deps: bump the go-deps group across 1 directory with 22 updates by dependabot[bot] · Pull Request #730 · Wave-RF/WaveHouse

dependabot · 2026-10-05T16:09:05Z

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

Bumps the go-deps group with 22 updates in the / directory:

Package	From	To
github.com/aws/aws-sdk-go-v2/service/dynamodb	`1.69.1`	`1.70.0`
github.com/aws/smithy-go	`1.28.1`	`1.28.2`
github.com/dustin/go-humanize	`1.0.1`	`1.1.0`
github.com/klauspost/compress	`1.19.2`	`1.20.1`
github.com/moby/moby/api	`1.55.0`	`1.56.1`
github.com/moby/moby/client	`0.5.1`	`0.6.1`
github.com/nats-io/nats-server/v2	`2.14.6`	`2.15.0`
github.com/nats-io/nats.go	`1.53.1`	`1.54.0`
go.opentelemetry.io/otel	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc	`0.22.0`	`0.23.0`
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/exporters/prometheus	`0.68.0`	`0.69.0`
go.opentelemetry.io/otel/log	`0.22.0`	`1.47.0`
go.opentelemetry.io/otel/metric	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/sdk	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/sdk/log	`0.22.0`	`1.47.0`
go.opentelemetry.io/otel/sdk/metric	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/trace	`1.46.0`	`1.47.0`
go.opentelemetry.io/proto/otlp	`1.11.0`	`1.11.1`
golang.org/x/time	`0.15.0`	`0.16.0`
google.golang.org/grpc	`1.83.2`	`1.84.0`

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.69.1 to 1.70.0

Commits

776903f Release 2024-12-02
170b13c Regenerated Clients
c1a02e7 Update API model
2835f7b Fix user agent to add business metrics at the end instead of prepend them (#2...
ba4965d Release 2024-11-27
55149b0 Regenerated Clients
fd6bb8b Update endpoints model
65ab4f8 Update API model
8939ed0 Release 2024-11-26
23cf36b Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/smithy-go from 1.28.1 to 1.28.2

Changelog

Sourced from github.com/aws/smithy-go's changelog.

Release (2026-09-18)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.2

Bug Fix: Avoid allocating a slice in ValidateEndpointHost by indexing into the hostname instead of using strings.Split.

Bug Fix: Fix event stream decode panic on unknown header value type.

Bug Fix: Fix schema-serde CBOR decode panic on malformed string/blob length.

Bug Fix: JoinPath keeps a trailing slash when the added path is a slash.

Release (2026-08-26)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.1

Bug Fix: Fix broken AddLogger middleware since its insert point was removed.

Release (2026-08-25.2)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.28.0

Feature: Set Content-Length inline when the request body is set via SetStream. The ComputeContentLength middleware is now deprecated.

Release (2026-08-25)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.10

Bug Fix: Fix a data race on the underlying writer when an event stream is closed while an event write is in flight.

Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

Release (2026-08-21)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.9

Bug Fix: Fix a generic event stream exception not carrying the error code and message from its payload.

Bug Fix: Fix an event stream not being closed when its connection is lost, which would cause a caller writing to the stream to block indefinitely.

Bug Fix: Fix deserialization of an empty list producing a nil slice instead of an empty one.

... (truncated)

Commits

9b28af0 Release 2026-09-18
f59df88 Avoid slice allocation in ValidateEndpointHost (#705)
7c16d7f fix decode panic on event stream header type and bad cbor string/blob len (#713)
c60819a fix initial-message race (#712)
d05a672 fix v2 event streams orphaning the result channel on error paths in schema-se...
fe95176 Revert "fix v2 event streams orphaning the result channel on error paths in s...
9847245 fix v2 event streams orphaning the result channel on error paths in schema-serde
9eba49f Print stacktrace when smithy-build fails (#708)
959c6ab Keep a trailing slash when JoinPath right operand is a slash. (#698)
d253285 update README
See full diff in compare view

Updates github.com/dustin/go-humanize from 1.0.1 to 1.1.0

Commits

40736da Fix #105
528b6f7 Fix #85
2ccb40f Fix #103
0509d5b feat: add ParseComma and ParseCommaf with doc comments and epsilon test
0a173b2 Increase big coverage
ca34c61 Bump actions/setup-go from 6.1.0 to 6.3.0
da71bb0 Bump actions/checkout from 5.0.1 to 6.0.2
d02cffb si: accept the Greek letter mu as an alias for µ in ParseSI
0f3681d Round off coverage of big
ed94053 Increase bytes parsing coverage
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.19.2 to 1.20.1

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.1

What's Changed

zstd: apply reset options to reused frame decoders by @pellared in klauspost/compress#1226

flate: Report unexpected EOF for truncated Huffman extra bits by @rupayon123 in klauspost/compress#1229

flate: avoid FMA in EstimatedBits for portable rounding by @malt3 in klauspost/compress#1224

gzhttp: preserve caller request headers in Transport by @jakezwang in klauspost/compress#1225

gzhttp: only decompress a request when gzip is the outermost coding by @youdie006 in klauspost/compress#1223

zstd/huff0: Optimizations by @lizthegrey in klauspost/compress#1203 klauspost/compress#1205 klauspost/compress#1207 klauspost/compress#1204 klauspost/compress#1208 klauspost/compress#1211 klauspost/compress#1209 klauspost/compress#1210

flate: Speed improvements by @alex in klauspost/compress#1220 klauspost/compress#1218 klauspost/compress#1216 klauspost/compress#1215 klauspost/compress#1214 klauspost/compress#1217

New Contributors

@xingyaner made their first contribution in klauspost/compress#1222

@jakezwang made their first contribution in klauspost/compress#1225

@youdie006 made their first contribution in klauspost/compress#1223

@pellared made their first contribution in klauspost/compress#1226

@malt3 made their first contribution in klauspost/compress#1224

@rupayon123 made their first contribution in klauspost/compress#1229

Full Changelog: klauspost/compress@v1.20.0...v1.20.1

v1.20.0

What's Changed

Add lzw reader/writer by @klauspost in klauspost/compress#1189

xpress: add Microsoft XPRESS (MS-XCA) decompression by @MP-GOWTHAM in klauspost/compress#1195

s2: arm64 assembly encoders, lowered from the amd64 avo program by @lizthegrey in klauspost/compress#1187

zstd, huff0: improved arm64 lowering, and narrow two table loads to MOVWQZX by @lizthegrey in klauspost/compress#1175

gzhttp: limit jitter hash to jitterBuffer bytes by @VedantMadane in klauspost/compress#1192

s2: clamp the Go EncodeBetter skip to match the assembly by @lizthegrey in klauspost/compress#1190

xxhash: bound input of non-preemptive assembly by @AskAlexSharov in klauspost/compress#1196

zstd/huff0: fold two ISA-gap x86 idioms in the avo arm64 lowering by @lizthegrey in klauspost/compress#1199

ci: test against go1.27.x, drop go1.24.x by @lizthegrey in klauspost/compress#1198

zstd/huff0: break false partial-register dependencies in seqdec/4X decoders by @lizthegrey in klauspost/compress#1197

flate: Writer L7-9 with dictionary can emit the dictionary to stream by @klauspost in klauspost/compress#1201

New Contributors

@VedantMadane made their first contribution in klauspost/compress#1192

@AskAlexSharov made their first contribution in klauspost/compress#1196

@MP-GOWTHAM made their first contribution in klauspost/compress#1195

Full Changelog: klauspost/compress@v1.19.2...v1.20.0

Commits

5d880f2 tests: Pre-release cleanups (#1231)
5ed8a01 Report unexpected EOF for truncated Huffman extra bits (#1229)
0bed724 flate: avoid FMA in EstimatedBits for portable rounding (#1224)
147b531 zstd: apply reset options to reused frame decoders (#1226)
58dac78 gzhttp: only decompress a request when gzip is the outermost coding (#1223)
9b00a55 gzhttp: preserve caller request headers in Transport (#1225)
de8f55d ossfuzz: include zstd seqdec path tests (#1222)
a1c49c6 flate: precompute literal costs for findMatch (#1217)
ebd8190 flate: avoid the hand-rolled sorts when generating Huffman codes (#1214)
4dc0d32 flate: use separate tables in histogramSplit (#1215)
Additional commits viewable in compare view

Updates github.com/moby/moby/api from 1.55.0 to 1.56.1

Release notes

Sourced from github.com/moby/moby/api's releases.

api/v1.56.1

1.56.1

Changelog

api/scripts: Allow isolated model generation with an API directory. moby/moby#53629

api/swagger: Improve OpenAPI compatibility. moby/moby#53626

api/swagger: Quote HTTP response status codes. moby/moby#53759

api/templates: schema: disable validators and serializer sections. moby/moby#53751

api: fix G117 (gosec). moby/moby#53721

api: swagger ImageManifestSummary.ImageData: fix invalid required field. moby/moby#53750

api: update go-swagger to v0.36.6. moby/moby#53754

fix: invalid swagger YAML indentation. moby/moby#53606

api/v1.56.0

1.56.0

Changelog

GET /containers/json now supports an annotation filter to filter containers by annotation, either by key (annotation=key) or by key and value (annotation="key=value"), similar to the existing label filter. moby/moby#53538

POST /containers/create now supports HostConfig.Umask to set the initial umask for a Unix container. When set, the daemon includes the value in the OCI process configuration for the container's entrypoint, exec processes, and healthchecks. When omitted, the runtime's default behavior applies.moby/moby#53463

api/docs: sync API docs v1.25 - v1.55. moby/moby#53246

api/swagger: Align Healthcheck name with Go struct. moby/moby#53567

api/types/plugin: Deprecated plugin.Privileges sorting methods in favor of slices.SortFunc. moby/moby#53511

api/types/plugin: fix Privileges Swap implementation. moby/moby#53510

api: Bump to 1.56. moby/moby#53425

api: document Task.NetworksAttachments in the swagger definition. moby/moby#53082

api: remove gotest.tools from tests. moby/moby#53535

api: swagger: Use int64 for build query params. moby/moby#53520

api: use blackbox testing. moby/moby#53525

Fix API reference documenting an unsupported names filter for GET /configs. moby/moby#53447

Commits

14ebc60 Merge pull request #53830 from tonistiigi/update-buildkit-v0.34.0-rc1
8eded0e Merge pull request #53671 from thaJeztah/add_WithHTTPRequestHook
c4e39af Merge pull request #53596 from vvoland/c8d-refactor-imgload
b8a569e client: add WithHTTPRequestHook option
0fed273 Merge pull request #53803 from thaJeztah/etchosts_cleanups
80c72a3 Merge pull request #53831 from corhere/fix-dnsproxy-servfail-test
1cfa161 daemon/containerd: Split image loading into import and unpack steps
e7272aa Merge pull request #53606 from flostellbrink/fix/swagger-yaml-indentation
357096e libnetwork/etchosts: keep file open when updating hosts
012b2ef libnetwork/etchosts: propagate file close errors
Additional commits viewable in compare view

Updates github.com/moby/moby/client from 0.5.1 to 0.6.1

Release notes

Sourced from github.com/moby/moby/client's releases.

client/v0.6.1

0.6.1

Changelog

client: add WithHTTPRequestHook option. moby/moby#53671

client: deprecate WithResponseHook in favor of WithHTTPResponseHook. moby/moby#53666

client: fix WithHTTPResponseHook hooks not being called for hijacked HTTP connections. moby/moby#53821

client: postRaw: use consistent order or arguments. moby/moby#53677

client: prevent response hooks from consuming response body. moby/moby#53667

client: remove redundant cloning of response hooks. moby/moby#53822

client: update github.com/docker/go-connections v0.8.1. moby/moby#53708

golangci-lint: enable usetesting linter. moby/moby#53720

vendor: github.com/moby/moby/api v1.56.1. moby/moby#53837

client/v0.6.0

0.6.0

Changelog

pkg/jsonmessage: add new WithMessagePrinter option to use a custom printer for messages. moby/moby#53489

api: Bump to 1.56. moby/moby#53425

minor cleanups, refactors. moby/moby#53509

Changelog

Sourced from github.com/moby/moby/client's changelog.

0.6.1 (2013-08-23)

Registry: Pass "meta" headers in API calls to the registry

Packaging: Use correct upstart script with new build tool

Packaging: Use libffi-dev, don't build it from sources

Packaging: Removed duplicate mercurial install command

0.6.0 (2013-08-22)

Runtime: Load authConfig only when needed and fix useless WARNING

Runtime: Add lxc-conf flag to allow custom lxc options

Runtime: Fix race conditions in parallel pull

Runtime: Improve CMD, ENTRYPOINT, and attach docs.

Documentation: Small fix to docs regarding adding docker groups

Documentation: Add MongoDB image example

Builder: Add USER instruction do Dockerfile

Documentation: updated default -H docs

Remote API: Sort Images by most recent creation date.

Builder: Add workdir support for the Buildfile

Runtime: Add an option to set the working directory

Runtime: Show tag used when image is missing

Documentation: Update readme with dependencies for building

Documentation: Add instructions for creating and using the docker group

Remote API: Reworking opaque requests in registry module

Runtime: Fix Graph ByParent() to generate list of child images per parent image.

Runtime: Add Image name to LogEvent tests

Documentation: Add sudo to examples and installation to documentation

Hack: Bash Completion: Limit commands to containers of a relevant state

Remote API: Add image name in /events

Runtime: Apply volumes-from before creating volumes

Runtime: Make docker run handle SIGINT/SIGTERM

Runtime: Prevent crash when .dockercfg not readable

Hack: Add docker dependencies coverage testing into docker-ci

Runtime: Add -privileged flag and relevant tests, docs, and examples

Packaging: Docker-brew 0.5.2 support and memory footprint reduction

Runtime: Install script should be fetched over https, not http.

Packaging: Add new docker dependencies into docker-ci

Runtime: Use Go 1.1.2 for dockerbuilder

Registry: Improve auth push

Runtime: API, issue 1471: Use groups for socket permissions

Documentation: PostgreSQL service example in documentation

Contrib: bash completion script

Tests: Improve TestKillDifferentUser to prevent timeout on buildbot

Documentation: Fix typo in docs for docker run -dns

Documentation: Adding a reference to ps -a

Runtime: Correctly detect IPv4 forwarding

Packaging: Revert "docker.upstart: avoid spawning a sh process"

Runtime: Use ranged for loop on channels

Runtime: Fix typo: fmt.Sprint -> fmt.Sprintf

Tests: Fix typo in TestBindMounts (runContainer called without image)

Runtime: add websocket support to /container//attach/ws

Runtime: Mount /dev/shm as a tmpfs

... (truncated)

Commits

5105263 Bump to v0.6.1
7b5c579 Use correct upstart script with new build tool
15d658d Removed duplicate mercurial install command
59281d6 use libffi-dev, don't build it from sources
29be20f Fixed: ImagePull in runtime test
5a8c32d Use additional decorator in RequestFactory to pass meta headers to registry
588f8e1 Merge pull request #1628 from dotcloud/bump_0.6.0
f4a4f1c Bump to 0.6.0
f925edd Merge pull request #1525 from griff/1503-fix
12715c8 Merge pull request #1609 from jpetazzo/release-docker-with-docker
Additional commits viewable in compare view

Updates github.com/nats-io/nats-server/v2 from 2.14.6 to 2.15.0

Release notes

Sourced from github.com/nats-io/nats-server/v2's releases.

Release v2.15.0

Changelog

Refer to the 2.15 Upgrade Guide for backwards compatibility notes with 2.14.x. This release also contains all changes up to and including v2.14.7.

Go Version

1.27.1 (#8551)

Added

JetStream

Desired state metalayer (#8432, #8437, #8439, #8443, #8452, #8460, #8476, #8576, #8598, #8602, #8603)

A new desired state reconciliation engine for streams and consumers considerably improves the safety and reliability of asset moves and scales

Updating the placement or replication factor midway through an existing scale/move operation, cancelling an in-flight scale/move, or peer-removing is now much safer

ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-62.md

Cancel stream move endpoint (#8476)

An in-flight scale/move operation on a stream can be cancelled and the asset returned to its original placement using the new $JS.API.STREAM.CANCEL_MOVE endpoint

ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-62.md

Evacuate endpoints (#8443)

The new $JS.API.SERVER.EVACUATE endpoint can safely evacuate streams, and any consumers on those streams, from a node

The new $JS.API.STREAM.PEER.EVACUATE.* endpoint can safely evacuate a peer, and any consumers on that peer, from a stream

These operations combined allow for maintenance operations with full transfer of data and state without having to peer-remove first

ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-62.md

Metalayer rescue for disaster recovery (#8408)

The new $JS.API.META.RESCUE endpoint can temporarily lower the quorum-needed for the metalayer, in order to facilitate the recovery of a system where nodes have been permanently lost and the metalayer cannot reach quorum

ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-61.md

Stream backup and restore v2 (#7882, #8584, #8591, #8604)

A new backup format for stream snapshots which reads out per-message rather than per-block

The new backup format also now correctly includes non-replicated consumers on follower nodes

ADR: https://github.com/nats-io/nats-architecture-and-design/blob/main/adr/ADR-63.md

Detect source stream recreation (#8384)

The server now detects a source stream being recreated, restarting the sourcing back from the beginning, ensuring new messages are sourced

Stream source indexing (#8282, #8516, #8283)

Restarts and leader changes previously required expensive backward scans through the stream to find the last sourced indices. These are now persisted in an index for instant lookup.

Domain-prefixed JS API in system account (#8429)

When a system account is bridged between the hub and a leaf node, the domain-prefixed JS API can now be used to operate on the leaf node while directly connected to the hub

Changed

JetStream

Streams now have a default limit of 1000 consumers, unless max_consumers is specified in the stream config or account limits (#8337, #8566)

Applications planning to use a large number of consumers on a stream should configure max_consumers in the stream config or account limits to an appropriately high number

The server-wide default of 1000 can be overridden by setting default_max_consumers in the JetStream limits, or can be disabled by setting to -1

This limit does not affect existing consumers and will not result in consumer deletions, only the creation of new consumers is prevented

Sync changes for replicated streams (#8447)

When the sync_interval is set to always, replicated streams now sync their WAL entries but no longer sync upper stream layer writes

The synced log allows the stream to recover safely, but removing unnecessary syncs from the upper stream layer dramatically improves performance

... (truncated)

Commits

eb76367 Release v2.15.0
8f3f31b [FIXED] Config reload disconnects operator mode clients sending an nkey (#8609)
7d77240 [FIXED] Stream scale down into a missing account tier was accepted (#8608)
e46d21f [FIXED] Concurrent account updates invalidating stream imports (#8610)
2ecd77a De-flake TestJetStreamClusterHardKillAfterStreamAdd
901df78 De-flake TestJetStreamClusterAccountMaxConnectionsReconnect
e133a1f De-flake TestJetStreamClusterMessageTTLCatchup
2990f6c [FIXED] Concurrent account updates invalidating stream imports
51fd55f De-flake TestJWTImportsOnServerRestartAndClientsReconnect
6a82cf9 De-flake TestNoRaceRouteSendSubs
Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.53.1 to 1.54.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.54.0

Changelog

This release raises the minimum supported Go version to 1.26 and adds support for nats-server v2.15 stream and consumer info fields.

ADDED

Core NATS:

nats.MultipathTCP() option to enable or disable MPTCP for outbound connections (#2145)

Conn.ConnectedDomain() to read the JetStream domain advertised by the connected server (#2139)

JetStream:

ClusterInfo.Desired, PeerInfo.Peer, PeerInfo.Pending and StreamSourceInfo.Seq in stream and consumer info, reported by nats-server v2.15 (#2144)

Nats-Schedule-Rollup header const and WithScheduleRollup() publish option (#2142)

FIXED

Core NATS:

Panic in DecodeHeadersMsg on inline status tokens shorter than 3 characters. Thanks @nikitha-m for the contribution (#2101)

Data race on Subscription.sid between applyNewSID and removeSub (#2122)

JetStream:

Messages() iterator going silent after a reconnect that completes between Next() calls. Thanks @1995parham for the contribution (#2135)

Legacy ordered consumer silently losing messages when the subscription hits its pending limits (#2137)

Legacy ordered consumer reset resurrecting an unsubscribed or draining subscription (#2133)

IMPROVED

Core NATS:

Avoid allocation when parsing header message arguments with a fifth token. Thanks @0xAozora for the contribution (#2130)

Preallocate reply subject buffers. Thanks @0xAozora for the contribution (#2123)

JetStream:

Prevent doErr closure escaping to the heap in async publish reply handling. Thanks @0xAozora for the contribution (#2127)

Fix typo in Publisher interface methods comment. Thanks @sreeram77 for the contribution (#2120)

Minimum Go version is now 1.26 (#2146)

Bump klauspost/compress to v1.20.0 and nkeys to v0.4.16 (#2117, #2146)

Tests run locally without docker via an in-process ntf tester (#2131), and CI now runs against nats-server v2.15.0 (#2146)

Fix flaky cluster restart tests (#2141) and list consumers test against latest server (#2138)

Complete Changes

nats-io/nats.go@v1.53.1...v1.54.0

Commits

7a8404a Release v1.54.0 (#2148)
240fb1f [IMPROVED] Bump dependencies and update server version in CI (#2146)
203d828 [FIXED] Panic in DecodeHeadersMsg on status tokens shorter than 3 characters ...
dc92fca [FIXED] Ordered consumer silently losing messages on slow consumer (#2137)
e18cea8 [IMPROVED] Prevent doErr closure escaping to heap (#2127)
d8d8c09 [ADDED] nats.MultipathTCP() for enabling or disabling MPTCP (#2145)
e95c424 [FIXED] Flaky cluster restart tests: waitForStream must see a stream leader (...
e3abbf4 [ADDED] Nats-Schedule-Rollup header const and publish options (#2142)
f1289db [ADDED] Desired state, peer ID/pending and source seq in stream and consumer ...
b84f783 Ignore Claude Code local files and .worktrees (#2140)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.46.0 to 1.47.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

v1.47.0/v0.69.0/v0.23.0/v0.1.0

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8941)

Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#8123)

Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#8760)

Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#8906)

Changed

Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8993)

Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8938)

Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#8912)

Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#8739)

Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#8740)

Fixed

Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.

Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (#9054)

Fix a data race in NewPeriodicReader where r.inst was assigned after the background goroutine was launched in go.opentelemetry.io/otel/sdk/metric. (#9028)

Prevent precision loss for large int64 values in Sum, Histogram, and ExponentialHistogram aggregations in go.opentelemetry.io/otel/sdk/metric. (#8981)

Ensure grpc.DialOption values passed via WithDialOption take precedence over conflicting internally-computed defaults in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8805, #8834, #8836)

Treat overflowing OTEL_METRIC_EXPORT_INTERVAL and OTEL_METRIC_EXPORT_TIMEOUT values as invalid in go.opentelemetry.io/otel/sdk/metric. (#8800)

Prevent a panic in NewFixedSizeReservoir and FixedSizeReservoirProvider when given a negative size in go.opentelemetry.io/otel/sdk/metric/exemplar; negative sizes are now clamped to zero, consistent with a size of zero. (#8832)

Preserve exponential histogram ZeroThreshold during OTLP metric export in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8801)

Ensure metric helpers in go.opentelemetry.io/otel/semconv/v1.32.0, go.opentelemetry.io/otel/semconv/v1.33.0, and go.opentelemetry.io/otel/semconv/v1.34.0 record measurements only once when no attributes are provided. (#8849)

Treat empty OTEL_TRACES_SAMPLER and OTEL_TRACES_SAMPLER_ARG values as unset in go.opentelemetry.io/otel/sdk/trace. (#8873)

Normalize global OTEL_EXPORTER_OTLP_ENDPOINT path joining in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp so trailing-slash base URLs do not produce double-slash log export paths. (#8864)

Prevent a deadlock when formatting an error passed to RecordError calls back into the span in go.opentelemetry.io/otel/sdk/trace. (#8815)

Prevent SimpleSpanProcessor.Shutdown from panicking when constructed with a nil exporter in go.opentelemetry.io/otel/sdk/trace. (#8844)

Propagate invalid exponential histogram scale errors to Prometheus exporter self-observability metrics in go.opentelemetry.io/otel/exporters/prometheus. (#8839)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/ot... Description has been truncated

Bumps the go-deps group with 22 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.69.1` | `1.70.0` | | [github.com/aws/smithy-go](https://github.com/aws/smithy-go) | `1.28.1` | `1.28.2` | | [github.com/dustin/go-humanize](https://github.com/dustin/go-humanize) | `1.0.1` | `1.1.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.19.2` | `1.20.1` | | [github.com/moby/moby/api](https://github.com/moby/moby) | `1.55.0` | `1.56.1` | | [github.com/moby/moby/client](https://github.com/moby/moby) | `0.5.1` | `0.6.1` | | [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) | `2.14.6` | `2.15.0` | | [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.53.1` | `1.54.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go) | `0.22.0` | `0.23.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) | `0.68.0` | `0.69.0` | | [go.opentelemetry.io/otel/log](https://github.com/open-telemetry/opentelemetry-go) | `0.22.0` | `1.47.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk/log](https://github.com/open-telemetry/opentelemetry-go) | `0.22.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.11.0` | `1.11.1` | | [golang.org/x/time](https://github.com/golang/time) | `0.15.0` | `0.16.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.83.2` | `1.84.0` | Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.69.1 to 1.70.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.69.1...service/s3/v1.70.0) Updates `github.com/aws/smithy-go` from 1.28.1 to 1.28.2 - [Release notes](https://github.com/aws/smithy-go/releases) - [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md) - [Commits](aws/smithy-go@v1.28.1...v1.28.2) Updates `github.com/dustin/go-humanize` from 1.0.1 to 1.1.0 - [Commits](dustin/go-humanize@v1.0.1...v1.1.0) Updates `github.com/klauspost/compress` from 1.19.2 to 1.20.1 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.19.2...v1.20.1) Updates `github.com/moby/moby/api` from 1.55.0 to 1.56.1 - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@api/v1.55.0...api/v1.56.1) Updates `github.com/moby/moby/client` from 0.5.1 to 0.6.1 - [Release notes](https://github.com/moby/moby/releases) - [Changelog](https://github.com/moby/moby/blob/v0.6.1/CHANGELOG.md) - [Commits](moby/moby@v0.5.1...v0.6.1) Updates `github.com/nats-io/nats-server/v2` from 2.14.6 to 2.15.0 - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md) - [Commits](nats-io/nats-server@v2.14.6...v2.15.0) Updates `github.com/nats-io/nats.go` from 1.53.1 to 1.54.0 - [Release notes](https://github.com/nats-io/nats.go/releases) - [Commits](nats-io/nats.go@v1.53.1...v1.54.0) Updates `go.opentelemetry.io/otel` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.22.0 to 0.23.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@log/v0.22.0...metric/v0.23.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.68.0 to 0.69.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@metric/x/v0.68.0...metric/x/v0.69.0) Updates `go.opentelemetry.io/otel/log` from 0.22.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@log/v0.22.0...v1.47.0) Updates `go.opentelemetry.io/otel/metric` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/sdk` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/sdk/log` from 0.22.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@log/v0.22.0...v1.47.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/trace` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/proto/otlp` from 1.11.0 to 1.11.1 - [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases) - [Commits](open-telemetry/opentelemetry-proto-go@v1.11.0...v1.11.1) Updates `golang.org/x/time` from 0.15.0 to 0.16.0 - [Commits](golang/time@v0.15.0...v0.16.0) Updates `google.golang.org/grpc` from 1.83.2 to 1.84.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.83.2...v1.84.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/aws/smithy-go dependency-version: 1.28.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/dustin/go-humanize dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/klauspost/compress dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/api dependency-version: 1.56.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/moby/moby/client dependency-version: 0.6.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/nats-io/nats.go dependency-version: 1.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/exporters/prometheus dependency-version: 0.69.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/log dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/sdk/log dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-major dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: go.opentelemetry.io/proto/otlp dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: golang.org/x/time dependency-version: 0.16.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/grpc dependency-version: 1.84.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-10-05T16:09:55Z

Important

Review skipped

Auto reviews are disabled on this repository. Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI
Review profile: ASSERTIVE
Plan: Advanced
Run ID: ad149573-a0a8-4566-8bb4-da36141546a5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

Autopilot · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands.}

dependabot · 2026-10-07T14:57:17Z

Looks like these dependencies are no longer being updated by Dependabot, so this is no longer needed.

) Repeated pushes to a PR reused no Go build objects. Measured from CI logs (2026-10-06 to 10-08), that only matters on a PR that changes `go.mod`/`go.sum`, so only that case is cached, and only for the two long-pole jobs. - **Measured, typical PR.** The integration suite's `app` part compiles in 5.8–8.5 s from `main`'s entry, against 2.3–3.2 s from a same-tree one. e2e's 4–7 s cover build is hidden behind its SDK build. A PR-scoped cache would buy about 4–5 s per push, which is inside the `app` part's run-to-run spread, so these PRs still save nothing. - **Measured, dependency-changing PR (#730, #742, #753).** Every push recompiles the dependency delta from `main`'s generation: 35–50 s in the integration suite and a 37–49 s cover build in e2e, against about 3 s and 4 s from the PR's own entry. That is about 30–45 s per push on the critical path. Of 129 PR runs since 2026-09-25, 34 came from 9 such PRs, and 25 of those were second or later pushes. - **Classifier.** `scripts/classify-paths.sh` also emits `go-deps`: any `go.mod`/`go.sum` in the change set, in any module, which are the files the cache keys hash. `classify-changes.sh` passes it through only for a cleanly classified pull request and sets it false everywhere it fails closed. The `changes` job exposes it as an output. - **setup-env.** A new `go-cache-pr-save` input, which the `app` part and e2e set only when `go-deps` is true. So a PR that changes no dependency never saves, even while `main` holds no entry for its key: just after a bump lands on `main`, after a failed `main` run, or for a newly opted-in job. With the input set, the job looks up the exact key first, from the PR's scope or `main`'s, so a PR whose dependency change `main` already has hits `main`'s entry and saves nothing. Only on a miss does it restore the newest entry of its flavor (the PR's own, then `main`'s) and save the exact key into the PR's scope. The key is per dependency state, so a PR saves once per dependency change. Merge-queue refs and branches stay restore-only, and nothing is added to `ci.yml` beyond the two inputs. - **Pruning.** `pr-cache-cleanup.yml` gains a `workflow_run` job that runs after every PR's CI run. It runs the new `scripts/ci/prune-pr-build-cache.sh` from the default branch with `actions: write` and deletes every PR-scoped `gobuild-v3` entry that `main` also holds or that a newer entry of the same flavor supersedes. It deduplicates the paged listing before grouping, since a row returned twice would otherwise delete the PR's newest entry, and a fixture test (`make test-prune-pr-build-cache`, a new `make verify` leaf) pins the selection and the failure handling. No PR code holds the write token. The job needs no PR number, so it covers fork PRs too. A PR holds at most about 0.48 GiB of build cache (double that for the minutes before a prune). - **Budget.** The README sizes this for four such PRs open at once, the most open at once in the last two weeks. The worst case at rest is about 11.7 GiB, about 1.7 GiB over the cap, and eviction by last access takes it from `main`'s superseded generation, which nothing reads (inferred). At two such PRs everything fits. `main`'s live entries stay safe up to six: 3.9 + N × (0.5 CodeQL + 0.48 build) ≤ 10 GiB, assuming the superseded generation is the size of the live one. The six build flavors together are 1.02 GiB on `main`; the issue's "about 1.3 GiB per suffix" was the total for all six of a PR's flavors. ## Test plan This branch's diff matches #783's (same 13 files, +450/−67), which CodeRabbit approved; the only line differences are the verify-leaf list and the `make verify` table row, which differ because the base did. Re-run here: the pre-commit `make verify` (which runs both fixture suites below) and a full `make ci`. Items marked "measured on #783" were not repeated; the CI items are observable once this PR targets `main`. - [x] `make lint-gha` (actionlint, which also checks the new input and the `go-deps` output) and `make lint-sh` clean; `make verify` green in the pre-commit hook, including the new leaf. - [x] `make test-classify-paths`: new `go-deps` cases (root and nested modules, look-alike names, mixed with docs, empty, large input); a mutant that matches only the root `go.mod`/`go.sum` fails it (mutant measured on #783). `classify-changes.sh` against a stub `gh`: `go-deps=true` only for a pull request whose file list holds a `go.sum`; false on push, merge group, dispatch and a failed listing. - [ ] (measured on #783) The setup-env step conditions, evaluated for push to `main`, `pull_request` with and without the input, `merge_group` and `workflow_dispatch`: exactly one restore path runs, and only a PR miss with the input set is save-capable. - [ ] (measured on #783) `prune-pr-build-cache.sh --dry-run` against the live cache list selects 6 entries (1058 MiB): copies of `main`'s keys under #731, #754 and #756. It keeps #753's own entries (one per flavor, not on `main`) and never touches `main` or merge-queue scopes. - [x] `make test-prune-pr-build-cache`: deletes copies of `main`'s key and version and keeps a same key with another version; deletes superseded entries and the older of a same-second pair; keeps `-integration-` apart from `-integration-app-`; ignores other families and `main`/merge-queue scopes; keeps a PR's only entry listed twice. Through a stub `gh`: a 404 reads as already gone, a 403 fails after the rest are attempted, and a failed listing fails. Mutants caught (measured on #783): no early dedup (the pre-fix script), key-only match, merged flavors, no prefix filter, `main` scope included, listing failure ignored, 404 treated as an error, 403 swallowed. - [ ] This PR's own run, which changes no dependency: `Detect changes` logs `go-deps=false`, and every Go job, the `app` part and e2e included, uses the plain restore step, with no `Cache saved` for `gobuild-v3` in any post step. - [ ] After merge, the first `PR cache cleanup` run triggered by a PR's CI (`Prune PR build caches`): passes and deletes the entries the dry run listed, if they are still there. - [ ] The first PR that changes `go.mod`/`go.sum` (the next Dependabot go-deps PR): `Detect changes` logs `go-deps=true`; the first push restores `main`'s generation through restore-keys and saves `gobuild-v3-Linux-go-integration-app-<its hash>` and `-e2e-cov-<its hash>` under `refs/pull/<n>/merge`; the second push exact-hits them, its integration compile is about 3 s and e2e reaches its containers about 20 s after `make` starts; the prune leaves one entry per flavor; the close cleanup deletes them. A fork PR's save is unverified: if GitHub refuses it, the job only logs a warning. - [x] `make ci` passes on this branch, after merging `main` (#793 and #788). ## Related Issues Closes #781. Refs #535 (two generations on `main` still leave thin headroom). Part of #740. Supersedes #783. Now based on `main`: its parent, the `-trimpath` PR #793, has merged. It does not itself use `-trimpath` or `make ci-remote`. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Wjv2nu841pxTMdUWSAPmDH --------- Co-authored-by: Claude Opus 5.5 <noreply@anthropic.com>

dependabot Bot requested a review from a team October 5, 2026 16:09

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 5, 2026

dependabot Bot requested a review from taitelee October 5, 2026 16:09

github-project-automation Bot added this to WaveHouse Task Board Oct 5, 2026

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 5, 2026

github-actions Bot added area/infra CI, build, deploy, Docker, release and removed go Pull requests that update go code labels Oct 5, 2026

EricAndrechek mentioned this pull request Oct 6, 2026

deps: otel/log 1.47.0 deprecates log/global — 9 SA1019 findings hold the go-deps group red #732

Closed

dependabot Bot closed this Oct 7, 2026

dependabot Bot deleted the dependabot/go_modules/go-deps-6ee575606f branch October 7, 2026 14:57

This was referenced Oct 8, 2026

ci: reuse Go build objects across pushes of a PR that changes deps #783

Closed

ci: reuse Go build objects across pushes of a PR that changes deps #794

Merged

Navigation Menu

Repository navigation

deps: bump the go-deps group across 1 directory with 22 updates - #730

deps: bump the go-deps group across 1 directory with 22 updates#730
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-deps-6ee575606f

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Oct 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release (2026-09-18)

General Highlights

Module Highlights

Release (2026-08-26)

General Highlights

Module Highlights

Release (2026-08-25.2)

General Highlights

Module Highlights

Release (2026-08-25)

General Highlights

Module Highlights

Release (2026-08-21)

General Highlights

Module Highlights

v1.20.1

What's Changed

New Contributors

v1.20.0

What's Changed

New Contributors

api/v1.56.1

1.56.1

Changelog

api/v1.56.0

1.56.0

Changelog

client/v0.6.1

0.6.1

Changelog

client/v0.6.0

0.6.0

Changelog

0.6.1 (2013-08-23)

0.6.0 (2013-08-22)

Release v2.15.0

Changelog

Go Version

Added

Changed

Release v1.54.0

Changelog

ADDED

FIXED

IMPROVED

Complete Changes

v1.47.0/v0.69.0/v0.23.0/v0.1.0

Added

Changed

Fixed

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

Added

Uh oh!

coderabbitai Bot commented Oct 5, 2026

Review skipped

Uh oh!

dependabot Bot commented on behalf of github Oct 7, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Oct 5, 2026 •

edited

Loading