chore(deps): bump the go-minor-and-patch group across 1 directory with 25 updates by dependabot[bot] · Pull Request #3304 · chainloop-dev/chainloop

dependabot · 2026-07-23T01:28:59Z

Bumps the go-minor-and-patch group with 15 updates in the / directory:

Package	From	To
code.cloudfoundry.org/bytefmt	`0.79.0`	`0.81.0`
github.com/aws/aws-sdk-go-v2/config	`1.32.27`	`1.32.30`
github.com/aws/aws-sdk-go-v2/service/secretsmanager	`1.42.5`	`1.43.1`
github.com/coreos/go-oidc/v3	`3.19.0`	`3.20.0`
github.com/getsentry/sentry-go	`0.47.0`	`0.48.0`
github.com/googleapis/gax-go/v2	`2.22.0`	`2.23.0`
cloud.google.com/go/storage	`1.63.0`	`1.63.1`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.22.30`	`1.22.33`
github.com/posthog/posthog-go	`1.17.5`	`1.19.0`
github.com/sigstore/fulcio	`1.8.7`	`1.8.8`
github.com/sigstore/sigstore-go	`1.2.1`	`1.2.2`
github.com/sigstore/timestamp-authority/v2	`2.1.2`	`2.1.3`
go.step.sm/crypto	`0.84.1`	`0.85.0`
github.com/XSAM/otelsql	`0.42.0`	`0.43.0`
github.com/prometheus/common	`0.69.0`	`0.70.0`

Updates code.cloudfoundry.org/bytefmt from 0.79.0 to 0.81.0

Commits

dc375dd Update go.mod dependencies
6c23e9d Update go.mod dependencies
See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.27 to 1.32.30

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.19.26 to 1.19.29

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/secretsmanager from 1.42.5 to 1.43.1

Commits

b3e07aa Release 2023-11-20
2fc1c0d Regenerated Clients
1a6bd02 Update endpoints model
ac2c871 Update API model
03c6858 deprecate v4.SignHTTPRequestMiddleware (#2375)
0be05fa Release 2023-11-17
d0c9d42 Regenerated Clients
e2ede40 Update endpoints model
7720f87 Update API model
4bd06b9 Merge customizations for service s3
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sso from 1.31.5 to 1.32.1

Commits

b737dc9 Release 2024-10-07
7279a51 Regenerated Clients
a1b1f5a Update endpoints model
4853c41 Update API model
99e2be8 Allow empty values on prefix headers (#2816)
18e6b6e remove autoscaling smoke tests (#2817)
8200000 remove private metrics collection APIs (#2818)
7a76a2a Release 2024-10-04
e35b8be Regenerated Clients
6e95871 Update endpoints model
Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.19.0 to 3.20.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.20.0

What's Changed

oidc: modernize with new Go APIs by @ericchiang in coreos/go-oidc#487

oidc: improve documentation for APIs by @ericchiang in coreos/go-oidc#488

SECURITY.md: add a security policy and point to project-level reporting by @ericchiang in coreos/go-oidc#489

oidc: ignore JWKs with unknown signing algorithms rather than failing by @ericchiang in coreos/go-oidc#491

readme: update README and docs by @ericchiang in coreos/go-oidc#492

oidc: add API for determining when issuer URLs mismatch by @ericchiang in coreos/go-oidc#493

oidc: add constants for "email" and "profile" scopes by @ericchiang in coreos/go-oidc#494

Full Changelog: coreos/go-oidc@v3.19.0...v3.20.0

Commits

75dfa5c oidc: add constants for "email" and "profile" scopes
a89f046 oidc: add API for determining when issuer URLs mismatch
6a69b6d readme: update README and docs
f9049c9 oidc: ignore JWKs with unknown signing algorithms rather than failing
2f178e0 SECURITY.md: add a security policy and point to project-level reporting
b3bc7da oidc: improve documentation for APIs
0db9053 oidc: modernize with new Go APIs
See full diff in compare view

Updates github.com/getsentry/sentry-go from 0.47.0 to 0.48.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

Bump getsentry/github-workflows/validate-pr from c802283cd9075b7a2b7a32655019c21c21676e34 to 4013fc6e1aeb1be1f9d3b4d232624f0ec1afa613 by @dependabot in #1344

... (truncated)

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.48.0

Breaking Changes 🛠

Remove issue creation from logging integrations by @giortzisg in #1340

New Features ✨
Add ClientOptions.DataCollection for granular control over data collected by automatic instrumentation, replacing the broad SendDefaultPII switch. DataCollection can independently configure automatic user.* population, cookies, request/response headers, HTTP bodies, and query parameters. When configured, it is the source of truth and SendDefaultPII is ignored. by @giortzisg in #1339

For backwards compatibility, clients that do not configure DataCollection keep a best-effort mapping of the previous SendDefaultPII behavior. To opt in to the new defaults, pass an empty DataCollection and then restrict individual categories as needed.
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
// Opt in to the new data collection defaults. Omitted fields use their
// defaults: user info, cookies, headers, query params, and supported HTTP
// bodies are collected, with sensitive values filtered.
DataCollection: &amp;sentry.DataCollection{},

})
To opt in while disabling automatic user info and HTTP bodies, configure those fields explicitly:
sentry.Init(sentry.ClientOptions{
    Dsn: "https://public@example.com/1",
    DataCollection: &sentry.DataCollection{
        UserInfo:   sentry.Set(false),
        HTTPBodies: []sentry.BodyType{},
    },
})
PushScope shorthand now returns the new scope reference by @DoctorJohn in #1335
Bug Fixes 🐛

Fix fiber route name when using middlewares by @giortzisg in #1363

Omit empty event id for standalone client reports by @giortzisg in #1362

Preserve '%' literal in log messages by @giortzisg in #1358

Unaligned 64-bit atomic panic on 32-bit platforms in telemetry buffers by @Kirill-INQ in #1355

Isolate event processor across clones by @giortzisg in #1337

Internal Changes 🔧

Deps

Bump fiber/v2 to 2.52.14 by @giortzisg in #1359

Bump actions/checkout from 6.0.3 to 7.0.0 by @dependabot in #1349

Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 by @dependabot in #1346

Bump codecov/codecov-action from 6.0.0 to 7.0.0 by @dependabot in #1347

Bump actions/setup-go from 6.4.0 to 6.5.0 by @dependabot in #1343

Bump golang.org/x/crypto to 0.52.0 and golang/x/net to 0.55.0 by @giortzisg in #1341

... (truncated)

Commits

d02f9ba release: 0.48.0
99c424f feat!: remove issue creation from logging integrations (#1340)
d1c1d3f feat: parse request body for outgoing http (#1339)
9b5cab2 fix: fix fiber route name when using middlewares (#1363)
07a7975 fix: omit empty event id for standalone client reports (#1362)
c255382 build(deps): bump fiber/v2 to 2.52.14 (#1359)
06c58dc ci: remove changelog-preview and codecov actions (#1357)
a99e044 fix: preserve '%' literal in log messages (#1358)
8aaf1d4 feat: apply sensitive data filters to grpc & sql (#1333)
4347773 feat: apply sensitive data filters to http (#1332)
Additional commits viewable in compare view

Updates github.com/googleapis/gax-go/v2 from 2.22.0 to 2.23.0

Release notes

Sourced from github.com/googleapis/gax-go/v2's releases.

v2.23.0

2.23.0 (2026-07-07)

Features

v2: add http.response.status_code to TransportTelemetryData (#513) (7d5554f)

Bug Fixes

correct min go version (#517) (fc62896)

Commits

aca8aec chore(main): release 2.23.0 (#514)
fc62896 fix: correct min go version (#517)
40c3a2c chore(deps): bump golang.org/x/net from 0.53.0 to 0.55.0 (#515)
327ff3b chore(all): update all (#516)
7d5554f feat(v2): add http.response.status_code to TransportTelemetryData (#513)
bcdd76a chore(all): update all to 87f3d3e (#512)
b4f8602 chore: migrate from legacylibrarian to release-please for releasing (#511)
d598715 chore(all): update all (#510)
1721d64 chore(all): update all (#508)
eca08b0 chore(all): update opentelemetry-go monorepo to v1.44.0 (#509)
Additional commits viewable in compare view

Updates golang.org/x/term from 0.44.0 to 0.45.0

Commits

9f69229 go.mod: update golang.org/x dependencies
See full diff in compare view

Updates google.golang.org/api from 0.287.0 to 0.287.1

Release notes

Sourced from google.golang.org/api's releases.

v0.287.1

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

Changelog

Sourced from google.golang.org/api's changelog.

0.287.1 (2026-07-07)

Documentation

Remove old TODO file (#3645) (9d7a6b8)

Commits

93d63e8 chore(main): release 0.287.1 (#3646)
9d7a6b8 docs: remove old TODO file (#3645)
576018f chore(all): update all (#3644)
cc70265 chore(deps): bump golang.org/x/net in /internal/kokoro/discogen (#3642)
9858f66 chore: downgrade go version in go.work (#3641)
3cb00c0 chore: downgrade min Go version (#3640)
See full diff in compare view

Updates cloud.google.com/go/storage from 1.63.0 to 1.63.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.63.1

1.63.1 (2026-07-13)

Features

o11y: Regenerate clients for LRO tracing (#20107) (779074e)

Bug Fixes

storage: Minor documentation fix (#20139) (37f1745)

Commits

ad1a4bf chore(main): release storage 1.63.1 (#20130)
37f1745 fix(storage): Minor documentation fix (#20139)
779074e feat(o11y): regenerate clients for LRO tracing (#20107)
e1011e2 feat(bigtable): add Session primitives (AttemptOutcome, vRPC ctx, msgtype) (#...
a50338e chore(main): release bigquery 1.78.0 (#20127)
b9d638d chore(librarian): align Go toolchain to 1.25.0 (#20129)
e67d752 chore(main): release firestore 1.23.0 (#19997)
fec9388 chore: remove bq v2 from release-please config (#20128)
75a5d59 fix(agentregistry): correct go min version (#20108)
8eb3be6 chore: wire up mod validation action (#20125)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.22.30 to 1.22.33

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.104.2 to 1.105.1

Commits

2704503 Release 2026-07-13
2475fc6 Regenerated Clients
89ce46e Update endpoints model
97a7b55 Update API model
472756a add response snapshot tests for new wave 1 (partial cbor) (#3471)
3133b1d Release 2026-07-10
2d7d0f8 Regenerated Clients
cdc7fe3 Update endpoints model
d41266e Update API model
d7ac1fc Release 2026-07-09
Additional commits viewable in compare view

Updates github.com/posthog/posthog-go from 1.17.5 to 1.19.0

Release notes

Sourced from github.com/posthog/posthog-go's releases.

1.19.0

Unreleased

1.18.0

Unreleased

Changelog

Sourced from github.com/posthog/posthog-go's changelog.

1.19.0

Minor Changes

154fd08: Add a $feature_flag_has_experiment boolean property to $feature_flag_called events. The value comes from the has_experiment field the server reports on flag metadata (/flags?v=2) and on local-evaluation flag definitions. The property is only sent when the server explicitly reported has_experiment (true or false); it is omitted when unknown (older deployments, v3 responses, or flags missing from the response).

1.18.0

Minor Changes

39c72dc: Drop the newest event instead of blocking when the in-memory queue is full, and make the queue size configurable.

Enqueue now returns ErrQueueFull when the queue is full, dropping the newest message rather than blocking the caller until space frees up. This matches posthog-python and posthog-rs. The drop is reported only through the returned error, not through Callback.Failure, so it stays cheap and off the callback goroutines under sustained overload. Backfill/bulk callers: check the error returned by Enqueue for ErrQueueFull and throttle or retry (or raise MaxQueueSize); otherwise events that overflow the queue are dropped, not delayed.

Add Config.MaxQueueSize (default DefaultMaxQueueSize = 10000) to control the in-memory message queue capacity independently of BatchSize. It is clamped up to BatchSize so the queue always holds at least one full batch. This replaces the previous hardcoded BatchSize * 10 sizing.

Change the default BatchSize (DefaultBatchSize) from 250 to 100, aligning with posthog-python, posthog-node, and posthog-rs. Callers that set BatchSize explicitly are unaffected.

Commits

901880f chore: release v1.19.0 [version bump] [skip ci]
154fd08 feat(flags): add $feature_flag_has_experiment to $feature_flag_called events ...
9e7c67e chore: release v1.18.0 [version bump] [skip ci]
39c72dc feat: drop newest on full queue, add configurable MaxQueueSize (#258)
d9b6e46 feat: add SecretKey config, deprecate PersonalApiKey (#253)
67f00c8 fix(compliance): retry feature flag requests (#257)
See full diff in compare view

Updates github.com/sigstore/fulcio from 1.8.7 to 1.8.8

Release notes

Sourced from github.com/sigstore/fulcio's releases.

v1.8.8

Changelog

a783aca51abce93aca863fac2addf0194880e065 Include CT log error body in logs (#2393)

965cdddc90299409ebba952f41b3be8233b2a7b2 update builder to use go1.26.4 (#2388)

80d8405e84eb76d60d99363aa2782631c86418ba Add --ct-log-origin flag (#2392)

7074b709ec6309d863f8789bdd32a75b49c5e127 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2383)

16cc54efe85eb2f5ef7f7e51494cb344e14690a0 docs: clarify RSA_PSS algorithm and ignored field in proto (#2378)

6b2c67d809db4a6fa4b4d04940fea0878151d8d7 Update fulcio to have configurable hsm-caroot-id rather than hardcoded (#2377)

Thanks for all contributors!

Commits

a783aca Include CT log error body in logs (#2393)
965cddd update builder to use go1.26.4 (#2388)
654e688 build(deps): bump golang.org/x/net (#2389)
462c070 build(deps): bump nginx in the all group across 1 directory (#2381)
ccc0782 build(deps): bump golang from 68cb6d6 to 792443b (#2379)
3e0f119 build(deps): bump the all group across 1 directory with 5 updates (#2391)
61e2802 build(deps): bump the all group across 1 directory with 5 updates (#2390)
80d8405 Add --ct-log-origin flag (#2392)
7074b70 build(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#2383)
16cc54e docs: clarify RSA_PSS algorithm and ignored field in proto (#2378)
Additional commits viewable in compare view

Updates github.com/sigstore/sigstore-go from 1.2.1 to 1.2.2

Release notes

Sourced from github.com/sigstore/sigstore-go's releases.

v1.2.2

What's Changed

Reject certificate identity with no SAN or issuer criteria in sigstore/sigstore-go#645

Support Verification in sigstore/cosign with X.509 Certificate Chain in sigstore/sigstore-go#581

Full Changelog: sigstore/sigstore-go@v1.2.1...v1.2.2

Commits

55aa624 Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#655)
2eb9560 Bump the minor-patch group across 1 directory with 2 updates (#656)
cbf26e4 Support Verification in sigstore/cosign with X.509 Certificate Chain (#581)
8a3361c Bump go-tuf to v2.4.2 (#652)
d6ec891 Bump the minor-patch group across 2 directories with 7 updates (#651)
945a0aa Bump actions/setup-go from 6.4.0 to 6.5.0 (#650)
13a15e1 Bump actions/checkout from 6.0.3 to 7.0.0 (#648)
c95d7f4 Update workflows to use Actions network firewall (#646)
a2a84a6 Update cert identity verify functions to ensure some criteria is specified (#...
See full diff in compare view

Updates github.com/sigstore/timestamp-authority/v2 from 2.1.2 to 2.1.3

Release notes

Sourced from github.com/sigstore/timestamp-authority/v2's releases.

v2.1.3

What's Changed

v2.1.3 bumps the version of Go used to build the binaries and containers to the latest release, 1.26.4. This release also contains a number of changes related to RFC3161 compliance.

count unknown EKUs when enforcing single timestamping usage in sigstore/timestamp-authority#1389

bound json nonce length before parsing in parsejsonrequest in sigstore/timestamp-authority#1402

reject timestamp response missing the requested nonce in sigstore/timestamp-authority#1405

Fix --timeout flag reporting its value type as "format" in help in sigstore/timestamp-authority#1413

handle client disconnection as 499 error = in sigstore/timestamp-authority#1417

require timestamping leaf certificate to be an end-entity in sigstore/timestamp-authority#1416

Full Changelog: sigstore/timestamp-authority@v2.1.2...v2.1.3

Commits

811e94a chore(deps): bump github.com/go-openapi/swag/cmdutils (#1423)
41e1818 chore(deps): bump github.com/go-openapi/strfmt (#1420)
32d28ff chore(deps): bump github.com/go-openapi/swag/netutils (#1421)
157294b chore(deps): bump the actions group across 1 directory with 3 updates (#1419)
42e74fc require timestamping leaf certificate to be an end-entity (#1416)
3f20613 chore(deps): bump github.com/go-openapi/swag/jsonutils (#1422)
01aa5b9 chore(deps): bump golang from 32c0e6e to f96cc55 (#1414)
99c7698 handle client disconnection as 499 error: (#1417)
ba3024d chore(deps): bump actions/setup-go in the actions group (#1415)
b7c4a2a Fix timeout flag reporting its value type as format in help (#1413)
Additional commits viewable in compare view

Updates go.step.sm/crypto from 0.84.1 to 0.85.0

Release notes

Sourced from go.step.sm/crypto's releases.

Release v0.85.0

What's Changed

Make TPM dirstore cache size configurable by @darkfronza in smallstep/crypto#1070

Dependencies

chore(deps): Bump google.golang.org/api from 0.286.0 to 0.288.0 by @dependabot[bot] in smallstep/crypto#1068

chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.5 to 1.54.1 by @dependabot[bot] in smallstep/crypto#1065

chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.30 by @dependabot[bot] in smallstep/crypto#1067

chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms from 1.53.4 to 1.53.5 by @dependabot[bot] in smallstep/crypto#1064

chore(deps): Bump github.com/aws/aws-sdk-go-v2/config from 1.32.25 to 1.32.26 by @dependabot[bot] in smallstep/crypto#1063

chore(deps): Bump github.com/ThalesGroup/crypto11 from 1.6.0 to 1.6.2 by @dependabot[bot] in smallstep/crypto#1069

chore(deps): Bump google.golang.org/grpc from 1.81.1 to 1.82.0 by @dependabot[bot] in smallstep/crypto#1066

Full Changelog: smallstep/crypto@v0.84.1...v0.85.0

Commits

2f2da33 Merge pull request #1067 from smallstep/dependabot/go_modules/github.com/aws/...
4ac554f chore(deps): Bump github.com/aws/aws-sdk-go-v2/config
939e80e Merge pull request #1065 from smallstep/dependabot/go_modules/github.com/aws/...
0b81964 chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms
913ffc2 Merge pull request #1068 from smallstep/dependabot/go_modules/google.golang.o...
9bddd4a chore(deps): Bump google.golang.org/api from 0.286.0 to 0.288.0
b9dd702 Merge pull request #1070 from smallstep/diego/eff-89-dirstore-cache-option
a5902cb Merge pull request #1066 from smallstep/dependabot/go_modules/google.golang.o...
5e46a2f Merge pull request #1069 from smallstep/dependabot/go_modules/github.com/Thal...
eec0a45 tpmkms: build TPM options in one place
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/api from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260630182238-925bb5da69e7

Commits

See full diff in compare view

Updates google.golang.org/genproto/googleapis/bytestream from 0.0.0-20260622175928-b703f567277d to 0.0.0-20260630182238-925bb5da69e7

Commits

See full diff in compare view

Updates github.com/XSAM/otelsql from 0.42.0 to 0.43.0

Release notes

Sourced from github.com/XSAM/otelsql's releases.

Release v0.43.0

Removed

BREAKING Remove support for OTEL_SEMCONV_STABILITY_OPT_IN environment variable, legacy db.sql.latency metric, and db.statement span attribute. Only stable Semantic Conventions are now used. (#617)

Changed

~~Upgrade OTel Semconv to v1.40.0.~~ (#606)

Upgrade OTel Semconv to v1.44.0. (#615)

Fixed

Implement driver.Validator on otConn so that database/sql connection pool health checks are properly delegated to the underlying driver connection. (#619)

AttributesFromDSN no longer panics on DSNs that wrap a unix-socket path in the protocol(/path/to.sock) form, e.g. unix(/tmp/mysql.sock)/dbname. The parser now extracts the address from inside the parentheses before splitting on /. (#625)

What's Changed

Bump OTel semantic conventions to v1.40.0 by @cyrille-leclerc in XSAM/otelsql#606

Update doc for Register by @XSAM in XSAM/otelsql#616

implement driver.Validator on otConn by @Twister915 in

…h 25 updates Bumps the go-minor-and-patch group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [code.cloudfoundry.org/bytefmt](https://github.com/cloudfoundry/bytefmt) | `0.79.0` | `0.81.0` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.27` | `1.32.30` | | [github.com/aws/aws-sdk-go-v2/service/secretsmanager](https://github.com/aws/aws-sdk-go-v2) | `1.42.5` | `1.43.1` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.19.0` | `3.20.0` | | [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.47.0` | `0.48.0` | | [github.com/googleapis/gax-go/v2](https://github.com/googleapis/gax-go) | `2.22.0` | `2.23.0` | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.63.0` | `1.63.1` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.22.30` | `1.22.33` | | [github.com/posthog/posthog-go](https://github.com/posthog/posthog-go) | `1.17.5` | `1.19.0` | | [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) | `1.8.7` | `1.8.8` | | [github.com/sigstore/sigstore-go](https://github.com/sigstore/sigstore-go) | `1.2.1` | `1.2.2` | | [github.com/sigstore/timestamp-authority/v2](https://github.com/sigstore/timestamp-authority) | `2.1.2` | `2.1.3` | | [go.step.sm/crypto](https://github.com/smallstep/crypto) | `0.84.1` | `0.85.0` | | [github.com/XSAM/otelsql](https://github.com/XSAM/otelsql) | `0.42.0` | `0.43.0` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.69.0` | `0.70.0` | Updates `code.cloudfoundry.org/bytefmt` from 0.79.0 to 0.81.0 - [Release notes](https://github.com/cloudfoundry/bytefmt/releases) - [Commits](cloudfoundry/bytefmt@v0.79.0...v0.81.0) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.27 to 1.32.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.27...config/v1.32.30) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.19.26 to 1.19.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.19.26...credentials/v1.19.29) Updates `github.com/aws/aws-sdk-go-v2/service/secretsmanager` from 1.42.5 to 1.43.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/amp/v1.42.5...service/s3/v1.43.1) Updates `github.com/aws/aws-sdk-go-v2/service/sso` from 1.31.5 to 1.32.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.31.5...v1.32.1) Updates `github.com/coreos/go-oidc/v3` from 3.19.0 to 3.20.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.19.0...v3.20.0) Updates `github.com/getsentry/sentry-go` from 0.47.0 to 0.48.0 - [Release notes](https://github.com/getsentry/sentry-go/releases) - [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md) - [Commits](getsentry/sentry-go@v0.47.0...v0.48.0) Updates `github.com/googleapis/gax-go/v2` from 2.22.0 to 2.23.0 - [Release notes](https://github.com/googleapis/gax-go/releases) - [Commits](googleapis/gax-go@v2.22.0...v2.23.0) Updates `golang.org/x/term` from 0.44.0 to 0.45.0 - [Commits](golang/term@v0.44.0...v0.45.0) Updates `google.golang.org/api` from 0.287.0 to 0.287.1 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.287.0...v0.287.1) Updates `cloud.google.com/go/storage` from 1.63.0 to 1.63.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@compute/v1.63.0...storage/v1.63.1) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.22.30 to 1.22.33 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.22.30...feature/s3/manager/v1.22.33) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.104.2 to 1.105.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.104.2...service/s3/v1.105.1) Updates `github.com/posthog/posthog-go` from 1.17.5 to 1.19.0 - [Release notes](https://github.com/posthog/posthog-go/releases) - [Changelog](https://github.com/PostHog/posthog-go/blob/main/CHANGELOG.md) - [Commits](PostHog/posthog-go@v1.17.5...v1.19.0) Updates `github.com/sigstore/fulcio` from 1.8.7 to 1.8.8 - [Release notes](https://github.com/sigstore/fulcio/releases) - [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md) - [Commits](sigstore/fulcio@v1.8.7...v1.8.8) Updates `github.com/sigstore/sigstore-go` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.1...v1.2.2) Updates `github.com/sigstore/timestamp-authority/v2` from 2.1.2 to 2.1.3 - [Release notes](https://github.com/sigstore/timestamp-authority/releases) - [Changelog](https://github.com/sigstore/timestamp-authority/blob/main/CHANGELOG.md) - [Commits](sigstore/timestamp-authority@v2.1.2...v2.1.3) Updates `go.step.sm/crypto` from 0.84.1 to 0.85.0 - [Release notes](https://github.com/smallstep/crypto/releases) - [Commits](smallstep/crypto@v0.84.1...v0.85.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20260615183401-62b3387ff324 to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/bytestream` from 0.0.0-20260622175928-b703f567277d to 0.0.0-20260630182238-925bb5da69e7 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `github.com/XSAM/otelsql` from 0.42.0 to 0.43.0 - [Release notes](https://github.com/XSAM/otelsql/releases) - [Changelog](https://github.com/XSAM/otelsql/blob/main/CHANGELOG.md) - [Commits](XSAM/otelsql@v0.42.0...v0.43.0) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.43.5 to 1.44.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/sts/v1.43.5...service/iot/v1.44.1) Updates `github.com/prometheus/common` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.69.0...v0.70.0) Updates `golang.org/x/crypto` from 0.53.0 to 0.54.0 - [Commits](golang/crypto@v0.53.0...v0.54.0) Updates `golang.org/x/text` from 0.39.0 to 0.40.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.39.0...v0.40.0) --- updated-dependencies: - dependency-name: code.cloudfoundry.org/bytefmt dependency-version: 0.81.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.30 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.19.29 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/secretsmanager dependency-version: 1.43.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sso dependency-version: 1.32.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/getsentry/sentry-go dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/googleapis/gax-go/v2 dependency-version: 2.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/term dependency-version: 0.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: google.golang.org/api dependency-version: 0.287.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: cloud.google.com/go/storage dependency-version: 1.63.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-version: 1.22.33 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.105.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/posthog/posthog-go dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/fulcio dependency-version: 1.8.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/sigstore/timestamp-authority/v2 dependency-version: 2.1.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: go.step.sm/crypto dependency-version: 0.85.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: google.golang.org/genproto/googleapis/api dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: google.golang.org/genproto/googleapis/bytestream dependency-version: 0.0.0-20260630182238-925bb5da69e7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-minor-and-patch - dependency-name: github.com/XSAM/otelsql dependency-version: 0.43.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-version: 1.44.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: github.com/prometheus/common dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/crypto dependency-version: 0.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch - dependency-name: golang.org/x/text dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-and-patch ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 23, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the go-minor-and-patch group across 1 directory with 25 updates#3304

chore(deps): bump the go-minor-and-patch group across 1 directory with 25 updates#3304
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-minor-and-patch-7bca16fb81

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited by cubic-dev-ai Bot

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 23, 2026 • edited by cubic-dev-ai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v3.20.0

What's Changed

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

0.48.0

Breaking Changes 🛠

New Features ✨

Bug Fixes 🐛

Internal Changes 🔧

Deps

v2.23.0

2.23.0 (2026-07-07)

Features

Bug Fixes

v0.287.1

0.287.1 (2026-07-07)

Documentation

0.287.1 (2026-07-07)

Documentation

storage: v1.63.1

1.63.1 (2026-07-13)

Features

Bug Fixes

1.19.0

Unreleased

1.18.0

Unreleased

1.19.0

Minor Changes

1.18.0

Minor Changes

v1.8.8

Changelog

Thanks for all contributors!

v1.2.2

What's Changed

v2.1.3

What's Changed

Release v0.85.0

What's Changed

Dependencies

Release v0.43.0

Removed

Changed

Fixed

What's Changed

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jul 23, 2026 •

edited by cubic-dev-ai Bot

Loading