Build(deps): bump the go-modules group with 10 updates by dependabot[bot] · Pull Request #44 · emirb/kernelbuild-buildkit

dependabot · 2026-11-01T15:55:37Z

Bumps the go-modules group with 10 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2	`1.47.0`	`1.47.4`
github.com/aws/aws-sdk-go-v2/config	`1.33.5`	`1.33.10`
github.com/aws/aws-sdk-go-v2/credentials	`1.20.5`	`1.20.10`
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`0.4.9`	`0.4.19`
github.com/aws/aws-sdk-go-v2/service/s3	`1.113.3`	`1.114.5`
github.com/klauspost/compress	`1.20.0`	`1.20.3`
github.com/moby/buildkit	`0.33.0`	`0.34.1`
go.opentelemetry.io/otel	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/sdk	`1.46.0`	`1.47.0`
go.opentelemetry.io/otel/trace	`1.46.0`	`1.47.0`

Updates github.com/aws/aws-sdk-go-v2 from 1.47.0 to 1.47.4

Commits

4aaad74 Release 2026-10-22
4c1f2f2 Regenerated Clients
edb4ad6 Update endpoints model
414c9e4 Update API model
5bba534 Bump Smithy Go to 1.28.6 (#3600)
0d2e6fa Release 2026-10-21
0d7e55d Regenerated Clients
d5bf455 Update endpoints model
e92707e Update API model
d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.33.5 to 1.33.10

Commits

4aaad74 Release 2026-10-22
4c1f2f2 Regenerated Clients
edb4ad6 Update endpoints model
414c9e4 Update API model
5bba534 Bump Smithy Go to 1.28.6 (#3600)
0d2e6fa Release 2026-10-21
0d7e55d Regenerated Clients
d5bf455 Update endpoints model
e92707e Update API model
d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.20.5 to 1.20.10

Commits

4b3b917 Release 2022-09-14
3ad6cfd Regenerated Clients
abfad89 Update SDK's smithy-go dependency to v1.13.3
b5262aa Update SDK with latest version of API models (#1844)
a13b7a4 codegen: Upgrade to smithy 1.25.0 (#1835)
296bfb3 Update PULL_REQUEST_TEMPLATE.md (#1843)
63566f0 Update BuildAuthToken to validate endpoint contains a port (#1837)
b011f04 Update credentials.go (#1841)
018b8c3 Amend typological errors in retryer package comments
5b135f8 Release 2022-09-02.2
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager from 0.4.9 to 0.4.19

Commits

4aaad74 Release 2026-10-22
4c1f2f2 Regenerated Clients
edb4ad6 Update endpoints model
414c9e4 Update API model
5bba534 Bump Smithy Go to 1.28.6 (#3600)
0d2e6fa Release 2026-10-21
0d7e55d Regenerated Clients
d5bf455 Update endpoints model
e92707e Update API model
d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.3 to 1.114.5

Commits

4aaad74 Release 2026-10-22
4c1f2f2 Regenerated Clients
edb4ad6 Update endpoints model
414c9e4 Update API model
5bba534 Bump Smithy Go to 1.28.6 (#3600)
0d2e6fa Release 2026-10-21
0d7e55d Regenerated Clients
d5bf455 Update endpoints model
e92707e Update API model
d980ed6 Enforce event stream header key value length limit instead of truncating (#3598)
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.20.0 to 1.20.3

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.20.3

What's Changed

zstd: two-pass decode with match-source prefetch on arm64 (largest win decoding SpeedBestCompression-class data) by @lizthegrey in klauspost/compress#1212

zstd: speed up better encoder hashing, primes in registers on arm64 by @lizthegrey in klauspost/compress#1230

zstd: reuse dictionary sequence tables in the encoder by @lizthegrey in klauspost/compress#1233

zstd: close most of the decode gap to libzstd on real corpora by @lizthegrey in klauspost/compress#1232

huff0: align the decode inner loops to 64 bytes by @lizthegrey in klauspost/compress#1236

zstd: keep default-encoder hash primes in registers on arm64 by @lizthegrey in klauspost/compress#1241

zstd: align the sequence decode and execute loops to 64 bytes by @lizthegrey in klauspost/compress#1240

zstd, huff0: cheaper per-block table setup by @lizthegrey in klauspost/compress#1234

zstd, s2, flate: smoke-test Silesia in CI, add real-corpus benchmarks by @lizthegrey in klauspost/compress#1237

zip: reject entries named "." in ReadDir to stop infinite fs.WalkDir by @Raghuvardhan-Reddy78 in klauspost/compress#1249

zstd: decode at full speed into exact-size destinations by @lizthegrey in klauspost/compress#1246

s2: Reject short index chunk in RemoveIndexHeaders by @Raghuvardhan-Reddy78 in klauspost/compress#1254

zstd, huff0: keep the encoder bit writers in registers by @lizthegrey in klauspost/compress#1245

huff0: reuse Scratch across inputs in the fuzzers by @lizthegrey in klauspost/compress#1257

New Contributors

@Raghuvardhan-Reddy78 made their first contribution in klauspost/compress#1235

@SulimanAbdulrazzaq made their first contribution in klauspost/compress#1255

Full Changelog: klauspost/compress@v1.20.1...v1.20.3

v1.20.2

zstd: Fix DecodeAll crash on specially crafted input. GHSA-fpmh-frq8-7rj8.

s2: fix LZ4 block conversion writing past dst by @klauspost in klauspost/compress#1244

dict: Stricter input validation by @klauspost in klauspost/compress#1250

zstd: reject snappy copy shorter than minimum match by @Raghuvardhan-Reddy78 in klauspost/compress#1235

Full Changelog: klauspost/compress@v1.20.1...v1.20.2

v1.20.1

What's Changed

zstd: apply reset options to reused frame decoders by @pellared in klauspost/compress#1226

flate: Report unexpected EOF for truncated Huffman extra bits by @rupayon123 in klauspost/compress#1229

flate: avoid FMA in EstimatedBits for portable rounding by @malt3 in klauspost/compress#1224

gzhttp: preserve caller request headers in Transport by @jakezwang in klauspost/compress#1225

gzhttp: only decompress a request when gzip is the outermost coding by @youdie006 in klauspost/compress#1223

zstd/huff0: Optimizations by @lizthegrey in klauspost/compress#1203 klauspost/compress#1205 klauspost/compress#1207 klauspost/compress#1204 klauspost/compress#1208 klauspost/compress#1211 klauspost/compress#1209 klauspost/compress#1210

flate: Speed improvements by @alex in klauspost/compress#1220 klauspost/compress#1218 klauspost/compress#1216 klauspost/compress#1215 klauspost/compress#1214 klauspost/compress#1217

New Contributors

@xingyaner made their first contribution in klauspost/compress#1222

@jakezwang made their first contribution in klauspost/compress#1225

@youdie006 made their first contribution in klauspost/compress#1223

@pellared made their first contribution in klauspost/compress#1226

@malt3 made their first contribution in klauspost/compress#1224

@rupayon123 made their first contribution in klauspost/compress#1229

Full Changelog: klauspost/compress@v1.20.0...v1.20.1

Commits

b946d41 Revert #1255 (#1261)
748550b Merge commit from fork
dd54d86 huff0: reuse Scratch across inputs in the fuzzers (#1257)
d189b4c gzhttp: do not compress 206 responses without Content-Range, read Accept-Enco...
6b91995 zstd, huff0: keep the encoder bit writers in registers (#1245)
402c3a5 s2: Reject short index chunk in RemoveIndexHeaders (#1254)
29f5f81 build(deps): bump the github-actions group with 4 updates (#1252)
9b8ba61 dict: Stricter input validation (#1250)
da4df9c zstd: decode at full speed into exact-size destinations (#1246)
1971eec reject zip entries named "." in ReadDir (#1249)
Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.33.0 to 0.34.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.34.1

buildkit 0.34.1

Welcome to the v0.34.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Security

This release has been built with updated Go runtime 1.26.10 to address CVE-2026-111943 by rejecting certificate chains that include eight revoked eMudhra intermediate certificates. Image pulls and pushes fail TLS certificate verification if a registry's certificate chain relies on one of the affected TLS intermediates. Affected registries need a replacement certificate chain that does not use these intermediates.

The blocked intermediates are:

Domain-validated TLS: EM DV TLS CA - G3B and EM DV TLS CA - G3C

Organization-validated TLS: EM OV TLS CA - G3B and EM OV TLS CA - G3C

Extended-validation TLS: EM EV TLS CA - G3B and EM EV TLS CA - G3C

Code signing: EM OV CS CA - G3B and EM OV CS CA - G3C

The G3B intermediates belong to eMudhra BV, and the G3C intermediates belong to eMudhra Inc. The keys for these intermediates were compromised.

Read more about the eMudhra Intermediate CA Compromise

There are no functional changes in BuildKit itself compared to the previous release.

Previous release can be found at v0.34.0

v0.34.0

buildkit 0.34.0

Welcome to the v0.34.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi

CrazyMax

... (truncated)

Commits

f5b59a1 Merge pull request #7257 from crazy-max/v0.34_pick_0.34.0
0505d9f flightcontrol: fix the progress cleanup race.
6fca433 Merge pull request #7250 from tonistiigi/update-polic-helpers-1006
53bd1f3 Merge pull request #7252 from thaJeztah/bump_cli
008e1d4 Merge pull request #7251 from tonistiigi/skip-git-nul-test
be50cb4 vendor: github.com/docker/cli v29.8.2
49e5553 test: skip Git source metadata test on Windows
392a4bb vendor: update policy-helpers to bd98f4747414
c445f55 Merge pull request #7247 from tonistiigi/exec-release-fix
65f04d4 Merge pull request #7249 from crazy-max/fix-bbolt-freelist-reopen
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.46.0 to 1.47.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

v1.47.0/v0.69.0/v0.23.0/v0.1.0

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8941)

Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#8123)

Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#8760)

Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#8906)

Changed

Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8993)

Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8938)

Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#8912)

Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#8739)

Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#8740)

Fixed

Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.

Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (#9054)

Fix a data race in NewPeriodicReader where r.inst was assigned after the background goroutine was launched in go.opentelemetry.io/otel/sdk/metric. (#9028)

Prevent precision loss for large int64 values in Sum, Histogram, and ExponentialHistogram aggregations in go.opentelemetry.io/otel/sdk/metric. (#8981)

Ensure grpc.DialOption values passed via WithDialOption take precedence over conflicting internally-computed defaults in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8805, #8834, #8836)

Treat overflowing OTEL_METRIC_EXPORT_INTERVAL and OTEL_METRIC_EXPORT_TIMEOUT values as invalid in go.opentelemetry.io/otel/sdk/metric. (#8800)

Prevent a panic in NewFixedSizeReservoir and FixedSizeReservoirProvider when given a negative size in go.opentelemetry.io/otel/sdk/metric/exemplar; negative sizes are now clamped to zero, consistent with a size of zero. (#8832)

Preserve exponential histogram ZeroThreshold during OTLP metric export in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8801)

Ensure metric helpers in go.opentelemetry.io/otel/semconv/v1.32.0, go.opentelemetry.io/otel/semconv/v1.33.0, and go.opentelemetry.io/otel/semconv/v1.34.0 record measurements only once when no attributes are provided. (#8849)

Treat empty OTEL_TRACES_SAMPLER and OTEL_TRACES_SAMPLER_ARG values as unset in go.opentelemetry.io/otel/sdk/trace. (#8873)

Normalize global OTEL_EXPORTER_OTLP_ENDPOINT path joining in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp so trailing-slash base URLs do not produce double-slash log export paths. (#8864)

Prevent a deadlock when formatting an error passed to RecordError calls back into the span in go.opentelemetry.io/otel/sdk/trace. (#8815)

Prevent SimpleSpanProcessor.Shutdown from panicking when constructed with a nil exporter in go.opentelemetry.io/otel/sdk/trace. (#8844)

Propagate invalid exponential histogram scale errors to Prometheus exporter self-observability metrics in go.opentelemetry.io/otel/exporters/prometheus. (#8839)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8941)

Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#8123)

Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#8760)

Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#8906)

Changed

Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8993)

Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8938)

Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#8912)

Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#8739)

Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#8740)

Fixed

Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.

Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (#9054)

Fix a data race in NewPeriodicReader where r.inst was assigned after the background goroutine was launched in go.opentelemetry.io/otel/sdk/metric. (#9028)

Prevent precision loss for large int64 values in Sum, Histogram, and ExponentialHistogram aggregations in go.opentelemetry.io/otel/sdk/metric. (#8981)

Ensure grpc.DialOption values passed via WithDialOption take precedence over conflicting internally-computed defaults in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8805, #8834, #8836)

Treat overflowing OTEL_METRIC_EXPORT_INTERVAL and OTEL_METRIC_EXPORT_TIMEOUT values as invalid in go.opentelemetry.io/otel/sdk/metric. (#8800)

Prevent a panic in NewFixedSizeReservoir and FixedSizeReservoirProvider when given a negative size in go.opentelemetry.io/otel/sdk/metric/exemplar; negative sizes are now clamped to zero, consistent with a size of zero. (#8832)

Preserve exponential histogram ZeroThreshold during OTLP metric export in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8801)

Ensure metric helpers in go.opentelemetry.io/otel/semconv/v1.32.0, go.opentelemetry.io/otel/semconv/v1.33.0, and go.opentelemetry.io/otel/semconv/v1.34.0 record measurements only once when no attributes are provided. (#8849)

Treat empty OTEL_TRACES_SAMPLER and OTEL_TRACES_SAMPLER_ARG values as unset in go.opentelemetry.io/otel/sdk/trace. (#8873)

Normalize global OTEL_EXPORTER_OTLP_ENDPOINT path joining in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp so trailing-slash base URLs do not produce double-slash log export paths. (#8864)

Prevent a deadlock when formatting an error passed to RecordError calls back into the span in go.opentelemetry.io/otel/sdk/trace. (#8815)

Prevent SimpleSpanProcessor.Shutdown from panicking when constructed with a nil exporter in go.opentelemetry.io/otel/sdk/trace. (#8844)

... (truncated)

Commits

66cfc95 Release 1.47.0/0.69.0/0.23.0/0.1.0 (#9024)
f09d1de Merge commit from fork
017b08c Merge commit from fork
d9d3ac2 Update ubuntu:26.04 Docker digest to 88a381d
b240391 Update module github.com/uudashr/iface to v1.5.3
55899e3 Fix zero attribute value length for malformed UTF-8 (#9054)
75b1fe3 Update github.com/charmbracelet/ultraviolet digest to 8786532
cce78ad Update github.com/golangci/rowserrcheck digest to f772fe6 (#9066)
cdc6ee4 Update module github.com/pjbgf/sha1cd to v0.7.0
ef11bfc chore: Replace deprecated gofumpt extra-rules with extra options (#9062)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.46.0 to 1.47.0

Release notes

Sourced from go.opentelemetry.io/otel/sdk's releases.

v1.47.0/v0.69.0/v0.23.0/v0.1.0

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8941)

Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#8123)

Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#8760)

Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#8906)

Changed

Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8993)

Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8938)

Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#8912)

Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#8739)

Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#8740)

Fixed

Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.

Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (#9054)

Fix a data race in NewPeriodicReader where r.inst was assigned after the background goroutine was launched in go.opentelemetry.io/otel/sdk/metric. (#9028)

Prevent precision loss for large int64 values in Sum, Histogram, and ExponentialHistogram aggregations in go.opentelemetry.io/otel/sdk/metric. (#8981)

Ensure grpc.DialOption values passed via WithDialOption take precedence over conflicting internally-computed defaults in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8805, #8834, #8836)

Treat overflowing OTEL_METRIC_EXPORT_INTERVAL and OTEL_METRIC_EXPORT_TIMEOUT values as invalid in go.opentelemetry.io/otel/sdk/metric. (#8800)

Prevent a panic in NewFixedSizeReservoir and FixedSizeReservoirProvider when given a negative size in go.opentelemetry.io/otel/sdk/metric/exemplar; negative sizes are now clamped to zero, consistent with a size of zero. (#8832)

Preserve exponential histogram ZeroThreshold during OTLP metric export in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8801)

Ensure metric helpers in go.opentelemetry.io/otel/semconv/v1.32.0, go.opentelemetry.io/otel/semconv/v1.33.0, and go.opentelemetry.io/otel/semconv/v1.34.0 record measurements only once when no attributes are provided. (#8849)

Treat empty OTEL_TRACES_SAMPLER and OTEL_TRACES_SAMPLER_ARG values as unset in go.opentelemetry.io/otel/sdk/trace. (#8873)

Normalize global OTEL_EXPORTER_OTLP_ENDPOINT path joining in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp so trailing-slash base URLs do not produce double-slash log export paths. (#8864)

Prevent a deadlock when formatting an error passed to RecordError calls back into the span in go.opentelemetry.io/otel/sdk/trace. (#8815)

Prevent SimpleSpanProcessor.Shutdown from panicking when constructed with a nil exporter in go.opentelemetry.io/otel/sdk/trace. (#8844)

Propagate invalid exponential histogram scale errors to Prometheus exporter self-observability metrics in go.opentelemetry.io/otel/exporters/prometheus. (#8839)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK. Our project stability guarantees now apply to the following modules:

go.opentelemetry.io/otel/log

go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added

Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#8205)

Add String method for Set type in go.opentelemetry.io/otel/attribute. (#8347)

Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#8960)

Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#8938)

Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#8938)

Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8941)

Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#8123)

Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#8760)

Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#8906)

Changed

Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#8993)

Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8938)

Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#8912)

Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#8739)

Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#8740)

Fixed

Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.

Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (

Bumps the go-modules group with 10 updates: | Package | From | To | | --- | --- | --- | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.47.0` | `1.47.4` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.33.5` | `1.33.10` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.20.5` | `1.20.10` | | [github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager](https://github.com/aws/aws-sdk-go-v2) | `0.4.9` | `0.4.19` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.113.3` | `1.114.5` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.20.0` | `1.20.3` | | [github.com/moby/buildkit](https://github.com/moby/buildkit) | `0.33.0` | `0.34.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.46.0` | `1.47.0` | Updates `github.com/aws/aws-sdk-go-v2` from 1.47.0 to 1.47.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.47.0...v1.47.4) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.33.5 to 1.33.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.33.5...config/v1.33.10) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.20.5 to 1.20.10 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/mq/v1.20.5...service/emr/v1.20.10) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager` from 0.4.9 to 0.4.19 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@feature/s3/transfermanager/v0.4.9...feature/s3/transfermanager/v0.4.19) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.113.3 to 1.114.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.113.3...service/s3/v1.114.5) Updates `github.com/klauspost/compress` from 1.20.0 to 1.20.3 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.20.0...v1.20.3) Updates `github.com/moby/buildkit` from 0.33.0 to 0.34.1 - [Release notes](https://github.com/moby/buildkit/releases) - [Commits](moby/buildkit@v0.33.0...v0.34.1) Updates `go.opentelemetry.io/otel` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/sdk` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) Updates `go.opentelemetry.io/otel/trace` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.46.0...v1.47.0) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.47.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.33.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-version: 1.20.10 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager dependency-version: 0.4.19 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-version: 1.114.5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-version: 1.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/buildkit dependency-version: 0.34.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.47.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2026-11-01T15:55:47Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: defaults
Review profile: CHILL
Plan: Advanced
Run ID: dc81d61e-23d9-4342-863c-951e886c3dff

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

dependabot Bot added the dependencies label Nov 1, 2026

Navigation Menu

Repository navigation

Build(deps): bump the go-modules group with 10 updates - #44

Build(deps): bump the go-modules group with 10 updates#44
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go-modules-41a3cd879c

dependabot Bot commented on behalf of github Nov 1, 2026

Uh oh!

coderabbitai Bot commented Nov 1, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Nov 1, 2026

v1.20.3

What's Changed

New Contributors

v1.20.2

v1.20.1

What's Changed

New Contributors

v0.34.1

Security

v0.34.0

Contributors

v1.47.0/v0.69.0/v0.23.0/v0.1.0

Added

Changed

Fixed

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

Added

Changed

Fixed

v1.47.0/v0.69.0/v0.23.0/v0.1.0

Added

Changed

Fixed

[1.47.0/0.69.0/0.23.0/0.1.0] - 2026-10-02

Added

Changed

Fixed

Uh oh!

coderabbitai Bot commented Nov 1, 2026

Review skipped

Uh oh!

This branch has not been deployed

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants