Bump the go-production-dependencies group across 2 directories with 21 updates

[dependabot]

Bumps the go-production-dependencies group with 8 updates in the /src/checkout directory:

Package	From	To
github.com/IBM/sarama	1.46.3	1.47.0
github.com/open-feature/go-sdk	1.17.1	1.17.2
github.com/open-feature/go-sdk-contrib/hooks/open-telemetry	0.3.6	0.3.7
github.com/open-feature/go-sdk-contrib/providers/flagd	0.3.2	0.5.0
go.opentelemetry.io/contrib/bridges/otelslog	0.15.0	0.18.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.65.0	0.68.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	0.65.0	0.68.0
go.opentelemetry.io/contrib/instrumentation/runtime	0.65.0	0.68.0

Bumps the go-production-dependencies group with 8 updates in the /src/product-catalog directory:

Package	From	To
github.com/open-feature/go-sdk	1.17.1	1.17.2
github.com/open-feature/go-sdk-contrib/hooks/open-telemetry	0.3.6	0.3.7
github.com/open-feature/go-sdk-contrib/providers/flagd	0.3.2	0.5.0
go.opentelemetry.io/contrib/bridges/otelslog	0.15.0	0.18.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.65.0	0.68.0
go.opentelemetry.io/contrib/instrumentation/runtime	0.65.0	0.68.0
github.com/XSAM/otelsql	0.41.0	0.42.0
github.com/lib/pq	1.11.1	1.12.3

Updates github.com/IBM/sarama from 1.46.3 to 1.47.0

Release notes

Sourced from github.com/IBM/sarama's releases.

Version 1.47.0 (2026-02-27)

What's Changed

🎉 New Features / Improvements

• perf(admin): modernize DescribeCluster RPC handling by @​DCjanus in IBM/sarama#3390
• test: expand Java interop tests to cover all compression codecs by @​dnwe in IBM/sarama#3423

🐛 Fixes

• fix(client): add nilguards to updateBroker by @​dnwe in IBM/sarama#3393
• fix(broker): auto-close broken connections by @​DCjanus in IBM/sarama#3412
• fix: set version from IBM/sarama, not main app by @​adamdecaf in IBM/sarama#3415

🔧 Maintenance

• chore: finish up the move to atomic types by @​puellanivis in IBM/sarama#3399
• chore: tear down zk in functional tests by @​edoardocomar in IBM/sarama#3420
• chore: migrate from eapache/go-xerial-snappy to klauspost/compress/sn… by @​edoardocomar in IBM/sarama#3421
• fix(test): resolve FVT issues in Kafka v2.x interop tests by @​edoardocomar in IBM/sarama#3424
• feat: add kafka 4.1.1 constants and use in FVT by @​dnwe in IBM/sarama#3437
• chore: add Kafka 4.0.1 and replace 4.0.0 in FVT by @​edoardocomar in IBM/sarama#3439
• ci(lint): unblock Go 1.26 lint and handle gosec noise by @​DCjanus in IBM/sarama#3454

📦 Dependency updates

• chore(deps): update module golang.org/x/crypto to v0.45.0 [security] → v0.48.0 by @​renovate[bot] in #3383, #3425
• chore(deps): bump golang.org/x/crypto from 0.42.0 to 0.45.0 across /examples (consumergroup, exactly_once, sasl_scram_client, http_server, txn_producer, interceptors) by @​dependabot[bot] in #3382, #3381, #3380, #3379, #3378, #3377
• fix(deps): update module golang.org/x/sync to v0.18.0 by @​renovate[bot] in #3385
• fix(deps): update module golang.org/x/net to v0.49.0 → v0.51.0 by @​renovate[bot] and @​dependabot[bot] in #3426, #3427, #3453
• chore(deps): update golangci/golangci-lint-action action to v9 → v9.2.0 by @​renovate[bot] in #3370, #3400
• chore(deps): update dependency golangci/golangci-lint to v2.6.2 → v2.8.0 by @​renovate[bot] in #3366, #3401
• chore(deps): update docker/bake-action action to v6.10.0 by @​renovate[bot] in #3392
• chore(deps): update docker/setup-buildx-action action to v3.12.0 by @​renovate[bot] in #3416
• chore(deps): bump github.com/klauspost/compress from 1.18.1 to 1.18.4 by @​dependabot[bot] in #3397, #3430, #3442
• chore(deps): bump github.com/pierrec/lz4/v4 from 4.1.22 to 4.1.25 by @​dependabot[bot] in #3411, #3432
• chore(deps): bump the golang-x group across 1 directory with 2 updates by @​dependabot[bot] in #3405
• chore(deps): bump github.com/xdg-go/scram from 1.1.2 to 1.2.0 in /examples/sasl_scram_client by @​dependabot[bot] in #3394
• chore(deps): update dependency dominikh/go-tools to v2026 by @​renovate[bot] in #3446

New Contributors

• @​DCjanus made their first contribution in IBM/sarama#3390
• @​edoardocomar made their first contribution in IBM/sarama#3420
• @​adamdecaf made their first contribution in IBM/sarama#3415

Full Changelog: IBM/sarama@v1.46.3...v1.47.0

Commits

• c6a7ea0 chore(deps): bump github.com/klauspost/compress from 1.18.3 to 1.18.4 (#3442)
• 66eabe8 chore(deps): update dependency dominikh/go-tools to v2026 (#3446)
• e46c213 ci(gosec): suppress G117 and G704 false positives
• 7f0e26c ci(workflows): bump golangci-lint to v2.10.1
• 7a33045 chore(ci): Update registry.access.redhat.com/ubi9/ubi-minimal:9.7 Docker dige...
• 34acfaa chore(ci): bump the actions group with 2 updates (#3450)
• 4df4d82 chore(ci): bump github/codeql-action from 4.31.10 to 4.32.4 (#3451)
• d4862ce chore(deps): bump golang.org/x/net from 0.50.0 to 0.51.0 in the golang-x grou...
• c1bf7ec chore: add ai-assistance guidelines to CONTRIBUTING.md (#3452)
• 0a3b6e3 chore(ci): Update registry.access.redhat.com/ubi9/ubi-minimal:9.7 Docker dige...
• Additional commits viewable in compare view

Updates github.com/open-feature/go-sdk from 1.17.1 to 1.17.2

Release notes

Sourced from github.com/open-feature/go-sdk's releases.

v1.17.2

1.17.2 (2026-04-03)

🐛 Bug Fixes

• broken link in hooks.go comment (#476) (efd720a)
• consistent SetProviderAndWait init flow (#474) (e6452ea)
• memprovider: use int64 type in IntEvaluation to match API (#464) (6085165)
• multi: forward ConfigurationChanged events from child providers (#480) (20c5cb9)
• testing: make test provider context-aware for goroutine (#470) (b4e2cdf)

🧹 Chore

• add govulncheck (#462) (0a2fb41)
• bump go to 1.25 (3bfdb3e)
• bump go to 1.25.0 (#473) (3bfdb3e)
• deps: update module golang.org/x/sync to v0.20.0 (#484) (0dbfca4)
• deps: update module golang.org/x/text to v0.33.0 (#469) (f6d6d76)
• deps: update module golang.org/x/text to v0.34.0 (#478) (6567d33)
• deps: update module golang.org/x/text to v0.35.0 (#485) (6980c98)
• deps: update test-harness digest to ecb3d09 (#477) (0a2825b)

📚 Documentation

• BooleanValue requires a context (#466) (dfea225)
• correct NewTestProvider example (#467) (5b45d60)

Changelog

Sourced from github.com/open-feature/go-sdk's changelog.

1.17.2 (2026-04-03)

🐛 Bug Fixes

• broken link in hooks.go comment (#476) (efd720a)
• consistent SetProviderAndWait init flow (#474) (e6452ea)
• memprovider: use int64 type in IntEvaluation to match API (#464) (6085165)
• multi: forward ConfigurationChanged events from child providers (#480) (20c5cb9)
• testing: make test provider context-aware for goroutine (#470) (b4e2cdf)

🧹 Chore

• add govulncheck (#462) (0a2fb41)
• bump go to 1.25 (3bfdb3e)
• bump go to 1.25.0 (#473) (3bfdb3e)
• deps: update module golang.org/x/sync to v0.20.0 (#484) (0dbfca4)
• deps: update module golang.org/x/text to v0.33.0 (#469) (f6d6d76)
• deps: update module golang.org/x/text to v0.34.0 (#478) (6567d33)
• deps: update module golang.org/x/text to v0.35.0 (#485) (6980c98)
• deps: update test-harness digest to ecb3d09 (#477) (0a2825b)

📚 Documentation

• BooleanValue requires a context (#466) (dfea225)
• correct NewTestProvider example (#467) (5b45d60)

Commits

• 4ae2f18 chore(main): release 1.17.2 (#463)
• 6980c98 chore(deps): update module golang.org/x/text to v0.35.0 (#485)
• 0dbfca4 chore(deps): update module golang.org/x/sync to v0.20.0 (#484)
• b4e2cdf fix(testing): make test provider context-aware for goroutine (#470)
• e6452ea fix: consistent SetProviderAndWait init flow (#474)
• 20c5cb9 fix(multi): forward ConfigurationChanged events from child providers (#480)
• 3bfdb3e chore: bump go to 1.25.0 (#473)
• 0a2825b chore(deps): update test-harness digest to ecb3d09 (#477)
• 6567d33 chore(deps): update module golang.org/x/text to v0.34.0 (#478)
• efd720a fix: broken link in hooks.go comment (#476)
• Additional commits viewable in compare view

Updates github.com/open-feature/go-sdk-contrib/hooks/open-telemetry from 0.3.6 to 0.3.7

Release notes

Sourced from github.com/open-feature/go-sdk-contrib/hooks/open-telemetry's releases.

hooks/open-telemetry: v0.3.7

0.3.7 (2026-03-05)

🐛 Bug Fixes

• security: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#835) (55ccbce)

Commits

• db1dc34 chore(main): release hooks/open-telemetry 0.3.7 (#839)
• 55ccbce fix(security): update module go.opentelemetry.io/otel/sdk to v1.40.0 [securit...
• 34e8a71 build: update to go 1.25 (#834)
• c7e5b60 docs: update contributing align with go-sdk (#820)
• 61cc672 Update go-feature-flag dependency to v1.49.0
• 9de9c2c chore: add govulncheck to ci (#827)
• dfc4d83 chore(main): release providers/flagd 0.3.2 (#808)
• 00ef2eb chore: fixup default max backoff (unreleased) (#824)
• 24c1bba fix: implement deadline to fix indefinite init (#823)
• 6cf3902 feat(flagd): Configure in-process provider using FLAGD_SYNC_PORT environment ...
• Additional commits viewable in compare view

Updates github.com/open-feature/go-sdk-contrib/providers/flagd from 0.3.2 to 0.5.0

Release notes

Sourced from github.com/open-feature/go-sdk-contrib/providers/flagd's releases.

providers/flagd: v0.5.0

0.5.0 (2026-04-01)

⚠ BREAKING CHANGES

• fractional bucketing improvements (#866)

🐛 Bug Fixes

• security: update module github.com/moby/buildkit to v0.28.1 [security] (#853) (bd84e61)

✨ New Features

• fractional bucketing improvements (#866) (73d84a6)

providers/flagd: v0.4.0

0.4.0 (2026-03-11)

⚠ BREAKING CHANGES

• add graceful defaulting to code defaults (#841)

🐛 Bug Fixes

• security: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#835) (55ccbce)

✨ New Features

• add graceful defaulting to code defaults (#841) (b4269b7)

hooks/open-telemetry: v0.3.7

0.3.7 (2026-03-05)

🐛 Bug Fixes

• security: update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#835) (55ccbce)

hooks/open-telemetry: v0.3.6

0.3.6 (2025-06-25)

🐛 Bug Fixes

• deps: update module github.com/open-feature/go-sdk to v1.15.1 (#681) (8fd544f)

... (truncated)

Commits

• ddfb84e chore(main): release providers/flagd 0.5.0 (#861)
• 73d84a6 feat!: fractional bucketing improvements (#866)
• 2d60051 chore(main): release providers/go-feature-flag 1.0.1 (#863)
• 3d4496f chore(go-feature-flag): Remove release-as (#864)
• e9404be fix(go-feature-flag): Bump OFREP to fix the issue with withHeader. (#862)
• 3e21b0c chore(main): release providers/go-feature-flag 1.0.0 (#857)
• e669b17 chore(go-feature-flag): release next version as v1.0.0 (#858)
• c2ef03d chore(deps): update module github.com/thomaspoignant/go-feature-flag/modules/...
• bd84e61 fix(security): update module github.com/moby/buildkit to v0.28.1 [security] (...
• 0b44677 feat(go-feature-flag)!: add in-process flag evaluation support + tracking (#851)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/bridges/otelslog from 0.15.0 to 0.18.0

Release notes

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's releases.

Release v0.18.0

Fixed

• otelmemcache no longer sets span status to OK instead of leaving it unset. (#477)
• Fix goroutine leak in gRPC StreamClientInterceptor. (#581)

Removed

• Remove service name from otelmemcache configuration and span attributes. (#477)

Raw changes made between v0.17.0 and v0.18.0

839e505a67ca9fb5a3089cd1af5943061fcaf1ef Bumping otel version to v0.18.0. Prepare for releasing v0.18.0 (#600) f82555b1db7ebbd67f52d1389337e68ab85302ed Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /instrumentation/google.golang.org/grpc/otelgrpc (#594) 8fb6eb1e7560e7f22d01218264a73e7172173f68 Bump google.golang.org/grpc (#593) b3b6ccdfa1aea62088903d973917635d9b9fde88 Bump github.com/aws/aws-sdk-go from 1.37.15 to 1.37.20 in /detectors/aws (#591) 5783e2d230663a3bc6d580bc4bddb45b92447f2c Bump github.com/golang/snappy from 0.0.2 to 0.0.3 in /exporters/metric/cortex (#592) 3c49aeb44902006969fbb47f75a9bdd92ad08484 Bump cloud.google.com/go from 0.77.0 to 0.78.0 in /detectors/gcp (#595) a2de3b63d65496e14f95e382d19b8f8524a3597f Bump google.golang.org/grpc in /propagators/opencensus/examples (#596) f011c951891df554fe8b8db1e2b691d108f94eb4 Bump github.com/Shopify/sarama from 1.27.2 to 1.28.0 in /instrumentation/github.com/Shopify/sarama/otelsarama (#588) 598a707ec29164ec7c9ea3db025652ed7e9d77cb Bump go.uber.org/goleak from 1.1.0 to 1.1.10 in /instrumentation/google.golang.org/grpc/otelgrpc (#587) e5fef668e2306ca1c806c60610a7f850e56b5853 Bump cloud.google.com/go from 0.76.0 to 0.77.0 in /detectors/gcp (#586) 8334b44287c8e5651c0e5da146ccb0d7f08fc5e6 Bump github.com/golangci/golangci-lint from 1.36.0 to 1.37.1 in /tools (#585) 462580efd273ddf5cf411107bc0918afc2d6427d Bump github.com/aws/aws-sdk-go from 1.37.10 to 1.37.15 in /detectors/aws (#584) f875adf805119c91159087bacffb2e3b83c18af4 Update docs from gitter to slack for communication (#582) 3349bafa63a692d547650e65ee0512cb0fe7f22b otelmemcache: Simplify config and span status setting (#477) 62c8535f780b3d1891733443acd47473c0620512 Fix goroutine leak in gRPC StreamClientInterceptor (#581) 0fe41992b29720a798cfb0968d85ea5f44f67184 Update AWS detector assert dependency (#574)

Release v0.17.0

Update go.opentelemetry.io/otel dependency to v0.17.0

Added

• Add ot-tracer propagator (#562)

Changed

• Rename project default branch from master to main.

Fixed

• Added failure message for AWS ECS resource detector for better debugging (#568)

---

Raw changes made between v0.16.0 and v0.17.0

cabeeb5eaae82d11dba465771bdd761ad2f21017 Bump github.com/labstack/echo/v4 from 4.1.17 to 4.2.0 in /instrumentation/github.com/labstack/echo/otelecho (#577) 7fe84fdca70ce8eb56557f0d1b4f3a0784dda9db Bump github.com/labstack/echo/v4 (#578)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's changelog.

Commits

• 839e505 Bumping otel version to v0.18.0. Prepare for releasing v0.18.0 (#600)
• f82555b Bump google.golang.org/grpc from 1.35.0 to 1.36.0 in /instrumentation/google....
• 8fb6eb1 Bump google.golang.org/grpc (#593)
• b3b6ccd Bump github.com/aws/aws-sdk-go from 1.37.15 to 1.37.20 in /detectors/aws (#591)
• 5783e2d Bump github.com/golang/snappy from 0.0.2 to 0.0.3 in /exporters/metric/cortex...
• 3c49aeb Bump cloud.google.com/go from 0.77.0 to 0.78.0 in /detectors/gcp (#595)
• a2de3b6 Bump google.golang.org/grpc in /propagators/opencensus/examples (#596)
• f011c95 Bump github.com/Shopify/sarama from 1.27.2 to 1.28.0 in /instrumentation/gith...
• 598a707 Bump go.uber.org/goleak from 1.1.0 to 1.1.10 in /instrumentation/google.golan...
• e5fef66 Bump cloud.google.com/go from 0.76.0 to 0.77.0 in /detectors/gcp (#586)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.65.0 to 0.68.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

v1.43.0 / v2.5.0 / v0.68.0 / v0.37.0 / v0.23.0 / v0.18.0 / v0.16.0 / v0.15.0

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
• Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
• Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

• Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
• Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
• Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

• Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

• Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

What's Changed

• chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8651
• chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8652
• chore(deps): update golang.org/x/telemetry digest to e526e8a by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8647
• chore(deps): update module k8s.io/klog/v2 to v2.140.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8650
• chore(deps): update module github.com/mgechev/revive to v1.14.0 by @​mmorel-35 in open-telemetry/opentelemetry-go-contrib#8646
• chore(deps): update module github.com/mgechev/revive to v1.15.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8539
• chore: fix noctx issues by @​mmorel-35 in open-telemetry/opentelemetry-go-contrib#8645
• chore(deps): update golang.org/x by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8655
• chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8654
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8653
• fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8657
• Limit the number of bytes read from the zpages body by @​dmathieu in open-telemetry/opentelemetry-go-contrib#8656
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8648
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8661
• chore(deps): update github.com/securego/gosec/v2 digest to 8895462 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8663
• otelconf: support OTEL_CONFIG_FILE as it is no longer experimental by @​codeboten in open-telemetry/opentelemetry-go-contrib#8639
• chore(deps): update module github.com/sonatard/noctx to v0.5.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8664

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
• Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
• Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

• Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
• Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
• Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

• Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

• Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

[1.42.0/2.4.0/0.67.0/0.36.0/0.22.0/0.17.0/0.15.0/0.14.0] - 2026-03-06

Added

• Add environment variables propagation carrier in go.opentelemetry.io/contrib/propagators/envcar. (#8442)

Changed

• Upgrade go.opentelemetry.io/otel/semconv to v1.40.0, including updates across instrumentation and detector modules. (#8631)

  • The semantic conventions v1.40.0 release introduces RPC breaking changes applied in this repository:
    • RPC spans and metrics no longer include network.protocol.name, network.protocol.version, or network.transport attributes.
    • rpc.client.request.size, rpc.client.response.size, rpc.server.request.size, and rpc.server.response.size are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc.
    • rpc.message span events and their message attributes are no longer emitted in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc (including when WithMessageEvents is configured).

  See semantic-conventions v1.40.0 release for complete details.

Fixed

... (truncated)

Commits

• 45977a4 Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0 (#8769)
• 0fcc152 fix(deps): update module github.com/googlecloudplatform/opentelemetry-operati...
• eaba3cd chore(deps): update googleapis to 6f92a3b (#8776)
• 6df430c chore(deps): update module github.com/jgautheron/goconst to v1.10.0 (#8771)
• ae90e32 Fix otelconf prometheus label escaping (#8763)
• f202c3f otelconf: move experimental types to otelconf/x (#8529)
• 8ddaece fix(deps): update aws-sdk-go-v2 monorepo (#8764)
• c7c03a4 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8766)
• 717a85a envcar: normalize cached environment variable names (#8761)
• ad990b6 fix(deps): update module github.com/aws/smithy-go to v1.24.3 (#8765)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.65.0 to 0.68.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

v1.43.0 / v2.5.0 / v0.68.0 / v0.37.0 / v0.23.0 / v0.18.0 / v0.16.0 / v0.15.0

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the ke...

  Description has been truncated