Skip to content

build(deps): bump the dependencies group across 1 directory with 7 updates - #21594

Closed
dependabot[bot] wants to merge 2 commits into
8.19from
dependabot/go_modules/8.19/dependencies-6b8665e98b
Closed

build(deps): bump the dependencies group across 1 directory with 7 updates#21594
dependabot[bot] wants to merge 2 commits into
8.19from
dependabot/go_modules/8.19/dependencies-6b8665e98b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 31, 2026

Copy link
Copy Markdown
Contributor

Bumps the dependencies group with 4 updates in the / directory: github.com/elastic/elastic-agent-libs, github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger, go.opentelemetry.io/proto/otlp and go.yaml.in/yaml/v3.

Updates github.com/elastic/elastic-agent-libs from 0.46.0 to 0.46.2

Release notes

Sourced from github.com/elastic/elastic-agent-libs's releases.

v0.46.2

What's Changed

New Contributors

Full Changelog: elastic/elastic-agent-libs@v0.46.1...v0.46.2

v0.46.1

What's Changed

New Contributors

Full Changelog: elastic/elastic-agent-libs@v0.46.0...v0.46.1

Commits
  • 65b8742 Add LoggingWithTypedOutputsNonGlobal for non-global logger construction (#435)
  • 96c295a feat(testing/fipsscan): add FIPS dependency scanner helper package (#436)
  • 1653a0c Fix golang ci lint (#437)
  • 1ab3675 tlscommon: better logging certificate error (#431)
  • bb1855c Remove global logger from tlscommon package (#433)
  • 05bf6eb security: add permissions block to workflows (#432)
  • a3e1e3b test(tlscommon): add benchmarks for CertReloader/CAReloader memory impact (#430)
  • See full diff in compare view

Updates github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger from 0.156.0 to 0.157.0

Release notes

Sourced from github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger's releases.

v0.157.0

The OpenTelemetry Collector Contrib contains everything in the opentelemetry-collector release, be sure to check the release notes there as well.

End User Changelog

🛑 Breaking changes 🛑

  • connector/failover: Remove deprecated field retry_gap and max_retries (#49583)

  • connector/routing: Promote the connector.routing.defaultErrorModeIgnore feature gate to beta. The default error_mode is now ignore instead of propagate. (#48418) To restore the previous default of propagate, run the collector with the feature gate disabled by passing --feature-gates=-connector.routing.defaultErrorModeIgnore.

  • processor/aws_ecs_attributes: Rename the component identifier from awsecsattributes to aws_ecs_attributes to follow the component naming guidelines. (#44476) The processor is still in development, so the old identifier is removed rather than kept as a deprecated alias.

  • processor/filter: Promote the processor.filter.defaultErrorModeIgnore feature gate to stable. The default top-level error_mode is now permanently ignore instead of propagate. (#47232) The gate will be removed in v0.159.0.

  • processor/tail_sampling: Fix metric units to comply with the UCUM specification (#49453)

  • processor/transform: Promote the processor.transform.defaultErrorModeIgnore feature gate to stable. The default top-level error_mode is now permanently ignore instead of propagate. (#47231) The gate will be removed in v0.159.0.

  • receiver/apache_spark: Fix metric units to comply with the UCUM specification (#49453)

  • receiver/chrony: Fix metric units to comply with the UCUM specification (#49453)

  • receiver/haproxy: Fix metric units to comply with the UCUM specification (#49453)

  • receiver/host_metrics: Make the cpu attribute opt-in for hostmetrics CPU time and utilization metrics. (#49161) By default, system.cpu.time and system.cpu.utilization are now aggregated across logical CPUs and no longer include the cpu attribute. To restore the previous per-logical-CPU output, configure:

    receivers:
      hostmetrics:
        scrapers:
          cpu:
            metrics:
              system.cpu.time:
                attributes: [cpu, state]
              system.cpu.utilization:
                attributes: [cpu, state]
  • receiver/host_metrics: Enable the system.cpu.logical.count metric by default in the CPU scraper. (#49325) To restore the previous behavior, disable the new metric by applying the following config:

    receivers:
      host_metrics:
        scrapers:
          cpu:
            metrics:
              system.cpu.logical.count:
                enabled: false
  • receiver/memcached: Fix metric units to comply with the UCUM specification (#49453)

  • receiver/mongodb: Fix metric units to comply with the UCUM specification (#49453)

  • receiver/nginx: Fix metric units to comply with the UCUM specification (#49453)

... (truncated)

Changelog

Sourced from github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger's changelog.

v0.157.0

🛑 Breaking changes 🛑

  • pkg/ottl: Break lambda arity validation into a separate function. (#49421) This allows statically verifying arity.

💡 Enhancements 💡

  • internal/k8sinventory: Extract checkpoint package and update Observer interface to return startup errors. (#43602)

    • Extracted internal/k8sinventory/checkpoint as a shared package so checkpoint logic can be reused across observer implementations.
    • The Observer interface's Start method now returns an error, allowing callers to detect and propagate startup failures.
  • pkg/ottl: Add LambdaActivation.IsArgBound and variadic lambda argument evaluation helpers. (#49191)

    • IsArgBound reports whether a positional argument maps to a named formal parameter or a blank ("_") placeholder.
    • Lambda evaluation helpers now normalize only bound arguments.
  • pkg/pdatatest: Add IncludeHistogramExplicitBounds option to pmetricassert snapshot generation. (#49732) The option includes histogram explicit bounds without including other histogram datapoint values. Snapshot compaction preserves selected histogram datapoint assertion fields, including empty explicit bounds.

Commits
  • 89e4355 [chore] Prepare release 0.157.0 (#49802)
  • 95d1ae1 Update github-actions deps (#49776)
  • 445eee6 Update dockerfile deps (#49775)
  • c0d84e7 Update module github.com/apache/pulsar-client-go to v0.21.0 (#49786)
  • 88d3b4c Update module github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/monitor/a...
  • b808b2e Update module google.golang.org/grpc to v1.82.1 (#49784)
  • 920c363 Update module github.com/getsentry/sentry-go to v0.48.0 (#49788)
  • 6d61a75 [chore][exporter/awsxray] migrate feature gate to metadata.yaml (#48619)
  • 2daec02 Update module github.com/cloudfoundry/go-cfclient/v3 to v3.0.0-beta.1 (#49780)
  • 55df8ed Update module github.com/go-ldap/ldap/v3 to v3.4.14 (#49781)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/consumer from 1.62.0 to 1.63.0

Release notes

Sourced from go.opentelemetry.io/collector/consumer's releases.

v1.63.0/v0.157.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.157.0

End User Changelog

🛑 Breaking changes 🛑

  • pkg/exporterhelper: Replace histogram bucket boundaries for otelcol_exporter_queue_batch_send_size_bytes and otelcol_processor_batch_batch_send_size_bytes with a power-of-2 byte-scale set spanning 128 B to 16 MiB. (#15535) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads, and otelcol_exporter_queue_batch_send_size_bytes topped out at 6000 bytes so nearly all observations fell into the +Inf overflow bucket. The new boundaries are powers of two from 128 B to 16777216 (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the two metrics directly comparable on the same dashboards. Dashboards or alerts that hard-code specific le values for these histograms will need to be updated.

  • processor/batch: Replace histogram bucket boundaries for otelcol_processor_batch_batch_send_size_bytes with a power-of-2 byte-scale set spanning 128 B to 16 MiB. (#15535) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads. The new boundaries are powers of two from 128 B to 16777216 (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the metric directly comparable with otelcol_exporter_queue_batch_send_size_bytes on the same dashboards. Dashboards or alerts that hard-code specific le values for this histogram will need to be updated.

💡 Enhancements 💡

  • all: Bootstrap config.schema.yaml for core components (debug/otlp/otlphttp exporters, otlp receiver, batch/memory_limiter processors, memory_limiter/zpages extensions). Implements Phase 1 of the component configuration schema roadmap RFC. (#14543) Schemas are generated using the schemagen tool from opentelemetry-collector-contrib and hand-tuned to capture validation rules and references to shared library schemas (confighttp, configgrpc, configretry, exporterhelper, etc.). A .schemagen.yaml settings file and a generate-schemas Makefile target are added so the schemas can be regenerated reproducibly.

  • pkg/service: Apply experimental service::telemetry::resource::detection/development resource detection to the Collector's internal telemetry resource. (#14311) This follows the OpenTelemetry configuration schema by treating service::telemetry::resource::detection/development::detectors as detector selection. Currently supported detector entries are container, host, process, and service. See the OpenTelemetry Configuration Go support table and search for ExperimentalResourceDetector for current detector support: https://github.com/open-telemetry/opentelemetry-configuration/blob/main/language-support-status.md#go

    Example:

    service:
      telemetry:
        resource:
          attributes:
            - name: foo
              value: bar
          detection/development:

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/consumer's changelog.

v1.63.0/v0.157.0

🛑 Breaking changes 🛑

  • pkg/config/configgrpc: Remove the BalancerName function (#9477) Use the DefaultBalancerName constant instead.

🚩 Deprecations 🚩

  • pkg/xconfmap: Deprecate WithForceUnmarshaler option. (#15614) Use confmap.WithForceUnmarshaler instead.

🚀 New components 🚀

  • pkg/config/configstorage: Add a new configstorage module to support storage configuration fields. (#5832)

💡 Enhancements 💡

  • pkg/confmap: Add WithForceUnmarshaler option. (#15614) This option allows forcing the top-level Unmarshal method even if the Conf is already a parameter from an Unmarshal method. See the Godoc for more details.
Commits
  • 4908404 [chore] Prepare release v1.63.0/v0.157.0 (#15624)
  • c823638 [service] chore: Forward hostcapabilities interfaces through extension host...
  • 1a861f0 [confmap] Stabilize WithForceUnmarshaler (#15614)
  • 7d0e3a0 [configgrpc] Remove the BalancerName function (#15611)
  • bd0d94a [configgrpc] Apply WaitForReady option (#15615)
  • 3294e3d [chore][configgrpc] Remove direct dependency on xconfmap (#15612)
  • 6885b26 [chore][configgrpc] Return correct error when PerRPCCredentials fails (#15616)
  • b873893 [chore][configgrpc] Remove duplicate omitempty tag (#15610)
  • 2ab65ae [service] Record status events reported by extensions (#15557)
  • fa69e2c [service] Fix startup panic when a resource detector emits a slice-valued att...
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/pdata from 1.62.0 to 1.63.0

Release notes

Sourced from go.opentelemetry.io/collector/pdata's releases.

v1.63.0/v0.157.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.157.0

End User Changelog

🛑 Breaking changes 🛑

  • pkg/exporterhelper: Replace histogram bucket boundaries for otelcol_exporter_queue_batch_send_size_bytes and otelcol_processor_batch_batch_send_size_bytes with a power-of-2 byte-scale set spanning 128 B to 16 MiB. (#15535) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads, and otelcol_exporter_queue_batch_send_size_bytes topped out at 6000 bytes so nearly all observations fell into the +Inf overflow bucket. The new boundaries are powers of two from 128 B to 16777216 (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the two metrics directly comparable on the same dashboards. Dashboards or alerts that hard-code specific le values for these histograms will need to be updated.

  • processor/batch: Replace histogram bucket boundaries for otelcol_processor_batch_batch_send_size_bytes with a power-of-2 byte-scale set spanning 128 B to 16 MiB. (#15535) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads. The new boundaries are powers of two from 128 B to 16777216 (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the metric directly comparable with otelcol_exporter_queue_batch_send_size_bytes on the same dashboards. Dashboards or alerts that hard-code specific le values for this histogram will need to be updated.

💡 Enhancements 💡

  • all: Bootstrap config.schema.yaml for core components (debug/otlp/otlphttp exporters, otlp receiver, batch/memory_limiter processors, memory_limiter/zpages extensions). Implements Phase 1 of the component configuration schema roadmap RFC. (#14543) Schemas are generated using the schemagen tool from opentelemetry-collector-contrib and hand-tuned to capture validation rules and references to shared library schemas (confighttp, configgrpc, configretry, exporterhelper, etc.). A .schemagen.yaml settings file and a generate-schemas Makefile target are added so the schemas can be regenerated reproducibly.

  • pkg/service: Apply experimental service::telemetry::resource::detection/development resource detection to the Collector's internal telemetry resource. (#14311) This follows the OpenTelemetry configuration schema by treating service::telemetry::resource::detection/development::detectors as detector selection. Currently supported detector entries are container, host, process, and service. See the OpenTelemetry Configuration Go support table and search for ExperimentalResourceDetector for current detector support: https://github.com/open-telemetry/opentelemetry-configuration/blob/main/language-support-status.md#go

    Example:

    service:
      telemetry:
        resource:
          attributes:
            - name: foo
              value: bar
          detection/development:

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.63.0/v0.157.0

🛑 Breaking changes 🛑

  • pkg/config/configgrpc: Remove the BalancerName function (#9477) Use the DefaultBalancerName constant instead.

🚩 Deprecations 🚩

  • pkg/xconfmap: Deprecate WithForceUnmarshaler option. (#15614) Use confmap.WithForceUnmarshaler instead.

🚀 New components 🚀

  • pkg/config/configstorage: Add a new configstorage module to support storage configuration fields. (#5832)

💡 Enhancements 💡

  • pkg/confmap: Add WithForceUnmarshaler option. (#15614) This option allows forcing the top-level Unmarshal method even if the Conf is already a parameter from an Unmarshal method. See the Godoc for more details.
Commits
  • 4908404 [chore] Prepare release v1.63.0/v0.157.0 (#15624)
  • c823638 [service] chore: Forward hostcapabilities interfaces through extension host...
  • 1a861f0 [confmap] Stabilize WithForceUnmarshaler (#15614)
  • 7d0e3a0 [configgrpc] Remove the BalancerName function (#15611)
  • bd0d94a [configgrpc] Apply WaitForReady option (#15615)
  • 3294e3d [chore][configgrpc] Remove direct dependency on xconfmap (#15612)
  • 6885b26 [chore][configgrpc] Return correct error when PerRPCCredentials fails (#15616)
  • b873893 [chore][configgrpc] Remove duplicate omitempty tag (#15610)
  • 2ab65ae [service] Record status events reported by extensions (#15557)
  • fa69e2c [service] Fix startup panic when a resource detector emits a slice-valued att...
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/proto/otlp from 1.10.0 to 1.11.0

Commits
  • bc625d6 Release v1.11.0 (#659)
  • 22a65e0 chore(deps): update github/codeql-action action to v4.37.3 (#661)
  • 519c2d9 chore(deps): update actions/checkout action to v7.0.1 (#657)
  • 08bb191 chore(deps): update googleapis to 0afa2a6 (#656)
  • 64642b3 chore(deps): update github/codeql-action action to v4.37.2 (#660)
  • 13684cd fix(deps): update module google.golang.org/grpc to v1.82.1 (#653)
  • cbe4701 chore(deps): update github/codeql-action action to v4.37.1 (#655)
  • cfb456b chore(deps): update googleapis to e75dac1 (#652)
  • c72655a chore(deps): update actions/setup-go action to v7 (#654)
  • cc01747 chore(deps): update google.golang.org/genproto/googleapis/api digest to 142c4...
  • Additional commits viewable in compare view

Updates go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5

Commits
  • e16c7af Remove empty go.sum file
  • 6abcd01 Fix unhandled nil-errors in tests
  • 9481db7 Remove suite_test.go and gopkg.in/check.v1
  • 485f5fc Use standard testing library for limit_test.go
  • 3e00046 Use standard testing library for node_test.go
  • f612058 Use standard testing library for decode_test.go
  • 078f958 Use standard testing library encode_test.go
  • 3847ac0 [v3] backport CodeQL workflow
  • 1666663 Revert incorrect gofmt changes
  • 73290cb Retract v3 tags that cannot be installed
  • See full diff in compare view

Updates google.golang.org/grpc from 1.82.0 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

  • server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
  • xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
  • xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
  • xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…dates

Bumps the dependencies group with 4 updates in the / directory: [github.com/elastic/elastic-agent-libs](https://github.com/elastic/elastic-agent-libs), [github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger](https://github.com/open-telemetry/opentelemetry-collector-contrib), [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) and [go.yaml.in/yaml/v3](https://github.com/yaml/go-yaml).


Updates `github.com/elastic/elastic-agent-libs` from 0.46.0 to 0.46.2
- [Release notes](https://github.com/elastic/elastic-agent-libs/releases)
- [Commits](elastic/elastic-agent-libs@v0.46.0...v0.46.2)

Updates `github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger` from 0.156.0 to 0.157.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector-contrib/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector-contrib@v0.156.0...v0.157.0)

Updates `go.opentelemetry.io/collector/consumer` from 1.62.0 to 1.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.62.0...pdata/v1.63.0)

Updates `go.opentelemetry.io/collector/pdata` from 1.62.0 to 1.63.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.62.0...pdata/v1.63.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.10.0...v1.11.0)

Updates `go.yaml.in/yaml/v3` from 3.0.4 to 3.0.5
- [Commits](yaml/go-yaml@v3.0.4...v3.0.5)

Updates `google.golang.org/grpc` from 1.82.0 to 1.82.1
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.82.0...v1.82.1)

---
updated-dependencies:
- dependency-name: github.com/elastic/elastic-agent-libs
  dependency-version: 0.46.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/open-telemetry/opentelemetry-collector-contrib/pkg/translator/jaeger
  dependency-version: 0.157.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.opentelemetry.io/collector/consumer
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.opentelemetry.io/collector/pdata
  dependency-version: 1.63.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.11.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: go.yaml.in/yaml/v3
  dependency-version: 3.0.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.82.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 31, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 31, 2026 17:14
@dependabot dependabot Bot added go Pull requests that update Go code dependencies Pull requests that update a dependency file labels Jul 31, 2026
@github-actions

Copy link
Copy Markdown
Contributor

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)

@infra-vault-gh-plugin-prod

Copy link
Copy Markdown

💚 Build Succeeded

@dependabot @github

dependabot Bot commented on behalf of github Aug 7, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this Aug 7, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/8.19/dependencies-6b8665e98b branch August 7, 2026 17:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant