Skip to content

chore(deps): bump the backend group across 1 directory with 5 updates#349

Closed
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/services/backend/develop/backend-a62b7c132b
Closed

chore(deps): bump the backend group across 1 directory with 5 updates#349
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/services/backend/develop/backend-a62b7c132b

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the backend group with 5 updates in the /services/backend directory:

Package From To
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin 0.63.0 0.64.0
golang.org/x/crypto 0.46.0 0.47.0
google.golang.org/grpc 1.77.0 1.78.0
github.com/mattn/go-sqlite3 1.14.32 1.14.33
github.com/sirupsen/logrus 1.9.3 1.9.4

Updates go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin from 0.63.0 to 0.64.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin's releases.

Release v1.39.0/v2.1.0/v0.64.0/v0.33.0/v0.19.0/v0.14.0/v0.12.0/v0.11.0

Overview

Added

  • ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
  • Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
  • Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
  • WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
  • Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
  • Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
  • Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
  • Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
  • Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
  • Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
  • Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
  • Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
  • Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
  • Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

  • Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
  • Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
  • Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

  • WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
  • WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
  • DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

  • Drop support for Go 1.23. (#7831)
  • Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
  • Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin's changelog.

[1.39.0/2.1.0/0.64.0/0.33.0/0.19.0/0.14.0/0.12.0/0.11.0] - 2025-12-08

Added

  • ParseYAML in go.opentelemetry.io/contrib/otelconf now supports environment variables substitution in the format ${[env:]VAR_NAME[:-defaultvalue]}. (#6215)
  • Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#7966)
  • Support db.client.operation.duration metric for go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7983)
  • Add a WithSpanNameFormatter option to go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo. (#7986)
  • WithOnError option for otelecho middleware in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho to specify the behavior when an error occurs. (#8025)
  • Updated go.opentelemetry.io/contrib/otelconf to include the v1.0.0-rc2 release candidate of schema which includes backwards incompatible changes. (#8026)
  • Introduce v1.0.0-rc.2 model in go.opentelemetry.io/contrib/otelconf. (#8031)
  • Add unmarshaling and validation for CardinalityLimits and SpanLimits to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8043)
  • Add unmarshaling and validation for BatchLogRecordProcessor, BatchSpanProcessor, and PeriodicMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8049)
  • Add unmarshaling and validation for TextMapPropagator to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8052)
  • Add jaeger.sampler.type/jaeger.sampler.param attributes for adaptive sampling support and option WithAttributesDisabled in go.opentelemetry.io/contrib/samplers/jaegerremote. (#8073)
  • Add support for OTEL_EXPERIMENTAL_CONFIG_FILE via the NewSDK function in go.opentelemetry.io/contrib/otelconf (#8106)
  • Add unmarshaling and validation for OTLPHttpExporter, OTLPGrpcExporter, OTLPGrpcMetricExporter and OTLPHttpMetricExporter to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8112)
  • Add unmarshaling and validation for AttributeType, AttributeNameValue, SimpleSpanProcessor, SimpleLogRecordProcessor, ZipkinSpanExporter, NameStringValuePair, InstrumentType, ExperimentalPeerInstrumentationServiceMappingElem, ExporterDefaultHistogramAggregation, PullMetricReader to v1.0.0 model in go.opentelemetry.io/contrib/otelconf. (#8127)
  • Add support for container, host, process resource detectors in go.opentelemetry.io/contrib/otelconf. (#8180)

Changed

  • Improve performance by reducing allocations in the gRPC stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8035)
  • Export the ReadEvents and WriteEvents constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp so they can be used in WithMessageEvents. (#8153)
  • Switched the default for OTEL_SEMCONV_STABILITY_OPT_IN to emit the v1.37.0 semantic conventions by default in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. Use the environment variable OTEL_SEMCONV_STABILITY_OPT_IN to configure duplication with old semantic conventions if needed (i.e. OTEL_SEMCONV_STABILITY_OPT_IN="database/dup"). (#8230)

Deprecated

  • WithRouteTag in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. The route is already added automatically for spans. For metrics, the alternative is to use the WithMetricAttributesFn option. (#8117)
  • WithPublicEndpoint in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is deprecated. Use WithPublicEndpointFn instead. (#8152)
  • DefaultClient, Get, Head, Post, and PostForm in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. Use a custom *http.Client with otelhttp.NewTransport(http.DefaultTransport) instead. (#8140, #8201)

Removed

  • Drop support for [Go 1.23]. (#7831)
  • Remove deprecated go.opentelemetry.io/contrib/detectors/aws/ec2 module, please use go.opentelemetry.io/contrib/detectors/aws/ec2/v2 instead. (#7841)
  • Remove the deprecated Extract and Inject functions from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#7952)
Commits
  • 9a6a4d7 Release v1.39.0 (#8261)
  • 14c6a7a chore(deps): update module golang.org/x/sys to v0.39.0 (#8260)
  • 829f498 chore(deps): update module golang.org/x/sync to v0.19.0 (#8259)
  • a77cdda chore(deps): update module golang.org/x/oauth2 to v0.34.0 (#8257)
  • a98be56 chore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#8255)
  • 4385fbc chore(deps): update github/codeql-action action to v4.31.7 (#8253)
  • 3c3e7b2 otelconf: add support for parsing resource detectors (#8180)
  • 6497853 otelconf: add support for OTEL_EXPERIMENTAL_CONFIG_FILE (#8106)
  • 3f4d49c Fix flaky canceled context in otelconf/trace test (#8250)
  • 3ce5839 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.1 (#8252)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.46.0 to 0.47.0

Commits
  • 506e022 go.mod: update golang.org/x dependencies
  • 7dacc38 chacha20poly1305: error out in fips140=only mode
  • See full diff in compare view

Updates google.golang.org/grpc from 1.77.0 to 1.78.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.78.0

Behavior Changes

  • client: Align URL validation with Go 1.26+ to now reject target URLs with unbracketed colons in the hostname. (#8716)
  • transport/client : Return status code Unknown on malformed grpc-status. (#8735)
    • xds/resolver:
  • Drop previous route resources and report an error when no matching virtual host is found.
  • Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#8711)

New Features

  • stats/otel: Add backend service label to weighted round robin metrics as part of A89. (#8737)
  • stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#8738)
  • client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#8746)
  • client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#8718)

Bug Fixes

  • xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#8723)
  • client:
    • Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).
    • Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).
    • Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.
    • Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#8710)
  • xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#8627)

Performance Improvements

  • mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#8705)
Commits
  • 9df039e Change version to 1.78.0 (#8761)
  • 9b990b6 gracefulswitch: Wait for all goroutines on close (#8746)
  • 6677d9a xds: Fixing a typo (#8760)
  • d35cedd xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (#8740)
  • d931fdc client: allow overriding grpc-accept-encoding header (#8718)
  • 0800ec7 xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...
  • 6553ea1 stats/otel: Add subchannel metrics (A94) (#8738)
  • 81a00ce grpc: Fixing spelling typo (#8756)
  • e413838 client: Change connectivity state to CONNECTING when creating the name resolv...
  • f9d2bdb stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (#8737)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.33

Commits
  • 3c885a9 Upgrade SQLite to version 3051001
  • 3e773a9 update github workflows
  • 2f6a2bb fix upgrade script
  • aa7cdd3 update upgrade script
  • a66908a use quote include instead of angled include for sqlite3-binding.h
  • See full diff in compare view

Updates github.com/sirupsen/logrus from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.4

Notable changes

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

Commits
  • b61f268 Merge pull request #1472 from goldlinker/master
  • 15c29db refactor: replace the deprecated function in the ioutil package
  • cb253f3 Merge pull request #1464 from thaJeztah/touchup_godoc
  • 29b2337 Merge pull request #1468 from thaJeztah/touchup_readme
  • d916819 Merge pull request #1427 from dolmen/fix-testify-usage
  • 135e482 README: small touch-ups
  • 2c5fa36 Merge pull request #1467 from thaJeztah/rm_old_badge
  • 877ecec README: remove travis badge
  • 55cf256 Merge pull request #1393 from jsoref/grammar
  • 21bae50 Merge pull request #1426 from dolmen/testing-fix-use-of-math-rand
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the backend group with 5 updates in the /services/backend directory:

| Package | From | To |
| --- | --- | --- |
| [go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.63.0` | `0.64.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.46.0` | `0.47.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.77.0` | `1.78.0` |
| [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.32` | `1.14.33` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.9.4` |



Updates `go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin` from 0.63.0 to 0.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.63.0...zpages/v0.64.0)

Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0
- [Commits](golang/crypto@v0.46.0...v0.47.0)

Updates `google.golang.org/grpc` from 1.77.0 to 1.78.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.77.0...v1.78.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.32 to 1.14.33
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.32...v1.14.33)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin
  dependency-version: 0.64.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: golang.org/x/crypto
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: backend
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: backend
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 3, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 3, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/services/backend/develop/backend-a62b7c132b branch February 3, 2026 01:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants