Skip to content

chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] (main)#53

Open
anaconda-renovate[bot] wants to merge 1 commit into
mainfrom
deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlplog-otlploghttp-vulnerability
Open

chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] (main)#53
anaconda-renovate[bot] wants to merge 1 commit into
mainfrom
deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlplog-otlploghttp-vulnerability

Conversation

@anaconda-renovate

@anaconda-renovate anaconda-renovate Bot commented Apr 12, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.12.2 → v0.19.0 age confidence

opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response bodies

CVE-2026-39882 / GHSA-w8rr-5gcm-pp58 / GO-2026-4985

More information

Details

overview:
this report shows that the otlp HTTP exporters (traces/metrics/logs) read the full HTTP response body into an in-memory bytes.Buffer without a size cap.

this is exploitable for memory exhaustion when the configured collector endpoint is attacker-controlled (or a network attacker can mitm the exporter connection).

severity

HIGH

not claiming: this is a remote dos against every default deployment.
claiming: if the exporter sends traces to an untrusted collector endpoint (or over a network segment where mitm is realistic), that endpoint can crash the process via a large response body.

callsite (pinned):

  • exporters/otlp/otlptrace/otlptracehttp/client.go:199
  • exporters/otlp/otlptrace/otlptracehttp/client.go:230
  • exporters/otlp/otlpmetric/otlpmetrichttp/client.go:170
  • exporters/otlp/otlpmetric/otlpmetrichttp/client.go:201
  • exporters/otlp/otlplog/otlploghttp/client.go:190
  • exporters/otlp/otlplog/otlploghttp/client.go:221

permalinks (pinned):

root cause:
each exporter client reads resp.Body using io.Copy(&respData, resp.Body) into a bytes.Buffer on both success and error paths, with no upper bound.

impact:
a malicious collector can force large transient heap allocations during export (peak memory scales with attacker-chosen response size) and can potentially crash the instrumented process (oom).

affected component:

  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
  • go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp

repro (local-only):

unzip poc.zip -d poc
cd poc
make canonical resp_bytes=33554432 chunk_delay_ms=0

expected output contains:

[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[PROOF_MARKER]: resp_bytes=33554432 peak_alloc_bytes=118050512

control (same env, patched target):

unzip poc.zip -d poc
cd poc
make control resp_bytes=33554432 chunk_delay_ms=0

expected control output contains:

[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[NC_MARKER]: resp_bytes=33554432 peak_alloc_bytes=512232

attachments: poc.zip (attached)

PR_DESCRIPTION.md

attack_scenario.md

poc.zip

Fixed in: https://github.com/open-telemetry/opentelemetry-go/pull/8108

Severity

  • CVSS Score: 5.3 / 10 (Medium)
  • Vector String: CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

References

This data is provided by OSV and the GitHub Advisory Database (CC-BY 4.0).

Oversized OTLP HTTP response bodies can cause memory exhaustion in go.opentelemetry.io/otel/exporters/otlp

CVE-2026-39882 / GHSA-w8rr-5gcm-pp58 / GO-2026-4985

More information

Details

The OTLP HTTP exporters (traces, metrics, and logs) do not limit the size of the HTTP response body read from the collector. A malicious or misconfigured collector can send a large response body, leading to excessive memory consumption and potential process termination (OOM).

Severity

Unknown

References

This data is provided by OSV and the Go Vulnerability Database (CC-BY 4.0).

Release Notes

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp)

v0.19.0

Compare Source

Added
  • Added Marshaler config option to otlphttp to enable otlp over json or protobufs. (#​1586)
  • A ForceFlush method to the "go.opentelemetry.io/otel/sdk/trace".TracerProvider to flush all registered SpanProcessors. (#​1608)
  • Added WithSampler and WithSpanLimits to tracer provider. (#​1633, #​1702)
  • "go.opentelemetry.io/otel/trace".SpanContext now has a remote property, and IsRemote() predicate, that is true when the SpanContext has been extracted from remote context data. (#​1701)
  • A Valid method to the "go.opentelemetry.io/otel/attribute".KeyValue type. (#​1703)
Changed
  • trace.SpanContext is now immutable and has no exported fields. (#​1573)
    • trace.NewSpanContext() can be used in conjunction with the trace.SpanContextConfig struct to initialize a new SpanContext where all values are known.
  • Update the ForceFlush method signature to the "go.opentelemetry.io/otel/sdk/trace".SpanProcessor to accept a context.Context and return an error. (#​1608)
  • Update the Shutdown method to the "go.opentelemetry.io/otel/sdk/trace".TracerProvider return an error on shutdown failure. (#​1608)
  • The SimpleSpanProcessor will now shut down the enclosed SpanExporter and gracefully ignore subsequent calls to OnEnd after Shutdown is called. (#​1612)
  • "go.opentelemetry.io/sdk/metric/controller.basic".WithPusher is replaced with WithExporter to provide consistent naming across project. (#​1656)
  • Added non-empty string check for trace Attribute keys. (#​1659)
  • Add description to SpanStatus only when StatusCode is set to error. (#​1662)
  • Jaeger exporter falls back to resource.Default's service.name if the exported Span does not have one. (#​1673)
  • Jaeger exporter populates Jaeger's Span Process from Resource. (#​1673)
  • Renamed the LabelSet method of "go.opentelemetry.io/otel/sdk/resource".Resource to Set. (#​1692)
  • Changed WithSDK to WithSDKOptions to accept variadic arguments of TracerProviderOption type in go.opentelemetry.io/otel/exporters/trace/jaeger package. (#​1693)
  • Changed WithSDK to WithSDKOptions to accept variadic arguments of TracerProviderOption type in go.opentelemetry.io/otel/exporters/trace/zipkin package. (#​1693)
  • "go.opentelemetry.io/otel/sdk/resource".NewWithAttributes will now drop any invalid attributes passed. (#​1703)
  • "go.opentelemetry.io/otel/sdk/resource".StringDetector will now error if the produced attribute is invalid. (#​1703)
Removed
  • Removed serviceName parameter from Zipkin exporter and uses resource instead. (#​1549)
  • Removed WithConfig from tracer provider to avoid overriding configuration. (#​1633)
  • Removed the exported SimpleSpanProcessor and BatchSpanProcessor structs.
    These are now returned as a SpanProcessor interface from their respective constructors. (#​1638)
  • Removed WithRecord() from trace.SpanOption when creating a span. (#​1660)
  • Removed setting status to Error while recording an error as a span event in RecordError. (#​1663)
  • Removed jaeger.WithProcess configuration option. (#​1673)
  • Removed ApplyConfig method from "go.opentelemetry.io/otel/sdk/trace".TracerProvider and the now unneeded Config struct. (#​1693)
Fixed
  • Jaeger Exporter: Ensure mapping between OTEL and Jaeger span data complies with the specification. (#​1626)
  • SamplingResult.TraceState is correctly propagated to a newly created span's SpanContext. (#​1655)
  • The otel-collector example now correctly flushes metric events prior to shutting down the exporter. (#​1678)
  • Do not set span status message in SpanStatusFromHTTPStatusCode if it can be inferred from http.status_code. (#​1681)
  • Synchronization issues in global trace delegate implementation. (#​1686)
  • Reduced excess memory usage by global TracerProvider. (#​1687)
Raw changes made between v0.18.0 and v0.19.0

2b4fa96 (HEAD -> main, tag: v0.19.0, tag: trace/v0.19.0, tag: sdk/v0.19.0, tag: sdk/metric/v0.19.0, tag: sdk/export/metric/v0.19.0, tag: oteltest/v0.19.0, tag: metric/v0.19.0, tag: exporters/trace/zipkin/v0.19.0, tag: exporters/trace/jaeger/v0.19.0, tag: exporters/stdout/v0.19.0, tag: exporters/otlp/v0.19.0, tag: exporters/metric/prometheus/v0.19.0, tag: example/zipkin/v0.19.0, tag: example/prometheus/v0.19.0, tag: example/prom-collector/v0.19.0, tag: example/otel-collector/v0.19.0, tag: example/opencensus/v0.19.0, tag: example/namedtracer/v0.19.0, tag: example/jaeger/v0.19.0, tag: bridge/opentracing/v0.19.0, tag: bridge/opencensus/v0.19.0, upstream/main, origin/main) Release v0.19.0 (#​1710)
4beb704 sdk/trace: removing ApplyConfig and Config (#​1693)
1d42be1 Rename WithDefaultSampler TracerProvider option to WithSampler and update docs (#​1702)
860d5d8 Add flag to determine whether SpanContext is remote (#​1701)
0fe65e6 Comply with OpenTelemetry attributes specification (#​1703)
8888435 Bump google.golang.org/api from 0.40.0 to 0.41.0 in /exporters/trace/jaeger (#​1700)
345f264 (global-docs) breaking(zipkin): removes servicName from zipkin exporter. (#​1697)
62cbf0f Populate Jaeger's Span.Process from Resource (#​1673)
28eaaa9 Add a test to prove the Tracer is safe for concurrent calls (#​1665)
8b1be11 Rename resource pkg label vars and methods (#​1692)
a1539d4 OpenCensus metric exporter bridge (#​1444)
77aa218 Fix issue #​1490, apply same logic as in the SDK (#​1687)
9d3416c Fix synchronization issues in global trace delegate implementation (#​1686)
58f69f0 Span status from HTTP code: Do not set status message if it can be inferred (#​1681)
9c305bd Flush metric events prior to shutdown in OTLP example (#​1678)
66b1135 Fix CHANGELOG (#​1680)
90bd4ab Update employer information for maintainers (#​1683)
3684191 Remove WithRecord() option from trace.SpanOption when starting a span (#​1660)
65c7de2 Remove trace prefix from NoOp src files. (#​1679)
e88a091 Make SpanContext Immutable (#​1573)
d75e268 Avoid overriding configuration of tracer provider (#​1633)
2b4d5ac Bump github.com/golangci/golangci-lint in /internal/tools (#​1671)
150b868 Bump github.com/google/go-cmp from 0.5.4 to 0.5.5 (#​1667)
76aa924 Fix the examples target info messaging (#​1676)
a3aa9fd Bump github.com/itchyny/gojq from 0.12.1 to 0.12.2 in /internal/tools (#​1672)
a5edd79 Removed setting error status while recording err as span event (#​1663)
e981475 chore(zipkin): improves zipkin example to not to depend on timeouts. (#​1566)
3dc91f2 Add ForceFlush method to TracerProvider (#​1608)
bd0bba4 exporter: swap pusher for exporter (#​1656)
5690485 Update the SimpleSpanProcessor (#​1612)
a7f7aba SpanStatus description set only when status code is set to Error (#​1662)
05252f4 Jaeger Exporter: Fix minor mapping discrepancies (#​1626)
238e7c6 Add non-empty string check for attribute keys (#​1659)
e9b9aca Add tests for propagation of Sampler Tracestate changes (#​1655)
875a258 Add docs on when reviews should be cleared (#​1556)
7153ef2 Add HTTP/JSON to the otlp exporter (#​1586)
62e2a0f Unexport the simple and batch SpanProcessors (#​1638)
992837f Add TracerProvider tests to oteltest harness (#​1607)

v0.18.0

Compare Source

Added
  • Added resource.Default() for use with meter and tracer providers. (#​1507)
  • AttributePerEventCountLimit and AttributePerLinkCountLimit for SpanLimits. (#​1535)
  • Added Keys() method to propagation.TextMapCarrier and propagation.HeaderCarrier to adapt http.Header to this interface. (#​1544)
  • Added code attributes to go.opentelemetry.io/otel/semconv package. (#​1558)
  • Compatibility testing suite in the CI system for the following systems. (#​1567)
    OS Go Version Architecture
    Ubuntu 1.15 amd64
    Ubuntu 1.14 amd64
    Ubuntu 1.15 386
    Ubuntu 1.14 386
    MacOS 1.15 amd64
    MacOS 1.14 amd64
    Windows 1.15 amd64
    Windows 1.14 amd64
    Windows 1.15 386
    Windows 1.14 386
Changed
  • Replaced interface oteltest.SpanRecorder with its existing implementation
    StandardSpanRecorder (#​1542).
  • Default span limit values to 128. (#​1535)
  • Rename MaxEventsPerSpan, MaxAttributesPerSpan and MaxLinksPerSpan to EventCountLimit, AttributeCountLimit and LinkCountLimit, and move these fields into SpanLimits. (#​1535)
  • Renamed the otel/label package to otel/attribute. (#​1541)
  • Vendor the Jaeger exporter's dependency on Apache Thrift. (#​1551)
  • Parallelize the CI linting and testing. (#​1567)
  • Stagger timestamps in exact aggregator tests. (#​1569)
  • Changed all examples to use WithBatchTimeout(5 * time.Second) rather than WithBatchTimeout(5). (#​1621)
  • Prevent end-users from implementing some interfaces (#​1575)
      "otel/exporters/otlp/otlphttp".Option
      "otel/exporters/stdout".Option
      "otel/oteltest".Option
      "otel/trace".TracerOption
      "otel/trace".SpanOption
      "otel/trace".EventOption
      "otel/trace".LifeCycleOption
      "otel/trace".InstrumentationOption
      "otel/sdk/resource".Option
      "otel/sdk/trace".ParentBasedSamplerOption
      "otel/sdk/trace".ReadOnlySpan
      "otel/sdk/trace".ReadWriteSpan
Removed
  • Removed attempt to resample spans upon changing the span name with span.SetName(). (#​1545)
  • The test-benchmark is no longer a dependency of the precommit make target. (#​1567)
  • Removed the test-386 make target.
    This was replaced with a full compatibility testing suite (i.e. multi OS/arch) in the CI system. (#​1567)
Fixed
  • The sequential timing check of timestamps in the stdout exporter are now setup explicitly to be sequential (#​1571). (#​1572)
  • Windows build of Jaeger tests now compiles with OS specific functions (#​1576). (#​1577)
  • The sequential timing check of timestamps of go.opentelemetry.io/otel/sdk/metric/aggregator/lastvalue are now setup explicitly to be sequential (#​1578). (#​1579)
  • Validate tracestate header keys with vedors according to the W3C TraceContext specification (#​1475). (#​1581)
  • The OTLP exporter includes related labels for translations of a GaugeArray (#​1563). (#​1570)

Raw changes made between v0.17.0 and v0.18.0

bb4c297 Pre release v0.18.0 (#​1635)
712c3dc Fix makefile ci target and coverage test packages (#​1634)
841d2a5 Rename local var new to not collide with builtin (#​1610)
13938ab Update SpanProcessor docs (#​1611)
e25503a Add compatibility tests to CI (#​1567)
1519d95 Use reasonable interval in sdktrace.WithBatchTimeout (#​1621)
7d4496e Pass metric labels when transforming to gaugeArray (#​1570)
6d4a5e0 Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /exporters/otlp (#​1619)
a93393a Bump google.golang.org/grpc in /example/prom-collector (#​1620)
e499ca8 Fix validation for tracestate with vendor and add tests (#​1581)
43886e5 Make timestamps sequential in lastvalue agg check (#​1579)
37688ef revent end-users from implementing some interfaces (#​1575)
85e696d Updating documentation with an working example for creating NewExporter (#​1513)
562eb28 Unify the Added sections of the unreleased changes (#​1580)
c4cf1af Fix Windows build of Jaeger tests (#​1577)
4a163be Fix stdout TestStdoutTimestamp failure with sleep (#​1572)
bd4701e Stagger timestamps in exact aggregator tests (#​1569)
b94cd4b add code attributes to semconv package (#​1558)
78c06ce Update docs from gitter to slack for communication (#​1554)
1307c91 Remove vendor exclude from license-check (#​1552)
5d2636e Bump github.com/golangci/golangci-lint in /internal/tools (#​1565)
d7aff47 Vendor Thrift dependency (#​1551)
298c5a1 Update span limits to conform with OpenTelemetry specification (#​1535)
ecf65d7 Rename otel/label -> otel/attribute (#​1541)
1b5b662 Remove resampling on span.SetName (#​1545)
8da5299 fix: grpc reconnection (#​1521)
3bce9c9 Add Keys() method to propagation.TextMapCarrier (#​1544)
0b1a1c7 Make oteltest.SpanRecorder into a concrete type (#​1542)
7d0e3e5 SDK span no modification after ended (#​1543)
7de3b58 Remove extra labels types (#​1314)
73194e4 Bump google.golang.org/api from 0.39.0 to 0.40.0 in /exporters/trace/jaeger (#​1536)
8fae0a6 Create resource.Default() with required attributes/default values (#​1507)

v0.17.0

Compare Source

Changed
  • Rename project default branch from master to main.
  • Reverse order in which Resource attributes are merged, per change in spec. (#​1501)
  • Add tooling to maintain "replace" directives in go.mod files automatically. (#​1528)
  • Create new modules: otel/metric, otel/trace, otel/oteltest, otel/sdk/export/metric, otel/sdk/metric (#​1528)
  • Move metric-related public global APIs from otel to otel/metric/global. (#​1528)

9b242bc (upstream/main, origin/main, main) Organize API into Go modules based on stability and dependencies (#​1528)
e50a1c8 Bump actions/cache from v2 to v2.1.4 (#​1518)
a6aa7f0 Bump google.golang.org/api from 0.38.0 to 0.39.0 in /exporters/trace/jaeger (#​1517)
38efc87 Code Improvement - Error strings should not be capitalized (#​1488)
6b34050 Update default branch name (#​1505)
b39fd05 nit: Fix comment to be up-to-date (#​1510)
186c295 Fix golint error of package comment form (#​1487)
9308d66 Bump google.golang.org/api from 0.37.0 to 0.38.0 in /exporters/trace/jaeger (#​1506)
1952d7b Reverse order of attribute precedence when merging two Resources (#​1501)
ad7b471 Remove build flags for runtime/trace support (#​1498)
4bf4b69 Remove inaccurate and unnecessary import comment (#​1481)
7e19eb6 Bump google.golang.org/api from 0.36.0 to 0.37.0 in /exporters/trace/jaeger (#​1504)
c6a4406 Bump github.com/golangci/golangci-lint in /internal/tools (#​1503)
9524ac0 (upstream/master, origin/master, origin/HEAD) Update workflows to include main branch as trigger (#​1497)
c066f15 Bump github.com/gogo/protobuf from 1.3.1 to 1.3.2 in /internal/tools (#​1478)
894e024 Bump github.com/golangci/golangci-lint in /internal/tools (#​1477)
71ffba3 Bump google.golang.org/grpc from 1.34.0 to 1.35.0 in /exporters/otlp (#​1471)
515809a Bump github.com/itchyny/gojq from 0.12.0 to 0.12.1 in /internal/tools (#​1472)
3e96ad1 gitignore: remove unused example path (#​1474)
c562277 Histogram aggregator functional options (#​1434)
0df8cd6 Rename Makefile.proto to avoid interpretation as proto file (#​1468)
979ff51 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#​1453)
1df8b3b Bump github.com/gogo/protobuf from 1.3.1 to 1.3.2 in /exporters/otlp (#​1456)
4c30a90 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /sdk (#​1455)
5a9f8f6 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /exporters/stdout (#​1454)
7786f34 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /exporters/trace/zipkin (#​1457)
4352a7a Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /exporters/otlp (#​1460)
6990b3b Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /exporters/metric/prometheus (#​1461)
7af40d2 Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 in /exporters/trace/jaeger (#​1463)
f16f189 Bump google.golang.org/grpc in /example/otel-collector (#​1465)
fe363be Move Span Event to API (#​1452)
4392224 Bump google.golang.org/grpc in /example/prom-collector (#​1466)

v0.16.0

Compare Source

Added
  • Add the ReadOnlySpan and ReadWriteSpan interfaces to provide better control for accessing span data. (#​1360)
  • NewGRPCDriver function returns a ProtocolDriver that maintains a single gRPC connection to the collector. (#​1369)
  • Added documentation about the project's versioning policy. (#​1388)
  • Added NewSplitDriver for OTLP exporter that allows sending traces and metrics to different endpoints. (#​1418)
  • Added codeql worfklow to GitHub Actions (#​1428)
  • Added Gosec workflow to GitHub Actions (#​1429)
  • Add new HTTP driver for OTLP exporter in exporters/otlp/otlphttp. Currently it only supports the binary protobuf payloads. (#​1420)
Changed
  • Rename internal/testing to internal/internaltest. (#​1449)
  • Rename export.SpanData to export.SpanSnapshot and use it only for exporting spans. (#​1360)
  • Store the parent's full SpanContext rather than just its span ID in the span struct. (#​1360)
  • Improve span duration accuracy. (#​1360)
  • Migrated CI/CD from CircleCI to GitHub Actions (#​1382)
  • Remove duplicate checkout from GitHub Actions workflow (#​1407)
  • Metric array aggregator renamed exact to match its aggregation.Kind (#​1412)
  • Metric exact aggregator includes per-point timestamps (#​1412)
  • Metric stdout exporter uses MinMaxSumCount aggregator for ValueRecorder instruments (#​1412)
  • NewExporter from exporters/otlp now takes a ProtocolDriver as a parameter. (#​1369)
  • Many OTLP Exporter options became gRPC ProtocolDriver options. (#​1369)
  • Unify endpoint API that related to OTel exporter. (#​1401)
  • Optimize metric histogram aggregator to re-use its slice of buckets. (#​1435)
  • Metric aggregator Count() and histogram Bucket.Counts are consistently uint64. (1430)
  • SamplingResult now passed a Tracestate from the parent SpanContext (#​1432)
  • Moved gRPC driver for OTLP exporter to exporters/otlp/otlpgrpc. (#​1420)
  • The TraceContext propagator now correctly propagates TraceState through the SpanContext. (#​1447)
  • Metric Push and Pull Controller components are combined into a single "basic" Controller:
    • WithExporter() and Start() to configure Push behavior
    • Start() is optional; use Collect() and ForEach() for Pull behavior
    • Start() and Stop() accept Context. (#​1378)
Removed
  • Remove errUninitializedSpan as its only usage is now obsolete. (#​1360)
  • Remove Metric export functionality related to quantiles and summary data points: this is not specified (#​1412)
  • Remove DDSketch metric aggregator; our intention is to re-introduce this as an option of the histogram aggregator after new OTLP histogram data types are released (#​1412)
Fixed
  • BatchSpanProcessor.Shutdown() will now shutdown underlying export.SpanExporter. (#​1443)

Raw changes made between v0.15.0 and v0.16.0

0aadfb2 Prepare release v0.16.0 (#​1464)
207587b Metric histogram aggregator: Swap in SynchronizedMove to avoid allocations (#​1435)
c29c6fd Shutdown underlying span exporter while shutting down BatchSpanProcessor (#​1443)
dfece3d Combine the Push and Pull metric controllers (#​1378)
74deedd Handle tracestate in TraceContext propagator (#​1447)
49f699d Remove Quantile aggregation, DDSketch aggregator; add Exact timestamps (#​1412)
9c94941 Rename internal/testing to internal/internaltest (#​1449)
8d80981 Move gRPC driver to a subpackage and add an HTTP driver (#​1420)
9332af1 Bump github.com/golangci/golangci-lint in /internal/tools (#​1445)
5ed96e9 Update exporters/otlp Readme.md (#​1441)
bc9cb5e Switch CircleCI badge to GitHub Actions (#​1440)
716ad08 Remove CircleCI config (#​1439)
0682db1 Adding Security Workflows to GitHub Actions (2/2): gosec workflow (#​1429)
11f732b Adding Security Workflows

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • ""
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

@anaconda-renovate

anaconda-renovate Bot commented Apr 12, 2026

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 34 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
github.com/stretchr/testify v1.10.0 -> v1.11.1
golang.org/x/crypto v0.40.0 -> v0.49.0
golang.org/x/net v0.42.0 -> v0.52.0
golang.org/x/sync v0.16.0 -> v0.20.0
golang.org/x/sys v0.34.0 -> v0.42.0
google.golang.org/grpc v1.73.0 -> v1.80.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.43.0
golang.org/x/oauth2 v0.30.0 -> v0.35.0
golang.org/x/text v0.27.0 -> v0.35.0
google.golang.org/protobuf v1.36.6 -> v1.36.11
cel.dev/expr v0.23.1 -> v0.25.1
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.27.0 -> v1.31.0
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/envoyproxy/go-control-plane/envoy v1.32.4 -> v1.36.0
github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.3
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.28.0
github.com/spiffe/go-spiffe/v2 v2.5.0 -> v2.6.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/detectors/gcp v1.36.0 -> v1.39.0
go.opentelemetry.io/otel/log v0.12.2 -> v0.19.0
go.opentelemetry.io/otel/sdk/log v0.12.2 -> v0.19.0
go.opentelemetry.io/otel/sdk/metric v1.37.0 -> v1.43.0
go.opentelemetry.io/proto/otlp v1.6.0 -> v1.10.0
cloud.google.com/go/compute/metadata v0.7.0 -> v0.9.0
github.com/cncf/xds/go v0.0.0-20250326154945-ae57f3c0d45f -> v0.0.0-20251210132809-ee656c7534f5
github.com/envoyproxy/protoc-gen-validate v1.2.1 -> v1.3.0
go.opentelemetry.io/otel v1.37.0 -> v1.43.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.43.0
golang.org/x/mod v0.25.0 -> v0.33.0
golang.org/x/term v0.33.0 -> v0.41.0
golang.org/x/tools v0.34.0 -> v0.42.0
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 -> v0.0.0-20260401024825-9d38bb4040a9
File name: tools/lambda-promtail/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 24 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0
github.com/stretchr/testify v1.10.0 -> v1.11.1
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.28.0
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/otel v1.36.0 -> v1.43.0
go.opentelemetry.io/otel/log v0.12.2 -> v0.19.0
go.opentelemetry.io/otel/metric v1.36.0 -> v1.43.0
go.opentelemetry.io/otel/sdk v1.36.0 -> v1.43.0
go.opentelemetry.io/otel/sdk/log v0.12.2 -> v0.19.0
go.opentelemetry.io/otel/sdk/metric v1.36.0 -> v1.43.0
go.opentelemetry.io/otel/trace v1.36.0 -> v1.43.0
go.opentelemetry.io/proto/otlp v1.6.0 -> v1.10.0
golang.org/x/crypto v0.39.0 -> v0.49.0
golang.org/x/mod v0.25.0 -> v0.33.0
golang.org/x/net v0.41.0 -> v0.52.0
golang.org/x/oauth2 v0.30.0 -> v0.35.0
golang.org/x/sync v0.15.0 -> v0.20.0
golang.org/x/sys v0.33.0 -> v0.42.0
golang.org/x/text v0.26.0 -> v0.35.0
golang.org/x/tools v0.33.0 -> v0.42.0
google.golang.org/genproto/googleapis/api v0.0.0-20250603155806-513f23925822 -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/genproto/googleapis/rpc v0.0.0-20250603155806-513f23925822 -> v0.0.0-20260401024825-9d38bb4040a9
google.golang.org/grpc v1.73.0 -> v1.80.0
google.golang.org/protobuf v1.36.6 -> v1.36.11

@anaconda-renovate anaconda-renovate Bot force-pushed the deps-update/main-go-go.opentelemetry.io-otel-exporters-otlp-otlplog-otlploghttp-vulnerability branch from 4b31c5c to 4b05422 Compare June 9, 2026 11:58
@anaconda-renovate

anaconda-renovate Bot commented Jun 9, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@v0.19.0 requires go >= 1.25.0; switching to go1.25.11
go: downloading github.com/prometheus/client_golang v1.22.0
go: downloading github.com/prometheus/common v0.65.1-0.20250703115700-7f8b2a0d32d3
go: downloading github.com/IBM/sarama v1.45.2
go: downloading github.com/go-kit/log v0.2.1
go: downloading github.com/felixge/fgprof v0.9.5
go: downloading github.com/hashicorp/consul/api v1.32.1
go: downloading github.com/grafana/dskit v0.0.0-20250617101305-c93a1bb09ecb
go: downloading github.com/prometheus/alertmanager v0.28.1
go: downloading github.com/prometheus/prometheus v0.304.3-0.20250710152723-d2f1f4fb27af
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/google/renameio/v2 v2.0.0
go: downloading github.com/mitchellh/mapstructure v1.5.1-0.20220423185008-bf980b35cac4
go: downloading github.com/fluent/fluent-bit-go v0.0.0-20230731091245-a7a013e2473c
go: downloading github.com/containerd/fifo v1.1.0
go: downloading github.com/mwitkow/go-conntrack v0.0.0-20190716064945-2f068394615f
go: downloading github.com/fatih/color v1.18.0
go: downloading github.com/shurcooL/httpfs v0.0.0-20230704072500-f1e31cf0ba5c
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading golang.org/x/crypto v0.49.0
go: downloading github.com/go-logfmt/logfmt v0.6.0
go: downloading github.com/docker/docker v28.3.2+incompatible
go: downloading github.com/Masterminds/sprig/v3 v3.3.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading github.com/grafana/cloudflare-go v0.0.0-20230110200409-c627cf6792f2
go: downloading github.com/stretchr/testify v1.11.1
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/golang/snappy v1.0.0
go: downloading github.com/shurcooL/vfsgen v0.0.0-20230704071429-0000e147ea92
go: downloading github.com/joncrlsn/dque v0.0.0-20211108142734-c2ef48c5192a
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/hashicorp/golang-lru/v2 v2.0.7
go: downloading github.com/hashicorp/golang-lru v1.0.2
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading github.com/jmespath/go-jmespath v0.4.0
go: downloading cloud.google.com/go/pubsub v1.49.0
go: downloading github.com/grafana/go-gelf/v2 v2.0.1
go: downloading github.com/heroku/x v0.4.3
go: downloading github.com/grafana/jsonparser v0.0.0-20241004153430-023329977675
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/oschwald/geoip2-golang v1.11.0
go: downloading github.com/google/uuid v1.6.0
go: downloading go.uber.org/atomic v1.11.0
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/docker/go-plugins-helpers v0.0.0-20240701071450-45e2431495c8
go: downloading github.com/uber/jaeger-client-go v2.30.0+incompatible
go: downloading github.com/coreos/go-systemd v0.0.0-20191104093116-d3cd4ed1dbcf
go: downloading github.com/bmatcuk/doublestar/v4 v4.9.0
go: downloading google.golang.org/api v0.241.0
go: downloading golang.org/x/time v0.12.0
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading golang.org/x/oauth2 v0.35.0
go: downloading cloud.google.com/go v0.121.2
go: downloading dario.cat/mergo v1.0.2
go: downloading github.com/grafana/tail v0.0.0-20230510142333-77b18831edf0
go: downloading github.com/leodido/go-syslog/v4 v4.2.0
go: downloading github.com/spf13/afero v1.14.0
go: downloading github.com/alecthomas/kingpin/v2 v2.4.0
go: downloading github.com/xdg-go/scram v1.1.2
go: downloading github.com/gorilla/mux v1.8.1
go: downloading golang.org/x/text v0.35.0
go: downloading golang.org/x/sys v0.42.0
go: downloading github.com/influxdata/telegraf v1.34.1
go: downloading github.com/gorilla/websocket v1.5.3
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading google.golang.org/grpc v1.80.0
go: downloading go.opentelemetry.io/collector/pdata v1.36.0
go: downloading github.com/c2h5oh/datasize v0.0.0-20231215233829-aa82cc1e6500
go: downloading github.com/dustin/go-humanize v1.0.1
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0
go: downloading github.com/twmb/franz-go/pkg/kadm v1.16.0
go: downloading github.com/shirou/gopsutil/v4 v4.25.6
go: downloading github.com/twmb/franz-go v1.18.1
go: downloading golang.org/x/sync v0.20.0
go: downloading go.opentelemetry.io/otel v1.43.0
go: downloading go.opentelemetry.io/otel/trace v1.43.0
go: downloading github.com/grafana/regexp v0.0.0-20240518133315-a468a5bfb3bc
go: downloading github.com/tjhop/slog-gokit v0.1.4
go: downloading go.opentelemetry.io/otel/sdk v1.43.0
go: downloading github.com/ugorji/go/codec v1.1.7
go: downloading golang.org/x/net v0.52.0
go: downloading github.com/jpillora/backoff v1.0.0
go: downloading github.com/google/pprof v0.0.0-20250607225305-033d6d78b36a
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/hashicorp/go-rootcerts v1.0.2
go: downloading github.com/hashicorp/serf v0.10.2
go: downloading golang.org/x/exp v0.0.0-20250408133849-7e4ce0ab07d0
go: downloading github.com/Masterminds/goutils v1.1.1
go: downloading github.com/Masterminds/semver/v3 v3.3.1
go: downloading github.com/huandu/xstrings v1.5.0
go: downloading github.com/mitchellh/copystructure v1.2.0
go: downloading github.com/shopspring/decimal v1.4.0
go: downloading github.com/spf13/cast v1.7.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/prometheus/procfs v0.16.1
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/eapache/go-resiliency v1.7.0
go: downloading github.com/eapache/go-xerial-snappy v0.0.0-20230731223053-c322873962e3
go: downloading github.com/eapache/queue v1.1.0
go: downloading github.com/jcmturner/gofork v1.7.6
go: downloading github.com/jcmturner/gokrb5/v8 v8.4.4
go: downloading github.com/klauspost/compress v1.18.0
go: downloading github.com/pierrec/lz4/v4 v4.1.22
go: downloading github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/Workiva/go-datastructures v1.1.5
go: downloading github.com/prometheus/otlptranslator v0.0.0-20250620074007-94f535e0c588
go: downloading github.com/segmentio/fasthash v1.0.3
go: downloading github.com/drone/envsubst v1.0.3
go: downloading github.com/gofrs/flock v0.8.1
go: downloading go4.org/netipx v0.0.0-20230125063823-8449b0a6169f
go: downloading github.com/alecthomas/units v0.0.0-20240927000941-0f3dac36c52b
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/grafana/pyroscope-go/godeltaprof v0.1.8
go: downloading github.com/opentracing-contrib/go-grpc v0.1.2
go: downloading github.com/opentracing/opentracing-go v1.2.1-0.20220228012449-10b1cf09e00b
go: downloading github.com/pires/go-proxyproto v0.7.0
go: downloading github.com/prometheus/exporter-toolkit v0.14.0
go: downloading github.com/grafana/otel-profiling-go v0.5.1
go: downloading github.com/uber/jaeger-lib v2.4.1+incompatible
go: downloading go.opentelemetry.io/contrib/exporters/autoexport v0.61.0
go: downloading go.opentelemetry.io/contrib/propagators/jaeger v1.35.0
go: downloading go.opentelemetry.io/contrib/samplers/jaegerremote v0.30.0
go: downloading go.opentelemetry.io/otel/exporters/jaeger v1.17.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading k8s.io/client-go v0.32.3
go: downloading github.com/aws/aws-sdk-go v1.55.7
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.18.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.10.1
go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.7.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v4 v4.3.0
go: downloading github.com/Code-Hex/go-generics-cache v1.5.1
go: downloading github.com/digitalocean/godo v1.152.0
go: downloading github.com/dennwc/varint v1.0.0
go: downloading github.com/oschwald/maxminddb-golang v1.13.0
go: downloading github.com/miekg/dns v1.1.66
go: downloading go.etcd.io/bbolt v1.4.2
go: downloading zombiezen.com/go/sqlite v1.4.2
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/distribution/reference v0.6.0
go: downloading github.com/opencontainers/image-spec v1.1.0
go: downloading github.com/stretchr/objx v0.5.2
go: downloading github.com/containerd/log v0.1.0
go: downloading github.com/docker/go-metrics v0.0.1
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/docker/go-connections v0.5.0
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/moby/sys/atomicwriter v0.1.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9
go: downloading k8s.io/api v0.32.3
go: downloading google.golang.org/genproto v0.0.0-20250505200425-f936aa4a68b2
go: downloading k8s.io/apimachinery v0.33.2
go: downloading github.com/containerd/errdefs/pkg v0.3.0
go: downloading github.com/containerd/errdefs v1.0.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0
go: downloading github.com/NYTimes/gziphandler v1.1.1
go: downloading github.com/grafana/objstore v0.0.0-20250210100727-533688b5600d
go: downloading cloud.google.com/go/compute/metadata v0.9.0
go: downloading github.com/xhit/go-str2duration/v2 v2.1.0
go: downloading github.com/xdg-go/pbkdf2 v1.0.0
go: downloading github.com/xdg-go/stringprep v1.0.4
go: downloading github.com/gophercloud/gophercloud/v2 v2.7.0
go: downloading github.com/sirupsen/logrus v1.9.3
go: downloading github.com/leodido/ragel-machinery v0.0.0-20190525184631-5f46317e436b
go: downloading github.com/prometheus/common/sigv4 v0.1.0
go: downloading github.com/go-zookeeper/zk v1.0.4
go: downloading cloud.google.com/go/iam v1.5.2
go: downloading github.com/googleapis/gax-go/v2 v2.14.2
go: downloading go.opencensus.io v0.24.0
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/opentracing-contrib/go-stdlib v1.1.0
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading gopkg.in/fsnotify/fsnotify.v1 v1.4.7
go: downloading github.com/efficientgo/core v1.0.0-rc.3
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/twmb/franz-go/pkg/kmsg v1.11.2
go: downloading github.com/hashicorp/go-metrics v0.5.4
go: downloading github.com/hashicorp/go-sockaddr v1.0.7
go: downloading github.com/grafana/memberlist v0.3.1-0.20220714140823-09ffed8adbbe
go: downloading github.com/dolthub/swiss v0.2.1
go: downloading k8s.io/utils v0.0.0-20241210054802-24370beab758
go: downloading github.com/klauspost/pgzip v1.2.6
go: downloading github.com/bits-and-blooms/bloom/v3 v3.7.0
go: downloading github.com/twmb/franz-go/plugin/kotel v1.6.0
go: downloading github.com/twmb/franz-go/plugin/kprom v1.2.1
go: downloading github.com/twmb/franz-go/pkg/kfake v0.0.0-20241015013301-cea7aa5d8037
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading go.opentelemetry.io/otel/metric v1.43.0
go: downloading github.com/tklauser/go-sysconf v0.3.13
go: downloading github.com/apache/arrow-go/v18 v18.3.1
go: downloading github.com/grafana/gomemcache v0.0.0-20250318131618-74242eea118d
go: downloading github.com/redis/go-redis/v9 v9.10.0
go: downloading github.com/sony/gobreaker/v2 v2.1.0
go: downloading github.com/alicebob/miniredis/v2 v2.35.0
go: downloading github.com/axiomhq/hyperloglog v0.2.5
go: downloading github.com/gogo/status v1.1.1
go: downloading github.com/gogo/googleapis v1.4.1
go: downloading github.com/facette/natsort v0.0.0-20181210072756-2cd4dd1e2dcb
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/buger/jsonparser v1.1.1
go: downloading github.com/coder/quartz v0.2.1
go: downloading github.com/charmbracelet/bubbles v0.21.0
go: downloading github.com/charmbracelet/bubbletea v1.3.5
go: downloading github.com/charmbracelet/lipgloss v1.1.0
go: downloading github.com/DataDog/sketches-go v1.4.7
go: downloading github.com/influxdata/tdigest v0.0.2-0.20210216194612-fc98d27c9e8b
go: downloading github.com/DmitriyVTitov/size v1.5.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.62.0
go: downloading github.com/parquet-go/parquet-go v0.25.1
go: downloading github.com/richardartoul/molecule v1.0.0
go: downloading gotest.tools v2.2.0+incompatible
go: downloading github.com/prometheus/sigv4 v0.2.0
go: downloading github.com/oklog/run v1.2.0
go: downloading github.com/d4l3k/messagediff v1.2.1
go: downloading github.com/minio/minio-go/v7 v7.0.94
go: downloading github.com/aliyun/aliyun-oss-go-sdk v3.0.2+incompatible
go: downloading github.com/Azure/azure-pipeline-go v0.2.3
go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.24
go: downloading github.com/Azure/go-autorest/autorest/azure/auth v0.5.13
go: downloading github.com/MasslessParticle/azure-storage-blob-go v0.14.1-0.20240322194317-344980fda573
go: downloading github.com/mattn/go-ieproxy v0.0.12
go: downloading github.com/Azure/go-autorest/autorest v0.11.30
go: downloading github.com/baidubce/bce-sdk-go v0.9.234
go: downloading cloud.google.com/go/bigtable v1.38.0
go: downloading github.com/grafana/gocql v0.0.0-20200605141915-ba5dc39ece85
go: downloading cloud.google.com/go/storage v1.55.0
go: downloading github.com/Azure/go-autorest v14.2.0+incompatible
go: downloading github.com/fsouza/fake-gcs-server v1.52.2
go: downloading github.com/cristalhq/hedgedhttp v0.9.1
go: downloading github.com/IBM/go-sdk-core/v5 v5.20.1
go: downloading github.com/IBM/ibm-cos-sdk-go v1.12.2
go: downloading github.com/ncw/swift/v2 v2.0.4
go: downloading github.com/schollz/progressbar/v3 v3.18.0
go: downloading github.com/alecthomas/chroma/v2 v2.19.0
go: downloading github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db
go: downloading github.com/grafana/ckit v0.0.0-20250514165824-dd4adf36ad34
go: downloading github.com/ncw/swift v1.0.53
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.3.2
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/mitchellh/go-homedir v1.1.0
go: downloading github.com/mitchellh/reflectwalk v1.0.2
go: downloading github.com/jcmturner/dnsutils/v2 v2.0.0
go: downloading github.com/hashicorp/go-uuid v1.0.3
go: downloading github.com/sercand/kuberesolver/v6 v6.0.0
go: downloading github.com/coreos/go-systemd/v22 v22.5.0
go: downloading github.com/mdlayher/vsock v1.2.1
go: downloading go.opentelemetry.io/contrib/bridges/prometheus v0.61.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.12.2
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.36.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0
go: downloading go.opentelemetry.io/otel/exporters/prometheus v0.58.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.12.2
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.36.0
go: downloading go.opentelemetry.io/otel/sdk/log v0.19.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.43.0
go: downloading github.com/jaegertracing/jaeger-idl v0.5.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading github.com/edsrzf/mmap-go v1.2.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.1
go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.4.2
go: downloading golang.org/x/tools v0.42.0
go: downloading github.com/google/go-querystring v1.1.0
go: downloading github.com/hashicorp/go-retryablehttp v0.7.7
go: downloading modernc.org/libc v1.65.7
go: downloading modernc.org/sqlite v1.37.1
go: downloading github.com/moby/sys/userns v0.1.0
go: downloading github.com/containerd/containerd/v2 v2.0.5
go: downloading github.com/moby/sys/sequential v0.6.0
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.6.0
go: downloading github.com/spf13/pflag v1.0.6
go: downloading golang.org/x/term v0.41.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9
go: downloading go.etcd.io/etcd/api/v3 v3.5.4
go: downloading go.etcd.io/etcd/client/pkg/v3 v3.5.4
go: downloading go.etcd.io/etcd/client/v3 v3.5.4
go: downloading github.com/hashicorp/go-immutable-radix v1.3.1
go: downloading github.com/armon/go-metrics v0.4.1
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/hashicorp/go-msgpack v0.5.5
go: downloading github.com/sean-/seed v0.0.0-20170313163322-e2103e2c3529
go: downloading github.com/dolthub/maphash v0.1.0
go: downloading github.com/bits-and-blooms/bitset v1.10.0
go: downloading github.com/julienschmidt/httprouter v1.3.0
go: downloading github.com/open-telemetry/opentelemetry-collector-contrib/processor/deltatocumulativeprocessor v0.128.0
go: downloading go.opentelemetry.io/collector/component v1.34.0
go: downloading go.opentelemetry.io/collector/consumer v1.34.0
go: downloading go.opentelemetry.io/collector/processor v1.34.0
go: downloading github.com/oklog/ulid/v2 v2.1.1
go: downloading github.com/bboreham/go-loser v0.0.0-20230920113527-fcc2c21820a3
go: downloading github.com/lufia/plan9stats v0.0.0-20240226150601-1dcf7310316a
go: downloading github.com/oklog/ulid v1.3.1
go: downloading github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55
go: downloading github.com/yusufpapurcu/wmi v1.2.4
go: downloading github.com/ebitengine/purego v0.8.4
go: downloading github.com/tklauser/numcpus v0.7.0
go: downloading cloud.google.com/go/auth v0.16.2
go: downloading github.com/go-redsync/redsync/v4 v4.13.0
go: downloading github.com/dgryski/go-metro v0.0.0-20180109044635-280f6062b5bc
go: downloading github.com/kamstrup/intmap v0.5.1
go: downloading github.com/yuin/gopher-lua v1.1.1
go: downloading github.com/dgryski/go-rendezvous v0.0.0-20200823014737-9f7001d12a5f
go: downloading github.com/charmbracelet/x/ansi v0.8.0
go: downloading github.com/sahilm/fuzzy v0.1.1
go: downloading github.com/charmbracelet/x/term v0.2.1
go: downloading github.com/erikgeiser/coninput v0.0.0-20211004153227-1c3628e74d0f
go: downloading github.com/mattn/go-localereader v0.0.1
go: downloading github.com/muesli/ansi v0.0.0-20230316100256-276c6243b2f6
go: downloading github.com/muesli/cancelreader v0.2.2
go: downloading github.com/charmbracelet/x/cellbuf v0.0.13-0.20250311204145-2c3ea96c31dd
go: downloading github.com/muesli/termenv v0.16.0
go: downloading github.com/rivo/uniseg v0.4.7
go: downloading github.com/go-openapi/strfmt v0.23.0
go: downloading github.com/aws/aws-sdk-go-v2 v1.36.5
go: downloading github.com/aws/aws-sdk-go-v2/config v1.29.17
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.17.70
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.34.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.3.2
go: downloading github.com/Azure/go-autorest/logger v0.2.1
go: downloading github.com/Azure/go-autorest/tracing v0.6.0
go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0
go: downloading github.com/golang-jwt/jwt/v4 v4.5.2
go: downloading github.com/Azure/go-autorest/autorest/azure/cli v0.4.6
go: downloading github.com/dimchansky/utfbom v1.1.1
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.8
go: downloading cloud.google.com/go/longrunning v0.6.7
go: downloading cloud.google.com/go/monitoring v1.24.2
go: downloading rsc.io/binaryregexp v0.2.0
go: downloading github.com/gorilla/handlers v1.5.2
go: downloading go.opentelemetry.io/contrib/detectors/gcp v1.39.0
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.51.0
go: downloading github.com/go-playground/validator/v10 v10.26.0
go: downloading sigs.k8s.io/yaml v1.4.0
go: downloading github.com/go-kit/kit v0.12.0
go: downloading github.com/hailocab/go-hostpool v0.0.0-20160125115350-e80d13ce29ed
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading github.com/jcmturner/rpc/v2 v2.0.3
go: downloading github.com/mdlayher/socket v0.5.1
go: downloading go.opentelemetry.io/proto/otlp v1.10.0
go: downloading go.opentelemetry.io/otel/log v0.19.0
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/moby/term v0.5.0
go: downloading github.com/morikuni/aec v1.0.0
go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
go: downloading sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3
go: downloading github.com/google/gnostic-models v0.6.9
go: downloading github.com/fxamacker/cbor/v2 v2.7.0
go: downloading go.uber.org/zap v1.27.0
go: downloading go.opentelemetry.io/collector/semconv v0.128.0
go: downloading github.com/go-ole/go-ole v1.3.0
go: downloading github.com/google/s2a-go v0.1.9
go: downloading go.opentelemetry.io/collector/pipeline v0.128.0
go: downloading go.opentelemetry.io/collector/internal/telemetry v0.128.0
go: downloading github.com/open-telemetry/opentelemetry-collector-contrib/internal/exp/metrics v0.128.0
go: downloading github.com/puzpuzpuz/xsync/v3 v3.5.1
go: downloading github.com/atotto/clipboard v0.1.4
go: downloading github.com/mattn/go-runewidth v0.0.16
go: downloading go.opentelemetry.io/collector/confmap/xconfmap v0.128.0
go: downloading github.com/charmbracelet/colorprofile v0.2.3-0.20250311203215-f60798e515dc
go: downloading github.com/go-openapi/errors v0.22.0
go: downloading github.com/go-openapi/swag v0.23.0
go: downloading github.com/go-openapi/validate v0.24.0
go: downloading github.com/aymanbagabas/go-osc52/v2 v2.0.1
go: downloading github.com/lucasb-eyer/go-colorful v1.2.0
go: downloading github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2
go: downloading go.mongodb.org/mongo-driver v1.17.2
go: downloading github.com/aws/smithy-go v1.22.4
go: downloading go.opentelemetry.io/collector/confmap v1.34.0
go: downloading github.com/goccy/go-json v0.10.5
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.32
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.30.3
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.25.5
go: downloading github.com/go-ini/ini v1.67.0
go: downloading github.com/minio/crc64nvme v1.0.1
go: downloading github.com/minio/md5-simd v1.1.2
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.36
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.4
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.17
go: downloading github.com/andybalholm/brotli v1.1.1
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.6
go: downloading github.com/pkg/xattr v0.4.10
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.51.0
go: downloading github.com/jcmturner/aescts/v2 v2.0.0
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading github.com/gabriel-vasile/mimetype v1.4.8
go: downloading github.com/go-playground/universal-translator v0.18.1
go: downloading github.com/leodido/go-urn v1.4.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
go: downloading github.com/golang-jwt/jwt/v5 v5.2.2
go: downloading k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff
go: downloading github.com/dlclark/regexp2 v1.11.5
go: downloading github.com/coreos/go-semver v0.3.1
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
go: downloading github.com/mailru/easyjson v0.9.0
go: downloading go.opentelemetry.io/collector/featuregate v1.34.0
go: downloading github.com/open-telemetry/opentelemetry-collector-contrib/pkg/pdatautil v0.128.0
go: downloading github.com/rs/xid v1.6.0
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.36
go: downloading github.com/envoyproxy/go-control-plane/envoy v1.36.0
go: downloading github.com/klauspost/cpuid/v2 v2.2.10
go: downloading github.com/go-openapi/analysis v0.23.0
go: downloading github.com/go-openapi/jsonpointer v0.21.0
go: downloading github.com/go-openapi/loads v0.22.0
go: downloading github.com/go-openapi/spec v0.21.0
go: downloading golang.org/x/mod v0.33.0
go: downloading github.com/go-playground/locales v0.14.1
go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0
go: downloading github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1
go: downloading github.com/josharian/intern v1.0.0
go: downloading go.opentelemetry.io/contrib/bridges/otelzap v0.11.0
go: downloading github.com/hashicorp/go-version v1.7.0
go: downloading github.com/tinylib/msgp v1.3.0
go: downloading github.com/go-viper/mapstructure/v2 v2.2.1
go: downloading github.com/gobwas/glob v0.2.3
go: downloading github.com/knadh/koanf/maps v0.1.2
go: downloading github.com/knadh/koanf/providers/confmap v1.0.0
go: downloading github.com/knadh/koanf/v2 v2.2.0
go: downloading github.com/spiffe/go-spiffe/v2 v2.6.0
go: downloading github.com/cncf/xds/go v0.0.0-20251210132809-ee656c7534f5
go: downloading github.com/go-openapi/jsonreference v0.21.0
go: downloading github.com/philhofer/fwd v1.1.3-0.20240916144458-20a13a1f6b7c
go: downloading github.com/go-jose/go-jose/v4 v4.1.3
go: downloading cel.dev/expr v0.25.1
go: downloading github.com/envoyproxy/protoc-gen-validate v1.3.0
go: downloading github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
go: downloading github.com/emicklei/go-restful/v3 v3.11.0
go: downloading github.com/ncruces/go-strftime v0.1.9
go: downloading modernc.org/mathutil v1.7.1
go: downloading modernc.org/memory v1.11.0
go: downloading github.com/remyoudompheng/bigfft v0.0.0-20230129092748-24d4a6f8daec
go: github.com/grafana/loki/v3/pkg/dataobj/internal/arrowconv imports
	github.com/apache/arrow-go/v18/arrow: github.com/apache/arrow-go/v18@v18.3.1: read "https://proxy.golang.org/github.com/apache/arrow-go/v18/@v/v18.3.1.zip": stream error: stream ID 467; INTERNAL_ERROR; received from peer
go: github.com/grafana/loki/v3/pkg/dataobj/internal/arrowconv imports
	github.com/apache/arrow-go/v18/arrow/memory: github.com/apache/arrow-go/v18@v18.3.1: read "https://proxy.golang.org/github.com/apache/arrow-go/v18/@v/v18.3.1.zip": stream error: stream ID 467; INTERNAL_ERROR; received from peer
go: github.com/grafana/loki/v3/pkg/dataobj/internal/arrowconv imports
	github.com/apache/arrow-go/v18/arrow/scalar: github.com/apache/arrow-go/v18@v18.3.1: read "https://proxy.golang.org/github.com/apache/arrow-go/v18/@v/v18.3.1.zip": stream error: stream ID 467; INTERNAL_ERROR; received from peer
go: github.com/grafana/loki/v3/pkg/dataobj/sections/logs imports
	github.com/apache/arrow-go/v18/arrow/array: github.com/apache/arrow-go/v18@v18.3.1: read "https://proxy.golang.org/github.com/apache/arrow-go/v18/@v/v18.3.1.zip": stream error: stream ID 467; INTERNAL_ERROR; received from peer
go: github.com/grafana/loki/v3/pkg/engine/executor tested by
	github.com/grafana/loki/v3/pkg/engine/executor.test imports
	github.com/apache/arrow-go/v18/arrow/csv: github.com/apache/arrow-go/v18@v18.3.1: read "https://proxy.golang.org/github.com/apache/arrow-go/v18/@v/v18.3.1.zip": stream error: stream ID 467; INTERNAL_ERROR; received from peer
go: module cloud.google.com/go/pubsub is deprecated: use cloud.google.com/go/pubsub/v2 instead.
go: module github.com/Azure/go-autorest/autorest is deprecated: use github.com/Azure/azure-sdk-for-go/sdk/azcore instead.
go: module github.com/Azure/go-autorest/autorest/adal is deprecated: use github.com/Azure/azure-sdk-for-go/sdk/azidentity instead.
go: module github.com/Azure/go-autorest/autorest/azure/auth is deprecated: use github.com/Azure/azure-sdk-for-go/sdk/azidentity instead.
go: module github.com/aws/aws-sdk-go is deprecated: aws-sdk-go is deprecated. Use aws-sdk-go-v2.
go: module github.com/golang/protobuf is deprecated: Use the "google.golang.org/protobuf" module instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

area/security dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants