Update go updates

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/Azure/go-ansiterm	indirect	digest	d185dfc -> 306776e
github.com/docker/docker	indirect	patch	v25.0.2+incompatible -> v25.0.3+incompatible
github.com/emicklei/go-restful/v3	indirect	patch	v3.11.2 -> v3.11.3
github.com/fxamacker/cbor/v2	indirect	minor	v2.5.0 -> v2.6.0
github.com/opencontainers/image-spec	indirect	minor	v1.0.2 -> v1.1.0
go.arcalot.io/dgraph	require	minor	v1.2.0 -> v1.3.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	v0.47.0 -> v0.49.0
go.opentelemetry.io/otel	indirect	minor	v1.22.0 -> v1.24.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	v1.22.0 -> v1.24.0
go.opentelemetry.io/otel/metric	indirect	minor	v1.22.0 -> v1.24.0
go.opentelemetry.io/otel/trace	indirect	minor	v1.22.0 -> v1.24.0
go.opentelemetry.io/proto/otlp	indirect	minor	v1.0.0 -> v1.1.0
golang.org/x/mod	indirect	minor	v0.14.0 -> v0.15.0
golang.org/x/net	indirect	minor	v0.20.0 -> v0.21.0
golang.org/x/oauth2	indirect	minor	v0.16.0 -> v0.17.0
golang.org/x/sys	indirect	minor	v0.16.0 -> v0.17.0
golang.org/x/term	indirect	minor	v0.16.0 -> v0.17.0
golang.org/x/tools	indirect	minor	v0.17.0 -> v0.18.0
google.golang.org/appengine	indirect	major	v1.6.8 -> v2.0.5
google.golang.org/grpc	indirect	minor	v1.60.1 -> v1.62.0
gopkg.in/yaml.v2	indirect	major	v2.4.0 -> v3.0.1
k8s.io/api	indirect	patch	v0.29.1 -> v0.29.2
k8s.io/apimachinery	indirect	patch	v0.29.1 -> v0.29.2
k8s.io/client-go	indirect	patch	v0.29.1 -> v0.29.2
k8s.io/kube-openapi	indirect	digest	2919ad4 -> 70dd376

---

Release Notes

docker/docker (github.com/docker/docker)

v25.0.3+incompatible

Compare Source

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.11.3

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.6.0

Compare Source

This release adds important new features, optimizations, bug fixes, and 3 new contributors. Fuzz tests passed 5+ billion execs for CBOR encoding and decoding functions. Minimum officially supported Go is bumped to Go 1.17.

⭐ Features and Optimizations

• Add FieldNameMatching decode option. by @​benluddy in https://github.com/fxamacker/cbor/pull/433
• Add option to decode CBOR bignum to interface{} as *big.Int by @​fxamacker in https://github.com/fxamacker/cbor/pull/456
• Add 2 more options for decoding CBOR integers to interface{} by @​fxamacker in https://github.com/fxamacker/cbor/pull/457
• Add encoding option to specify how omitempty fields are encoded by @​dinhxuanvu in https://github.com/fxamacker/cbor/pull/453
• New options for encoding Go strings to and from CBOR byte strings by @​benluddy in https://github.com/fxamacker/cbor/pull/465
• Add options to support byte string map keys as struct field names by @​benluddy in https://github.com/fxamacker/cbor/pull/472
• Add option to specify how to decode unrecognized CBOR tag to any by @​ssuriyan7 in https://github.com/fxamacker/cbor/pull/475

🚀 Notable Optimizations

• Improve memory allocs 🗜️ and speed 🚀 of encoding maps by using Go 1.18-1.20 features by @​dinhxuanvu in https://github.com/fxamacker/cbor/pull/468

  📊 Benchmarks

  benchstat results provided by @​dinhxuanvu

  

  NOTE: Go 1.17 is the minimum version supported by v2.6.0. Go 1.20+ will use optimizations introduced by PR 468.

🛠 Improvements

• Refactor valid() to reject negative values for integer modes by @​fxamacker in https://github.com/fxamacker/cbor/pull/434
• Refactor tests to improve consistency and readability by @​fxamacker in https://github.com/fxamacker/cbor/pull/458
• Add another test and fix lint errors by @​fxamacker in https://github.com/fxamacker/cbor/pull/466
• Refactor map encoding to prep for Go version bump by @​fxamacker in https://github.com/fxamacker/cbor/pull/473
• Add UnrecognizedTagToAny option to TestDecOptions by @​fxamacker in https://github.com/fxamacker/cbor/pull/484
• Update go.mod to require go 1.17 by @​fxamacker in https://github.com/fxamacker/cbor/pull/489

🐞 Bug Fixes

• Fix panic when decoding CBOR nil to *cbor.SimpleValue by @​fxamacker in https://github.com/fxamacker/cbor/pull/461
• Fix cbor.SimpleValue encoding and decoding by @​fxamacker in https://github.com/fxamacker/cbor/pull/464
• Fix EncOption/DecOption unset fields on mode regurgitation. by @​benluddy in https://github.com/fxamacker/cbor/pull/480

📖 Docs and CI

• Update README for error handling of CBOR extraneous data by @​fxamacker in https://github.com/fxamacker/cbor/pull/426
• Update README for changes in cbor v2.5.0 by @​fxamacker in https://github.com/fxamacker/cbor/pull/427
• Update CI and README by @​fxamacker in https://github.com/fxamacker/cbor/pull/430
• Update README to add FIDO Alliance, Let's Encrypt, Matrix.org by @​fxamacker in https://github.com/fxamacker/cbor/pull/431
• Pin actions/checkout and actions/setup-go by @​x448 in https://github.com/fxamacker/cbor/pull/436
• Enable more linters by @​fxamacker in https://github.com/fxamacker/cbor/pull/437
• Bump github/codeql-action from 2.22.5 to 2.22.8 by @​dependabot in https://github.com/fxamacker/cbor/pull/443
• Document behavior of Unmarshal of unrecognized tags into interface{} by @​benluddy in https://github.com/fxamacker/cbor/pull/448
• Bump github/codeql-action from 2.22.8 to 3.22.12 by @​dependabot in https://github.com/fxamacker/cbor/pull/455
• Bump github/codeql-action from 3.22.12 to 3.23.0 by @​dependabot in https://github.com/fxamacker/cbor/pull/469

New Contributors

• @​benluddy made their first contribution in https://github.com/fxamacker/cbor/pull/433
• @​dinhxuanvu made their first contribution in https://github.com/fxamacker/cbor/pull/453
• @​ssuriyan7 made their first contribution in https://github.com/fxamacker/cbor/pull/475

Full Changelog: fxamacker/cbor@v2.5.0...v2.6.0

opencontainers/image-spec (github.com/opencontainers/image-spec)

v1.1.0

Compare Source

Vote Passed [+7-0] - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag
Release PR : https://github.com/opencontainers/image-spec/pull/1161
Full Changelog: opencontainers/image-spec@v1.0.2...v1.1.0

Associated Distribution Specification Release - https://github.com/opencontainers/distribution-spec/releases/tag/v1.1.0

arcalot/go-dgraph (go.arcalot.io/dgraph)

v1.3.0

Compare Source

What's Changed

• Pin dependencies by @​platform-engineering-bot in https://github.com/arcalot/go-dgraph/pull/6
• Update module go.arcalot.io/assert to v1.8.0 by @​platform-engineering-bot in https://github.com/arcalot/go-dgraph/pull/11
• restructure mermaid markdown output by @​dustinblack in https://github.com/arcalot/go-dgraph/pull/12

Full Changelog: arcalot/go-dgraph@v1.2.0...v1.3.0

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.24.0: /v0.46.0/v0.0.1-alpha

Compare Source

This release is the last to support Go 1.20. The next release will require at least Go 1.21.

Added

• Support Go 1.22. (#​4890)
• Add exemplar support to go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#​4900)
• Add exemplar support to go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#​4900)
• The go.opentelemetry.io/otel/log module is added. This module includes OpenTelemetry Go's implementation of the Logs Bridge API. This module is in an alpha state, it is subject to breaking changes. See our versioning policy for more info. (#​4961)

Fixed

• Fix registration of multiple callbacks when using the global meter provider from go.opentelemetry.io/otel. (#​4945)
• Fix negative buckets in output of exponential histograms. (#​4956)

New Contributors

• @​kevinburkesegment made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4920
• @​yizeng made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4947
• @​ntriamme made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4945
• @​ericayin made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4956

Full Changelog: open-telemetry/opentelemetry-go@v1.23.1...v1.24.0

v1.23.1: /v0.45.2

Compare Source

Fixed

• Register all callbacks passed during observable instrument creation instead of just the last one multiple times in go.opentelemetry.io/otel/sdk/metric. (#​4888)

v1.23.0: /v0.45.1

Compare Source

This release contains the first stable, v1, release of the following modules:

• go.opentelemetry.io/otel/bridge/opencensus
• go.opentelemetry.io/otel/bridge/opencensus/test
• go.opentelemetry.io/otel/example/opencensus
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
• go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
• go.opentelemetry.io/otel/exporters/stdout/stdoutmetric

See our versioning policy for more information about these stability guarantees.

Added

• Add WithEndpointURL option to the exporters/otlp/otlpmetric/otlpmetricgrpc, exporters/otlp/otlpmetric/otlpmetrichttp, exporters/otlp/otlptrace/otlptracegrpc and exporters/otlp/otlptrace/otlptracehttp packages. (#​4808)
• Experimental exemplar exporting is added to the metric SDK. See metric documentation for more information about this feature and how to enable it. (#​4871)
• ErrSchemaURLConflict is added to go.opentelemetry.io/otel/sdk/resource. This error is returned when a merge of two Resources with different (non-empty) schema URL is attempted. (#​4876)

Changed

• The Merge and New functions in go.opentelemetry.io/otel/sdk/resource now returns a partial result if there is a schema URL merge conflict. Instead of returning nil when two Resources with different (non-empty) schema URLs are merged the merged Resource, along with the new ErrSchemaURLConflict error, is returned. It is up to the user to decide if they want to use the returned Resource or not. It may have desired attributes overwritten or include stale semantic conventions. (#​4876)

Fixed

• Fix ContainerID resource detection on systemd when cgroup path has a colon. (#​4449)
• Fix go.opentelemetry.io/otel/sdk/metric to cache instruments to avoid leaking memory when the same instrument is created multiple times. (#​4820)
• Fix missing Mix and Max values for go.opentelemetry.io/otel/exporters/stdout/stdoutmetric by introducing MarshalText and MarshalJSON for the Extrema type in go.opentelemetry.io/sdk/metric/metricdata. (#​4827)

New Contributors

• @​Fricounet made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4449
• @​StLeoX made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4855
• @​m-posluszny made their first contribution in https://github.com/open-telemetry/opentelemetry-go/pull/4827

Full Changelog: open-telemetry/opentelemetry-go@v1.22.0...v1.23.0

open-telemetry/opentelemetry-proto-go (go.opentelemetry.io/proto/otlp)

v1.1.0

Compare Source

Release of the v1.1.0 version of the OTLP.

Full Changelog: open-telemetry/opentelemetry-proto-go@v1.0.0...v1.1.0

golang/appengine (google.golang.org/appengine)

v2.0.5

Compare Source

What's Changed

• [Automation] Update go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/319
• Memcache item timestamps by @​Deleplace in https://github.com/golang/appengine/pull/323
• Replace deprecated command with environment file by @​jongwooo in https://github.com/golang/appengine/pull/318

New Contributors

• @​jongwooo made their first contribution in https://github.com/golang/appengine/pull/318

Full Changelog: golang/appengine@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

• fix: regenerate all protos under new namespace by @​codyoss in https://github.com/golang/appengine/pull/314
• Upgrade python version being used by the ci workflow. by @​jinglundong in https://github.com/golang/appengine/pull/315
• Extend the deadline of a test context to fix a timeout issue. by @​jinglundong in https://github.com/golang/appengine/pull/316

New Contributors

• @​codyoss made their first contribution in https://github.com/golang/appengine/pull/314
• @​jinglundong made their first contribution in https://github.com/golang/appengine/pull/315

Full Changelog: golang/appengine@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

• re-apply PR #​232 to v2 by @​zevdg in https://github.com/golang/appengine/pull/289
• re-apply PR #​235 to v2 by @​zevdg in https://github.com/golang/appengine/pull/290
• Add Go 1.18 and Go 1.19 to tested Go versions by @​jihuin in https://github.com/golang/appengine/pull/293
• remove golang.org/x/net dependency by @​thaJeztah in https://github.com/golang/appengine/pull/295
• Add Go 1.20 to tested Go versions by @​jihuin in https://github.com/golang/appengine/pull/303
• v2/README.md: fix typos by @​cuishuang in https://github.com/golang/appengine/pull/276
• README.md: fix typo by @​cuishuang in https://github.com/golang/appengine/pull/288
• all: fix some comments by @​cuishuang in https://github.com/golang/appengine/pull/296
• Install Python2 in base image for DevAppServer tests and change test matrix for 1.11 and 1.20.x by @​ludoch in https://github.com/golang/appengine/pull/304
• just a small refactor of api_test by @​zevdg in https://github.com/golang/appengine/pull/291
• Add v2/search by @​Deleplace in https://github.com/golang/appengine/pull/297
• build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 in /v2 by @​dependabot in https://github.com/golang/appengine/pull/299
• Run go get google.golang.org/appengine/v2/search by @​ludoch in https://github.com/golang/appengine/pull/305
• build(deps): bump golang.org/x/text from 0.3.6 to 0.3.8 by @​dependabot in https://github.com/golang/appengine/pull/300
• all: using the more elegant way to deal milliseconds and nanoseconds by @​cuishuang in https://github.com/golang/appengine/pull/292
• Revert "all: using the more elegant way to deal milliseconds and nanoseconds" by @​ludoch in https://github.com/golang/appengine/pull/306
• Add a ci-update-workflow GitHub Actions to update the go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/307
• Fix the ci-update-workflow GitHub Actions by @​chizhg in https://github.com/golang/appengine/pull/308
• Update go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/309

New Contributors

• @​jihuin made their first contribution in https://github.com/golang/appengine/pull/293
• @​thaJeztah made their first contribution in https://github.com/golang/appengine/pull/295
• @​cuishuang made their first contribution in https://github.com/golang/appengine/pull/276
• @​ludoch made their first contribution in https://github.com/golang/appengine/pull/304
• @​Deleplace made their first contribution in https://github.com/golang/appengine/pull/297
• @​dependabot made their first contribution in https://github.com/golang/appengine/pull/299
• @​chizhg made their first contribution in https://github.com/golang/appengine/pull/307

Full Changelog: golang/appengine@v2.0.2...v2.0.3

v2.0.2: Release App Engine golang SDK v2.0.2

Compare Source

What's Changed

• Add Go 1.16 to tested Go versions by @​lukasberger in https://github.com/golang/appengine/pull/255
• switch default logStream from stdout to stderr by @​zevdg in https://github.com/golang/appengine/pull/272
• Fix header name to associate log entry & trace by @​pokutuna in https://github.com/golang/appengine/pull/263
• refactor: pin setup-gcloud gh action to v0 by @​KaylaNguyen in https://github.com/golang/appengine/pull/274
• Fix golang/appengine CI by @​bsiegert in https://github.com/golang/appengine/pull/280
• run gofmt with go1.19 release candidate by @​zevdg in https://github.com/golang/appengine/pull/282
• respect GAE_ENV=localdev by @​zevdg in https://github.com/golang/appengine/pull/283
• prevent github from cancelling all test jobs when one fails by @​zevdg in https://github.com/golang/appengine/pull/285
• allow API calls without GAE context by @​zevdg in https://github.com/golang/appengine/pull/284
• Security Vulnerability Upgrading golang.org/x/text by @​ybocalandro in https://github.com/golang/appengine/pull/287

New Contributors

• @​pokutuna made their first contribution in https://github.com/golang/appengine/pull/263
• @​bsiegert made their first contribution in https://github.com/golang/appengine/pull/280
• @​ybocalandro made their first contribution in https://github.com/golang/appengine/pull/287

Full Changelog: golang/appengine@v2.0.1...v2.0.2

v2.0.1: Version 2.0.1

Compare Source

• delay: let user use unique function keys using delay.MustRegister
• aefix: fix v2/aefix to work with appengine/v2
• Clean up interfaces for legacy APIs that will be supported for Go 1.12+

grpc/grpc-go (google.golang.org/grpc)

v1.62.0: Release 1.62.0

Compare Source

New Features

• grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key (#​6986)

Behavior Changes

• grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() (#​6923)

Bug Fixes

• server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#​6977)
  • Special Thanks: @​s-matyukevich for discovering the root cause

Performance Improvements

• *: Allow building without x/net/trace by using grpcnotrace to enable dead code elimination (#​6954)
  • Special Thanks: @​hugelgupf
• rand: improve performance and simplify implementation of grpcrand by adopting math/rand's top-level functions for go version 1.21.0 and newer. (#​6925)
  • Special Thanks: @​kmirzavaziri

Dependencies

• *: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. (#​6919)
  • Special Thanks: @​Clement-Jean

[!NOTE]
The above change in proto library usage introduces a minor behavior change within those libraries. The old github.com/golang/protobuf library would error if given a nil message to Marshal, while the new google.golang.org/protobuf library will successfully output zero bytes in this case. This means server method handlers that did return nil, nil will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending nil messages used to fail without sending the RPC, and now they will send an empty message.

v1.61.1: Release 1.61.1

Compare Source

Bug Fixes

• server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#​6977)
  • Special Thanks: @​s-matyukevich for discovering the root cause

v1.61.0: Release 1.61.0

Compare Source

New Features

• resolver: provide method, AuthorityOverrider, to allow resolver.Builders to override the default authority for a ClientConn. (EXPERIMENTAL) (#​6752)
  • Special Thanks: @​Aditya-Sood
• xds: add support for mTLS Credentials in xDS bootstrap (gRFC A65) (#​6757)
  • Special Thanks: @​atollena
• server: add grpc.WaitForHandlers ServerOption to cause Server.Stop to block until method handlers return. (EXPERIMENTAL) (#​6922)

Performance Improvements

• grpc: skip compression of empty messages as an optimization (#​6842)
  • Special Thanks: @​jroper
• orca: use atomic pointer to improve performance in server metrics recorder (#​6799)
  • Special Thanks: @​danielzhaotongliu

Bug Fixes

• client: correctly enable TCP keepalives with OS defaults on windows (#​6863)
  • Special Thanks: @​mmatczuk
• server: change some stream operations to return UNAVAILABLE instead of UNKNOWN when underlying connection is broken (#​6891)
  • Special Thanks: @​mustafasen81
• server: fix GracefulStop to block until all method handlers return (v1.60 regression). (#​6922)
• server: fix two bugs that could lead to panics at shutdown when using NumStreamWorkers (EXPERIMENTAL). (#​6856)
• reflection: do not send invalid descriptors to clients for files that cannot be fully resolved (#​6771)
  • Special Thanks: @​jhump
• xds: don't fail channel/server startup when xds creds is specified, but bootstrap is missing certificate providers (#​6848)
• xds: Atomically read and write xDS security configuration client side (#​6796)
• xds/server: fix RDS handling for non-inline route configs (#​6915)

go-yaml/yaml (gopkg.in/yaml.v2)

v3.0.1

Compare Source

v3.0.0

Compare Source

kubernetes/api (k8s.io/api)

v0.29.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.29.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.29.2

Compare Source

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[webbnh]

This should be combined with #155 (and possibly #152).