fix(deps): update vulnfeeds-go

[renovate-bot]

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
charm.land/lipgloss/v2	v2.0.0 → v2.0.1
github.com/gkampitakis/go-snaps	v0.5.19 → v0.5.20
github.com/go-git/go-git/v5	v5.16.5 → v5.17.0
go.opentelemetry.io/contrib/detectors/gcp	v1.39.0 → v1.42.0
go.opentelemetry.io/otel	v1.40.0 → v1.42.0
go.opentelemetry.io/otel/sdk	v1.40.0 → v1.42.0
go.opentelemetry.io/otel/trace	v1.40.0 → v1.42.0
google.golang.org/api	v0.268.0 → v0.270.0

---

Release Notes

charmbracelet/lipgloss (charm.land/lipgloss/v2)

v2.0.1

Compare Source

A small release to properly set style underline colors, as well as handling partial reads while querying the terminal.

Changelog

Fixed

• 3044146: fix: add missing underlineColorKey case in getAsColor (#​624) (@​flux627)

Docs

• 61e734b: docs: Charm logo link in upgrade guide (@​aymanbagabas)

Other stuff

• 92b13d8: ci: sync golangci-lint config (#​621) (@​github-actions[bot])

---

Thoughts? Questions? We love hearing from you. Feel free to reach out on X, Discord, Slack, The Fediverse, Bluesky.

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

v0.5.20

Compare Source

What's Changed

• feat: support setting serializer on config by @​gkampitakis in #​154

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

go-git/go-git (github.com/go-git/go-git/v5)

v5.17.0

Compare Source

What's Changed

• build: Update module github.com/go-git/go-git/v5 to v5.16.5 [SECURITY] (releases/v5.x) by @​go-git-renovate[bot] in #​1839
• git: worktree, optimize infiles function for very large repos by @​k-anshul in #​1853
• git: Add strict checks for supported extensions by @​pjbgf in #​1861
• backport, git: Improve Status() speed with new index.ModTime check by @​cedric-appdirect in #​1862
• storage: filesystem, Avoid overwriting loose obj files by @​pjbgf in #​1864

Full Changelog: go-git/go-git@v5.16.5...v5.17.0

open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)

v1.42.0: /v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0

Compare Source

Added

• Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#​8442)

Changed

• Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#​8631)

  • The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:
    • RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.
    • rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
    • rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

  See semantic-conventions v1.40.0 release for complete details.

Fixed

• Ignore informational response status codes (100-199) except 101 Switching Protocols when storing the HTTP status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#​6913)
• Make Body handling in Transport consistent with stdlib in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#​8618)
• Fix bucket boundaries for rpc.server.call.duration and rpc.client.call.duration in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8642)
• Host resource detector in go.opentelemetry.io/contrib/otelconf now includes os. attributes. (#​8578)

Removed

• Drop support for Go 1.24. (#​8628)

What's Changed

• chore(deps): update github artifact actions to v7 (major) by @​renovate[bot] in #​8605
• chore(deps): update module github.com/sonatard/noctx to v0.5.0 by @​renovate[bot] in #​8610
• chore(deps): update github/codeql-action action to v4.32.5 by @​renovate[bot] in #​8620
• fix(deps): update module github.com/aws/smithy-go to v1.24.2 by @​renovate[bot] in #​8614
• chore(deps): update go-openapi packages by @​renovate[bot] in #​8621
• fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 by @​renovate[bot] in #​8622
• chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by @​renovate[bot] in #​8608
• chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 by @​renovate[bot] in #​8609
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.147.0 by @​renovate[bot] in #​8625
• chore(deps): update module github.com/daixiang0/gci to v0.14.0 by @​renovate[bot] in #​8623
• Drop support for 1.24 by @​dmathieu in #​8628
• fix(deps): update golang.org/x by @​renovate[bot] in #​8554
• fix(deps): update kubernetes packages to v0.35.2 by @​renovate[bot] in #​8626
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8598
• fix(deps): update module github.com/aws/aws-lambda-go to v1.53.0 by @​renovate[bot] in #​8630
• otelgrpc: modernize the example project by @​ash2k in #​8619
• chore(deps): update googleapis to a57be14 by @​renovate[bot] in #​8606
• fix(deps): update module github.com/gin-gonic/gin to v1.12.0 by @​renovate[bot] in #​8627
• chore(deps): update module github.com/prometheus/procfs to v0.20.1 by @​renovate[bot] in #​8624
• fix(otelhttp): make Body handling in Transport consistent with stdlib by @​ash2k in #​8618
• otelhttp: Ignore informational response status codes when persisting status by @​VirrageS in #​6913
• chore(deps): update golang.org/x/telemetry digest to 18da590 by @​renovate[bot] in #​8635
• Upgrade to semconv/v1.40.0 by @​MrAlias in #​8631
• chore(deps): update k8s.io/kube-openapi digest to 5b3e3fd by @​renovate[bot] in #​8636
• envcar: add environment carrier by @​Joibel in #​8442
• chore: enable modernize linter by @​mmorel-35 in #​8583
• chore(deps): update dependency codespell to v2.4.2 by @​renovate[bot] in #​8640
• chore(deps): update github/codeql-action action to v4.32.6 by @​renovate[bot] in #​8641
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8643
• Use correct bucket boundaries for otelgrpc client and server histograms by @​dashpole in #​8642
• fix(deps): update module google.golang.org/grpc to v1.79.2 by @​renovate[bot] in #​8644
• otelconf: host detector should include os as well by @​codeboten in #​8578
• Release v1.42.0/v2.4.0/v0.67.0/v0.36.0/v0.22.0/v0.17.0/v0.15.0/v0.14.0 by @​pellared in #​8649

New Contributors

• @​VirrageS made their first contribution in #​6913
• @​Joibel made their first contribution in #​8442

Full Changelog: open-telemetry/opentelemetry-go-contrib@v1.41.0...v1.42.0

v1.41.0: /v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

Compare Source

This release is the last to support Go 1.24.
The next release will require at least Go 1.25.

Added

• Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#​8506)
• Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#​8544)
• Support testing of Go 1.26. (#​8549)
• Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#​8555)
• Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#​8553)
• Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#​8557)
• Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#​8510)
• Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#​8488)
• Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#​8590)
• Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#​8612)

Fixed

• Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8509)
• Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8565)
• Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#​8450)
• Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#​8502)
• Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#​8595)

Removed

• Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#​8501)

Changed

• Reduce allocations in the generated HTTP internal/semconv packages. (#​8511)
  Updated modules include:
  • go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
  • go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
  • go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
  • go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
  • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
• Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#​8505)

Deprecated

• WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#​8587)

What's Changed

• chore(deps): update golang.org/x/telemetry digest to fe4bb1c by @​renovate[bot] in #​8495
• chore(deps): update github/codeql-action action to v4.32.1 by @​renovate[bot] in #​8492
• chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0 by @​renovate[bot] in #​8489
• chore(deps): update googleapis to ce8ad4c by @​renovate[bot] in #​8496
• chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by @​renovate[bot] in #​8500
• chore(deps): update googleapis to 546029d by @​renovate[bot] in #​8503
• fix(deps): update module github.com/aws/aws-sdk-go-v2/service/dynamodb to v1.55.0 by @​renovate[bot] in #​8504
• chore: update go-jsonschema dependency by @​codeboten in #​8494
• otelconf: validate client key/cert symmetry for mTLS by @​sandy2008 in #​8450
• Remove zipkin example by @​pradhyum6144 in #​8501
• Fix zpages CSS and JS CDN URLs by @​pradhyum6144 in #​8502
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.145.0 by @​renovate[bot] in #​8508
• otelgrpc: add WithSpanKind option by @​rauanmayemir in #​8506
• chore(deps): update fossas/fossa-action action to v1.8.0 by @​renovate[bot] in #​8517
• chore(deps): update github/codeql-action action to v4.32.2 by @​renovate[bot] in #​8515
• chore(deps): update module github.com/ghostiam/protogetter to v0.3.20 by @​renovate[bot] in #​8513
• chore(deps): update golang.org/x/telemetry digest to 86a5c4b by @​renovate[bot] in #​8512
• chore(deps): update golang.org/x by @​renovate[bot] in #​8521
• chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.6.0 by @​renovate[bot] in #​8522
• chore(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v6.3.2 by @​renovate[bot] in #​8520
• chore(deps): update module github.com/klauspost/compress to v1.18.4 by @​renovate[bot] in #​8523
• fix(deps): update module go.mongodb.org/mongo-driver to v1.17.9 by @​renovate[bot] in #​8519
• chore(deps): update googleapis to 4cfbd41 by @​renovate[bot] in #​8527
• fix(deps): update golang.org/x by @​renovate[bot] in #​8528
• chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 [security] by @​renovate[bot] in #​8531
• google.golang.org/grpc/otelgrpc: Fix for elapsedTime records an incorrect metric value by @​gaiaz-iusipov in #​8509
• chore(deps): update k8s.io/utils digest to b8788ab by @​renovate[bot] in #​8534
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27.8 by @​renovate[bot] in #​8535
• chore(deps): update module github.com/golangci/golines to v0.15.0 by @​renovate[bot] in #​8536
• chore(deps): update module github.com/golangci/misspell to v0.8.0 by @​renovate[bot] in #​8538
• otelconf: update to latest config schema rc by @​codeboten in #​8505
• chore(deps): update golang.org/x/telemetry digest to 9f66fae by @​renovate[bot] in #​8545
• Add version file for otelzap bridge by @​lcorinna in #​8544
• chore(deps): update golang docker tag to v1.26 by @​renovate[bot] in #​8537
• fix(deps): update module google.golang.org/grpc to v1.79.0 by @​renovate[bot] in #​8552
• Add support for Go 1.26 by @​dmathieu in #​8549
• fix(deps): update module google.golang.org/grpc to v1.79.1 by @​renovate[bot] in #​8556
• chore(deps): update github/codeql-action action to v4.32.3 by @​renovate[bot] in #​8558
• Add version file for Azure VM detector by @​bamdadam in #​8553
• chore(deps): update module github.com/kevinburke/ssh_config to v1.5.0 by @​renovate[bot] in #​8561
• Add version file for baggagecopy processor by @​lcorinna in #​8557
• chore(deps): update module github.com/kevinburke/ssh_config to v1.6.0 by @​renovate[bot] in #​8562
• chore(deps): update module github.com/godoc-lint/godoc-lint to v0.11.2 by @​renovate[bot] in #​8566
• chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.7.0 by @​renovate[bot] in #​8564
• chore(deps): update github.com/lufia/plan9stats digest to b3301c5 by @​renovate[bot] in #​8563
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.20 by @​renovate[bot] in #​8567
• Add version file for AWS Lambda resource detector by @​ElenaZvereva in #​8510
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.28.0 by @​renovate[bot] in #​8569
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8572
• chore(deps): update otel/opentelemetry-collector-contrib docker tag to v0.146.1 by @​renovate[bot] in #​8579
• Skip flaky test on macos too by @​dmathieu in #​8580
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8577
• add version file for autoprop propagator by @​pransoft7 in #​8488
• Add version file for minsev processor by @​ElenaZvereva in #​8590
• chore(deps): update github/codeql-action action to v4.32.4 by @​renovate[bot] in #​8584
• fix(deps): update module github.com/aws/smithy-go to v1.24.1 by @​renovate[bot] in #​8585
• chore(deps): update module github.com/mirrexone/unqueryvet to v1.5.4 by @​renovate[bot] in #​8588
• fix(deps): update module github.com/labstack/echo/v4 to v4.15.1 by @​renovate[bot] in #​8589
• chore(deps): update module github.com/sosodev/duration to v1.4.0 by @​renovate[bot] in #​8591
• chore(deps): update module github.com/ebitengine/purego to v0.10.0 by @​renovate[bot] in #​8592
• chore(deps): update module github.com/alexkohler/prealloc to v1.0.3 by @​renovate[bot] in #​8596
• chore(deps): update lycheeverse/lychee-action action to v2.8.0 by @​renovate[bot] in #​8599
• chore(deps): update module github.com/uudashr/gocognit to v1.2.1 by @​renovate[bot] in #​8597
• chore(deps): update module github.com/go-git/go-git/v5 to v5.17.0 by @​renovate[bot] in #​8601
• chore(deps): update prom/prometheus docker tag to v3.10.0 by @​renovate[bot] in #​8603
• ci: add govulncheck job to CI workflow and update lint target by @​pellared in #​8613
• Add version file for autoexport module by @​ElenaZvereva in #​8612
• otelconf: use translation strategy instead of deprecated funcs by @​codeboten in #​8595
• otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler by @​sonalgaud12 in #​8587
• google.golang.org/grpc/otelgrpc: Use canonical string status codes by @​haines in #​8565
• internal/shared/semconv: Reduce allocations by @​gaiaz-iusipov in #​8511
• add version file for Autodetect detector by @​bamdadam in #​8555
• HTTP instrumentations cleanup by @​ash2k in #​8532
• Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 by @​pellared in #​8617

New Contributors

• @​sandy2008 made their first contribution in #​8450
• @​pradhyum6144 made their first contribution in #​8501
• @​rauanmayemir made their first contribution in #​8506
• @​bamdadam made their first contribution in #​8553
• @​haines made their first contribution in #​8565

Full Changelog: open-telemetry/opentelemetry-go-contrib@v1.40.0...v1.41.0

v1.40.0: /v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0

Compare Source

Overview

Added

• WithMetricAttributesFn option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to define dynamic attributes on auto-instrumented metrics. (#​8191)
• Add support for configuring propagators in go.opentelemetry.io/contrib/otelconf. (#​8281)
• Add const Version in go.opentelemetry.io/contrib/bridges/prometheus. (#​8401)
• Add const Version in go.opentelemetry.io/contrib/otelconf. (#​8461)
• Add const Version in go.opentelemetry.io/contrib/bridges/otellogr. (#​8477)
• Add const Version in go.opentelemetry.io/contrib/bridges/otellogrus. (#​8485)
• Add const Version in go.opentelemetry.io/contrib/bridges/otelslog. (#​8480)

Fixed

• Fix panic when passing nil TracerProvider or MeterProvider to WithTracerProvider or WithMeterProvider in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8323)
• Transport in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now supports reading request body multiple times for subsequent requests that reuse http.Request. (#​8352)

Changed

• The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp has been replaced by const Version. (#​8142)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace has been replaced by const Version. (#​8302)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc has been replaced by const Version. (#​8317)
• The Version() function in go.opentelemetry.io/contrib/zpages has been replaced by const Version. (#​8325)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo has been replaced by const Version. (#​8340)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin has been replaced by const Version. (#​8341)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/runtime has been replaced by const Version string. (#​8349)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws has been replaced by const Version. (#​8356)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda has been replaced by const Version. (#​8357)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/host has been replaced by const Version. (#​8358)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful has been replaced by const Version. (#​8360)
• The Version() function in go.opentelemetry.io/contrib/propagators/opencensus has been replaced by const Version. (#​8361)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho has been replaced by const Version. (#​8365)
• The Version() function in go.opentelemetry.io/contrib/samplers/probability/consistent has been replaced by const Version. (#​8366)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo has been replaced by const Version. (#​8370)
• Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#​8386)
• Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#​8386)
• Upgrade go.opentelemetry.io/otel/semconv to v1.39.0, including updates across all instrumentation and detector modules. (#​8404)

  • The semantic conventions v1.39.0 release introduces breaking changes, including:

    • rpc span and metric attributes have been renamed to align with naming guidelines:
      • rpc.system → rpc.system.name (values: grpc, grpc_web, connectrpc, thrift, dubbo, etc.)
      • rpc.method and rpc.service have been merged into a fully-qualified rpc.method attribute
      • rpc.client|server.duration → rpc.client|server.call.duration (unit changed to seconds)
      • rpc.grpc.request.metadata/rpc.grpc.response.metadata → rpc.request.metadata/rpc.response.metadata
      • rpc.grpc.status_code → deprecated in favor of rpc.response.status_code
      • rpc.jsonrpc.request_id → jsonrpc.request.id
      • rpc.jsonrpc.version → jsonrpc.protocol.version
    • system and process metrics:
      • *.linux.memory metrics renamed to *.memory.linux
      • system.process.status → process.state
      • system.paging.type and process.paging.fault_type → system.paging.fault.type
    • peer.service attribute has been deprecated in favor of service.peer.name

    See semantic-conventions v1.39.0 release and v1.38.0 release for complete breaking change details.

  • Updated modules include:

    • go.opentelemetry.io/contrib/bridges/otellogr
    • go.opentelemetry.io/contrib/bridges/otellogrus
    • go.opentelemetry.io/contrib/bridges/otelslog
    • go.opentelemetry.io/contrib/bridges/otelzap
    • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
      • Uses service.peer.name attribute (deprecated peer.service)
    • go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
    • go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
      • Merged rpc.method and rpc.service into fully-qualified rpc.method (e.g., grpc.testing.TestService/EmptyCall)
      • rpc.system → rpc.system.name with updated values (e.g., RPCSystemNameGRPC)
      • rpc.grpc.status_code → rpc.response.status_code (e.g., RPCResponseStatusCode("OK"))
    • go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws
      • Merged rpc.method and rpc.service attributes (service/operation → fully-qualified method)
      • rpc.system → rpc.system.name with AWSSystemVal
      • New MethodAttr() function for combined service/operation attribute
    • go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda
    • go.opentelemetry.io/contrib/instrumentation/runtime
    • go.opentelemetry.io/contrib/instrumentation/host
    • go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver (both v1 and v2)
    • go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
    • go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful
    • go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho
    • go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux
    • go.opentelemetry.io/contrib/detectors/gcp
    • go.opentelemetry.io/contrib/detectors/aws/ec2/v2
    • go.opentelemetry.io/contrib/detectors/aws/ecs
    • go.opentelemetry.io/contrib/detectors/aws/eks
    • go.opentelemetry.io/contrib/detectors/azure/azurevm
    • go.opentelemetry.io/contrib/otelconf

Deprecated

• ServiceAttr() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws is deprecated. Use MethodAttr() instead, as rpc.service has been merged into rpc.method in semantic conventions v1.39.0. (#​8404)
• OperationAttr() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws is deprecated. Use MethodAttr() instead, as rpc.service has been merged into rpc.method in semantic conventions v1.39.0. (#​8404)

Removed

• The deprecated DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#​8266)
• The deprecated WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. Use WithPublicEndpointFn instead. (#​8267)
• The deprecated WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#​8268)

What's Changed

• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8263
• fix(deps): update module github.com/aws/aws-lambda-go to v1.51.0 by @​renovate[bot] in #​8265
• chore(deps): update golang.org/x by @​renovate[bot] in #​8262
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8264
• fix(deps): update golang.org/x by @​renovate[bot] in #​8269
• fix(deps): update module golang.org/x/tools to v0.40.0 by @​renovate[bot] in #​8271
• chore(deps): update go-openapi packages by @​renovate[bot] in #​8270
• refactor(otelhttp): change Version() func to const Version string by @​dogedede in #​8142
• chore(deps): update golang.org/x/exp/typeparams digest to 8475f28 by @​renovate[bot] in #​8273
• Remove the deprecated otelhttp Client by @​MrAlias in #​8266
• fix(deps): update module go.mongodb.org/mongo-driver/v2 to v2.4.1 by @​renovate[bot] in #​8277
• chore(deps): update codecov/codecov-action action to v5.5.2 by @​renovate[bot] in #​8275
• fix(deps): update kubernetes packages to v0.34.3 by @​renovate[bot] in #​8278
• fix(deps): update golang.org/x/exp digest to 8475f28 by @​renovate[bot] in #​8274
• fix(deps): update aws-sdk-go-v2 monorepo by @​renovate[bot] in #​8276
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 by @​renovate[bot] in #​8256
• chore(deps): update github.com/securego/gosec/v2 digest to b6eea26 by @​renovate[bot] in #​8279
• Remove the deprecated WithPublicEndpoint from otelhttp by @​MrAlias in #​8267
• Remove the deprecated WithRouteTag option in otelhttp by @​MrAlias in #​8268
• chore(deps): update module github.com/securego/gosec/v2 to v2.22.11 by [@​renovate](https://redirect.github.c

---

Configuration

📅 Schedule: Branch creation - "before 6am on wednesday" in timezone Australia/Sydney, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: vulnfeeds/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 9 additional dependencies were updated

Details:

Package	Change
cloud.google.com/go/auth	v0.18.1 -> v0.18.2
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	v1.30.0 -> v1.31.0
github.com/go-git/go-billy/v5	v5.6.2 -> v5.8.0
github.com/googleapis/enterprise-certificate-proxy	v0.3.11 -> v0.3.14
go.opentelemetry.io/otel/metric	v1.40.0 -> v1.42.0
go.opentelemetry.io/otel/sdk/metric	v1.40.0 -> v1.42.0
golang.org/x/sys	v0.41.0 -> v0.42.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260203192932-546029d2fa20 -> v0.0.0-20260226221140-a57be14db171
google.golang.org/grpc	v1.79.1 -> v1.79.2