Bump the go_modules group across 3 directories with 4 updates by dependabot[bot] · Pull Request #32 · JSTONE1111/chainlink

dependabot · 2026-09-17T20:45:34Z

Bumps the go_modules group with 3 updates in the /core/scripts/cre/environment/examples/workflows/v1/proof-of-reserve/cron-based directory: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, golang.org/x/crypto and google.golang.org/grpc.
Bumps the go_modules group with 3 updates in the /core/scripts/cre/environment/examples/workflows/v1/proof-of-reserve/web-trigger-based directory: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, golang.org/x/crypto and google.golang.org/grpc.
Bumps the go_modules group with 2 updates in the /system-tests/tests/smoke/cre/evm/evmread directory: github.com/gorilla/websocket and golang.org/x/crypto.

Updates go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.12.2 to 0.21.0

Release notes

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's releases.

Release v0.20.0

Added

The OTLP exporter now has two new convenience functions, NewExportPipeline and InstallNewPipeline, setup and install the exporter in tracing and metrics pipelines. (#1373)

Adds semantic conventions for exceptions. (#1492)

Added Jaeger Environment variables: OTEL_EXPORTER_JAEGER_AGENT_HOST, OTEL_EXPORTER_JAEGER_AGENT_PORT These environment variables can be used to override Jaeger agent hostname and port (#1752)

Option ExportTimeout was added to batch span processor. (#1755)

trace.TraceFlags is now a defined type over byte and WithSampled(bool) TraceFlags and IsSampled() bool methods have been added to it. (#1770)

The Event and Link struct types from the go.opentelemetry.io/otel package now include a DroppedAttributeCount field to record the number of attributes that were not recorded due to configured limits being reached. (#1771)

The Jaeger exporter now reports dropped attributes for a Span event in the exported log. (#1771)

Adds test to check BatchSpanProcessor ignores OnEnd and ForceFlush post Shutdown. (#1772)

Extract resource attributes from the OTEL_RESOURCE_ATTRIBUTES environment variable and merge them with the resource.Default resource as well as resources provided to the TracerProvider and metric Controller. (#1785)

Added WithOSType resource configuration option to set OS (Operating System) type resource attribute (os.type). (#1788)

Added WithProcess* resource configuration options to set Process resource attributes. (#1788)

process.pid

process.executable.name

process.executable.path

process.command_args

process.owner

process.runtime.name

process.runtime.version

process.runtime.description

Adds k8s.node.name and k8s.node.uid attribute keys to the semconv package. (#1789)

Added support for configuring OTLP/HTTP and OTLP/gRPC Endpoints, TLS Certificates, Headers, Compression and Timeout via Environment Variables. (#1758, #1769 and #1811)

OTEL_EXPORTER_OTLP_ENDPOINT

OTEL_EXPORTER_OTLP_TRACES_ENDPOINT

OTEL_EXPORTER_OTLP_METRICS_ENDPOINT

OTEL_EXPORTER_OTLP_HEADERS

OTEL_EXPORTER_OTLP_TRACES_HEADERS

OTEL_EXPORTER_OTLP_METRICS_HEADERS

OTEL_EXPORTER_OTLP_COMPRESSION

OTEL_EXPORTER_OTLP_TRACES_COMPRESSION

OTEL_EXPORTER_OTLP_METRICS_COMPRESSION

OTEL_EXPORTER_OTLP_TIMEOUT

OTEL_EXPORTER_OTLP_TRACES_TIMEOUT

OTEL_EXPORTER_OTLP_METRICS_TIMEOUT

OTEL_EXPORTER_OTLP_CERTIFICATE

OTEL_EXPORTER_OTLP_TRACES_CERTIFICATE

OTEL_EXPORTER_OTLP_METRICS_CERTIFICATE

Adds otlpgrpc.WithTimeout option for configuring timeout to the otlp/gRPC exporter. (#1821)

Fixed

The Span.IsRecording implementation from go.opentelemetry.io/otel/sdk/trace always returns false when not being sampled. (#1750)

The Jaeger exporter now correctly sets tags for the Span status code and message. This means it uses the correct tag keys ("otel.status_code", "otel.status_description") and does not set the status message as a tag unless it is set on the span. (#1761)

The Jaeger exporter now correctly records Span event's names using the "event" key for a tag. Additionally, this tag is overridden, as specified in the OTel specification, if the event contains an attribute with that key. (#1768)

Zipkin Exporter: Ensure mapping between OTel and Zipkin span data complies with the specification. (#1688)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.49.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.0

Security

server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)

xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)

authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)

Special Thanks: @hnefatl

xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)

xds: Add support for xDS-based HTTP CONNECT proxies.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)

xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)

grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

Special Thanks: @Yusufihsangorgel

Release 1.82.2

Security

server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Special Thanks: @winklemad

Release 1.82.1

Security

server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

... (truncated)

Commits

4c226da Change version to 1.83.0 (#9228)
c198988 Cherrypick 9223 into v1.83.x (#9279)
8ce3ebf Cherrypick PR 9255 into v1.83.x (#9263)
e393849 Cherry-pick recent changes from master (#9240)
2a112a8 authz: add onPolicyUpdate callback to authz file watcher (#9142)
1a80fca vet: adds a check to disallow usage of regex.Compile in xDS code (#9216)
26ffdb3 [tls] Add safety check in custom cert verification that peer cert chain is no...
5013974 internal/grpcsync: add ScheduleAndWait to CallbackSerializer (#9162)
bd58bc0 internal/transport: increase test timeout locally in TestAccountCheckWindowSi...
484f150 httpfilter/extproc: add check to ensure that response trailer mode must be SE...
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.12.2 to 0.21.0

Release notes

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's releases.

Release v0.20.0

Added

The OTLP exporter now has two new convenience functions, NewExportPipeline and InstallNewPipeline, setup and install the exporter in tracing and metrics pipelines. (#1373)

Adds semantic conventions for exceptions. (#1492)

Added Jaeger Environment variables: OTEL_EXPORTER_JAEGER_AGENT_HOST, OTEL_EXPORTER_JAEGER_AGENT_PORT These environment variables can be used to override Jaeger agent hostname and port (#1752)

Option ExportTimeout was added to batch span processor. (#1755)

trace.TraceFlags is now a defined type over byte and WithSampled(bool) TraceFlags and IsSampled() bool methods have been added to it. (#1770)

The Event and Link struct types from the go.opentelemetry.io/otel package now include a DroppedAttributeCount field to record the number of attributes that were not recorded due to configured limits being reached. (#1771)

The Jaeger exporter now reports dropped attributes for a Span event in the exported log. (#1771)

Adds test to check BatchSpanProcessor ignores OnEnd and ForceFlush post Shutdown. (#1772)

Extract resource attributes from the OTEL_RESOURCE_ATTRIBUTES environment variable and merge them with the resource.Default resource as well as resources provided to the TracerProvider and metric Controller. (#1785)

Added WithOSType resource configuration option to set OS (Operating System) type resource attribute (os.type). (#1788)

Added WithProcess* resource configuration options to set Process resource attributes. (#1788)

process.pid

process.executable.name

process.executable.path

process.command_args

process.owner

process.runtime.name

process.runtime.version

process.runtime.description

Adds k8s.node.name and k8s.node.uid attribute keys to the semconv package. (#1789)

Added support for configuring OTLP/HTTP and OTLP/gRPC Endpoints, TLS Certificates, Headers, Compression and Timeout via Environment Variables. (#1758, #1769 and #1811)

OTEL_EXPORTER_OTLP_ENDPOINT

OTEL_EXPORTER_OTLP_TRACES_ENDPOINT

OTEL_EXPORTER_OTLP_METRICS_ENDPOINT

OTEL_EXPORTER_OTLP_HEADERS

OTEL_EXPORTER_OTLP_TRACES_HEADERS

OTEL_EXPORTER_OTLP_METRICS_HEADERS

OTEL_EXPORTER_OTLP_COMPRESSION

OTEL_EXPORTER_OTLP_TRACES_COMPRESSION

OTEL_EXPORTER_OTLP_METRICS_COMPRESSION

OTEL_EXPORTER_OTLP_TIMEOUT

OTEL_EXPORTER_OTLP_TRACES_TIMEOUT

OTEL_EXPORTER_OTLP_METRICS_TIMEOUT

OTEL_EXPORTER_OTLP_CERTIFICATE

OTEL_EXPORTER_OTLP_TRACES_CERTIFICATE

OTEL_EXPORTER_OTLP_METRICS_CERTIFICATE

Adds otlpgrpc.WithTimeout option for configuring timeout to the otlp/gRPC exporter. (#1821)

Fixed

The Span.IsRecording implementation from go.opentelemetry.io/otel/sdk/trace always returns false when not being sampled. (#1750)

The Jaeger exporter now correctly sets tags for the Span status code and message. This means it uses the correct tag keys ("otel.status_code", "otel.status_description") and does not set the status message as a tag unless it is set on the span. (#1761)

The Jaeger exporter now correctly records Span event's names using the "event" key for a tag. Additionally, this tag is overridden, as specified in the OTel specification, if the event contains an attribute with that key. (#1768)

Zipkin Exporter: Ensure mapping between OTel and Zipkin span data complies with the specification. (#1688)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc's changelog.

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.opentelemetry.io/otel/sdk/log. (#7124)

Add the experimental WithUnsafeAttributes no-copy attribute option to go.opentelemetry.io/otel/metric/x for future performance improvements. This API is a work in progress. (#8251)

Add Map and MapValue functions for the new MAP attribute type in go.opentelemetry.io/otel/attribute. (#8445)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8453)

Support MAP attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8453)

Apply AttributeValueLengthLimit recursively to values contained in attribute.MAP attributes in go.opentelemetry.io/otel/sdk/trace. (#8454)

Remove duplicate keys from attribute.MAP values in go.opentelemetry.io/otel/sdk/resource using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in instrumentation scope attributes in go.opentelemetry.io/otel/sdk/log using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in span, event, link, and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/trace using last-value-wins semantics. (#8471)

Remove duplicate keys by default from attribute.MAP values in measurement and instrumentation scope attributes in go.opentelemetry.io/otel/sdk/metric using last-value-wins semantics. (#8471)

Extend WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log to disable duplicate-key removal in attribute.MAP values for instrumentation scope attributes. (#8471)

Add the go.opentelemetry.io/otel/semconv/v1.42.0 package. The package contains semantic conventions from the v1.42.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.41.0. (#8484)

Add WithoutPanicRecording as a TracerProviderOption in go.opentelemetry.io/otel/sdk/trace to disable exception event recording for panics. (#8532)

Add the go.opentelemetry.io/otel/semconv/v1.43.0 package. The package contains semantic conventions from the v1.43.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.42.0. (#8628)

Changed

HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar now uses a time-unbiased sampling algorithm for exemplars. (#8306)

⚠️ Breaking Change: Use go.opentelemetry.io/otel/attribute.Value and go.opentelemetry.io/otel/attribute.KeyValue for log bodies and attributes in go.opentelemetry.io/otel/log, go.opentelemetry.io/otel/log/logtest, go.opentelemetry.io/otel/sdk/log, and go.opentelemetry.io/otel/sdk/log/logtest. (#8490)

Encode log bodies and attributes as go.opentelemetry.io/otel/attribute.Value JSON in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#8490)

Improve the performance of hashing BOOLSLICE, INT64SLICE, FLOAT64SLICE, and STRINGSLICE attribute values by avoiding reflection for short slices in go.opentelemetry.io/otel/attribute. (#8511)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_METRICS_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics")) to preserve the previous behavior. (#8538)

⚠️ Breaking Change: WithEndpointURL in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp no longer appends the default signal path when an endpoint URL has no path, making the behavior consistent with go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and with setting the endpoint through OTEL_EXPORTER_OTLP_TRACES_ENDPOINT. If the URL has no path component, the root path (/) is used. Use WithEndpointURL(url.JoinPath(endpoint, "/v1/traces")) to preserve the previous behavior. (#8538)

Deprecated

Deprecate WithExportBufferSize in go.opentelemetry.io/otel/sdk/log. The option remains available for source compatibility but no longer affects behavior; BatchProcessor no longer maintains a separate export-request buffer. (#8620)

Removed

⚠️ Breaking Change: Remove Kind, Value, KeyValue, their constructors, and attribute conversion helpers from go.opentelemetry.io/otel/log. (#8490)

⚠️ Breaking Change: Remove the AttributeValueLengthLimit and AttributeCountLimit fields from RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest; records produced by the factory now keep attribute limits disabled so test code can append exact attributes. (#8556)

Fixed

Apply TLS certificates configured through environment variables to gRPC connections in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc.

Prevent panics in go.opentelemetry.io/otel/bridge/opentracing when OpenTracing baggage is propagated concurrently with Span.SetBaggageItem.

Fix an off-by-one error in FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar that prevented the first exemplar from being sampled after the reservoir was filled. (#8309)

Interpret HTTP Retry-After header values as seconds instead of nanoseconds when retrying OTLP HTTP exports in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8383)

Fix a memory leak in the Reservoir implementation in go.opentelemetry.io/otel/sdk/metric/exemplar, where storing the full context.Context pinned large objects such as gRPC transport buffers. (#8389)

... (truncated)

Commits

93a693e Release v1.45.0 (#8693)
c65d435 Merge commit from fork
223f9fd sdk/metric: remove obsolete randomFloat64 TODO (#8685)
06272bc fix(deps): update googleapis to 6ac0973 (#8694)
a4f238f chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
37140e7 chore(deps): update codspeedhq/action action to v5.0.2 (#8690)
cef0855 chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#8689)
e814a72 Merge commit from fork
bfd8eb7 chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#8687)
48db2c6 chore(deps): update github/codeql-action action to v4.37.5 (#8692)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.49.0 to 0.54.0

Commits

cdce021 go.mod: update golang.org/x dependencies
d9474cc openpgp: make the deprecation message more explicit
7626c50 ssh: verify declared key type matches decoded key in authorized_keys
0471e79 ssh/agent: enforce strict limits on DSA key parameters
6435c37 ssh: sanitize client disconnect messages
7d695da ssh/agent: drain channel stderr in agent forwarders
5b7f841 acme/autocert: fix data race in Manager.createCert
0b316e7 argon2: update RFC 9106 parameter recommendations
55aec0a x509roots/fallback: update bundle
5f2de1a internal: remove wycheproof tests
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.80.0 to 1.83.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.83.0

Security

server: Stop reading from connections when flooded by HTTP/2 frames to mitigate resource exhaustion. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

xds: Fix panic when parsing route header matchers configured with empty exact_match, prefix_match, or suffix_match strings. (#9223)

New Features

xds/googlec2p: Enable DirectPath over Interconnect support for on-premises clients via the force-xds target URI query parameter. (#9133)

xds: Enable xDS configuration to control which fields get propagated from ORCA backend metric reports to LRS load reports. (#9145)

authz: Add OnPolicyUpdate callback to FileWatcherOptions to notify when an authz policy is loaded or updated. (#9142)

Special Thanks: @hnefatl

xds: Add support for the GCP Authentication HTTP Filter, which automatically fetches and attaches GCP Service Account Identity JWT tokens to outgoing RPCs.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)

xds: Add support for xDS-based HTTP CONNECT proxies.

This feature can be enabled by setting environment variable GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)

xds: Add support for contains_match in route header matchers. (#9223)

Bug Fixes

credentials/alts: Fix panic when processing malformed frames by validating that the message frame length exceeds the message type field size. (#9197)

grpc: Fix compilation on Plan 9 targets (GOOS=plan9), broken since v1.81.0. (#9255)

Special Thanks: @Yusufihsangorgel

Release 1.82.2

Security

server: Reject requests missing both :authority and Host headers with HTTP 400 and status Internal. (grpc/grpc-go#9365)

Special Thanks: @winklemad

Release 1.82.1

Security

server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.

xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.

xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.

xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

... (truncated)

Commits

4c226da Change version to 1.83.0 (#9228)
c198988 Cherrypick 9223 into v1.83.x (#9279)
8ce3ebf Cherrypick PR 9255 into v1.83.x (#9263)
e393849 Cherry-pick recent changes from master (#9240)
2a112a8 authz: add onPolicyUpdate callback to authz file watcher (#9142)
1a80fca vet: adds a check to disallow usage of regex.Compile in xDS code (#9216)
26ffdb3 [tls] Add safety check in custom cert verification that peer cert chain is no...
5013974 internal/grpcsync: add ScheduleAndWait to CallbackSerializer (#9162)
bd58bc0 internal/transport: increase test timeout locally in TestAccountCheckWindowSi...
484f150 httpfilter/extproc: add check to ensure that response trailer mode must be SE...
Additional commits viewable in compare view

Updates github.com/gorilla/websocket from 1.4.2 to 1.5.3

Release notes

Sourced from github.com/gorilla/websocket's releases.

v1.5.3

Important change

This reverts the websockets package back to gorilla/websocket@931041c

What's Changed

Fixes subprotocol selection (aling with rfc6455) by @KSDaemon in gorilla/websocket#823

Update README.md, replace master to main by @mstmdev in gorilla/websocket#862

Use status code constant by @mstmdev in gorilla/websocket#864

conn.go: default close handler should not return ErrCloseSent. by @pnx in gorilla/websocket#865

fix: replace ioutil.readfile with os.readfile by @rfyiamcool in gorilla/websocket#868

fix: add comment for the readBufferSize and writeBufferSize by @rfyiamcool in gorilla/websocket#869

Remove noisy printf in NextReader() and beginMessage() by @bcreane in gorilla/websocket#878

docs(echoreadall): fix function echoReadAll comment by @XdpCs in gorilla/websocket#881

make tests parallel by @ninedraft in gorilla/websocket#872

Upgrader.Upgrade: use http.ResposnseController by @ninedraft in gorilla/websocket#871

Do not handle network error in SetCloseHandler() by @nak3 in gorilla/websocket#863

perf: reduce timer in write_control by @rfyiamcool in gorilla/websocket#879

fix: lint example code by @rfyiamcool in gorilla/websocket#890

feat: format message type by @rfyiamcool in gorilla/websocket#889

Remove hideTempErr to allow downstream users to check for errors like net.ErrClosed by @UnAfraid in gorilla/websocket#894

Do not timeout when WriteControl deadline is zero in gorilla/websocket#898

Excludes errchecks linter by @apoorvajagtap in gorilla/websocket#904

Return errors instead of printing to logs by @apoorvajagtap in

Bumps the go_modules group with 3 updates in the /core/scripts/cre/environment/examples/workflows/v1/proof-of-reserve/cron-based directory: [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go_modules group with 3 updates in the /core/scripts/cre/environment/examples/workflows/v1/proof-of-reserve/web-trigger-based directory: [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go), [golang.org/x/crypto](https://github.com/golang/crypto) and [google.golang.org/grpc](https://github.com/grpc/grpc-go). Bumps the go_modules group with 2 updates in the /system-tests/tests/smoke/cre/evm/evmread directory: [github.com/gorilla/websocket](https://github.com/gorilla/websocket) and [golang.org/x/crypto](https://github.com/golang/crypto). Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.12.2 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@log/v0.12.2...log/v0.21.0) Updates `golang.org/x/crypto` from 0.49.0 to 0.54.0 - [Commits](golang/crypto@v0.49.0...v0.54.0) Updates `google.golang.org/grpc` from 1.80.0 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.83.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.12.2 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@log/v0.12.2...log/v0.21.0) Updates `golang.org/x/crypto` from 0.49.0 to 0.54.0 - [Commits](golang/crypto@v0.49.0...v0.54.0) Updates `google.golang.org/grpc` from 1.80.0 to 1.83.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.80.0...v1.83.0) Updates `github.com/gorilla/websocket` from 1.4.2 to 1.5.3 - [Release notes](https://github.com/gorilla/websocket/releases) - [Commits](gorilla/websocket@v1.4.2...v1.5.3) Updates `golang.org/x/crypto` from 0.46.0 to 0.52.0 - [Commits](golang/crypto@v0.49.0...v0.54.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc dependency-version: 0.21.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc dependency-version: 0.21.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.83.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/gorilla/websocket dependency-version: 1.5.3 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.52.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-09-17T20:45:40Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: 4a64cc33-f6b7-4173-8ae2-1d9aee4bf9d5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 17, 2026

dependabot Bot had a problem deploying to integration September 17, 2026 20:45 Error

Navigation Menu

Repository navigation

Bump the go_modules group across 3 directories with 4 updates - #32

Bump the go_modules group across 3 directories with 4 updates#32
dependabot[bot] wants to merge 1 commit into
developfrom
dependabot/go_modules/core/scripts/cre/environment/examples/workflows/v1/proof-of-reserve/cron-based/go_modules-65de68f3cb

dependabot Bot commented on behalf of github Sep 17, 2026

Uh oh!

coderabbitai Bot commented Sep 17, 2026

Review skipped

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 17, 2026

Release v0.20.0

Added

Fixed

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

Release 1.83.0

Security

New Features

Bug Fixes

Release 1.82.2

Security

Release 1.82.1

Security

Release 1.82.0

Behavior Changes

New Features

Release v0.20.0

Added

Fixed

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Changed

Deprecated

Removed

Fixed

Release 1.83.0

Security

New Features

Bug Fixes

Release 1.82.2

Security

Release 1.82.1

Security

Release 1.82.0

Behavior Changes

New Features

v1.5.3

Important change

What's Changed

Uh oh!

coderabbitai Bot commented Sep 17, 2026

Review skipped

Uh oh!

This branch was successfully deployed

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants