Skip to content

Bump the github-dependencies group across 1 directory with 43 updates#571

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github-dependencies-4dbdb46770
Open

Bump the github-dependencies group across 1 directory with 43 updates#571
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/github-dependencies-4dbdb46770

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 6, 2026 •
edited
Loading

Bumps the github-dependencies group with 18 updates in the / directory:

Package From To
google.golang.org/grpc 1.78.0 1.80.0
github.com/coreos/go-systemd/v22 22.6.0 22.7.0
github.com/fxamacker/cbor/v2 2.9.0 2.9.1
github.com/go-openapi/jsonpointer 0.22.4 0.22.5
github.com/go-openapi/jsonreference 0.21.4 0.21.5
github.com/go-openapi/swag 0.25.4 0.25.5
github.com/google/cel-go 0.26.1 0.27.0
github.com/grpc-ecosystem/grpc-gateway/v2 2.27.4 2.28.0
github.com/prometheus/procfs 0.19.2 0.20.1
go.etcd.io/etcd/api/v3 3.6.7 3.6.10
go.etcd.io/etcd/client/pkg/v3 3.6.7 3.6.10
go.etcd.io/etcd/client/v3 3.6.7 3.6.10
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.64.0 0.67.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.64.0 0.67.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace 1.39.0 1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 1.39.0 1.43.0
go.yaml.in/yaml/v2 2.4.3 2.4.4
golang.org/x/time 0.14.0 0.15.0

Updates google.golang.org/grpc from 1.78.0 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)

Release 1.79.3

Security

  • server: fix an authorization bypass where malformed :path headers (missing the leading slash) could bypass path-based restricted "deny" rules in interceptors like grpc/authz. Any request with a non-canonical path is now immediately rejected with an Unimplemented error. (#8981)

Release 1.79.2

Bug Fixes

  • stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (grpc/grpc-go#8874)

Release 1.79.1

Bug Fixes

Release 1.79.0

API Changes

  • mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#8806)
  • experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#8780)

... (truncated)

Commits

Updates github.com/coreos/go-systemd/v22 from 22.6.0 to 22.7.0

Release notes

Sourced from github.com/coreos/go-systemd/v22's releases.

v22.7.0

This release fixes an issue with multiple calls to (e.g.) StopUnit, simplifies and improves code and documentation, and adds a few new methods.

What's Changed

New Contributors

Full Changelog: coreos/go-systemd@v22.6.0...v22.7.0

Commits
  • 4dc4ee6 activation: stub out for plan9
  • 8f5a75c dbus: add StartTransientUnitAux for starting transient units with auxiliary u...
  • 9211a7b activation: add FilesWithNames()
  • 2c3ebed dbus: dedup result conversion code
  • aac8e00 unit: fix Deserialize deprecation notice
  • d4795ce Fix doc references
  • abb50b3 dbus: allow multiple calls for the same unit to *Unit
  • 27f6bea activation: simplify ListenersWithNames
  • e615438 sdjournal: fix copyrights
  • d25876d import1: add missing close method to conn
  • Additional commits viewable in compare view

Updates github.com/fxamacker/cbor/v2 from 2.9.0 to 2.9.1

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.9.1

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #757)

🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #753)

What's Changed

CI / GitHub Actions and Docs

... (truncated)

Commits
  • 63d1c66 Merge pull request #758 from fxamacker/fxamacker/update-readme-for-release
  • e8b10c3 Merge pull request #757 from fxamacker/fxamacker/fix-keyasint
  • 4dd026b Update README status
  • 3076938 Update golangci-lint to v2.10.1
  • 6920cbe Migrate .golangci.yml to version 2
  • 05358b1 Fix several issues related to keyasint
  • 3851e1b Merge pull request #754 from fxamacker/fxamacker/refactor-parseMapToStruct-etc
  • 48a18bf Refactor field
  • 59d62f5 Merge pull request #753 from fxamacker/fxamacker/small-bugfixes
  • 46bc977 Merge pull request #752 from fxamacker/fxamacker/refactor-and-add-tests
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.22.4 to 0.22.5

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v0.22.5

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.

Documentation

Code quality

Miscellaneous tasks

Updates

People who contributed to this release

New Contributors

... (truncated)

Commits
  • e232aaf ci: upgraded bump-release workflow (new input format) (#106)
  • 9f448d5 chore: doc, test, lint update (#105)
  • 565d4a2 chore(deps): bump github.com/go-openapi/testify/v2
  • 869667c chore(deps): bump github.com/go-openapi/testify/v2
  • 83371ca chore(deps): bump the development-dependencies group with 7 updates
  • 7ad57ed chore(deps): bump the development-dependencies group with 7 updates
  • 26e9371 chore(deps): bump github.com/go-openapi/testify/v2
  • fb213a3 chore(deps): bump github.com/go-openapi/testify/v2
  • e481e05 chore(deps): bump the development-dependencies group with 7 updates
  • 62b2c8e doc: updated contributors file
  • Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.4 to 0.21.5

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v0.21.5

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.

Documentation

Code quality

Testing

Miscellaneous tasks

Updates

People who contributed to this release

... (truncated)

Commits
  • 8b85573 chore: doc, lint, tests (#79)
  • f9fd8bd build(deps): bump the development-dependencies group with 7 updates
  • 76deb10 build(deps): bump the development-dependencies group with 7 updates
  • 7b4cec2 build(deps): bump github.com/go-openapi/testify/v2
  • fecb9ac build(deps): bump github.com/go-openapi/testify/v2
  • 8f205c3 build(deps): bump the development-dependencies group with 7 updates
  • 9d5c22a build(deps): bump github.com/go-openapi/testify/v2
  • 2d9cd9b doc: updated contributors file
  • 4b5d805 doc: announced new discord channel
  • a738066 doc: added basic usage in readme and testable examples
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.

Documentation

Code quality

Testing

Miscellaneous tasks

Updates

People who contributed to this release

... (truncated)

Commits
  • 86905cc chore: prepare release v0.25.5
  • 345f85b doc: updated docs, links (#180)
  • 01b074b ci: updated ci workflows (#179)
  • 607decd build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 4924f95 doc: updated contributors file
  • 281942d test: upgraded tests to use generics (#176)
  • b9f9e45 test: upgraded to go-openapi/testify@v2.3.0 (#175)
  • b7e96e1 ci: upgraded shared workflows (fixed secret propagation, fuzz matrix) (#174)
  • 236d975 ci: upgraded shared workflows (fixes mono-repo releases) (#173)
  • fd4d373 build(deps): bump the development-dependencies group across 2 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/cmdutils from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/cmdutils's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.

Documentation

Code quality

Testing

Miscellaneous tasks

Updates

People who contributed to this release

... (truncated)

Commits
  • 86905cc chore: prepare release v0.25.5
  • 345f85b doc: updated docs, links (#180)
  • 01b074b ci: updated ci workflows (#179)
  • 607decd build(deps): bump the go-openapi-dependencies group across 15 directories wit...
  • 4924f95 doc: updated contributors file
  • 281942d test: upgraded tests to use generics (#176)
  • b9f9e45 test: upgraded to go-openapi/testify@v2.3.0 (#175)
  • b7e96e1 ci: upgraded shared workflows (fixed secret propagation, fuzz matrix) (#174)
  • 236d975 ci: upgraded shared workflows (fixes mono-repo releases) (#173)
  • fd4d373 build(deps): bump the development-dependencies group across 2 directories wit...
  • Additional commits viewable in compare view

Updates github.com/go-openapi/swag/conv from 0.25.4 to 0.25.5

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.25.5

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.

Documentation

Code quality

Testing

Miscellaneous tasks

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. labels Apr 6, 2026
@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented Apr 6, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign msau42 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot
Copy link
Copy Markdown
Contributor

k8s-ci-robot commented Apr 6, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files. cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. labels Apr 6, 2026
@dependabot
Bump the github-dependencies group across 1 directory with 43 updates
abbf9be 
Bumps the github-dependencies group with 18 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.78.0` | `1.80.0` |
| [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) | `22.6.0` | `22.7.0` |
| [github.com/fxamacker/cbor/v2](https://github.com/fxamacker/cbor) | `2.9.0` | `2.9.1` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.4` | `0.22.5` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.4` | `0.21.5` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.25.4` | `0.25.5` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.26.1` | `0.27.0` |
| [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.4` | `2.28.0` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.19.2` | `0.20.1` |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.10` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.10` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.10` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.64.0` | `0.67.0` |
| [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.64.0` | `0.67.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.43.0` |
| [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.43.0` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.3` | `2.4.4` |
| [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` |



Updates `google.golang.org/grpc` from 1.78.0 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.78.0...v1.80.0)

Updates `github.com/coreos/go-systemd/v22` from 22.6.0 to 22.7.0
- [Release notes](https://github.com/coreos/go-systemd/releases)
- [Commits](coreos/go-systemd@v22.6.0...v22.7.0)

Updates `github.com/fxamacker/cbor/v2` from 2.9.0 to 2.9.1
- [Release notes](https://github.com/fxamacker/cbor/releases)
- [Commits](fxamacker/cbor@v2.9.0...v2.9.1)

Updates `github.com/go-openapi/jsonpointer` from 0.22.4 to 0.22.5
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.4...v0.22.5)

Updates `github.com/go-openapi/jsonreference` from 0.21.4 to 0.21.5
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v0.21.4...v0.21.5)

Updates `github.com/go-openapi/swag` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/cmdutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/conv` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/fileutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/loading` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/mangling` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/netutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/typeutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/go-openapi/swag/yamlutils` from 0.25.4 to 0.25.5
- [Release notes](https://github.com/go-openapi/swag/releases)
- [Commits](go-openapi/swag@v0.25.4...v0.25.5)

Updates `github.com/google/cel-go` from 0.26.1 to 0.27.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.1...v0.27.0)

Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.4 to 2.28.0
- [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases)
- [Commits](grpc-ecosystem/grpc-gateway@v2.27.4...v2.28.0)

Updates `github.com/prometheus/procfs` from 0.19.2 to 0.20.1
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.19.2...v0.20.1)

Updates `go.etcd.io/etcd/api/v3` from 3.6.7 to 3.6.10
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.7...v3.6.10)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.7 to 3.6.10
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.7...v3.6.10)

Updates `go.etcd.io/etcd/client/v3` from 3.6.7 to 3.6.10
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.7...v3.6.10)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.64.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.64.0...zpages/v0.67.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.64.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.64.0...zpages/v0.67.0)

Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.42.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.39.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.39.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/metric` from 1.39.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/otel/trace` from 1.39.0 to 1.43.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.43.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.9.0...v1.10.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `golang.org/x/crypto` from 0.46.0 to 0.49.0
- [Commits](golang/crypto@v0.46.0...v0.49.0)

Updates `golang.org/x/net` from 0.48.0 to 0.52.0
- [Commits](golang/net@v0.48.0...v0.52.0)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.35.0
- [Commits](golang/oauth2@v0.34.0...v0.35.0)

Updates `golang.org/x/sync` from 0.19.0 to 0.20.0
- [Commits](golang/sync@v0.19.0...v0.20.0)

Updates `golang.org/x/sys` from 0.40.0 to 0.42.0
- [Commits](golang/sys@v0.40.0...v0.42.0)

Updates `golang.org/x/term` from 0.39.0 to 0.41.0
- [Commits](golang/term@v0.39.0...v0.41.0)

Updates `golang.org/x/text` from 0.33.0 to 0.35.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.33.0...v0.35.0)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20251222181119-0a764e51fe1b to 0.0.0-20260401024825-9d38bb4040a9
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20251222181119-0a764e51fe1b to 0.0.0-20260401024825-9d38bb4040a9
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/coreos/go-systemd/v22
  dependency-version: 22.7.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/fxamacker/cbor/v2
  dependency-version: 2.9.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/cmdutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/fileutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/mangling
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/netutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/typeutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag/yamlutils
  dependency-version: 0.25.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/google/cel-go
  dependency-version: 0.27.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-version: 2.28.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.20.1
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.67.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-version: 0.67.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.43.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-version: 1.10.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.52.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.35.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sync
  dependency-version: 0.20.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.41.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.35.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/api
  dependency-version: 0.0.0-20260401024825-9d38bb4040a9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260401024825-9d38bb4040a9
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github-dependencies-4dbdb46770 branch from 9f2de0d to abbf9be Compare April 20, 2026 08:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@andyzhangx andyzhangx Awaiting requested review from andyzhangx

@sunnylovestiramisu sunnylovestiramisu Awaiting requested review from sunnylovestiramisu

Assignees

No one assigned

Labels

area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. release-note-none Denotes a PR that doesn't merit a release note. size/XXL Denotes a PR that changes 1000+ lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@k8s-ci-robot