Skip to content

build(deps): bump the go-minor-patch group across 1 directory with 9 updates - #131

Closed
dependabot[bot] wants to merge 44 commits into
mainfrom
dependabot/go_modules/collector/go-minor-patch-4d7a01f0da
Closed

dependabot[bot] wants to merge 44 commits into
mainfrom
dependabot/go_modules/collector/go-minor-patch-4d7a01f0da

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 5, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-minor-patch group with 9 updates in the /collector directory:

Package From To
github.com/nats-io/nats-server/v2 2.14.6 2.15.0
github.com/nats-io/nats.go 1.53.1 1.54.0
go.opentelemetry.io/collector/component 1.66.0 1.68.0
go.opentelemetry.io/collector/consumer 1.66.0 1.68.0
go.opentelemetry.io/collector/consumer/consumertest 0.160.0 0.162.0
go.opentelemetry.io/collector/otelcol 0.160.0 0.162.0
go.opentelemetry.io/collector/pdata 1.66.0 1.68.0
go.opentelemetry.io/collector/processor 1.66.0 1.68.0
go.opentelemetry.io/proto/otlp 1.11.0 1.11.1

Updates github.com/nats-io/nats-server/v2 from 2.14.6 to 2.15.0

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.0

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x. This release also contains all changes up to and including v2.14.7.

Go Version

Added

JetStream

  • Desired state metalayer (#8432, #8437, #8439, #8443, #8452, #8460, #8476, #8576, #8598, #8602, #8603)
  • Cancel stream move endpoint (#8476)
  • Evacuate endpoints (#8443)
    • The new $JS.API.SERVER.EVACUATE endpoint can safely evacuate streams, and any consumers on those streams, from a node
    • The new $JS.API.STREAM.PEER.EVACUATE.* endpoint can safely evacuate a peer, and any consumers on that peer, from a stream
    • These operations combined allow for maintenance operations with full transfer of data and state without having to peer-remove first
    • ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-62.md
  • Metalayer rescue for disaster recovery (#8408)
  • Stream backup and restore v2 (#7882, #8584, #8591, #8604)
  • Detect source stream recreation (#8384)
    • The server now detects a source stream being recreated, restarting the sourcing back from the beginning, ensuring new messages are sourced
  • Stream source indexing (#8282, #8516, #8283)
    • Restarts and leader changes previously required expensive backward scans through the stream to find the last sourced indices. These are now persisted in an index for instant lookup.
  • Domain-prefixed JS API in system account (#8429)
    • When a system account is bridged between the hub and a leaf node, the domain-prefixed JS API can now be used to operate on the leaf node while directly connected to the hub

Changed

JetStream

  • Streams now have a default limit of 1000 consumers, unless max_consumers is specified in the stream config or account limits (#8337, #8566)
    • Applications planning to use a large number of consumers on a stream should configure max_consumers in the stream config or account limits to an appropriately high number
    • The server-wide default of 1000 can be overridden by setting default_max_consumers in the JetStream limits, or can be disabled by setting to -1
    • This limit does not affect existing consumers and will not result in consumer deletions, only the creation of new consumers is prevented
  • Sync changes for replicated streams (#8447)
    • When the sync_interval is set to always, replicated streams now sync their WAL entries but no longer sync upper stream layer writes
    • The synced log allows the stream to recover safely, but removing unnecessary syncs from the upper stream layer dramatically improves performance

... (truncated)

Commits
  • eb76367 Release v2.15.0
  • 8f3f31b [FIXED] Config reload disconnects operator mode clients sending an nkey (#8609)
  • 7d77240 [FIXED] Stream scale down into a missing account tier was accepted (#8608)
  • e46d21f [FIXED] Concurrent account updates invalidating stream imports (#8610)
  • 2ecd77a De-flake TestJetStreamClusterHardKillAfterStreamAdd
  • 901df78 De-flake TestJetStreamClusterAccountMaxConnectionsReconnect
  • e133a1f De-flake TestJetStreamClusterMessageTTLCatchup
  • 2990f6c [FIXED] Concurrent account updates invalidating stream imports
  • 51fd55f De-flake TestJWTImportsOnServerRestartAndClientsReconnect
  • 6a82cf9 De-flake TestNoRaceRouteSendSubs
  • Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.53.1 to 1.54.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.54.0

Changelog

This release raises the minimum supported Go version to 1.26 and adds support for nats-server v2.15 stream and consumer info fields.

ADDED

  • Core NATS:
    • nats.MultipathTCP() option to enable or disable MPTCP for outbound connections (#2145)
    • Conn.ConnectedDomain() to read the JetStream domain advertised by the connected server (#2139)
  • JetStream:
    • ClusterInfo.Desired, PeerInfo.Peer, PeerInfo.Pending and StreamSourceInfo.Seq in stream and consumer info, reported by nats-server v2.15 (#2144)
    • Nats-Schedule-Rollup header const and WithScheduleRollup() publish option (#2142)

FIXED

  • Core NATS:
    • Panic in DecodeHeadersMsg on inline status tokens shorter than 3 characters. Thanks @​nikitha-m for the contribution (#2101)
    • Data race on Subscription.sid between applyNewSID and removeSub (#2122)
  • JetStream:
    • Messages() iterator going silent after a reconnect that completes between Next() calls. Thanks @​1995parham for the contribution (#2135)
    • Legacy ordered consumer silently losing messages when the subscription hits its pending limits (#2137)
    • Legacy ordered consumer reset resurrecting an unsubscribed or draining subscription (#2133)

IMPROVED

  • Core NATS:
    • Avoid allocation when parsing header message arguments with a fifth token. Thanks @​0xAozora for the contribution (#2130)
    • Preallocate reply subject buffers. Thanks @​0xAozora for the contribution (#2123)
  • JetStream:
    • Prevent doErr closure escaping to the heap in async publish reply handling. Thanks @​0xAozora for the contribution (#2127)
    • Fix typo in Publisher interface methods comment. Thanks @​sreeram77 for the contribution (#2120)
  • Minimum Go version is now 1.26 (#2146)
  • Bump klauspost/compress to v1.20.0 and nkeys to v0.4.16 (#2117, #2146)
  • Tests run locally without docker via an in-process ntf tester (#2131), and CI now runs against nats-server v2.15.0 (#2146)
  • Fix flaky cluster restart tests (#2141) and list consumers test against latest server (#2138)

Complete Changes

nats-io/nats.go@v1.53.1...v1.54.0

Commits
  • 7a8404a Release v1.54.0 (#2148)
  • 240fb1f [IMPROVED] Bump dependencies and update server version in CI (#2146)
  • 203d828 [FIXED] Panic in DecodeHeadersMsg on status tokens shorter than 3 characters ...
  • dc92fca [FIXED] Ordered consumer silently losing messages on slow consumer (#2137)
  • e18cea8 [IMPROVED] Prevent doErr closure escaping to heap (#2127)
  • d8d8c09 [ADDED] nats.MultipathTCP() for enabling or disabling MPTCP (#2145)
  • e95c424 [FIXED] Flaky cluster restart tests: waitForStream must see a stream leader (...
  • e3abbf4 [ADDED] Nats-Schedule-Rollup header const and publish options (#2142)
  • f1289db [ADDED] Desired state, peer ID/pending and source seq in stream and consumer ...
  • b84f783 Ignore Claude Code local files and .worktrees (#2140)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/component from 1.66.0 to 1.68.0

Changelog

Sourced from go.opentelemetry.io/collector/component's changelog.

v1.68.0/v0.162.0

💡 Enhancements 💡

  • cmd/mdatagen: Allow config metadata authors to choose configoptional.Some or configoptional.Default for generated optional fields (#15977) Set go_struct.optional_mode: default to generate an optional object configuration section with a fallback default while keeping it absent until configured. Omitting optional_mode preserves the existing configoptional.Some behavior.

  • pkg/config/configgrpc: Migrate core types of common settings for a gRPC client to schema-based configuration generated by mdatagen. (#15967)

  • pkg/exporterhelper: Add NewDefaultBatchConfig to build a BatchConfig with default values, including the partition cache_size and idle_timeout defaults. (#14526, #15894)

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/xpdata: Move pdata hash APIs from the contrib repo (#15914)

🧰 Bug fixes 🧰

  • cmd/schemagen: Fix RefResolver mutating shared, cached type definitions with per-occurrence annotations, which caused generated schemas to have incorrect (and run-to-run nondeterministic) description/x-optional/x-pointer values whenever multiple fields referenced the same type. (#15984)
  • pkg/pdata: Fix pcommon.Value.CopyTo to deep-copy ValueTypeBytes values instead of sharing the backing array (#15621) The bytes oneof field in CopyAnyValue was assigned directly, so the copy and source shared the same []byte. This also affected Map.CopyTo and Slice.CopyTo, which delegate to CopyAnyValue.

v1.67.0/v0.161.0

🛑 Breaking changes 🛑

  • cmd/mdatagen: remove deprecated func DefaultMetricsBuilderConfig (#15854)

  • pkg/service: Remove the deprecated extensioncapabilities.ConfigWatcher interface, Extensions.NotifyConfig, and service.Settings.CollectorConf. (#15399) These were deprecated in v0.155.0. Use ConfigSnapshotWatcher, NotifyConfigSnapshot, and Settings.ConfigSnapshot instead.

  • pkg/service: Remove deprecated config option LoggingOptions (#15919)

💡 Enhancements 💡

  • pkg/config/confignet: Migrate network core types to schema-based configuration generated by mdatagen. (#15706)

🧰 Bug fixes 🧰

  • pkg/configoptional: Properly marshal and unmarshal encoding.TextMarshaler/encoding.TextUnmarshaler types (#15636)
  • pkg/featuregate: Reject feature gate IDs with an empty dot-separated segment (leading, trailing, or consecutive dots), e.g. .foo, foo., foo..bar. (#15676)

... (truncated)

Commits
  • 62cdad2 [chore] Prepare release v1.68.0/v0.162.0 (#16041)
  • 9857cff [exporterhelper] Drop only the oversized item when splitting a batch (#15937)
  • 3580e28 [chore] Add waiting-for-maintainers label support (#16025)
  • 53ca64f [receiver/otlphttp] Preserve status code in error handler for unsupported Con...
  • 5fbc5a6 [chore] set path on upload/download (#16033)
  • f575985 [chore] Allow contrib generation to update modules (#16027)
  • aaee1ae [extension/memorylimiter] Add refused requests metric to track rejected reque...
  • e086e5f [chore] update perf workflow to address permission issues (#16032)
  • a1d7ba1 [pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...
  • 2d3f1f9 ci: Improve renovate setup (#16028)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/consumer from 1.66.0 to 1.68.0

Changelog

Sourced from go.opentelemetry.io/collector/consumer's changelog.

v1.68.0/v0.162.0

💡 Enhancements 💡

  • cmd/mdatagen: Allow config metadata authors to choose configoptional.Some or configoptional.Default for generated optional fields (#15977) Set go_struct.optional_mode: default to generate an optional object configuration section with a fallback default while keeping it absent until configured. Omitting optional_mode preserves the existing configoptional.Some behavior.

  • pkg/config/configgrpc: Migrate core types of common settings for a gRPC client to schema-based configuration generated by mdatagen. (#15967)

  • pkg/exporterhelper: Add NewDefaultBatchConfig to build a BatchConfig with default values, including the partition cache_size and idle_timeout defaults. (#14526, #15894)

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/xpdata: Move pdata hash APIs from the contrib repo (#15914)

🧰 Bug fixes 🧰

  • cmd/schemagen: Fix RefResolver mutating shared, cached type definitions with per-occurrence annotations, which caused generated schemas to have incorrect (and run-to-run nondeterministic) description/x-optional/x-pointer values whenever multiple fields referenced the same type. (#15984)
  • pkg/pdata: Fix pcommon.Value.CopyTo to deep-copy ValueTypeBytes values instead of sharing the backing array (#15621) The bytes oneof field in CopyAnyValue was assigned directly, so the copy and source shared the same []byte. This also affected Map.CopyTo and Slice.CopyTo, which delegate to CopyAnyValue.

v1.67.0/v0.161.0

🛑 Breaking changes 🛑

  • cmd/mdatagen: remove deprecated func DefaultMetricsBuilderConfig (#15854)

  • pkg/service: Remove the deprecated extensioncapabilities.ConfigWatcher interface, Extensions.NotifyConfig, and service.Settings.CollectorConf. (#15399) These were deprecated in v0.155.0. Use ConfigSnapshotWatcher, NotifyConfigSnapshot, and Settings.ConfigSnapshot instead.

  • pkg/service: Remove deprecated config option LoggingOptions (#15919)

💡 Enhancements 💡

  • pkg/config/confignet: Migrate network core types to schema-based configuration generated by mdatagen. (#15706)

🧰 Bug fixes 🧰

  • pkg/configoptional: Properly marshal and unmarshal encoding.TextMarshaler/encoding.TextUnmarshaler types (#15636)
  • pkg/featuregate: Reject feature gate IDs with an empty dot-separated segment (leading, trailing, or consecutive dots), e.g. .foo, foo., foo..bar. (#15676)

... (truncated)

Commits
  • 62cdad2 [chore] Prepare release v1.68.0/v0.162.0 (#16041)
  • 9857cff [exporterhelper] Drop only the oversized item when splitting a batch (#15937)
  • 3580e28 [chore] Add waiting-for-maintainers label support (#16025)
  • 53ca64f [receiver/otlphttp] Preserve status code in error handler for unsupported Con...
  • 5fbc5a6 [chore] set path on upload/download (#16033)
  • f575985 [chore] Allow contrib generation to update modules (#16027)
  • aaee1ae [extension/memorylimiter] Add refused requests metric to track rejected reque...
  • e086e5f [chore] update perf workflow to address permission issues (#16032)
  • a1d7ba1 [pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...
  • 2d3f1f9 ci: Improve renovate setup (#16028)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/consumer/consumertest from 0.160.0 to 0.162.0

Release notes

Sourced from go.opentelemetry.io/collector/consumer/consumertest's releases.

v1.68.0/v0.162.0

End-user changelog

🛑 Breaking changes 🛑

  • cmd/mdatagen: Generated processor lifecycle tests now assert that the processor propagates the incoming context unchanged to the next consumer by default. (#15994) Disable with skip_context_propagation: true

  • processor/queue_batch: Rename queuebatch processor to queue_batch processor. (#14396)

💡 Enhancements 💡

  • extension/memory_limiter: Add otelcol_memorylimiter_refused_requests metric to record network request refusals in extension mode. (#15561)

  • pkg/confighttp: Enable keepalive configuration by default. (#16026) Introduces the feature gate pkg.confighttp.PrioritizeNewKeepalive. When disabled, this flag restores the old behaviour of removing the keepalive configuration in favour of the deprecated fields IdleConnTimeout, MaxIdleConns, MaxIdleConnsPerHost, DisableKeepAlives when the flag is disabled.

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/pprofile: Speed up profiles dictionary merging during exporter-queue batching by replacing the linear-scan dedup in switchDictionary with an indexed lookup, reducing per-merge cost from O(N*L^2) to O(N+L). (#15544) No behavior change: merged dictionary contents and remapped indices are identical to before.

  • pkg/receiverhelper: Stop allocating a span link that is always discarded when a long-lived-context receiver starts an operation without a parent span context. (#15998) Receivers created with LongLivedCtx: true no longer build a trace.Link when the long-lived context carries no valid span context. The SDK already discarded such a link, so behaviour is unchanged. This removes 3 of 7 allocations per receive operation.

  • pkg/xpdata: Reduce the time xhash.MapHash takes for maps with many entries. (#15990)

🧰 Bug fixes 🧰

  • exporter/debug: Support known sync error handling on AIX (#15924) Enable the debug exporter to handle known synchronous errors on AIX.

  • pkg/exporterhelper: Drop only the oversized item when splitting a batch, instead of discarding every item queued behind it (#15936) Applied to logs only for now

  • pkg/exporterhelper: Add exporter and data_type attributes to exporter/enqueue spans. (#16022)

  • receiver/otlp: Error handler preserves the HTTP status code when the request Content-Type is not one a Status can be encoded in (#15995) Extends the fix in #13414, which handled a missing Content-Type. A Content-Type that was present but unsupported, or malformed, still fell through to 500 {"code": 13, "message": "failed to marshal error message"}, reporting client errors such as 401 from a server auth extension or 400 from an unsupported Content-Encoding as

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/consumer/consumertest's changelog.

v1.68.0/v0.162.0

💡 Enhancements 💡

  • cmd/mdatagen: Allow config metadata authors to choose configoptional.Some or configoptional.Default for generated optional fields (#15977) Set go_struct.optional_mode: default to generate an optional object configuration section with a fallback default while keeping it absent until configured. Omitting optional_mode preserves the existing configoptional.Some behavior.

  • pkg/config/configgrpc: Migrate core types of common settings for a gRPC client to schema-based configuration generated by mdatagen. (#15967)

  • pkg/exporterhelper: Add NewDefaultBatchConfig to build a BatchConfig with default values, including the partition cache_size and idle_timeout defaults. (#14526, #15894)

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/xpdata: Move pdata hash APIs from the contrib repo (#15914)

🧰 Bug fixes 🧰

  • cmd/schemagen: Fix RefResolver mutating shared, cached type definitions with per-occurrence annotations, which caused generated schemas to have incorrect (and run-to-run nondeterministic) description/x-optional/x-pointer values whenever multiple fields referenced the same type. (#15984)
  • pkg/pdata: Fix pcommon.Value.CopyTo to deep-copy ValueTypeBytes values instead of sharing the backing array (#15621) The bytes oneof field in CopyAnyValue was assigned directly, so the copy and source shared the same []byte. This also affected Map.CopyTo and Slice.CopyTo, which delegate to CopyAnyValue.

v1.67.0/v0.161.0

🛑 Breaking changes 🛑

  • cmd/mdatagen: remove deprecated func DefaultMetricsBuilderConfig (#15854)

  • pkg/service: Remove the deprecated extensioncapabilities.ConfigWatcher interface, Extensions.NotifyConfig, and service.Settings.CollectorConf. (#15399) These were deprecated in v0.155.0. Use ConfigSnapshotWatcher, NotifyConfigSnapshot, and Settings.ConfigSnapshot instead.

  • pkg/service: Remove deprecated config option LoggingOptions (#15919)

💡 Enhancements 💡

  • pkg/config/confignet: Migrate network core types to schema-based configuration generated by mdatagen. (#15706)

🧰 Bug fixes 🧰

  • pkg/configoptional: Properly marshal and unmarshal encoding.TextMarshaler/encoding.TextUnmarshaler types (#15636)
  • pkg/featuregate: Reject feature gate IDs with an empty dot-separated segment (leading, trailing, or consecutive dots), e.g. .foo, foo., foo..bar. (#15676)

... (truncated)

Commits
  • 62cdad2 [chore] Prepare release v1.68.0/v0.162.0 (#16041)
  • 9857cff [exporterhelper] Drop only the oversized item when splitting a batch (#15937)
  • 3580e28 [chore] Add waiting-for-maintainers label support (#16025)
  • 53ca64f [receiver/otlphttp] Preserve status code in error handler for unsupported Con...
  • 5fbc5a6 [chore] set path on upload/download (#16033)
  • f575985 [chore] Allow contrib generation to update modules (#16027)
  • aaee1ae [extension/memorylimiter] Add refused requests metric to track rejected reque...
  • e086e5f [chore] update perf workflow to address permission issues (#16032)
  • a1d7ba1 [pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...
  • 2d3f1f9 ci: Improve renovate setup (#16028)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/otelcol from 0.160.0 to 0.162.0

Release notes

Sourced from go.opentelemetry.io/collector/otelcol's releases.

v1.68.0/v0.162.0

End-user changelog

🛑 Breaking changes 🛑

  • cmd/mdatagen: Generated processor lifecycle tests now assert that the processor propagates the incoming context unchanged to the next consumer by default. (#15994) Disable with skip_context_propagation: true

  • processor/queue_batch: Rename queuebatch processor to queue_batch processor. (#14396)

💡 Enhancements 💡

  • extension/memory_limiter: Add otelcol_memorylimiter_refused_requests metric to record network request refusals in extension mode. (#15561)

  • pkg/confighttp: Enable keepalive configuration by default. (#16026) Introduces the feature gate pkg.confighttp.PrioritizeNewKeepalive. When disabled, this flag restores the old behaviour of removing the keepalive configuration in favour of the deprecated fields IdleConnTimeout, MaxIdleConns, MaxIdleConnsPerHost, DisableKeepAlives when the flag is disabled.

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/pprofile: Speed up profiles dictionary merging during exporter-queue batching by replacing the linear-scan dedup in switchDictionary with an indexed lookup, reducing per-merge cost from O(N*L^2) to O(N+L). (#15544) No behavior change: merged dictionary contents and remapped indices are identical to before.

  • pkg/receiverhelper: Stop allocating a span link that is always discarded when a long-lived-context receiver starts an operation without a parent span context. (#15998) Receivers created with LongLivedCtx: true no longer build a trace.Link when the long-lived context carries no valid span context. The SDK already discarded such a link, so behaviour is unchanged. This removes 3 of 7 allocations per receive operation.

  • pkg/xpdata: Reduce the time xhash.MapHash takes for maps with many entries. (#15990)

🧰 Bug fixes 🧰

  • exporter/debug: Support known sync error handling on AIX (#15924) Enable the debug exporter to handle known synchronous errors on AIX.

  • pkg/exporterhelper: Drop only the oversized item when splitting a batch, instead of discarding every item queued behind it (#15936) Applied to logs only for now

  • pkg/exporterhelper: Add exporter and data_type attributes to exporter/enqueue spans. (#16022)

  • receiver/otlp: Error handler preserves the HTTP status code when the request Content-Type is not one a Status can be encoded in (#15995) Extends the fix in #13414, which handled a missing Content-Type. A Content-Type that was present but unsupported, or malformed, still fell through to 500 {"code": 13, "message": "failed to marshal error message"}, reporting client errors such as 401 from a server auth extension or 400 from an unsupported Content-Encoding as

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/otelcol's changelog.

v1.68.0/v0.162.0

💡 Enhancements 💡

  • cmd/mdatagen: Allow config metadata authors to choose configoptional.Some or configoptional.Default for generated optional fields (#15977) Set go_struct.optional_mode: default to generate an optional object configuration section with a fallback default while keeping it absent until configured. Omitting optional_mode preserves the existing configoptional.Some behavior.

  • pkg/config/configgrpc: Migrate core types of common settings for a gRPC client to schema-based configuration generated by mdatagen. (#15967)

  • pkg/exporterhelper: Add NewDefaultBatchConfig to build a BatchConfig with default values, including the partition cache_size and idle_timeout defaults. (#14526, #15894)

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the number of active partition batchers. The value must be positive. Current size and configured capacity are exported as otelcol_exporter_queue_batch_partition_cache_size and otelcol_exporter_queue_batch_partition_cache_capacity.

  • pkg/xpdata: Move pdata hash APIs from the contrib repo (#15914)

🧰 Bug fixes 🧰

  • cmd/schemagen: Fix RefResolver mutating shared, cached type definitions with per-occurrence annotations, which caused generated schemas to have incorrect (and run-to-run nondeterministic) description/x-optional/x-pointer values whenever multiple fields referenced the same type. (#15984)
  • pkg/pdata: Fix pcommon.Value.CopyTo to deep-copy ValueTypeBytes values instead of sharing the backing array (#15621) The bytes oneof field in CopyAnyValue was assigned directly, so the copy and source shared the same []byte. This also affected Map.CopyTo and Slice.CopyTo, which delegate to CopyAnyValue.

v1.67.0/v0.161.0

🛑 Breaking changes 🛑

  • cmd/mdatagen: remove deprecated func DefaultMetricsBuilderConfig (#15854)

  • pkg/service: Remove the deprecated extensioncapabilities.ConfigWatcher interface, Extensions.NotifyConfig, and service.Settings.CollectorConf. (#15399) These were deprecated in v0.155.0. Use ConfigSnapshotWatcher, NotifyConfigSnapshot, and Settings.ConfigSnapshot instead.

  • pkg/service: Remove deprecated config option LoggingOptions (#15919)

💡 Enhancements 💡

  • pkg/config/confignet: Migrate network core types to schema-based configuration generated by mdatagen. (#15706)

🧰 Bug fixes 🧰

  • pkg/configoptional: Properly marshal and unmarshal encoding.TextMarshaler/encoding.TextUnmarshaler types (#15636)
  • pkg/featuregate: Reject feature gate IDs with an empty dot-separated segment (leading, trailing, or consecutive dots), e.g. .foo, foo., foo..bar. (#15676)

... (truncated)

Commits
  • 62cdad2 [chore] Prepare release v1.68.0/v0.162.0 (#16041)
  • 9857cff [exporterhelper] Drop only the oversized item when splitting a batch (#15937)
  • 3580e28 [chore] Add waiting-for-maintainers label support (#16025)
  • 53ca64f [receiver/otlphttp] Preserve status code in error handler for unsupported Con...
  • 5fbc5a6 [chore] set path on upload/download (#16033)
  • f575985 [chore] Allow contrib generation to update modules (#16027)
  • aaee1ae [extension/memorylimiter] Add refused requests metric to track rejected reque...
  • e086e5f [chore] update perf workflow to address permission issues (#16032)
  • a1d7ba1 [pkg/confighttp] introduce pkg.confighttp.PrioritizeNewKeepalive feature gate...
  • 2d3f1f9 ci: Improve renovate setup (#16028)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/pdata from 1.66.0 to 1.68.0

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.68.0/v0.162.0

💡 Enhancements 💡

  • cmd/mdatagen: Allow config metadata authors to choose configoptional.Some or configoptional.Default for generated optional fields (#15977) Set go_struct.optional_mode: default to generate an optional object configuration section with a fallback default while keeping it absent until configured. Omitting optional_mode preserves the existing configoptional.Some behavior.

  • pkg/config/configgrpc: Migrate core types of common settings for a gRPC client to schema-based configuration generated by mdatagen. (#15967)

  • pkg/exporterhelper: Add NewDefaultBatchConfig to build a BatchConfig with default values, including the partition cache_size and idle_timeout defaults. (#14526, #15894)

  • pkg/exporterhelper: Make the partition idle timeout configurable via batch::partition::idle_timeout and raise the default to 90s. (#15894)

  • pkg/exporterhelper: Make the multi-batcher partition LRU cache size configurable and export cache size metrics. (#14526) Adds sending_queue::batch::partition::cache_size (default 10000) to cap the num...

    Description has been truncated

dependabot Bot and others added 8 commits September 28, 2026 22:59
Bumps [@astrojs/react](https://github.com/withastro/astro/tree/HEAD/packages/integrations/react) from 6.0.6 to 7.0.0.
- [Release notes](https://github.com/withastro/astro/releases)
- [Changelog](https://github.com/withastro/astro/blob/main/packages/integrations/react/CHANGELOG.md)
- [Commits](https://github.com/withastro/astro/commits/@astrojs/react@7.0.0/packages/integrations/react)

---
updated-dependencies:
- dependency-name: "@astrojs/react"
  dependency-version: 7.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [ip-address](https://github.com/beaugunderson/ip-address) from 10.4.0 to 10.7.2.
- [Release notes](https://github.com/beaugunderson/ip-address/releases)
- [Commits](beaugunderson/ip-address@v10.4.0...v10.7.2)

---
updated-dependencies:
- dependency-name: ip-address
  dependency-version: 10.7.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [devalue](https://github.com/sveltejs/devalue) from 5.9.2 to 5.9.4.
- [Release notes](https://github.com/sveltejs/devalue/releases)
- [Changelog](https://github.com/sveltejs/devalue/blob/main/CHANGELOG.md)
- [Commits](sveltejs/devalue@v5.9.2...v5.9.4)

---
updated-dependencies:
- dependency-name: devalue
  dependency-version: 5.9.4
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.7 to 3.1.8.
- [Release notes](https://github.com/fastify/fast-uri/releases)
- [Commits](fastify/fast-uri@v3.1.7...v3.1.8)

---
updated-dependencies:
- dependency-name: fast-uri
  dependency-version: 3.1.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 5.0.9 to 5.0.12.
- [Release notes](https://github.com/juliangruber/brace-expansion/releases)
- [Commits](juliangruber/brace-expansion@v5.0.9...v5.0.12)

---
updated-dependencies:
- dependency-name: brace-expansion
  dependency-version: 5.0.12
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
The test pinned 2026-04-01 as a recent capsule against a 180-day window, so it
started failing on 2026-09-28 and has kept CI red since.
…updates

Bumps the go-minor-patch group with 9 updates in the /collector directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.6` | `2.15.0` |
| [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.53.1` | `1.54.0` |
| [go.opentelemetry.io/collector/component](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` |
| [go.opentelemetry.io/collector/consumer](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` |
| [go.opentelemetry.io/collector/consumer/consumertest](https://github.com/open-telemetry/opentelemetry-collector) | `0.160.0` | `0.162.0` |
| [go.opentelemetry.io/collector/otelcol](https://github.com/open-telemetry/opentelemetry-collector) | `0.160.0` | `0.162.0` |
| [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` |
| [go.opentelemetry.io/collector/processor](https://github.com/open-telemetry/opentelemetry-collector) | `1.66.0` | `1.68.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.11.0` | `1.11.1` |



Updates `github.com/nats-io/nats-server/v2` from 2.14.6 to 2.15.0
- [Release notes](https://github.com/nats-io/nats-server/releases)
- [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md)
- [Commits](nats-io/nats-server@v2.14.6...v2.15.0)

Updates `github.com/nats-io/nats.go` from 1.53.1 to 1.54.0
- [Release notes](https://github.com/nats-io/nats.go/releases)
- [Commits](nats-io/nats.go@v1.53.1...v1.54.0)

Updates `go.opentelemetry.io/collector/component` from 1.66.0 to 1.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0)

Updates `go.opentelemetry.io/collector/consumer` from 1.66.0 to 1.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0)

Updates `go.opentelemetry.io/collector/consumer/consumertest` from 0.160.0 to 0.162.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@v0.160.0...v0.162.0)

Updates `go.opentelemetry.io/collector/otelcol` from 0.160.0 to 0.162.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@v0.160.0...v0.162.0)

Updates `go.opentelemetry.io/collector/pdata` from 1.66.0 to 1.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0)

Updates `go.opentelemetry.io/collector/processor` from 1.66.0 to 1.68.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md)
- [Commits](open-telemetry/opentelemetry-collector@pdata/v1.66.0...pdata/v1.68.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.11.0 to 1.11.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.11.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/nats-io/nats-server/v2
  dependency-version: 2.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: github.com/nats-io/nats.go
  dependency-version: 1.54.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/component
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/consumer
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/consumer/consumertest
  dependency-version: 0.162.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/otelcol
  dependency-version: 0.162.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/pdata
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/collector/processor
  dependency-version: 1.68.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-minor-patch
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Oct 5, 2026
@dependabot
dependabot Bot requested a review from MSKazemi as a code owner October 5, 2026 22:57
@dependabot dependabot Bot added go Pull requests that update go code dependencies Pull requests that update a dependency file labels Oct 5, 2026
dependabot Bot and others added 17 commits October 5, 2026 22:59
Bumps the actions group with 1 update in the / directory: [actions/upload-artifact](https://github.com/actions/upload-artifact).


Updates `actions/upload-artifact` from 4 to 7
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](actions/upload-artifact@v4...v7)

---
updated-dependencies:
- dependency-name: actions/upload-artifact
  dependency-version: '7'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [source-map-js](https://github.com/7rulnik/source-map-js) from 1.2.1 to 1.2.2.
- [Release notes](https://github.com/7rulnik/source-map-js/releases)
- [Changelog](https://github.com/7rulnik/source-map-js/blob/main/CHANGELOG.md)
- [Commits](7rulnik/source-map-js@v1.2.1...v1.2.2)

---
updated-dependencies:
- dependency-name: source-map-js
  dependency-version: 1.2.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [smol-toml](https://github.com/squirrelchat/smol-toml) from 1.7.1 to 1.9.0.
- [Release notes](https://github.com/squirrelchat/smol-toml/releases)
- [Commits](squirrelchat/smol-toml@v1.7.1...v1.9.0)

---
updated-dependencies:
- dependency-name: smol-toml
  dependency-version: 1.9.0
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [sharp](https://github.com/lovell/sharp) from 0.35.4 to 0.35.5.
- [Release notes](https://github.com/lovell/sharp/releases)
- [Commits](lovell/sharp@v0.35.4...v0.35.5)

---
updated-dependencies:
- dependency-name: sharp
  dependency-version: 0.35.5
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [proxy-addr](https://github.com/jshttp/proxy-addr) from 2.0.7 to 2.0.8.
- [Release notes](https://github.com/jshttp/proxy-addr/releases)
- [Changelog](https://github.com/jshttp/proxy-addr/blob/master/HISTORY.md)
- [Commits](jshttp/proxy-addr@v2.0.7...v2.0.8)

---
updated-dependencies:
- dependency-name: proxy-addr
  dependency-version: 2.0.8
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [compression](https://github.com/expressjs/compression) from 1.8.1 to 1.8.2.
- [Release notes](https://github.com/expressjs/compression/releases)
- [Changelog](https://github.com/expressjs/compression/blob/master/HISTORY.md)
- [Commits](expressjs/compression@v1.8.1...v1.8.2)

---
updated-dependencies:
- dependency-name: compression
  dependency-version: 1.8.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [werkzeug](https://github.com/pallets/werkzeug) from 3.1.8 to 3.1.9.
- [Release notes](https://github.com/pallets/werkzeug/releases)
- [Changelog](https://github.com/pallets/werkzeug/blob/main/CHANGES.rst)
- [Commits](pallets/werkzeug@3.1.8...3.1.9)

---
updated-dependencies:
- dependency-name: werkzeug
  dependency-version: 3.1.9
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [mako](https://github.com/sqlalchemy/mako) from 1.4.1 to 1.4.2.
- [Release notes](https://github.com/sqlalchemy/mako/releases)
- [Changelog](https://github.com/sqlalchemy/mako/blob/main/CHANGES)
- [Commits](https://github.com/sqlalchemy/mako/commits)

---
updated-dependencies:
- dependency-name: mako
  dependency-version: 1.4.2
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bumps [multidict](https://github.com/aio-libs/multidict) from 6.7.1 to 6.9.1.
- [Release notes](https://github.com/aio-libs/multidict/releases)
- [Changelog](https://github.com/aio-libs/multidict/blob/master/CHANGES.rst)
- [Commits](aio-libs/multidict@v6.7.1...v6.9.1)

---
updated-dependencies:
- dependency-name: multidict
  dependency-version: 6.9.1
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Bump http-cache-semantics (4.3.0), source-map-js and brace-expansion in the
dashboard and sdk-ts lockfiles via lockfile-only npm update. basic-ftp
(GHSA-c475-qrg2-pj4r) has no reachable fix (dev-only lhci chain, newest get-uri
still pins ^5.3.1): add a time-boxed waiver in the repo's established form.
…_environment

The CI unit job failed three test_diff_environment cases because colour codes
split the phrases the assertions search for. _flat() now removes SGR escapes first.
"produced by" next to a model-id field name matched the AI-attribution pattern; the
line describes a file format, so say "emitted by".

MSKazemi commented Oct 8, 2026

Copy link
Copy Markdown
Owner

CI repair update — 2026-10-08

To remove shared baseline failures without losing Dependabot's Go update, merged the #142 CI/security fixes (197a10e) into this PR via merge commit 86e7c38 (no history rewrite). The only independent file changes retained are collector/go.mod and collector/go.sum; #142 does not touch either. The new head's Collector CI, pip-audit, npm-audit, MetadataStore security gate, SDK, dashboard, and documentation workflows pass; the full Python CI remains in progress. Please do not merge until #142 is merged and the complete CI run finishes. AI-assisted branch integration, reviewed against the actual dependency files.

MSKazemi added a commit that referenced this pull request Oct 9, 2026
… and MetadataStore gates green

- uv.lock: 104 minor/patch bumps within existing constraints (all stable; majors
  mcp 2, protobuf 7, filelock 4, setuptools 84 held). pip-audit gate: 0 findings.
- npm: lockfile refreshes in ui/dashboard, packages/nova-dashboard (#154 floors +
  audit fix) and packages/nova-sdk-ts; all three npm-audit gates pass. New
  time-boxed waiver GHSA-c475-qrg2-pj4r (basic-ftp, dev-only lhci chain; newest
  get-uri still needs basic-ftp 5.x).
- collector: the go-minor-patch set from #131 on the current module path, plus
  golang.org/x/net v0.60.0; CI Go 1.26.7 -> 1.26.9 for GO-2026-6617 and the
  GO-2026-6603..6613 stdlib advisories. vet, test -race, build, govulncheck clean.
- ci.yml: the last actions/upload-artifact@v4 moves to @v7 like every other use.
- sdk-ts: regenerate src/types.gen.ts from api/openapi.yaml (drift gate).
- metadata store: novafabric_app was never granted DELETE, so ADR-0206 delete_run
  failed with permission denied under the real NOBYPASSRLS role. Migration v005
  and bootstrap() grant DELETE on runs/capsules/signatures; the cross-tenant
  delete test now runs as novafabric_app instead of the superuser, which bypasses
  RLS and made the test fail on main without testing the policy.
- dependabot.yml: ignore OpenTelemetry API/SDK/semconv and fastapi>=0.142 while
  google-adk caps OpenTelemetry at <=1.42.1; ignore the path-sourced novafabric
  in examples/plugin-hook-reference (re-locked to 0.104.0).
@dependabot @github

dependabot Bot commented on behalf of github Oct 9, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot Bot closed this Oct 9, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/collector/go-minor-patch-4d7a01f0da branch October 9, 2026 09:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant