0

v1.4.0 and v0.28.0

What's Changed

... (truncated)

Commits
  • 059f723 Prepare for 1.33.0/v0.57.0 release (#1173)
  • 12f7c67 Add support for cloud run worker pools (#1112)
  • 631aa83 chore: update E2E tests to use centralized async cleanup v0.22.0 (#1171)
  • 6c5e750 exporter/trace: sanitize invalid UTF-8 in span fields (#1141)
  • 53d583c exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded...
  • 7d1578c exporter/collector/logs: accept string-typed line in sourceLocation (#1142)
  • 674d27d fix: Support OTLP event_name field in logs exporter (#1088)
  • 1ce8783 Migrate impersonate to use cloud.google.com/go/auth (#1169)
  • 3655304 collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 (#1170)
  • 4884c69 Fix CodeQL permissions to allow uploading results (#1166)
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.68.1 to 0.69.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.69.0

What's Changed

Full Changelog: prometheus/common@v0.68.1...v0.69.0

Changelog

Sourced from github.com/prometheus/common's changelog.

v0.69.0 / 2026-06-17

Security / behavior changes

  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #901 #920 #921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #925

Bugfixes

  • expfmt: fix nil pointer panic when parsing empty braces {}. #922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #918

Performance

  • model: reduce allocations in Time.UnmarshalJSON. #918

Internal

  • Synchronize common files from prometheus/prometheus. #917
  • Modernize Go. #919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.67.2 / 2025-10-28

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.1...v0.67.2

v0.67.1 / 2025-10-07

What's Changed

Full Changelog: prometheus/common@v0.67.0...v0.67.1

v0.67.0 / 2025-10-07

What's Changed

... (truncated)

Commits
  • e3c14a0 Merge pull request #925 from roidelapluie/roidelapluie/fix-loadhttpconfigfile...
  • a7b791d config: resolve LoadHTTPConfigFile paths relative to the config file
  • f84efec Merge pull request #918 from prometheus/time-split
  • 2269d3d Merge pull request #922 from roidelapluie/roidelapluie/fix-textparse-empty-br...
  • a1600af expfmt: fix nil pointer panic when parsing empty braces "{}"
  • 56fe395 Merge pull request #921 from roidelapluie/roidelapluie/oauth2-cross-host-check
  • 0fcda47 Merge pull request #920 from roidelapluie/roidelapluie/cross-host-sticky
  • 30ba470 Merge pull request #919 from prometheus/superq/modernize
  • 2b55b3e config: check cross-host redirect before OAuth2 token fetch
  • 428856f config: make isCrossHostRedirect sticky across the redirect chain
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits
  • 9e7fdbf internal/http3: fix wrong argument being given when validating header value
  • b686e5f internal/http3: add gzip support to transport
  • 8a34885 go.mod: update golang.org/x dependencies
  • 72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
  • 82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
  • b64f1fa internal/http3: add server support for "Trailer:" magic prefix
  • 2707ee2 internal/http3: implement HTTP/3 clientConn methods
  • 31358cc internal/http3: snapshot response headers at WriteHeader time
  • 8ecbaa9 html: don't adjust xml:base
  • 8ae811a html: properly handle end script tag in fragment mode
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.20.0 to 0.21.0

Commits

Updates golang.org/x/sys from 0.45.0 to 0.46.0

Commits

Updates golang.org/x/text from 0.37.0 to 0.38.0

Commits

Updates google.golang.org/api from 0.283.0 to 0.286.0

Release notes

Sourced from google.golang.org/api's releases.

v0.286.0

0.286.0 (2026-06-22)

Features

v0.285.0

0.285.0 (2026-06-16)

Features

v0.284.0

0.284.0 (2026-06-09)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.286.0 (2026-06-22)

Features

0.285.0 (2026-06-16)

Features

0.284.0 (2026-06-09)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the go-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `0.56.0` | `0.57.0` |
| [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `1.32.0` | `1.33.0` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.68.1` | `0.69.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.55.0` | `0.56.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.283.0` | `0.286.0` |



Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric` from 0.56.0 to 0.57.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0)

Updates `github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace` from 1.32.0 to 1.33.0
- [Release notes](https://github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases)
- [Commits](GoogleCloudPlatform/opentelemetry-operations-go@detectors/gcp/v1.32.0...detectors/gcp/v1.33.0)

Updates `github.com/prometheus/common` from 0.68.1 to 0.69.0
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.68.1...v0.69.0)

Updates `golang.org/x/net` from 0.55.0 to 0.56.0
- [Commits](golang/net@v0.55.0...v0.56.0)

Updates `golang.org/x/sync` from 0.20.0 to 0.21.0
- [Commits](golang/sync@v0.20.0...v0.21.0)

Updates `golang.org/x/sys` from 0.45.0 to 0.46.0
- [Commits](golang/sys@v0.45.0...v0.46.0)

Updates `golang.org/x/text` from 0.37.0 to 0.38.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.37.0...v0.38.0)

Updates `google.golang.org/api` from 0.283.0 to 0.286.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.283.0...v0.286.0)

---
updated-dependencies:
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric
  dependency-version: 0.57.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.69.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.56.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.286.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 23, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 23, 2026 09:23
@dependabot
dependabot Bot requested a review from vadlakondaswetha June 23, 2026 09:23
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 23, 2026
@codecov

codecov Bot commented Jun 23, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 83.64%. Comparing base (7cf50ad) to head (7e3090a).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #4796      +/-   ##
==========================================
- Coverage   83.65%   83.64%   -0.01%     
==========================================
  Files         168      168              
  Lines       20848    20848              
==========================================
- Hits        17440    17439       -1     
- Misses       2756     2757       +1     
  Partials      652      652              
Flag Coverage Δ
unittests 83.64% <ø> (-0.01%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@dependabot @github

dependabot Bot commented on behalf of github Jun 30, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Jun 30, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/go-dependencies-f2bd9814ef branch June 30, 2026 09:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants