chore: Bump the go-modules group across 3 directories with 10 updates by dependabot[bot] · Pull Request #197 · stablekernel/crucible

dependabot · 2026-08-07T05:35:38Z

Bumps the go-modules group with 6 updates in the / directory:

Package	From	To
google.golang.org/grpc	`1.81.1`	`1.83.0`
github.com/google/cel-go	`0.28.1`	`0.30.0`
go.opentelemetry.io/otel/metric	`1.44.0`	`1.45.0`
go.opentelemetry.io/otel/sdk	`1.44.0`	`1.45.0`
github.com/DataDog/datadog-go/v5	`5.8.3`	`5.9.0`
github.com/DataDog/dd-trace-go/v2	`2.8.2`	`2.9.1`

Bumps the go-modules group with 1 update in the /e2e directory: google.golang.org/grpc.
Bumps the go-modules group with 1 update in the /transport directory: google.golang.org/grpc.

Updates google.golang.org/grpc from 1.81.1 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.0

Security

server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)

xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)

authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)

Special Thanks: @hnefatl

xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)

xds: Add support for xDS-based HTTP CONNECT proxies.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)

xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)

grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

Special Thanks: @Yusufihsangorgel

Release 1.82.1

Security

server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)

Special Thanks: @seth-epps

client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)

Special Thanks: @chengxilo

server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

... (truncated)

Commits

4c226da Change version to 1.83.0 (#9228)
c198988 Cherrypick 9223 into v1.83.x (#9279)
8ce3ebf Cherrypick PR 9255 into v1.83.x (#9263)
e393849 Cherry-pick recent changes from master (#9240)
2a112a8 authz: add onPolicyUpdate callback to authz file watcher (#9142)
1a80fca vet: adds a check to disallow usage of regex.Compile in xDS code (#9216)
26ffdb3 [tls] Add safety check in custom cert verification that peer cert chain is no...
5013974 internal/grpcsync: add ScheduleAndWait to CallbackSerializer (#9162)
bd58bc0 internal/transport: increase test timeout locally in TestAccountCheckWindowSi...
484f150 httpfilter/extproc: add check to ensure that response trailer mode must be SE...
Additional commits viewable in compare view

Updates github.com/google/cel-go from 0.28.1 to 0.30.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.30.0

What's Changed

Add cost tracking for encoders by @TristonianJones in cel-expr/cel-go#1354

Fix syntax error at head by @stanleyycheung in cel-expr/cel-go#1362

Prevent indexing on sentinel json field '-' by @TristonianJones in cel-expr/cel-go#1349

Async function execution internals by @TristonianJones in cel-expr/cel-go#1355

reject non-RFC3339 timestamp strings in timestamp() conversion by @alhudz in cel-expr/cel-go#1338

Add depth validation for ASTs loaded through ParsedExprToAst / Checke... by @wilyan09007 in cel-expr/cel-go#1334

Fix non-determinism in json encoding, add dummy 'infinite' costs by @TristonianJones in cel-expr/cel-go#1365

Update lists library cost computations for improved accuracy by @TristonianJones in cel-expr/cel-go#1352

Cost library for ext/network by @TristonianJones in cel-expr/cel-go#1345

Introduce async DrainStrategy, DrainAction, Observer, and Call types by @TristonianJones in cel-expr/cel-go#1364

Graceful NaN ordering by @TristonianJones in cel-expr/cel-go#1370

Fix constant folding and local variable resolution by @TristonianJones in cel-expr/cel-go#1371

Concurrent Eval with context.Context bound functions by @TristonianJones in cel-expr/cel-go#1369

Async timeout and retry wrappers by @TristonianJones in cel-expr/cel-go#1367

Add runnable examples for all expressions in celbyexample.com by @TristonianJones in cel-expr/cel-go#1373

Ensure logical operator fold expressions are bool by @TristonianJones in cel-expr/cel-go#1380

Fix unsound constant folding of x in [x] for NaN values by @pranit0808 in cel-expr/cel-go#1374

copy operands in Bytes.Add to avoid aliasing the receiver by @pranit0808 in cel-expr/cel-go#1381

Validation of cel.bind() nesting limits by @TristonianJones in cel-expr/cel-go#1378

Allow validators to be reconfigured by @TristonianJones in cel-expr/cel-go#1379

Add cost tracking to ext/math.go by @TristonianJones in cel-expr/cel-go#1353

Expression node limits for parser and checker by @TristonianJones in cel-expr/cel-go#1386

New Contributors

@stanleyycheung made their first contribution in cel-expr/cel-go#1362

@wilyan09007 made their first contribution in cel-expr/cel-go#1334

@pranit0808 made their first contribution in cel-expr/cel-go#1374

Full Changelog: cel-expr/cel-go@v0.29.2...v0.29.3

Release v0.29.2

What's Changed

Normalize cel/prompt_test.go to LF, add missing newline in prompt.go by @dims in cel-expr/cel-go#1361

Update lists.go runtime cost calculator by @TristonianJones in cel-expr/cel-go#1360

Full Changelog: cel-expr/cel-go@v0.29.1...v0.29.2

Release v0.29.1

What's Changed

cel/prompt.go: convert CRLF to LF line ending by @pohly in cel-expr/cel-go#1359

Full Changelog: cel-expr/cel-go@v0.29.0...v0.29.1

Release v0.29.0

What's Changed

New Features

... (truncated)

Commits

a492a70 Expression node limits for parser and checker (#1386)
b85d3bc Add cost tracking to ext/math.go (#1353)
6f3625d Allow validators to be reconfigured (#1379)
e15d3ca Introduce cel.bind nesting limit (#1378)
36ff97d copy operands in Bytes.Add to avoid aliasing the receiver (#1381)
af38f75 Fix unsound constant folding of x in [x] for NaN values (#1374)
0175dbb Ensure logical operator fold expressions are bool (#1380)
7ff0141 Add runnable examples for all expressions in celbyexample.com (#1373)
270df17 async: Introduce Timeout and Retry wrappers (#1367)
94b0cce Concurrent Eval with context.Context bound functions (#1369)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260226221140-a57be14db171 to 0.0.0-20260526163538-3dc84a4a5aaa

Commits

See full diff in compare view

Updates go.opentelemetry.io/otel/metric from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.44.0 to 1.45.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates github.com/DataDog/datadog-go/v5 from 5.8.3 to 5.9.0

Release notes

Sourced from github.com/DataDog/datadog-go/v5's releases.

v5.9.0

See the Changelog for the details.

Changelog

Sourced from github.com/DataDog/datadog-go/v5's changelog.

5.9.0 / 2026-06-24

[IMPROVEMENT] Improve aggregator performance: inline shard allocation, FNV-1a metric context hashing, and cache-line padding on shards. See #389[].

[IMPROVEMENT] Make externalEnv an atomic to reduce lock contention on the sampling hot path. See #380[], thanks [@KowalskiThomas][].

[IMPROVEMENT] Optimize origin-detection condition check order. See #381[], thanks [@KowalskiThomas][].

[BUGFIX] Fix payload length calculation for aggregated metrics to prevent datagram truncation when container ID, external env, or cardinality are set. See #368[].

[BUGFIX] Fix data race when reading the origin-detection container ID. See #379[], thanks [@KowalskiThomas][].

[BUGFIX] Fix telemetry metrics not using the client's configured cardinality setting. See #367[].

[BUGFIX] Replace vulnerable logrus v1.7.0 transitive dependency (CVE-2025-65637). See #358[], thanks [@nadavshatz][].

Commits

4c98ef2 Prepare 5.9.0 release (#392)
256927d Improve client performance (#389)
1081d27 Add coverage checks (#390)
ec3b848 Merge pull request #379 from KowalskiThomas/kowalski/test-make-tests-independ...
7a02a3c test: add withoutOriginGlobals calls where relevant
22e2d80 fix: make containerID an atomic
3ff61b1 Merge pull request #358 from nadavshatz/fix/cve-2025-65637-logrus-replace
0b0772a Fix leaking client (#388)
70d5c37 Revert "Merge pull request #386 from DataDog/mark.kirichenko/358/force-ci-on-pr"
91dc3b5 Merge pull request #386 from DataDog/mark.kirichenko/358/force-ci-on-pr
Additional commits viewable in compare view

Updates `github.com/DataDog/dd-t...

Description has been truncated

Bumps the go-modules group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.83.0` | | [github.com/google/cel-go](https://github.com/google/cel-go) | `0.28.1` | `0.30.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [github.com/DataDog/datadog-go/v5](https://github.com/DataDog/datadog-go) | `5.8.3` | `5.9.0` | | [github.com/DataDog/dd-trace-go/v2](https://github.com/DataDog/dd-trace-go) | `2.8.2` | `2.9.1` | Bumps the go-modules group with 1 update in the /e2e directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go-modules group with 1 update in the /transport directory: [google.golang.org/grpc](https://github.com/grpc/grpc-go). Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `github.com/google/cel-go` from 0.28.1 to 0.30.0 - [Release notes](https://github.com/google/cel-go/releases) - [Commits](google/cel-go@v0.28.1...v0.30.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260226221140-a57be14db171 to 0.0.0-20260526163538-3dc84a4a5aaa - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `go.opentelemetry.io/otel/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `github.com/DataDog/datadog-go/v5` from 5.8.3 to 5.9.0 - [Release notes](https://github.com/DataDog/datadog-go/releases) - [Changelog](https://github.com/DataDog/datadog-go/blob/master/CHANGELOG.md) - [Commits](DataDog/datadog-go@v5.8.3...v5.9.0) Updates `github.com/DataDog/dd-trace-go/v2` from 2.8.2 to 2.9.1 - [Release notes](https://github.com/DataDog/dd-trace-go/releases) - [Commits](DataDog/dd-trace-go@v2.8.2...v2.9.1) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.83.0) --- updated-dependencies: - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/cel-go dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260526163538-3dc84a4a5aaa dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/DataDog/datadog-go/v5 dependency-version: 5.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/DataDog/dd-trace-go/v2 dependency-version: 2.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2026-08-14T05:35:35Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 7, 2026

dependabot Bot closed this Aug 14, 2026

dependabot Bot deleted the dependabot/go_modules/go-modules-4319bdd715 branch August 14, 2026 05:35

Navigation Menu

chore: Bump the go-modules group across 3 directories with 10 updates - #197

chore: Bump the go-modules group across 3 directories with 10 updates#197
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-4319bdd715

dependabot Bot commented on behalf of github Aug 7, 2026 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Aug 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 1.83.0

Security

New Features

Bug Fixes

Release 1.82.1

Security

Release 1.82.0

Behavior Changes

New Features

Release v0.30.0

What's Changed

New Contributors

Release v0.29.2

What's Changed

Release v0.29.1

What's Changed

Release v0.29.0

What's Changed

New Features

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

v5.9.0

5.9.0 / 2026-06-24

Uh oh!

dependabot Bot commented on behalf of github Aug 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Aug 7, 2026 •

edited

Loading