Skip to content

build(deps): bump the go_modules group across 1 directory with 8 updates - #643

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/test-infra/compose/go_modules-e1d40ea0e0
Open

build(deps): bump the go_modules group across 1 directory with 8 updates#643
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/test-infra/compose/go_modules-e1d40ea0e0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 14, 2026

Copy link
Copy Markdown

Bumps the go_modules group with 6 updates in the /test-infra/compose directory:

Package From To
github.com/consensys/gnark-crypto 0.18.0 0.18.1
github.com/pion/dtls/v3 3.0.6 3.1.4
github.com/pion/stun/v3 3.0.0 3.1.5
go.opentelemetry.io/otel 1.38.0 1.41.0
go.opentelemetry.io/otel/sdk 1.38.0 1.43.0
google.golang.org/grpc 1.75.0 1.82.1

Updates github.com/consensys/gnark-crypto from 0.18.0 to 0.18.1

Release notes

Sourced from github.com/consensys/gnark-crypto's releases.

v0.18.1

Full Changelog: Consensys/gnark-crypto@v0.18.0...v0.18.1

Changelog

Sourced from github.com/consensys/gnark-crypto's changelog.

[v0.18.1] - 2025-10-28

Docs

  • add CHANGELOG for 0.18.1

Perf

  • limit memory allocation during Vector deserialization (#759)
Commits

Updates github.com/pion/dtls/v3 from 3.0.6 to 3.1.4

Release notes

Sourced from github.com/pion/dtls/v3's releases.

v3.1.4

Changelog

  • e4aad60b48a4f5619443902fb484053f53c4759b Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b253131964ba5f527576ab739ff3cb2fac Restore Firefox compatibility
  • 12eb398551d48b762b067b412d311502030e66a5 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0aac85f315fe1a35e918bbff024e5b1c987 Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)
  • accee59ca63fc19171f0b807b378bb96aa49d33a Implement ChaCha20-Poly1305 Ciphersuite (#794)
  • 6b4fe8c044e03a73b6ecc8516911c7842268a430 Add RSA_PSS_RSAE back to DTLS 1.2 and fix parsing (#801)
  • 5ee9206c372458946776fe12cc7239acdd792e29 Upgrade E2E Test Docker Image (for OpenSSL 3.x) (#799)

v3.1.3

Changelog

  • 49458d604a4f3ebce1bf9587a0f3e5f3f6b4a55e Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • e4b257d7ea9ce71c683f62a8533e06ffe1c433ee Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52a64265097a621432090926a651109b4cb Add private min and max version API (#823)
  • 620d6425fb873786357f9786982cf0e0981f34f2 Improve fuzzing for all extensions (#805)
  • 977de19f2d4f559f631c69280b2351f8478aa938 Update CI configs to v0.12.2
  • e6950f0291850b86fb704f65acf3ace88cd5b9d7 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc17e147981c0b9e40bef866bb7f7c0a773 Optimize handshake memory usage
  • d0e736c2e6bcd89dada06355ef95fd0fe3957d14 DTLS 1.3 OID filter extension (#814)
  • 956d41df4ab17c1e1e387060c62242c72e8cd763 Update module golang.org/x/crypto to v0.48.0 (#809)
  • b86cb7515e56183ec0a3918d4f2738dc9b51f6ea Add missing checks and validations
  • 726522d91c73331f242ea6b5006a80e4c4244a6c Apply modernize and lint upgrades
  • d994b8bf4f571f1cf37a2f59d2c5e9b2c7a5efd7 Update CI configs to v0.12.1
  • 4fcce60395bf052abc530afd4a5ec25876e18fb4 Fix handshake hang on Finish in retransmit state
  • a25c8b860afe987ca4f17e0cc213ff686da652af Add ListenConfig option to Listener
  • 42b83fe3850722740d5258f878de148486a3ec83 Remove custom AddUint48 helper
  • 5a4e85a2fa567cc1da818d08ad2dad0d7a3346e2 DTLS 1.3 Add the Certificate Authorities extension (#807)
  • 812fc22c4f43abdf4d1da216e69e92421a64aa2c DTLS 1.3 post handshake auth extension (#806)
  • 39f310037631fb84fc47ff73447b23387eb666e3 DTLS 1.3 Add EarlyDataIndication extension (#804)
  • d1d58f212102887ef3c7e6b696d6bc218af3d7b9 Update CI configs to v0.12.0
  • 16413bad7fa0426de4c11d95f1ed2e76c0159d8b Add HKDF funcs for Key Scheduling - DTLS v1.3 (#737)

... (truncated)

Commits
  • e4aad60 Retact v3.1.3 for breaking compatiblity with firefox
  • 0e3867b Restore Firefox compatibility
  • 12eb398 Fix panic unmarshaling ECDHE_PSK ServerKeyExchange
  • 85fca0a Add MasterKeyIdentifier to use_srtp ext in flight3 (#835)
  • fd27a52 Add private min and max version API (#823)
  • 620d642 Improve fuzzing for all extensions (#805)
  • 977de19 Update CI configs to v0.12.2
  • e6950f0 Filter non-approved FIPS curves in FIPS mode (#817)
  • 848c4bc Optimize handshake memory usage
  • d0e736c DTLS 1.3 OID filter extension (#814)
  • Additional commits viewable in compare view

Updates github.com/pion/stun/v3 from 3.0.0 to 3.1.5

Release notes

Sourced from github.com/pion/stun/v3's releases.

v3.1.5

Changelog

  • 02391b37388c7be80b4dafaec9b3e708d58d2aed Upgrade dtls to fix compatibility with firefox

v3.1.4

Changelog

  • 6a869cb3ce12869699dbf007fa48e1ce6760eca5 Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3b428599b877f0c013fe2cc93670e5bc04 Update module github.com/pion/transport/v4 to v4.0.2

v3.1.3

Changelog

  • fa9f074a33a8059c76c960b1fbee39f308002423 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8eefd0c0934c6aebd2bd6b6fa7d3c7d715 Throw an error when parsing message type 0x000
  • c41a7f3240229f74db15968e1657c05b1ecb1037 Add opt-in strict mode and custom logger
  • bc40ca270a5fe67eabce506c1f4e154f804dbc36 Ignore attributes after message-integrity
  • 293095f9198ea72918620fb1e0177a9aaeb211db Update CI configs to v0.12.2

v3.1.2

Changelog

  • f927db87cf42b1a39cb233764eb3f9abbf9d414b Keep DTLS configs until API change
  • 20e8a63ba63129edb660b6c90fdfb22e93562dca Apply modernize, link upgrades and checks
  • 1a06979434a655d93a53ea7bdcbf85035c15f852 Update CI configs to v0.12.1
  • 97b4669b3803421b9b6aebafae6a5beb9fb76498 Update module github.com/pion/dtls/v3 to v3.1.2
  • 31c4046316a11c2125dddd7e73cb50b4c6b50d3c Update module github.com/pion/dtls/v3 to v3.0.11 [SECURITY] (#268)
  • e615214b639f76a558da9b2210eee4e9e417c338 Update CI configs to v0.12.0
  • 9279313de626b55b7b30b90af26fcd49641fd6a4 Update CI configs to v0.11.39
  • be995ed92bfcceded27a8b830f07a962dd751e7b Use constant format string
  • 76f3a9ffabac570cca57c006ae6e178b12c02caf Update CI configs to v0.11.37

v3.1.1

Changelog

  • e31e96800f14507aa5618ef704db8e0083672e0d Upgrade to pion/transport/v4

v3.1.0

Changelog

  • fbaf0f0bd7cb17d3b2db2e970ac8eb1ff21fa7cc Add STUN attributes for DTLS-in-STUN (SPED)
  • 488a5a874f08f0184264fe31a3e87881bb24fb92 Update CI configs to v0.11.36
  • b321b990c03fc614e465ab10753fc98e24bd095e Update module github.com/pion/dtls/v3 to v3.0.9

v3.0.2

Changelog

  • 9b2d7bcf7c9ca4aba87e692c45f8d26910da5d5a Add AttrType.Known method
  • 9bd95766b3c220464265e7396beca2d273dc7a4e Update module github.com/pion/dtls/v3 to v3.0.8 (#256)
  • ef6bc8490ec0c1f28b6c8eecae5bb4637d5eaccc Update module github.com/pion/transport/v3 to v3.1.1
  • a8eac015c33d3d477c4ea9964d07c1f4327bb7b7 Update module github.com/pion/transport/v3 to v3.1.0

v3.0.1

Changelog

  • 23c631123f18759c540ffc442bba312e1ddd3343 Added error wrapper (#252)

... (truncated)

Commits
  • 02391b3 Upgrade dtls to fix compatibility with firefox
  • 6a869cb Update module github.com/pion/dtls/v3 to v3.1.3
  • 8f24ef3 Update module github.com/pion/transport/v4 to v4.0.2
  • fa9f074 Fix panic on short XOR-MAPPED-ADDRESS value
  • 01aa5b8 Throw an error when parsing message type 0x000
  • c41a7f3 Add opt-in strict mode and custom logger
  • bc40ca2 Ignore attributes after message-integrity
  • 293095f Update CI configs to v0.12.2
  • f927db8 Keep DTLS configs until API change
  • 20e8a63 Apply modernize, link upgrades and checks
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.38.0 to 1.41.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

v1.41.0/v0.63.0/v0.17.0/v0.0.15

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

  • Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

  • Support testing of [Go 1.26]. (#7902)

Fixed

  • Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)
  • Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)
  • Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)
  • Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

  • Add AlwaysRecord sampler in go.opentelemetry.io/otel/sdk/trace. (#7724)
  • Add Enabled method to all synchronous instrument interfaces (Float64Counter, Float64UpDownCounter, Float64Histogram, Float64Gauge, Int64Counter, Int64UpDownCounter, Int64Histogram, Int64Gauge,) in go.opentelemetry.io/otel/metric. This stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (#7763)
  • Add go.opentelemetry.io/otel/semconv/v1.39.0 package. The package contains semantic conventions from the v1.39.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.38.0. (#7783, #7789)

Changed

  • Improve the concurrent performance of HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar by 4x. (#7443)
  • Improve the concurrent performance of FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar. (#7447)
  • Improve performance of concurrent histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7474)
  • Improve performance of concurrent synchronous gauge measurements in go.opentelemetry.io/otel/sdk/metric. (#7478)
  • Add experimental observability metrics in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric. (#7492)
  • Exporter in go.opentelemetry.io/otel/exporters/prometheus ignores metrics with the scope go.opentelemetry.io/contrib/bridges/prometheus. This prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (#7688)
  • Improve performance of concurrent exponential histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7702)
  • The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)
  • The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

Fixed

  • Fix bad log message when key-value pairs are dropped because of key duplication in go.opentelemetry.io/otel/sdk/log. (#7662)
  • Fix DroppedAttributes on Record in go.opentelemetry.io/otel/sdk/log to not count the non-attribute key-value pairs dropped because of key duplication. (#7662)
  • Fix SetAttributes on Record in go.opentelemetry.io/otel/sdk/log to not log that attributes are dropped when they are actually not dropped. (#7662)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to correctly handle HTTP/2 GOAWAY frame. (#7794)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for ioreg command on Darwin (macOS). (#7818)

... (truncated)

Commits
  • 4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
  • 66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
  • 76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
  • 0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
  • c38a4a5 Generate semconv/v1.40.0 (#7929)
  • 0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
  • c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
  • f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
  • 92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
  • 3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.38.0 to 1.43.0

Release notes

Sourced from go.opentelemetry.io/otel/sdk's releases.

v1.43.0/v0.65.0/v0.19.0

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Refactor slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.43.0/0.65.0/0.19.0] 2026-04-02

Added

  • Add IsRandom and WithRandom on TraceFlags, and IsRandom on SpanContext in go.opentelemetry.io/otel/trace for W3C Trace Context Level 2 Random Trace ID Flag support. (#8012)
  • Add service detection with WithService in go.opentelemetry.io/otel/sdk/resource. (#7642)
  • Add DefaultWithContext and EnvironmentWithContext in go.opentelemetry.io/otel/sdk/resource to support plumbing context.Context through default and environment detectors. (#8051)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8038)
  • Support attributes with empty value (attribute.EMPTY) in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8038)
  • Add support for per-series start time tracking for cumulative metrics in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true to enable. (#8060)
  • Add WithCardinalityLimitSelector for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated alias of EMPTY. (#8038)
  • Improve slice handling in go.opentelemetry.io/otel/attribute to optimize short slice values with fixed-size fast paths. (#8039)
  • Improve performance of span metric recording in go.opentelemetry.io/otel/sdk/trace by returning early if self-observability is not enabled. (#8067)
  • Improve formatting of metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8073)

Deprecated

  • Deprecate INVALID in go.opentelemetry.io/otel/attribute. Use EMPTY instead. (#8038)

Fixed

  • Return spec-compliant TraceIdRatioBased description. This is a breaking behavioral change, but it is necessary to make the implementation spec-compliant. (#8027)
  • Fix a race condition in go.opentelemetry.io/otel/sdk/metric where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • Limit HTTP response body to 4 MiB in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (#8108)
  • WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for kenv command on BSD. (#8113)
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to correctly handle HTTP2 GOAWAY frame. (#8096)

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)

... (truncated)

Commits
  • 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)
  • 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)
  • 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)
  • 5e363de limit response body size for OTLP HTTP exporters (#8108)
  • 35214b6 Use an absolute path when calling bsd kenv (#8113)
  • 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)
  • e70658e fix: support getBody in otelploghttp (#8096)
  • 4afe468 fix(deps): update googleapis to 9d38bb4 (#8117)
  • b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)
  • 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (#8118)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.42.0 to 0.48.0

Commits
  • e08b067 go.mod: update golang.org/x dependencies
  • 7d0074c scrypt: fix panic on parameters <= 0
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • 19acf81 go.mod: update golang.org/x dependencies
  • 3a1c6b4 x509roots/fallback: update bundle
  • f4602e4 ssh/agent: fix flaky test by ensuring a writeable home directory
  • 4e0068c go.mod: update golang.org/x dependencies
  • e79546e ssh: curb GSSAPI DoS risk by limiting number of specified OIDs
  • f91f7a7 ssh/agent: prevent panic on malformed constraint
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.44.0 to 0.49.0

Commits
  • d977772 go.mod: update golang.org/x dependencies
  • eea413e internal/http3: use go1.25 synctest.Test instead of go1.24 synctest.Run
  • 9ace223 websocket: add missing call to resp.Body.Close
  • 7d3dbb0 http2: buffer the most recently received PRIORITY_UPDATE frame
  • 35e1306 go.mod: update golang.org/x dependencies
  • 7c36036 http2, webdav, websocket: fix %q verb uses with wrong type
  • ec11ecc trace: fix data race in RenderEvents
  • bff14c5 http2: don't PING a responsive server when resetting a stream
  • 88a6421 dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage
  • 123d099 http2: support net/http.Transport.NewClientConn
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.75.0 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

  • server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

  • server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
  • transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
  • balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

  • experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Bug Fixes

  • xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
  • grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
  • encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
  • channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

  • xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)

Bug Fixes

  • otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

  • balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)...

    Description has been truncated

@dependabot
build(deps): bump the go_modules group across 1 directory with 8 updates
5ef6307 
Bumps the go_modules group with 6 updates in the /test-infra/compose directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/consensys/gnark-crypto](https://github.com/consensys/gnark-crypto) | `0.18.0` | `0.18.1` |
| [github.com/pion/dtls/v3](https://github.com/pion/dtls) | `3.0.6` | `3.1.4` |
| [github.com/pion/stun/v3](https://github.com/pion/stun) | `3.0.0` | `3.1.5` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.41.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.43.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.0` | `1.82.1` |



Updates `github.com/consensys/gnark-crypto` from 0.18.0 to 0.18.1
- [Release notes](https://github.com/consensys/gnark-crypto/releases)
- [Changelog](https://github.com/Consensys/gnark-crypto/blob/master/CHANGELOG.md)
- [Commits](Consensys/gnark-crypto@v0.18.0...v0.18.1)

Updates `github.com/pion/dtls/v3` from 3.0.6 to 3.1.4
- [Release notes](https://github.com/pion/dtls/releases)
- [Commits](pion/dtls@v3.0.6...v3.1.4)

Updates `github.com/pion/stun/v3` from 3.0.0 to 3.1.5
- [Release notes](https://github.com/pion/stun/releases)
- [Commits](pion/stun@v3.0.0...v3.1.5)

Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.41.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.41.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.43.0)

Updates `golang.org/x/crypto` from 0.42.0 to 0.48.0
- [Commits](golang/crypto@v0.42.0...v0.48.0)

Updates `golang.org/x/net` from 0.44.0 to 0.49.0
- [Commits](golang/net@v0.44.0...v0.49.0)

Updates `google.golang.org/grpc` from 1.75.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.75.0...v1.82.1)

---
updated-dependencies:
- dependency-name: github.com/consensys/gnark-crypto
  dependency-version: 0.18.1
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/pion/dtls/v3
  dependency-version: 3.1.4
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/pion/stun/v3
  dependency-version: 3.1.5
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.41.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-version: 0.48.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants