Bump the go_modules group across 1 directory with 4 updates#126
Bump the go_modules group across 1 directory with 4 updates#126dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go_modules group with 1 update in the / directory: [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp](https://github.com/open-telemetry/opentelemetry-go). Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.33.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.43.0) Updates `go.opentelemetry.io/otel/sdk` from 1.33.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.43.0) Updates `golang.org/x/crypto` from 0.37.0 to 0.49.0 - [Commits](golang/crypto@v0.37.0...v0.49.0) Updates `golang.org/x/net` from 0.34.0 to 0.52.0 - [Commits](golang/net@v0.34.0...v0.52.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.43.0 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.49.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.52.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f57bcad26e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| module crowdsec-manager | ||
|
|
||
| go 1.23.0 | ||
| go 1.25.0 |
There was a problem hiding this comment.
The production and dev Dockerfiles still use golang:1.23-alpine (Dockerfile:21, Dockerfile.dev:3), but this line now makes the module require Go 1.25. Go's GOTOOLCHAIN setting controls which toolchain is used (go help environment), so builds that pin the local toolchain or disallow automatic toolchain downloads will fail before go mod download/go build with a 1.23 builder. Please bump the Docker builder images (or otherwise make toolchain selection explicit) together with the go directive.
Useful? React with 👍 / 👎.
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: f57bcad26e
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| module crowdsec-manager | ||
|
|
||
| go 1.23.0 | ||
| go 1.25.0 |
There was a problem hiding this comment.
The production and dev Dockerfiles still use golang:1.23-alpine (Dockerfile:21, Dockerfile.dev:3), but this line now makes the module require Go 1.25. Go's GOTOOLCHAIN setting controls which toolchain is used (go help environment), so builds that pin the local toolchain or disallow automatic toolchain downloads will fail before go mod download/go build with a 1.23 builder. Please bump the Docker builder images (or otherwise make toolchain selection explicit) together with the go directive.
Useful? React with 👍 / 👎.
Bumps the go_modules group with 1 update in the / directory: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp.
Updates
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttpfrom 1.33.0 to 1.43.0Changelog
Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp's changelog.
... (truncated)
Commits
9276201Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)61b8c94chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)97a086echore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)5e363delimit response body size for OTLP HTTP exporters (#8108)35214b6Use an absolute path when calling bsd kenv (#8113)290024cfix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)e70658efix: support getBody in otelploghttp (#8096)4afe468fix(deps): update googleapis to 9d38bb4 (#8117)b9ca729chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)69472ecchore(deps): update fossas/fossa-action action to v1.9.0 (#8118)Updates
go.opentelemetry.io/otel/sdkfrom 1.33.0 to 1.43.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
9276201Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)61b8c94chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)97a086echore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)5e363delimit response body size for OTLP HTTP exporters (#8108)35214b6Use an absolute path when calling bsd kenv (#8113)290024cfix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)e70658efix: support getBody in otelploghttp (#8096)4afe468fix(deps): update googleapis to 9d38bb4 (#8117)b9ca729chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)69472ecchore(deps): update fossas/fossa-action action to v1.9.0 (#8118)Updates
golang.org/x/cryptofrom 0.37.0 to 0.49.0Commits
982eaa6go.mod: update golang.org/x dependencies159944fssh,acme: clean up tautological/impossible nil conditionsa408498acme: only require prompt if server has terms of servicecab0f71all: upgrade go directive to at least 1.25.0 [generated]2f26647x509roots/fallback: update bundlee08b067go.mod: update golang.org/x dependencies7d0074cscrypt: fix panic on parameters <= 0506e022go.mod: update golang.org/x dependencies7dacc38chacha20poly1305: error out in fips140=only mode19acf81go.mod: update golang.org/x dependenciesUpdates
golang.org/x/netfrom 0.34.0 to 0.52.0Commits
316e20cgo.mod: update golang.org/x dependencies9767a42internal/http3: add support for plugging into net/http4a81284http2: update docs to disrecommend this packagedec6603dns/dnsmessage: reject too large of names early during unpack8afa12fhttp2: deprecate write schedulers38019a2http2: add missing copyright header to export_test.go039b87finternal/http3: return error when Write is used after status 304 is set6267c6cinternal/http3: add HTTP 103 Early Hints support to ClientConn591bdf3internal/http3: add HTTP 103 Early Hints support to Server1faa6d8internal/http3: avoid potential race when aborting RoundTripDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.