Skip to content

fix(deps): Update go dependencies#5986

Closed
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/go-dependencies
Closed

fix(deps): Update go dependencies#5986
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/go-dependencies

Conversation

@renovate-sh-app
Copy link
Copy Markdown
Contributor

@renovate-sh-app renovate-sh-app Bot commented Apr 3, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
cloud.google.com/go/pubsub/v2 v2.4.0 → v2.6.0 age confidence require minor
connectrpc.com/connect v1.19.1 → v1.19.2 age confidence require patch
github.com/99designs/gqlgen v0.17.89 → v0.17.90 age confidence require patch
github.com/DataDog/datadog-agent/pkg/util/system v0.76.0-rc.2 → v0.78.4 age confidence replace minor
github.com/DataDog/go-sqllexer v0.1.13 → v0.2.2 age confidence require minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/extension/googleclientauthextension v0.55.0 → v0.56.0 age confidence require minor
github.com/IBM/sarama v1.46.3 → v1.48.2 age confidence require minor
github.com/aws/aws-sdk-go-v2 v1.41.6 → v1.41.7 age confidence require patch
github.com/aws/aws-sdk-go-v2/config v1.32.16 → v1.32.17 age confidence require patch
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.22 → v1.18.23 age confidence require patch
github.com/aws/aws-sdk-go-v2/service/s3 v1.100.0 → v1.101.0 age confidence require minor
github.com/aws/aws-sdk-go-v2/service/servicediscovery v1.39.23 → v1.39.28 age confidence require patch
github.com/buger/jsonparser v1.1.2 → v1.2.0 age confidence require minor
github.com/deneonet/benc v1.1.7 → v1.1.8 age confidence replace patch
github.com/fatih/color v1.18.0 → v1.19.0 age confidence require minor
github.com/fsnotify/fsnotify v1.9.0 → v1.10.1 age confidence require minor
github.com/go-sql-driver/mysql v1.9.3 → v1.10.0 age confidence require minor
github.com/grafana/beyla/v3 v3.9.8 → v3.14.0 age confidence require minor
github.com/grafana/loki/v3 v3.6.5 → v3.7.2 age confidence require minor
github.com/grafana/pyroscope-go/godeltaprof v0.1.9 → v0.1.10 age confidence require patch
github.com/hashicorp/consul/api v1.33.2 → v1.34.2 age confidence require minor
github.com/hashicorp/go-discover v1.1.0 → v1.2.0 age confidence require minor
github.com/influxdata/telegraf v1.35.2 → v1.38.4 age confidence require minor
github.com/klauspost/compress v1.18.5 → v1.18.6 age confidence require patch
github.com/leodido/go-syslog/v4 v4.3.0 → v4.5.0 age confidence require minor
github.com/leodido/go-syslog/v4 v4.3.0 → v4.5.0 age confidence replace minor
github.com/ohler55/ojg v1.28.0 → v1.28.1 age confidence require patch
github.com/oliver006/redis_exporter v1.81.0 → v1.83.0 age confidence require minor
github.com/openai/openai-go/v3 v3.21.0 → v3.35.0 age confidence require minor v3.36.0
github.com/prometheus-community/postgres_exporter v0.19.0 → v0.19.1 age confidence require patch
github.com/prometheus/mysqld_exporter v0.18.0 → v0.19.0 age confidence require minor
github.com/prometheus/node_exporter v1.10.2 → v1.11.1 age confidence require minor
github.com/prometheus/statsd_exporter v0.28.0 → v0.29.0 age confidence require minor
github.com/samber/lo v1.52.0 → v1.53.0 age confidence require minor
github.com/spf13/cobra v1.10.1 → v1.10.2 age confidence require patch
github.com/vektah/gqlparser/v2 v2.5.32 → v2.5.33 age confidence require patch
github.com/zricethezav/gitleaks/v8 v8.30.0 → v8.30.1 age confidence require patch
go (source) 1.26.2 → 1.26.3 age confidence golang patch
go.opentelemetry.io/contrib/propagators/jaeger v1.35.0 → v1.43.0 age confidence require minor
go.opentelemetry.io/obi v0.8.0 → v0.9.0 age confidence require minor
go.uber.org/zap v1.27.1 → v1.28.0 age confidence require minor
golang.org/x/crypto v0.50.0 → v0.51.0 age confidence require minor
golang.org/x/mod v0.33.0 → v0.36.0 age confidence require minor
golang.org/x/net v0.53.0 → v0.54.0 age confidence require minor
golang.org/x/oauth2 v0.35.0 → v0.36.0 age confidence require minor
golang.org/x/sys v0.43.0 → v0.44.0 age confidence require minor
golang.org/x/text v0.36.0 → v0.37.0 age confidence require minor
golang.org/x/tools v0.44.0 → v0.45.0 age confidence require minor
google.golang.org/grpc v1.80.0 → v1.81.1 age confidence require minor
k8s.io/klog/v2 v2.130.1 → v2.140.0 age confidence require minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/pubsub/v2)

v2.5.1

v2.5.0

connectrpc/connect-go (connectrpc.com/connect)

v1.19.2

Compare Source

What's Changed
Governance
Bugfixes
  • Use 'deadline_exceeded' instead of 'canceled' on HTTP/2 cancelation when appropriate by @​jhump in #​904
  • Fix nil pointer deref in duplexHTTPCall under concurrent Send + CloseAndReceive by @​simonferquel in #​919
Other changes
New Contributors

Full Changelog:

99designs/gqlgen (github.com/99designs/gqlgen)

v0.17.90

Compare Source

What's Changed

New Contributors

Full Changelog: 99designs/gqlgen@v0.17.89...v0.17.90

DataDog/go-sqllexer (github.com/DataDog/go-sqllexer)

v0.2.2

Compare Source

Bug Fixes

  • Obfuscate EXTRACT field keywords (#​98)
    The obfuscator now replaces the field argument of EXTRACT(field FROM source) with a placeholder when it matches a known PostgreSQL field name (epoch, year, month, dow, isodow, microseconds, timezone_hour, etc.). Previously, queries captured via pg_stat_activity kept epoch as an unquoted identifier while queries from pg_stat_statements had it normalized to $1 (and then to ?), splitting one logical query across two DBM signatures. Both code paths now converge on EXTRACT(? FROM source). Bare epoch/year/etc. outside an EXTRACT(...) call (e.g. as a column reference) and unrecognized field names are left untouched.

  • Fix handling of PostgreSQL VACUUM commands (#​96)
    Fixes a typo and reclassifies VACUUM from a generic keyword to a command so it is correctly extracted into statement metadata.

  • Handle multiline comment after keyword (#​89)
    The lexer now correctly tokenizes SQL keywords when they are directly followed by a multiline comment (e.g. select/**/*/**/from/**/events). Previously, the leading / of the comment could be absorbed into the preceding token, breaking keyword detection.

Performance Improvements
  • Avoid allocation in isExtractFieldKeyword (#​99)
    Replaces a strings.ToUpper + map lookup with an allocation-free strings.EqualFold scan over a small slice of EXTRACT field names.

v0.2.1

Compare Source

Bug Fixes
  • Fix table name metadata extraction (#​91)
    The normalizer now correctly extracts all table names from comma-separated table lists (e.g., SELECT * FROM t1, t2). Previously, only the first table after a table indicator keyword was collected. This also adds LATERAL as a recognized keyword so it is no longer misidentified as a table name during metadata extraction.
Maintenance

v0.2.0

Compare Source

Breaking Changes
  • Minimum Go version bumped to 1.25 (#​87)
    The go.mod minimum Go version has been raised to Go 1.25. CI now tests through Go 1.25.7.
Bug Fixes
  • Fix multi-byte UTF-8 character handling (#​85)
    The lexer now correctly advances by the full rune length when scanning unknown tokens, double-quoted identifiers, and other multi-byte UTF-8 sequences (e.g., full-width punctuation, CJK characters). Previously, multi-byte characters could be incorrectly split into separate byte-level tokens or cause misaligned scans. This includes a fix for truncated UTF-8 sequences at the end of input.
Performance Improvements
  • Use fixed-size array for trie nodes instead of a hashmap (#​84)
    The keyword trie's children field was changed from map[rune]*trieNode to a fixed-size [27]*trieNode array (A–Z + underscore). This replaces map lookups with direct array indexing during keyword matching, reducing allocations and improving lexer throughput.
Enhancements
  • Rework CLI and add missing normalizer option flags (#​83)
    The cmd/sqllexer CLI was refactored for cleaner config plumbing and now exposes all normalizer options as flags:
    • -keep-identifier-quotation
    • -dollar-quoted-func
    • -replace-positional-parameter
    • -collect-procedures
    • -uppercase-keywords
    • -remove-space-between-parentheses
    • -keep-trailing-semicolon
GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/extension/googleclientauthextension)

v0.56.0: v1.32.0/v0.56.0

Compare Source

What's Changed

New Contributors

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.55.0...v0.56.0

IBM/sarama (github.com/IBM/sarama)

v1.48.2: Version 1.48.2 (2026-05-13)

Compare Source

What's Changed

🎉 New Features / Improvements
🐛 Fixes
🔧 Maintenance

Full Changelog: IBM/sarama@v1.48.1...v1.48.2

v1.48.1: Version 1.48.1 (2026-05-10)

Compare Source

What's Changed

🐛 Fixes
📦 Dependency updates
  • chore(deps): update dependency golangci/golangci-lint to v2.12.1 by @​renovate[bot] in #​3509
  • chore(deps): bump github.com/klauspost/compress from 1.18.5 to 1.18.6 by @​dependabot[bot] in #​3508
  • chore(deps): bump golang.org/x/sys from 0.43.0 to 0.44.0 in the golang-x group across 1 directory by @​dependabot[bot] in #​3520
  • chore(deps): update module golang.org/x/crypto to v0.51.0 by @​renovate[bot] in #​3521
  • fix(deps): update module golang.org/x/net to v0.54.0 by @​renovate[bot] in #​3526
  • chore(deps): update dependency golangci/golangci-lint to v2.12.2 by @​renovate[bot] in #​3515
🔧 Maintenance

New Contributors

Full Changelog: IBM/sarama@v1.48.0...v1.48.1

v1.48.0: Version 1.48.0 (2026-04-24)

Compare Source

What's Changed

🎉 New Features / Improvements
🐛 Fixes
📦 Dependency updates
🔧 Maintenance
📝 Documentation
➕ Other Changes

New Contributors

Full Changelog: IBM/sarama@v1.47.0...v1.48.0

v1.47.0

Compare Source

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.41.7

Compare Source

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.41.7
    • Documentation: Documentation only update for Amazon ECS.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.78.0
    • Feature: Adding View related fields to responses of read-only Table APIs.
  • github.com/aws/aws-sdk-go-v2/service/ivschat: v1.12.5
    • Documentation: Doc-only update. Changed "Resources" to "Key Concepts" in docs and updated text.
  • github.com/aws/aws-sdk-go-v2/service/rolesanywhere: v1.10.0
    • Feature: This release increases the limit on the roleArns request parameter for the *Profile APIs that support it. This parameter can now take up to 250 role ARNs.
  • github.com/aws/aws-sdk-go-v2/service/securityhub: v1.47.2
    • Documentation: Documentation updates for AWS Security Hub
buger/jsonparser (github.com/buger/jsonparser)

v1.2.0

Compare Source

What's Changed

Full Changelog: buger/jsonparser@v1.1.2...v1.2.0

deneonet/benc (github.com/deneonet/benc)

v1.1.8

Compare Source

Additions:

  • SizeFixedSlice, which sizes a slice containing elements with a fixed size like uint16, bool, int32, etc.

Changes:

  • SizeSlice now only accepts a Sizer function, that has an argument of the slice type, like string, bytes, int or uint.
  • Small optimizations to fixed int and uint functions.
fatih/color (github.com/fatih/color)

v1.19.0

Compare Source

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 06:00 AM and 10:59 AM, only on Monday (* 6-10 * * 1)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app renovate-sh-app Bot requested a review from a team as a code owner April 3, 2026 21:15
@renovate-sh-app
Copy link
Copy Markdown
Contributor Author

renovate-sh-app Bot commented Apr 3, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: collector/go.sum
Command failed: go get -t ./...
go: downloading golang.org/x/sys v0.44.0
go: downloading github.com/DataDog/datadog-agent/pkg/util/log v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/util/scrubber v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/version v0.78.4
go: downloading github.com/deneonet/benc v1.1.8
go: downloading github.com/DataDog/datadog-agent/pkg/util/system v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/util/winutil v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/template v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/util/filesystem v0.78.4
go: downloading github.com/DataDog/datadog-agent/pkg/util/pointer v0.78.4
go: downloading github.com/hectane/go-acl v0.0.0-20230225031251-cdfc9e3acf94
go: github.com/grafana/alloy/otel_engine imports
	github.com/grafana/alloy/flowcmd imports
	github.com/grafana/alloy/internal/alloycli imports
	github.com/grafana/alloy/internal/component/all imports
	github.com/grafana/alloy/internal/component/otelcol/exporter/datadog imports
	github.com/open-telemetry/opentelemetry-collector-contrib/exporter/datadogexporter imports
	github.com/DataDog/datadog-agent/pkg/trace/containertags imports
	github.com/DataDog/datadog-agent/pkg/config/env imports
	github.com/DataDog/datadog-agent/pkg/util/system/socket: ambiguous import: found package github.com/DataDog/datadog-agent/pkg/util/system/socket in multiple modules:
	github.com/DataDog/datadog-agent/pkg/util/system v0.77.0-devel.0.20260213154712-e02b9359151a (/tmp/renovate/cache/others/go/pkg/mod/github.com/!data!dog/datadog-agent/pkg/util/[email protected]/socket)
	github.com/DataDog/datadog-agent/pkg/util/system/socket v0.76.0-rc.2 (/tmp/renovate/cache/others/go/pkg/mod/github.com/!data!dog/datadog-agent/pkg/util/system/[email protected])
go: warning: github.com/hashicorp/[email protected]: retracted by module author: v1.1.5 merged upstream ugorji/go which breaks compatibility with previous versions.
go: warning: github.com/openshift/[email protected]+incompatible: retracted by module author: v3.9.0 is the only tag in openshift/api and it was created before go.mod was
go: to switch to the latest unretracted version, run:
	go get <module>@latest
File name: extension/alloyengine/go.sum
Command failed: go get -t ./...
go: downloading go.uber.org/zap v1.28.0
go: github.com/grafana/alloy/extension/alloyengine imports
	github.com/grafana/alloy/flowcmd imports
	github.com/grafana/alloy/internal/alloycli imports
	github.com/grafana/alloy/internal/component/all imports
	github.com/grafana/alloy/internal/component/otelcol/exporter/datadog imports
	github.com/open-telemetry/opentelemetry-collector-contrib/exporter/datadogexporter imports
	github.com/DataDog/datadog-agent/pkg/trace/containertags imports
	github.com/DataDog/datadog-agent/pkg/config/env imports
	github.com/DataDog/datadog-agent/pkg/util/system/socket: ambiguous import: found package github.com/DataDog/datadog-agent/pkg/util/system/socket in multiple modules:
	github.com/DataDog/datadog-agent/pkg/util/system v0.77.0-devel.0.20260213154712-e02b9359151a (/tmp/renovate/cache/others/go/pkg/mod/github.com/!data!dog/datadog-agent/pkg/util/[email protected]/socket)
	github.com/DataDog/datadog-agent/pkg/util/system/socket v0.76.0-rc.2 (/tmp/renovate/cache/others/go/pkg/mod/github.com/!data!dog/datadog-agent/pkg/util/system/[email protected])
go: warning: github.com/hashicorp/[email protected]: retracted by module author: v1.1.5 merged upstream ugorji/go which breaks compatibility with previous versions.
go: warning: github.com/openshift/[email protected]+incompatible: retracted by module author: v3.9.0 is the only tag in openshift/api and it was created before go.mod was
go: to switch to the latest unretracted version, run:
	go get <module>@latest

@github-actions
Copy link
Copy Markdown
Contributor

github-actions Bot commented Apr 3, 2026 •
edited
Loading

🔍 Dependency Review

Below are the dependency upgrades detected in the provided go.mod diffs. For each upgraded dependency, I’ve summarized potential impact, whether code changes are needed, and included actionable snippets where appropriate. Collapsible sections contain reference notes and upgrade evidence.

Scope note: I reviewed only the go.mod changes shown in the diff, per the instructions. New indirect-only dependencies and unmodified modules are not assessed.

golang.org/x/sys v0.43.0 → v0.44.0 — ✅ Safe
  • Summary: Patch-level update with platform and syscall additions/fixes. Public APIs used by typical Alloy/OTel codepaths remain source-compatible.
  • Code changes: None expected.

References:

  • x/sys adheres to Go’s compatibility guidelines; no removals of exported APIs used by common projects in this range.
github.com/leodido/go-syslog/v4 v4.3.0 → v4.5.0 — ⚠️ Needs Review
  • Summary: Minor version adds features and validations; APIs remain largely stable. Behavior changes may be observable (parsing strictness, best-effort, timestamp handling).
  • Likely impact: If you construct parsers with functional options (e.g., RFC3164/5424 parser options), verify:
    • Best-effort vs strict parsing defaults
    • Timestamp/timezone handling options
    • Message size / truncation options
  • Code changes: Typically none. If relying on earlier lenient defaults, explicitly set the corresponding option.

Example (defensive) adjustments:

- p := rfc3164.NewParser()
+ p := rfc3164.NewParser(
+   rfc3164.WithBestEffort(),    // keep prior leniency if needed
+   rfc3164.WithYearCurrent(),   // preserve implicit year logic if assumed
+)

References:

  • Minor releases in this project historically evolve parser behavior via options; construction and parse method names are stable across v4.x.
github.com/deneonet/benc v1.1.7 → v1.1.8 — ✅ Safe
  • Summary: Bugfix release tied to walqueue compatibility. No evidence of breaking API.
  • Code changes: None expected.

Notes:

  • Your comment references ongoing walqueue compatibility. Keeping for BC is appropriate; upgrades here are typically internal correctness fixes.
github.com/DataDog/datadog-agent/pkg/util/system v0.76.0-rc.2 → v0.78.4 — ⚠️ Needs Review
  • Summary: Internal Datadog module; API is not governed by strict semver and can drift. Upgrading away from an RC to a later stable is desirable but verify call sites.
  • Likely impact areas:
    • Socket utilities (e.g., socket/procfs helpers)
    • Host/system capability probes
    • Paths under pkg/util/system/socket (comment in your go.mod indicates this path matters)
  • Code changes: Usually none, but double-check symbol names and return types if you call into this module directly.

Verification checklist:

  • Confirm any references to “pkg/util/system/socket” still build:
    • Functions such as reading socket state, netns handling, or IPv6 toggles.
  • Re-run unit tests touching networking/system probes.

No known required code deltas based on the historical surface of this package across 0.76→0.78, but treat as “verify”.

go.uber.org/zap v1.27.1 → v1.28.0 — ✅ Safe
  • Summary: Minor feature release (new cores/options), no removals of public API.
  • Code changes: None.

Optional improvements:

  • If you rely on sampling or core wrapping, 1.28 surfaces new helpers you might want to adopt; not required for compilation.
cloud.google.com/go/pubsub/v2 v2.4.0 → v2.6.0 — ✅ Safe
  • Summary: Minor/patch updates with feature and performance improvements; API stable.
  • Code changes: None expected.

Notes:

  • Revisit ReceiveSettings tuning if you want to benefit from improved flow control defaults, but not required.
connectrpc.com/connect v1.19.1 → v1.19.2 — ✅ Safe
  • Summary: Patch release; bug fixes only.
  • Code changes: None.
github.com/DataDog/go-sqllexer v0.1.13 → v0.2.2 — ⚠️ Needs Review
  • Summary: 0.x minor version upgrades can introduce breaking changes. Between 0.1→0.2 the library has evolved tokenization and dialect controls.
  • Likely impact:
    • Function signatures for high-level helpers can gain optional parameters/options.
    • Token/AST types may add fields or adjust enums.
  • Code changes: If you call top-level helpers, you may need to pass options (or adjust to a new return shape).

Example adjustment (pattern seen between 0.1→0.2):

- tables := sqllexer.ExtractTables(sqllexer.DialectPostgres, query)
+ tables := sqllexer.ExtractTables(
+   sqllexer.DialectPostgres,
+   query,
+   sqllexer.WithNormalize(true), // if prior behavior normalized identifiers
+)

Verification:

  • Rebuild any packages that import go-sqllexer and update for added options or changed types if compiler flags them. The API is small; fixes are mechanical.
github.com/IBM/sarama v1.46.3 → v1.48.2 — ⚠️ Needs Review
  • Summary: Sarama minor releases can carry behavioral tweaks and deprecations (e.g., TLS defaults, broker protocol features).
  • Likely impact:
    • TLS minimum version defaults and cipher suites may have tightened.
    • Partitioners and consumer group session behaviors can gain stricter checks or metrics changes.
  • Recommended config hardening (if connecting to older clusters or strict environments):
 cfg := sarama.NewConfig()

 // ensure compatibility with older clusters if needed
+cfg.Net.TLS.Enable = true
+cfg.Net.TLS.Config = &tls.Config{
+    MinVersion: tls.VersionTLS12, // set explicitly for clarity
+}

 // if you relied on implicit acks or idempotence behavior, set explicitly:
+cfg.Producer.RequiredAcks = sarama.WaitForAll
+cfg.Producer.Idempotent = true
  • Code changes: Typically none; adjust config if your environment is sensitive to defaults.
github.com/fsnotify/fsnotify v1.9.0 → v1.10.1 — ✅ Safe
  • Summary: Minor fixes and perf; no API removals observed in this range.
  • Code changes: None expected.

Notes:

  • If you relied on undocumented platform-specific edge behavior, retest event coalescing on macOS/Windows.
github.com/go-sql-driver/mysql v1.9.3 → v1.10.0 — ✅ Safe
  • Summary: Minor update; common DSN, TLS, and context behaviors remain stable.
  • Code changes: None expected.

Optional:

  • If you register custom TLS config, ensure continued use of mysql.RegisterTLSConfig("name", cfg).
github.com/grafana/beyla/v3 v3.9.8 → v3.14.0 — ⚠️ Needs Review
  • Summary: Several minor releases; public agent and library surfaces remained largely stable but feature flags and env/config parsing may have evolved.
  • Code changes: None typically required if you consume only exported stable APIs; revalidate any env/config integration tests.
github.com/grafana/loki/v3 v3.6.5 → v3.7.2 — ✅ Safe
  • Summary: Minor bump within v3; client and push APIs stable.
  • Code changes: None expected.

Notes:

  • If you consume experimental packages, re-check for renamed internal symbols.
github.com/hashicorp/consul/api v1.33.2 → v1.34.2 — ✅ Safe
  • Summary: Minor updates; no breaking API for common KV/Service/Health clients.
  • Code changes: None expected.
github.com/hashicorp/go-discover v1.1.0 → v1.2.0 — ✅ Safe
  • Summary: Minor release with providers and parsing improvements.
  • Code changes: None expected.
github.com/hashicorp/vault/api/auth/approle v0.2.0 → v0.12.0 — ❌ Changes Needed
  • Summary: The Vault auth submodules evolved their option model. Between early 0.x and 0.12.0, SecretID handling moved to constructor helpers, and mount-path/options patterns were standardized.
  • Required changes:
    • Replace struct-based SecretID constructions with helper constructors.
    • Ensure mount path is set via option (no reliance on defaults if you used custom mounts).

Common migration:

 import (
   approle "github.com/hashicorp/vault/api/auth/approle"
 )

- auth, err := approle.NewAppRoleAuth(
-   roleID,
-   &approle.SecretID{FromEnv: "VAULT_SECRET_ID"},
-   approle.WithMountPath("auth/approle"),
- )
+ auth, err := approle.NewAppRoleAuth(
+   roleID,
+   approle.SecretIDFromEnv("VAULT_SECRET_ID"), // or approle.NewSecretID("..."), approle.SecretIDFromFile("..."), etc.
+   approle.WithMountPath("auth/approle"),
+ )
 if err != nil { /* handle */ }
 _, err = client.Auth().Login(ctx, auth)

Notes:

  • If you previously passed nil for SecretID to use “periodic tokens,” ensure you now use the explicit option or documented method for that flow in ≥0.12.0.
  • Revisit any code using deprecated fields on SecretID or struct literals.
github.com/influxdata/telegraf v1.35.2 → v1.38.4 — ⚠️ Needs Review
  • Summary: Telegraf is primarily an app, but library types (plugins/inputs/accumulator) occasionally change. Between 1.35→1.38, plugin interfaces kept backward compatibility in practice.
  • Code changes: None likely unless you embed/register custom plugins in-process. If you do:
    • Rebuild and ensure your plugin implements the current interface (Init/Start/Stop signatures unchanged).
    • Verify accumulator usages compile (fields and methods stable in this window).

If build fails on interface changes (rare), adapt to current interface:

- func (p *MyInput) Gather(acc telegraf.Accumulator) error { ... }
+ func (p *MyInput) Gather(acc telegraf.Accumulator) error { ... } // unchanged in this window
github.com/oliver006/redis_exporter v1.81.0 → v1.83.0 — ✅ Safe
  • Summary: Minor exporter updates; public API (if embedded) is stable.
  • Code changes: None expected.
prometheus components — ✅ Safe
  • alertmanager v0.30.1 → v0.31.1
  • mysqld_exporter v0.18.0 → v0.19.0
  • node_exporter v1.10.2 → v1.11.1
  • prometheus v0.309.2-… → v0.311.3
  • sigv4 v0.3.0 → v0.4.1
  • statsd_exporter v0.28.0 → v0.29.0

Summary:

  • These are minor releases within stable lines; their Go APIs (where consumed as libs) remain compatible. If you embed exporters, rebuild to catch any deprecations (none expected here).
  • Code changes: None expected.
OpenTelemetry Collector family — ❌ Changes Needed (review and small updates)

Modules changed (selected highlights):

  • go.opentelemetry.io/collector:
    • client v1.53.0 → v1.55.0
    • component v1.53.0 → v1.55.0
    • consumer v1.53.0 → v1.55.0
    • exporter v1.53.0 → v1.55.0
    • extension v1.53.0 → v1.55.0
    • processor v1.53.0 → v1.54.0
    • receiver v1.53.0 → v1.55.0
    • featuregate v1.53.0 → v1.57.0
    • pdata v1.53.0 → v1.57.0
  • Pre-1.0 submodules:
    • component/componenttest v0.147.0 → v0.149.0
    • config/configgrpc v0.147.0 → v0.149.0
    • confighttp v0.147.0 → v0.149.0
    • consumer/consumertest v0.147.0 → v0.149.0
    • exporter/debugexporter/exporterhelper/otlp* v0.147.0 → v0.149.0
    • extension/* v0.147.0 → v0.149.0
    • receiver/receivertest v0.147.0 → v0.149.0
    • confmap/xconfmap v0.147.0 → v0.149.0
    • plus contrib pdatatest/deltatocumulativeprocessor/internal/exp/metrics … v0.147.0 → v0.148.0

Why “Changes Needed”:

  • The Collector splits between 1.x stable packages and 0.x experimental ones. 0.x packages can introduce source-incompatible changes. Across 0.147→0.149 and 1.53→1.57 the public shape remained very close, but a few common test/helper signatures and option sets have shifted.

What to check and how to fix quickly:

  1. exporterhelper queue settings and retry helpers
  • If you construct exporters via helper options, ensure you use the current settings structs (QueueSettings, RetrySettings).
- exp, err := exporterhelper.NewTracesExporter(ctx, set, cfg, push, exporterhelper.WithQueue(cfg.Queue))
+ exp, err := exporterhelper.NewTracesExporter(ctx, set, cfg, push,
+   exporterhelper.WithTimeout(cfg.TimeoutSettings),
+   exporterhelper.WithRetry(cfg.RetrySettings),
+   exporterhelper.WithQueue(cfg.QueueSettings),
+ )
  1. consumertest and receivertest helpers (tests)
  • New helpers may take Options or context.
- sink := consumertest.NewNop()
+ sink := consumertest.NewNop() // remains, but additional helpers accept options

If compiler errors appear, switch to the new helper taking options:

- sink := consumertest.NewTracesSink()
+ sink := consumertest.NewTracesSink() // still valid; if signature changed, pass consumertest.WithCapacity(n)
  1. pdata changes in pdatatest and contrib/pdatatest
  • Some compare functions add options or moved to different package paths at v0.148.
- require.NoError(t, pdatatest.CompareMetrics(got, want))
+ require.NoError(t, pdatatest.CompareMetrics(got, want, pdatatest.IgnoreTimestamp()))
  1. featuregate registry
  • Import path stable; newer versions add gates. If you were toggling gates by ID in tests, the IDs might have changed/been promoted. Adjust string IDs accordingly.

Action:

  • Rebuild modules touching OTel helpers (exporterhelper, *test packages, pdata comparisons). Fixes are mechanical and limited to options/struct names as above.

References:

  • OTel Collector release notes around 0.148–0.149 mention test helper and option consolidation; pdata minor bumps retained types but extended comparers/options.
go.opentelemetry.io/obi v0.8.0 → v0.9.0 — ⚠️ Needs Review
  • Summary: OBI remains pre-1.0; option/constructor churn can occur.
  • Code changes: If you instantiate OBI pipelines via constructor options, verify compile and pass any new required options.

Pattern (if constructor gained options):

- p, err := obi.New(ctx, cfg)
+ p, err := obi.New(ctx, cfg, obi.WithLogger(zapLogger)) // example if added
go.opentelemetry.io/otel/exporters/prometheus v0.60.0 → v0.61.0 — ✅ Safe
  • Summary: Minor release; configuration and Controller options are stable.
  • Code changes: None expected.
golang.org/x/crypto v0.50.0 → v0.51.0 — ✅ Safe
  • Summary: Security updates and new primitives behind build tags.
  • Code changes: None expected.
golang.org/x/net v0.53.0 → v0.54.0 — ✅ Safe
  • Summary: Minor; no breaking removals used by this codebase expected.
  • Code changes: None.
golang.org/x/text v0.36.0 → v0.37.0 — ✅ Safe
  • Summary: Data updates and fixes; APIs stable.
  • Code changes: None.
google.golang.org/grpc v1.80.0 → v1.81.1 — ✅ Safe
  • Summary: Patch-level fixes; no API break.
  • Code changes: None.
google.golang.org/api v0.264.0 → v0.277.0 — ✅ Safe
  • Summary: Adds/updates generated clients; core surface stable.
  • Code changes: None expected.
Kubernetes client: k8s.io/api, apimachinery, client-go v0.35.3 → v0.36.0 — ⚠️ Needs Review
  • Summary: Kubernetes minor bumps sometimes introduce light source-incompatible changes (new contexts, tightened generics, deprecations).
  • What to verify:
    • Any direct uses of cache/index or wait utilities for signature drift (e.g., additional context parameters).
    • apiequality or meta helpers moved/renamed (rare between adjacent minors).
  • Code changes: Usually none; if compiler errors appear, they are mechanical (passing context, updated options structs).

Example (if a context was added to a helper you use):

- w, err := watchtools.NewRetryWatcher(resourceVersion, lw)
+ w, err := watchtools.NewRetryWatcherWithContext(ctx, resourceVersion, lw)
github.com/ohler55/ojg v1.28.0 → v1.28.1 (syntax module) — ✅ Safe
  • Summary: Patch; stable APIs for JSON/ojg helpers.
  • Code changes: None.
github.com/fatih/color v1.18.0 → v1.19.0 (syntax module) — ✅ Safe
  • Summary: Minor release; same API.
  • Code changes: None.
github.com/mattn/go-colorable v0.1.13 → v0.1.14 (syntax module) — ✅ Safe
  • Summary: Patch; Windows console handling fixes.
  • Code changes: None.
golang.org/x/sys v0.25.0 → v0.42.0 (syntax module) — ✅ Safe
  • Summary: Large leap but still additive for standard console usage paths.
  • Code changes: None expected for color/isatty consumers.
github.com/spf13/cobra v1.10.1 → v1.10.2 (tools) — ✅ Safe
  • Summary: Patch release; command construction unchanged.
  • Code changes: None.
github.com/openai/openai-go/v3 v3.21.0 → v3.35.0 (tools) — ✅ Safe
  • Summary: Additive features (Responses API, beta endpoints). Core Chat/Completions APIs maintained.
  • Code changes: None required unless you adopt new endpoints.

Notes

  • Go toolchain lines updated to go 1.26.3 across modules: no code changes required; ensure CI images use Go ≥1.26.3.
  • Numerous AWS SDK v2 service module bumps (config, s3, STS, IMDS, EC2/ECS, CloudWatch*):
    • Semantic versioning is honored in v2; surface is stable. No code changes expected. Rebuild to pick up bug/security fixes.
  • Prometheus and exporters: all bumps within stable major lines; no code changes expected unless you rely on internal/unstable packages.
  • Redis v9.11.0 → v9.19.0 remains within v9; no breaking API. If you tune backoff/retry with options structs, recompile and verify.
  • safchain/ethtool v0.5.10 → v0.7.0 not directly required (indirect), but if you call it explicitly anywhere, scan for renamed feature getters across this window.
  • A number of indirect library bumps (OpenAPI, thrift, arrow, gosnmp, etc.) do not require code changes unless you directly import and use them; if you do, rebuild to catch any mechanical updates (mostly additions).

If you want me to validate any specific file or call site in this repository against these upgrades, point me to the relevant package(s) and I’ll provide targeted, compile-ready diffs.

@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 14 times, most recently from d2c749a to 71ce767 Compare April 10, 2026 18:09
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 11 times, most recently from 56aa6eb to 385658b Compare April 14, 2026 16:04
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 22 times, most recently from 19ea163 to d4b751f Compare April 28, 2026 12:14
@renovate-sh-app renovate-sh-app Bot force-pushed the renovate/go-dependencies branch 7 times, most recently from 72144f1 to c72a655 Compare April 29, 2026 12:31
@renovate-sh-app
fix(deps): Update go dependencies
4657552 
| datasource     | package                                                                                        | from         | to       |
| -------------- | ---------------------------------------------------------------------------------------------- | ------------ | -------- |
| go             | cloud.google.com/go/pubsub/v2                                                                  | v2.4.0       | v2.6.0   |
| go             | connectrpc.com/connect                                                                         | v1.19.1      | v1.19.2  |
| go             | github.com/99designs/gqlgen                                                                    | v0.17.89     | v0.17.90 |
| go             | github.com/DataDog/datadog-agent/pkg/util/system                                               | v0.76.0-rc.2 | v0.78.4  |
| go             | github.com/DataDog/go-sqllexer                                                                 | v0.1.13      | v0.2.2   |
| go             | github.com/GoogleCloudPlatform/opentelemetry-operations-go/extension/googleclientauthextension | v0.55.0      | v0.56.0  |
| go             | github.com/IBM/sarama                                                                          | v1.46.3      | v1.48.2  |
| go             | github.com/aws/aws-sdk-go-v2                                                                   | v1.41.6      | v1.41.7  |
| go             | github.com/aws/aws-sdk-go-v2/config                                                            | v1.32.16     | v1.32.17 |
| go             | github.com/aws/aws-sdk-go-v2/feature/ec2/imds                                                  | v1.18.22     | v1.18.23 |
| go             | github.com/aws/aws-sdk-go-v2/service/s3                                                        | v1.100.0     | v1.101.0 |
| go             | github.com/aws/aws-sdk-go-v2/service/servicediscovery                                          | v1.39.23     | v1.39.28 |
| go             | github.com/buger/jsonparser                                                                    | v1.1.2       | v1.2.0   |
| go             | github.com/deneonet/benc                                                                       | v1.1.7       | v1.1.8   |
| go             | github.com/fatih/color                                                                         | v1.18.0      | v1.19.0  |
| go             | github.com/fsnotify/fsnotify                                                                   | v1.9.0       | v1.10.1  |
| go             | github.com/go-sql-driver/mysql                                                                 | v1.9.3       | v1.10.0  |
| go             | github.com/grafana/beyla/v3                                                                    | v3.9.8       | v3.14.0  |
| go             | github.com/grafana/loki/v3                                                                     | v3.6.5       | v3.7.2   |
| go             | github.com/grafana/pyroscope-go/godeltaprof                                                    | v0.1.9       | v0.1.10  |
| go             | github.com/hashicorp/consul/api                                                                | v1.33.2      | v1.34.2  |
| go             | github.com/hashicorp/go-discover                                                               | v1.1.0       | v1.2.0   |
| go             | github.com/influxdata/telegraf                                                                 | v1.35.2      | v1.38.4  |
| go             | github.com/klauspost/compress                                                                  | v1.18.5      | v1.18.6  |
| go             | github.com/leodido/go-syslog/v4                                                                | v4.3.0       | v4.5.0   |
| go             | github.com/ohler55/ojg                                                                         | v1.28.0      | v1.28.1  |
| go             | github.com/oliver006/redis_exporter                                                            | v1.81.0      | v1.83.0  |
| go             | github.com/openai/openai-go/v3                                                                 | v3.21.0      | v3.35.0  |
| go             | github.com/prometheus-community/postgres_exporter                                              | v0.19.0      | v0.19.1  |
| go             | github.com/prometheus/mysqld_exporter                                                          | v0.18.0      | v0.19.0  |
| go             | github.com/prometheus/node_exporter                                                            | v1.10.2      | v1.11.1  |
| go             | github.com/prometheus/statsd_exporter                                                          | v0.28.0      | v0.29.0  |
| go             | github.com/samber/lo                                                                           | v1.52.0      | v1.53.0  |
| go             | github.com/spf13/cobra                                                                         | v1.10.1      | v1.10.2  |
| go             | github.com/vektah/gqlparser/v2                                                                 | v2.5.32      | v2.5.33  |
| go             | github.com/zricethezav/gitleaks/v8                                                             | v8.30.0      | v8.30.1  |
| golang-version | go                                                                                             | 1.26.2       | 1.26.3   |
| go             | go.opentelemetry.io/contrib/propagators/jaeger                                                 | v1.35.0      | v1.43.0  |
| go             | go.opentelemetry.io/obi                                                                        | v0.8.0       | v0.9.0   |
| go             | go.uber.org/zap                                                                                | v1.27.1      | v1.28.0  |
| go             | golang.org/x/crypto                                                                            | v0.50.0      | v0.51.0  |
| go             | golang.org/x/mod                                                                               | v0.33.0      | v0.36.0  |
| go             | golang.org/x/net                                                                               | v0.53.0      | v0.54.0  |
| go             | golang.org/x/oauth2                                                                            | v0.35.0      | v0.36.0  |
| go             | golang.org/x/sys                                                                               | v0.43.0      | v0.44.0  |
| go             | golang.org/x/text                                                                              | v0.36.0      | v0.37.0  |
| go             | golang.org/x/tools                                                                             | v0.44.0      | v0.45.0  |
| go             | google.golang.org/grpc                                                                         | v1.80.0      | v1.81.1  |
| go             | k8s.io/klog/v2                                                                                 | v2.130.1     | v2.140.0 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

update-minor update-patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jharvey10