Commit 04338dc
authored
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?v=4&size=40){kind=avatar}
fix(security): update vulnerability-updates [security] (#1933)
> ℹ️ **Note**
>
> This PR body was truncated due to platform limits.
This PR contains the following updates:
| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.6.10` → `v1.7.8` |
|
|
|
[github.com/aws/aws-sdk-go-v2/service/s3](https://redirect.github.com/aws/aws-sdk-go-v2)
| `v1.78.2` → `v1.97.3` |
|
|
|
[go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.40.0` → `v1.43.0` |
|
|
|
[go.opentelemetry.io/otel/sdk](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.42.0` → `v1.43.0` |
|
|
### GitHub Vulnerability Alerts
####
[GHSA-xmrv-pmrh-hhx2](https://redirect.github.com/aws/aws-sdk-go-v2/security/advisories/GHSA-xmrv-pmrh-hhx2)
**CVSSv3.1 Rating**: [Medium]
**CVSSv3.1 Score**: [5.9]
**CVSSv3.1 Vector String**:
[CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H]
## Summary and Impact
An issue exists in the the EventStream header decoder in AWS SDK for Go
v2 in versions predating
[2026-03-23](https://redirect.github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23).
An actor can send a malformed EventStream response frame containing a
crafted header value type byte outside the valid range, which can cause
the host process to terminate.
Impacted versions: <
[2026-03-23](https://redirect.github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23)
## Patches
This issue has been addressed in versions
[2026-03-23](https://redirect.github.com/aws/aws-sdk-go-v2/releases/tag/release-2026-03-23)
and above. We recommend upgrading to the latest version and ensuring any
forked or derivative code is patched to incorporate the new fixes.
## Workarounds
Not Applicable
## References
If you have any questions or comments about this advisory, we ask that
you contact [AWS/Amazon] Security via our [vulnerability reporting
page](https://aws.amazon.com/security/vulnerability-reporting) or
directly via email to
[aws-security@amazon.com](mailto:aws-security@amazon.com). Please do not
create a public GitHub issue.
####
[CVE-2026-39883](https://redirect.github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-hfvc-g4fc-pqhx)
## Summary
The fix for GHSA-9h8m-3fm2-qjrq (CVE-2026-24051) changed the Darwin
`ioreg` command to use an absolute path but left the BSD `kenv` command
using a bare name, allowing the same PATH hijacking attack on BSD and
Solaris platforms.
## Root Cause
`sdk/resource/host_id.go` line 42:
if result, err := r.execCommand("kenv", "-q", "smbios.system.uuid"); err
== nil {
Compare with the fixed Darwin path at line 58:
result, err := r.execCommand("/usr/sbin/ioreg", "-rd1", "-c",
"IOPlatformExpertDevice")
The `execCommand` helper at `sdk/resource/host_id_exec.go` uses
`exec.Command(name, arg...)` which searches `$PATH` when the command
name contains no path separator.
Affected platforms (per build tag in `host_id_bsd.go:4`): DragonFly BSD,
FreeBSD, NetBSD, OpenBSD, Solaris.
The `kenv` path is reached when `/etc/hostid` does not exist (line
38-40), which is common on FreeBSD systems.
## Attack
1. Attacker has local access to a system running a Go application that
imports `go.opentelemetry.io/otel/sdk`
2. Attacker places a malicious `kenv` binary earlier in `$PATH`
3. Application initializes OpenTelemetry resource detection at startup
4. `hostIDReaderBSD.read()` calls `exec.Command("kenv", ...)` which
resolves to the malicious binary
5. Arbitrary code executes in the context of the application
Same attack vector and impact as CVE-2026-24051.
## Suggested Fix
Use the absolute path:
if result, err := r.execCommand("/bin/kenv", "-q",
"smbios.system.uuid"); err == nil {
On FreeBSD, `kenv` is located at `/bin/kenv`.
---
### Release Notes
<details>
<summary>aws/aws-sdk-go-v2
(github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream)</summary>
###
[`v1.7.7`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-04-11)
#### General Highlights
- **Dependency Update**: Updated to the latest SDK module versions
#### Module Highlights
- `github.com/aws/aws-sdk-go-v2/feature/dynamodb/expression`:
[v1.7.79](feature/dynamodb/expression/CHANGELOG.md#v1779-2025-04-11)
- **Bug Fix**: allow nested list indices in expressions
- `github.com/aws/aws-sdk-go-v2/service/connectcontactlens`:
[v1.28.0](service/connectcontactlens/CHANGELOG.md#v1280-2025-04-11)
- **Feature**: Making sentiment optional for
ListRealtimeContactAnalysisSegments Response depending on conversational
analytics configuration
- `github.com/aws/aws-sdk-go-v2/service/detective`:
[v1.33.0](service/detective/CHANGELOG.md#v1330-2025-04-11)
- **Feature**: Add support for Detective DualStack endpoints
- `github.com/aws/aws-sdk-go-v2/service/dynamodb`:
[v1.42.4](service/dynamodb/CHANGELOG.md#v1424-2025-04-11)
- **Documentation**: Doc only update for API descriptions.
- `github.com/aws/aws-sdk-go-v2/service/marketplaceentitlementservice`:
[v1.29.0](service/marketplaceentitlementservice/CHANGELOG.md#v1290-2025-04-11)
- **Feature**: Add support for Marketplace Entitlement Service
dual-stack endpoints for CN and GOV regions
- `github.com/aws/aws-sdk-go-v2/service/marketplacemetering`:
[v1.29.0](service/marketplacemetering/CHANGELOG.md#v1290-2025-04-11)
- **Feature**: Add support for Marketplace Metering Service dual-stack
endpoints for CN regions
- `github.com/aws/aws-sdk-go-v2/service/verifiedpermissions`:
[v1.23.0](service/verifiedpermissions/CHANGELOG.md#v1230-2025-04-11)
- **Feature**: Adds deletion protection support to policy stores.
Deletion protection is disabled by default, can be enabled via the
CreatePolicyStore or UpdatePolicyStore APIs, and is visible in
GetPolicyStore.
###
[`v1.7.1`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2025-04-28)
#### General Highlights
- **Dependency Update**: Updated to the latest SDK module versions
#### Module Highlights
- `github.com/aws/aws-sdk-go-v2/service/acm`:
[v1.32.0](service/acm/CHANGELOG.md#v1320-2025-04-28)
- **Feature**: Add support for file-based HTTP domain control
validation, available through Amazon CloudFront.
- `github.com/aws/aws-sdk-go-v2/service/cloudfront`:
[v1.46.0](service/cloudfront/CHANGELOG.md#v1460-2025-04-28)
- **Feature**: Add distribution tenant, connection group, and
multi-tenant distribution APIs to the CloudFront SDK.
- `github.com/aws/aws-sdk-go-v2/service/dynamodb`:
[v1.43.1](service/dynamodb/CHANGELOG.md#v1431-2025-04-28)
- **Documentation**: Doc only update for GSI descriptions.
- `github.com/aws/aws-sdk-go-v2/service/imagebuilder`:
[v1.42.0](service/imagebuilder/CHANGELOG.md#v1420-2025-04-28)
- **Feature**: Add integration with SSM Parameter Store to Image
Builder.
- `github.com/aws/aws-sdk-go-v2/service/internal/checksum`:
[v1.7.1](service/internal/checksum/CHANGELOG.md#v171-2025-04-28)
- **Bug Fix**: Don't emit warnings about lack of checksum validation for
non-200 responses.
###
[`v1.7.0`](https://redirect.github.com/aws/aws-sdk-go-v2/blob/HEAD/CHANGELOG.md#Release-2026-01-12)
#### Module Highlights
- `github.com/aws/aws-sdk-go-v2/service/billing`:
[v1.10.0](service/billing/CHANGELOG.md#v1100-2026-01-12)
- **Feature**: Cost Categories filtering support to BillingView data
filter expressions through the new costCategories parameter, enabling
users to filter billing views by AWS Cost Categories for more granular
cost management and allocation.
- `github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations`:
[v1.7.0](service/iotmanagedintegrations/CHANGELOG.md#v170-2026-01-12)
- **Feature**: This release introduces WiFi Simple Setup (WSS) enabling
device provisioning via barcode scanning with automated network
discovery, authentication, and credential provisioning. Additionally, it
introduces 2P Device Capability Rediscovery for updating hub-managed
device capabilities post-onboarding.
- `github.com/aws/aws-sdk-go-v2/service/sagemaker`:
[v1.230.0](service/sagemaker/CHANGELOG.md#v12300-2026-01-12)
- **Feature**: Added ultraServerType to the UltraServerInfo structure to
support server type identification for SageMaker HyperPod
</details>
<details>
<summary>open-telemetry/opentelemetry-go
(go.opentelemetry.io/otel/sdk)</summary>
###
[`v1.43.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0):
/v0.65.0/v0.19.0
[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0)
#### Added
- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on
`SpanContext` in `go.opentelemetry.io/otel/trace`
for [W3C Trace Context Level 2 Random Trace ID
Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag)
support.
([#​8012](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012))
- Add service detection with `WithService` in
`go.opentelemetry.io/otel/sdk/resource`.
([#​7642](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642))
- Add `DefaultWithContext` and `EnvironmentWithContext` in
`go.opentelemetry.io/otel/sdk/resource` to support plumbing
`context.Context` through default and environment detectors.
([#​8051](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Support attributes with empty value (`attribute.EMPTY`) in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Add support for per-series start time tracking for cumulative metrics
in `go.opentelemetry.io/otel/sdk/metric`.
Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable.
([#​8060](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060))
- Add `WithCardinalityLimitSelector` for metric reader for configuring
cardinality limits specific to the instrument kind.
([#​7855](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855))
#### Changed
- Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to
reflect that an empty value is now a valid value, with `INVALID`
remaining as a deprecated alias of `EMPTY`.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
- Refactor slice handling in `go.opentelemetry.io/otel/attribute` to
optimize short slice values with fixed-size fast paths.
([#​8039](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039))
- Improve performance of span metric recording in
`go.opentelemetry.io/otel/sdk/trace` by returning early if
self-observability is not enabled.
([#​8067](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067))
- Improve formatting of metric data diffs in
`go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`.
([#​8073](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073))
#### Deprecated
- Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use
`EMPTY` instead.
([#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038))
#### Fixed
- Return spec-compliant `TraceIdRatioBased` description. This is a
breaking behavioral change, but it is necessary to
make the implementation
[spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased).
([#​8027](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027))
- Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where
the lastvalue aggregation could collect the value 0 even when no
zero-value measurements were recorded.
([#​8056](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056))
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
([#​8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108))
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
([#​8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108))
- Limit HTTP response body to 4 MiB in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
mitigate excessive memory usage caused by a misconfigured or malicious
server.
Responses exceeding the limit are treated as non-retryable errors.
([#​8108](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108))
- `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to
use full path for `kenv` command on BSD.
([#​8113](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113))
- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to
correctly handle HTTP2 GOAWAY frame.
([#​8096](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096))
#### What's Changed
- chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8014](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8014)
- fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to
[`190d7d4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/190d7d4)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8013](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8013)
- chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8016](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8016)
- fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8011](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8011)
- fix(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8023](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8023)
- fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8020](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8020)
- chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8017](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8017)
- chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8019](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8019)
- Add doc on how to upgrade to new semconv by
[@​jmmcorreia](https://redirect.github.com/jmmcorreia) in
[#​7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807)
- fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8028](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8028)
- resource: add WithService detector option by
[@​codeboten](https://redirect.github.com/codeboten) in
[#​7642](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7642)
- fix(deps): update googleapis to
[`a57be14`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a57be14)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8031](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8031)
- fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.3 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8032](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8032)
- chore(deps): update module github.com/prometheus/procfs to v0.20.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8034](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8034)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`8895462`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/8895462)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8036](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8036)
- chore(deps): update module github.com/sonatard/noctx to v0.5.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8040](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8040)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`6e66a94`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/6e66a94)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8043](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8043)
- docs(otlp): document HTTP/protobuf insecure env vars by
[@​marcschaeferger](https://redirect.github.com/marcschaeferger)
in
[#​8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037)
- Rebuild semconvkit and verifyreadmes on changes by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7995](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7995)
- chore(sdk/trace): join errors properly by
[@​ash2k](https://redirect.github.com/ash2k) in
[#​8030](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8030)
- fix(deps): update googleapis to
[`84a4fc4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/84a4fc4)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8048](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8048)
- attribute: change INVALID Type to EMPTY and mark INVALID as deprecated
by [@​pellared](https://redirect.github.com/pellared) in
[#​8038](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8038)
- fix(sdk/trace): return spec-compliant TraceIdRatioBased description by
[@​ash2k](https://redirect.github.com/ash2k) in
[#​8027](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8027)
- linting: add depguard rule to enforce semconv version by
[@​ajuijas](https://redirect.github.com/ajuijas) in
[#​8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041)
- chore(deps): update actions/download-artifact action to v8.0.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8046](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8046)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`b7b2c7b`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b7b2c7b)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8044](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8044)
- fix(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8045](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8045)
- Optimize attribute slice conversion by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​8039](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8039)
- Add benchmarks for end-to-end metrics SDK usage by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​7768](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7768)
- fix(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8052](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8052)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`befce8d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/befce8d)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8053](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8053)
- trace: add Random Trace ID Flag by
[@​yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3) in
[#​8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012)
- Improve aggregation concurrent safe tests by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8021](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8021)
- Add tests for exponential histogram concurrent-safety edge-cases by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8024](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8024)
- exphist: replace min, max, sum, and count with atomics by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8025](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8025)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`c2dfcec`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c2dfcec)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8055](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8055)
- chore(deps): update otel/weaver docker tag to v0.22.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8058](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8058)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`dec52c4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/dec52c4)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8063](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8063)
- chore(deps): update otel/weaver docker tag to v0.22.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8061](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8061)
- chore(deps): update github/codeql-action action to v4.33.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8065](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8065)
- Fix race in the lastvalue aggregation where 0 could be observed by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8056](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8056)
- chore(deps): update github.com/securego/gosec/v2 digest to
[`744bfb5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/744bfb5)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8064](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8064)
- Migrate to new bare metal runner (Ubuntu 24) by
[@​trask](https://redirect.github.com/trask) in
[#​8068](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8068)
- sdk/resource: add WithContext variants for Default and Environment
([#​7808](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7808))
by [@​ajuijas](https://redirect.github.com/ajuijas) in
[#​8051](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8051)
- Use atomics for exponential histogram buckets by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8057](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8057)
- Added the `internal/observ` package to stdoutlog by
[@​yumosx](https://redirect.github.com/yumosx) in
[#​7735](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7735)
- Add support for the development per-series starttime feature by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8060](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8060)
- sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled
by
[@​kouji-yoshimura](https://redirect.github.com/kouji-yoshimura)
in
[#​8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067)
- Cleanup exemplar featuregate readme by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8072](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8072)
- chore(deps): update codecov/codecov-action action to v5.5.3 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8080](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8080)
- chore(deps): update module github.com/ryanrolds/sqlclosecheck to
v0.6.0 by [@​renovate](https://redirect.github.com/renovate)\[bot]
in
[#​8083](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8083)
- fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to
[`de6f1cc`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/de6f1cc)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8082](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8082)
- chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.54.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8085](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8085)
- chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8084](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8084)
- chore(deps): update module github.com/protonmail/go-crypto to v1.4.1
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8081](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8081)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.54.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8086](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8086)
- chore(deps): update actions/cache action to v5.0.4 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8079](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8079)
- chore(deps): update module github.com/fatih/color to v1.19.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8087](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8087)
- fix(deps): update googleapis to
[`d00831a`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d00831a)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8078](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8078)
- chore(deps): update golang.org/x/telemetry digest to
[`b6b0c46`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b6b0c46)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8076](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8076)
- fix(deps): update module google.golang.org/grpc to v1.79.3 \[security]
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8075](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8075)
- sdk/metric: Support specifying cardinality limits per instrument kinds
by [@​petern48](https://redirect.github.com/petern48) in
[#​7855](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7855)
- chore(deps): update github/codeql-action action to v4.34.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8088](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8088)
- chore(deps): update codspeedhq/action action to v4.12.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8089](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8089)
- chore(deps): update github/codeql-action action to v4.34.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8090](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8090)
- fix(deps): update module github.com/golangci/golangci-lint/v2 to
v2.11.4 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8092](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8092)
- chore: fix noctx issues by
[@​mmorel-35](https://redirect.github.com/mmorel-35) in
[#​8008](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8008)
- chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8095](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8095)
- chore(deps): update codecov/codecov-action action to v5.5.4 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8097](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8097)
- chore(deps): update codecov/codecov-action action to v6 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8098](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8098)
- chore(deps): update module github.com/tetafro/godot to v1.5.6 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8099](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8099)
- chore(deps): update module github.com/butuzov/ireturn to v0.4.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8100](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8100)
- chore(deps): update github/codeql-action action to v4.35.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8101](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8101)
- chore(deps): update actions/setup-go action to v6.4.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8107](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8107)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8106](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8106)
- chore(deps): update module github.com/lucasb-eyer/go-colorful to
v1.4.0 by [@​renovate](https://redirect.github.com/renovate)\[bot]
in
[#​8103](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8103)
- chore(deps): update github/codeql-action action to v4.35.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8102](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8102)
- chore(deps): update module github.com/hashicorp/go-version to v1.9.0
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8109](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8109)
- metricdatatest: Improve printing of diffs by
[@​dashpole](https://redirect.github.com/dashpole) in
[#​8073](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8073)
- fix(deps): update googleapis to
[`d5a96ad`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d5a96ad)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8112](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8112)
- chore(deps): update codspeedhq/action action to v4.13.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8114](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8114)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.55.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8119](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8119)
- chore(deps): update fossas/fossa-action action to v1.9.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8118](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8118)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8115](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8115)
- fix(deps): update googleapis to
[`9d38bb4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9d38bb4)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8117](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8117)
- fix: support getBody in otelploghttp by
[@​Tpuljak](https://redirect.github.com/Tpuljak) in
[#​8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096)
- fix(deps): update module google.golang.org/grpc to v1.80.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8121](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8121)
- Use an absolute path when calling bsd kenv by
[@​dmathieu](https://redirect.github.com/dmathieu) in
[#​8113](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8113)
- limit response body size for OTLP HTTP exporters by
[@​pellared](https://redirect.github.com/pellared) in
[#​8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108)
- chore(deps): update github.com/golangci/dupl digest to
[`c99c5cf`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c99c5cf)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8122](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8122)
- chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8131](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8131)
- Release v1.43.0 / v0.65.0 / v0.19.0 by
[@​dmathieu](https://redirect.github.com/dmathieu) in
[#​8128](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8128)
#### New Contributors
- [@​jmmcorreia](https://redirect.github.com/jmmcorreia) made
their first contribution in
[#​7807](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7807)
- [@​marcschaeferger](https://redirect.github.com/marcschaeferger)
made their first contribution in
[#​8037](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8037)
- [@​ajuijas](https://redirect.github.com/ajuijas) made their
first contribution in
[#​8041](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8041)
- [@​yuanyuanzhao3](https://redirect.github.com/yuanyuanzhao3)
made their first contribution in
[#​8012](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8012)
- [@​kouji-yoshimura](https://redirect.github.com/kouji-yoshimura)
made their first contribution in
[#​8067](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8067)
- [@​Tpuljak](https://redirect.github.com/Tpuljak) made their
first contribution in
[#​8096](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8096)
**Full Changelog**:
<https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...v1.43.0>
###
[`v1.42.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.42.0):
/v0.64.0/v0.18.0/v0.0.16
[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0)
##### Added
- Add `go.opentelemetry.io/otel/semconv/v1.40.0` package.
The package contains semantic conventions from the `v1.40.0` version of
the OpenTelemetry Semantic Conventions.
See the [migration documentation](./semconv/v1.40.0/MIGRATION.md) for
information on how to upgrade from
`go.opentelemetry.io/otel/semconv/v1.39.0`.
([#​7985](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985))
- Add `Err` and `SetErr` on `Record` in `go.opentelemetry.io/otel/log`
to attach an error and set record exception attributes in
`go.opentelemetry.io/otel/log/sdk`.
([#​7924](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7924))
##### Changed
- `TracerProvider.ForceFlush` in `go.opentelemetry.io/otel/sdk/trace`
joins errors together and continues iteration through SpanProcessors as
opposed to returning the first encountered error without attempting
exports on subsequent SpanProcessors.
([#​7856](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7856))
##### Fixed
- Fix missing `request.GetBody` in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to
correctly handle HTTP2 GOAWAY frame.
([#​7931](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7931))
- Fix semconv v1.39.0 generated metric helpers skipping required
attributes when extra attributes were empty.
([#​7964](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7964))
- Preserve W3C TraceFlags bitmask (including the random Trace ID flag)
during trace context extraction and injection in
`go.opentelemetry.io/otel/propagation`.
([#​7834](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7834))
##### Removed
- Drop support for \[Go 1.24].
([#​7984](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7984))
#### What's Changed
- fix changelog protection marker by
[@​pellared](https://redirect.github.com/pellared) in
[#​7986](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7986)
- Drop support for Go 1.24 by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7984](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7984)
- fix(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7907](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7907)
- chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.53.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7981](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7981)
- chore(deps): update benchmark-action/github-action-benchmark action to
v1.21.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7989](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7989)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.53.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7982](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7982)
- Revert "Revert "Generate semconv/v1.40.0"" by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7985](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7985)
- support stdlib request.GetBody on metrics by
[@​marifari-hue](https://redirect.github.com/marifari-hue) in
[#​7931](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931)
- attribute: add TestNotEquivalence and equality operator tests by
[@​pellared](https://redirect.github.com/pellared) in
[#​7979](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7979)
- Refactor benchmark CI by
[@​XSAM](https://redirect.github.com/XSAM) in
[#​7873](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7873)
- chore(deps): update module github.com/securego/gosec/v2 to v2.24.7 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7988](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7988)
- chore(deps): pin codspeedhq/action action to
[`df47568`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/df47568)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7996](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7996)
- chore(deps): update actions/checkout action to v6.0.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7997](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7997)
- chore(deps): update codspeedhq/action action to v4.11.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7999](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7999)
- Upgrade to semconv/v1.40.0 by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7991](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7991)
- Regenerate semconv/v1.40.0/MIGRATION.md by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7992](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7992)
- fix: generated semconv helpers skipping attributes by
[@​victoraugustolls](https://redirect.github.com/victoraugustolls)
in
[#​7964](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964)
- Feat: Have SpanContext support the new W3C random flag. by
[@​nikhilmantri0902](https://redirect.github.com/nikhilmantri0902)
in
[#​7834](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7834)
- Semconv metric helper caller-slice mutation fix by
[@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7993](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7993)
- Fix semconv generated error type to check error chain for custom type
declaration by [@​MrAlias](https://redirect.github.com/MrAlias) in
[#​7994](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7994)
- refactor: replace uint64 and int32 with atomic types in tests by
[@​alexandear](https://redirect.github.com/alexandear) in
[#​7941](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7941)
- chore(deps): update golang.org/x/telemetry digest to
[`18da590`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/18da590)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8000](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8000)
- TracerProvider ForceFlush() Error Fix by
[@​sawamurataxman](https://redirect.github.com/sawamurataxman) in
[#​7856](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856)
- log: add error field to Record and make SDK to emit exception
attributes by [@​iblancasa](https://redirect.github.com/iblancasa)
in
[#​7924](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924)
- chore(deps): update dependency codespell to v2.4.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8003](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8003)
- chore(deps): update github/codeql-action action to v4.32.6 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8004](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8004)
- chore(deps): update codspeedhq/action action to v4.11.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8001](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8001)
- fix(deps): update module google.golang.org/grpc to v1.79.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8007](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8007)
- chore(deps): update module github.com/mgechev/revive to v1.15.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8009](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8009)
- chore(deps): update golang.org/x/telemetry digest to
[`e526e8a`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e526e8a)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​8010](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8010)
- Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 by
[@​pellared](https://redirect.github.com/pellared) in
[#​8006](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8006)
#### New Contributors
- [@​marifari-hue](https://redirect.github.com/marifari-hue) made
their first contribution in
[#​7931](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7931)
-
[@​victoraugustolls](https://redirect.github.com/victoraugustolls)
made their first contribution in
[#​7964](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7964)
- [@​sawamurataxman](https://redirect.github.com/sawamurataxman)
made their first contribution in
[#​7856](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7856)
- [@​iblancasa](https://redirect.github.com/iblancasa) made their
first contribution in
[#​7924](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7924)
**Full Changelog**:
<https://github.com/open-telemetry/opentelemetry-go/compare/v1.41.0...v1.42.0>
###
[`v1.41.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.41.0):
/v0.63.0/v0.17.0/v0.0.15
[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0)
This release is the last to support [Go 1.24]. The next release will
require at least [Go 1.25].
##### Added
- Support testing of [Go 1.26].
([#​7902](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902))
##### Fixed
- Update `Baggage` in `go.opentelemetry.io/otel/propagation` and `Parse`
and `New` in `go.opentelemetry.io/otel/baggage` to comply with W3C
Baggage specification limits. `New` and `Parse` now return partial
baggage along with an error when limits are exceeded. Errors from
baggage extraction are reported to the global error handler.
([#​7880](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880))
[Go 1.26]: https://go.dev/doc/go1.26
[Go 1.25]: https://go.dev/doc/go1.25
[Go 1.24]: https://go.dev/doc/go1.24
#### What's Changed
- fix(deps): update googleapis to
[`ce8ad4c`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/ce8ad4c)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7860](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7860)
- chore(deps): update otel/weaver docker tag to v0.21.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7865](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7865)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.51.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7863](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7863)
- chore(deps): update golang.org/x/telemetry digest to
[`fe4bb1c`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/fe4bb1c)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7861](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7861)
- chore(deps): update golang.org/x/telemetry digest to
[`aaaaaa5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/aaaaaa5)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7869](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7869)
- sdk/log/observ: guard LogProcessed with Enabled by
[@​NesterovYehor](https://redirect.github.com/NesterovYehor) in
[#​7848](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7848)
- stdouttrace observability: skip metric work when instruments are
disabled by
[@​NesterovYehor](https://redirect.github.com/NesterovYehor) in
[#​7853](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7853)
- chore(deps): update otel/weaver docker tag to v0.21.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7870](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7870)
- fix(deps): update googleapis to
[`546029d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/546029d)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7871](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7871)
- stdoutmetric observ: skip metric work when instruments are disabled by
[@​NesterovYehor](https://redirect.github.com/NesterovYehor) in
[#​7868](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7868)
- chore(deps): update fossas/fossa-action action to v1.8.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7879](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7879)
- chore(deps): update github/codeql-action action to v4.32.2 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7878](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7878)
- chore(deps): update module github.com/ghostiam/protogetter to v0.3.20
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7877](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7877)
- chore(deps): update golang.org/x/telemetry digest to
[`86a5c4b`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/86a5c4b)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7876](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7876)
- fix(deps): update module golang.org/x/sys to v0.41.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7885](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7885)
- chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.6.0
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7884](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7884)
- Checked if instrument enabled before measuring in prometheus by
[@​itssaharsh](https://redirect.github.com/itssaharsh) in
[#​7866](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7866)
- exporter/otlploghttp: guard observ metrics with Enabled checks by
[@​NesterovYehor](https://redirect.github.com/NesterovYehor) in
[#​7813](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7813)
- chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7886](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7886)
- chore(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7887](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7887)
- fix(deps): update golang.org/x by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7890](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7890)
- fix(deps): update golang.org/x to
[`2842357`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/2842357)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7891](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7891)
- fix(deps): update googleapis to
[`4cfbd41`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4cfbd41)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7889](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7889)
- Checked if instrument enabled before measuring in `oteltracegrpc` by
[@​itssaharsh](https://redirect.github.com/itssaharsh) in
[#​7825](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7825)
- Checked if Instrument Enabled before measuring in otlpgrpc by
[@​itssaharsh](https://redirect.github.com/itssaharsh) in
[#​7824](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7824)
- chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2
to v2.27.8 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7892](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7892)
- chore(deps): update module github.com/golangci/golines to v0.15.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7893](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7893)
- chore(deps): update module github.com/golangci/misspell to v0.8.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7894](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7894)
- chore(deps): update golang.org/x/telemetry digest to
[`9f66fae`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9f66fae)
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7898](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7898)
- fix(deps): update module google.golang.org/grpc to v1.79.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7906](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7906)
- Support Go 1.26 by
[@​dmathieu](https://redirect.github.com/dmathieu) in
[#​7902](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7902)
- fix(deps): update module google.golang.org/grpc to v1.79.1 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7908](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7908)
- chore(deps): update github/codeql-action action to v4.32.3 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7909](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7909)
- chore(deps): update module github.com/kevinburke/ssh\_config to v1.5.0
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7911](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7911)
- chore(deps): update module github.com/kevinburke/ssh\_config to v1.6.0
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7913](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7913)
- chore(deps): update actions/stale action to v10.2.0 by
[@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7917](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7917)
- chore(deps): update module github.com/godoc-lint/godoc-lint to v0.11.2
by [@​renovate](https://redirect.github.com/renovate)\[bot] in
[#​7916](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/7916)
-
</details>
---
### Configuration
📅 **Schedule**: (UTC)
- Branch creation
- ""
- Automerge
- At any time (no schedule defined)
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config
help](https://redirect.github.com/renovatebot/renovate/discussions) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-feature/flagd).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjExMC4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJyZW5vdmF0ZSJdfQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>1 parent a60a64f commit 04338dc
6 files changed
+135
-45
lines changed| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
20 | 20 | | |
21 | 21 | | |
22 | 22 | | |
23 | | - | |
| 23 | + | |
24 | 24 | | |
25 | | - | |
26 | | - | |
27 | | - | |
28 | | - | |
| 25 | + | |
| 26 | + | |
| 27 | + | |
| 28 | + | |
29 | 29 | | |
30 | 30 | | |
31 | 31 | | |
| |||
61 | 61 | | |
62 | 62 | | |
63 | 63 | | |
64 | | - | |
65 | | - | |
| 64 | + | |
| 65 | + | |
66 | 66 | | |
67 | 67 | | |
68 | 68 | | |
69 | 69 | | |
70 | | - | |
71 | | - | |
| 70 | + | |
| 71 | + | |
72 | 72 | | |
73 | | - | |
74 | | - | |
75 | | - | |
76 | | - | |
77 | | - | |
78 | | - | |
| 73 | + | |
| 74 | + | |
| 75 | + | |
| 76 | + | |
| 77 | + | |
| 78 | + | |
79 | 79 | | |
80 | 80 | | |
81 | 81 | | |
82 | | - | |
| 82 | + | |
83 | 83 | | |
84 | 84 | | |
85 | 85 | | |
| |||
154 | 154 | | |
155 | 155 | | |
156 | 156 | | |
157 | | - | |
| 157 | + | |
158 | 158 | | |
159 | 159 | | |
160 | 160 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
62 | 62 | | |
63 | 63 | | |
64 | 64 | | |
| 65 | + | |
| 66 | + | |
65 | 67 | | |
66 | 68 | | |
| 69 | + | |
| 70 | + | |
67 | 71 | | |
68 | 72 | | |
69 | 73 | | |
| |||
74 | 78 | | |
75 | 79 | | |
76 | 80 | | |
| 81 | + | |
| 82 | + | |
77 | 83 | | |
78 | 84 | | |
| 85 | + | |
| 86 | + | |
79 | 87 | | |
80 | 88 | | |
81 | 89 | | |
82 | 90 | | |
| 91 | + | |
| 92 | + | |
83 | 93 | | |
84 | 94 | | |
| 95 | + | |
| 96 | + | |
85 | 97 | | |
86 | 98 | | |
| 99 | + | |
| 100 | + | |
87 | 101 | | |
88 | 102 | | |
| 103 | + | |
| 104 | + | |
89 | 105 | | |
90 | 106 | | |
| 107 | + | |
| 108 | + | |
91 | 109 | | |
92 | 110 | | |
| 111 | + | |
| 112 | + | |
93 | 113 | | |
94 | 114 | | |
95 | 115 | | |
| |||
98 | 118 | | |
99 | 119 | | |
100 | 120 | | |
| 121 | + | |
| 122 | + | |
101 | 123 | | |
102 | 124 | | |
103 | 125 | | |
| |||
340 | 362 | | |
341 | 363 | | |
342 | 364 | | |
| 365 | + | |
| 366 | + | |
343 | 367 | | |
344 | 368 | | |
345 | 369 | | |
| |||
366 | 390 | | |
367 | 391 | | |
368 | 392 | | |
| 393 | + | |
| 394 | + | |
369 | 395 | | |
370 | 396 | | |
| 397 | + | |
| 398 | + | |
371 | 399 | | |
372 | 400 | | |
373 | 401 | | |
374 | 402 | | |
375 | 403 | | |
376 | 404 | | |
| 405 | + | |
| 406 | + | |
377 | 407 | | |
378 | 408 | | |
| 409 | + | |
| 410 | + | |
379 | 411 | | |
380 | 412 | | |
381 | 413 | | |
| |||
458 | 490 | | |
459 | 491 | | |
460 | 492 | | |
| 493 | + | |
| 494 | + | |
461 | 495 | | |
462 | 496 | | |
463 | 497 | | |
| |||
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
41 | 41 | | |
42 | 42 | | |
43 | 43 | | |
44 | | - | |
45 | | - | |
| 44 | + | |
| 45 | + | |
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
49 | 49 | | |
50 | | - | |
51 | | - | |
| 50 | + | |
| 51 | + | |
52 | 52 | | |
53 | | - | |
54 | | - | |
55 | | - | |
56 | | - | |
57 | | - | |
58 | | - | |
| 53 | + | |
| 54 | + | |
| 55 | + | |
| 56 | + | |
| 57 | + | |
| 58 | + | |
59 | 59 | | |
60 | 60 | | |
61 | 61 | | |
62 | | - | |
| 62 | + | |
63 | 63 | | |
64 | 64 | | |
65 | 65 | | |
| |||
0 commit comments