Update module github.com/spf13/viper to v1.19.0 by renovate[bot] · Pull Request #370 · overmindtech/cli

renovate · 2024-06-07T01:24:00Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/spf13/viper	`v1.18.2` -> `v1.19.0`

Release Notes

spf13/viper (github.com/spf13/viper)

`v1.19.0`

Compare Source

What's Changed

Bug Fixes 🐛

fix!: hide struct binding behind a feature flag by @sagikazarmark in https://github.com/spf13/viper/pull/1720

Dependency Updates ⬆️

build(deps): bump github/codeql-action from 2.22.8 to 2.22.9 by @dependabot in https://github.com/spf13/viper/pull/1705
build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @dependabot in https://github.com/spf13/viper/pull/1703
build(deps): bump github/codeql-action from 2.22.9 to 3.22.11 by @dependabot in https://github.com/spf13/viper/pull/1713
build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1 by @dependabot in https://github.com/spf13/viper/pull/1711
build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @dependabot in https://github.com/spf13/viper/pull/1722
build(deps): bump github/codeql-action from 3.22.11 to 3.23.0 by @dependabot in https://github.com/spf13/viper/pull/1734
build(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @dependabot in https://github.com/spf13/viper/pull/1731
build(deps): bump mheap/github-action-required-labels from 5.1.0 to 5.2.0 by @dependabot in https://github.com/spf13/viper/pull/1743
build(deps): bump github/codeql-action from 3.23.0 to 3.23.2 by @dependabot in https://github.com/spf13/viper/pull/1742
build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @dependabot in https://github.com/spf13/viper/pull/1739
build(deps): bump cachix/install-nix-action from 24 to 25 by @dependabot in https://github.com/spf13/viper/pull/1737
build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by @dependabot in https://github.com/spf13/viper/pull/1751
build(deps): bump github/codeql-action from 3.24.0 to 3.24.1 by @dependabot in https://github.com/spf13/viper/pull/1760
build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.0 by @dependabot in https://github.com/spf13/viper/pull/1761
build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @dependabot in https://github.com/spf13/viper/pull/1757
build(deps): bump mheap/github-action-required-labels from 5.2.0 to 5.3.0 by @dependabot in https://github.com/spf13/viper/pull/1759
build(deps): bump github/codeql-action from 3.24.1 to 3.24.3 by @dependabot in https://github.com/spf13/viper/pull/1763
build(deps): bump github.com/sagikazarmark/crypt from 0.17.0 to 0.18.0 by @dependabot in https://github.com/spf13/viper/pull/1774
build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by @dependabot in https://github.com/spf13/viper/pull/1770
build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in https://github.com/spf13/viper/pull/1776
build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @dependabot in https://github.com/spf13/viper/pull/1775
build(deps): bump cachix/install-nix-action from 25 to 26 by @dependabot in https://github.com/spf13/viper/pull/1778
build(deps): bump actions/dependency-review-action from 4.1.0 to 4.1.3 by @dependabot in https://github.com/spf13/viper/pull/1767
build(deps): bump github/codeql-action from 3.24.6 to 3.24.9 by @dependabot in https://github.com/spf13/viper/pull/1790
build(deps): bump mheap/github-action-required-labels from 5.3.0 to 5.4.0 by @dependabot in https://github.com/spf13/viper/pull/1789
build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @dependabot in https://github.com/spf13/viper/pull/1780
build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.4 by @dependabot in https://github.com/spf13/viper/pull/1793
chore: upgrade crypt by @sagikazarmark in https://github.com/spf13/viper/pull/1794
build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 by @dependabot in https://github.com/spf13/viper/pull/1788
build(deps): bump actions/dependency-review-action from 4.2.4 to 4.2.5 by @dependabot in https://github.com/spf13/viper/pull/1796
build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 by @dependabot in https://github.com/spf13/viper/pull/1804
build(deps): bump github/codeql-action from 3.24.9 to 3.25.1 by @dependabot in https://github.com/spf13/viper/pull/1806
build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @dependabot in https://github.com/spf13/viper/pull/1807
build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @dependabot in https://github.com/spf13/viper/pull/1808
build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @dependabot in https://github.com/spf13/viper/pull/1813
build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @dependabot in https://github.com/spf13/viper/pull/1811
build(deps): bump mheap/github-action-required-labels from 5.4.0 to 5.4.1 by @dependabot in https://github.com/spf13/viper/pull/1817
build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @dependabot in https://github.com/spf13/viper/pull/1821
build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 by @dependabot in https://github.com/spf13/viper/pull/1822
build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @dependabot in https://github.com/spf13/viper/pull/1824
build(deps): bump github/codeql-action from 3.25.2 to 3.25.4 by @dependabot in https://github.com/spf13/viper/pull/1828
build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 by @dependabot in https://github.com/spf13/viper/pull/1829
build(deps): bump github/codeql-action from 3.25.4 to 3.25.7 by @dependabot in https://github.com/spf13/viper/pull/1844
build(deps): bump cachix/install-nix-action from 26 to 27 by @dependabot in https://github.com/spf13/viper/pull/1833
build(deps): bump actions/checkout from 4.1.4 to 4.1.6 by @dependabot in https://github.com/spf13/viper/pull/1835

Other Changes

Update links to Golang Modules documentation by @tobb10001 in https://github.com/spf13/viper/pull/1758
chore: add Go 1.22 support by @sagikazarmark in https://github.com/spf13/viper/pull/1762
fix #1700: update tests to use local viper instance by @smukk9 in https://github.com/spf13/viper/pull/1791
Update references to bketelsen/crypt by @skitt in https://github.com/spf13/viper/pull/1842

New Contributors

@tobb10001 made their first contribution in https://github.com/spf13/viper/pull/1758
@smukk9 made their first contribution in https://github.com/spf13/viper/pull/1791
@skitt made their first contribution in https://github.com/spf13/viper/pull/1842

Full Changelog: spf13/viper@v1.18.1...v1.19.0

Configuration

📅 Schedule: Branch creation - "before 4pm on friday" in timezone Europe/London, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate · 2024-06-07T01:24:02Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`github.com/pelletier/go-toml/v2`	`v2.1.0` -> `v2.2.2`

… 2f722ef (#3951) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `4cfbd41` → `2f722ef` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 3c95d4397b7dbd6b25f57035eae721715f784ffe

… a57be14 (#4030) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `2f722ef` → `a57be14` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 12b6ad8bb0959eb7e0f78c6c7baee18bff7ca520

…t to 813a975 (#4029) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/hashicorp/terraform-config-inspect](https://redirect.github.com/hashicorp/terraform-config-inspect) | require | digest | `f4be3ba` → `813a975` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 313b6b8db2626514ba8f5587c0c25763568608c5

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: a8c5570455e95dac54d374f4b10d669a83dde1c7

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [buf.build/go/protovalidate](https://redirect.github.com/bufbuild/protovalidate-go) | `v1.1.2` → `v1.1.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgo%2fprotovalidate/v1.1.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgo%2fprotovalidate/v1.1.2/v1.1.3?slim=true) | | [cloud.google.com/go/aiplatform](https://redirect.github.com/googleapis/google-cloud-go) | `v1.116.0` → `v1.118.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2faiplatform/v1.118.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2faiplatform/v1.116.0/v1.118.0?slim=true) | | [cloud.google.com/go/auth](https://redirect.github.com/googleapis/google-cloud-go) | `v0.18.1` → `v0.18.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fauth/v0.18.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fauth/v0.18.1/v0.18.2?slim=true) | | [cloud.google.com/go/bigquery](https://redirect.github.com/googleapis/google-cloud-go) | `v1.73.1` → `v1.74.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fbigquery/v1.74.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fbigquery/v1.73.1/v1.74.0?slim=true) | | [cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go) | `v1.54.0` → `v1.55.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcompute/v1.55.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcompute/v1.54.0/v1.55.0?slim=true) | | [cloud.google.com/go/dataproc/v2](https://redirect.github.com/googleapis/google-cloud-go) | `v2.15.0` → `v2.16.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fdataproc%2fv2/v2.16.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fdataproc%2fv2/v2.15.0/v2.16.0?slim=true) | | [cloud.google.com/go/kms](https://redirect.github.com/googleapis/google-cloud-go) | `v1.25.0` → `v1.26.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fkms/v1.26.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fkms/v1.25.0/v1.26.0?slim=true) | | [github.com/a-h/templ](https://redirect.github.com/a-h/templ) | `v0.3.977` → `v0.3.1001` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fa-h%2ftempl/v0.3.1001?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fa-h%2ftempl/v0.3.977/v0.3.1001?slim=true) | | [github.com/a-h/templ/cmd/templ](https://redirect.github.com/a-h/templ) | `v0.3.977` → `v0.3.1001` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fa-h%2ftempl%2fcmd%2ftempl/v0.3.1001?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fa-h%2ftempl%2fcmd%2ftempl/v0.3.977/v0.3.1001?slim=true) | | [github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0) | `v2.5.0` → `v2.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.5.0/v2.6.0?slim=true) | | [github.com/aws/aws-sdk-go-v2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.1` → `v1.41.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2/v1.41.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2/v1.41.1/v1.41.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.32.7` → `v1.32.10` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.7/v1.32.10?slim=true) | | [github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.19.7` → `v1.19.10` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.7/v1.19.10?slim=true) | | [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.18.17` → `v1.18.18` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.17/v1.18.18?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.38.4` → `v1.38.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.38.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.38.4/v1.38.5?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.64.0` → `v1.64.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.64.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.64.0/v1.64.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.60.0` → `v1.60.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.60.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.60.0/v1.60.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.53.1` → `v1.55.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.55.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.53.1/v1.55.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.38.11` → `v1.38.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.38.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.38.11/v1.38.12?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.55.0` → `v1.56.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.56.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.55.0/v1.56.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.288.0` → `v1.293.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.293.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.288.0/v1.293.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.71.0` → `v1.73.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.73.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.71.0/v1.73.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.10` → `v1.41.11` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.41.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.41.10/v1.41.11?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.80.0` → `v1.80.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.0/v1.80.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.33.19` → `v1.33.20` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.33.20?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.33.19/v1.33.20?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.54.6` → `v1.54.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.54.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.54.6/v1.54.7?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.53.2` → `v1.53.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.2/v1.53.3?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.49.5` → `v1.50.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.50.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.49.5/v1.50.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.88.0` → `v1.88.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.88.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.88.0/v1.88.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.59.3` → `v1.59.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.59.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.59.3/v1.59.4?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.4` → `v1.41.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.41.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.41.4/v1.41.5?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.115.0` → `v1.116.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.116.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.115.0/v1.116.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.62.1` → `v1.62.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.62.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.62.1/v1.62.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.96.0` → `v1.96.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.0/v1.96.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.59.1` → `v1.59.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.1/v1.59.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.39.11` → `v1.39.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.39.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.39.11/v1.39.12?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.42.21` → `v1.42.22` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.42.22?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.42.21/v1.42.22?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.67.8` → `v1.68.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.68.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.67.8/v1.68.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.6` → `v1.41.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.41.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.41.6/v1.41.7?slim=true) | | [github.com/aws/smithy-go](https://redirect.github.com/aws/smithy-go) | `v1.24.0` → `v1.24.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2fsmithy-go/v1.24.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2fsmithy-go/v1.24.0/v1.24.2?slim=true) | | [github.com/charmbracelet/lipgloss/v2](https://redirect.github.com/charmbracelet/lipgloss) | `v2.0.0-beta.3` → `v2.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcharmbracelet%2flipgloss%2fv2/v2.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcharmbracelet%2flipgloss%2fv2/v2.0.0-beta.3/v2.0.0?slim=true) | | [github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go) | `v0.42.0` → `v0.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.42.0/v0.43.0?slim=true) | | [github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser) | `v2.13.3` → `v2.14.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.13.3/v2.14.1?slim=true) | | [github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk) | `v0.7.9` → `v0.7.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.7.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.7.9/v0.7.12?slim=true) | | [github.com/hashicorp/terraform-plugin-framework](https://redirect.github.com/hashicorp/terraform-plugin-framework) | `v1.17.0` → `v1.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.17.0/v1.18.0?slim=true) | | [github.com/hashicorp/terraform-plugin-go](https://redirect.github.com/hashicorp/terraform-plugin-go) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.29.0/v0.30.0?slim=true) | | [github.com/incu6us/goimports-reviser/v3](https://redirect.github.com/incu6us/goimports-reviser) | `v3.11.0` → `v3.12.6` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fincu6us%2fgoimports-reviser%2fv3/v3.12.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fincu6us%2fgoimports-reviser%2fv3/v3.11.0/v3.12.6?slim=true) | | [github.com/kaptinlin/jsonrepair](https://redirect.github.com/kaptinlin/jsonrepair) | `v0.2.8` → `v0.2.17` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fkaptinlin%2fjsonrepair/v0.2.17?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fkaptinlin%2fjsonrepair/v0.2.8/v0.2.17?slim=true) | | [github.com/micahhausler/aws-iam-policy](https://redirect.github.com/micahhausler/aws-iam-policy) | `v0.4.2` → `v0.4.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmicahhausler%2faws-iam-policy/v0.4.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmicahhausler%2faws-iam-policy/v0.4.2/v0.4.3?slim=true) | | [github.com/nats-io/nats.go](https://redirect.github.com/nats-io/nats.go) | `v1.48.0` → `v1.49.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats.go/v1.49.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats.go/v1.48.0/v1.49.0?slim=true) | | [github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go) | `v3.21.0` → `v3.24.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.24.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.21.0/v3.24.0?slim=true) | | [github.com/riverqueue/river](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver/v0.30.2/v0.31.0?slim=true) | | [github.com/riverqueue/river/riverdriver/riverpgxv5](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.30.2/v0.31.0?slim=true) | | [github.com/riverqueue/river/rivertype](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2frivertype/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2frivertype/v0.30.2/v0.31.0?slim=true) | | [github.com/stripe/stripe-go/v84](https://redirect.github.com/stripe/stripe-go) | `v84.3.0` → `v84.4.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstripe%2fstripe-go%2fv84/v84.3.0/v84.4.0?slim=true) | | [github.com/zclconf/go-cty](https://redirect.github.com/zclconf/go-cty) | `v1.17.0` → `v1.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fzclconf%2fgo-cty/v1.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fzclconf%2fgo-cty/v1.17.0/v1.18.0?slim=true) | | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.50.0` → `v0.51.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.51.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.51.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.50.0/v0.51.0?slim=true) | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.266.0` → `v0.269.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.269.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.266.0/v0.269.0?slim=true) | | [k8s.io/api](https://redirect.github.com/kubernetes/api) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapi/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapi/v0.35.1/v0.35.2?slim=true) | | [k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapimachinery/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapimachinery/v0.35.1/v0.35.2?slim=true) | | [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fclient-go/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fclient-go/v0.35.1/v0.35.2?slim=true) | | [k8s.io/component-base](https://redirect.github.com/kubernetes/component-base) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fcomponent-base/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fcomponent-base/v0.35.1/v0.35.2?slim=true) | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `v1.45.0` → `v1.46.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/modernc.org%2fsqlite/v1.46.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/modernc.org%2fsqlite/v1.45.0/v1.46.1?slim=true) | | riverqueue.com/riverui | `v0.14.0` → `v0.15.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/riverqueue.com%2friverui/v0.15.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/riverqueue.com%2friverui/v0.14.0/v0.15.0?slim=true) | | [sigs.k8s.io/controller-runtime/tools/setup-envtest](https://redirect.github.com/kubernetes-sigs/controller-runtime) | `v0.0.0-20260215011159-80d56e741406` → `v0.0.0-20260216173200-e4c1c38bcbdb` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260216173200-e4c1c38bcbdb?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260215011159-80d56e741406/v0.0.0-20260216173200-e4c1c38bcbdb?slim=true) | | [sigs.k8s.io/controller-tools/cmd/controller-gen](https://redirect.github.com/kubernetes-sigs/controller-tools) | `v0.20.0` → `v0.20.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-tools%2fcmd%2fcontroller-gen/v0.20.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-tools%2fcmd%2fcontroller-gen/v0.20.0/v0.20.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. ## ⚠️ Warning These modules contain database migrations that need to be added manually to our atlas migrations. Check the contents of https://github.com/riverqueue/river/tree/master/rivermigrate/migration before merging this update. --- ### Release Notes <details> <summary>bufbuild/protovalidate-go (buf.build/go/protovalidate)</summary> ### [`v1.1.3`](https://redirect.github.com/bufbuild/protovalidate-go/releases/tag/v1.1.3) [Compare Source](https://redirect.github.com/bufbuild/protovalidate-go/compare/v1.1.2...v1.1.3) #### What's Changed - Fix a few godoc comments and update golangci-lint by [@pkwarren](https://redirect.github.com/pkwarren) in [#306](https://redirect.github.com/bufbuild/protovalidate-go/pull/306) - Bump the go group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#308](https://redirect.github.com/bufbuild/protovalidate-go/pull/308) - Fix registry chain for pb.Map in NativeToValue by [@rodaine](https://redirect.github.com/rodaine) in [#309](https://redirect.github.com/bufbuild/protovalidate-go/pull/309) **Full Changelog**: <https://github.com/bufbuild/protovalidate-go/compare/v1.1.2...v1.1.3> </details> <details> <summary>a-h/templ (github.com/a-h/templ)</summary> ### [`v0.3.1001`](https://redirect.github.com/a-h/templ/releases/tag/v0.3.1001) [Compare Source](https://redirect.github.com/a-h/templ/compare/v0.3.977...v0.3.1001) #### Changelog - [`2c505c0`](https://redirect.github.com/a-h/templ/commit/2c505c0) chore: add unit test to cover recent fix - [`4233429`](https://redirect.github.com/a-h/templ/commit/4233429) chore: bump compiler to Go 1.26 - [`1b9a429`](https://redirect.github.com/a-h/templ/commit/1b9a429) chore: bump deps in fiber example - [`54981db`](https://redirect.github.com/a-h/templ/commit/54981db) chore: bump docusaurus version - [`e606c30`](https://redirect.github.com/a-h/templ/commit/e606c30) chore: bump flake builder - [`66bc28b`](https://redirect.github.com/a-h/templ/commit/66bc28b) chore: bump gofiber example deps - [`95f88a6`](https://redirect.github.com/a-h/templ/commit/95f88a6) chore: bump to Go 1.25, update csrf example - [`916a243`](https://redirect.github.com/a-h/templ/commit/916a243) chore: bump version - [`45dda73`](https://redirect.github.com/a-h/templ/commit/45dda73) chore: fix test broken by merge - [`5ddd784`](https://redirect.github.com/a-h/templ/commit/5ddd784) chore: revert Nix bump to Go 1.26 because it breaks the golangci-lint package - [`4037d8a`](https://redirect.github.com/a-h/templ/commit/4037d8a) feat: add Range to BoolConstantAttribute nodes ([#1340](https://redirect.github.com/a-h/templ/issues/1340)) - [`afb0034`](https://redirect.github.com/a-h/templ/commit/afb0034) feat: add Range to BooleanExpressionAttribute nodes ([#1336](https://redirect.github.com/a-h/templ/issues/1336)) - [`c80f745`](https://redirect.github.com/a-h/templ/commit/c80f745) feat: add Range to ChildrenExpression nodes ([#1337](https://redirect.github.com/a-h/templ/issues/1337)) - [`b0f5243`](https://redirect.github.com/a-h/templ/commit/b0f5243) feat: add Range to ConditionalAttribute nodes ([#1338](https://redirect.github.com/a-h/templ/issues/1338)) - [`60fc376`](https://redirect.github.com/a-h/templ/commit/60fc376) feat: add Range to ConstantAttribute nodes ([#1341](https://redirect.github.com/a-h/templ/issues/1341)) - [`b4e809e`](https://redirect.github.com/a-h/templ/commit/b4e809e) feat: add Range to SpreadAttributes nodes ([#1335](https://redirect.github.com/a-h/templ/issues/1335)) - [`5824d4b`](https://redirect.github.com/a-h/templ/commit/5824d4b) feat: add TLS support to live reload proxy ([#1345](https://redirect.github.com/a-h/templ/issues/1345)) - [`e9a940b`](https://redirect.github.com/a-h/templ/commit/e9a940b) feat: strip space from CSS classname rendering, closes [#1074](https://redirect.github.com/a-h/templ/issues/1074) ([#1346](https://redirect.github.com/a-h/templ/issues/1346)) - [`bdda41e`](https://redirect.github.com/a-h/templ/commit/bdda41e) fix: don't remove unaliased hyphenated imports if they're used ([#1342](https://redirect.github.com/a-h/templ/issues/1342)) - [`c2ff8bb`](https://redirect.github.com/a-h/templ/commit/c2ff8bb) fix: issue 1253 ([#1339](https://redirect.github.com/a-h/templ/issues/1339)) - [`cf6235a`](https://redirect.github.com/a-h/templ/commit/cf6235a) fix: proxy escaping characters ([#1321](https://redirect.github.com/a-h/templ/issues/1321)) - [`d97730c`](https://redirect.github.com/a-h/templ/commit/d97730c) fix: support nushell for prettier, fixes [#1266](https://redirect.github.com/a-h/templ/issues/1266) ([#1343](https://redirect.github.com/a-h/templ/issues/1343)) - [`b666bd7`](https://redirect.github.com/a-h/templ/commit/b666bd7) fix: undefined variable in proxy test range loop ([#1324](https://redirect.github.com/a-h/templ/issues/1324)) - [`be8271d`](https://redirect.github.com/a-h/templ/commit/be8271d) refactor: skip some more tests that require prettier </details> <details> <summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary> ### [`v2.6.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v260-2026-02-25) [Compare Source](https://redirect.github.com/auth0/go-auth0/compare/v2.5.0...v2.6.0) [Full Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.5.0...v2.6.0) **Added** - feat: add connection keys provisioning, SCIM config list, DPoP signing, and on-behalf-of token exchange support [#706](https://redirect.github.com/auth0/go-auth0/pull/706) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add WithTokenSource option for custom token management [#705](https://redirect.github.com/auth0/go-auth0/pull/705) ([developerkunal](https://redirect.github.com/developerkunal)) **Fixed** - fix: clone http.DefaultClient in authentication.New to avoid mutating global state [#704](https://redirect.github.com/auth0/go-auth0/pull/704) ([developerkunal](https://redirect.github.com/developerkunal)) </details> <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)</summary> ### [`v1.41.2`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-06-26) [Compare Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.41.1...v1.41.2) #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/deadline`: [v1.14.0](service/deadline/CHANGELOG.md#v1140-2025-06-26) - **Feature**: Added fields to track cumulative task retry attempts for steps and jobs - `github.com/aws/aws-sdk-go-v2/service/ec2`: [v1.227.0](service/ec2/CHANGELOG.md#v12270-2025-06-26) - **Feature**: This release adds support for OdbNetworkArn as a target in VPC Route Tables - `github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations`: [v1.1.0](service/iotmanagedintegrations/CHANGELOG.md#v110-2025-06-26) - **Feature**: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. - `github.com/aws/aws-sdk-go-v2/service/keyspaces`: [v1.19.0](service/keyspaces/CHANGELOG.md#v1190-2025-06-26) - **Feature**: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. - `github.com/aws/aws-sdk-go-v2/service/keyspacesstreams`: [v1.0.0](service/keyspacesstreams/CHANGELOG.md#v100-2025-06-26) - **Release**: New AWS service client module - **Feature**: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. - `github.com/aws/aws-sdk-go-v2/service/kms`: [v1.41.2](service/kms/CHANGELOG.md#v1412-2025-06-26) - **Documentation**: This release updates AWS CLI examples for KMS APIs. - `github.com/aws/aws-sdk-go-v2/service/qbusiness`: [v1.27.0](service/qbusiness/CHANGELOG.md#v1270-2025-06-26) - **Feature**: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer - `github.com/aws/aws-sdk-go-v2/service/workspaces`: [v1.58.0](service/workspaces/CHANGELOG.md#v1580-2025-06-26) - **Feature**: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories </details> <details> <summary>aws/smithy-go (github.com/aws/smithy-go)</summary> ### [`v1.24.2`](https://redirect.github.com/aws/smithy-go/releases/tag/v1.24.2): Release (2026-02-27) [Compare Source](https://redirect.github.com/aws/smithy-go/compare/v1.24.1...v1.24.2) ### Release (2026-02-27) #### General Highlights - **Dependency Update**: Bump minimum go version to 1.24. ### [`v1.24.1`](https://redirect.github.com/aws/smithy-go/blob/HEAD/CHANGELOG.md#Release-2026-02-20) [Compare Source](https://redirect.github.com/aws/smithy-go/compare/v1.24.0...v1.24.1) #### General Highlights - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/smithy-go`: v1.24.1 - **Feature**: Add new middleware functions to get event stream output from middleware </details> <details> <summary>charmbracelet/lipgloss (github.com/charmbracelet/lipgloss/v2)</summary> ### [`v2.0.0`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.0) ![lipgloss-v2-block](https://redirect.github.com/user-attachments/assets/51264df0-cbf9-4885-9910-43ba4fdf1f3d) ### Do you think you can handle Lip Gloss v2? We’re really excited for you to try Lip Gloss v2! Read on for new features and a guide to upgrading. If you (or your LLM) just want the technical details, take a look at [Upgrade Guide](UPGRADE_GUIDE_V2.md). > \[!NOTE] > We take API changes seriously and strive to make the upgrade process as simple as possible. We believe the changes bring necessary improvements as well as pave the way for the future. If something feels way off, let us know. #### What’s new? The big changes are that Styles are now deterministic (λipgloss!) and you can be much more intentional with your inputs and outputs. Why does this matter? ##### Playing nicely with others v2 gives you precise control over I/O. One of the issues we saw with the Lip Gloss and [Bubble Tea](https://redirect.github.com/charmbracelet/bubbletea) v1s is that they could fight over the same inputs and outputs, producing lock-ups. The v2s now operate in lockstep. ##### Querying the right inputs and outputs In v1, Lip Gloss defaulted to looking at `stdin` and `stdout` when downsampling colors and querying for the background color. This was not always necessarily what you wanted. For example, if your application was writing to `stderr` while redirecting `stdout` to a file, the program would erroneously think output was not a TTY and strip colors. Lip Gloss v2 gives you control over this. ##### Going beyond localhost Did you know TUIs and CLIs can be served over the network? For example, [Wish](https://redirect.github.com/charmbracelet/wish) allows you to serve Bubble Tea and Lip Gloss over SSH. In these cases, you need to work with the input and output of the connected clients as opposed to `stdin` and `stdout`, which belong to the server. Lip Gloss v2 gives you flexibility around this in a more natural way. #### 🧋 Using Lip Gloss with Bubble Tea? Make sure you get all the latest v2s as they’ve been designed to work together. ```bash # Collect the whole set. go get charm.land/bubbletea/v2 go get charm.land/bubbles/v2 go get charm.land/lipgloss/v2 ``` #### 🐇 Quick upgrade If you don't have time for changes and just want to upgrade to Lip Gloss v2 as fast as possible? Here’s a quick guide: ##### Use the `compat` package The `compat` package provides adaptive colors, complete colors, and complete adaptive colors: ```go import "charm.land/lipgloss/v2/compat" // Before color := lipgloss.AdaptiveColor{Light: "#f1f1f1", Dark: "#cccccc"} // After color := compat.AdaptiveColor{Light: lipgloss.Color("#f1f1f1"), Dark: lipgloss.Color("#cccccc")} ``` `compat` works by looking at `stdin` and `stdout` on a global basis. Want to change the inputs and outputs? Knock yourself out: ```go import ( "charm.land/lipgloss/v2/compat" "github.com/charmbracelet/colorprofile" ) func init() { // Let’s use stderr instead of stdout. compat.HasDarkBackground = lipgloss.HasDarkBackground(os.Stdin, os.Stderr) compat.Profile = colorprofile.Detect(os.Stderr, os.Environ()) } ``` ##### Use the new Lip Gloss writer If you’re using Bubble Tea with Lip Gloss you can skip this step. If you're using Lip Gloss in a standalone fashion, however, you'll want to use `lipgloss.Println` (and `lipgloss.Printf` and so on) when printing your output: ```go s := someStyle.Render("Fancy Lip Gloss Output") // Before fmt.Println(s) // After lipgloss.Println(s) ``` Why? Because `lipgloss.Println` will automatically downsample colors based on the environment. ##### That’s it! Yep, you’re done. All this said, we encourage you to read on to get the full benefit of v2. #### 👀 What’s changing? Only a couple main things that are changing in Lip Gloss v2: - Color downsampling in non-Bubble-Tea uses cases is now a manual proccess (don't worry, it's easy) - Background color detection and adaptive colors are manual, and intentional (but optional) ##### 🪄 Downsampling colors with a writer One of the best things about Lip Gloss is that it can automatically downsample colors to the best available profile, stripping colors (and ANSI) entirely when output is not a TTY. If you're using Lip Gloss with Bubble Tea there's nothing to do here: downsampling is built into Bubble Tea v2. If you're not using Bubble Tea you now need to use a writer to downsample colors. Lip Gloss writers are a drop-in replacement for the usual functions found in the `fmt` package: ```go s := someStyle.Render("Hello!") // Downsample and print to stdout. lipgloss.Println(s) // Render to a variable. downsampled := lipgloss.Sprint(s) // Print to stderr. lipgloss.Fprint(os.Stderr, s) ``` ##### 🌛 Background color detection and adaptive colors Rendering different colors depending on whether the terminal has a light or dark background is an awesome power. Lip Gloss v2 gives you more control over this progress. This especially matters when input and output are not `stdin` and `stdout`. If that *doesn’t* matter to you and you're only working with `stdout` you skip this via [`compat` above](#quick-upgrade), though we encourage you to explore this new functionality. ##### With Bubble Tea In Bubble Tea, request the background color, listen for a `BackgroundColorMsg` in your update, and respond accordingly. ```go // Query for the background color. func (m model) Init() tea.Cmd { return tea.RequestBackgroundColor } // Listen for the response and initialize your styles accordigly. func (m model) Update(msg tea.Msg) (tea.Model, tea.Cmd) { switch msg := msg.(type) { case tea.BackgroundColorMsg: // Initialize your styles now that you know the background color. m.styles = newStyles(msg.IsDark()) return m, nil } } type styles { myHotStyle lipgloss.Style } func newStyles(bgIsDark bool) (s styles) { lightDark := lipgloss.LightDark(bgIsDark) // just a helper function return styles{ myHotStyle := lipgloss.NewStyle().Foreground(lightDark("#f1f1f1", "#333333")) } } ``` ##### Standalone If you're not using Bubble Tea you simply can perform the query manually: ```go // Detect the background color. Notice we're writing to stderr. hasDarkBG, err := lipgloss.HasDarkBackground(os.Stdin, os.Stderr) if err != nil { log.Fatal("Oof:", err) } // Create a helper for choosing the appropriate color. lightDark := lipgloss.LightDark(hasDarkBG) // Declare some colors. thisColor := lightDark("#C5ADF9", "#864EFF") thatColor := lightDark("#37CD96", "#22C78A") // Render some styles. a := lipgloss.NewStyle().Foreground(thisColor).Render("this") b := lipgloss.NewStyle().Foreground(thatColor).Render("that") // Print to stderr. lipgloss.Fprintf(os.Stderr, "my fave colors are %s and %s...for now.", a, b) ``` #### 🥕 Other stuff ##### Colors are now `color.Color` `lipgloss.Color()` now produces an idiomatic `color.Color`, whereas before colors were type `lipgloss.TerminalColor`. Generally speaking, this is more of an implementation detail, but it’s worth noting the structural differences. ```go // Before type TerminalColor interface{/* ... */} type Color string // After func Color(string) color.Color type RGBColor struct{R, G, B uint8} func LightDark(isDark bool) LightDarkFunc type LightDarkFunc func(light, dark color.Color) color.Color func Complete(colorprofile.Profile) CompleteFunc type CompleteFunc func(ansi, ansi256, truecolor color.Color) color.Color ``` <details> <summary> #### Changelog </summary> ##### New! * b259725e46e9fbb2af6673d74f26917ed42df370: feat(blending): early return when steps <= num stops (#566) (@lrstanley) * 71dd8ee66ac1f4312844a792952789102513c9c5: feat(borders): initial border blend implementation (#560) (@lrstanley) * 2166ce88ec1cca66e8a820a86baafd7cfd34bcd0: feat(canvas): accept any type as layer content (@aymanbagabas) * 0303864674b37235e99bc14cd4da17c409ec448e: feat(colors): refactor colors sub-package into root package (@lrstanley) * 9c86c1f950fbfffd6c56a007de6bd3e61d67a1ea: feat(colors): switch from int to float64 for inputs (@lrstanley) * 0334bb4562ca1f72a684c1c2a63c848ac21fffc6: feat(tree): support width and indenter styling (#446) (@dlvhdr) * 9a771f5a242df0acf862c7acd72124469eb4635a: feat: BlendLinear* -> Blend* (@lrstanley) * 34443e82a7ddcbe37b9dc0d69b84385e400b8a5c: feat: add brightness example, misc example tweaks (@lrstanley) * c95c5f3c5b27360d344bf82736a8ce9257aaf71e: feat: add hyperlink support (#473) (@aymanbagabas) * 5e542b8c69a0f20ea62b2caa422bbee5337fbb48: feat: add underline style and color (@aymanbagabas) * d3032608aa74f458a7330e17cc304f1ebb5fa1b9: feat: add wrap implementation preserving styles and links (#582) (@aymanbagabas) * 7bf18447c8729839ca7e79aa3ba9aa00ecb8f963: feat: further simplify colors in examples (@lrstanley) * 27a8cf99a81d1bd5ab875cd773ac8647320b02ba: feat: implement uv Drawable for Canvas and Layer (@aymanbagabas) * c4c08fc4f8a107b00bc54407ad9094b9642dd103: feat: implement uv.Drawable for *Layer (#607) (@ayn2op) * 18b4bb86c515f93eede5720fe66b0d9ba83fa489: feat: initial implementation of color blending & brightness helpers (@lrstanley) * 63610090044b782caa8ce8b1b53cc81b98264eaa: feat: update examples/layout to use colors.BlendLinear1D (@lrstanley) * de4521b8baa33c49a96e9458e9d9213c7ba407bd: feat: update examples/list/sublist to use colors.BlendLinear1D (@lrstanley) * 1b3716cc53b5cc29c2b1b0c655a684b797fef075: feat: use custom hex parsing for increased perf (@lrstanley) ##### Fixed * 06ca257e382fa107afcfe147c9cda836b3cdb4be: fix(canvas): Hit method should return Layer ID as string instead of *Layer (@aymanbagabas) * d1fa8790efbd70df8b0dd8bd139434f3ac6e063b: fix(canvas): handle misc edge cases (#588) (@lrstanley) * 7869489d8971e2e3a8de8e0a4a1e1dfe4895a352: fix(canvas): simplify Render handling (@aymanbagabas) * 68f38bdee72b769ff9c137a4097d9e64d401b703: fix(ci): use local golangci config (@aymanbagabas) * ff11224963a33f6043dfb3408e67c7fea7759f34: fix(color): update deprecated types (@aymanbagabas) * 3f659a836c78f6ad31f5652571007cb4ab9d1eb8: fix(colors): update examples to use new method locations (@lrstanley) * 3248589b24c9894694be6d1862817acb77e119cc: fix(layers): allow recursive rendering for layers that only contain children (#589) (@lrstanley) * 6c33b19c3f0a1e7d50ce9028ef4bda3ca631cd68: fix(lint): remove nolint:exhaustive comments and ignore var-naming rule for revive (@aymanbagabas) * d267651963ad3ba740b30ecf394d7a5ef86704fc: fix(style): use alias for Underline type from ansi package (@aymanbagabas) * 76690c6608346fc7ef09db388ee82feaa7920630: fix(table): fix wrong behavior of headers regarding margins (#513) (@andreynering) * 41ff0bf215ea2a444c5161d0bd7fa38b4a70af27: fix(terminal): switch to uv.NewCancelReader for Windows compatibility (@aymanbagabas) * 5d69c0e790f24cbfaa94f8f8b2b64d1bb926c96d: fix: ensure we strip out \r\n from strings when getting lines (@aymanbagabas) * 2e570c2690b61bac103e7eef9da917d1dfc6512d: fix: linear-2d example (@lrstanley) * 0d6a022f7d075e14d61a755b3e9cab9d97519f21: fix: lint issues (@aymanbagabas) * 832bc9d6b9d209e002bf1131938ffe7dbba07652: fix: prevent infinite loop with zero-width whitespace chars (#108) (#604) (@calobozan) * 354e70d6d0762e6a54cfc45fe8d019d6087a4c00: fix: rename underline constants to be consistent with other style properties (@raphamorim) ##### Docs * 60df47f8000b6cb5dfec46af37bceb2c9050bef0: docs(readme): cleanup badges (@meowgorithm) * 881a1ffc54b6afb5f22ead143d10f8dce05e7e66: docs(readme): update art (@meowgorithm) * ee74a03efa8363cf3b17ee7a128b9825c8f3791e: docs(readme): update footer art and copyright date (@meowgorithm) * 8863cc06da67b8ef9f4b6f80c567738fa53bd090: docs(readme): update header image (@meowgorithm) * 4e8ca2d9f045d6bca78ee0150420e26cda8bcccf: docs: add underline styles and colors caveats (@aymanbagabas) * a8cfc26d7de7bdb335a8c7c2f0c8fc4f18ea8993: docs: add v2 upgrade and changes guide (#611) (@aymanbagabas) * 454007a0ad4e8b60afc1f6fdc3e3424e4d3a4c16: docs: update comments in for GetPaddingChar and GetMarginChar (@aymanbagabas) * 95f30dbdc90cc409e8645de4bd2296a33ba37c70: docs: update mascot header image (@aymanbagabas) * a06a847849dbd1726c72047a98ab8cce0f73a65f: docs: update readme in prep for v2 (#613) (@aymanbagabas) ##### Other stuff * 5ca0343ec7be2e85521e79734f4392cdb19e4949: Fix(table): BorderRow (#514) (@bashbunni) * f2d1864a58cd455ca118e04123feae177d7d2eef: Improve performance of maxRuneWidth (#592) (@clipperhouse) * 10c048e361129dd601eb6ff8c0c2458814291156: Merge v2-uv-canvas into v2-exp (@aymanbagabas) * d02a007bb19e14f6bf351ed71a47beb6bee9cae3: ci: sync dependabot config (#521) (@charmcli) * 8708a8925b60c610e68b9aa6e509ebd513a8244e: ci: sync dependabot config (#561) (@charmcli) * 7d1b622c64d1a68cdc94b30864ae5ec3e6abc2dd: ci: sync dependabot config (#572) (@charmcli) * 19a4b99cb3bbbd2ab3079adc500faa1875da87e8: ci: sync golangci-lint config (@aymanbagabas) * a6c079dc8a3fc6e68a00214a767627ec8447adb5: ci: sync golangci-lint config (@aymanbagabas) * 350edde4903bcc2eee5a8ce1552dd90c3b89c125: ci: sync golangci-lint config (#553) (@github-actions[bot]) * 1e3ee3483a907facd98ca0a56f6694a0e9365f26: ci: sync golangci-lint config (#598) (@github-actions[bot]) * e729228ac14e63057e615a2241ce4303d59fef08: lint: fix lint for newer go versions (#540) (@andreynering) * 66093c8cf3b79596597c1e39fd4c67a954010fb3: perf: remove allocations from getFirstRuneAsString (#578) (@clipperhouse) * ad876c4132d61951d091a1a535c27237f6a90ad6: refactor: new Canvas, Compositor, and Layer API (#591) (@aymanbagabas) * 3aae2866142214f5b8ce9cbfc1939645928dcb8f: refactor: update imports to use charm.land domain (@aymanbagabas) </details> #### 🌈 Feedback That's a wrap! Feel free to reach out, ask questions, and let us know how it's going. We'd *love* to know what you think. - [Discord](https://charm.land/discord) - [Matrix](https://charm.land/matrix) - [Email](mailto:vt100@charm.land) *** Part of [Charm](https://charm.land). <a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-badge.jpg" width="400"></a> Charm热爱开源 • Charm loves open source • نحنُ نحب المصادر المفتوحة </details> <details> <summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary> ### [`v0.43.0`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.43.0): 0.43.0 [Compare Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.42.0...v0.43.0) ##### Breaking Changes 🛠 - Add support for go 1.26 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1193](https://redirect.github.com/getsentry/sentry-go/pull/1193) - bump minimum supported go version to 1.24 - change type signature of attributes for Logs and Metrics. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1205](https://redirect.github.com/getsentry/sentry-go/pull/1205) - users are not supposed to modify Attributes directly on the Log/Metric itself, but this is still is a breaking change on the type. - Send uint64 overflowing attributes as numbers. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1198](https://redirect.github.com/getsentry/sentry-go/pull/1198) - The SDK was converting overflowing uint64 attributes to strings for slog and logrus integrations. To eliminate double types for these attributes, the SDK now sends the overflowing attribute as is, and lets the server handle the overflow appropriately. - It is expected that overflowing unsigned integers would now get dropped, instead of converted to strings. ##### New Features ✨ - Add zap logging integration by [@giortzisg](https://redirect.github.com/giortzisg) in [#1184](https://redirect.github.com/getsentry/sentry-go/pull/1184) - Log specific message for RequestEntityTooLarge by [@giortzisg](https://redirect.github.com/giortzisg) in [#1185](https://redirect.github.com/getsentry/sentry-go/pull/1185) ##### Bug Fixes 🐛 - Improve otel span map cleanup performance by [@giortzisg](https://redirect.github.com/giortzisg) in [#1200](https://redirect.github.com/getsentry/sentry-go/pull/1200) - Ensure correct signal delivery on multi-client setups by [@giortzisg](https://redirect.github.com/giortzisg) in [#1190](https://redirect.github.com/getsentry/sentry-go/pull/1190) ##### Internal Changes 🔧 ##### Deps - Bump golang.org/x/crypto to 0.48.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1196](https://redirect.github.com/getsentry/sentry-go/pull/1196) - Use go1.24.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1195](https://redirect.github.com/getsentry/sentry-go/pull/1195) - Bump github.com/gofiber/fiber/v2 from 2.52.9 to 2.52.11 in /fiber by [@dependabot](https://redirect.github.com/dependabot) in [#1191](https://redirect.github.com/getsentry/sentry-go/pull/1191) - Bump getsentry/craft from 2.19.0 to 2.20.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1187](https://redirect.github.com/getsentry/sentry-go/pull/1187) ##### Other - Add omitzero and remove custom serialization by [@giortzisg](https://redirect.github.com/giortzisg) in [#1197](https://redirect.github.com/getsentry/sentry-go/pull/1197) - Rename Telemetry Processor components by [@giortzisg](https://redirect.github.com/giortzisg) in [#1186](https://redirect.github.com/getsentry/sentry-go/pull/1186) </details> <details> <summary>goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)</summary> ### [`v2.14.1`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.1) [Compare Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.0...v2.14.1) #### Announcement Read the official announcement: [Announcing GoReleaser v2.14](https://goreleaser.com/blog/goreleaser-v2.14/). #### Changelog ##### Security updates - [`6bce54f`](https://redirect.github.com/goreleaser/goreleaser/commit/6bce54f02c901c4e42e699d35e66b4d82f2ce162): sec(deps): update filippo.io/edwards25519 ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Bug fixes - [`6e813e9`](https://redirect.github.com/goreleaser/goreleaser/commit/6e813e9a69f48c67999dbef151b3f79f13e04756): fix(docker/v2): output in error ([@caarlos0](https://redirect.github.com/caarlos0)) - [`4621880`](https://redirect.github.com/goreleaser/goreleaser/commit/46218808ad593c62b58b7bd37dd516501413cb62): fix(tmpl): rename toSlice to list ([@caarlos0](https://redirect.github.com/caarlos0)) - [`c174134`](https://redirect.github.com/goreleaser/goreleaser/commit/c1741345b51d0c19f3f26a6af329100f28593b68): fix(tmpl): slice -> toSlice ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Documentation updates - [`8d53236`](https://redirect.github.com/goreleaser/goreleaser/commit/8d53236324a057e06f6f9a81803df6c13bd29b3d): docs: announce v2.14 ([@caarlos0](https://redirect.github.com/caarlos0)) - [`c5c6637`](https://redirect.github.com/goreleaser/goreleaser/commit/c5c6637a850dcb9d68b6b23465bba94d3440e5a8): docs: fix gemfury links ([@caarlos0](https://redirect.github.com/caarlos0)) - [`79922a2`](https://redirect.github.com/goreleaser/goreleaser/commit/79922a277cfe9d9ab9cf8814eb9f1503f6417a02): docs: fix more divider ([@caarlos0](https://redirect.github.com/caarlos0)) - [`fe23919`](https://redirect.github.com/goreleaser/goreleaser/commit/fe23919a06c53f17a794680ba351df6d19763f33): docs: fix syntax ([@caarlos0](https://redirect.github.com/caarlos0)) - [`0c1ac6d`](https://redirect.github.com/goreleaser/goreleaser/commit/0c1ac6dd222c2f026026fa334d1974cf21a95b22): docs: fmt ([@caarlos0](https://redirect.github.com/caarlos0)) - [`ce778c3`](https://redirect.github.com/goreleaser/goreleaser/commit/ce778c3d2147417769275463f94e1931ca2de390): docs: typo ([@caarlos0](https://redirect.github.com/caarlos0)) - [`63e1434`](https://redirect.github.com/goreleaser/goreleaser/commit/63e143478d2c6f36ea3571a19dc77b8131008595): docs: update github action ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Other work - [`d525fe7`](https://redirect.github.com/goreleaser/goreleaser/commit/d525fe7b7b64047693acf1973d3ce1818907a9ce): chore: remove unused file ([@caarlos0](https://redirect.github.com/caarlos0)) - [`fd46e47`](https://redirect.github.com/goreleaser/goreleaser/commit/fd46e47b69a1d7014f5852513c6ceb269118d0a3): fix ([@caarlos0](https://redirect.github.com/caarlos0)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.14.0...v2.14.1> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and [Twitter](https://twitter.com/goreleaser)! <a href="https://goreleaser.com"><img src="https://raw.githubuserco </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Broad Go module upgrades (cloud/AWS/Auth0/K8s/River/Sentry/etc.) can introduce subtle compile/runtime behavior changes despite no intentional app-logic edits. Generated `templ` output is re-vended, so mismatched tool versions or formatting differences could cause CI/build churn. > > **Overview** > **Dependency/tooling refresh.** Updates `go.mod`/`go.sum` with a wide set of Go module bumps (including Google Cloud, AWS SDK v2, Auth0, River/RiverUI, K8s libs, `golang.org/x/*`, etc.) and adds a new indirect `github.com/go-json-experiment/json` requirement. > > **Aligns `templ` across environments.** Pins `github.com/a-h/templ` and `templ` CLI to `v0.3.1001` in CI workflows and Docker build images/devcontainer, and re-generates committed `*_templ.go` files in `services/api-server/area51` and `services/gateway/area51` to match the new generator version. > > **Dev tooling bumps.** Updates several Go tool installs in the devcontainer (e.g., `goimports-reviser`, `setup-envtest`, `controller-gen`, `goreleaser`). > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit be9943631e180b02b0893e8b6e940abd3dfd5e10. Configure [here](https://cursor.com/dashboard?tab=bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Elliot Waddington <getinnocuous@users.noreply.github.com> GitOrigin-RevId: 1da2a88d783e8bf5b7fdbbbdf2c3aa1b1e5f8f2b

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/batch/armbatch/v3](https://redirect.github.com/Azure/azure-sdk-for-go) | `v3.0.1` → `v4.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fbatch%2farmbatch%2fv3/v4.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fbatch%2farmbatch%2fv3/v3.0.1/v4.0.0?slim=true) | | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources/v2](https://redirect.github.com/Azure/azure-sdk-for-go) | `v2.1.0` → `v3.0.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fresources%2farmresources%2fv2/v3.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fresources%2farmresources%2fv2/v2.1.0/v3.0.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Upgrades a major Azure SDK dependency and adjusts Batch adapters to match removed/changed SDK fields, which could affect Azure Batch discovery and linked-item generation at runtime. > > **Overview** > **Upgrades Azure Batch ARM SDK from `armbatch/v3` to `armbatch/v4`** and updates all Batch account/application/pool clients, manual wrappers, integration tests, and generated GoMock stubs to use the new import path. > > Aligns Batch pool linking behavior with SDK changes by **dropping certificate reference linking** (and removing `BatchBatchCertificate` from pool `PotentialLinks`) because `armbatch/v4` no longer exposes pool certificate refs. > > Refreshes `go.mod`/`go.sum` for the dependency upgrade (including new Azure SDK indirect deps and a `jwt/v5` patch bump). > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit c3807becb46015c7cfe621c20848e4d2e6ea6c37. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: lionel.wilson <lionel.wilson@overmind.tech> GitOrigin-RevId: 57bdc182de2762672c5aaff70627588886400318

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 9bb7cfcb7fdb5f30b717a8044cae9f25f935505b

… 2f722ef (#3951) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `4cfbd41` → `2f722ef` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 3c95d4397b7dbd6b25f57035eae721715f784ffe

… a57be14 (#4030) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `2f722ef` → `a57be14` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 12b6ad8bb0959eb7e0f78c6c7baee18bff7ca520

…t to 813a975 (#4029) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/hashicorp/terraform-config-inspect](https://redirect.github.com/hashicorp/terraform-config-inspect) | require | digest | `f4be3ba` → `813a975` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 313b6b8db2626514ba8f5587c0c25763568608c5

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: a8c5570455e95dac54d374f4b10d669a83dde1c7

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [buf.build/go/protovalidate](https://redirect.github.com/bufbuild/protovalidate-go) | `v1.1.2` → `v1.1.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/buf.build%2fgo%2fprotovalidate/v1.1.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/buf.build%2fgo%2fprotovalidate/v1.1.2/v1.1.3?slim=true) | | [cloud.google.com/go/aiplatform](https://redirect.github.com/googleapis/google-cloud-go) | `v1.116.0` → `v1.118.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2faiplatform/v1.118.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2faiplatform/v1.116.0/v1.118.0?slim=true) | | [cloud.google.com/go/auth](https://redirect.github.com/googleapis/google-cloud-go) | `v0.18.1` → `v0.18.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fauth/v0.18.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fauth/v0.18.1/v0.18.2?slim=true) | | [cloud.google.com/go/bigquery](https://redirect.github.com/googleapis/google-cloud-go) | `v1.73.1` → `v1.74.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fbigquery/v1.74.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fbigquery/v1.73.1/v1.74.0?slim=true) | | [cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go) | `v1.54.0` → `v1.55.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcompute/v1.55.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcompute/v1.54.0/v1.55.0?slim=true) | | [cloud.google.com/go/dataproc/v2](https://redirect.github.com/googleapis/google-cloud-go) | `v2.15.0` → `v2.16.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fdataproc%2fv2/v2.16.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fdataproc%2fv2/v2.15.0/v2.16.0?slim=true) | | [cloud.google.com/go/kms](https://redirect.github.com/googleapis/google-cloud-go) | `v1.25.0` → `v1.26.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fkms/v1.26.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fkms/v1.25.0/v1.26.0?slim=true) | | [github.com/a-h/templ](https://redirect.github.com/a-h/templ) | `v0.3.977` → `v0.3.1001` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fa-h%2ftempl/v0.3.1001?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fa-h%2ftempl/v0.3.977/v0.3.1001?slim=true) | | [github.com/a-h/templ/cmd/templ](https://redirect.github.com/a-h/templ) | `v0.3.977` → `v0.3.1001` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fa-h%2ftempl%2fcmd%2ftempl/v0.3.1001?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fa-h%2ftempl%2fcmd%2ftempl/v0.3.977/v0.3.1001?slim=true) | | [github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0) | `v2.5.0` → `v2.6.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.6.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.5.0/v2.6.0?slim=true) | | [github.com/aws/aws-sdk-go-v2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.1` → `v1.41.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2/v1.41.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2/v1.41.1/v1.41.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/config](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.32.7` → `v1.32.10` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fconfig/v1.32.7/v1.32.10?slim=true) | | [github.com/aws/aws-sdk-go-v2/credentials](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.19.7` → `v1.19.10` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.10?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fcredentials/v1.19.7/v1.19.10?slim=true) | | [github.com/aws/aws-sdk-go-v2/feature/ec2/imds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.18.17` → `v1.18.18` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2ffeature%2fec2%2fimds/v1.18.17/v1.18.18?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/apigateway](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.38.4` → `v1.38.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.38.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fapigateway/v1.38.4/v1.38.5?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/autoscaling](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.64.0` → `v1.64.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.64.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fautoscaling/v1.64.0/v1.64.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/cloudfront](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.60.0` → `v1.60.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.60.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudfront/v1.60.0/v1.60.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/cloudwatch](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.53.1` → `v1.55.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.55.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fcloudwatch/v1.53.1/v1.55.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/directconnect](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.38.11` → `v1.38.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.38.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdirectconnect/v1.38.11/v1.38.12?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.55.0` → `v1.56.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.56.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fdynamodb/v1.55.0/v1.56.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.288.0` → `v1.293.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.293.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.288.0/v1.293.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.71.0` → `v1.73.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.73.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.71.0/v1.73.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/efs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.10` → `v1.41.11` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.41.11?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fefs/v1.41.10/v1.41.11?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.80.0` → `v1.80.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.0/v1.80.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.33.19` → `v1.33.20` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.33.20?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancing/v1.33.19/v1.33.20?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.54.6` → `v1.54.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.54.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2felasticloadbalancingv2/v1.54.6/v1.54.7?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.53.2` → `v1.53.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.2/v1.53.3?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/kms](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.49.5` → `v1.50.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.50.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fkms/v1.49.5/v1.50.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.88.0` → `v1.88.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.88.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.88.0/v1.88.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/networkfirewall](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.59.3` → `v1.59.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.59.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkfirewall/v1.59.3/v1.59.4?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/networkmanager](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.4` → `v1.41.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.41.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fnetworkmanager/v1.41.4/v1.41.5?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/rds](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.115.0` → `v1.116.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.116.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2frds/v1.115.0/v1.116.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/route53](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.62.1` → `v1.62.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.62.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2froute53/v1.62.1/v1.62.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.96.0` → `v1.96.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.0/v1.96.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.59.1` → `v1.59.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.1/v1.59.2?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sns](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.39.11` → `v1.39.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.39.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsns/v1.39.11/v1.39.12?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sqs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.42.21` → `v1.42.22` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.42.22?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsqs/v1.42.21/v1.42.22?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ssm](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.67.8` → `v1.68.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.68.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fssm/v1.67.8/v1.68.1?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sts](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.41.6` → `v1.41.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.41.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsts/v1.41.6/v1.41.7?slim=true) | | [github.com/aws/smithy-go](https://redirect.github.com/aws/smithy-go) | `v1.24.0` → `v1.24.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2fsmithy-go/v1.24.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2fsmithy-go/v1.24.0/v1.24.2?slim=true) | | [github.com/charmbracelet/lipgloss/v2](https://redirect.github.com/charmbracelet/lipgloss) | `v2.0.0-beta.3` → `v2.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcharmbracelet%2flipgloss%2fv2/v2.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcharmbracelet%2flipgloss%2fv2/v2.0.0-beta.3/v2.0.0?slim=true) | | [github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go) | `v0.42.0` → `v0.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.42.0/v0.43.0?slim=true) | | [github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser) | `v2.13.3` → `v2.14.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.13.3/v2.14.1?slim=true) | | [github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk) | `v0.7.9` → `v0.7.12` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.7.12?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.7.9/v0.7.12?slim=true) | | [github.com/hashicorp/terraform-plugin-framework](https://redirect.github.com/hashicorp/terraform-plugin-framework) | `v1.17.0` → `v1.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.17.0/v1.18.0?slim=true) | | [github.com/hashicorp/terraform-plugin-go](https://redirect.github.com/hashicorp/terraform-plugin-go) | `v0.29.0` → `v0.30.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.30.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.29.0/v0.30.0?slim=true) | | [github.com/incu6us/goimports-reviser/v3](https://redirect.github.com/incu6us/goimports-reviser) | `v3.11.0` → `v3.12.6` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fincu6us%2fgoimports-reviser%2fv3/v3.12.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fincu6us%2fgoimports-reviser%2fv3/v3.11.0/v3.12.6?slim=true) | | [github.com/kaptinlin/jsonrepair](https://redirect.github.com/kaptinlin/jsonrepair) | `v0.2.8` → `v0.2.17` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fkaptinlin%2fjsonrepair/v0.2.17?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fkaptinlin%2fjsonrepair/v0.2.8/v0.2.17?slim=true) | | [github.com/micahhausler/aws-iam-policy](https://redirect.github.com/micahhausler/aws-iam-policy) | `v0.4.2` → `v0.4.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmicahhausler%2faws-iam-policy/v0.4.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmicahhausler%2faws-iam-policy/v0.4.2/v0.4.3?slim=true) | | [github.com/nats-io/nats.go](https://redirect.github.com/nats-io/nats.go) | `v1.48.0` → `v1.49.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats.go/v1.49.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats.go/v1.48.0/v1.49.0?slim=true) | | [github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go) | `v3.21.0` → `v3.24.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.24.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.21.0/v3.24.0?slim=true) | | [github.com/riverqueue/river](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver/v0.30.2/v0.31.0?slim=true) | | [github.com/riverqueue/river/riverdriver/riverpgxv5](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.30.2/v0.31.0?slim=true) | | [github.com/riverqueue/river/rivertype](https://redirect.github.com/riverqueue/river) | `v0.30.2` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2frivertype/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2frivertype/v0.30.2/v0.31.0?slim=true) | | [github.com/stripe/stripe-go/v84](https://redirect.github.com/stripe/stripe-go) | `v84.3.0` → `v84.4.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstripe%2fstripe-go%2fv84/v84.3.0/v84.4.0?slim=true) | | [github.com/zclconf/go-cty](https://redirect.github.com/zclconf/go-cty) | `v1.17.0` → `v1.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fzclconf%2fgo-cty/v1.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fzclconf%2fgo-cty/v1.17.0/v1.18.0?slim=true) | | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.50.0` → `v0.51.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.50.0...refs/tags/v0.51.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.51.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.50.0/v0.51.0?slim=true) | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.266.0` → `v0.269.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.269.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.266.0/v0.269.0?slim=true) | | [k8s.io/api](https://redirect.github.com/kubernetes/api) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapi/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapi/v0.35.1/v0.35.2?slim=true) | | [k8s.io/apimachinery](https://redirect.github.com/kubernetes/apimachinery) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapimachinery/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapimachinery/v0.35.1/v0.35.2?slim=true) | | [k8s.io/client-go](https://redirect.github.com/kubernetes/client-go) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fclient-go/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fclient-go/v0.35.1/v0.35.2?slim=true) | | [k8s.io/component-base](https://redirect.github.com/kubernetes/component-base) | `v0.35.1` → `v0.35.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fcomponent-base/v0.35.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fcomponent-base/v0.35.1/v0.35.2?slim=true) | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `v1.45.0` → `v1.46.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/modernc.org%2fsqlite/v1.46.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/modernc.org%2fsqlite/v1.45.0/v1.46.1?slim=true) | | riverqueue.com/riverui | `v0.14.0` → `v0.15.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/riverqueue.com%2friverui/v0.15.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/riverqueue.com%2friverui/v0.14.0/v0.15.0?slim=true) | | [sigs.k8s.io/controller-runtime/tools/setup-envtest](https://redirect.github.com/kubernetes-sigs/controller-runtime) | `v0.0.0-20260215011159-80d56e741406` → `v0.0.0-20260216173200-e4c1c38bcbdb` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260216173200-e4c1c38bcbdb?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260215011159-80d56e741406/v0.0.0-20260216173200-e4c1c38bcbdb?slim=true) | | [sigs.k8s.io/controller-tools/cmd/controller-gen](https://redirect.github.com/kubernetes-sigs/controller-tools) | `v0.20.0` → `v0.20.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-tools%2fcmd%2fcontroller-gen/v0.20.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-tools%2fcmd%2fcontroller-gen/v0.20.0/v0.20.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. ## ⚠️ Warning These modules contain database migrations that need to be added manually to our atlas migrations. Check the contents of https://github.com/riverqueue/river/tree/master/rivermigrate/migration before merging this update. --- ### Release Notes <details> <summary>bufbuild/protovalidate-go (buf.build/go/protovalidate)</summary> ### [`v1.1.3`](https://redirect.github.com/bufbuild/protovalidate-go/releases/tag/v1.1.3) [Compare Source](https://redirect.github.com/bufbuild/protovalidate-go/compare/v1.1.2...v1.1.3) #### What's Changed - Fix a few godoc comments and update golangci-lint by [@pkwarren](https://redirect.github.com/pkwarren) in [#306](https://redirect.github.com/bufbuild/protovalidate-go/pull/306) - Bump the go group across 1 directory with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#308](https://redirect.github.com/bufbuild/protovalidate-go/pull/308) - Fix registry chain for pb.Map in NativeToValue by [@rodaine](https://redirect.github.com/rodaine) in [#309](https://redirect.github.com/bufbuild/protovalidate-go/pull/309) **Full Changelog**: <https://github.com/bufbuild/protovalidate-go/compare/v1.1.2...v1.1.3> </details> <details> <summary>a-h/templ (github.com/a-h/templ)</summary> ### [`v0.3.1001`](https://redirect.github.com/a-h/templ/releases/tag/v0.3.1001) [Compare Source](https://redirect.github.com/a-h/templ/compare/v0.3.977...v0.3.1001) #### Changelog - [`2c505c0`](https://redirect.github.com/a-h/templ/commit/2c505c0) chore: add unit test to cover recent fix - [`4233429`](https://redirect.github.com/a-h/templ/commit/4233429) chore: bump compiler to Go 1.26 - [`1b9a429`](https://redirect.github.com/a-h/templ/commit/1b9a429) chore: bump deps in fiber example - [`54981db`](https://redirect.github.com/a-h/templ/commit/54981db) chore: bump docusaurus version - [`e606c30`](https://redirect.github.com/a-h/templ/commit/e606c30) chore: bump flake builder - [`66bc28b`](https://redirect.github.com/a-h/templ/commit/66bc28b) chore: bump gofiber example deps - [`95f88a6`](https://redirect.github.com/a-h/templ/commit/95f88a6) chore: bump to Go 1.25, update csrf example - [`916a243`](https://redirect.github.com/a-h/templ/commit/916a243) chore: bump version - [`45dda73`](https://redirect.github.com/a-h/templ/commit/45dda73) chore: fix test broken by merge - [`5ddd784`](https://redirect.github.com/a-h/templ/commit/5ddd784) chore: revert Nix bump to Go 1.26 because it breaks the golangci-lint package - [`4037d8a`](https://redirect.github.com/a-h/templ/commit/4037d8a) feat: add Range to BoolConstantAttribute nodes ([#1340](https://redirect.github.com/a-h/templ/issues/1340)) - [`afb0034`](https://redirect.github.com/a-h/templ/commit/afb0034) feat: add Range to BooleanExpressionAttribute nodes ([#1336](https://redirect.github.com/a-h/templ/issues/1336)) - [`c80f745`](https://redirect.github.com/a-h/templ/commit/c80f745) feat: add Range to ChildrenExpression nodes ([#1337](https://redirect.github.com/a-h/templ/issues/1337)) - [`b0f5243`](https://redirect.github.com/a-h/templ/commit/b0f5243) feat: add Range to ConditionalAttribute nodes ([#1338](https://redirect.github.com/a-h/templ/issues/1338)) - [`60fc376`](https://redirect.github.com/a-h/templ/commit/60fc376) feat: add Range to ConstantAttribute nodes ([#1341](https://redirect.github.com/a-h/templ/issues/1341)) - [`b4e809e`](https://redirect.github.com/a-h/templ/commit/b4e809e) feat: add Range to SpreadAttributes nodes ([#1335](https://redirect.github.com/a-h/templ/issues/1335)) - [`5824d4b`](https://redirect.github.com/a-h/templ/commit/5824d4b) feat: add TLS support to live reload proxy ([#1345](https://redirect.github.com/a-h/templ/issues/1345)) - [`e9a940b`](https://redirect.github.com/a-h/templ/commit/e9a940b) feat: strip space from CSS classname rendering, closes [#1074](https://redirect.github.com/a-h/templ/issues/1074) ([#1346](https://redirect.github.com/a-h/templ/issues/1346)) - [`bdda41e`](https://redirect.github.com/a-h/templ/commit/bdda41e) fix: don't remove unaliased hyphenated imports if they're used ([#1342](https://redirect.github.com/a-h/templ/issues/1342)) - [`c2ff8bb`](https://redirect.github.com/a-h/templ/commit/c2ff8bb) fix: issue 1253 ([#1339](https://redirect.github.com/a-h/templ/issues/1339)) - [`cf6235a`](https://redirect.github.com/a-h/templ/commit/cf6235a) fix: proxy escaping characters ([#1321](https://redirect.github.com/a-h/templ/issues/1321)) - [`d97730c`](https://redirect.github.com/a-h/templ/commit/d97730c) fix: support nushell for prettier, fixes [#1266](https://redirect.github.com/a-h/templ/issues/1266) ([#1343](https://redirect.github.com/a-h/templ/issues/1343)) - [`b666bd7`](https://redirect.github.com/a-h/templ/commit/b666bd7) fix: undefined variable in proxy test range loop ([#1324](https://redirect.github.com/a-h/templ/issues/1324)) - [`be8271d`](https://redirect.github.com/a-h/templ/commit/be8271d) refactor: skip some more tests that require prettier </details> <details> <summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary> ### [`v2.6.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v260-2026-02-25) [Compare Source](https://redirect.github.com/auth0/go-auth0/compare/v2.5.0...v2.6.0) [Full Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.5.0...v2.6.0) **Added** - feat: add connection keys provisioning, SCIM config list, DPoP signing, and on-behalf-of token exchange support [#706](https://redirect.github.com/auth0/go-auth0/pull/706) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add WithTokenSource option for custom token management [#705](https://redirect.github.com/auth0/go-auth0/pull/705) ([developerkunal](https://redirect.github.com/developerkunal)) **Fixed** - fix: clone http.DefaultClient in authentication.New to avoid mutating global state [#704](https://redirect.github.com/auth0/go-auth0/pull/704) ([developerkunal](https://redirect.github.com/developerkunal)) </details> <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)</summary> ### [`v1.41.2`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-06-26) [Compare Source](https://redirect.github.com/aws/aws-sdk-go-v2/compare/v1.41.1...v1.41.2) #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/deadline`: [v1.14.0](service/deadline/CHANGELOG.md#v1140-2025-06-26) - **Feature**: Added fields to track cumulative task retry attempts for steps and jobs - `github.com/aws/aws-sdk-go-v2/service/ec2`: [v1.227.0](service/ec2/CHANGELOG.md#v12270-2025-06-26) - **Feature**: This release adds support for OdbNetworkArn as a target in VPC Route Tables - `github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations`: [v1.1.0](service/iotmanagedintegrations/CHANGELOG.md#v110-2025-06-26) - **Feature**: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations. - `github.com/aws/aws-sdk-go-v2/service/keyspaces`: [v1.19.0](service/keyspaces/CHANGELOG.md#v1190-2025-06-26) - **Feature**: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API. - `github.com/aws/aws-sdk-go-v2/service/keyspacesstreams`: [v1.0.0](service/keyspacesstreams/CHANGELOG.md#v100-2025-06-26) - **Release**: New AWS service client module - **Feature**: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API. - `github.com/aws/aws-sdk-go-v2/service/kms`: [v1.41.2](service/kms/CHANGELOG.md#v1412-2025-06-26) - **Documentation**: This release updates AWS CLI examples for KMS APIs. - `github.com/aws/aws-sdk-go-v2/service/qbusiness`: [v1.27.0](service/qbusiness/CHANGELOG.md#v1270-2025-06-26) - **Feature**: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer - `github.com/aws/aws-sdk-go-v2/service/workspaces`: [v1.58.0](service/workspaces/CHANGELOG.md#v1580-2025-06-26) - **Feature**: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories </details> <details> <summary>aws/smithy-go (github.com/aws/smithy-go)</summary> ### [`v1.24.2`](https://redirect.github.com/aws/smithy-go/releases/tag/v1.24.2): Release (2026-02-27) [Compare Source](https://redirect.github.com/aws/smithy-go/compare/v1.24.1...v1.24.2) ### Release (2026-02-27) #### General Highlights - **Dependency Update**: Bump minimum go version to 1.24. ### [`v1.24.1`](https://redirect.github.com/aws/smithy-go/blob/HEAD/CHANGELOG.md#Release-2026-02-20) [Compare Source](https://redirect.github.com/aws/smithy-go/compare/v1.24.0...v1.24.1) #### General Highlights - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/smithy-go`: v1.24.1 - **Feature**: Add new middleware functions to get event stream output from middleware </details> <details> <summary>charmbracelet/lipgloss (github.com/charmbracelet/lipgloss/v2)</summary> ### [`v2.0.0`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.0) ![lipgloss-v2-block](https://redirect.github.com/user-attachments/assets/51264df0-cbf9-4885-9910-43ba4fdf1f3d) ### Do you think you can handle Lip Gloss v2? We’re really excited for you to try Lip Gloss v2! Read on for new features and a guide to upgrading. If you (or your LLM) just want the technical details, take a look at [Upgrade Guide](UPGRADE_GUIDE_V2.md). > \[!NOTE] > We take API changes seriously and strive to make the upgrade process as simple as possible. We believe the changes bring necessary improvements as well as pave the way for the future. If something feels way off, let us know. #### What’s new? The big changes are that Styles are now deterministic (λipgloss!) and you can be much more intentional with your inputs and outputs. Why does this matter? ##### Playing nicely with others v2 gives you precise control over I/O. One of the issues we saw with the Lip Gloss and [Bubble Tea](https://redirect.github.com/charmbracelet/bubbletea) v1s is that they could fight over the same inputs and outputs, producing lock-ups. The v2s now operate in lockstep. ##### Querying the right inputs and outputs In v1, Lip Gloss defaulted to looking at `stdin` and `stdout` when downsampling colors and querying for the background color. This was not always necessarily what you wanted. For example, if your application was writing to `stderr` while redirecting `stdout` to a file, the program would erroneously think output was not a TTY and strip colors. Lip Gloss v2 gives you control over this. ##### Going beyond localhost Did you know TUIs and CLIs can be served over the network? For example, [Wish](https://redirect.github.com/charmbracelet/wish) allows you to serve Bubble Tea and Lip Gloss over SSH. In these cases, you need to work with the input and output of the connected clients as opposed to `stdin` and `stdout`, which belong to the server. Lip Gloss v2 gives you flexibility around this in a more natural way. #### 🧋 Using Lip Gloss with Bubble Tea? Make sure you get all the latest v2s as they’ve been designed to work together. ```bash # Collect the whole set. go get charm.land/bubbletea/v2 go get charm.land/bubbles/v2 go get charm.land/lipgloss/v2 ``` #### 🐇 Quick upgrade If you don't have time for changes and just want to upgrade to Lip Gloss v2 as fast as possible? Here’s a quick guide: ##### Use the `compat` package The `compat` package provides adaptive colors, complete colors, and complete adaptive colors: ```go import "charm.land/lipgloss/v2/compat" // Before color := lipgloss.AdaptiveColor{Light: "#f1f1f1", Dark: "#cccccc"} // After color := compat.AdaptiveColor{Light: lipgloss.Color("#f1f1f1"), Dark: lipgloss.Color("#cccccc")} ``` `compat` works by looking at `stdin` and `stdout` on a global basis. Want to change the inputs and outputs? Knock yourself out: ```go import ( "charm.land/lipgloss/v2/compat" "github.com/charmbracelet/colorprofile" ) func init() { // Let’s use stderr instead of stdout. compat.HasDarkBackground = lipgloss.HasDarkBackground(os.Stdin, os.Stderr) compat.Profile = colorprofile.Detect(os.Stderr, os.Environ()) } ``` ##### Use the new Lip Gloss writer If you’re using Bubble Tea with Lip Gloss you can skip this step. If you're using Lip Gloss in a standalone fashion, however, you'll want to use `lipgloss.Println` (and `lipgloss.Printf` and so on) when printing your output: ```go s := someStyle.Render("Fancy Lip Gloss Output") // Before fmt.Println(s) // After lipgloss.Println(s) ``` Why? Because `lipgloss.Println` will automatically downsample colors based on the environment. ##### That’s it! Yep, you’re done. All this said, we encourage you to read on to get the full benefit of v2. #### 👀 What’s changing? Only a couple main things that are changing in Lip Gloss v2: - Color downsampling in non-Bubble-Tea uses cases is now a manual proccess (don't worry, it's easy) - Background color detection and adaptive colors are manual, and intentional (but optional) ##### 🪄 Downsampling colors with a writer One of the best things about Lip Gloss is that it can automatically downsample colors to the best available profile, stripping colors (and ANSI) entirely when output is not a TTY. If you're using Lip Gloss with Bubble Tea there's nothing to do here: downsampling is built into Bubble Tea v2. If you're not using Bubble Tea you now need to use a writer to downsample colors. Lip Gloss writers are a drop-in replacement for the usual functions found in the `fmt` package: ```go s := someStyle.Render("Hello!") // Downsample and print to stdout. lipgloss.Println(s) // Render to a variable. downsampled := lipgloss.Sprint(s) // Print to stderr. lipgloss.Fprint(os.Stderr, s) ``` ##### 🌛 Background color detection and adaptive colors Rendering different colors depending on whether the terminal has a light or dark background is an awesome power. Lip Gloss v2 gives you more control over this progress. This especially matters when input and output are not `stdin` and `stdout`. If that *doesn’t* matter to you and you're only working with `stdout` you skip this via [`compat` above](#quick-upgrade), though we encourage you to explore this new functionality. ##### With Bubble Tea In Bubble Tea, request the background color, listen for a `BackgroundColorMsg` in your update, and respond accordingly. ```go // Query for the background color. func (m model) Init() tea.Cmd { return tea.RequestBackgroundColor } // Listen for the response and initialize your styles accordigly. func (m model) Update(msg tea.Msg) (tea.Model, tea.Cmd) { switch msg := msg.(type) { case tea.BackgroundColorMsg: // Initialize your styles now that you know the background color. m.styles = newStyles(msg.IsDark()) return m, nil } } type styles { myHotStyle lipgloss.Style } func newStyles(bgIsDark bool) (s styles) { lightDark := lipgloss.LightDark(bgIsDark) // just a helper function return styles{ myHotStyle := lipgloss.NewStyle().Foreground(lightDark("#f1f1f1", "#333333")) } } ``` ##### Standalone If you're not using Bubble Tea you simply can perform the query manually: ```go // Detect the background color. Notice we're writing to stderr. hasDarkBG, err := lipgloss.HasDarkBackground(os.Stdin, os.Stderr) if err != nil { log.Fatal("Oof:", err) } // Create a helper for choosing the appropriate color. lightDark := lipgloss.LightDark(hasDarkBG) // Declare some colors. thisColor := lightDark("#C5ADF9", "#864EFF") thatColor := lightDark("#37CD96", "#22C78A") // Render some styles. a := lipgloss.NewStyle().Foreground(thisColor).Render("this") b := lipgloss.NewStyle().Foreground(thatColor).Render("that") // Print to stderr. lipgloss.Fprintf(os.Stderr, "my fave colors are %s and %s...for now.", a, b) ``` #### 🥕 Other stuff ##### Colors are now `color.Color` `lipgloss.Color()` now produces an idiomatic `color.Color`, whereas before colors were type `lipgloss.TerminalColor`. Generally speaking, this is more of an implementation detail, but it’s worth noting the structural differences. ```go // Before type TerminalColor interface{/* ... */} type Color string // After func Color(string) color.Color type RGBColor struct{R, G, B uint8} func LightDark(isDark bool) LightDarkFunc type LightDarkFunc func(light, dark color.Color) color.Color func Complete(colorprofile.Profile) CompleteFunc type CompleteFunc func(ansi, ansi256, truecolor color.Color) color.Color ``` <details> <summary> #### Changelog </summary> ##### New! * b259725e46e9fbb2af6673d74f26917ed42df370: feat(blending): early return when steps <= num stops (#566) (@lrstanley) * 71dd8ee66ac1f4312844a792952789102513c9c5: feat(borders): initial border blend implementation (#560) (@lrstanley) * 2166ce88ec1cca66e8a820a86baafd7cfd34bcd0: feat(canvas): accept any type as layer content (@aymanbagabas) * 0303864674b37235e99bc14cd4da17c409ec448e: feat(colors): refactor colors sub-package into root package (@lrstanley) * 9c86c1f950fbfffd6c56a007de6bd3e61d67a1ea: feat(colors): switch from int to float64 for inputs (@lrstanley) * 0334bb4562ca1f72a684c1c2a63c848ac21fffc6: feat(tree): support width and indenter styling (#446) (@dlvhdr) * 9a771f5a242df0acf862c7acd72124469eb4635a: feat: BlendLinear* -> Blend* (@lrstanley) * 34443e82a7ddcbe37b9dc0d69b84385e400b8a5c: feat: add brightness example, misc example tweaks (@lrstanley) * c95c5f3c5b27360d344bf82736a8ce9257aaf71e: feat: add hyperlink support (#473) (@aymanbagabas) * 5e542b8c69a0f20ea62b2caa422bbee5337fbb48: feat: add underline style and color (@aymanbagabas) * d3032608aa74f458a7330e17cc304f1ebb5fa1b9: feat: add wrap implementation preserving styles and links (#582) (@aymanbagabas) * 7bf18447c8729839ca7e79aa3ba9aa00ecb8f963: feat: further simplify colors in examples (@lrstanley) * 27a8cf99a81d1bd5ab875cd773ac8647320b02ba: feat: implement uv Drawable for Canvas and Layer (@aymanbagabas) * c4c08fc4f8a107b00bc54407ad9094b9642dd103: feat: implement uv.Drawable for *Layer (#607) (@ayn2op) * 18b4bb86c515f93eede5720fe66b0d9ba83fa489: feat: initial implementation of color blending & brightness helpers (@lrstanley) * 63610090044b782caa8ce8b1b53cc81b98264eaa: feat: update examples/layout to use colors.BlendLinear1D (@lrstanley) * de4521b8baa33c49a96e9458e9d9213c7ba407bd: feat: update examples/list/sublist to use colors.BlendLinear1D (@lrstanley) * 1b3716cc53b5cc29c2b1b0c655a684b797fef075: feat: use custom hex parsing for increased perf (@lrstanley) ##### Fixed * 06ca257e382fa107afcfe147c9cda836b3cdb4be: fix(canvas): Hit method should return Layer ID as string instead of *Layer (@aymanbagabas) * d1fa8790efbd70df8b0dd8bd139434f3ac6e063b: fix(canvas): handle misc edge cases (#588) (@lrstanley) * 7869489d8971e2e3a8de8e0a4a1e1dfe4895a352: fix(canvas): simplify Render handling (@aymanbagabas) * 68f38bdee72b769ff9c137a4097d9e64d401b703: fix(ci): use local golangci config (@aymanbagabas) * ff11224963a33f6043dfb3408e67c7fea7759f34: fix(color): update deprecated types (@aymanbagabas) * 3f659a836c78f6ad31f5652571007cb4ab9d1eb8: fix(colors): update examples to use new method locations (@lrstanley) * 3248589b24c9894694be6d1862817acb77e119cc: fix(layers): allow recursive rendering for layers that only contain children (#589) (@lrstanley) * 6c33b19c3f0a1e7d50ce9028ef4bda3ca631cd68: fix(lint): remove nolint:exhaustive comments and ignore var-naming rule for revive (@aymanbagabas) * d267651963ad3ba740b30ecf394d7a5ef86704fc: fix(style): use alias for Underline type from ansi package (@aymanbagabas) * 76690c6608346fc7ef09db388ee82feaa7920630: fix(table): fix wrong behavior of headers regarding margins (#513) (@andreynering) * 41ff0bf215ea2a444c5161d0bd7fa38b4a70af27: fix(terminal): switch to uv.NewCancelReader for Windows compatibility (@aymanbagabas) * 5d69c0e790f24cbfaa94f8f8b2b64d1bb926c96d: fix: ensure we strip out \r\n from strings when getting lines (@aymanbagabas) * 2e570c2690b61bac103e7eef9da917d1dfc6512d: fix: linear-2d example (@lrstanley) * 0d6a022f7d075e14d61a755b3e9cab9d97519f21: fix: lint issues (@aymanbagabas) * 832bc9d6b9d209e002bf1131938ffe7dbba07652: fix: prevent infinite loop with zero-width whitespace chars (#108) (#604) (@calobozan) * 354e70d6d0762e6a54cfc45fe8d019d6087a4c00: fix: rename underline constants to be consistent with other style properties (@raphamorim) ##### Docs * 60df47f8000b6cb5dfec46af37bceb2c9050bef0: docs(readme): cleanup badges (@meowgorithm) * 881a1ffc54b6afb5f22ead143d10f8dce05e7e66: docs(readme): update art (@meowgorithm) * ee74a03efa8363cf3b17ee7a128b9825c8f3791e: docs(readme): update footer art and copyright date (@meowgorithm) * 8863cc06da67b8ef9f4b6f80c567738fa53bd090: docs(readme): update header image (@meowgorithm) * 4e8ca2d9f045d6bca78ee0150420e26cda8bcccf: docs: add underline styles and colors caveats (@aymanbagabas) * a8cfc26d7de7bdb335a8c7c2f0c8fc4f18ea8993: docs: add v2 upgrade and changes guide (#611) (@aymanbagabas) * 454007a0ad4e8b60afc1f6fdc3e3424e4d3a4c16: docs: update comments in for GetPaddingChar and GetMarginChar (@aymanbagabas) * 95f30dbdc90cc409e8645de4bd2296a33ba37c70: docs: update mascot header image (@aymanbagabas) * a06a847849dbd1726c72047a98ab8cce0f73a65f: docs: update readme in prep for v2 (#613) (@aymanbagabas) ##### Other stuff * 5ca0343ec7be2e85521e79734f4392cdb19e4949: Fix(table): BorderRow (#514) (@bashbunni) * f2d1864a58cd455ca118e04123feae177d7d2eef: Improve performance of maxRuneWidth (#592) (@clipperhouse) * 10c048e361129dd601eb6ff8c0c2458814291156: Merge v2-uv-canvas into v2-exp (@aymanbagabas) * d02a007bb19e14f6bf351ed71a47beb6bee9cae3: ci: sync dependabot config (#521) (@charmcli) * 8708a8925b60c610e68b9aa6e509ebd513a8244e: ci: sync dependabot config (#561) (@charmcli) * 7d1b622c64d1a68cdc94b30864ae5ec3e6abc2dd: ci: sync dependabot config (#572) (@charmcli) * 19a4b99cb3bbbd2ab3079adc500faa1875da87e8: ci: sync golangci-lint config (@aymanbagabas) * a6c079dc8a3fc6e68a00214a767627ec8447adb5: ci: sync golangci-lint config (@aymanbagabas) * 350edde4903bcc2eee5a8ce1552dd90c3b89c125: ci: sync golangci-lint config (#553) (@github-actions[bot]) * 1e3ee3483a907facd98ca0a56f6694a0e9365f26: ci: sync golangci-lint config (#598) (@github-actions[bot]) * e729228ac14e63057e615a2241ce4303d59fef08: lint: fix lint for newer go versions (#540) (@andreynering) * 66093c8cf3b79596597c1e39fd4c67a954010fb3: perf: remove allocations from getFirstRuneAsString (#578) (@clipperhouse) * ad876c4132d61951d091a1a535c27237f6a90ad6: refactor: new Canvas, Compositor, and Layer API (#591) (@aymanbagabas) * 3aae2866142214f5b8ce9cbfc1939645928dcb8f: refactor: update imports to use charm.land domain (@aymanbagabas) </details> #### 🌈 Feedback That's a wrap! Feel free to reach out, ask questions, and let us know how it's going. We'd *love* to know what you think. - [Discord](https://charm.land/discord) - [Matrix](https://charm.land/matrix) - [Email](mailto:vt100@charm.land) *** Part of [Charm](https://charm.land). <a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-badge.jpg" width="400"></a> Charm热爱开源 • Charm loves open source • نحنُ نحب المصادر المفتوحة </details> <details> <summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary> ### [`v0.43.0`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.43.0): 0.43.0 [Compare Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.42.0...v0.43.0) ##### Breaking Changes 🛠 - Add support for go 1.26 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1193](https://redirect.github.com/getsentry/sentry-go/pull/1193) - bump minimum supported go version to 1.24 - change type signature of attributes for Logs and Metrics. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1205](https://redirect.github.com/getsentry/sentry-go/pull/1205) - users are not supposed to modify Attributes directly on the Log/Metric itself, but this is still is a breaking change on the type. - Send uint64 overflowing attributes as numbers. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1198](https://redirect.github.com/getsentry/sentry-go/pull/1198) - The SDK was converting overflowing uint64 attributes to strings for slog and logrus integrations. To eliminate double types for these attributes, the SDK now sends the overflowing attribute as is, and lets the server handle the overflow appropriately. - It is expected that overflowing unsigned integers would now get dropped, instead of converted to strings. ##### New Features ✨ - Add zap logging integration by [@giortzisg](https://redirect.github.com/giortzisg) in [#1184](https://redirect.github.com/getsentry/sentry-go/pull/1184) - Log specific message for RequestEntityTooLarge by [@giortzisg](https://redirect.github.com/giortzisg) in [#1185](https://redirect.github.com/getsentry/sentry-go/pull/1185) ##### Bug Fixes 🐛 - Improve otel span map cleanup performance by [@giortzisg](https://redirect.github.com/giortzisg) in [#1200](https://redirect.github.com/getsentry/sentry-go/pull/1200) - Ensure correct signal delivery on multi-client setups by [@giortzisg](https://redirect.github.com/giortzisg) in [#1190](https://redirect.github.com/getsentry/sentry-go/pull/1190) ##### Internal Changes 🔧 ##### Deps - Bump golang.org/x/crypto to 0.48.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1196](https://redirect.github.com/getsentry/sentry-go/pull/1196) - Use go1.24.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1195](https://redirect.github.com/getsentry/sentry-go/pull/1195) - Bump github.com/gofiber/fiber/v2 from 2.52.9 to 2.52.11 in /fiber by [@dependabot](https://redirect.github.com/dependabot) in [#1191](https://redirect.github.com/getsentry/sentry-go/pull/1191) - Bump getsentry/craft from 2.19.0 to 2.20.1 by [@dependabot](https://redirect.github.com/dependabot) in [#1187](https://redirect.github.com/getsentry/sentry-go/pull/1187) ##### Other - Add omitzero and remove custom serialization by [@giortzisg](https://redirect.github.com/giortzisg) in [#1197](https://redirect.github.com/getsentry/sentry-go/pull/1197) - Rename Telemetry Processor components by [@giortzisg](https://redirect.github.com/giortzisg) in [#1186](https://redirect.github.com/getsentry/sentry-go/pull/1186) </details> <details> <summary>goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)</summary> ### [`v2.14.1`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.1) [Compare Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.0...v2.14.1) #### Announcement Read the official announcement: [Announcing GoReleaser v2.14](https://goreleaser.com/blog/goreleaser-v2.14/). #### Changelog ##### Security updates - [`6bce54f`](https://redirect.github.com/goreleaser/goreleaser/commit/6bce54f02c901c4e42e699d35e66b4d82f2ce162): sec(deps): update filippo.io/edwards25519 ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Bug fixes - [`6e813e9`](https://redirect.github.com/goreleaser/goreleaser/commit/6e813e9a69f48c67999dbef151b3f79f13e04756): fix(docker/v2): output in error ([@caarlos0](https://redirect.github.com/caarlos0)) - [`4621880`](https://redirect.github.com/goreleaser/goreleaser/commit/46218808ad593c62b58b7bd37dd516501413cb62): fix(tmpl): rename toSlice to list ([@caarlos0](https://redirect.github.com/caarlos0)) - [`c174134`](https://redirect.github.com/goreleaser/goreleaser/commit/c1741345b51d0c19f3f26a6af329100f28593b68): fix(tmpl): slice -> toSlice ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Documentation updates - [`8d53236`](https://redirect.github.com/goreleaser/goreleaser/commit/8d53236324a057e06f6f9a81803df6c13bd29b3d): docs: announce v2.14 ([@caarlos0](https://redirect.github.com/caarlos0)) - [`c5c6637`](https://redirect.github.com/goreleaser/goreleaser/commit/c5c6637a850dcb9d68b6b23465bba94d3440e5a8): docs: fix gemfury links ([@caarlos0](https://redirect.github.com/caarlos0)) - [`79922a2`](https://redirect.github.com/goreleaser/goreleaser/commit/79922a277cfe9d9ab9cf8814eb9f1503f6417a02): docs: fix more divider ([@caarlos0](https://redirect.github.com/caarlos0)) - [`fe23919`](https://redirect.github.com/goreleaser/goreleaser/commit/fe23919a06c53f17a794680ba351df6d19763f33): docs: fix syntax ([@caarlos0](https://redirect.github.com/caarlos0)) - [`0c1ac6d`](https://redirect.github.com/goreleaser/goreleaser/commit/0c1ac6dd222c2f026026fa334d1974cf21a95b22): docs: fmt ([@caarlos0](https://redirect.github.com/caarlos0)) - [`ce778c3`](https://redirect.github.com/goreleaser/goreleaser/commit/ce778c3d2147417769275463f94e1931ca2de390): docs: typo ([@caarlos0](https://redirect.github.com/caarlos0)) - [`63e1434`](https://redirect.github.com/goreleaser/goreleaser/commit/63e143478d2c6f36ea3571a19dc77b8131008595): docs: update github action ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Other work - [`d525fe7`](https://redirect.github.com/goreleaser/goreleaser/commit/d525fe7b7b64047693acf1973d3ce1818907a9ce): chore: remove unused file ([@caarlos0](https://redirect.github.com/caarlos0)) - [`fd46e47`](https://redirect.github.com/goreleaser/goreleaser/commit/fd46e47b69a1d7014f5852513c6ceb269118d0a3): fix ([@caarlos0](https://redirect.github.com/caarlos0)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.14.0...v2.14.1> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and [Twitter](https://twitter.com/goreleaser)! <a href="https://goreleaser.com"><img src="https://raw.githubuserco </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Broad Go module upgrades (cloud/AWS/Auth0/K8s/River/Sentry/etc.) can introduce subtle compile/runtime behavior changes despite no intentional app-logic edits. Generated `templ` output is re-vended, so mismatched tool versions or formatting differences could cause CI/build churn. > > **Overview** > **Dependency/tooling refresh.** Updates `go.mod`/`go.sum` with a wide set of Go module bumps (including Google Cloud, AWS SDK v2, Auth0, River/RiverUI, K8s libs, `golang.org/x/*`, etc.) and adds a new indirect `github.com/go-json-experiment/json` requirement. > > **Aligns `templ` across environments.** Pins `github.com/a-h/templ` and `templ` CLI to `v0.3.1001` in CI workflows and Docker build images/devcontainer, and re-generates committed `*_templ.go` files in `services/api-server/area51` and `services/gateway/area51` to match the new generator version. > > **Dev tooling bumps.** Updates several Go tool installs in the devcontainer (e.g., `goimports-reviser`, `setup-envtest`, `controller-gen`, `goreleaser`). > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit be9943631e180b02b0893e8b6e940abd3dfd5e10. Configure [here](https://cursor.com/dashboard?tab=bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: Elliot Waddington <getinnocuous@users.noreply.github.com> GitOrigin-RevId: 1da2a88d783e8bf5b7fdbbbdf2c3aa1b1e5f8f2b

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/batch/armbatch/v3](https://redirect.github.com/Azure/azure-sdk-for-go) | `v3.0.1` → `v4.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fbatch%2farmbatch%2fv3/v4.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fbatch%2farmbatch%2fv3/v3.0.1/v4.0.0?slim=true) | | [github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/resources/armresources/v2](https://redirect.github.com/Azure/azure-sdk-for-go) | `v2.1.0` → `v3.0.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fresources%2farmresources%2fv2/v3.0.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzure%2fazure-sdk-for-go%2fsdk%2fresourcemanager%2fresources%2farmresources%2fv2/v2.1.0/v3.0.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Upgrades a major Azure SDK dependency and adjusts Batch adapters to match removed/changed SDK fields, which could affect Azure Batch discovery and linked-item generation at runtime. > > **Overview** > **Upgrades Azure Batch ARM SDK from `armbatch/v3` to `armbatch/v4`** and updates all Batch account/application/pool clients, manual wrappers, integration tests, and generated GoMock stubs to use the new import path. > > Aligns Batch pool linking behavior with SDK changes by **dropping certificate reference linking** (and removing `BatchBatchCertificate` from pool `PotentialLinks`) because `armbatch/v4` no longer exposes pool certificate refs. > > Refreshes `go.mod`/`go.sum` for the dependency upgrade (including new Azure SDK indirect deps and a `jwt/v5` patch bump). > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit c3807becb46015c7cfe621c20848e4d2e6ea6c37. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: lionel.wilson <lionel.wilson@overmind.tech> GitOrigin-RevId: 57bdc182de2762672c5aaff70627588886400318

This PR contains the following updates: | Update | Change | |---|---| | lockFileMaintenance | All locks refreshed | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. 🔧 This Pull Request updates lock files to use the latest dependency versions. --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on monday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 9bb7cfcb7fdb5f30b717a8044cae9f25f935505b

…(#4145) 📹 https://www.loom.com/share/4049912c73734143a8dde39ebf3f4fe6 📹 This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/auth0/go-jwt-middleware/v2](https://redirect.github.com/auth0/go-jwt-middleware) | `v2.3.1` → `v3.0.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-jwt-middleware%2fv2/v3.0.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-jwt-middleware%2fv2/v2.3.1/v3.0.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/go-jwt-middleware (github.com/auth0/go-jwt-middleware/v2)</summary> ### [`v3.0.0`](https://redirect.github.com/auth0/go-jwt-middleware/blob/HEAD/CHANGELOG.md#v300-2026-01-19) [Compare Source](https://redirect.github.com/auth0/go-jwt-middleware/compare/v2.3.1...v3.0.0) [Full Changelog](https://redirect.github.com/auth0/go-jwt-middleware/compare/v2.3.1...v3.0.0) **BEFORE YOU UPGRADE** - This is a major release that includes breaking changes. Please see [MIGRATION\_GUIDE.md](MIGRATION_GUIDE.md) before upgrading. This release will require changes to your application. ##### Added - Pure options pattern for validator, middleware, and JWKS provider ([#357](https://redirect.github.com/auth0/go-jwt-middleware/pull/357), [#358](https://redirect.github.com/auth0/go-jwt-middleware/pull/358), [#360](https://redirect.github.com/auth0/go-jwt-middleware/pull/360)) - DPoP (Demonstrating Proof-of-Possession) support per RFC 9449 ([#363](https://redirect.github.com/auth0/go-jwt-middleware/pull/363)) - Framework-agnostic core package for reusable validation logic ([#356](https://redirect.github.com/auth0/go-jwt-middleware/pull/356)) - Type-safe claims retrieval with generics (`GetClaims[T]()`, `MustGetClaims[T]()`, `HasClaims()`) - Structured logging support compatible with `log/slog` - Support for 14 signature algorithms (HS256/384/512, RS256/384/512, PS256/384/512, ES256/384/512, ES256K, EdDSA) - Enhanced error responses with RFC 6750 compliance - Trusted proxy configuration for DPoP behind reverse proxies - Multiple issuer and audience support with new APIs - Documentation and linting configuration ([#361](https://redirect.github.com/auth0/go-jwt-middleware/pull/361)) ##### Changed - Migrated from square/go-jose to lestrrat-go/jwx v3 ([#358](https://redirect.github.com/auth0/go-jwt-middleware/pull/358)) - Module path updated to `github.com/auth0/go-jwt-middleware/v3` ([#355](https://redirect.github.com/auth0/go-jwt-middleware/pull/355)) - Minimum Go version updated to 1.24 ([#355](https://redirect.github.com/auth0/go-jwt-middleware/pull/355)) - Update examples for v3 module path and new APIs ##### Breaking - Pure options pattern: All constructors (`New()`) now require functional options instead of positional parameters - Context key: `ContextKey{}` is no longer exported - use `GetClaims[T]()` helper function - Custom claims now use generics for type safety - `TokenExtractor` returns `ExtractedToken` (with scheme) instead of `string` - Type naming: `ExclusionUrlHandler` renamed to `ExclusionURLHandler` ##### Migration Example **v2:** ```go // Validator with positional parameters jwtValidator, err := validator.New( keyFunc, validator.RS256, "https://issuer.example.com/", []string{"my-api"}, ) // Middleware middleware := jwtmiddleware.New(jwtValidator.ValidateToken) // Claims access via context key claims := r.Context().Value(jwtmiddleware.ContextKey{}).(*validator.ValidatedClaims) ``` **v3:** ```go // Validator with pure options jwtValidator, err := validator.New( validator.WithKeyFunc(keyFunc), validator.WithAlgorithm(validator.RS256), validator.WithIssuer("https://issuer.example.com/"), validator.WithAudience("my-api"), ) // Middleware with options middleware, err := jwtmiddleware.New( jwtmiddleware.WithValidator(jwtValidator), ) // Type-safe claims with generics claims, err := jwtmiddleware.GetClaims[*validator.ValidatedClaims](r.Context()) ``` See [MIGRATION\_GUIDE.md](MIGRATION_GUIDE.md) for complete migration instructions. *** </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **High Risk** > Upgrades a major authentication dependency and rewrites JWT validation/claim extraction paths, so mistakes could break auth enforcement or token parsing across the API server. > > **Overview** > Migrates the codebase from `github.com/auth0/go-jwt-middleware/v2` to `v3`, updating JWKS provider/validator/middleware construction to the new options-based APIs and adjusting token extraction/claims retrieval. > > Because `v3` no longer exposes `ContextKey{}`, the auth middleware now stores `*validator.ValidatedClaims` under a new `auth.ValidatedClaimsContextKey{}` and updates downstream callers (e.g. token expiry in `ManagementServiceHandler.CreateToken`) accordingly. The API server init path now skips validator setup when `AllowUnauthenticated` is enabled and tightens startup validation/error logging for missing Auth0 config; related tests set `AllowUnauthenticated: true` to accommodate `v3` rejecting empty audience/domain values. > > Also updates `go.mod`/`go.sum` for new transitive deps pulled in by `v3` (e.g. `lestrrat-go/jwx/v3`) and adds `github.com/resend/resend-go/v3` to the main require block. > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit e8a54151abc72beb9973302047684ad983aa5b8e. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).  GitOrigin-RevId: f8185846b5c05bebfd88c56b76c4d1bb95a592db

… 84a4fc4 (#4253) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `a57be14` → `84a4fc4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 50ce4a254bd6337b89ba92665510975f7683ae17

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [charm.land/lipgloss/v2](https://redirect.github.com/charmbracelet/lipgloss) | `v2.0.0` → `v2.0.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/charm.land%2flipgloss%2fv2/v2.0.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/charm.land%2flipgloss%2fv2/v2.0.0/v2.0.2?slim=true) | | [cloud.google.com/go/aiplatform](https://redirect.github.com/googleapis/google-cloud-go) | `v1.119.0` → `v1.120.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2faiplatform/v1.120.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2faiplatform/v1.119.0/v1.120.0?slim=true) | | [cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go) | `v1.56.0` → `v1.57.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcompute/v1.57.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcompute/v1.56.0/v1.57.0?slim=true) | | [cloud.google.com/go/storage](https://redirect.github.com/googleapis/google-cloud-go) | `v1.60.0` → `v1.61.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fstorage/v1.61.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fstorage/v1.60.0/v1.61.3?slim=true) | | [github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0) | `v2.6.0` → `v2.7.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.7.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.6.0/v2.7.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.80.2` → `v1.81.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.81.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.80.2/v1.81.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/iam](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.53.4` → `v1.53.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fiam/v1.53.4/v1.53.5?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.96.4` → `v1.97.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.97.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.96.4/v1.97.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/sesv2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.59.4` → `v1.60.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.60.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fsesv2/v1.59.4/v1.60.0?slim=true) | | [github.com/bradleyfalzon/ghinstallation/v2](https://redirect.github.com/bradleyfalzon/ghinstallation) | `v2.17.0` → `v2.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fbradleyfalzon%2fghinstallation%2fv2/v2.17.0/v2.18.0?slim=true) | | [github.com/googleapis/gax-go/v2](https://redirect.github.com/googleapis/gax-go) | `v2.17.0` → `v2.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.17.0/v2.18.0?slim=true) | | [github.com/goreleaser/goreleaser/v2](https://redirect.github.com/goreleaser/goreleaser) | `v2.14.1` → `v2.14.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoreleaser%2fgoreleaser%2fv2/v2.14.1/v2.14.3?slim=true) | | [github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk) | `v0.7.13` → `v0.7.15` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.7.15?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.7.13/v0.7.15?slim=true) | | [github.com/hashicorp/terraform-plugin-framework](https://redirect.github.com/hashicorp/terraform-plugin-framework) | `v1.18.0` → `v1.19.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.19.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-framework/v1.18.0/v1.19.0?slim=true) | | [github.com/hashicorp/terraform-plugin-go](https://redirect.github.com/hashicorp/terraform-plugin-go) | `v0.30.0` → `v0.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-go/v0.30.0/v0.31.0?slim=true) | | [github.com/hashicorp/terraform-plugin-testing](https://redirect.github.com/hashicorp/terraform-plugin-testing) | `v1.14.0` → `v1.15.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhashicorp%2fterraform-plugin-testing/v1.15.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhashicorp%2fterraform-plugin-testing/v1.14.0/v1.15.0?slim=true) | | [github.com/nats-io/nats-server/v2](https://redirect.github.com/nats-io/nats-server) | `v2.12.4` → `v2.12.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fnats-io%2fnats-server%2fv2/v2.12.4/v2.12.5?slim=true) | | [github.com/posthog/posthog-go](https://redirect.github.com/posthog/posthog-go) | `v1.10.0` → `v1.11.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fposthog%2fposthog-go/v1.11.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fposthog%2fposthog-go/v1.10.0/v1.11.1?slim=true) | | [github.com/projectdiscovery/subfinder/v2](https://redirect.github.com/projectdiscovery/subfinder) | `v2.12.0` → `v2.13.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fprojectdiscovery%2fsubfinder%2fv2/v2.13.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fprojectdiscovery%2fsubfinder%2fv2/v2.12.0/v2.13.0?slim=true) | | [github.com/stripe/stripe-go/v84](https://redirect.github.com/stripe/stripe-go) | `v84.4.0` → `v84.4.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstripe%2fstripe-go%2fv84/v84.4.0/v84.4.1?slim=true) | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib) | `v0.66.0` → `v0.67.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.67.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.66.0/v0.67.0?slim=true) | | [go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.41.0/v1.42.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.41.0/v1.42.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.41.0/v1.42.0?slim=true) | | [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.41.0/v1.42.0?slim=true) | | [go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.41.0/v1.42.0?slim=true) | | [go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.41.0` → `v1.42.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.42.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.41.0/v1.42.0?slim=true) | | [golang.org/x/net](https://pkg.go.dev/golang.org/x/net) | [`v0.51.0` → `v0.52.0`](https://cs.opensource.google/go/x/net/+/refs/tags/v0.51.0...refs/tags/v0.52.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fnet/v0.52.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fnet/v0.51.0/v0.52.0?slim=true) | | [golang.org/x/oauth2](https://pkg.go.dev/golang.org/x/oauth2) | [`v0.35.0` → `v0.36.0`](https://cs.opensource.google/go/x/oauth2/+/refs/tags/v0.35.0...refs/tags/v0.36.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2foauth2/v0.36.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2foauth2/v0.35.0/v0.36.0?slim=true) | | [golang.org/x/sync](https://pkg.go.dev/golang.org/x/sync) | [`v0.19.0` → `v0.20.0`](https://cs.opensource.google/go/x/sync/+/refs/tags/v0.19.0...refs/tags/v0.20.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2fsync/v0.20.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2fsync/v0.19.0/v0.20.0?slim=true) | | [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.34.0` → `v0.35.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.34.0...refs/tags/v0.35.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.35.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.34.0/v0.35.0?slim=true) | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.269.0` → `v0.271.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.271.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.269.0/v0.271.0?slim=true) | | [sigs.k8s.io/controller-runtime/tools/setup-envtest](https://redirect.github.com/kubernetes-sigs/controller-runtime) | `v0.0.0-20260305141020-105baa6284da` → `v0.0.0-20260311125736-37c380b7405b` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260311125736-37c380b7405b?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260305141020-105baa6284da/v0.0.0-20260311125736-37c380b7405b?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. --- ### Release Notes <details> <summary>charmbracelet/lipgloss (charm.land/lipgloss/v2)</summary> ### [`v2.0.2`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.2) [Compare Source](https://redirect.github.com/charmbracelet/lipgloss/compare/v2.0.1...v2.0.2) ### Table patch If you don't know, we made big improvements in table rendering recently shipped in v2.0.0. [@MartinodF](https://redirect.github.com/MartinodF) made a good job on improving it even further for tricky edge cases, in particular when content wrapping is enabled. #### Changelog ##### Fixed - [`c289bad`](https://redirect.github.com/charmbracelet/lipgloss/commit/c289bad531f2588fc7506d7fbd5cdfd3daf4cb27): fix(table): height and overflow with wrapping content ([#620](https://redirect.github.com/charmbracelet/lipgloss/issues/620)) ([@MartinodF](https://redirect.github.com/MartinodF)) *** <a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a> Thoughts? Questions? We love hearing from you. Feel free to reach out on [X](https://x.com/charmcli), [Discord](https://charm.land/discord), [Slack](https://charm.land/slack), [The Fediverse](https://mastodon.social/@charmcli), [Bluesky](https://bsky.app/profile/charm.land). ### [`v2.0.1`](https://redirect.github.com/charmbracelet/lipgloss/releases/tag/v2.0.1) [Compare Source](https://redirect.github.com/charmbracelet/lipgloss/compare/v2.0.0...v2.0.1) A small release to properly set style underline colors, as well as handling partial reads while querying the terminal. #### Changelog ##### Fixed - [`3044146`](https://redirect.github.com/charmbracelet/lipgloss/commit/30441468e81b8d5322c78e7a78cac1aaf6b1b57d): fix: add missing underlineColorKey case in getAsColor ([#624](https://redirect.github.com/charmbracelet/lipgloss/issues/624)) ([@flux627](https://redirect.github.com/flux627)) ##### Docs - [`61e734b`](https://redirect.github.com/charmbracelet/lipgloss/commit/61e734b4628b1f808f2a40dde55c8886432a110b): docs: Charm logo link in upgrade guide ([@aymanbagabas](https://redirect.github.com/aymanbagabas)) ##### Other stuff - [`92b13d8`](https://redirect.github.com/charmbracelet/lipgloss/commit/92b13d8d3982df42416dddcad755f8700d5f1a76): ci: sync golangci-lint config ([#621](https://redirect.github.com/charmbracelet/lipgloss/issues/621)) ([@github-actions](https://redirect.github.com/github-actions)\[bot]) *** <a href="https://charm.land/"><img alt="The Charm logo" src="https://stuff.charm.sh/charm-banner-next.jpg" width="400"></a> Thoughts? Questions? We love hearing from you. Feel free to reach out on [X](https://x.com/charmcli), [Discord](https://charm.land/discord), [Slack](https://charm.land/slack), [The Fediverse](https://mastodon.social/@charmcli), [Bluesky](https://bsky.app/profile/charm.land). </details> <details> <summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary> ### [`v2.7.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v270-2026-03-11) [Compare Source](https://redirect.github.com/auth0/go-auth0/compare/v2.6.0...v2.7.0) [Full Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.6.0...v2.7.0) **Added** - feat: improve DateTime parsing with multi-format support [#723](https://redirect.github.com/auth0/go-auth0/pull/723) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add Auth0Managed network ACL field, additional signing algorithms, and SCIM group provisioning scopes [#717](https://redirect.github.com/auth0/go-auth0/pull/717) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) **Fixed** - fix: remove redundant WithContext call in HTTP request builder [#724](https://redirect.github.com/auth0/go-auth0/pull/724) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) </details> <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/eks)</summary> ### [`v1.81.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-06-18) #### General Highlights - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/aiops`: [v1.0.0](service/aiops/CHANGELOG.md#v100-2025-06-18) - **Release**: New AWS service client module - **Feature**: This is the initial SDK release for Amazon AI Operations (AIOps). AIOps is a generative AI-powered assistant that helps you respond to incidents in your system by scanning your system's telemetry and quickly surface suggestions that might be related to your issue. - `github.com/aws/aws-sdk-go-v2/service/autoscaling`: [v1.54.0](service/autoscaling/CHANGELOG.md#v1540-2025-06-18) - **Feature**: Add IncludeInstances parameter to DescribeAutoScalingGroups API - `github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs`: [v1.51.0](service/cloudwatchlogs/CHANGELOG.md#v1510-2025-06-18) - **Feature**: Added CloudWatch Logs Transformer support for converting CloudTrail, VPC Flow, EKS Audit, AWS WAF and Route53 Resolver logs to OCSF v1.1 format. - `github.com/aws/aws-sdk-go-v2/service/s3`: [v1.81.0](service/s3/CHANGELOG.md#v1810-2025-06-18) - **Feature**: Added support for renaming objects within the same bucket using the new RenameObject API. - `github.com/aws/aws-sdk-go-v2/service/sagemaker`: [v1.197.0](service/sagemaker/CHANGELOG.md#v11970-2025-06-18) - **Feature**: Add support for p6-b200 instance type for SageMaker Hyperpod </details> <details> <summary>bradleyfalzon/ghinstallation (github.com/bradleyfalzon/ghinstallation/v2)</summary> ### [`v2.18.0`](https://redirect.github.com/bradleyfalzon/ghinstallation/releases/tag/v2.18.0) [Compare Source](https://redirect.github.com/bradleyfalzon/ghinstallation/compare/v2.17.0...v2.18.0) #### What's Changed - Bump actions/checkout from 4.2.2 to 5.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#165](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/165) - bump github.com/google/go-github to v83 and ci updates by [@cpanato](https://redirect.github.com/cpanato) in [#184](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/184) - Update google/go-github to v84 by [@asvoboda](https://redirect.github.com/asvoboda) in [#185](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/185) - Bump actions/checkout from 5.0.0 to 6.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#180](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/180) - Bump golangci/golangci-lint-action from 8.0.0 to 9.2.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#176](https://redirect.github.com/bradleyfalzon/ghinstallation/pull/176) **Full Changelog**: <https://github.com/bradleyfalzon/ghinstallation/compare/v2.17.0...v2.18.0> </details> <details> <summary>googleapis/gax-go (github.com/googleapis/gax-go/v2)</summary> ### [`v2.18.0`](https://redirect.github.com/googleapis/gax-go/releases/tag/v2.18.0): v2: v2.18.0 [Compare Source](https://redirect.github.com/googleapis/gax-go/compare/v2.17.0...v2.18.0) ##### Features - move gax-go to use 1.25 as the lower bound of support ([#469](https://redirect.github.com/googleapis/gax-go/issues/469)) ([01594ca5](https://redirect.github.com/googleapis/gax-go/commit/01594ca5)) - add callctx telemetry helpers ([#472](https://redirect.github.com/googleapis/gax-go/issues/472)) ([fa319ffc](https://redirect.github.com/googleapis/gax-go/commit/fa319ffc)) </details> <details> <summary>goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)</summary> ### [`v2.14.3`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.3) [Compare Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.2...v2.14.3) #### Announcement Read the official announcement: [Announcing GoReleaser v2.14](https://goreleaser.com/blog/goreleaser-v2.14/). #### Changelog ##### Other work - [`7cc4509`](https://redirect.github.com/goreleaser/goreleaser/commit/7cc45095d4e0bebd44c8d2bbf97823856405cfd7): chore: fix svu config ([@caarlos0](https://redirect.github.com/caarlos0)) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.14.2...v2.14.3> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and [Twitter](https://twitter.com/goreleaser)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> ### [`v2.14.2`](https://redirect.github.com/goreleaser/goreleaser/releases/tag/v2.14.2) [Compare Source](https://redirect.github.com/goreleaser/goreleaser/compare/v2.14.1...v2.14.2) #### Announcement Read the official announcement: [Announcing GoReleaser v2.14](https://goreleaser.com/blog/goreleaser-v2.14/). #### Changelog ##### Bug fixes - [`a5070ed`](https://redirect.github.com/goreleaser/goreleaser/commit/a5070ed2d4bd751e3abfc30c3e025ded2465b432): fix(sbom): fix Windows CI test failure in catalog\_source\_archives ([@caarlos0](https://redirect.github.com/caarlos0) and [@Copilot](https://redirect.github.com/Copilot)) - [`89d4957`](https://redirect.github.com/goreleaser/goreleaser/commit/89d4957538bf5ba2c6ea1ec607249e5f7c010b0f): fix(telegram): chat\_id should be allowed in the `@channelname` form ([@caarlos0](https://redirect.github.com/caarlos0)) - [`7089915`](https://redirect.github.com/goreleaser/goreleaser/commit/7089915a98555ca6afca9817df30aec83825aec5): fix(telegram): improve default message template ([@caarlos0](https://redirect.github.com/caarlos0)) - [`6a3f983`](https://redirect.github.com/goreleaser/goreleaser/commit/6a3f983c7e7963dded48166185d205b6f31fc54a): fix(upload): prevent sendFile race condition on Windows ([@caarlos0](https://redirect.github.com/caarlos0) and [@Copilot](https://redirect.github.com/Copilot)) - [`0c0906d`](https://redirect.github.com/goreleaser/goreleaser/commit/0c0906d5c66482ac750f5508c324f3020280da85): fix: go1.26.1 ([@caarlos0](https://redirect.github.com/caarlos0)) - [`0dfb84b`](https://redirect.github.com/goreleaser/goreleaser/commit/0dfb84b03945a0b1499536e30bc5f1360de651bf): fix: improve logs ([@caarlos0](https://redirect.github.com/caarlos0)) - [`53dd3b7`](https://redirect.github.com/goreleaser/goreleaser/commit/53dd3b7290d3913c652ff3a6a913ec30ab8acc49): fix: lint ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Documentation updates - [`b2b85e0`](https://redirect.github.com/goreleaser/goreleaser/commit/b2b85e07e619b7fe7bd21a5666b8db20cb0caea4): docs(deps): bump mkdocs-material in /www in the docs group ([@dependabot](https://redirect.github.com/dependabot)\[bot]) - [`3227c59`](https://redirect.github.com/goreleaser/goreleaser/commit/3227c599eb5962b078c89cacecaab15631811598): docs(deps): bump mkdocs-material in /www in the docs group ([@dependabot](https://redirect.github.com/dependabot)\[bot]) - [`a6aee4a`](https://redirect.github.com/goreleaser/goreleaser/commit/a6aee4ae99a481cbb8932e480f03e9cbeab3bd26): docs: fix badges ([@caarlos0](https://redirect.github.com/caarlos0)) - [`3722f3c`](https://redirect.github.com/goreleaser/goreleaser/commit/3722f3c67f9630170f141a2d1555dc61fc2d3976): docs: improve telegram docs ([@caarlos0](https://redirect.github.com/caarlos0)) - [`43ce1c2`](https://redirect.github.com/goreleaser/goreleaser/commit/43ce1c231759a9d53b3aab77aab6c44d6d3a7db6): docs: telegram link ([@caarlos0](https://redirect.github.com/caarlos0)) - [`ed620f1`](https://redirect.github.com/goreleaser/goreleaser/commit/ed620f1557b33fe3029cb4f6b91dc53b7b00dc1d): docs: update install.md ([@caarlos0](https://redirect.github.com/caarlos0)) ##### Other work - [`7e53058`](https://redirect.github.com/goreleaser/goreleaser/commit/7e5305831e946fefc0d069ad9f7e0dc11e5fe668): chore(ci): switch artifact attestations gen to actions/attest ([@scop](https://redirect.github.com/scop)) - [`b8b56ef`](https://redirect.github.com/goreleaser/goreleaser/commit/b8b56ef89a6338e241c39eed6cb807ba02ebc4ad): chore: add .env to .gitignore ([@caarlos0](https://redirect.github.com/caarlos0)) - [`0513ddb`](https://redirect.github.com/goreleaser/goreleaser/commit/0513ddbd12616b6494fcb8c9911c01970159323d): chore: add comment ([@caarlos0](https://redirect.github.com/caarlos0)) - [`ec28ed7`](https://redirect.github.com/goreleaser/goreleaser/commit/ec28ed71dfabed8fd695a4a8de2d53accf257bf8): ci(deps): bump the actions group with 11 updates ([@dependabot](https://redirect.github.com/dependabot)\[bot]) - [`b51c2e8`](https://redirect.github.com/goreleaser/goreleaser/commit/b51c2e80fe1b2e665ab8138c7792be2813f8940c): ci(deps): bump the actions group with 7 updates ([@dependabot](https://redirect.github.com/dependabot)\[bot]) **Full Changelog**: <https://github.com/goreleaser/goreleaser/compare/v2.14.1...v2.14.2> #### Helping out This release is only possible thanks to **all** the support of some **awesome people**! Want to be one of them? You can [sponsor](https://goreleaser.com/sponsors/), get a [Pro License](https://goreleaser.com/pro) or [contribute with code](https://goreleaser.com/contributing). #### Where to go next? - Find examples and commented usage of all options in our [website](https://goreleaser.com/intro/). - Reach out on [Discord](https://discord.gg/RGEBtg8vQ6) and [Twitter](https://twitter.com/goreleaser)! <a href="https://goreleaser.com"><img src="https://raw.githubusercontent.com/goreleaser/artwork/master/opencollective-header.png" with="100%" alt="GoReleaser logo"></a> </details> <details> <summary>harness/harness-go-sdk (github.com/harness/harness-go-sdk)</summary> ### [`v0.7.15`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.14...v0.7.15) [Compare Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.14...v0.7.15) ### [`v0.7.14`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.13...v0.7.14) [Compare Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.13...v0.7.14) </details> <details> <summary>hashicorp/terraform-plugin-framework (github.com/hashicorp/terraform-plugin-framework)</summary> ### [`v1.19.0`](https://redirect.github.com/hashicorp/terraform-plugin-framework/releases/tag/v1.19.0) [Compare Source](https://redirect.github.com/hashicorp/terraform-plugin-framework/compare/v1.18.0...v1.19.0) NOTES: - This release moves the [resource configuration generation](https://developer.hashicorp.com/terraform/language/import/generating-configuration) logic for the `-generate-config-out` flag from Terraform Core to the Framework for Terraform `v1.14.0` and above. There should be no functionality changes for resource configuration generation in this release. ([#1281](https://redirect.github.com/hashicorp/terraform-plugin-framework/issues/1281)) - This Go module has been updated to Go 1.25 per the [Go support policy](https://golang.org/doc/devel/release.html#policy). Any consumers building on earlier Go versions may experience errors. ([#1287](https://redirect.github.com/hashicorp/terraform-plugin-framework/issues/1287)) </details> <details> <summary>hashicorp/terraform-plugin-go (github.com/hashicorp/terraform-plugin-go)</summary> ### [`v0.31.0`](https://redirect.github.com/hashicorp/terraform-plugin-go/releases/tag/v0.31.0) [Compare Source](https://redirect.github.com/hashicorp/terraform-plugin-go/compare/v0.30.0...v0.31.0) BREAKING CHANGES: - tfprotov5+tfprotov6: The `GenerateResourceConfig` RPC call is now required in `ResourceServer`. ([#607](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/607)) NOTES: - This Go module has been updated to Go 1.25 per the [Go support policy](https://golang.org/doc/devel/release.html#policy). Any consumers building on earlier Go versions may experience errors. ([#612](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/612)) - all: To prevent compilation errors, ensure your Go module is updated to at least terraform-plugin-framework\@v1.19.0, terraform-plugin-mux\@v0.23.0, terraform-plugin-sdk/v2\@v2.40.0, and terraform-plugin-testing\@v1.15.0 before upgrading this dependency. ([#607](https://redirect.github.com/hashicorp/terraform-plugin-go/issues/607)) </details> <details> <summary>hashicorp/terraform-plugin-testing (github.com/hashicorp/terraform-plugin-testing)</summary> ### [`v1.15.0`](https://redirect.github.com/hashicorp/terraform-plugin-testing/releases/tag/v1.15.0) [Compare Source](https://redirect.github.com/hashicorp/terraform-plugin-testing/compare/v1.14.0...v1.15.0) NOTES: - This Go module has been updated to Go 1.25 per the [Go support policy](https://golang.org/doc/devel/release.html#policy). Any consumers building on earlier Go versions may experience errors. ([#629](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/629)) FEATURES: - helper/resource: Added new `StateStore` testing mode to `TestStep`, which can be used to smoke test Terraform state storage. ([#591](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/591)) BUG FIXES: - helper/resource: Test steps in `Config` mode using `Destroy: true` and `Check` functions will now create an additional destroy plan prior to running `terraform apply` to avoid a potential "Saved Plan is Stale" error from Terraform. ([#602](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/602)) - helper/resource: Test steps in `Config` mode using the `TF_ACC_REFRESH_AFTER_APPLY` compatibility flag will not refresh if `ExpectNonEmptyPlan` is true. ([#602](https://redirect.github.com/hashicorp/terraform-plugin-testing/issues/602)) </details> <details> <summary>nats-io/nats-server (github.com/nats-io/nats-server/v2)</summary> ### [`v2.12.5`](https://redirect.github.com/nats-io/nats-server/releases/tag/v2.12.5) [Compare Source](https://redirect.github.com/nats-io/nats-server/compare/v2.12.4...v2.12.5) #### Changelog Refer to the [2.12 Upgrade Guide](https://docs.nats.io/release-notes/whats_new/whats_new_212) for backwards compatibility notes with 2.11.x. > \[!WARNING] > A regression has been found in this version where a stream update may result in the loss of consumers in clustered deployments in specific cases. Single-server deployments are not affected. To temporarily mitigate, set `meta_compact_sync: true` in the `jetstream` config block and perform a configuration reload. We will soon follow up with a fixed 2.12.6 release. ##### Go Version - 1.25.8 ##### Dependencies - github.com/nats-io/nkeys v0.4.15 ([#7797](https://redirect.github.com/nats-io/nats-server/issues/7797)) - github.com/klauspost/compress v1.18.4 ([#7812](https://redirect.github.com/nats-io/nats-server/issues/7812)) - golang.org/x/sys v0.42.0 ([#7923](https://redirect.github.com/nats-io/nats-server/issues/7923)) - github.com/antithesishq/antithesis-sdk-go v0.6.0-default-no-op ([#7835](https://redirect.github.com/nats-io/nats-server/issues/7835)) - golang.org/x/crypto v0.48.0 ([#7874](https://redirect.github.com/nats-io/nats-server/issues/7874)) - github.com/nats-io/nats.go v1.49.0 ([#7835](https://redirect.github.com/nats-io/nats-server/issues/7835)) - golang.org/x/time v0.15.0 ([#7923](https://redirect.github.com/nats-io/nats-server/issues/7923)) ##### CVEs - Fixes CVE-2026-29785 (affects systems with leafnode compression enabled) - Fixes CVE-2026-27889 (affects systems with WebSockets enabled) ##### Added JetStream - The stream snapshot/backup endpoint now accepts the `window_size` parameter, to allow improving flow control over slow or unreliable connections ([#7839](https://redirect.github.com/nats-io/nats-server/issues/7839)) ##### Improved General - `max_conns` in the server configuration can now be configured to `0` (zero) to reject all incoming client connections ([#7877](https://redirect.github.com/nats-io/nats-server/issues/7877)) JetStream - "Catchup for stream" log lines are now more consistent ([#7784](https://redirect.github.com/nats-io/nats-server/issues/7784)) - Raft now only accepts forwarded proposals if caught up as the new leader, limiting potentially unbounded log growth ([#7809](https://redirect.github.com/nats-io/nats-server/issues/7809)) - Raft now correctly refuses concurrent membership changes if forwarded a peer removal from another node ([#7809](https://redirect.github.com/nats-io/nats-server/issues/7809)) - The `max_consumers` limit of a stream can now be updated after stream creation ([#7724](https://redirect.github.com/nats-io/nats-server/issues/7724)) - The pending messages and bytes are now included in consumer unpin responses ([#7815](https://redirect.github.com/nats-io/nats-server/issues/7815)) - Stream backups/snapshots are now streamed to clients with improved flow control, which should improve throughput and robustness, particularly over unreliable links, reducing the chance of backups failing due to flow control errors ([#7828](https://redirect.github.com/nats-io/nats-server/issues/7828)) - Orphaned stream and consumer checks are now aligned with the metalayer snapshot logic ([#7826](https://redirect.github.com/nats-io/nats-server/issues/7826)) - Wildcard filtering when loading messages is now considerably faster in the memory store ([#7840](https://redirect.github.com/nats-io/nats-server/issues/7840), [#7855](https://redirect.github.com/nats-io/nats-server/issues/7855)) - Metalayer snapshots now take place asynchronously when possible, such that JS API operations are not blocked while the snapshot is taking place ([#7827](https://redirect.github.com/nats-io/nats-server/issues/7827), [#7846](https://redirect.github.com/nats-io/nats-server/issues/7846)) - This behaviour can be disabled by setting `meta_compact_sync: true` in the `jetstream` configuration block - Consumers with a single subject filter no longer incorrectly use the multi-filter message lookups ([#7856](https://redirect.github.com/nats-io/nats-server/issues/7856)) - The check for colliding stream subjects is now faster ([#7870](https://redirect.github.com/nats-io/nats-server/issues/7870)) - Raft replica `lag` and `current` values in stream info, consumer info and `/jsz` are now more consistent, no longer reporting incorrect values on follower nodes ([#7885](https://redirect.github.com/nats-io/nats-server/issues/7885)) - Num pending calculations for R1 consumers now happen asynchronously and should no longer block the metalayer ([#7889](https://redirect.github.com/nats-io/nats-server/issues/7889)) ##### Fixed General - Routed message arguments no longer escape to the heap, improving performance ([#7867](https://redirect.github.com/nats-io/nats-server/issues/7867)) - Malformed functions or operations in user permissions templates or on invalid template expansion during auth should no longer result in a server panic Leafnodes - A crash when leafnodes with bad credentials performs an auth callout has been fixed ([#7844](https://redirect.github.com/nats-io/nats-server/issues/7844)) - Receiving a leafnode subscription before negotiating compression should no longer result in a server panic JetStream - A filestore bug which could hold onto a lock when exiting after an error has been fixed ([#7780](https://redirect.github.com/nats-io/nats-server/issues/7780)) - The filestore now always uses tombstones for recovering trailing deletes ([#7782](https://redirect.github.com/nats-io/nats-server/issues/7782)) - Fixed a race condition when rebuilding block state during recovery ([#7783](https://redirect.github.com/nats-io/nats-server/issues/7783)) - The filestore binary search for a message block now correctly sorts blocks that contain only tombstones ([#7787](https://redirect.github.com/nats-io/nats-server/issues/7787)) - Fixed a data race for streams when acquiring the deduplication sequence ([#7789](https://redirect.github.com/nats-io/nats-server/issues/7789)) - Raft now correctly checks the closed state when reporting if the node is current ([#7793](https://redirect.github.com/nats-io/nats-server/issues/7793)) - Raft now sets the election timeout instead of the campaign timeout when leaving observer mode ([#7793](https://redirect.github.com/nats-io/nats-server/issues/7793)) - The metalayer now tracks in-flight meta changes for invalid stream or consumer updates ([#7798](https://redirect.github.com/nats-io/nats-server/issues/7798)) - The metalayer no longer incorrectly overwrites local consumer assignments before they are applied, which would result in them being omitted from the meta snapshot ([#7798](https://redirect.github.com/nats-io/nats-server/issues/7798)) - The inactive threshold clean-up no longer leave lingering goroutines ([#7799](https://redirect.github.com/nats-io/nats-server/issues/7799)) - Pooled publish message underlying buffer capacity is now reused correctly ([#7790](https://redirect.github.com/nats-io/nats-server/issues/7790)) - Consumers with overlapping filter subjects where one is not a subset of the other are now allowed ([#7810](https://redirect.github.com/nats-io/nats-server/issues/7810)) - The filestore now checksums after truncation on compressed or encrypted stores ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore no longer leaks locks in various error states ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore now correctly holds the lock during snapshotting on encrypted stores ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore now ensures that num pending calculations cannot overflow ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore now correctly recalculates the subject state as needed when finding last sequences ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore now sorts configured subjects when checking whether filters represent all of the configured filters ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - The filestore now avoids subject and header corruption in more cases ([#7816](https://redirect.github.com/nats-io/nats-server/issues/7816)) - Consumer unpinning is now handled correctly when stepping down ([#7819](https://redirect.github.com/nats-io/nats-server/issues/7819)) - Consumer unpinning now allows the next client to pick up the next pin without waiting for new messages ([#7819](https://redirect.github.com/nats-io/nats-server/issues/7819)) - Fixed a race condition when remapping the underlying group of a replicated asset ([#7820](https://redirect.github.com/nats-io/nats-server/issues/7820), [#7883](https://redirect.github.com/nats-io/nats-server/issues/7883)) - An overflowed pull request when min pending or min ack pending is above the threshold is now handled correctly ([#7795](https://redirect.github.com/nats-io/nats-server/issues/7795)) - Timers are no longer leaked when failing to set up mirrors, which resulted in high CPU usage ([#7825](https://redirect.github.com/nats-io/nats-server/issues/7825)) - Monitor quit channels are created on demand, fixing cases where an asset restarts with a different underlying Raft group ([#7837](https://redirect.github.com/nats-io/nats-server/issues/7837)) - Recovered streams and consumers are now correctly handled when not present in a metalayer catchup snapshot ([#7824](https://redirect.github.com/nats-io/nats-server/issues/7824)) - Ensure that messages that have reached the max deliver state are preserved with the WorkQueue retention policy ([#7845](https://redirect.github.com/nats-io/nats-server/issues/7845)) - An inconsistency with consumer naming between the current and legacy consumer create endpoints has been fixed ([#7848](https://redirect.github.com/nats-io/nats-server/issues/7848)) - The Raft layer no longer incorrectly reverts the last snapshot applied sequence when truncating uncommitted entries after a catchup snapshot ([#7849](https://redirect.github.com/nats-io/nats-server/issues/7849)) - The Raft layer no longer incorrectly restores the cluster size to 1 at startup, which could result in an isolated node incorrectly winning a single-node election ([#7850](https://redirect.github.com/nats-io/nats-server/issues/7850)) - The memory store correctly refreshes the last sequence of a subject in the subject state tracking ([#7865](https://redirect.github.com/nats-io/nats-server/issues/7865)) - Tiered reservations are now handled more consistently, fixing issues where replicated assets could be over-counted and where reservations were incorrectly applied on recovery ([#7880](https://redirect.github.com/nats-io/nats-server/issues/7880)) - When scaling down a replicated consumer to R1, the correct consumer name is now used in the request where no durable name is set ([#7891](https://redirect.github.com/nats-io/nats-server/issues/7891)) - Consumer deletion will now retry correctly when erroring with a directory not empty error ([#7886](https://redirect.github.com/nats-io/nats-server/issues/7886)) - The `store_max_stream_bytes` and `memory_max_stream_bytes` are no longer incorrectly applied when determining whether account resource limits have been exceeded, fixing a long-standing bug where it would incorrectly limit total reservations ([#7895](https://redirect.github.com/nats-io/nats-server/issues/7895)) - A race condition in the memory store when updating the delete map has been fixed ([#7897](https://redirect.github.com/nats-io/nats-server/issues/7897)) - Stream source checks are now enforced correctly when from a different account or domain ([#7903](https://redirect.github.com/nats-io/nats-server/issues/7903)) - Consumer assignments no longer incorrectly handle or store transition state which could lead to issues on recovery or cause consumer state to be lost ([#7905](https://redirect.github.com/nats-io/nats-server/issues/7905), [#7908](https://redirect.github.com/nats-io/nats-server/issues/7908)) MQTT - SUB and UNSUB packets now correctly detect and reject the Packet Identifier being set to 0 ([#7805](https://redirect.github.com/nats-io/nats-server/issues/7805)) WebSockets - Fix invalid parsing of 64-bit payload lengths, which could lead to a server panic - Correctly reject compressed frames when compression was not negotiated as a part of the handshake - The `Origin` header validation now validates the protocol scheme as well as host and port - Gracefully handle failed connection upgrades - The `CLOSE` frame lengths and status codes are now validated correctly - The compressor state is correctly reset when a max payload error occurs - Buffers are now correctly reused, reducing memory pressure ([#7901](https://redirect.github.com/nats-io/nats-server/issues/7901)) - Empty compressed buffers should no longer result in a server panic ##### Complete Changes </details> <details> <summary>posthog/posthog-go (github.com/posthog/posthog-go)</summary> ### [`v1.11.1`](https://redirect.github.com/PostHog/posthog-go/releases/tag/v1.11.1) [Compare Source](https://redirect.github.com/posthog/posthog-go/compare/v1.10.0...v1.11.1) #### 1.11.1 - 2026-03-11 - [Full Changelog](https://redirect.github.com/PostHog/posthog-go/compare/v1.11.0...v1.11.1) </details> <details> <summary>projectdiscovery/subfinder (github.com/projectdiscovery/subfinder/v2)</summary> ### [`v2.13.0`](https://redirect.github.com/projectdiscovery/subfinder/releases/tag/v2.13.0) [Compare Source](https://redirect.github.com/projectdiscovery/subfinder/compare/v2.12.0...v2.13.0) #### What's Changed ##### 🎉 New Features - Added URLScan.io as passive subdomain source by [@Jigardjain](https://redirect.github.com/Jigardjain) in [#1710](https://redirect.github.com/projectdiscovery/subfinder/pull/1710) ##### 🐞 Bug Fixes - Fixed timeout issue for Crtsh source by [@recepgunes1](https://redirect.github.com/recepgunes1) in [#1723](https://redirect.github.com/projectdiscovery/subfinder/pull/1723) ##### Other Changes - Changed working directory path for Dependabot by [@mikelolasagasti](https://redirect.github.com/mikelolasagasti) in [#1708](https://redirect.github.com/projectdiscovery/subfinder/pull/1708) - Added PR template by [@dogancanbakir](https://redirect.github.com/dogancanbakir) in [#1729](https://redirect.github.com/projectdiscovery/subfinder/pull/1729) - Sorted sources alphabetically by [@PontusLindblom](https://redirect.github.com/PontusLindblom) in [#1720](https://redirect.github.com/projectdiscovery/subfinder/pull/1720) - Marked LeakIX as requiring an API key by [@spameier](https://redirect.github.com/spameier) in [#1709](https://redirect.github.com/projectdiscovery/subfinder/pull/1709) #### New Contributors - [@Jigardjain](https://redirect.github.com/Jigardjain) made their first contribution in [#1710](https://redirect.github.com/projectdiscovery/subfinder/pull/1710) - [@PontusLindblom](https://redirect.github.com/PontusLindblom) made their first contribution in [#1720](https://redirect.github.com/projectdiscovery/subfinder/pull/1720) - [@spameier](https://redirect.github.com/spameier) made their first contribution in [#1709](https://redirect.github.com/projectdiscovery/subfinder/pull/1709) - [@recepgunes1](https://redirect.github.com/recepgunes1) made their first contribution in [#1723](https://redirect.github.com/projectdiscovery/subfinder/pull/1723) **Full Changelog**: <https://github.com/projectdiscovery/subfinder/compare/v2.12.0...v2.13.0> </details> <details> <summary>stripe/stripe-go (github.com/stripe/stripe-go/v84)</summary> ### [`v84.4.1`](https://redirect.github.com/stripe/stripe-go/releases/tag/v84.4.1) [Compare Source](https://redirect.github.com/stripe/stripe-go/compare/v84.4.0...v84.4.1) - [#2288](https://redirect.github.com/stripe/stripe-go/pull/2288) Add Stripe-Request-Trigger header - [#2285](https://redirect.github.com/stripe/stripe-go/pull/2285) Add agent information to UserAgent See [the changelog for more details](https://redirect.github.com/stripe/stripe-go/blob/v84.4.1/CHANGELOG.md). </details> <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.42.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.42.0): /v0.64.0/v0.18.0/v0.0.16 [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0) ##### Added - Add `go.opentelemetry.io/otel/semconv/v1.40.0` package. The package contains semantic conventions from the `v1.40.0` version of the OpenTelemetry Semantic Conventions. See the [migration documentation](./semconv/v1.40.0/MIGRATION.md) for information on how to upgrade from `go.opentelemetry.io/otel/semconv/v1.39.0`. ([#7985](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985)) - Add `Err` and `SetErr` on `Record` in `go.opentelemetry.io/otel/log` to attach an error and set record exception attributes in `go.opentelemetry.io/otel/log/sdk`. ([#7924](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924)) ##### Changed - `TracerProvider.ForceFlush` in `go.opentelemetry.io/otel/sdk/trace` joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. ([#7856](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856)) ##### Fixed - Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to correctly handle HTTP2 GOAWAY frame. ([#7931](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931)) - Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. ([#7964](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964)) - Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in `go.opentelemetry.io/otel/propagation`. ([#7834](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834)) ##### Removed - Drop support for \[Go 1.24]. ([#7984](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984)) #### What's Changed - fix changelog protection marker by [@pellared](https://redirect.github.com/pellared) in [#7986](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986) - Drop support for Go 1.24 by [@MrAlias](https://redirect.github.com/MrAlias) in [#7984](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7907](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907) - chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.53.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7981](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981) - chore(deps): update benchmark-action/github-action-benchmark action to v1.21.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7989](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.53.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7982](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982) - Revert "Revert "Generate semconv/v1.40.0"" by [@MrAlias](https://redirect.github.com/MrAlias) in [#7985](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985) - support stdlib request.GetBody on metrics by [@marifari-hue](https://redirect.github.com/marifari-hue) in [#7931](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931) - attribute: add TestNotEquivalence and equality operator tests by [@pellared](https://redirect.github.com/pellared) in [#7979](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979) - Refactor benchmark CI by [@XSAM](https://redirect.github.com/XSAM) in [#7873](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873) - chore(deps): update module github.com/securego/gosec/v2 to v2.24.7 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7988](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988) - chore(deps): pin codspeedhq/action action to [`df47568`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/df47568) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7996](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996) - chore(deps): update actions/checkout action to v6.0.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7997](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997) - chore(deps): update codspeedhq/action action to v4.11.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#7999](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999) - Upgrade to semconv/v1.40.0 by [@MrAlias](https://redirect.github.com/MrAlias) in [#7991](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991) - Regenerate semconv/v1.40.0/MIGRATION.md by [@MrAlias](https://redirect.github.com/MrAlias) in [#7992](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992) - fix: generated semconv helpers skipping attributes by [@victoraugustolls](https://redirect.github.com/victoraugustolls) in [#7964](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964) - Feat: Have SpanContext support the new W3C random flag. by [@nikhilmantri0902](https://redirect.github.com/nikhilmantri0902) in [#7834](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834) - Semconv metric helper caller-slice mutation fix by [@MrAlias](https://redirect.github.com/MrAlias) in [#7993](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993) - Fix semconv generated error type to check error chain for custom type declaration by [@MrAlias](https://redirect.github.com/MrAlias) in [#7994](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994) - refactor: replace uint64 and int32 with atomic types in tests by [@alexandear](https://redirect.github.com/alexandear) in [#7941](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941) - chore(deps): update golang.org/x/telemetry digest to [`18da590`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/18da590) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8000](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000) - TracerProvider ForceFlush() Error Fix by [@sawamurataxman](https://redirect.github.com/sawamurataxman) in [#7856](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856) - log: add error field to Record and make SDK to emit exception attributes by [@iblancasa](https://redirect.github.com/iblancasa) in [#7924](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924) - chore(deps): update dependency codespell to v2.4.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8003](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003) - chore(deps): update github/codeql-action action to v4.32.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8004](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004) - chore(deps): update codspeedhq/action action to v4.11.1 by [@renovate](https://redirect.github. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 386d28c6a4508094a2586db8a7a545464bb699c1

This PR contains the following updates: | Package | Update | Change | |---|---|---| | [golangci/golangci-lint](https://redirect.github.com/golangci/golangci-lint) | minor | `v2.10.1` → `v2.11.3` | | [golangci/golangci-lint](https://redirect.github.com/golangci/golangci-lint) | minor | `2.10.1` → `2.11.3` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>golangci/golangci-lint (golangci/golangci-lint)</summary> ### [`v2.11.3`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2113) [Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.2...v2.11.3) *Released on 2026-03-10* 1. Linters bug fixes - `gosec`: from v2.24.7 to [`619ce21`](https://redirect.github.com/golangci/golangci-lint/commit/619ce2117e08) ### [`v2.11.2`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2112) [Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.1...v2.11.2) *Released on 2026-03-07* 1. Fixes - `fmt`: fix error when using the `fmt` command with explicit paths. ### [`v2.11.1`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2111) [Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.11.0...v2.11.1) *Released on 2026-03-06* Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published. This release contains the same things as v2.11.0. ### [`v2.11.0`](https://redirect.github.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v2110) [Compare Source](https://redirect.github.com/golangci/golangci-lint/compare/v2.10.1...v2.11.0) *Released on 2026-03-06* 1. Linters new features or changes - `errcheck`: from 1.9.0 to 1.10.0 (exclude `crypto/rand.Read` by default) - `gosec`: from 2.23.0 to 2.24.6 (new rules: `G113`, `G118`, `G119`, `G120`, `G121`, `G122`, `G123`, `G408`, `G707`) - `noctx`: from 0.4.0 to 0.5.0 (new detection: `httptest.NewRequestWithContext`) - `prealloc`: from 1.0.2 to 1.1.0 - `revive`: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from `var-naming` to a new rule `package-naming`) 2. Linters bug fixes - `gocognit`: from 1.2.0 to 1.2.1 - `gosec`: from 2.24.6 to 2.24.7 - `unqueryvet`: from 1.5.3 to 1.5.4 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Mostly a tooling upgrade, but it also changes runtime behavior by enforcing request body size limits on several admin/API handlers, which could reject previously-accepted large submissions. > > **Overview** > Updates `golangci-lint` to `v2.11.3` in both the devcontainer and CI. > > To satisfy new linter rules, this removes/adjusts many `//nolint:gosec` annotations, switches multiple tests to `httptest.NewRequestWithContext`, and adds/updates a few targeted suppressions (e.g. `context.WithCancel`, `context.WithTimeout`). > > Adds explicit `http.MaxBytesReader` limits on various Area51 admin handlers (typically 10MB; 200MB for snapshot/blast-radius uploads), reducing risk of oversized request bodies at the cost of stricter input limits. > > Written by [Cursor Bugbot](https://cursor.com/dashboard?tab=bugbot) for commit aa6ee6c4ad731a9c1dd0433d3f2abb4402a4ca5f. This will update automatically on new commits. Configure [here](https://cursor.com/dashboard?tab=bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: carabasdaniel <daniel.carabas@overmind.tech> GitOrigin-RevId: 4cf21c8a7518ea44685543934946dc11213ab426

….4.1 [security] (#4347) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/modelcontextprotocol/go-sdk](https://redirect.github.com/modelcontextprotocol/go-sdk) | `v1.4.0` → `v1.4.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.4.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.4.0/v1.4.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ### GitHub Vulnerability Alerts #### [GHSA-q382-vc8q-7jhj](https://redirect.github.com/modelcontextprotocol/go-sdk/security/advisories/GHSA-q382-vc8q-7jhj) The Go SDK recently transitioned to the `segmentio/encoding` library for JSON parsing in version 1.3.1. While this change addressed both case-insensitivity and ASCII folding issues, the new parser implemented aggressive key matching that treated keys with `null` Unicode characters appended at the end as equivalent to their base strings. #### Impact When combined with duplicate keys, the described behavior leads to a "last key wins" resolution that could override the intended MCP message. This had the potential for: - **Bypassing intermediary inspection:** Proxies or policy layers that matched on exact field names may have failed to detect or filter these messages. - **Cross-implementation inconsistency:** Other MCP SDKs (TypeScript, Python) use case-sensitive parsing and would reject the same messages, creating potential security-boundary confusion. #### Fix: The `segmentio/encoding` package was patched with a fix in segmentio/encoding@7d5a25d and a new version of the package was released (`v0.5.4`). The SDK switched to the patched version of the dependency in 724dd47aa. Users are advised to update to v1.4.1 to resolve this issue. #### Credits: Thank you to Francesco Lacerenza (Doyensec) for reporting this issue. --- ### Release Notes <details> <summary>modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)</summary> ### [`v1.4.1`](https://redirect.github.com/modelcontextprotocol/go-sdk/releases/tag/v1.4.1) [Compare Source](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.4.0...v1.4.1) ***This release is a patch release for v1.4.0.*** It contains cherry-picks for several security improvements. Security advisories will follow. ### Fixes #### Update of the `segmentio/encoding` module version The JSON parsing library that was adopted to avoid attacks taking advantage of the Go's standard parser being case insensitive turned out to contain an issue itself. We have submitted the fix upstream and this release updates the dependency to the patched version. #### Cross-origin requests protection We have added additional protection against cross origin requests. From now on, we verify that `Content-Type` for JSON-RPC `POST` requests is set to `application/json` and use the new `http.CrossOriginProtection` functionality to verify the origin of the request. Usage of this functionality required **increasing the required Go version to 1.25**, which is in line with our Go version policy of supporting two newest Go versions. The behavior can be customized by passing a configured `http.CrossOriginProtection` object to `StreamableHTTPOptions`. Since this is a behavior change, we introduced a compatibility parameter `disablecrossoriginprotection` that will allow to temporarily disable it. It will be removed in `v1.6.0` version of the SDK. See [here](https://redirect.github.com/modelcontextprotocol/go-sdk/blob/main/docs/mcpgodebug.md) for more details about behavior changes and a history of compatibility parameters across SDK versions. #### Allowing customization of `http.Client` for client-side OAuth We have introduced an optional `http.Client` parameter to `AuthorizationCodeHandlerConfig`. This allows customization of the transport, for example implementing environment specific protection against [Server-Side Request Forgery](https://modelcontextprotocol.io/docs/tutorials/security/security_best_practices#server-side-request-forgery-ssrf). ### Pull requests - internal: fix Unicode zero character handling by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#841](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/841) - auth: allow passing custom http.Client to AuthorizationCodeHandler by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#840](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/840) - mcp: verify 'Origin' and 'Content-Type' headers by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#842](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/842) **Full Changelog**: <modelcontextprotocol/go-sdk@v1.4.0...v1.4.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 25faf3a4f8dc8c406e86a6df26dfc1813eb42795

… d00831a (#4348) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `0b37fe3` → `d00831a` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 0a1e9e58d73c42d7efca6eadb2c7cbb9ba90f811

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.37.0` → `6.38.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.24.0` → `7.25.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.38.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6380-March-25-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.37.0...v6.38.0) FEATURES: - **New Action:** `aws_dms_start_replication_task_assessment_run` ([#47058](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47058)) - **New Data Source:** `aws_dynamodb_backups` ([#47036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47036)) - **New Data Source:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New Data Source:** `aws_savingsplans_offerings` ([#47081](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47081)) - **New List Resource:** `aws_msk_cluster` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_msk_serverless_cluster` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_route53_resolver_rule` ([#47063](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47063)) - **New List Resource:** `aws_sagemaker_algorithm` ([#47051](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47051)) - **New List Resource:** `aws_ssm_document` ([#46974](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46974)) - **New List Resource:** `aws_ssoadmin_account_assignment` ([#47067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47067)) - **New List Resource:** `aws_vpc_endpoint` ([#46977](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46977)) - **New List Resource:** `aws_workmail_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) - **New Resource:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New Resource:** `aws_observabilityadmin_telemetry_enrichment` ([#47089](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47089)) - **New Resource:** `aws_sagemaker_algorithm` ([#47051](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47051)) - **New Resource:** `aws_workmail_default_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) - **New Resource:** `aws_workmail_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) ENHANCEMENTS: - data-source/aws\_networkfirewall\_firewall\_policy: Add `firewall_policy.enable_tls_session_holding` attribute ([#47065](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47065)) - resource/aws\_bedrockagentcore\_agent\_runtime: Add `authorizer_configuration.custom_jwt_authorizer.custom_claim` configuration block ([#47049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47049)) - resource/aws\_bedrockagentcore\_gateway: Add `authorizer_configuration.custom_jwt_authorizer.custom_claim` configuration block ([#47049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47049)) - resource/aws\_bedrockagentcore\_gateway\_target: Add `target_configuration.mcp.api_gateway` configuration block ([#46916](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46916)) - resource/aws\_dynamodb\_table: Add `restore_backup_arn` argument ([#47068](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47068)) - resource/aws\_fis\_experiment\_template: Support `KinesisStreams` as a value for `action.target.key` ([#47010](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47010)) - resource/aws\_fis\_experiment\_template: Support `VPCEndpoints` as a value for `action.target.key` ([#47045](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47045)) - resource/aws\_mq\_broker: Change `user` block to Optional ([#46883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46883)) - resource/aws\_msk\_cluster: Add resource identity support ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - resource/aws\_msk\_serverless\_cluster: Add resource identity support ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - resource/aws\_networkfirewall\_firewall\_policy: Add `firewall_policy.enable_tls_session_holding` argument ([#47065](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47065)) - resource/aws\_securityhub\_insight: Add `filters.aws_account_name` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_associated_standards_id` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_id` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_parameters_name` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_parameters_value` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_ssoadmin\_account\_assignment: Add Resource Identity support ([#47067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47067)) BUG FIXES: - resource/aws\_api\_gateway\_method: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_integration: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_stage: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_gateway\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_gateway: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_node: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_router: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_service: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_cloudfront\_distribution\_tenant: Fix panic when managed certificate is not found during creation ([#46982](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46982)) - resource/aws\_controltower\_control: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_default\_route\_table: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_gateway\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_private\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_private\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_public\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_public\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_transit\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_transit\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_private\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_public\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_transit\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ecs\_express\_gateway\_service: Fix `Provider produced inconsistent result after apply` error when `environment` variables are defined in non-alphabetical order ([#46771](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46771)) - resource/aws\_elasticache\_reserved\_cache\_node: Fix `Provider returned invalid result object after apply` errors where computed attributes remained unknown after create ([#47012](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47012)) - resource/aws\_kinesis\_stream: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_mq\_broker: Fix non-idempotent behavior for RabbitMQ brokers with `user` block ([#46883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46883)) - resource/aws\_network\_acl: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_network\_interface\_sg\_attachment: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_opensearch\_domain: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_route53recoverycontrolconfig\_routing\_control: Fix panic on concurrent creates when API returns ConflictException ([#47038](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47038)) - resource/aws\_route\_table\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_serverlessapplicationrepository\_cloudformation\_stack: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_servicecatalog\_product: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ses\_active\_receipt\_rule\_set: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ssm\_default\_patch\_baseline: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_vpc\_dhcp\_options\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_wafv2\_web\_acl\_rule: Fix `Unable to unmarshal DynamicValue` error when `statement.managed_rule_group_statement.rule_action_override` block is specified ([#46998](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46998)) - resource/aws\_wafv2\_web\_acl\_rule\_group\_association: Fix `WAFOptimisticLockException` errors when multiple associations target the same Web ACL ([#47037](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47037)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.25.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7250-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.24.0...v7.25.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 490523fcf2a01ced2265937b6b3ca41a169568b2

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.37.0` → `6.38.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.24.0` → `7.25.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.38.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6380-March-25-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.37.0...v6.38.0) FEATURES: - **New Action:** `aws_dms_start_replication_task_assessment_run` ([#47058](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47058)) - **New Data Source:** `aws_dynamodb_backups` ([#47036](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47036)) - **New Data Source:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New Data Source:** `aws_savingsplans_offerings` ([#47081](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47081)) - **New List Resource:** `aws_msk_cluster` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_msk_serverless_cluster` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New List Resource:** `aws_route53_resolver_rule` ([#47063](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47063)) - **New List Resource:** `aws_sagemaker_algorithm` ([#47051](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47051)) - **New List Resource:** `aws_ssm_document` ([#46974](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46974)) - **New List Resource:** `aws_ssoadmin_account_assignment` ([#47067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47067)) - **New List Resource:** `aws_vpc_endpoint` ([#46977](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46977)) - **New List Resource:** `aws_workmail_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) - **New Resource:** `aws_msk_topic` ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - **New Resource:** `aws_observabilityadmin_telemetry_enrichment` ([#47089](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47089)) - **New Resource:** `aws_sagemaker_algorithm` ([#47051](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47051)) - **New Resource:** `aws_workmail_default_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) - **New Resource:** `aws_workmail_domain` ([#46931](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46931)) ENHANCEMENTS: - data-source/aws\_networkfirewall\_firewall\_policy: Add `firewall_policy.enable_tls_session_holding` attribute ([#47065](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47065)) - resource/aws\_bedrockagentcore\_agent\_runtime: Add `authorizer_configuration.custom_jwt_authorizer.custom_claim` configuration block ([#47049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47049)) - resource/aws\_bedrockagentcore\_gateway: Add `authorizer_configuration.custom_jwt_authorizer.custom_claim` configuration block ([#47049](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47049)) - resource/aws\_bedrockagentcore\_gateway\_target: Add `target_configuration.mcp.api_gateway` configuration block ([#46916](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46916)) - resource/aws\_dynamodb\_table: Add `restore_backup_arn` argument ([#47068](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47068)) - resource/aws\_fis\_experiment\_template: Support `KinesisStreams` as a value for `action.target.key` ([#47010](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47010)) - resource/aws\_fis\_experiment\_template: Support `VPCEndpoints` as a value for `action.target.key` ([#47045](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47045)) - resource/aws\_mq\_broker: Change `user` block to Optional ([#46883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46883)) - resource/aws\_msk\_cluster: Add resource identity support ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - resource/aws\_msk\_serverless\_cluster: Add resource identity support ([#46490](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46490)) - resource/aws\_networkfirewall\_firewall\_policy: Add `firewall_policy.enable_tls_session_holding` argument ([#47065](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47065)) - resource/aws\_securityhub\_insight: Add `filters.aws_account_name` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_associated_standards_id` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_id` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_parameters_name` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_securityhub\_insight: Add `filters.compliance_security_control_parameters_value` configuration block ([#47027](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47027)) - resource/aws\_ssoadmin\_account\_assignment: Add Resource Identity support ([#47067](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47067)) BUG FIXES: - resource/aws\_api\_gateway\_method: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_integration: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_apigatewayv2\_stage: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_gateway\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_route: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_gateway: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_node: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_router: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_appmesh\_virtual\_service: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_cloudfront\_distribution\_tenant: Fix panic when managed certificate is not found during creation ([#46982](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46982)) - resource/aws\_controltower\_control: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_default\_route\_table: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_gateway\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_private\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_private\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_public\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_public\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_transit\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_hosted\_transit\_virtual\_interface\_accepter: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_private\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_public\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_dx\_transit\_virtual\_interface: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ecs\_express\_gateway\_service: Fix `Provider produced inconsistent result after apply` error when `environment` variables are defined in non-alphabetical order ([#46771](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46771)) - resource/aws\_elasticache\_reserved\_cache\_node: Fix `Provider returned invalid result object after apply` errors where computed attributes remained unknown after create ([#47012](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47012)) - resource/aws\_kinesis\_stream: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_mq\_broker: Fix non-idempotent behavior for RabbitMQ brokers with `user` block ([#46883](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46883)) - resource/aws\_network\_acl: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_network\_interface\_sg\_attachment: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_opensearch\_domain: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_route53recoverycontrolconfig\_routing\_control: Fix panic on concurrent creates when API returns ConflictException ([#47038](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47038)) - resource/aws\_route\_table\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_serverlessapplicationrepository\_cloudformation\_stack: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_servicecatalog\_product: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ses\_active\_receipt\_rule\_set: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_ssm\_default\_patch\_baseline: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_vpc\_dhcp\_options\_association: Fix import to honor `@region` suffix when using resource-level `region` attribute ([#47043](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47043)) - resource/aws\_wafv2\_web\_acl\_rule: Fix `Unable to unmarshal DynamicValue` error when `statement.managed_rule_group_statement.rule_action_override` block is specified ([#46998](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46998)) - resource/aws\_wafv2\_web\_acl\_rule\_group\_association: Fix `WAFOptimisticLockException` errors when multiple associations target the same Web ACL ([#47037](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47037)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.25.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7250-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.24.0...v7.25.0) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 490523fcf2a01ced2265937b6b3ca41a169568b2

… 9d38bb4 (#4558) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `d00831a` → `9d38bb4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: d4f3f19c0dcd704c6375797c8d9d0cd06880e002

…urity] (#4568) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-jose/go-jose/v4](https://redirect.github.com/go-jose/go-jose) | `v4.1.3` → `v4.1.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.3/v4.1.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-34986](https://redirect.github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8) ### Impact Decrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`. This code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. ### Fixed In 4.1.4 and v3.0.5 ### Workarounds If the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected. If your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`). ### Thanks Go JOSE thanks Datadog's Security team for finding this issue. --- ### Release Notes <details> <summary>go-jose/go-jose (github.com/go-jose/go-jose/v4)</summary> ### [`v4.1.4`](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) [Compare Source](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 3c8e03dca7e9129b62d388c1b3f10391b5469d12

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [auth0](https://registry.terraform.io/providers/auth0/auth0) ([source](https://redirect.github.com/auth0/terraform-provider-auth0)) | required_provider | minor | `1.41.0` → `1.42.0` | | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.38.0` → `6.39.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.25.0` → `7.26.0` | | [kubectl](https://registry.terraform.io/providers/alekc/kubectl) ([source](https://redirect.github.com/alekc/terraform-provider-kubectl)) | required_provider | minor | `2.1.6` → `2.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/terraform-provider-auth0 (auth0)</summary> ### [`v1.42.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1420) [Compare Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.41.0...v1.42.0) FEATURES: - `resource/auth0_prompt_screen_partials` – Add `passkeys` into list of supported prompts for partials ([#1504](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1504)) - `resource/auth0_connection` – Add support for configuring `dpop_signing_alg` for Okta and OIDC connections ([#1516](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1516)) BUG FIXES: - `resource/auth0_tenant` – Introduce default value for `enable_client_connections` flag ([#1515](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1515)) </details> <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.39.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6390-April-1-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.38.0...v6.39.0) NOTES: - data-source/aws\_eks\_access\_entry: The `tags_all` attribute is deprecated and will be removed in a future major version ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) FEATURES: - **New Data Source:** `aws_iam_role_policies` ([#46936](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46936)) - **New Data Source:** `aws_iam_role_policy_attachments` ([#47119](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47119)) - **New Data Source:** `aws_networkmanager_core_network` ([#45798](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45798)) - **New Data Source:** `aws_uxc_services` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New List Resource:** `aws_eks_cluster` ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - **New List Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New List Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New List Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New List Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New Resource:** `aws_uxc_account_customizations` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) ENHANCEMENTS: - data-source/aws\_outposts\_asset: Add `instance_families` attribute ([#47153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47153)) - resource/aws\_eks\_cluster: Add resource identity support ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_eks\_cluster: Support `tier-8xl` as a valid value for `control_plane_scaling_config.tier` ([#46976](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46976)) - resource/aws\_network\_acl\_rule: Add Resource Identity support ([#47090](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47090)) - resource/aws\_observabilityadmin\_centralization\_rule\_for\_organization: Add `source.source_logs_configuration.data_source_selection_criteria` argument. Change `source.source_logs_configuration.log_group_selection_criteria` to Optional ([#47154](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47154)) - resource/aws\_prometheus\_scraper: Add `source.vpc` argument. Change `source.eks` to Optional ([#47155](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47155)) - resource/aws\_s3\_bucket\_metric: Support bucket metrics for directory buckets ([#47184](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47184)) - resource/aws\_s3control\_storage\_lens\_configuration: Add `storage_lens_configuration.account_level.advanced_performance_metrics` and `storage_lens_configuration.account_level.bucket_level.advanced_performance_metrics` arguments ([#46865](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46865)) BUG FIXES: - data-source/aws\_eks\_access\_entry: Fixed tags not being returned ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - data-source/aws\_service\_principal: Fix service principal names for EC2 and S3 in the `aws-cn` partition ([#47141](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47141)) - resource/aws\_config\_organization\_conformance\_pack: Fix creation timeout when using a delegated administrator account ([#47072](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47072)) - resource/aws\_dynamodb\_table: Fix `Error: waiting for creation AWS DynamoDB Table (xxxxx): couldn't find resource` in highly active accounts by restoring `5s` delay before polling for table status. This fixes a regression introduced in [v6.28.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6280-january-7-2026). ([#47143](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47143)) - resource/aws\_eks\_cluster: Set `bootstrap_self_managed_addons` to `true` when importing ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_elasticache\_serverless\_cache: Fix `InvalidParameterCombination` error when `cache_usage_limits` is removed ([#46134](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46134)) - resource/aws\_glue\_catalog\_table: Detect and report failed view creation ([#47101](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47101)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.26.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7260-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.25.0...v7.26.0) </details> <details> <summary>alekc/terraform-provider-kubectl (kubectl)</summary> ### [`v2.2.0`](https://redirect.github.com/alekc/terraform-provider-kubectl/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/alekc/terraform-provider-kubectl/compare/v2.1.6...v2.2.0) #### Changelog - [`1194f86`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1194f869b044fad3854d5f4518ec2dfa470233bf) Dependencies: Bump actions/setup-go in the github-actions group - [`1cd083e`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1cd083ecb6178fe0193856ca00a8e7267199a5f3) Allow upgrading api\_version ([#244](https://redirect.github.com/alekc/terraform-provider-kubectl/issues/244)) - [`6e0d77f`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/6e0d77fdd2be59ccd6d99e1060b4e9d739bd4b81) Dependencies: Bump the gomod group with 6 updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 43a8f49977aadd08e2ced3b70b8d7ae15725488e

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.42.0/v1.43.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.43.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0) #### Added - Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace` for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. ([#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012)) - Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. ([#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642)) - Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. ([#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Add support for per-series start time tracking for cumulative metrics in `go.opentelemetry.io/otel/sdk/metric`. Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. ([#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060)) - Add `WithCardinalityLimitSelector` for metric reader for configuring cardinality limits specific to the instrument kind. ([#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855)) #### Changed - Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to reflect that an empty value is now a valid value, with `INVALID` remaining as a deprecated alias of `EMPTY`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Refactor slice handling in `go.opentelemetry.io/otel/attribute` to optimize short slice values with fixed-size fast paths. ([#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039)) - Improve performance of span metric recording in `go.opentelemetry.io/otel/sdk/trace` by returning early if self-observability is not enabled. ([#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067)) - Improve formatting of metric data diffs in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073)) #### Deprecated - Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use `EMPTY` instead. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) #### Fixed - Return spec-compliant `TraceIdRatioBased` description. This is a breaking behavioral change, but it is necessary to make the implementation [spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased). ([#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027)) - Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. ([#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to use full path for `kenv` command on BSD. ([#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113)) - Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to correctly handle HTTP2 GOAWAY frame. ([#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096)) #### What's Changed - chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8014](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`190d7d4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/190d7d4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8013](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013) - chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8016](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8011](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8023](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8020](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8017](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8017) - chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8019](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8019) - Add doc on how to upgrade to new semconv by [@jmmcorreia](https://redirect.github.com/jmmcorreia) in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8028](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8028) - resource: add WithService detector option by [@codeboten](https://redirect.github.com/codeboten) in [#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7642) - fix(deps): update googleapis to [`a57be14`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a57be14) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8031](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8031) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8032](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8032) - chore(deps): update module github.com/prometheus/procfs to v0.20.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8034](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8034) - chore(deps): update github.com/securego/gosec/v2 digest to [`8895462`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/8895462) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8036](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8036) - chore(deps): update module github.com/sonatard/noctx to v0.5.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8040](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8040) - chore(deps): update github.com/securego/gosec/v2 digest to [`6e66a94`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/6e66a94) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8043](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8043) - docs(otlp): document HTTP/protobuf insecure env vars by [@marcschaeferger](https://redirect.github.com/marcschaeferger) in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - Rebuild semconvkit and verifyreadmes on changes by [@MrAlias](https://redirect.github.com/MrAlias) in [#7995](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7995) - chore(sdk/trace): join errors properly by [@ash2k](https://redirect.github.com/ash2k) in [#8030](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8030) - fix(deps): update googleapis to [`84a4fc4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/84a4fc4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8048](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8048) - attribute: change INVALID Type to EMPTY and mark INVALID as deprecated by [@pellared](https://redirect.github.com/pellared) in [#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8038) - fix(sdk/trace): return spec-compliant TraceIdRatioBased description by [@ash2k](https://redirect.github.com/ash2k) in [#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8027) - linting: add depguard rule to enforce semconv version by [@ajuijas](https://redirect.github.com/ajuijas) in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - chore(deps): update actions/download-artifact action to v8.0.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8046](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8046) - chore(deps): update github.com/securego/gosec/v2 digest to [`b7b2c7b`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b7b2c7b) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8044](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8044) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8045](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8045) - Optimize attribute slice conversion by [@MrAlias](https://redirect.github.com/MrAlias) in [#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8039) - Add benchmarks for end-to-end metrics SDK usage by [@dashpole](https://redirect.github.com/dashpole) in [#7768](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7768) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8052](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8052) - chore(deps): update github.com/securego/gosec/v2 digest to [`befce8d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/befce8d) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8053](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8053) - trace: add Random Trace ID Flag by [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - Improve aggregation concurrent safe tests by [@dashpole](https://redirect.github.com/dashpole) in [#8021](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8021) - Add tests for exponential histogram concurrent-safety edge-cases by [@dashpole](https://redirect.github.com/dashpole) in [#8024](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8024) - exphist: replace min, max, sum, and count with atomics by [@dashpole](https://redirect.github.com/dashpole) in [#8025](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8025) - chore(deps): update github.com/securego/gosec/v2 digest to [`c2dfcec`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c2dfcec) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8055](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8055) - chore(deps): update otel/weaver docker tag to v0.22.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8058](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8058) - chore(deps): update github.com/securego/gosec/v2 digest to [`dec52c4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/dec52c4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8063](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8063) - chore(deps): update otel/weaver docker tag to v0.22.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8061](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8061) - chore(deps): update github/codeql-action action to v4.33.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8065](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8065) - Fix race in the lastvalue aggregation where 0 could be observed by [@dashpole](https://redirect.github.com/dashpole) in [#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8056) - chore(deps): update github.com/securego/gosec/v2 digest to [`744bfb5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/744bfb5) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8064](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8064) - Migrate to new bare metal runner (Ubuntu 24) by [@trask](https://redirect.github.com/trask) in [#8068](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8068) - sdk/resource: add WithContext variants for Default and Environment ([#7808](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7808)) by [@ajuijas](https://redirect.github.com/ajuijas) in [#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8051) - Use atomics for exponential histogram buckets by [@dashpole](https://redirect.github.com/dashpole) in [#8057](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8057) - Added the `internal/observ` package to stdoutlog by [@yumosx](https://redirect.github.com/yumosx) in [#7735](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7735) - Add support for the development per-series starttime feature by [@dashpole](https://redirect.github.com/dashpole) in [#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8060) - sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled by [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - Cleanup exemplar featuregate readme by [@dashpole](https://redirect.github.com/dashpole) in [#8072](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8072) - chore(deps): update codecov/codecov-action action to v5.5.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8080](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8080) - chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8083](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8083) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`de6f1cc`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/de6f1cc) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8082](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8082) - chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8085](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8085) - chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8084](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8084) - chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8081](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8081) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8086](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8086) - chore(deps): update actions/cache action to v5.0.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8079](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8079) - chore(deps): update module github.com/fatih/color to v1.19.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8087](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8087) - fix(deps): update googleapis to [`d00831a`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d00831a) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8078](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8078) - chore(deps): update golang.org/x/telemetry digest to [`b6b0c46`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b6b0c46) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8076](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8076) - fix(deps): update module google.golang.org/grpc to v1.79.3 \[security] by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8075](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8075) - sdk/metric: Support specifying cardinality limits per instrument kinds by [@petern48](https://redirect.github.com/petern48) in [#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7855) - chore(deps): update github/codeql-action action to v4.34.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8088](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8088) - chore(deps): update codspeedhq/action action to v4.12.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8089](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8089) - chore(deps): update github/codeql-action action to v4.34.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8090](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8090) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8092](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8092) - chore: fix noctx issues by [@mmorel-35](https://redirect.github.com/mmorel-35) in [#8008](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8008) - chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8095](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8095) - chore(deps): update codecov/codecov-action action to v5.5.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8097](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8097) - chore(deps): update codecov/codecov-action action to v6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8098](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8098) - chore(deps): update module github.com/tetafro/godot to v1.5.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8099](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8099) - chore(deps): update module github.com/butuzov/ireturn to v0.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8100](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8100) - chore(deps): update github/codeql-action action to v4.35.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8101](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8101) - chore(deps): update actions/setup-go action to v6.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8107](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8107) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8106](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8106) - chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8103](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8103) - chore(deps): update github/codeql-action action to v4.35.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8102](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8102) - chore(deps): update module github.com/hashicorp/go-version to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8109](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8109) - metricdatatest: Improve printing of diffs by [@dashpole](https://redirect.github.com/dashpole) in [#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8073) - fix(deps): update googleapis to [`d5a96ad`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d5a96ad) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8112](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8112) - chore(deps): update codspeedhq/action action to v4.13.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8114](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8114) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8119](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8119) - chore(deps): update fossas/fossa-action action to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8118](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8118) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8115](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8115) - fix(deps): update googleapis to [`9d38bb4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9d38bb4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8117](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8117) - fix: support getBody in otelploghttp by [@Tpuljak](https://redirect.github.com/Tpuljak) in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) - fix(deps): update module google.golang.org/grpc to v1.80.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8121](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8121) - Use an absolute path when calling bsd kenv by [@dmathieu](https://redirect.github.com/dmathieu) in [#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8113) - limit response body size for OTLP HTTP exporters by [@pellared](https://redirect.github.com/pellared) in [#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108) - chore(deps): update github.com/golangci/dupl digest to [`c99c5cf`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c99c5cf) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8122](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8122) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8131](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8131) - Release v1.43.0 / v0.65.0 / v0.19.0 by [@dmathieu](https://redirect.github.com/dmathieu) in [#8128](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8128) #### New Contributors - [@jmmcorreia](https://redirect.github.com/jmmcorreia) made their first contribution in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - [@marcschaeferger](https://redirect.github.com/marcschaeferger) made their first contribution in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - [@ajuijas](https://redirect.github.com/ajuijas) made their first contribution in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) made their first contribution in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) made their first contribution in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - [@Tpuljak](https://redirect.github.com/Tpuljak) made their first contribution in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) **Full Changelog**: <open-telemetry/opentelemetry-go@v1.42.0...v1.43.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: dfc201fa3d3972b3de5696d742e459cbc895f8e9

… 9d38bb4 (#4558) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `d00831a` → `9d38bb4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: d4f3f19c0dcd704c6375797c8d9d0cd06880e002

…urity] (#4568) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-jose/go-jose/v4](https://redirect.github.com/go-jose/go-jose) | `v4.1.3` → `v4.1.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.3/v4.1.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-34986](https://redirect.github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8) ### Impact Decrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`. This code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. ### Fixed In 4.1.4 and v3.0.5 ### Workarounds If the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected. If your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`). ### Thanks Go JOSE thanks Datadog's Security team for finding this issue. --- ### Release Notes <details> <summary>go-jose/go-jose (github.com/go-jose/go-jose/v4)</summary> ### [`v4.1.4`](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) [Compare Source](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 3c8e03dca7e9129b62d388c1b3f10391b5469d12

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [auth0](https://registry.terraform.io/providers/auth0/auth0) ([source](https://redirect.github.com/auth0/terraform-provider-auth0)) | required_provider | minor | `1.41.0` → `1.42.0` | | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.38.0` → `6.39.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.25.0` → `7.26.0` | | [kubectl](https://registry.terraform.io/providers/alekc/kubectl) ([source](https://redirect.github.com/alekc/terraform-provider-kubectl)) | required_provider | minor | `2.1.6` → `2.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/terraform-provider-auth0 (auth0)</summary> ### [`v1.42.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1420) [Compare Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.41.0...v1.42.0) FEATURES: - `resource/auth0_prompt_screen_partials` – Add `passkeys` into list of supported prompts for partials ([#1504](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1504)) - `resource/auth0_connection` – Add support for configuring `dpop_signing_alg` for Okta and OIDC connections ([#1516](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1516)) BUG FIXES: - `resource/auth0_tenant` – Introduce default value for `enable_client_connections` flag ([#1515](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1515)) </details> <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.39.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6390-April-1-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.38.0...v6.39.0) NOTES: - data-source/aws\_eks\_access\_entry: The `tags_all` attribute is deprecated and will be removed in a future major version ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) FEATURES: - **New Data Source:** `aws_iam_role_policies` ([#46936](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46936)) - **New Data Source:** `aws_iam_role_policy_attachments` ([#47119](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47119)) - **New Data Source:** `aws_networkmanager_core_network` ([#45798](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45798)) - **New Data Source:** `aws_uxc_services` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New List Resource:** `aws_eks_cluster` ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - **New List Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New List Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New List Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New List Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New Resource:** `aws_uxc_account_customizations` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) ENHANCEMENTS: - data-source/aws\_outposts\_asset: Add `instance_families` attribute ([#47153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47153)) - resource/aws\_eks\_cluster: Add resource identity support ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_eks\_cluster: Support `tier-8xl` as a valid value for `control_plane_scaling_config.tier` ([#46976](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46976)) - resource/aws\_network\_acl\_rule: Add Resource Identity support ([#47090](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47090)) - resource/aws\_observabilityadmin\_centralization\_rule\_for\_organization: Add `source.source_logs_configuration.data_source_selection_criteria` argument. Change `source.source_logs_configuration.log_group_selection_criteria` to Optional ([#47154](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47154)) - resource/aws\_prometheus\_scraper: Add `source.vpc` argument. Change `source.eks` to Optional ([#47155](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47155)) - resource/aws\_s3\_bucket\_metric: Support bucket metrics for directory buckets ([#47184](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47184)) - resource/aws\_s3control\_storage\_lens\_configuration: Add `storage_lens_configuration.account_level.advanced_performance_metrics` and `storage_lens_configuration.account_level.bucket_level.advanced_performance_metrics` arguments ([#46865](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46865)) BUG FIXES: - data-source/aws\_eks\_access\_entry: Fixed tags not being returned ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - data-source/aws\_service\_principal: Fix service principal names for EC2 and S3 in the `aws-cn` partition ([#47141](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47141)) - resource/aws\_config\_organization\_conformance\_pack: Fix creation timeout when using a delegated administrator account ([#47072](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47072)) - resource/aws\_dynamodb\_table: Fix `Error: waiting for creation AWS DynamoDB Table (xxxxx): couldn't find resource` in highly active accounts by restoring `5s` delay before polling for table status. This fixes a regression introduced in [v6.28.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6280-january-7-2026). ([#47143](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47143)) - resource/aws\_eks\_cluster: Set `bootstrap_self_managed_addons` to `true` when importing ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_elasticache\_serverless\_cache: Fix `InvalidParameterCombination` error when `cache_usage_limits` is removed ([#46134](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46134)) - resource/aws\_glue\_catalog\_table: Detect and report failed view creation ([#47101](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47101)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.26.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7260-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.25.0...v7.26.0) </details> <details> <summary>alekc/terraform-provider-kubectl (kubectl)</summary> ### [`v2.2.0`](https://redirect.github.com/alekc/terraform-provider-kubectl/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/alekc/terraform-provider-kubectl/compare/v2.1.6...v2.2.0) #### Changelog - [`1194f86`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1194f869b044fad3854d5f4518ec2dfa470233bf) Dependencies: Bump actions/setup-go in the github-actions group - [`1cd083e`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1cd083ecb6178fe0193856ca00a8e7267199a5f3) Allow upgrading api\_version ([#244](https://redirect.github.com/alekc/terraform-provider-kubectl/issues/244)) - [`6e0d77f`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/6e0d77fdd2be59ccd6d99e1060b4e9d739bd4b81) Dependencies: Bump the gomod group with 6 updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 43a8f49977aadd08e2ced3b70b8d7ae15725488e

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.42.0/v1.43.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.43.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0) #### Added - Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace` for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. ([#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012)) - Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. ([#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642)) - Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. ([#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Add support for per-series start time tracking for cumulative metrics in `go.opentelemetry.io/otel/sdk/metric`. Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. ([#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060)) - Add `WithCardinalityLimitSelector` for metric reader for configuring cardinality limits specific to the instrument kind. ([#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855)) #### Changed - Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to reflect that an empty value is now a valid value, with `INVALID` remaining as a deprecated alias of `EMPTY`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Refactor slice handling in `go.opentelemetry.io/otel/attribute` to optimize short slice values with fixed-size fast paths. ([#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039)) - Improve performance of span metric recording in `go.opentelemetry.io/otel/sdk/trace` by returning early if self-observability is not enabled. ([#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067)) - Improve formatting of metric data diffs in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073)) #### Deprecated - Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use `EMPTY` instead. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) #### Fixed - Return spec-compliant `TraceIdRatioBased` description. This is a breaking behavioral change, but it is necessary to make the implementation [spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased). ([#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027)) - Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. ([#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to use full path for `kenv` command on BSD. ([#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113)) - Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to correctly handle HTTP2 GOAWAY frame. ([#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096)) #### What's Changed - chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8014](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`190d7d4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/190d7d4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8013](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013) - chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8016](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8011](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8023](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8020](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8017](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8017) - chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8019](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8019) - Add doc on how to upgrade to new semconv by [@jmmcorreia](https://redirect.github.com/jmmcorreia) in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8028](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8028) - resource: add WithService detector option by [@codeboten](https://redirect.github.com/codeboten) in [#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7642) - fix(deps): update googleapis to [`a57be14`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a57be14) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8031](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8031) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8032](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8032) - chore(deps): update module github.com/prometheus/procfs to v0.20.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8034](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8034) - chore(deps): update github.com/securego/gosec/v2 digest to [`8895462`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/8895462) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8036](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8036) - chore(deps): update module github.com/sonatard/noctx to v0.5.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8040](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8040) - chore(deps): update github.com/securego/gosec/v2 digest to [`6e66a94`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/6e66a94) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8043](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8043) - docs(otlp): document HTTP/protobuf insecure env vars by [@marcschaeferger](https://redirect.github.com/marcschaeferger) in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - Rebuild semconvkit and verifyreadmes on changes by [@MrAlias](https://redirect.github.com/MrAlias) in [#7995](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7995) - chore(sdk/trace): join errors properly by [@ash2k](https://redirect.github.com/ash2k) in [#8030](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8030) - fix(deps): update googleapis to [`84a4fc4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/84a4fc4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8048](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8048) - attribute: change INVALID Type to EMPTY and mark INVALID as deprecated by [@pellared](https://redirect.github.com/pellared) in [#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8038) - fix(sdk/trace): return spec-compliant TraceIdRatioBased description by [@ash2k](https://redirect.github.com/ash2k) in [#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8027) - linting: add depguard rule to enforce semconv version by [@ajuijas](https://redirect.github.com/ajuijas) in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - chore(deps): update actions/download-artifact action to v8.0.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8046](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8046) - chore(deps): update github.com/securego/gosec/v2 digest to [`b7b2c7b`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b7b2c7b) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8044](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8044) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8045](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8045) - Optimize attribute slice conversion by [@MrAlias](https://redirect.github.com/MrAlias) in [#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8039) - Add benchmarks for end-to-end metrics SDK usage by [@dashpole](https://redirect.github.com/dashpole) in [#7768](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7768) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8052](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8052) - chore(deps): update github.com/securego/gosec/v2 digest to [`befce8d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/befce8d) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8053](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8053) - trace: add Random Trace ID Flag by [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - Improve aggregation concurrent safe tests by [@dashpole](https://redirect.github.com/dashpole) in [#8021](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8021) - Add tests for exponential histogram concurrent-safety edge-cases by [@dashpole](https://redirect.github.com/dashpole) in [#8024](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8024) - exphist: replace min, max, sum, and count with atomics by [@dashpole](https://redirect.github.com/dashpole) in [#8025](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8025) - chore(deps): update github.com/securego/gosec/v2 digest to [`c2dfcec`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c2dfcec) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8055](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8055) - chore(deps): update otel/weaver docker tag to v0.22.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8058](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8058) - chore(deps): update github.com/securego/gosec/v2 digest to [`dec52c4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/dec52c4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8063](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8063) - chore(deps): update otel/weaver docker tag to v0.22.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8061](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8061) - chore(deps): update github/codeql-action action to v4.33.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8065](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8065) - Fix race in the lastvalue aggregation where 0 could be observed by [@dashpole](https://redirect.github.com/dashpole) in [#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8056) - chore(deps): update github.com/securego/gosec/v2 digest to [`744bfb5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/744bfb5) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8064](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8064) - Migrate to new bare metal runner (Ubuntu 24) by [@trask](https://redirect.github.com/trask) in [#8068](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8068) - sdk/resource: add WithContext variants for Default and Environment ([#7808](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7808)) by [@ajuijas](https://redirect.github.com/ajuijas) in [#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8051) - Use atomics for exponential histogram buckets by [@dashpole](https://redirect.github.com/dashpole) in [#8057](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8057) - Added the `internal/observ` package to stdoutlog by [@yumosx](https://redirect.github.com/yumosx) in [#7735](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7735) - Add support for the development per-series starttime feature by [@dashpole](https://redirect.github.com/dashpole) in [#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8060) - sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled by [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - Cleanup exemplar featuregate readme by [@dashpole](https://redirect.github.com/dashpole) in [#8072](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8072) - chore(deps): update codecov/codecov-action action to v5.5.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8080](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8080) - chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8083](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8083) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`de6f1cc`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/de6f1cc) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8082](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8082) - chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8085](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8085) - chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8084](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8084) - chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8081](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8081) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8086](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8086) - chore(deps): update actions/cache action to v5.0.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8079](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8079) - chore(deps): update module github.com/fatih/color to v1.19.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8087](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8087) - fix(deps): update googleapis to [`d00831a`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d00831a) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8078](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8078) - chore(deps): update golang.org/x/telemetry digest to [`b6b0c46`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b6b0c46) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8076](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8076) - fix(deps): update module google.golang.org/grpc to v1.79.3 \[security] by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8075](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8075) - sdk/metric: Support specifying cardinality limits per instrument kinds by [@petern48](https://redirect.github.com/petern48) in [#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7855) - chore(deps): update github/codeql-action action to v4.34.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8088](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8088) - chore(deps): update codspeedhq/action action to v4.12.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8089](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8089) - chore(deps): update github/codeql-action action to v4.34.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8090](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8090) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8092](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8092) - chore: fix noctx issues by [@mmorel-35](https://redirect.github.com/mmorel-35) in [#8008](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8008) - chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8095](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8095) - chore(deps): update codecov/codecov-action action to v5.5.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8097](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8097) - chore(deps): update codecov/codecov-action action to v6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8098](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8098) - chore(deps): update module github.com/tetafro/godot to v1.5.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8099](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8099) - chore(deps): update module github.com/butuzov/ireturn to v0.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8100](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8100) - chore(deps): update github/codeql-action action to v4.35.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8101](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8101) - chore(deps): update actions/setup-go action to v6.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8107](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8107) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8106](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8106) - chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8103](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8103) - chore(deps): update github/codeql-action action to v4.35.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8102](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8102) - chore(deps): update module github.com/hashicorp/go-version to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8109](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8109) - metricdatatest: Improve printing of diffs by [@dashpole](https://redirect.github.com/dashpole) in [#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8073) - fix(deps): update googleapis to [`d5a96ad`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d5a96ad) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8112](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8112) - chore(deps): update codspeedhq/action action to v4.13.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8114](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8114) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8119](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8119) - chore(deps): update fossas/fossa-action action to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8118](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8118) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8115](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8115) - fix(deps): update googleapis to [`9d38bb4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9d38bb4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8117](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8117) - fix: support getBody in otelploghttp by [@Tpuljak](https://redirect.github.com/Tpuljak) in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) - fix(deps): update module google.golang.org/grpc to v1.80.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8121](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8121) - Use an absolute path when calling bsd kenv by [@dmathieu](https://redirect.github.com/dmathieu) in [#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8113) - limit response body size for OTLP HTTP exporters by [@pellared](https://redirect.github.com/pellared) in [#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108) - chore(deps): update github.com/golangci/dupl digest to [`c99c5cf`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c99c5cf) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8122](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8122) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8131](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8131) - Release v1.43.0 / v0.65.0 / v0.19.0 by [@dmathieu](https://redirect.github.com/dmathieu) in [#8128](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8128) #### New Contributors - [@jmmcorreia](https://redirect.github.com/jmmcorreia) made their first contribution in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - [@marcschaeferger](https://redirect.github.com/marcschaeferger) made their first contribution in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - [@ajuijas](https://redirect.github.com/ajuijas) made their first contribution in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) made their first contribution in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) made their first contribution in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - [@Tpuljak](https://redirect.github.com/Tpuljak) made their first contribution in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) **Full Changelog**: <open-telemetry/opentelemetry-go@v1.42.0...v1.43.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: dfc201fa3d3972b3de5696d742e459cbc895f8e9

… 9d38bb4 (#4558) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `d00831a` → `9d38bb4` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: d4f3f19c0dcd704c6375797c8d9d0cd06880e002

…urity] (#4568) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-jose/go-jose/v4](https://redirect.github.com/go-jose/go-jose) | `v4.1.3` → `v4.1.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-jose%2fgo-jose%2fv4/v4.1.3/v4.1.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ### GitHub Vulnerability Alerts #### [CVE-2026-34986](https://redirect.github.com/go-jose/go-jose/security/advisories/GHSA-78h2-9frx-2jm8) ### Impact Decrypting a JSON Web Encryption (JWE) object will panic if the `alg` field indicates a key wrapping algorithm ([one ending in `KW`](https://pkg.go.dev/github.com/go-jose/go-jose/v4#pkg-constants), with the exception of `A128GCMKW`, `A192GCMKW`, and `A256GCMKW`) and the `encrypted_key` field is empty. The panic happens when `cipher.KeyUnwrap()` in `key_wrap.go` attempts to allocate a slice with a zero or negative length based on the length of the `encrypted_key`. This code path is reachable from `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` followed by `Decrypt()` on the resulting object. Note that the parse functions take a list of accepted key algorithms. If the accepted key algorithms do not include any key wrapping algorithms, parsing will fail and the application will be unaffected. This panic is also reachable by calling `cipher.KeyUnwrap()` directly with any `ciphertext` parameter less than 16 bytes long, but calling this function directly is less common. Panics can lead to denial of service. ### Fixed In 4.1.4 and v3.0.5 ### Workarounds If the list of `keyAlgorithms` passed to `ParseEncrypted()` / `ParseEncryptedJSON()` / `ParseEncryptedCompact()` does not include key wrapping algorithms (those ending in `KW`), your application is unaffected. If your application uses key wrapping, you can prevalidate to the JWE objects to ensure the `encrypted_key` field is nonempty. If your application accepts JWE Compact Serialization, apply that validation to the corresponding field of that serialization (the data between the first and second `.`). ### Thanks Go JOSE thanks Datadog's Security team for finding this issue. --- ### Release Notes <details> <summary>go-jose/go-jose (github.com/go-jose/go-jose/v4)</summary> ### [`v4.1.4`](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) [Compare Source](https://redirect.github.com/go-jose/go-jose/compare/v4.1.3...v4.1.4) </details> --- ### Configuration 📅 **Schedule**: Branch creation - "" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 3c8e03dca7e9129b62d388c1b3f10391b5469d12

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [auth0](https://registry.terraform.io/providers/auth0/auth0) ([source](https://redirect.github.com/auth0/terraform-provider-auth0)) | required_provider | minor | `1.41.0` → `1.42.0` | | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.38.0` → `6.39.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.25.0` → `7.26.0` | | [kubectl](https://registry.terraform.io/providers/alekc/kubectl) ([source](https://redirect.github.com/alekc/terraform-provider-kubectl)) | required_provider | minor | `2.1.6` → `2.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/terraform-provider-auth0 (auth0)</summary> ### [`v1.42.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1420) [Compare Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.41.0...v1.42.0) FEATURES: - `resource/auth0_prompt_screen_partials` – Add `passkeys` into list of supported prompts for partials ([#1504](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1504)) - `resource/auth0_connection` – Add support for configuring `dpop_signing_alg` for Okta and OIDC connections ([#1516](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1516)) BUG FIXES: - `resource/auth0_tenant` – Introduce default value for `enable_client_connections` flag ([#1515](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1515)) </details> <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.39.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6390-April-1-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.38.0...v6.39.0) NOTES: - data-source/aws\_eks\_access\_entry: The `tags_all` attribute is deprecated and will be removed in a future major version ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) FEATURES: - **New Data Source:** `aws_iam_role_policies` ([#46936](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46936)) - **New Data Source:** `aws_iam_role_policy_attachments` ([#47119](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47119)) - **New Data Source:** `aws_networkmanager_core_network` ([#45798](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45798)) - **New Data Source:** `aws_uxc_services` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New List Resource:** `aws_eks_cluster` ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - **New List Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New List Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New List Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New List Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_organizations_aws_service_access` ([#46993](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46993)) - **New Resource:** `aws_sagemaker_training_job` ([#46892](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46892)) - **New Resource:** `aws_uxc_account_customizations` ([#47115](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47115)) - **New Resource:** `aws_workmail_group` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) - **New Resource:** `aws_workmail_user` ([#47131](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47131)) ENHANCEMENTS: - data-source/aws\_outposts\_asset: Add `instance_families` attribute ([#47153](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47153)) - resource/aws\_eks\_cluster: Add resource identity support ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_eks\_cluster: Support `tier-8xl` as a valid value for `control_plane_scaling_config.tier` ([#46976](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46976)) - resource/aws\_network\_acl\_rule: Add Resource Identity support ([#47090](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47090)) - resource/aws\_observabilityadmin\_centralization\_rule\_for\_organization: Add `source.source_logs_configuration.data_source_selection_criteria` argument. Change `source.source_logs_configuration.log_group_selection_criteria` to Optional ([#47154](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47154)) - resource/aws\_prometheus\_scraper: Add `source.vpc` argument. Change `source.eks` to Optional ([#47155](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47155)) - resource/aws\_s3\_bucket\_metric: Support bucket metrics for directory buckets ([#47184](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47184)) - resource/aws\_s3control\_storage\_lens\_configuration: Add `storage_lens_configuration.account_level.advanced_performance_metrics` and `storage_lens_configuration.account_level.bucket_level.advanced_performance_metrics` arguments ([#46865](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46865)) BUG FIXES: - data-source/aws\_eks\_access\_entry: Fixed tags not being returned ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - data-source/aws\_service\_principal: Fix service principal names for EC2 and S3 in the `aws-cn` partition ([#47141](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47141)) - resource/aws\_config\_organization\_conformance\_pack: Fix creation timeout when using a delegated administrator account ([#47072](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47072)) - resource/aws\_dynamodb\_table: Fix `Error: waiting for creation AWS DynamoDB Table (xxxxx): couldn't find resource` in highly active accounts by restoring `5s` delay before polling for table status. This fixes a regression introduced in [v6.28.0](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/main/CHANGELOG.md#6280-january-7-2026). ([#47143](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47143)) - resource/aws\_eks\_cluster: Set `bootstrap_self_managed_addons` to `true` when importing ([#47133](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47133)) - resource/aws\_elasticache\_serverless\_cache: Fix `InvalidParameterCombination` error when `cache_usage_limits` is removed ([#46134](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46134)) - resource/aws\_glue\_catalog\_table: Detect and report failed view creation ([#47101](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47101)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.26.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7260-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.25.0...v7.26.0) </details> <details> <summary>alekc/terraform-provider-kubectl (kubectl)</summary> ### [`v2.2.0`](https://redirect.github.com/alekc/terraform-provider-kubectl/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/alekc/terraform-provider-kubectl/compare/v2.1.6...v2.2.0) #### Changelog - [`1194f86`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1194f869b044fad3854d5f4518ec2dfa470233bf) Dependencies: Bump actions/setup-go in the github-actions group - [`1cd083e`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/1cd083ecb6178fe0193856ca00a8e7267199a5f3) Allow upgrading api\_version ([#244](https://redirect.github.com/alekc/terraform-provider-kubectl/issues/244)) - [`6e0d77f`](https://redirect.github.com/alekc/terraform-provider-kubectl/commit/6e0d77fdd2be59ccd6d99e1060b4e9d739bd4b81) Dependencies: Bump the gomod group with 6 updates </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: 43a8f49977aadd08e2ced3b70b8d7ae15725488e

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/otel](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracehttp/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fstdout%2fstdouttrace/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fsdk/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fsdk/v1.42.0/v1.43.0?slim=true) | | [go.opentelemetry.io/otel/trace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.42.0` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2ftrace/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2ftrace/v1.42.0/v1.43.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)</summary> ### [`v1.43.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0) [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0) #### Added - Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace` for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. ([#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012)) - Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. ([#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642)) - Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. ([#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Add support for per-series start time tracking for cumulative metrics in `go.opentelemetry.io/otel/sdk/metric`. Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. ([#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060)) - Add `WithCardinalityLimitSelector` for metric reader for configuring cardinality limits specific to the instrument kind. ([#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855)) #### Changed - Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to reflect that an empty value is now a valid value, with `INVALID` remaining as a deprecated alias of `EMPTY`. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) - Refactor slice handling in `go.opentelemetry.io/otel/attribute` to optimize short slice values with fixed-size fast paths. ([#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039)) - Improve performance of span metric recording in `go.opentelemetry.io/otel/sdk/trace` by returning early if self-observability is not enabled. ([#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067)) - Improve formatting of metric data diffs in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. ([#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073)) #### Deprecated - Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use `EMPTY` instead. ([#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038)) #### Fixed - Return spec-compliant `TraceIdRatioBased` description. This is a breaking behavioral change, but it is necessary to make the implementation [spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased). ([#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027)) - Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. ([#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. ([#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108)) - `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to use full path for `kenv` command on BSD. ([#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113)) - Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to correctly handle HTTP2 GOAWAY frame. ([#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096)) #### What's Changed - chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8014](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`190d7d4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/190d7d4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8013](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013) - chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8016](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8011](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8023](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8020](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8017](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8017) - chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8019](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8019) - Add doc on how to upgrade to new semconv by [@jmmcorreia](https://redirect.github.com/jmmcorreia) in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8028](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8028) - resource: add WithService detector option by [@codeboten](https://redirect.github.com/codeboten) in [#7642](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7642) - fix(deps): update googleapis to [`a57be14`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a57be14) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8031](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8031) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8032](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8032) - chore(deps): update module github.com/prometheus/procfs to v0.20.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8034](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8034) - chore(deps): update github.com/securego/gosec/v2 digest to [`8895462`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/8895462) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8036](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8036) - chore(deps): update module github.com/sonatard/noctx to v0.5.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8040](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8040) - chore(deps): update github.com/securego/gosec/v2 digest to [`6e66a94`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/6e66a94) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8043](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8043) - docs(otlp): document HTTP/protobuf insecure env vars by [@marcschaeferger](https://redirect.github.com/marcschaeferger) in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - Rebuild semconvkit and verifyreadmes on changes by [@MrAlias](https://redirect.github.com/MrAlias) in [#7995](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7995) - chore(sdk/trace): join errors properly by [@ash2k](https://redirect.github.com/ash2k) in [#8030](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8030) - fix(deps): update googleapis to [`84a4fc4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/84a4fc4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8048](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8048) - attribute: change INVALID Type to EMPTY and mark INVALID as deprecated by [@pellared](https://redirect.github.com/pellared) in [#8038](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8038) - fix(sdk/trace): return spec-compliant TraceIdRatioBased description by [@ash2k](https://redirect.github.com/ash2k) in [#8027](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8027) - linting: add depguard rule to enforce semconv version by [@ajuijas](https://redirect.github.com/ajuijas) in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - chore(deps): update actions/download-artifact action to v8.0.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8046](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8046) - chore(deps): update github.com/securego/gosec/v2 digest to [`b7b2c7b`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b7b2c7b) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8044](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8044) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8045](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8045) - Optimize attribute slice conversion by [@MrAlias](https://redirect.github.com/MrAlias) in [#8039](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8039) - Add benchmarks for end-to-end metrics SDK usage by [@dashpole](https://redirect.github.com/dashpole) in [#7768](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7768) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8052](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8052) - chore(deps): update github.com/securego/gosec/v2 digest to [`befce8d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/befce8d) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8053](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8053) - trace: add Random Trace ID Flag by [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - Improve aggregation concurrent safe tests by [@dashpole](https://redirect.github.com/dashpole) in [#8021](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8021) - Add tests for exponential histogram concurrent-safety edge-cases by [@dashpole](https://redirect.github.com/dashpole) in [#8024](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8024) - exphist: replace min, max, sum, and count with atomics by [@dashpole](https://redirect.github.com/dashpole) in [#8025](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8025) - chore(deps): update github.com/securego/gosec/v2 digest to [`c2dfcec`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c2dfcec) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8055](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8055) - chore(deps): update otel/weaver docker tag to v0.22.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8058](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8058) - chore(deps): update github.com/securego/gosec/v2 digest to [`dec52c4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/dec52c4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8063](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8063) - chore(deps): update otel/weaver docker tag to v0.22.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8061](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8061) - chore(deps): update github/codeql-action action to v4.33.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8065](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8065) - Fix race in the lastvalue aggregation where 0 could be observed by [@dashpole](https://redirect.github.com/dashpole) in [#8056](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8056) - chore(deps): update github.com/securego/gosec/v2 digest to [`744bfb5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/744bfb5) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8064](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8064) - Migrate to new bare metal runner (Ubuntu 24) by [@trask](https://redirect.github.com/trask) in [#8068](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8068) - sdk/resource: add WithContext variants for Default and Environment ([#7808](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7808)) by [@ajuijas](https://redirect.github.com/ajuijas) in [#8051](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8051) - Use atomics for exponential histogram buckets by [@dashpole](https://redirect.github.com/dashpole) in [#8057](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8057) - Added the `internal/observ` package to stdoutlog by [@yumosx](https://redirect.github.com/yumosx) in [#7735](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7735) - Add support for the development per-series starttime feature by [@dashpole](https://redirect.github.com/dashpole) in [#8060](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8060) - sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled by [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - Cleanup exemplar featuregate readme by [@dashpole](https://redirect.github.com/dashpole) in [#8072](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8072) - chore(deps): update codecov/codecov-action action to v5.5.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8080](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8080) - chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8083](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8083) - fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to [`de6f1cc`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/de6f1cc) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8082](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8082) - chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8085](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8085) - chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8084](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8084) - chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8081](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8081) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8086](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8086) - chore(deps): update actions/cache action to v5.0.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8079](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8079) - chore(deps): update module github.com/fatih/color to v1.19.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8087](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8087) - fix(deps): update googleapis to [`d00831a`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d00831a) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8078](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8078) - chore(deps): update golang.org/x/telemetry digest to [`b6b0c46`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b6b0c46) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8076](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8076) - fix(deps): update module google.golang.org/grpc to v1.79.3 \[security] by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8075](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8075) - sdk/metric: Support specifying cardinality limits per instrument kinds by [@petern48](https://redirect.github.com/petern48) in [#7855](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7855) - chore(deps): update github/codeql-action action to v4.34.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8088](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8088) - chore(deps): update codspeedhq/action action to v4.12.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8089](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8089) - chore(deps): update github/codeql-action action to v4.34.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8090](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8090) - fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8092](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8092) - chore: fix noctx issues by [@mmorel-35](https://redirect.github.com/mmorel-35) in [#8008](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8008) - chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8095](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8095) - chore(deps): update codecov/codecov-action action to v5.5.4 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8097](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8097) - chore(deps): update codecov/codecov-action action to v6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8098](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8098) - chore(deps): update module github.com/tetafro/godot to v1.5.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8099](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8099) - chore(deps): update module github.com/butuzov/ireturn to v0.4.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8100](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8100) - chore(deps): update github/codeql-action action to v4.35.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8101](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8101) - chore(deps): update actions/setup-go action to v6.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8107](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8107) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8106](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8106) - chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8103](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8103) - chore(deps): update github/codeql-action action to v4.35.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8102](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8102) - chore(deps): update module github.com/hashicorp/go-version to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8109](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8109) - metricdatatest: Improve printing of diffs by [@dashpole](https://redirect.github.com/dashpole) in [#8073](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8073) - fix(deps): update googleapis to [`d5a96ad`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d5a96ad) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8112](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8112) - chore(deps): update codspeedhq/action action to v4.13.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8114](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8114) - fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8119](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8119) - chore(deps): update fossas/fossa-action action to v1.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8118](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8118) - chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8115](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8115) - fix(deps): update googleapis to [`9d38bb4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9d38bb4) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8117](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8117) - fix: support getBody in otelploghttp by [@Tpuljak](https://redirect.github.com/Tpuljak) in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) - fix(deps): update module google.golang.org/grpc to v1.80.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8121](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8121) - Use an absolute path when calling bsd kenv by [@dmathieu](https://redirect.github.com/dmathieu) in [#8113](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8113) - limit response body size for OTLP HTTP exporters by [@pellared](https://redirect.github.com/pellared) in [#8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108) - chore(deps): update github.com/golangci/dupl digest to [`c99c5cf`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c99c5cf) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8122](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8122) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#8131](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8131) - Release v1.43.0 / v0.65.0 / v0.19.0 by [@dmathieu](https://redirect.github.com/dmathieu) in [#8128](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8128) #### New Contributors - [@jmmcorreia](https://redirect.github.com/jmmcorreia) made their first contribution in [#7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807) - [@marcschaeferger](https://redirect.github.com/marcschaeferger) made their first contribution in [#8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037) - [@ajuijas](https://redirect.github.com/ajuijas) made their first contribution in [#8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041) - [@yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) made their first contribution in [#8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012) - [@kouji-yoshimura](https://redirect.github.com/kouji-yoshimura) made their first contribution in [#8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067) - [@Tpuljak](https://redirect.github.com/Tpuljak) made their first contribution in [#8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096) **Full Changelog**: <open-telemetry/opentelemetry-go@v1.42.0...v1.43.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 10am on friday" in timezone Europe/London, Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  GitOrigin-RevId: dfc201fa3d3972b3de5696d742e459cbc895f8e9

… 6f92a3b (#4630) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [google.golang.org/genproto/googleapis/rpc](https://redirect.github.com/googleapis/go-genproto) | require | digest | `9d38bb4` → `6f92a3b` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 968d406737bf59043525e47473faa80e7039df55

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [cloud.google.com/go/auth](https://redirect.github.com/googleapis/google-cloud-go) | `v0.19.0` → `v0.20.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fauth/v0.20.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fauth/v0.19.0/v0.20.0?slim=true) | | [cloud.google.com/go/compute](https://redirect.github.com/googleapis/google-cloud-go) | `v1.58.0` → `v1.59.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fcompute/v1.59.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fcompute/v1.58.0/v1.59.0?slim=true) | | [cloud.google.com/go/secretmanager](https://redirect.github.com/googleapis/google-cloud-go) | `v1.17.0` → `v1.18.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fsecretmanager/v1.18.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fsecretmanager/v1.17.0/v1.18.0?slim=true) | | [cloud.google.com/go/storage](https://redirect.github.com/googleapis/google-cloud-go) | `v1.61.3` → `v1.62.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/cloud.google.com%2fgo%2fstorage/v1.62.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cloud.google.com%2fgo%2fstorage/v1.61.3/v1.62.0?slim=true) | | [github.com/auth0/go-auth0/v2](https://redirect.github.com/auth0/go-auth0) | `v2.7.0` → `v2.8.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.8.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-auth0%2fv2/v2.7.0/v2.8.0?slim=true) | | [github.com/auth0/go-jwt-middleware/v3](https://redirect.github.com/auth0/go-jwt-middleware) | `v3.0.0` → `v3.1.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fauth0%2fgo-jwt-middleware%2fv3/v3.1.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fauth0%2fgo-jwt-middleware%2fv3/v3.0.0/v3.1.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ec2](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.296.2` → `v1.297.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.297.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fec2/v1.296.2/v1.297.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/ecs](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.76.0` → `v1.77.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.77.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fecs/v1.76.0/v1.77.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/eks](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.81.2` → `v1.82.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.82.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2feks/v1.81.2/v1.82.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/lambda](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.88.5` → `v1.89.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.89.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2flambda/v1.88.5/v1.89.0?slim=true) | | [github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2) | `v1.98.0` → `v1.99.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.99.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2faws%2faws-sdk-go-v2%2fservice%2fs3/v1.98.0/v1.99.0?slim=true) | | [github.com/getsentry/sentry-go](https://redirect.github.com/getsentry/sentry-go) | `v0.44.1` → `v0.45.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgetsentry%2fsentry-go/v0.45.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgetsentry%2fsentry-go/v0.44.1/v0.45.0?slim=true) | | [github.com/harness/harness-go-sdk](https://redirect.github.com/harness/harness-go-sdk) | `v0.7.17` → `v0.7.18` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fharness%2fharness-go-sdk/v0.7.18?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fharness%2fharness-go-sdk/v0.7.17/v0.7.18?slim=true) | | [github.com/modelcontextprotocol/go-sdk](https://redirect.github.com/modelcontextprotocol/go-sdk) | `v1.4.1` → `v1.5.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.5.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmodelcontextprotocol%2fgo-sdk/v1.4.1/v1.5.0?slim=true) | | [github.com/openai/openai-go/v3](https://redirect.github.com/openai/openai-go) | `v3.30.0` → `v3.31.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopenai%2fopenai-go%2fv3/v3.31.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopenai%2fopenai-go%2fv3/v3.30.0/v3.31.0?slim=true) | | [github.com/riverqueue/river](https://redirect.github.com/riverqueue/river) | `v0.32.0` → `v0.34.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver/v0.34.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver/v0.32.0/v0.34.0?slim=true) | | [github.com/riverqueue/river/riverdriver/riverpgxv5](https://redirect.github.com/riverqueue/river) | `v0.32.0` → `v0.34.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.34.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2friverdriver%2friverpgxv5/v0.32.0/v0.34.0?slim=true) | | [github.com/riverqueue/river/rivertype](https://redirect.github.com/riverqueue/river) | `v0.32.0` → `v0.34.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2friverqueue%2friver%2frivertype/v0.34.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2friverqueue%2friver%2frivertype/v0.32.0/v0.34.0?slim=true) | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib) | `v0.67.0` → `v0.68.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.68.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fnet%2fhttp%2fotelhttp/v0.67.0/v0.68.0?slim=true) | | [golang.org/x/text](https://pkg.go.dev/golang.org/x/text) | [`v0.35.0` → `v0.36.0`](https://cs.opensource.google/go/x/text/+/refs/tags/v0.35.0...refs/tags/v0.36.0) | ![age](https://developer.mend.io/api/mc/badges/age/go/golang.org%2fx%2ftext/v0.36.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/golang.org%2fx%2ftext/v0.35.0/v0.36.0?slim=true) | | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.274.0` → `v0.275.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.275.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.274.0/v0.275.0?slim=true) | | [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `v1.48.0` → `v1.48.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/modernc.org%2fsqlite/v1.48.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/modernc.org%2fsqlite/v1.48.0/v1.48.1?slim=true) | | [sigs.k8s.io/controller-runtime/tools/setup-envtest](https://redirect.github.com/kubernetes-sigs/controller-runtime) | `v0.0.0-20260402120904-17460276e0da` → `v0.0.0-20260405152528-6210f847b2c1` | ![age](https://developer.mend.io/api/mc/badges/age/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260405152528-6210f847b2c1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/sigs.k8s.io%2fcontroller-runtime%2ftools%2fsetup-envtest/v0.0.0-20260402120904-17460276e0da/v0.0.0-20260405152528-6210f847b2c1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. ## ⚠️ Warning These modules are almost certainly going to break everything. They do every time they update. If you update even one repo's OTEL modules, go will then pull in new versions due to [MVS](https://research.swtch.com/vgo-mvs) which will cause your repo to break. All [otel pull requests](https://redirect.github.com/pulls?q=is%3Aopen+is%3Apr+user%3Aovermindtech+archived%3Afalse+label%3Aobservability+) need to be merged basically at the same time, and after all of the modules have been updated to be compatible with each other. ## ⚠️ Warning These modules contain database migrations that need to be added manually to our atlas migrations. Check the contents of https://github.com/riverqueue/river/tree/master/rivermigrate/migration before merging this update. --- ### Release Notes <details> <summary>googleapis/google-cloud-go (cloud.google.com/go/auth)</summary> ### [`v0.20.0`](https://redirect.github.com/googleapis/google-cloud-go/blob/HEAD/CHANGES.md#v0200) [Compare Source](https://redirect.github.com/googleapis/google-cloud-go/compare/v0.19.0...v0.20.0) - bigquery: Support SchemaUpdateOptions for load jobs. - bigtable: - Add SampleRowKeys. - cbt: Support union, intersection GCPolicy. - Retry admin RPCS. - Add trace spans to retries. - datastore: Add OpenCensus tracing. - firestore: - Fix queries involving Null and NaN. - Allow Timestamp protobuffers for time values. - logging: Add a WriteTimeout option. - spanner: Support Batch API. - storage: Add OpenCensus tracing. </details> <details> <summary>auth0/go-auth0 (github.com/auth0/go-auth0/v2)</summary> ### [`v2.8.0`](https://redirect.github.com/auth0/go-auth0/blob/HEAD/CHANGELOG.md#v280-2026-04-09) [Compare Source](https://redirect.github.com/auth0/go-auth0/compare/v2.7.0...v2.8.0) [Full Changelog](https://redirect.github.com/auth0/go-auth0/compare/v2.7.0...v2.8.0) **Added** - feat: SDK regeneration with typed error codes and org connections client [#746](https://redirect.github.com/auth0/go-auth0/pull/746) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add CIMD client registration, refresh token listing, and group deletion [#741](https://redirect.github.com/auth0/go-auth0/pull/741) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) - feat: add custom domain defaults, credential kid, and connection configuration [#732](https://redirect.github.com/auth0/go-auth0/pull/732) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) **Changed** - refactor: replace interface{} with any and use millisecond time formatting [#733](https://redirect.github.com/auth0/go-auth0/pull/733) ([fern-api\[bot\]](https://redirect.github.com/apps/fern-api)) **Fixed** - fix: prevent double-slash in base URL when domain has trailing slash [#745](https://redirect.github.com/auth0/go-auth0/pull/745) ([developerkunal](https://redirect.github.com/developerkunal)) - fix: serialize client assertion aud claim as string instead of array [#727](https://redirect.github.com/auth0/go-auth0/pull/727) ([developerkunal](https://redirect.github.com/developerkunal)) **Security** - chore(deps): bump codecov/codecov-action from 5.5.2 to 6.0.0 [#736](https://redirect.github.com/auth0/go-auth0/pull/736) ([dependabot\[bot\]](https://redirect.github.com/apps/dependabot)) - chore: add SCA scan workflow [#729](https://redirect.github.com/auth0/go-auth0/pull/729) ([developerkunal](https://redirect.github.com/developerkunal)) </details> <details> <summary>auth0/go-jwt-middleware (github.com/auth0/go-jwt-middleware/v3)</summary> ### [`v3.1.0`](https://redirect.github.com/auth0/go-jwt-middleware/blob/HEAD/CHANGELOG.md#v310-2026-04-09) [Compare Source](https://redirect.github.com/auth0/go-jwt-middleware/compare/v3.0.0...v3.1.0) [Full Changelog](https://redirect.github.com/auth0/go-jwt-middleware/compare/v3.0.0...v3.1.0) **Added** - feat(MCD): implement multiple custom domains support [#368](https://redirect.github.com/auth0/go-jwt-middleware/pull/368) ([developerkunal](https://redirect.github.com/developerkunal)) </details> <details> <summary>aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/ec2)</summary> ### [`v1.297.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2026-04-07) #### General Highlights - **Dependency Update**: Updated to the latest SDK module versions #### Module Highlights - `github.com/aws/aws-sdk-go-v2/service/accessanalyzer`: [v1.47.0](service/accessanalyzer/CHANGELOG.md#v1470-2026-04-07) - **Feature**: Revert previous additions of API changes. - `github.com/aws/aws-sdk-go-v2/service/bedrockagentcore`: [v1.19.0](service/bedrockagentcore/CHANGELOG.md#v1190-2026-04-07) - **Feature**: This release includes support for 1) InvokeBrowser API, enabling OS-level control of AgentCore Browser Tool sessions through mouse actions, keyboard input, and screenshots. 2) Added documentation noting that empty sessions are automatically deleted after one day in the ListSessions API. - `github.com/aws/aws-sdk-go-v2/service/braket`: [v1.40.0](service/braket/CHANGELOG.md#v1400-2026-04-07) - **Feature**: Added support for t3, g6, and g6e instance types for Hybrid Jobs. - `github.com/aws/aws-sdk-go-v2/service/connect`: [v1.168.0](service/connect/CHANGELOG.md#v11680-2026-04-07) - **Feature**: The voice enhancement mode used by the agent can now be viewed on the contact record via the DescribeContact api. - `github.com/aws/aws-sdk-go-v2/service/datazone`: [v1.56.0](service/datazone/CHANGELOG.md#v1560-2026-04-07) - **Feature**: Update Configurations and registerS3AccessGrantLocation as public attributes for cfn - `github.com/aws/aws-sdk-go-v2/service/ec2`: [v1.297.0](service/ec2/CHANGELOG.md#v12970-2026-04-07) - **Feature**: EC2 Capacity Manager adds new dimensions for grouping and filtering capacity metrics, including tag-based dimensions and Account Name. - `github.com/aws/aws-sdk-go-v2/service/ecs`: [v1.77.0](service/ecs/CHANGELOG.md#v1770-2026-04-07) - **Feature**: This release provides the functionality of mounting Amazon S3 Files to Amazon ECS tasks by adding support for the new S3FilesVolumeConfiguration parameter in ECS RegisterTaskDefinition API. - `github.com/aws/aws-sdk-go-v2/service/eks`: [v1.82.0](service/eks/CHANGELOG.md#v1820-2026-04-07) - **Feature**: EKS MNG WarmPool feature to support ASG WarmPool feature. - `github.com/aws/aws-sdk-go-v2/service/lambda`: [v1.89.0](service/lambda/CHANGELOG.md#v1890-2026-04-07) - **Feature**: Launching Lambda integration with S3 Files as a new file system configuration. - `github.com/aws/aws-sdk-go-v2/service/outposts`: [v1.58.0](service/outposts/CHANGELOG.md#v1580-2026-04-07) - **Feature**: This change allows listAssets to surface pending and non-compute asset information. Adds the INSTALLING asset state enum and the STORAGE, POWERSHELF, SWITCH, and NETWORKING AssetTypes. - `github.com/aws/aws-sdk-go-v2/service/rtbfabric`: [v1.3.0](service/rtbfabric/CHANGELOG.md#v130-2026-04-07) - **Feature**: AWS RTB Fabric External Responder gateways now support HTTP in addition to HTTPS for inbound external links. Gateways can accept bid requests on port 80 or serve both protocols simultaneously via listener configuration, giving customers flexible transport options for their bidding infrastructure - `github.com/aws/aws-sdk-go-v2/service/s3`: [v1.99.0](service/s3/CHANGELOG.md#v1990-2026-04-07) - **Feature**: Updated list of the valid AWS Region values for the LocationConstraint parameter for general purpose buckets. - `github.com/aws/aws-sdk-go-v2/service/s3files`: [v1.0.0](service/s3files/CHANGELOG.md#v100-2026-04-07) - **Release**: New AWS service client module - **Feature**: Support for S3 Files, a new shared file system that connects any AWS compute directly with your data in Amazon S3. It provides fast, direct access to all of your S3 data as files with full file system semantics and low-latency performance, without your data ever leaving S3. </details> <details> <summary>getsentry/sentry-go (github.com/getsentry/sentry-go)</summary> ### [`v0.45.0`](https://redirect.github.com/getsentry/sentry-go/releases/tag/v0.45.0): 0.45.0 [Compare Source](https://redirect.github.com/getsentry/sentry-go/compare/v0.44.1...v0.45.0) ##### Breaking Changes 🛠 - Add support for Echo v5 by [@Scorfly](https://redirect.github.com/Scorfly) in [#1183](https://redirect.github.com/getsentry/sentry-go/pull/1183) ##### New Features ✨ - Add OTLP trace exporter via new otel/otlp sub-module by [@giortzisg](https://redirect.github.com/giortzisg) in [#1229](https://redirect.github.com/getsentry/sentry-go/pull/1229) - sentryotlp.NewTraceExporter sends OTel spans directly to Sentry's OTLP endpoint. - sentryotel.NewOtelIntegration links Sentry errors, logs, and metrics to the active OTel trace. Works with both direct-to-Sentry and collector-based setups. - NewSentrySpanProcessor, NewSentryPropagator, and SentrySpanMap are deprecated and will be removed in 0.47.0. To Migrate use `sentryotlp.NewTraceExporter` instead: ```go // Before sentry.Init(sentry.ClientOptions{Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0}) tp := sdktrace.NewTracerProvider( sdktrace.WithSpanProcessor(sentryotel.NewSentrySpanProcessor()), ) otel.SetTextMapPropagator(sentryotel.NewSentryPropagator()) otel.SetTracerProvider(tp) // After: sentry.Init(sentry.ClientOptions{ Dsn: dsn, EnableTracing: true, TracesSampleRate: 1.0, Integrations: func(i []sentry.Integration) []sentry.Integration { return append(i, sentryotel.NewOtelIntegration()) }, }) exporter, _ := sentryotlp.NewTraceExporter(ctx, dsn) tp := sdktrace.NewTracerProvider(sdktrace.WithBatcher(exporter)) otel.SetTracerProvider(tp) ``` - Add IsSensitiveHeader helper to easily distinguish which headers to scrub for PII. by [@giortzisg](https://redirect.github.com/giortzisg) in [#1239](https://redirect.github.com/getsentry/sentry-go/pull/1239) ##### Bug Fixes 🐛 - (ci) Update validate-pr action to remove draft enforcement by [@stephanie-anderson](https://redirect.github.com/stephanie-anderson) in [#1237](https://redirect.github.com/getsentry/sentry-go/pull/1237) - (fiber) Use UserContext for transaction to enable OTel trace linking by [@giortzisg](https://redirect.github.com/giortzisg) in [#1252](https://redirect.github.com/getsentry/sentry-go/pull/1252) - Race condition when getting envelope identifier by [@giortzisg](https://redirect.github.com/giortzisg) in [#1250](https://redirect.github.com/getsentry/sentry-go/pull/1250) ##### Internal Changes 🔧 ##### Deps - Bump OpenTelemetry SDK to 1.40.0 by [@giortzisg](https://redirect.github.com/giortzisg) in [#1243](https://redirect.github.com/getsentry/sentry-go/pull/1243) - Bump changelog-preview\.yml from 2.24.1 to 2.25.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1247](https://redirect.github.com/getsentry/sentry-go/pull/1247) - Bump getsentry/craft from 2.24.1 to 2.25.2 by [@dependabot](https://redirect.github.com/dependabot) in [#1248](https://redirect.github.com/getsentry/sentry-go/pull/1248) - Bump codecov/codecov-action from 5.5.2 to 6.0.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1245](https://redirect.github.com/getsentry/sentry-go/pull/1245) - Bump actions/create-github-app-token from 2.2.1 to 3.0.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1246](https://redirect.github.com/getsentry/sentry-go/pull/1246) - Bump actions/setup-go from 6.3.0 to 6.4.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1244](https://redirect.github.com/getsentry/sentry-go/pull/1244) ##### Other - Update validate-pr workflow by [@stephanie-anderson](https://redirect.github.com/stephanie-anderson) in [#1242](https://redirect.github.com/getsentry/sentry-go/pull/1242) - Add PR validation workflow by [@stephanie-anderson](https://redirect.github.com/stephanie-anderson) in [#1234](https://redirect.github.com/getsentry/sentry-go/pull/1234) </details> <details> <summary>harness/harness-go-sdk (github.com/harness/harness-go-sdk)</summary> ### [`v0.7.18`](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.17...v0.7.18) [Compare Source](https://redirect.github.com/harness/harness-go-sdk/compare/v0.7.17...v0.7.18) </details> <details> <summary>modelcontextprotocol/go-sdk (github.com/modelcontextprotocol/go-sdk)</summary> ### [`v1.5.0`](https://redirect.github.com/modelcontextprotocol/go-sdk/releases/tag/v1.5.0) [Compare Source](https://redirect.github.com/modelcontextprotocol/go-sdk/compare/v1.4.1...v1.5.0) ***This release is equivalent to v1.5.0-pre.1. Thank you to those who tested the pre-release.*** In this release we introduce important enhancements to the client-side OAuth flows. We also introduce several smaller fixes and improvements. #### Stabilization of client-side OAuth APIs As previously communicated, we're stabilizing the client-side OAuth APIs in `v1.5.0`. This means that the `mcp_go_client_oauth` build tag will no longer be required to compile the functionality and standard backward compatibility guarantees apply from now on. Compared to the experimental support published in `v1.4.0`, we made some backwards incompatible changes: - `auth.AuthorizationCodeHandlerConfig.AuthorizationCodeFetcher`'s type was changed from `func(context.Context, *auth.AuthorizationArgs) (*auth.AuthorizationResult, error)` to `auth.AuthorizationCodeFetcher` which is a reusable definition carrying the same underlying function type. - `auth.AuthorizationCodeHandlerConfig.PreregisteredClientConfig` was removed and replaced with `auth.AuthorizationCodeHandlerConfig.PreregisteredClient` which uses a newly introduced `oauthex.ClientCredentials` type. The type used previously (`auth.PreregisteredClientConfig`) has been removed. - Deprecated functionality has been removed from both `auth` and `oauthex` packages. * all: stabilize client OAuth support by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#861](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/861) #### Enterprise Managed Authorization support added Support for [Enterprise Managed Authorization](https://modelcontextprotocol.io/extensions/auth/enterprise-managed-authorization) has been added to `auth/extauth` package. Huge thanks to [@radar07](https://redirect.github.com/radar07) for the implementation! - Enterprise managed authorization by [@radar07](https://redirect.github.com/radar07) in [#770](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/770) **Note:** this support is part of an official MCP extension and is not part of the core protocol. The support of this functionality is not covered by the principles defined in [SDK tiers](https://modelcontextprotocol.io/community/sdk-tiers). #### Other changes to the SDK - examples: fix OAuth client example after latest changes. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#820](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/820) - build(deps): bump actions/upload-artifact from 4.6.1 to 7.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#824](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/824) - build(deps): bump ossf/scorecard-action from 2.4.1 to 2.4.3 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#825](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/825) - build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#827](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/827) - build(deps): bump actions/checkout from 4.2.2 to 6.0.2 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#826](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/826) - mcp: simplify and unify unit tests introduced for sampling with tools. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#799](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/799) - auth: fix 2025-03-26 backcompat by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#821](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/821) - chore: update deps after v1.4.0 release by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#829](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/829) - build(deps): bump github/codeql-action from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#823](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/823) - mcp: update latestProtocolVersion to 2025-11-25 by [@findleyr](https://redirect.github.com/findleyr) in [#724](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/724) - mcp: protect ioConn.protocolVersion with a mutex by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#832](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/832) - examples: add an example that display header forwarding. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#836](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/836) - internal: fix Unicode zero character handling by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#841](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/841) - auth: allow passing custom http.Client to AuthorizationCodeHandler by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#840](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/840) - mcp: verify 'Origin' and 'Content-Type' headers by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#842](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/842) - auth: return scope in WWW-Authenticate header. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#834](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/834) - mcp: fix setProgressToken when Meta is nil by [@StevenRChen](https://redirect.github.com/StevenRChen) in [#846](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/846) - all: clean up Go 1.24 specific code. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#850](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/850) - mcp: re-enable race test after fixing data races by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#851](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/851) - mcp: handle empty chunks in MemoryEventStore by [@jba](https://redirect.github.com/jba) in [#862](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/862) - oauthex: use internal JSON library for decoding. by [@maciej-kisiel](https://redirect.github.com/maciej-kisiel) in [#866](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/866) - all: fix typos by [@alexandear](https://redirect.github.com/alexandear) in [#869](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/869) - mcp: return input validation errors as tool results, not JSON-RPC errors by [@ravyg](https://redirect.github.com/ravyg) in [#863](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/863) - all: modernize code by [@alexandear](https://redirect.github.com/alexandear) in [#868](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/868) - mcp: accept parameterized Accept media types by [@kalvinnchau](https://redirect.github.com/kalvinnchau) in [#853](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/853) - mcp: use http.ResponseController to ensure writes are flushed by [@toofishes](https://redirect.github.com/toofishes) in [#870](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/870) #### New Contributors - [@StevenRChen](https://redirect.github.com/StevenRChen) made their first contribution in [#846](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/846) - [@radar07](https://redirect.github.com/radar07) made their first contribution in [#770](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/770) - [@alexandear](https://redirect.github.com/alexandear) made their first contribution in [#869](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/869) - [@ravyg](https://redirect.github.com/ravyg) made their first contribution in [#863](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/863) - [@kalvinnchau](https://redirect.github.com/kalvinnchau) made their first contribution in [#853](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/853) - [@toofishes](https://redirect.github.com/toofishes) made their first contribution in [#870](https://redirect.github.com/modelcontextprotocol/go-sdk/pull/870) **Full Changelog**: <modelcontextprotocol/go-sdk@v1.4.1...v1.5.0> </details> <details> <summary>openai/openai-go (github.com/openai/openai-go/v3)</summary> ### [`v3.31.0`](https://redirect.github.com/openai/openai-go/blob/HEAD/CHANGELOG.md#3310-2026-04-08) [Compare Source](https://redirect.github.com/openai/openai-go/compare/v3.30.0...v3.31.0) Full Changelog: [v3.30.0...v3.31.0](https://redirect.github.com/openai/openai-go/compare/v3.30.0...v3.31.0) ##### Features - **api:** add phase field to conversation messages ([563d747](https://redirect.github.com/openai/openai-go/commit/563d747fff0370d16e5cffff5a11e8e02e17bb8b)) - **api:** add web\_search\_call.results to ResponseIncludable ([6ef5b20](https://redirect.github.com/openai/openai-go/commit/6ef5b20a234ebdc85bd580539989a3933f06b5df)) - **client:** add support for short-lived tokens ([#799](https://redirect.github.com/openai/openai-go/issues/799)) ([038871e](https://redirect.github.com/openai/openai-go/commit/038871ef135200279e45bd8920b0d142c58e51c0)) - **internal:** support comma format in multipart form encoding ([905b473](https://redirect.github.com/openai/openai-go/commit/905b473d7bfb14ffd1db7c7b48efc1fdb84d1750)) ##### Bug Fixes - fix issue with unmarshaling in some cases ([a017bc6](https://redirect.github.com/openai/openai-go/commit/a017bc6b810fcb01558736cd742f180dce342e49)) - prevent duplicate ? in query params ([cbb2c75](https://redirect.github.com/openai/openai-go/commit/cbb2c754223558d6fd19f34642a0aa89adba42e7)) - **types:** remove web\_search\_call.results from ResponseIncludable ([180597f](https://redirect.github.com/openai/openai-go/commit/180597fddba09d631a2fdc786116b3ad4f2e5418)) ##### Chores - **ci:** support opting out of skipping builds on metadata-only commits ([12e3a5a](https://redirect.github.com/openai/openai-go/commit/12e3a5afdbacd2fad57640ba5486226898d6df71)) - remove unnecessary error check for url parsing ([cfe9c41](https://redirect.github.com/openai/openai-go/commit/cfe9c411d11b6f097d6e0563767bf231abb9975a)) - **tests:** bump steady to v0.20.1 ([8e4ef11](https://redirect.github.com/openai/openai-go/commit/8e4ef117bdec78698d72a00b0a14d12cf0482561)) - **tests:** bump steady to v0.20.2 ([ad31f81](https://redirect.github.com/openai/openai-go/commit/ad31f81e22e4f2cc931e11625755f92978a18be9)) - update docs for api:"required" ([2d16ebc](https://redirect.github.com/openai/openai-go/commit/2d16ebc57c3eca70c5bcb421ee8592549722e7f4)) ##### Documentation - **api:** add multi-file ingestion guidance to vectorstorefile/filebatch params ([dbba33f](https://redirect.github.com/openai/openai-go/commit/dbba33f751ffa7e7a36678c4305a3e7630a4494f)) </details> <details> <summary>riverqueue/river (github.com/riverqueue/river)</summary> ### [`v0.34.0`](https://redirect.github.com/riverqueue/river/releases/tag/v0.34.0) [Compare Source](https://redirect.github.com/riverqueue/river/compare/v0.33.0...v0.34.0) ##### Added - Added `Config.ReindexerIndexNames` and `ReindexerIndexNamesDefault()` so the reindexer's target indexes can be customized from the public API. [PR #1194](https://redirect.github.com/riverqueue/river/pull/1194). ##### Fixed - Upon a client gaining leadership, its queue maintainer is given more than one opportunity to start. [PR #1184](https://redirect.github.com/riverqueue/river/pull/1184). ### [`v0.33.0`](https://redirect.github.com/riverqueue/river/releases/tag/v0.33.0) [Compare Source](https://redirect.github.com/riverqueue/river/compare/v0.32.0...v0.33.0) ##### Changed - Jobs erroring or panicking no longer logs at the error/warn level because this is not indicative of a problem inside of River itself. These log statements have been demoted to info. [PR #1190](https://redirect.github.com/riverqueue/river/pull/1190). ##### Fixed - Fix in `Client.Start` where previously it was possible for a River client that only partially started before erroring to not try to start on subsequent `Start` invocations. [PR #1187](https://redirect.github.com/riverqueue/river/pull/1187). </details> <details> <summary>googleapis/google-api-go-client (google.golang.org/api)</summary> ### [`v0.275.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.275.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.274.0...v0.275.0) ##### Features - **all:** Auto-regenerate discovery clients ([#3557](https://redirect.github.com/googleapis/google-api-go-client/issues/3557)) ([2b2ef99](https://redirect.github.com/googleapis/google-api-go-client/commit/2b2ef99cb9f245743690a4d26e4fdc65287253e0)) - **all:** Auto-regenerate discovery clients ([#3560](https://redirect.github.com/googleapis/google-api-go-client/issues/3560)) ([9437d4d](https://redirect.github.com/googleapis/google-api-go-client/commit/9437d4d741a6ae9e1c20a6f727b9c8f64e1bc19e)) </details> <details> <summary>cznic/sqlite (modernc.org/sqlite)</summary> ### [`v1.48.1`](https://gitlab.com/cznic/sqlite/compare/v1.48.0...v1.48.1) [Compare Source](https://gitlab.com/cznic/sqlite/compare/v1.48.0...v1.48.1) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).   --- > [!NOTE] > **Medium Risk** > Primarily dependency version bumps (Auth0, River queue, OTEL instrumentation, cloud SDKs) can introduce subtle runtime/compatibility changes despite minimal code changes. Small auth test fixture tweak may affect JWT validation assumptions in tests. > > **Overview** > Updates a set of Go dependencies in `go.mod`/`go.sum`, including Auth0 JWT middleware, River queue, OpenTelemetry HTTP/GRPC instrumentation, Google Cloud/`google.golang.org/api`, AWS service clients, and `modernc.org/sqlite`. > > Dev tooling is refreshed by bumping `controller-runtime`’s `setup-envtest` in the devcontainer Dockerfile. > > Adjusts the auth middleware test JWKS/OIDC discovery stub to include an explicit `issuer` field in `/.well-known/openid-configuration` to match expected OIDC metadata. > > Reviewed by [Cursor Bugbot](https://cursor.com/bugbot) for commit 40be333c584773f986415b01d125de11159d9d8b. Bugbot is set up for automated code reviews on this repo. Configure [here](https://www.cursor.com/dashboard/bugbot).  --------- Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: carabasdaniel <daniel.carabas@overmind.tech> GitOrigin-RevId: ffd7f8f966dfb849fd7b0bcdbd84e4265775bf26

This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [auth0](https://registry.terraform.io/providers/auth0/auth0) ([source](https://redirect.github.com/auth0/terraform-provider-auth0)) | required_provider | minor | `1.42.0` → `1.43.0` | | [aws](https://registry.terraform.io/providers/hashicorp/aws) ([source](https://redirect.github.com/hashicorp/terraform-provider-aws)) | required_provider | minor | `6.39.0` → `6.40.0` | | [google](https://registry.terraform.io/providers/hashicorp/google) ([source](https://redirect.github.com/hashicorp/terraform-provider-google)) | required_provider | minor | `7.26.0` → `7.27.0` | | [vercel](https://registry.terraform.io/providers/vercel/vercel) ([source](https://redirect.github.com/vercel/terraform-provider-vercel)) | required_provider | minor | `4.6.1` → `4.7.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the [Dependency Dashboard](../issues/370) for more information. --- ### Release Notes <details> <summary>auth0/terraform-provider-auth0 (auth0)</summary> ### [`v1.43.0`](https://redirect.github.com/auth0/terraform-provider-auth0/blob/HEAD/CHANGELOG.md#v1430) [Compare Source](https://redirect.github.com/auth0/terraform-provider-auth0/compare/v1.42.0...v1.43.0) FEATURES: - `resource/auth0_custom_domain_default` – Add support for setting the tenant's default custom domain ([#1512](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1512)) - `resource/auth0_custom_domain` – Add computed `is_default` attribute to custom domain resources and data sources ([#1512](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1512)) BUG FIXES: - `resource/auth0_action_module` – Fix provider crash when creating action modules with secrets missing `name` or `value` by marking both fields as required ([#1524](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1524)) NOTES: - `data-source/auth0_custom_domains` – Fix example documentation to use `query` instead of `q` ([#1523](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1523)) - Fix debug logging not being applied to management API clients by reordering SDK option calls ([#1526](https://redirect.github.com/auth0/terraform-provider-auth0/pull/1526)) </details> <details> <summary>hashicorp/terraform-provider-aws (aws)</summary> ### [`v6.40.0`](https://redirect.github.com/hashicorp/terraform-provider-aws/blob/HEAD/CHANGELOG.md#6400-April-8-2026) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-aws/compare/v6.39.0...v6.40.0) FEATURES: - **New Data Source:** `aws_opensearchserverless_collection_group` ([#46308](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46308)) - **New Data Source:** `aws_opensearchserverless_collection_groups` ([#46308](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46308)) - **New Data Source:** `aws_s3files_access_point` ([#47352](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47352)) - **New Data Source:** `aws_s3files_file_system` ([#47344](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47344)) - **New Data Source:** `aws_s3files_file_systems` ([#47344](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47344)) - **New Data Source:** `aws_s3files_mount_target` ([#47347](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47347)) - **New List Resource:** `aws_config_config_rule` ([#47319](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47319)) - **New List Resource:** `aws_glue_job` ([#47266](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47266)) - **New List Resource:** `aws_opensearchserverless_collection_group` ([#46308](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46308)) - **New List Resource:** `aws_s3files_access_point` ([#47352](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47352)) - **New List Resource:** `aws_s3files_file_system` ([#47325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47325)) - **New List Resource:** `aws_s3files_file_system_policy` ([#47355](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47355)) - **New List Resource:** `aws_s3files_mount_target` ([#47347](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47347)) - **New List Resource:** `aws_s3files_synchronization_configuration` ([#47353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47353)) - **New List Resource:** `aws_ssm_association` ([#47321](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47321)) - **New List Resource:** `aws_ssm_patch_group` ([#47329](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47329)) - **New Resource:** `aws_opensearchserverless_collection_group` ([#46308](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46308)) - **New Resource:** `aws_s3files_access_point` ([#47352](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47352)) - **New Resource:** `aws_s3files_file_system` ([#47325](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47325)) - **New Resource:** `aws_s3files_file_system_policy` ([#47355](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47355)) - **New Resource:** `aws_s3files_mount_target` ([#47347](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47347)) - **New Resource:** `aws_s3files_synchronization_configuration` ([#47353](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47353)) - **New Resource:** `aws_servicequotas_auto_management` ([#45968](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/45968)) ENHANCEMENTS: - data-source/aws\_msk\_cluster: Add `broker_node_group_info.connectivity_info.network_type` attribute ([#47279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47279)) - resource/aws\_cloudformation\_stack\_set: Add `depends_on_stack_sets` to `auto_deployment` configuration block ([#47269](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47269)) - resource/aws\_config\_config\_rule: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_configuration\_aggregator: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_configuration\_recorder: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_configuration\_recorder\_status: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_conformance\_pack: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_delivery\_channel: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_organization\_conformance\_pack: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_organization\_custom\_policy\_rule: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_organization\_custom\_rule: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_organization\_managed\_rule: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_remediation\_configuration: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_config\_retention\_configuration: Add Resource Identity support ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_controltower\_landing\_zone: Add `remediation_types` attribute ([#46549](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46549)) - resource/aws\_glue\_job: Add Resource Identity support ([#47266](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47266)) - resource/aws\_iam\_instance\_profile: Add resource identity support ([#47307](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47307)) - resource/aws\_kinesisanalyticsv2\_application: Support `FLINK-2_2` as a valid value for `runtime_environment` ([#47207](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47207)) - resource/aws\_msk\_cluster: Add `broker_node_group_info.connectivity_info.network_type` argument ([#47279](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47279)) - resource/aws\_opensearchserverless\_access\_policy: Add Resource Identity support ([#47262](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47262)) - resource/aws\_opensearchserverless\_lifecycle\_policy: Add Resource Identity support ([#47262](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47262)) - resource/aws\_opensearchserverless\_security\_config: Add Resource Identity support ([#47262](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47262)) - resource/aws\_opensearchserverless\_security\_policy: Add Resource Identity support ([#47262](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47262)) - resource/aws\_opensearchserverless\_vpc\_endpoint: Add Resource Identity support ([#47262](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47262)) - resource/aws\_s3control\_storage\_lens\_configuration: Add `storage_lens_configuration.data_export.storage_lens_table_destination` argument ([#47152](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47152)) - resource/aws\_ssm\_patch\_group: Add resource identity support ([#47318](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47318)) BUG FIXES: - resource/aws\_bcmdataexports\_export: Allows empty values in `export.data_query.table_configurations` ([#47261](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47261)) - resource/aws\_cloudwatch\_log\_metric\_filter: Fix validation to count `pattern` length in UTF-8 characters ([#47287](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47287)) - resource/aws\_config\_configuration\_recorder\_status: Mark `name` as as `ForceNew` ([#47286](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47286)) - resource/aws\_organizations\_account: Fix `AccountAlreadyClosedException` error when deleting an account that has already been closed with `close_on_deletion` set to `true` ([#46627](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/46627)) - resource/aws\_s3\_bucket\_server\_side\_encryption\_configuration: Change `rule.apply_server_side_encryption_by_default.kms_master_key_id`, `rule.blocked_encryption_types`, and `rule.bucket_key_enabled` to Optional and Computed, preventings diffs once SSE-C is disabled for all new general purpose buckets ([#47359](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47359)) - resource/aws\_uxc\_account\_customizations: Fix inconsistent result error when `visible_regions` or `visible_services` is set to an explicit empty set (`[]`) ([#47290](https://redirect.github.com/hashicorp/terraform-provider-aws/issues/47290)) </details> <details> <summary>hashicorp/terraform-provider-google (google)</summary> ### [`v7.27.0`](https://redirect.github.com/hashicorp/terraform-provider-google/blob/HEAD/CHANGELOG.md#7270-Unreleased) [Compare Source](https://redirect.github.com/hashicorp/terraform-provider-google/compare/v7.26.0...v7.27.0) </details> <details> <summary>vercel/terraform-provider-vercel (vercel)</summary> ### [`v4.7.1`](https://redirect.github.com/vercel/terraform-provider-vercel/releases/tag/v4.7.1) [Compare Source](https://redirect.github.com/vercel/terraform-provider-vercel/compare/v4.7.0...v4.7.1) ##### Changelog - [`8647a94`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/8647a94af8f794063afc56716267d7e472576ff7): fix: propagate protection\_bypass\_for\_automation\_secret changes to API ([#463](https://redirect.github.com/vercel/terraform-provider-vercel/issues/463)) ([@mjakobis](https://redirect.github.com/mjakobis)) ### [`v4.7.0`](https://redirect.github.com/vercel/terraform-provider-vercel/releases/tag/v4.7.0) [Compare Source](https://redirect.github.com/vercel/terraform-provider-vercel/compare/v4.6.1...v4.7.0) ##### Changelog - [`6261f51`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/6261f5182f049e2213645eb16234a31724e422a8): Add bulk redirects resource and data source ([#455](https://redirect.github.com/vercel/terraform-provider-vercel/issues/455)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`cf5855f`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/cf5855f147c5d11b99fc042e1d9b584042d5c1fc): Implement project routing rules ([#456](https://redirect.github.com/vercel/terraform-provider-vercel/issues/456)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`27fdf47`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/27fdf473baec683a6e98f47296a5ce98a399ced6): Add vercel\_feature\_flag, sdk\_key and segment resources + data sources ([#454](https://redirect.github.com/vercel/terraform-provider-vercel/issues/454)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`c10b994`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/c10b994f74c40787e49180f4e64277282e8b500e): Bump go, pin goreleaser ([#460](https://redirect.github.com/vercel/terraform-provider-vercel/issues/460)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`28013f3`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/28013f3332799a98f25ba4d9117ba1ca8a19928a): Shard CI workflow to speed it up ([#459](https://redirect.github.com/vercel/terraform-provider-vercel/issues/459)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`951cc3b`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/951cc3bb5bc9ccf81c5d96a26694955b54439c51): Add support for vercel\_blob\_store, vercel\_blob\_project\_connection and vercel\_blob\_object ([#458](https://redirect.github.com/vercel/terraform-provider-vercel/issues/458)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`c65075d`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/c65075d95b3f540bb601920d96f9cb9ece732647): Add user\_token resource ([#457](https://redirect.github.com/vercel/terraform-provider-vercel/issues/457)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`9852338`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/9852338fe72f40155b02117f057b9dc2d90e995f): Rework ffs into feature\_flag\_definition + feature\_flag\_config resources ([#461](https://redirect.github.com/vercel/terraform-provider-vercel/issues/461)) ([@dglsparsons](https://redirect.github.com/dglsparsons)) - [`aa73a37`](https://redirect.github.com/vercel/terraform-provider-vercel/commit/aa73a3726c33b0165b8e601b9f6cbd3c84998601): Fix release workflow ([@dglsparsons](https://redirect.github.com/dglsparsons)) </details> --- ### Configuration 📅 **Schedule**: (in timezone Europe/London) - Branch creation - "before 10am on friday" - Automerge - At any time (no schedule defined) 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/overmindtech/workspace).  Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> GitOrigin-RevId: 5f86c259bd505fe05ce19f1f7818e54d513f933f

Update module github.com/spf13/viper to v1.19.0

ad16a83

renovate Bot added dependencies golang labels Jun 7, 2024

renovate Bot enabled auto-merge (squash) June 7, 2024 01:24

renovate Bot merged commit b6f110c into main Jun 7, 2024

renovate Bot deleted the renovate/github.com-spf13-viper-1.x branch June 7, 2024 01:31

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update module github.com/spf13/viper to v1.19.0#370

Update module github.com/spf13/viper to v1.19.0#370
renovate[bot] merged 1 commit intomainfrom
renovate/github.com-spf13-viper-1.x

renovate Bot commented Jun 7, 2024

Uh oh!

renovate Bot commented Jun 7, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

renovate Bot commented Jun 7, 2024

Release Notes

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

Other Changes

New Contributors

Configuration

Uh oh!

renovate Bot commented Jun 7, 2024

ℹ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v1.19.0`