Skip to content

chore(deps): Update go minor and patch#2254

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-minor-and-patch
Open

chore(deps): Update go minor and patch#2254
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-minor-and-patch

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 1, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/dgraph-io/ristretto/v2 v2.2.0v2.4.0 age confidence
github.com/google/flatbuffers v25.2.10+incompatiblev25.12.19+incompatible age confidence
github.com/klauspost/compress v1.18.0v1.18.4 age confidence
github.com/spf13/cobra v1.9.1v1.10.2 age confidence
github.com/stretchr/testify v1.10.0v1.11.1 age confidence
go.opentelemetry.io/contrib/zpages v0.62.0v0.67.0 age confidence
go.opentelemetry.io/otel v1.37.0v1.42.0 age confidence
golang.org/x/sys v0.35.0v0.42.0 age confidence
google.golang.org/protobuf v1.36.7v1.36.11 age confidence

Release Notes

dgraph-io/ristretto (github.com/dgraph-io/ristretto/v2)

v2.4.0

Compare Source

Added
  • Implement public Cache.IterValues() method (#​475)
  • Allow custom key types with underlying types in Key constraint (#​478)
Fixed
  • Fix compilation on 32-bit archs (#​465)

Full Changelog: dgraph-io/ristretto@v2.3.0...v2.4.0

v2.3.0: Ristretto v2.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: dgraph-io/ristretto@v2.2.0...v2.3.0

google/flatbuffers (github.com/google/flatbuffers)

v25.12.19+incompatible

Compare Source

v25.9.23+incompatible

Compare Source

klauspost/compress (github.com/klauspost/compress)

v1.18.4

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

Compare Source

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed
New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

spf13/cobra (github.com/spf13/cobra)

v1.10.2

Compare Source

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in #​2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

Compare Source

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features
🐛 Fix
🪠 Testing
📝 Docs

New Contributors

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.42.0: /v0.64.0/v0.18.0/v0.0.16

Compare Source

Added
  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package.
    The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions.
    See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#​7985)
  • Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#​7924)
Changed
  • TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#​7856)
Fixed
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#​7931)
  • Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#​7964)
  • Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#​7834)
Removed
  • Drop support for [Go 1.24]. (#​7984)

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-go@v1.41.0...v1.42.0

v1.41.0: /v0.63.0/v0.17.0/v0.0.15

Compare Source

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added
Fixed
  • Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#​7880)

What's Changed


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner February 1, 2026 02:30
@renovate
Copy link
Contributor Author

renovate bot commented Feb 1, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.25.0
github.com/spf13/pflag v1.0.6 -> v1.0.9
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/otel/metric v1.37.0 -> v1.42.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.42.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.42.0

@CLAassistant
Copy link

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@renovate renovate bot force-pushed the renovate/go-minor-and-patch branch 4 times, most recently from 6a1608f to b9ce655 Compare February 11, 2026 10:05
@renovate renovate bot force-pushed the renovate/go-minor-and-patch branch from b9ce655 to af6dbd5 Compare February 12, 2026 22:02
@renovate renovate bot force-pushed the renovate/go-minor-and-patch branch from af6dbd5 to 36c46d1 Compare February 26, 2026 15:17
@renovate renovate bot force-pushed the renovate/go-minor-and-patch branch 3 times, most recently from 7de04c3 to bcf867e Compare March 8, 2026 12:54
@renovate renovate bot force-pushed the renovate/go-minor-and-patch branch from bcf867e to 5f60cc9 Compare March 9, 2026 22:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Development

Successfully merging this pull request may close these issues.

1 participant