Skip to content

fix(deps): update go-dependencies#953

Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
deps-update/go-dependencies
Open

fix(deps): update go-dependencies#953
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
deps-update/go-dependencies

Conversation

@renovate-sh-app

@renovate-sh-app renovate-sh-app Bot commented Apr 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/felixge/httpsnoop v1.0.4 → v1.1.0 age confidence require minor
github.com/grafana/dskit 6446a45 → 0f29fa1 require digest
github.com/grafana/pyroscope-go/godeltaprof v0.1.9 → v0.1.11 age confidence require patch
github.com/hashicorp/consul/api v1.33.7 → v1.34.3 age confidence require minor
github.com/opentracing-contrib/go-grpc v0.1.2 → v0.1.3 age confidence require patch
github.com/pires/go-proxyproto v0.11.0 → v0.12.0 age confidence require minor
github.com/prometheus/common v0.67.5 → v0.69.0 age confidence require minor
github.com/prometheus/exporter-toolkit v0.15.1 → v0.16.0 age confidence require minor
go.etcd.io/etcd/api/v3 v3.6.9 → v3.6.12 age confidence require patch
go.etcd.io/etcd/client/pkg/v3 v3.6.9 → v3.6.12 age confidence require patch
go.etcd.io/etcd/client/v3 v3.6.9 → v3.6.12 age confidence require patch
go.opentelemetry.io/contrib/exporters/autoexport v0.68.0 → v0.69.0 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 → v0.69.0 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.67.0 → v0.69.0 age confidence require minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 → v0.69.0 age confidence require minor
go.opentelemetry.io/contrib/propagators/jaeger v1.42.0 → v1.44.0 age confidence require minor
go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0 → v0.37.1 age confidence require minor
golang.org/x/exp 7ab1446 → c48552f age confidence require digest
golang.org/x/net v0.55.0 → v0.56.0 age confidence require minor
golang.org/x/sync v0.20.0 → v0.21.0 age confidence require minor
google.golang.org/grpc v1.80.0 → v1.81.1 age confidence require minor

Release Notes

felixge/httpsnoop (github.com/felixge/httpsnoop)

v1.1.0

grafana/pyroscope-go (github.com/grafana/pyroscope-go/godeltaprof)

v0.1.11

Compare Source

v0.1.10

Compare Source

opentracing-contrib/go-grpc (github.com/opentracing-contrib/go-grpc)

v0.1.3

What's Changed

🔨 Maintenance
⬆️ Dependencies

Full Changelog: opentracing-contrib/go-grpc@v0.1.2...v0.1.3

pires/go-proxyproto (github.com/pires/go-proxyproto)

v0.12.0

What's Changed

New Contributors

Full Changelog: pires/go-proxyproto@v0.11.0...v0.12.0

prometheus/common (github.com/prometheus/common)

v0.69.0

Compare Source

Security / behavior changes
  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #​901 #​920 #​921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #​925
Bugfixes
  • expfmt: fix nil pointer panic when parsing empty braces {}. #​922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #​918
Performance
  • model: reduce allocations in Time.UnmarshalJSON. #​918
Internal
  • Synchronize common files from prometheus/prometheus. #​917
  • Modernize Go. #​919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.68.1

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.68.0...v0.68.1

v0.68.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.5...v0.68.0

prometheus/exporter-toolkit (github.com/prometheus/exporter-toolkit)

v0.16.0

Compare Source

What's Changed

Full Changelog: prometheus/exporter-toolkit@v0.15.1...v0.16.0

etcd-io/etcd (go.etcd.io/etcd/api/v3)

v3.6.12

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.12

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

# start a local etcd server
/tmp/etcd-download-test/etcd

# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo
macOS (Darwin)
ETCD_VER=v3.6.12

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
Docker

etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

ETCD_VER=v3.6.12

rm -rf /tmp/etcd-data.tmp && mkdir -p /tmp/etcd-data.tmp && \
  docker rmi gcr.io/etcd-development/etcd:${ETCD_VER} || true && \
  docker run \
  -p 2379:2379 \
  -p 2380:2380 \
  --mount type=bind,source=/tmp/etcd-data.tmp,destination=/etcd-data \
  --name etcd-gcr-${ETCD_VER} \
  gcr.io/etcd-development/etcd:${ETCD_VER} \
  /usr/local/bin/etcd \
  --name s1 \
  --data-dir /etcd-data \
  --listen-client-urls http://0.0.0.0:2379 \
  --advertise-client-urls http://0.0.0.0:2379 \
  --listen-peer-urls http://0.0.0.0:2380 \
  --initial-advertise-peer-urls http://0.0.0.0:2380 \
  --initial-cluster s1=http://0.0.0.0:2380 \
  --initial-cluster-token tkn \
  --initial-cluster-state new \
  --log-level info \
  --logger zap \
  --log-outputs stderr

docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcd --version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdutl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl endpoint health
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl put foo bar
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl get foo

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.11

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

# start a local etcd server
/tmp/etcd-download-test/etcd

# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo
macOS (Darwin)
ETCD_VER=v3.6.11

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
Docker

etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

ETCD_VER=v3.6.11

rm -rf /tmp/etcd-data.tmp && mkdir -p /tmp/etcd-data.tmp && \
  docker rmi gcr.io/etcd-development/etcd:${ETCD_VER} || true && \
  docker run \
  -p 2379:2379 \
  -p 2380:2380 \
  --mount type=bind,source=/tmp/etcd-data.tmp,destination=/etcd-data \
  --name etcd-gcr-${ETCD_VER} \
  gcr.io/etcd-development/etcd:${ETCD_VER} \
  /usr/local/bin/etcd \
  --name s1 \
  --data-dir /etcd-data \
  --listen-client-urls http://0.0.0.0:2379 \
  --advertise-client-urls http://0.0.0.0:2379 \
  --listen-peer-urls http://0.0.0.0:2380 \
  --initial-advertise-peer-urls http://0.0.0.0:2380 \
  --initial-cluster s1=http://0.0.0.0:2380 \
  --initial-cluster-token tkn \
  --initial-cluster-state new \
  --log-level info \
  --logger zap \
  --log-outputs stderr

docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcd --version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdutl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl endpoint health
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl put foo bar
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl get foo

v3.6.10

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.10

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version

# start a local etcd server
/tmp/etcd-download-test/etcd

# write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo
macOS (Darwin)
ETCD_VER=v3.6.10

# choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}

rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test

curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64

/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
Docker

etcd uses gcr.io/etcd-development/etcd as a primary container registry, and quay.io/coreos/etcd as secondary.

ETCD_VER=v3.6.10

rm -rf /tmp/etcd-data.tmp && mkdir -p /tmp/etcd-data.tmp && \
  docker rmi gcr.io/etcd-development/etcd:${ETCD_VER} || true && \
  docker run \
  -p 2379:2379 \
  -p 2380:2380 \
  --mount type=bind,source=/tmp/etcd-data.tmp,destination=/etcd-data \
  --name etcd-gcr-${ETCD_VER} \
  gcr.io/etcd-development/etcd:${ETCD_VER} \
  /usr/local/bin/etcd \
  --name s1 \
  --data-dir /etcd-data \
  --listen-client-urls http://0.0.0.0:2379 \
  --advertise-client-urls http://0.0.0.0:2379 \
  --listen-peer-urls http://0.0.0.0:2380 \
  --initial-advertise-peer-urls http://0.0.0.0:2380 \
  --initial-cluster s1=http://0.0.0.0:2380 \
  --initial-cluster-token tkn \
  --initial-cluster-state new \
  --log-level info \
  --logger zap \
  --log-outputs stderr

docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcd --version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdutl version
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl endpoint health
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl put foo bar
docker exec etcd-gcr-${ETCD_VER} /usr/local/bin/etcdctl get foo
open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/propagators/jaeger)

v1.44.0: /v2.5.1/v0.69.0/v0.37.1/v0.24.0/v0.19.0/v0.16.1/v0.16.0

Compare Source

Added
  • Add error.type attribute to http.client.request.duration for transport failures in otelhttp. (#​8801)
  • Add examples for prometheus compatibility document. (#​8716)
  • Add support for cardinality_limits in PeriodicMetricReader in otelconf. (#​8885)
  • Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/x to expose the resolved SDK resource from declarative configuration. (#​8913)
  • Add go.opentelemetry.io/contrib/detectors/hetzner, a new resource detector for Hetzner Cloud servers, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/hetzner. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, host.id, and host.name. (#​8979)
Changed
  • Set error field as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otellogrus. (#​8776)
  • Set the "error" field (e.g. created via zap.Error) as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otelzap. (#​8719)
  • Set fields implementing error interface from slog records as record.SetErr instead of plain attributes in go.opentelemetry.io/contrib/bridges/otelslog. (#​8774)
  • Set emitted errors in go.opentelemetry.io/contrib/bridges/otellogr as record errors (Record.SetErr) instead of exception.message attributes. (#​8775)
Fixed
  • Fix header attributes lost when using sub-spans in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#​8797)
  • Validate encoding configuration for OTLP HTTP exporters in go.opentelemetry.io/contrib/otelconf. (#​8772)
  • Remove the custom body wrapper from the request's body after the request is processed to allow body type comparisons with the original type in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#​6914)
  • Unknown or empty HTTP methods now report "_OTHER" instead of "GET" across all HTTP instrumentations to align with OpenTelemetry semantic conventions. (#​8868)
  • The default span name formatter in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now conforms to the OpenTelemetry HTTP semantic conventions for server span names. (#​8871)
    • The default span name is now {method} {route} (e.g. GET /foo/{id}) when a route pattern is available, or {method} (e.g. GET) otherwise.
Removed
  • Remove the deprecated WithSpanOptions option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#​8991)

What's Changed

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app

renovate-sh-app Bot commented Apr 6, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 27 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.8 -> 1.26
github.com/coreos/go-systemd/v22 v22.6.0 -> v22.7.0
github.com/golang-jwt/jwt/v5 v5.3.0 -> v5.3.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 -> v2.29.0
github.com/jaegertracing/jaeger-idl v0.6.0 -> v0.9.0
github.com/klauspost/compress v1.18.0 -> v1.18.6
go.opentelemetry.io/contrib/bridges/prometheus v0.68.0 -> v0.69.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.19.0 -> v0.20.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0 -> v0.20.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/prometheus v0.65.0 -> v0.66.0
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.19.0 -> v0.20.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/log v0.19.0 -> v0.20.0
go.opentelemetry.io/otel/sdk/log v0.19.0 -> v0.20.0
golang.org/x/crypto v0.52.0 -> v0.53.0
golang.org/x/mod v0.35.0 -> v0.37.0
golang.org/x/oauth2 v0.35.0 -> v0.36.0
golang.org/x/sys v0.45.0 -> v0.46.0
golang.org/x/text v0.37.0 -> v0.38.0
golang.org/x/tools v0.44.0 -> v0.46.0
google.golang.org/genproto/googleapis/api v0.0.0-20260406210006-6f92a3bedf2d -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/genproto/googleapis/rpc v0.0.0-20260406210006-6f92a3bedf2d -> v0.0.0-20260526163538-3dc84a4a5aaa

@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch from 8492668 to c0e0d65 Compare April 6, 2026 10:02
@pracucci

pracucci commented Apr 7, 2026

Copy link
Copy Markdown
Contributor

Hi! 👋 We recently merged #947 which changed the CI configuration for unit tests. To get CI passing on this PR, please rebase on the latest main branch:

git fetch origin main
git rebase origin/main
git push --force-with-lease

Thanks!

@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 7 times, most recently from 3a72ebd to 1be1481 Compare April 13, 2026 16:04
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 7 times, most recently from 86054d8 to 4545993 Compare April 23, 2026 13:04
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 2 times, most recently from 1705931 to 6ef1ca0 Compare April 27, 2026 19:03
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 6 times, most recently from fed2b07 to d7c4305 Compare May 7, 2026 07:02
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch from 6596c05 to 61b9526 Compare May 28, 2026 07:03
@renovate-sh-app renovate-sh-app Bot requested a review from a team as a code owner May 28, 2026 07:03
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 12 times, most recently from a1cb5ba to d9783df Compare June 3, 2026 22:03
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 7 times, most recently from b41579d to 1e6dda8 Compare June 6, 2026 22:01
cursor[bot]
cursor Bot reviewed Jun 6, 2026
View reviewed changes

@cursor cursor Bot left a comment •
edited
Loading

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

Bugbot Autofix prepared a fix for the issue found in the latest run.

  • ✅ Fixed: Go 1.26 breaks 1.25 CI
    • Restored the root module go directive to 1.25.8 so the 1.25.x CI matrix is compatible again.

Create PR

Or push these changes by commenting:

@cursor push 7f0ca9233f
Preview (7f0ca9233f) 
diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -1,6 +1,6 @@
 module github.com/grafana/dskit
 
-go 1.26
+go 1.25.8
 
 toolchain go1.26.4

You can send follow-ups to the cloud agent here.

Reviewed by Cursor Bugbot for commit 1e6dda8. Configure here.

Comment thread go.mod
module github.com/grafana/dskit

go 1.25.8
go 1.26

@cursor cursor Bot Jun 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Go 1.26 breaks 1.25 CI

Medium Severity

The module minimum Go version is raised to 1.26, but CI still runs the test matrix on 1.25.x. Go treats the go line as a hard minimum, so jobs using Go 1.25 fail when building or testing this module even though other dependency bumps are fine.

Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit 1e6dda8. Configure here.

@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch 4 times, most recently from 3f07d82 to b6abc13 Compare June 14, 2026 22:02
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch from b6abc13 to c3b47b0 Compare June 16, 2026 16:02
@renovate-sh-app
fix(deps): update go-dependencies
8b8e324 
| datasource | package                                                                      | from                               | to                                 |
| ---------- | ---------------------------------------------------------------------------- | ---------------------------------- | ---------------------------------- |
| go         | github.com/felixge/httpsnoop                                                 | v1.0.4                             | v1.1.0                             |
| go         | github.com/grafana/pyroscope-go/godeltaprof                                  | v0.1.9                             | v0.1.11                            |
| go         | github.com/hashicorp/consul/api                                              | v1.33.7                            | v1.34.3                            |
| go         | github.com/opentracing-contrib/go-grpc                                       | v0.1.2                             | v0.1.3                             |
| go         | github.com/pires/go-proxyproto                                               | v0.11.0                            | v0.12.0                            |
| go         | github.com/prometheus/common                                                 | v0.67.5                            | v0.69.0                            |
| go         | github.com/prometheus/exporter-toolkit                                       | v0.15.1                            | v0.16.0                            |
| go         | go.etcd.io/etcd/api/v3                                                       | v3.6.9                             | v3.6.12                            |
| go         | go.etcd.io/etcd/client/pkg/v3                                                | v3.6.9                             | v3.6.12                            |
| go         | go.etcd.io/etcd/client/v3                                                    | v3.6.9                             | v3.6.12                            |
| go         | go.opentelemetry.io/contrib/exporters/autoexport                             | v0.68.0                            | v0.69.0                            |
| go         | go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc  | v0.67.0                            | v0.69.0                            |
| go         | go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace | v0.67.0                            | v0.69.0                            |
| go         | go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp                | v0.67.0                            | v0.69.0                            |
| go         | go.opentelemetry.io/contrib/propagators/jaeger                               | v1.42.0                            | v1.44.0                            |
| go         | go.opentelemetry.io/contrib/samplers/jaegerremote                            | v0.36.0                            | v0.37.1                            |
| go         | golang.org/x/exp                                                             | v0.0.0-20260312153236-7ab1446f8b90 | v0.0.0-20260611194520-c48552f49976 |
| go         | golang.org/x/net                                                             | v0.55.0                            | v0.56.0                            |
| go         | golang.org/x/sync                                                            | v0.20.0                            | v0.21.0                            |
| go         | google.golang.org/grpc                                                       | v1.80.0                            | v1.81.1                            |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
@renovate-sh-app renovate-sh-app Bot force-pushed the deps-update/go-dependencies branch from c3b47b0 to 8b8e324 Compare June 20, 2026 10:01
@cursor

cursor Bot commented Jun 20, 2026 •
edited
Loading

Copy link
Copy Markdown

PR Summary

Medium Risk
No application code changes, but the Go 1.26 requirement and upgrades to etcd, gRPC, Consul, OTel HTTP/grpc instrumentation, and proxy protocol can affect runtime behavior for downstream services that embed dskit.

Overview
Renovate-style dependency-only update: go.mod and go.sum only, with no changes to dskit source.

The module Go version moves from 1.25.8 to 1.26 (toolchain remains go1.26.4), which affects anyone building against this library on an older Go release.

Notable direct dependency bumps include etcd client/api (v3.6.9 → v3.6.12, used by kv/etcd), Hashicorp Consul API (v1.33.7 → v1.34.3), gRPC (v1.80.0 → v1.81.1), OpenTelemetry contrib instrumentation and exporters (aligned around v0.69.0 / v1.44.0 for several packages), Prometheus common and exporter-toolkit, PROXY protocol (v0.11.0 → v0.12.0, used in server), plus smaller bumps (httpsnoop, godeltaprof, opentracing go-grpc, golang.org/x/*, indirect JWT/crypto/net, etc.).

Reviewed by Cursor Bugbot for commit 8b8e324. Bugbot is set up for automated code reviews on this repo. Configure here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@cursor cursor[bot] cursor[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependency-update update-minor update-patch

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@pracucci