Bump the go-modules group with 11 updates by dependabot[bot] · Pull Request #860 · paketo-buildpacks/pipenv

dependabot · 2026-03-03T06:05:19Z

Bumps the go-modules group with 11 updates:

Package	From	To
github.com/google/go-containerregistry	`0.21.1`	`0.21.2`
github.com/paketo-buildpacks/freezer	`0.2.2`	`0.2.3`
github.com/sylabs/sif/v2	`2.23.0`	`2.24.0`
go.opentelemetry.io/contrib/detectors/gcp	`1.40.0`	`1.41.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`0.65.0`	`0.66.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.65.0`	`0.66.0`
go.opentelemetry.io/otel	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/metric	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/sdk	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/sdk/metric	`1.40.0`	`1.41.0`
go.opentelemetry.io/otel/trace	`1.40.0`	`1.41.0`

Updates github.com/google/go-containerregistry from 0.21.1 to 0.21.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.21.2

What's Changed

Better handle redirects to https in ping by @jonjohnsonjr in google/go-containerregistry#2225

Full Changelog: google/go-containerregistry@v0.21.1...v0.21.2

Commits

9e0ccb0 Better handle redirects to https in ping (#2225)
See full diff in compare view

Updates github.com/paketo-buildpacks/freezer from 0.2.2 to 0.2.3

Release notes

Sourced from github.com/paketo-buildpacks/freezer's releases.

0.2.3

⛏ Dependency Upgrades

Bump github.com/paketo-buildpacks/packit/v2 from 2.25.3 to 2.25.4 (#36) @dependabot

Bump github.com/paketo-buildpacks/packit/v2 from 2.24.0 to 2.25.2 (#32) @dependabot

🚧 Tasks

Bump pipeline from 1.44.0 to 1.45.0 (#39) @paketo-bot

Bump Go Modules (#40) @paketo-bot

Bump Go Modules (#38) @paketo-bot

Bump Go Modules (#37) @paketo-bot

Bump pipeline from 1.43.0 to 1.44.0 (#35) @paketo-bot

Bump Go Modules (#30) @paketo-bot

Bump Go Modules (#28) @paketo-bot

Bump Go Modules (#25) @paketo-bot

Commits

4ec7aab Merge pull request #39 from paketo-buildpacks/update/pipeline
9d5fafa Bump pipeline from 1.44.0 to 1.45.0
3ef05cd Merge pull request #40 from paketo-buildpacks/update/go
b6b5517 Bump Go Modules
2d2e7e0 Merge pull request #38 from paketo-buildpacks/update/go
31ee674 Bump Go Modules
da71d6d Merge pull request #37 from paketo-buildpacks/update/go
09cafb5 Bump Go Modules
7ff0cd2 Merge pull request #35 from paketo-buildpacks/update/pipeline
f21c51d Bump pipeline from 1.43.0 to 1.44.0
Additional commits viewable in compare view

Updates github.com/sylabs/sif/v2 from 2.23.0 to 2.24.0

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.24.0

This release adds support for the loong64 architecture.

What's Changed

build(deps): bump github.com/google/go-containerregistry from 0.20.7 to 0.21.0 by @dependabot[bot] in sylabs/sif#444

build(deps): bump github.com/google/go-containerregistry from 0.21.0 to 0.21.1 by @dependabot[bot] in sylabs/sif#445

build(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3 by @dependabot[bot] in sylabs/sif#446

build(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0 by @dependabot[bot] in sylabs/sif#447

feat: add loong64 architecture by @linsein in sylabs/sif#448

New Contributors

@linsein made their first contribution in sylabs/sif#448

Full Changelog: sylabs/sif@v2.23.0...v2.24.0

Commits

f352d2d Merge pull request #448 from linsein/loong64-support
38c405a feat: add loong64 architecture
8e33fc2 Merge pull request #447 from sylabs/dependabot/go_modules/main/github.com/Pro...
20ab7f1 build(deps): bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0
d7a0d67 Merge pull request #446 from sylabs/dependabot/go_modules/github.com/cloudfla...
f1ae6cd build(deps): bump github.com/cloudflare/circl from 1.6.1 to 1.6.3
b28eed8 Merge pull request #445 from sylabs/dependabot/go_modules/main/github.com/goo...
f75a0d2 build(deps): bump github.com/google/go-containerregistry
7ad084f Merge pull request #444 from sylabs/dependabot/go_modules/main/github.com/goo...
0740471 build(deps): bump github.com/google/go-containerregistry
See full diff in compare view

Updates go.opentelemetry.io/contrib/detectors/gcp from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/contrib/detectors/gcp's changelog.

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of [Go 1.26]. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

Commits

07fa424 Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 (#8617)
f64d6bb HTTP instrumentations cleanup (#8532)
5995ae8 add version file for Autodetect detector (#8555)
c0aa7c9 internal/shared/semconv: Reduce allocations (#8511)
e81a2b4 otelgrpc: Use canonical string status codes (#8565)
8096a3e otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler (#8587)
2dce245 otelconf: use translation strategy instead of deprecated funcs (#8595)
d2a5807 Add version file for autoexport module (#8612)
52dd987 ci: add govulncheck job to CI workflow and update lint target (#8613)
c4223d5 chore(deps): update prom/prometheus docker tag to v3.10.0 (#8603)
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.65.0 to 0.66.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of Go 1.26. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of [Go 1.26]. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

Commits

07fa424 Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 (#8617)
f64d6bb HTTP instrumentations cleanup (#8532)
5995ae8 add version file for Autodetect detector (#8555)
c0aa7c9 internal/shared/semconv: Reduce allocations (#8511)
e81a2b4 otelgrpc: Use canonical string status codes (#8565)
8096a3e otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler (#8587)
2dce245 otelconf: use translation strategy instead of deprecated funcs (#8595)
d2a5807 Add version file for autoexport module (#8612)
52dd987 ci: add govulncheck job to CI workflow and update lint target (#8613)
c4223d5 chore(deps): update prom/prometheus docker tag to v3.10.0 (#8603)
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.65.0 to 0.66.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of Go 1.26. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Add WithSpanKind option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to override the default span kind. (#8506)

Add const Version in go.opentelemetry.io/contrib/bridges/otelzap. (#8544)

Support testing of [Go 1.26]. (#8549)

Add const Version in go.opentelemetry.io/contrib/detectors/autodetect. (#8555)

Add const Version in go.opentelemetry.io/contrib/detectors/azure/azurevm. (#8553)

Add const Version in go.opentelemetry.io/contrib/processors/baggagecopy. (#8557)

Add const Version in go.opentelemetry.io/contrib/detectors/aws/lambda. (#8510)

Add const Version in go.opentelemetry.io/contrib/propagators/autoprop. (#8488)

Add const Version in go.opentelemetry.io/contrib/processors/minsev. (#8590)

Add const Version in go.opentelemetry.io/contrib/exporters/autoexport. (#8612)

Fixed

Change the rpc.server.call.duration metric value from milliseconds to seconds in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8509)

Change the rpc.response.status_code attribute to the canonical UPPER_SNAKE_CASE format in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8565)

Enforce that client_certificate_file and client_key_file are provided together in go.opentelemetry.io/contrib/otelconf. (#8450)

Fix broken CSS and JavaScript CDN URLs in go.opentelemetry.io/contrib/zpages by replacing the inaccessible code.getmdl.io CDN with cdnjs.cloudflare.com. (#8502)

Use Prometheus translation strategy instead of deprecated funcs in go.opentelemetry.io/contrib/otelconf. (#8595)

Removed

Remove the deprecated zipkin exporter example in go.opentelemetry.io/contrib/examples/zipkin. (#8501)

Changed

Reduce allocations in the generated HTTP internal/semconv packages. (#8511) Updated modules include:

go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful

go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin

go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux

go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho

go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace

go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp

Update the configuration schema used in go.opentelemetry.io/contrib/otelconf to rc.3. (#8505)

Deprecated

WithMetricAttributesFn in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated and will be removed in a future release. Use Labeler instead. (#8587)

Commits

07fa424 Release 1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0 (#8617)
f64d6bb HTTP instrumentations cleanup (#8532)
5995ae8 add version file for Autodetect detector (#8555)
c0aa7c9 internal/shared/semconv: Reduce allocations (#8511)
e81a2b4 otelgrpc: Use canonical string status codes (#8565)
8096a3e otelhttp: Deprecate WithMetricAttributesFn in favor of Labeler (#8587)
2dce245 otelconf: use translation strategy instead of deprecated funcs (#8595)
d2a5807 Add version file for autoexport module (#8612)
52dd987 ci: add govulncheck job to CI workflow and update lint target (#8613)
c4223d5 chore(deps): update prom/prometheus docker tag to v3.10.0 (#8603)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/metric from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

Support testing of [Go 1.26]. (#7902)

Fixed

Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)

Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

4575a97 Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)
66fc10d fix: add error handling for insecure HTTP endpoints with TLS client configura...
76e6eec chore(deps): update github/codeql-action action to v4.32.5 (#7980)
0d50f90 Revert "Generate semconv/v1.40.0" (#7978)
c38a4a5 Generate semconv/v1.40.0 (#7929)
0f1a224 chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)
c79ebf4 chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)
f758157 chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)
92a1164 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...
3cd7c27 chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)
Additional commits viewable in compare view

Updates `...

Description has been truncated

Bumps the go-modules group with 11 updates: | Package | From | To | | --- | --- | --- | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.1` | `0.21.2` | | [github.com/paketo-buildpacks/freezer](https://github.com/paketo-buildpacks/freezer) | `0.2.2` | `0.2.3` | | [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.23.0` | `2.24.0` | | [go.opentelemetry.io/contrib/detectors/gcp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.66.0` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.66.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | Updates `github.com/google/go-containerregistry` from 0.21.1 to 0.21.2 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.1...v0.21.2) Updates `github.com/paketo-buildpacks/freezer` from 0.2.2 to 0.2.3 - [Release notes](https://github.com/paketo-buildpacks/freezer/releases) - [Commits](paketo-buildpacks/freezer@v0.2.2...v0.2.3) Updates `github.com/sylabs/sif/v2` from 2.23.0 to 2.24.0 - [Release notes](https://github.com/sylabs/sif/releases) - [Commits](sylabs/sif@v2.23.0...v2.24.0) Updates `go.opentelemetry.io/contrib/detectors/gcp` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.65.0 to 0.66.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.66.0) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.65.0 to 0.66.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.66.0) Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) --- updated-dependencies: - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/freezer dependency-version: 0.2.3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-version: 2.24.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/detectors/gcp dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc dependency-version: 0.66.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.66.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.41.0 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 3, 2026

dependabot Bot requested a review from a team as a code owner March 3, 2026 06:05

dependabot Bot added the dependencies Pull requests that update a dependency file label Mar 3, 2026

dependabot Bot requested a review from a team as a code owner March 3, 2026 06:05

paketo-bot added the semver:patch A change requiring a patch version bump label Mar 3, 2026

paketo-bot-reviewer approved these changes Mar 3, 2026

View reviewed changes

paketo-bot merged commit b757b9f into main Mar 3, 2026
11 of 12 checks passed

paketo-bot deleted the dependabot/go_modules/go-modules-240d0e6263 branch March 3, 2026 06:21

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group with 11 updates#860

Bump the go-modules group with 11 updates#860
paketo-bot merged 1 commit intomainfrom
dependabot/go_modules/go-modules-240d0e6263

dependabot Bot commented on behalf of github Mar 3, 2026

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot Bot commented on behalf of github Mar 3, 2026

v0.21.2

What's Changed

0.2.3

⛏ Dependency Upgrades

🚧 Tasks

v2.24.0

What's Changed

New Contributors

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

Added

Fixed

Removed

Changed

Deprecated

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

Added

Fixed

Removed

Changed

Deprecated

What's Changed

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

Added

Fixed

Removed

Changed

Deprecated

v1.41.0/v2.3.0/v0.66.0/v0.35.0/v0.21.0/v0.16.0/v0.14.0/v0.13.0

Added

Fixed

Removed

Changed

Deprecated

What's Changed

[1.41.0/2.3.0/0.66.0/0.35.0/0.21.0/0.16.0/0.14.0/0.13.0] - 2026-03-02

Added

Fixed

Removed

Changed

Deprecated

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

Added

Fixed

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants