Skip to content

build(deps): bump the go-production-dependencies group across 2 directories with 21 updates#123

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/src/checkout/go-production-dependencies-945559a87e
Open

build(deps): bump the go-production-dependencies group across 2 directories with 21 updates#123
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/src/checkout/go-production-dependencies-945559a87e

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot Bot commented on behalf of github May 12, 2026

Bumps the go-production-dependencies group with 10 updates in the /src/checkout directory:

Package From To
github.com/IBM/sarama 1.47.0 1.48.1
github.com/open-feature/go-sdk 1.17.1 1.17.2
github.com/open-feature/go-sdk-contrib/providers/flagd 0.3.2 0.5.1
go.opentelemetry.io/contrib/bridges/otelslog 0.17.0 0.18.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.67.0 0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.67.0 0.68.0
go.opentelemetry.io/contrib/instrumentation/runtime 0.67.0 0.68.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc 0.18.0 0.19.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc 1.42.0 1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.42.0 1.43.0

Bumps the go-production-dependencies group with 8 updates in the /src/product-catalog directory:

Package From To
github.com/open-feature/go-sdk 1.17.1 1.17.2
github.com/open-feature/go-sdk-contrib/providers/flagd 0.3.2 0.5.1
go.opentelemetry.io/contrib/bridges/otelslog 0.17.0 0.18.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.67.0 0.68.0
go.opentelemetry.io/contrib/instrumentation/runtime 0.67.0 0.68.0
github.com/XSAM/otelsql 0.41.0 0.42.0
github.com/lib/pq 1.11.2 1.12.3
go.opentelemetry.io/contrib/otelconf 0.22.1-0.20260312145906-d6dbd68170c0 0.23.0

Updates github.com/IBM/sarama from 1.47.0 to 1.48.1

Release notes

Sourced from github.com/IBM/sarama's releases.

Version 1.48.1 (2026-05-10)

What's Changed

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

New Contributors

Full Changelog: IBM/sarama@v1.48.0...v1.48.1

Version 1.48.0 (2026-04-24)

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

... (truncated)

Commits
  • 21ec56a chore(ci): Update registry.access.redhat.com/ubi9/ubi-minimal:9.7 Docker dige...
  • f671778 chore(deps): update dependency golangci/golangci-lint to v2.12.2 (#3515)
  • 3ec1ad6 chore(ci): Update github/codeql-action action to v4.35.4 (#3510)
  • b485cf3 fix(deps): update module golang.org/x/net to v0.54.0 (#3526)
  • 1fe27c9 fix: return leaderless errors in metadata refresh (#3525)
  • fa2e3f3 fix: prevent race during partition consumer close (#3524)
  • 67f8fce chore: add testifylint and fix lint warnings
  • fcf0655 chore: move FVT-only variables to fvt files
  • 55049cc chore(deps): update module golang.org/x/crypto to v0.51.0 (#3521)
  • a471f29 test: relax producer batch metrics assertions (#3523)
  • Additional commits viewable in compare view

Updates github.com/open-feature/go-sdk from 1.17.1 to 1.17.2

Release notes

Sourced from github.com/open-feature/go-sdk's releases.

v1.17.2

1.17.2 (2026-04-03)

🐛 Bug Fixes

  • broken link in hooks.go comment (#476) (efd720a)
  • consistent SetProviderAndWait init flow (#474) (e6452ea)
  • memprovider: use int64 type in IntEvaluation to match API (#464) (6085165)
  • multi: forward ConfigurationChanged events from child providers (#480) (20c5cb9)
  • testing: make test provider context-aware for goroutine (#470) (b4e2cdf)

🧹 Chore

  • add govulncheck (#462) (0a2fb41)
  • bump go to 1.25 (3bfdb3e)
  • bump go to 1.25.0 (#473) (3bfdb3e)
  • deps: update module golang.org/x/sync to v0.20.0 (#484) (0dbfca4)
  • deps: update module golang.org/x/text to v0.33.0 (#469) (f6d6d76)
  • deps: update module golang.org/x/text to v0.34.0 (#478) (6567d33)
  • deps: update module golang.org/x/text to v0.35.0 (#485) (6980c98)
  • deps: update test-harness digest to ecb3d09 (#477) (0a2825b)

📚 Documentation

Changelog

Sourced from github.com/open-feature/go-sdk's changelog.

1.17.2 (2026-04-03)

🐛 Bug Fixes

  • broken link in hooks.go comment (#476) (efd720a)
  • consistent SetProviderAndWait init flow (#474) (e6452ea)
  • memprovider: use int64 type in IntEvaluation to match API (#464) (6085165)
  • multi: forward ConfigurationChanged events from child providers (#480) (20c5cb9)
  • testing: make test provider context-aware for goroutine (#470) (b4e2cdf)

🧹 Chore

  • add govulncheck (#462) (0a2fb41)
  • bump go to 1.25 (3bfdb3e)
  • bump go to 1.25.0 (#473) (3bfdb3e)
  • deps: update module golang.org/x/sync to v0.20.0 (#484) (0dbfca4)
  • deps: update module golang.org/x/text to v0.33.0 (#469) (f6d6d76)
  • deps: update module golang.org/x/text to v0.34.0 (#478) (6567d33)
  • deps: update module golang.org/x/text to v0.35.0 (#485) (6980c98)
  • deps: update test-harness digest to ecb3d09 (#477) (0a2825b)

📚 Documentation

Commits
  • 4ae2f18 chore(main): release 1.17.2 (#463)
  • 6980c98 chore(deps): update module golang.org/x/text to v0.35.0 (#485)
  • 0dbfca4 chore(deps): update module golang.org/x/sync to v0.20.0 (#484)
  • b4e2cdf fix(testing): make test provider context-aware for goroutine (#470)
  • e6452ea fix: consistent SetProviderAndWait init flow (#474)
  • 20c5cb9 fix(multi): forward ConfigurationChanged events from child providers (#480)
  • 3bfdb3e chore: bump go to 1.25.0 (#473)
  • 0a2825b chore(deps): update test-harness digest to ecb3d09 (#477)
  • 6567d33 chore(deps): update module golang.org/x/text to v0.34.0 (#478)
  • efd720a fix: broken link in hooks.go comment (#476)
  • Additional commits viewable in compare view

Updates github.com/open-feature/go-sdk-contrib/providers/flagd from 0.3.2 to 0.5.1

Release notes

Sourced from github.com/open-feature/go-sdk-contrib/providers/flagd's releases.

providers/flagd: v0.5.1

0.5.1 (2026-05-01)

🐛 Bug Fixes

  • core lib update for various custom operator conformance fixes (#874) (df6230b)

providers/flagd: v0.5.0

0.5.0 (2026-04-01)

⚠ BREAKING CHANGES

  • fractional bucketing improvements (#866)

🐛 Bug Fixes

  • security: update module github.com/moby/buildkit to v0.28.1 [security] (#853) (bd84e61)

✨ New Features

providers/flagd: v0.4.0

0.4.0 (2026-03-11)

⚠ BREAKING CHANGES

  • add graceful defaulting to code defaults (#841)

🐛 Bug Fixes

  • security: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#835) (55ccbce)

✨ New Features

  • add graceful defaulting to code defaults (#841) (b4269b7)

hooks/open-telemetry: v0.3.7

0.3.7 (2026-03-05)

🐛 Bug Fixes

  • security: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#835) (55ccbce)

... (truncated)

Commits
  • 50d7574 chore(main): release providers/flagd 0.5.1 (#876)
  • af007b2 feat(flagsmith): upgrade flagsmith client to v5 (#873)
  • df6230b fix: core lib update for various custom operator conformance fixes (#874)
  • a367732 chore: resolve open dependabot security alerts (#872)
  • 9f7990d chore(main): release providers/optimizely 0.0.2 (#871)
  • f2e5c6f feat(optimizely): implement optimizely provider (#802)
  • 6ab1dce chore: make govulncheck non-blocking (#870)
  • ddfb84e chore(main): release providers/flagd 0.5.0 (#861)
  • 73d84a6 feat!: fractional bucketing improvements (#866)
  • 2d60051 chore(main): release providers/go-feature-flag 1.0.1 (#863)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/bridges/otelslog from 0.17.0 to 0.18.0

Release notes

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's releases.

Release v0.18.0

Fixed

  • otelmemcache no longer sets span status to OK instead of leaving it unset. (#477)
  • Fix goroutine leak in gRPC StreamClientInterceptor. (#581)

Removed

  • Remove service name from otelmemcache configuration and span attributes. (#477)

Raw changes made between v0.17.0 and v0.18.0

839e505a67ca9fb5a3089cd1af5943061fcaf1ef Bumping otel version to v0.18.0. Prepare for releasing v0.18.0 (#600) f82555b1db7ebbd67f52d1389337e68ab85302ed Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#594) 8fb6eb1e7560e7f22d01218264a73e7172173f68 Bump google.golang.org/grpc (#593) b3b6ccdfa1aea62088903d973917635d9b9fde88 Bump github.com/aws/aws-sdk-go from 1.37.15 to 1.37.20 in /detectors/aws (#591) 5783e2d230663a3bc6d580bc4bddb45b92447f2c Bump github.com/golang/snappy from 0.0.2 to 0.0.3 in /exporters/metric/cortex (#592) 3c49aeb44902006969fbb47f75a9bdd92ad08484 Bump cloud.google.com/go from 0.77.0 to 0.78.0 in /detectors/gcp (#595) a2de3b63d65496e14f95e382d19b8f8524a3597f Bump google.golang.org/grpc in /propagators/opencensus/examples (#596) f011c951891df554fe8b8db1e2b691d108f94eb4 Bump github.com/Shopify/sarama from 1.27.2 to 1.28.0 in /instrumentation/github.com/Shopify/sarama/otelsarama (#588) 598a707ec29164ec7c9ea3db025652ed7e9d77cb Bump go.uber.org/goleak from 1.1.0 to 1.1.10 in /instrumentation/google.golang.org/grpc/otelgrpc (#587) e5fef668e2306ca1c806c60610a7f850e56b5853 Bump cloud.google.com/go from 0.76.0 to 0.77.0 in /detectors/gcp (#586) 8334b44287c8e5651c0e5da146ccb0d7f08fc5e6 Bump github.com/golangci/golangci-lint from 1.36.0 to 1.37.1 in /tools (#585) 462580efd273ddf5cf411107bc0918afc2d6427d Bump github.com/aws/aws-sdk-go from 1.37.10 to 1.37.15 in /detectors/aws (#584) f875adf805119c91159087bacffb2e3b83c18af4 Update docs from gitter to slack for communication (#582) 3349bafa63a692d547650e65ee0512cb0fe7f22b otelmemcache: Simplify config and span status setting (#477) 62c8535f780b3d1891733443acd47473c0620512 Fix goroutine leak in gRPC StreamClientInterceptor (#581) 0fe41992b29720a798cfb0968d85ea5f44f67184 Update AWS detector assert dependency (#574)

Changelog

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's changelog.

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
  • Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
  • Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
  • Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
  • Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
  • Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
  • Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

  • Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
  • Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
  • Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

  • Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
  • Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
  • Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

  • Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

  • Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
Commits
  • 839e505 Bumping otel version to v0.18.0. Prepare for releasing v0.18.0 (#600)
  • f82555b Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /instrumentation/google....
  • 8fb6eb1 Bump google.golang.org/grpc (#593)
  • b3b6ccd Bump github.com/aws/aws-sdk-go from 1.37.15 to 1.37.20 in /detectors/aws (#591)
  • 5783e2d Bump github.com/golang/snappy from 0.0.2 to 0.0.3 in /exporters/metric/cortex...
  • 3c49aeb Bump cloud.google.com/go from 0.77.0 to 0.78.0 in /detectors/gcp (#595)
  • a2de3b6 Bump google.golang.org/grpc in /propagators/opencensus/examples (#596)
  • f011c95 Bump github.com/Shopify/sarama from 1.27.2 to 1.28.0 in /instrumentation/gith...
  • 598a707 Bump go.uber.org/goleak from 1.1.0 to 1.1.10 in /instrumentation/google.golan...
  • e5fef66 Bump cloud.google.com/go from 0.76.0 to 0.77.0 in /detectors/gcp (#586)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.67.0 to 0.68.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0

Added

  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
  • Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
  • Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
  • Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
  • Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
  • Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
  • Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

  • Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
  • Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
  • Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

  • Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
  • Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
  • Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

  • Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

  • Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
  • Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
  • Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
  • Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
  • Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
  • Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
  • Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

  • Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
  • Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
  • Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

  • Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
  • Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
  • Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

  • Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

  • Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
Commits
  • 45977a4 Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0 (#8769)
  • 0fcc152 fix(deps): update module github.com/googlecloudplatform/opentelemetry-operati...
  • eaba3cd chore(deps): update googleapis to 6f92a3b (#8776)
  • 6df430c chore(deps): update module github.com/jgautheron/goconst to v1.10.0 (#8771)
  • ae90e32 Fix otelconf prometheus label escaping (#8763)
  • f202c3f otelconf: move experimental types to otelconf/x (#8529)
  • 8ddaece fix(deps): update aws-sdk-go-v2 monorepo (#8764)
  • c7c03a4 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8766)
  • 717a85a envcar: normalize cached environment variable names (#8761)
  • ad990b6 fix(deps): update module github.com/aws/smithy-go to v1.24.3 (#8765)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.67.0 to 0.68.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0

Added

  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
  • Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
  • Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
  • Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
  • Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
  • Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
  • Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

  • Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
  • Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
  • Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

  • Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (

@dependabot
build(deps): bump the go-production-dependencies group across 2 direc…
6f60ac7 
…tories with 21 updates

Bumps the go-production-dependencies group with 10 updates in the /src/checkout directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/IBM/sarama](https://github.com/IBM/sarama) | `1.47.0` | `1.48.1` |
| [github.com/open-feature/go-sdk](https://github.com/open-feature/go-sdk) | `1.17.1` | `1.17.2` |
| [github.com/open-feature/go-sdk-contrib/providers/flagd](https://github.com/open-feature/go-sdk-contrib) | `0.3.2` | `0.5.1` |
| [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.17.0` | `0.18.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.68.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.68.0` |
| [go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.68.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go) | `0.18.0` | `0.19.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.42.0` | `1.43.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.42.0` | `1.43.0` |

Bumps the go-production-dependencies group with 8 updates in the /src/product-catalog directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/open-feature/go-sdk](https://github.com/open-feature/go-sdk) | `1.17.1` | `1.17.2` |
| [github.com/open-feature/go-sdk-contrib/providers/flagd](https://github.com/open-feature/go-sdk-contrib) | `0.3.2` | `0.5.1` |
| [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.17.0` | `0.18.0` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.68.0` |
| [go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.67.0` | `0.68.0` |
| [github.com/XSAM/otelsql](https://github.com/XSAM/otelsql) | `0.41.0` | `0.42.0` |
| [github.com/lib/pq](https://github.com/lib/pq) | `1.11.2` | `1.12.3` |
| [go.opentelemetry.io/contrib/otelconf](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.22.1-0.20260312145906-d6dbd68170c0` | `0.23.0` |



Updates `github.com/IBM/sarama` from 1.47.0 to 1.48.1
- [Release notes](https://github.com/IBM/sarama/releases)
- [Changelog](https://github.com/IBM/sarama/blob/main/CHANGELOG.md)
- [Commits](IBM/sarama@v1.47.0...v1.48.1)

Updates `github.com/open-feature/go-sdk` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.17.1...v1.17.2)

Updates `github.com/open-feature/go-sdk-contrib/providers/flagd` from 0.3.2 to 0.5.1
- [Release notes](https://github.com/open-feature/go-sdk-contrib/releases)
- [Commits](open-feature/go-sdk-contrib@providers/flagd/v0.3.2...providers/flagd/v0.5.1)

Updates `go.opentelemetry.io/contrib/bridges/otelslog` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@v0.17.0...v0.18.0)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.18.0...v0.19.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/log` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.18.0...v0.19.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/sdk/log` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.18.0...v0.19.0)

Updates `go.opentelemetry.io/otel/sdk/metric` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/trace` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `google.golang.org/grpc` from 1.79.2 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.2...v1.80.0)

Updates `github.com/open-feature/go-sdk` from 1.17.1 to 1.17.2
- [Release notes](https://github.com/open-feature/go-sdk/releases)
- [Changelog](https://github.com/open-feature/go-sdk/blob/main/CHANGELOG.md)
- [Commits](open-feature/go-sdk@v1.17.1...v1.17.2)

Updates `github.com/open-feature/go-sdk-contrib/providers/flagd` from 0.3.2 to 0.5.1
- [Release notes](https://github.com/open-feature/go-sdk-contrib/releases)
- [Commits](open-feature/go-sdk-contrib@providers/flagd/v0.3.2...providers/flagd/v0.5.1)

Updates `go.opentelemetry.io/contrib/bridges/otelslog` from 0.17.0 to 0.18.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@v0.17.0...v0.18.0)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from 0.67.0 to 0.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.67.0...zpages/v0.68.0)

Updates `go.opentelemetry.io/otel` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `go.opentelemetry.io/otel/log` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.18.0...v0.19.0)

Updates `go.opentelemetry.io/otel/trace` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

Updates `google.golang.org/grpc` from 1.79.2 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.2...v1.80.0)

Updates `github.com/XSAM/otelsql` from 0.41.0 to 0.42.0
- [Release notes](https://github.com/XSAM/otelsql/releases)
- [Changelog](https://github.com/XSAM/otelsql/blob/main/CHANGELOG.md)
- [Commits](XSAM/otelsql@v0.41.0...v0.42.0)

Updates `github.com/lib/pq` from 1.11.2 to 1.12.3
- [Release notes](https://github.com/lib/pq/releases)
- [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md)
- [Commits](lib/pq@v1.11.2...v1.12.3)

Updates `go.opentelemetry.io/contrib/otelconf` from 0.22.1-0.20260312145906-d6dbd68170c0 to 0.23.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](https://github.com/open-telemetry/opentelemetry-go-contrib/commits/v0.23.0)

Updates `go.opentelemetry.io/otel/metric` from 1.42.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0)

---
updated-dependencies:
- dependency-name: github.com/IBM/sarama
  dependency-version: 1.48.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: github.com/open-feature/go-sdk
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-production-dependencies
- dependency-name: github.com/open-feature/go-sdk-contrib/providers/flagd
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/bridges/otelslog
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/runtime
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/log
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk/log
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk/metric
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: github.com/open-feature/go-sdk
  dependency-version: 1.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-production-dependencies
- dependency-name: github.com/open-feature/go-sdk-contrib/providers/flagd
  dependency-version: 0.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/bridges/otelslog
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/runtime
  dependency-version: 0.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/log
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: github.com/XSAM/otelsql
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: github.com/lib/pq
  dependency-version: 1.12.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/contrib/otelconf
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels May 12, 2026
@dependabot dependabot Bot mentioned this pull request May 12, 2026
Closed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants