chore(deps): bump the backend group across 1 directory with 10 updates by dependabot[bot] · Pull Request #350 · JustLABv1/justflow

dependabot · 2026-02-03T01:57:33Z

Bumps the backend group with 6 updates in the /services/backend directory:

Package	From	To
go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin	`0.63.0`	`0.65.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.39.0`	`1.40.0`
github.com/golang-jwt/jwt/v5	`5.3.0`	`5.3.1`
github.com/lib/pq	`1.10.9`	`1.11.1`
github.com/mattn/go-sqlite3	`1.14.32`	`1.14.33`
github.com/sirupsen/logrus	`1.9.3`	`1.9.4`

Updates go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin from 0.63.0 to 0.65.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin's releases.

Release v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0

Overview

Added

WithMetricAttributesFn option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to define dynamic attributes on auto-instrumented metrics. (#8191)

Add support for configuring propagators in go.opentelemetry.io/contrib/otelconf. (#8281)

Add const Version in go.opentelemetry.io/contrib/bridges/prometheus. (#8401)

Add const Version in go.opentelemetry.io/contrib/otelconf. (#8461)

Add const Version in go.opentelemetry.io/contrib/bridges/otellogr. (#8477)

Add const Version in go.opentelemetry.io/contrib/bridges/otellogrus. (#8485)

Add const Version in go.opentelemetry.io/contrib/bridges/otelslog. (#8480)

Fixed

Fix panic when passing nil TracerProvider or MeterProvider to WithTracerProvider or WithMeterProvider in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8323)

Transport in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now supports reading request body multiple times for subsequent requests that reuse http.Request. (#8352)

Changed

The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp has been replaced by const Version. (#8142)

The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace has been replaced by const Version. (#8302)

The Version() function in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc has been replaced by const Version. (#8317)

The Version() function in go.opentelemetry.io/contrib/zpages has been replaced by const Version. (#8325)

The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo has been replaced by const Version. (#8340)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin has been replaced by const Version. (#8341)

The Version() function in go.opentelemetry.io/contrib/instrumentation/runtime has been replaced by const Version string. (#8349)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws has been replaced by const Version. (#8356)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda has been replaced by const Version. (#8357)

The Version() function in go.opentelemetry.io/contrib/instrumentation/host has been replaced by const Version. (#8358)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful has been replaced by const Version. (#8360)

The Version() function in go.opentelemetry.io/contrib/propagators/opencensus has been replaced by const Version. (#8361)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho has been replaced by const Version. (#8365)

The Version() function in go.opentelemetry.io/contrib/samplers/probability/consistent has been replaced by const Version. (#8366)

The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo has been replaced by const Version. (#8370)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8386)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#8386)

Upgrade go.opentelemetry.io/otel/semconv to v1.39.0, including updates across all instrumentation and detector modules. (#8404)

The semantic conventions v1.39.0 release introduces breaking changes, including:

rpc span and metric attributes have been renamed to align with naming guidelines:

rpc.system → rpc.system.name (values: grpc, grpc_web, connectrpc, thrift, dubbo, etc.)

rpc.method and rpc.service have been merged into a fully-qualified rpc.method attribute

rpc.client|server.duration → rpc.client|server.call.duration (unit changed to seconds)

rpc.grpc.request.metadata/rpc.grpc.response.metadata → rpc.request.metadata/rpc.response.metadata

rpc.grpc.status_code → deprecated in favor of rpc.response.status_code

rpc.jsonrpc.request_id → jsonrpc.request.id

rpc.jsonrpc.version → jsonrpc.protocol.version

system and process metrics:

*.linux.memory metrics renamed to *.memory.linux

system.process.status → process.state

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin's changelog.

[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] - 2026-02-02

Added

WithMetricAttributesFn option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc to define dynamic attributes on auto-instrumented metrics. (#8191)

Add support for configuring propagators in go.opentelemetry.io/contrib/otelconf. (#8281)

Add const Version in go.opentelemetry.io/contrib/bridges/prometheus. (#8401)

Add const Version in go.opentelemetry.io/contrib/otelconf. (#8461)

Add const Version in go.opentelemetry.io/contrib/bridges/otellogr. (#8477)

Add const Version in go.opentelemetry.io/contrib/bridges/otellogrus. (#8485)

Add const Version in go.opentelemetry.io/contrib/bridges/otelslog. (#8480)

Fixed

Fix panic when passing nil TracerProvider or MeterProvider to WithTracerProvider or WithMeterProvider in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8323)

Transport in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now supports reading request body multiple times for subsequent requests that reuse http.Request. (#8352)

Changed

The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp has been replaced by const Version. (#8142)

The Version() function in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace has been replaced by const Version. (#8302)

The Version() function in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc has been replaced by const Version. (#8317)

The Version() function in go.opentelemetry.io/contrib/zpages has been replaced by const Version. (#8325)

The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo has been replaced by const Version. (#8340)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin has been replaced by const Version. (#8341)

The Version() function in go.opentelemetry.io/contrib/instrumentation/runtime has been replaced by const Version string. (#8349)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws has been replaced by const Version. (#8356)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda has been replaced by const Version. (#8357)

The Version() function in go.opentelemetry.io/contrib/instrumentation/host has been replaced by const Version. (#8358)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful has been replaced by const Version. (#8360)

The Version() function in go.opentelemetry.io/contrib/propagators/opencensus has been replaced by const Version. (#8361)

The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho has been replaced by const Version. (#8365)

The Version() function in go.opentelemetry.io/contrib/samplers/probability/consistent has been replaced by const Version. (#8366)

The Version() function in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo has been replaced by const Version. (#8370)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8386)

Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#8386)

Upgrade go.opentelemetry.io/otel/semconv to v1.39.0, including updates across all instrumentation and detector modules. (#8404)

The semantic conventions v1.39.0 release introduces breaking changes, including:

rpc span and metric attributes have been renamed to align with naming guidelines:

rpc.system → rpc.system.name (values: grpc, grpc_web, connectrpc, thrift, dubbo, etc.)

rpc.method and rpc.service have been merged into a fully-qualified rpc.method attribute

rpc.client|server.duration → rpc.client|server.call.duration (unit changed to seconds)

rpc.grpc.request.metadata/rpc.grpc.response.metadata → rpc.request.metadata/rpc.response.metadata

rpc.grpc.status_code → deprecated in favor of rpc.response.status_code

rpc.jsonrpc.request_id → jsonrpc.request.id

rpc.jsonrpc.version → jsonrpc.protocol.version

system and process metrics:

*.linux.memory metrics renamed to *.memory.linux

system.process.status → process.state

system.paging.type and process.paging.fault_type → system.paging.fault.type

... (truncated)

Commits

a89d958 Release v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0 (#8493)
1530d71 Upgrade semconv to v1.39.0 (#8481)
135bb60 Upgrade autoexport to latest otel dep (#8483)
8e92105 chore(deps): update module github.com/gabriel-vasile/mimetype to v1.4.13 (#8486)
147148e fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.1 (#8487)
d387510 Add version file for otellogrus bridge (#8485)
fad49c8 add version file for otelslog bridge (#8480)
9e1e573 fix(deps): update module go.mongodb.org/mongo-driver to v1.17.8 (#8479)
37aa475 Add version file for otellogr bridge (#8477)
fc8ef39 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.39.0 to 1.40.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Add AlwaysRecord sampler in go.opentelemetry.io/otel/sdk/trace. (#7724)

Add Enabled method to all synchronous instrument interfaces (Float64Counter, Float64UpDownCounter, Float64Histogram, Float64Gauge, Int64Counter, Int64UpDownCounter, Int64Histogram, Int64Gauge,) in go.opentelemetry.io/otel/metric. This stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (#7763)

Add go.opentelemetry.io/otel/semconv/v1.39.0 package. The package contains semantic conventions from the v1.39.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.38.0. (#7783, #7789)

Changed

Improve the concurrent performance of HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar by 4x. (#7443)

Improve the concurrent performance of FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar. (#7447)

Improve performance of concurrent histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7474)

Improve performance of concurrent synchronous gauge measurements in go.opentelemetry.io/otel/sdk/metric. (#7478)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric. (#7492)

Exporter in go.opentelemetry.io/otel/exporters/prometheus ignores metrics with the scope go.opentelemetry.io/contrib/bridges/prometheus. This prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (#7688)

Improve performance of concurrent exponential histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7702)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

Fixed

Fix bad log message when key-value pairs are dropped because of key duplication in go.opentelemetry.io/otel/sdk/log. (#7662)

Fix DroppedAttributes on Record in go.opentelemetry.io/otel/sdk/log to not count the non-attribute key-value pairs dropped because of key duplication. (#7662)

Fix SetAttributes on Record in go.opentelemetry.io/otel/sdk/log to not log that attributes are dropped when they are actually not dropped. (#7662)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to correctly handle HTTP/2 GOAWAY frame. (#7794)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for ioreg command on Darwin (macOS). (#7818)

Deprecated

Deprecate go.opentelemetry.io/otel/exporters/zipkin. For more information, see the OTel blog post deprecating the Zipkin exporter. (#7670)

Commits

a3a5317 Release v1.40.0 (#7859)
77785da chore(deps): update github/codeql-action action to v4.32.1 (#7858)
56fa1c2 chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0 (#7857)
298cbed Upgrade semconv use to v1.39.0 (#7854)
3264bf1 refactor: modernize code (#7850)
fd5d030 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
8d3b4cb chore(deps): update actions/cache action to v5.0.3 (#7847)
91f7cad chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (#7845)
fdad1eb chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
c46d3ba chore(deps): update golang.org/x/telemetry digest to fcf36f6 (#7843)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.39.0 to 1.40.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog.

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Add AlwaysRecord sampler in go.opentelemetry.io/otel/sdk/trace. (#7724)

Add Enabled method to all synchronous instrument interfaces (Float64Counter, Float64UpDownCounter, Float64Histogram, Float64Gauge, Int64Counter, Int64UpDownCounter, Int64Histogram, Int64Gauge,) in go.opentelemetry.io/otel/metric. This stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (#7763)

Add go.opentelemetry.io/otel/semconv/v1.39.0 package. The package contains semantic conventions from the v1.39.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.38.0. (#7783, #7789)

Changed

Improve the concurrent performance of HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar by 4x. (#7443)

Improve the concurrent performance of FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar. (#7447)

Improve performance of concurrent histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7474)

Improve performance of concurrent synchronous gauge measurements in go.opentelemetry.io/otel/sdk/metric. (#7478)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric. (#7492)

Exporter in go.opentelemetry.io/otel/exporters/prometheus ignores metrics with the scope go.opentelemetry.io/contrib/bridges/prometheus. This prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (#7688)

Improve performance of concurrent exponential histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7702)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

Fixed

Fix bad log message when key-value pairs are dropped because of key duplication in go.opentelemetry.io/otel/sdk/log. (#7662)

Fix DroppedAttributes on Record in go.opentelemetry.io/otel/sdk/log to not count the non-attribute key-value pairs dropped because of key duplication. (#7662)

Fix SetAttributes on Record in go.opentelemetry.io/otel/sdk/log to not log that attributes are dropped when they are actually not dropped. (#7662)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to correctly handle HTTP/2 GOAWAY frame. (#7794)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for ioreg command on Darwin (macOS). (#7818)

Deprecated

Deprecate go.opentelemetry.io/otel/exporters/zipkin. For more information, see the OTel blog post deprecating the Zipkin exporter. (#7670)

Commits

a3a5317 Release v1.40.0 (#7859)
77785da chore(deps): update github/codeql-action action to v4.32.1 (#7858)
56fa1c2 chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0 (#7857)
298cbed Upgrade semconv use to v1.39.0 (#7854)
3264bf1 refactor: modernize code (#7850)
fd5d030 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
8d3b4cb chore(deps): update actions/cache action to v5.0.3 (#7847)
91f7cad chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (#7845)
fdad1eb chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
c46d3ba chore(deps): update golang.org/x/telemetry digest to fcf36f6 (#7843)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.39.0 to 1.40.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Add AlwaysRecord sampler in go.opentelemetry.io/otel/sdk/trace. (#7724)

Add Enabled method to all synchronous instrument interfaces (Float64Counter, Float64UpDownCounter, Float64Histogram, Float64Gauge, Int64Counter, Int64UpDownCounter, Int64Histogram, Int64Gauge,) in go.opentelemetry.io/otel/metric. This stabilizes the synchronous instrument enabled feature, allowing users to check if an instrument will process measurements before performing computationally expensive operations. (#7763)

Add go.opentelemetry.io/otel/semconv/v1.39.0 package. The package contains semantic conventions from the v1.39.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.38.0. (#7783, #7789)

Changed

Improve the concurrent performance of HistogramReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar by 4x. (#7443)

Improve the concurrent performance of FixedSizeReservoir in go.opentelemetry.io/otel/sdk/metric/exemplar. (#7447)

Improve performance of concurrent histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7474)

Improve performance of concurrent synchronous gauge measurements in go.opentelemetry.io/otel/sdk/metric. (#7478)

Add experimental observability metrics in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric. (#7492)

Exporter in go.opentelemetry.io/otel/exporters/prometheus ignores metrics with the scope go.opentelemetry.io/contrib/bridges/prometheus. This prevents scrape failures when the Prometheus exporter is misconfigured to get data from the Prometheus bridge. (#7688)

Improve performance of concurrent exponential histogram measurements in go.opentelemetry.io/otel/sdk/metric. (#7702)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

The rpc.grpc.status_code attribute in the experimental metrics emitted from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc is replaced with the rpc.response.status_code attribute to align with the semantic conventions. (#7854)

Fixed

Fix bad log message when key-value pairs are dropped because of key duplication in go.opentelemetry.io/otel/sdk/log. (#7662)

Fix DroppedAttributes on Record in go.opentelemetry.io/otel/sdk/log to not count the non-attribute key-value pairs dropped because of key duplication. (#7662)

Fix SetAttributes on Record in go.opentelemetry.io/otel/sdk/log to not log that attributes are dropped when they are actually not dropped. (#7662)

Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to correctly handle HTTP/2 GOAWAY frame. (#7794)

WithHostID detector in go.opentelemetry.io/otel/sdk/resource to use full path for ioreg command on Darwin (macOS). (#7818)

Deprecated

Deprecate go.opentelemetry.io/otel/exporters/zipkin. For more information, see the OTel blog post deprecating the Zipkin exporter. (#7670)

Commits

a3a5317 Release v1.40.0 (#7859)
77785da chore(deps): update github/codeql-action action to v4.32.1 (#7858)
56fa1c2 chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.5.0 (#7857)
298cbed Upgrade semconv use to v1.39.0 (#7854)
3264bf1 refactor: modernize code (#7850)
fd5d030 chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
8d3b4cb chore(deps): update actions/cache action to v5.0.3 (#7847)
91f7cad chore(deps): update github.com/timakin/bodyclose digest to 73d1f95 (#7845)
fdad1eb chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27...
c46d3ba chore(deps): update golang.org/x/telemetry digest to fcf36f6 (#7843)
Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.46.0 to 0.47.0

Commits

506e022 go.mod: update golang.org/x dependencies
7dacc38 chacha20poly1305: error out in fips140=only mode
See full diff in compare view

Updates google.golang.org/grpc from 1.77.0 to 1.78.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.78.0

Behavior Changes

client: Align URL validation with Go 1.26+ to now reject target URLs with unbracketed colons in the hostname. (#8716)

Special Thanks: @neild

transport/client : Return status code Unknown on malformed grpc-status. (#8735)

xds/resolver:

Drop previous route resources and report an error when no matching virtual host is found.

Only log LDS/RDS configuration errors following a successful update and retain the last valid resource to prevent transient failures. (#8711)

New Features

stats/otel: Add backend service label to weighted round robin metrics as part of A89. (#8737)

stats/otel: Add subchannel metrics (without the disconnection reason) to eventually replace the pickfirst metrics. (#8738)

client: Wait for all pending goroutines to complete when closing a graceful switch balancer. (#8746)

Special Thanks: @twz123

client: Add experimental.AcceptCompressors so callers can restrict the grpc-accept-encoding header advertised for a call. (#8718)

Special Thanks: @iblancasa

Bug Fixes

xds: Fix a bug in StringMatcher where regexes would match incorrectly when ignore_case is set to true. (#8723)

client:

Change connectivity state to CONNECTING when creating the name resolver (as part of exiting IDLE).

Change connectivity state to TRANSIENT_FAILURE if name resolver creation fails (as part of exiting IDLE).

Change connectivity state to IDLE after idle timeout expires even when current state is TRANSIENT_FAILURE.

Fix a bug that resulted in OnFinish call option not being invoked for RPCs where stream creation failed. (#8710)

xdsclient: Fix a race in the xdsClient that could lead to resource-not-found errors. (#8627)

Performance Improvements

mem: Round up to nearest 4KiB for pool allocations larger than 1MiB. (#8705)

Special Thanks: @cjc25

Commits

9df039e Change version to 1.78.0 (#8761)
9b990b6 gracefulswitch: Wait for all goroutines on close (#8746)
6677d9a xds: Fixing a typo (#8760)
d35cedd xds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (#8740)
d931fdc client: allow overriding grpc-accept-encoding header (#8718)
0800ec7 xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...
6553ea1 stats/otel: Add subchannel metrics (A94) (#8738)
81a00ce grpc: Fixing spelling typo (#8756)
e413838 client: Change connectivity state to CONNECTING when creating the name resolv...
f9d2bdb stats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (#8737)
Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.3.0 to 5.3.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.3.1

What's Changed

🔐 Features

Add spellcheck Github action to catch common spelling mistakes by @equalsgibson in golang-jwt/jwt#458

Add WithNotBeforeRequired parser option and add test coverage by @equalsgibson in golang-jwt/jwt#456

Update godoc example func to properly refer to NewWithClaims() by @equalsgibson in golang-jwt/jwt#459

Update github workflows by @mfridman in golang-jwt/jwt#462

Additional test for CustomClaims that validates unmarshalling behaviour by @equalsgibson in golang-jwt/jwt#457

Fix early file close in jwt cli by @mfridman in golang-jwt/jwt#472

Add TPM signature reference by @salrashid123 in golang-jwt/jwt#473

Remove misleading ParserOptions documentation in golang-jwt/jwt#484

Save signature to Token struct after successful signing by @EgorSheff in golang-jwt/jwt#417

Set token.Signature in ParseUnverified by @slickwilli in golang-jwt/jwt#414

👒 Dependencies

Bump crate-ci/typos from 1.34.0 to 1.35.3 by @dependabot[bot] in golang-jwt/jwt#461

Bump crate-ci/typos from 1.35.4 to 1.36.2 by @dependabot[bot] in golang-jwt/jwt#470

Bump github/codeql-action from 3 to 4 by @dependabot[bot] in golang-jwt/jwt#478

Bump crate-ci/typos from 1.36.2 to 1.39.0 by @dependabot[bot] in golang-jwt/jwt#480

Bump golangci/golangci-lint-action from 8 to 9 by @dependabot[bot] in golang-jwt/jwt#481

Bump actions/setup-go from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#469

Bump crate-ci/typos from 1.39.0 to 1.40.0 by @dependabot[bot] in golang-jwt/jwt#488

Bump actions/checkout from 5 to 6 by @dependabot[bot] in golang-jwt/jwt#487

Bump crate-ci/typos from 1.40.0 to 1.41.0 by @dependabot[bot] in golang-jwt/jwt#490

Bump crate-ci/typos from 1.41.0 to 1.42.1 by @dependabot[bot] in golang-jwt/jwt#492

New Contributors

@equalsgibson made their first contribution in golang-jwt/jwt#458

@salrashid123 made their first contribution in golang-jwt/jwt#473

@EgorSheff made their first contribution in golang-jwt/jwt#417

@slickwilli made their first contribution in golang-jwt/jwt#414

Full Changelog: golang-jwt/jwt@v5.3.0...v5.3.1

Commits

7ceae61 Add release.yml for changelog configuration
dce8e4d Set token.Signature in ParseUnverified (#414)
8889e20 Save signature to Token struct after successful signing (#417)
d237f82 ci: update github-actions schedule interval to monthly
d8dce95 Bump crate-ci/typos from 1.41.0 to 1.42.1 (#492)
e931803 Bump crate-ci/typos from 1.40.0 to 1.41.0 (#490)
e6a0afa Bump actions/checkout from 5 to 6 (#487)
9f85c9e Bump crate-ci/typos from 1.39.0 to 1.40.0 (#488)
60a8669 Bump actions/setup-go from 5 to 6 (#469)
76f5828 Remove misleading ParserOptions documentation (#484)
Additional commits viewable in compare view

Updates github.com/lib/pq from 1.10.9 to 1.11.1

Release notes

Sourced from github.com/lib/pq's releases.

v1.11.1

This fixes two regressions present in the v1.11.0 release:

Fix build on 32bit systems, Windows, and Plan 9 (#1253).

Named []byte types and pointers to []byte (e.g. *[]byte, json.RawMessage) would be treated as an array instead of bytea (#1252).

#1252: lib/pq#1252 #1253: lib/pq#1253

v1.11.0

This version of pq requires Go 1.21 or newer.

pq now supports only maintained PostgreSQL releases, which is PostgreSQL 14 and newer. Previously PostgreSQL 8.4 and newer were supported.

Features

Description has been truncated

Bumps the backend group with 6 updates in the /services/backend directory: | Package | From | To | | --- | --- | --- | | [go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.63.0` | `0.65.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.40.0` | | [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.3.0` | `5.3.1` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.11.1` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.32` | `1.14.33` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.9.4` | Updates `go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin` from 0.63.0 to 0.65.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.63.0...zpages/v0.65.0) Updates `go.opentelemetry.io/otel` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `go.opentelemetry.io/otel/sdk` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `golang.org/x/crypto` from 0.46.0 to 0.47.0 - [Commits](golang/crypto@v0.46.0...v0.47.0) Updates `google.golang.org/grpc` from 1.77.0 to 1.78.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.77.0...v1.78.0) Updates `github.com/golang-jwt/jwt/v5` from 5.3.0 to 5.3.1 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v5.3.0...v5.3.1) Updates `github.com/lib/pq` from 1.10.9 to 1.11.1 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.10.9...v1.11.1) Updates `github.com/mattn/go-sqlite3` from 1.14.32 to 1.14.33 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.32...v1.14.33) Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.3...v1.9.4) --- updated-dependencies: - dependency-name: go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin dependency-version: 0.65.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: go.opentelemetry.io/otel dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: golang.org/x/crypto dependency-version: 0.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: google.golang.org/grpc dependency-version: 1.78.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/golang-jwt/jwt/v5 dependency-version: 5.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: github.com/lib/pq dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: github.com/sirupsen/logrus dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added backend dependencies labels Feb 3, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the backend group across 1 directory with 10 updates#350

chore(deps): bump the backend group across 1 directory with 10 updates#350
dependabot[bot] wants to merge 1 commit intodevelopfrom
dependabot/go_modules/services/backend/develop/backend-bebcdd5a45

dependabot bot commented on behalf of github Feb 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Feb 3, 2026

Release v1.40.0/v2.2.0/v0.65.0/v0.34.0/v0.20.0/v0.15.0/v0.13.0/v0.12.0

Overview

Added

Fixed

Changed

[1.40.0/2.2.0/0.65.0/0.34.0/0.20.0/0.15.0/0.13.0/0.12.0] - 2026-02-02

Added

Fixed

Changed

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Changed

Fixed

Deprecated

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Changed

Fixed

Deprecated

[1.40.0/0.62.0/0.16.0] 2026-02-02

Added

Changed

Fixed

Deprecated

Release 1.78.0

Behavior Changes

New Features

Bug Fixes

Performance Improvements

v5.3.1

What's Changed

🔐 Features

👒 Dependencies

New Contributors

v1.11.1

v1.11.0

Features

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants