deps: bump the go-minor-and-patch group across 15 directories with 14 updates

[dependabot]

Bumps the go-minor-and-patch group with 1 update in the /cli directory: google.golang.org/grpc.
Bumps the go-minor-and-patch group with 1 update in the /gen/go directory: google.golang.org/grpc.
Bumps the go-minor-and-patch group with 7 updates in the /pkg directory:

Package	From	To
google.golang.org/grpc	1.79.3	1.82.1
github.com/nats-io/nats.go	1.48.0	1.52.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.67.0	0.69.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	1.42.0	1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	1.42.0	1.44.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric	1.42.0	1.44.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	1.42.0	1.44.0

Bumps the go-minor-and-patch group with 3 updates in the /services/ai-gateway directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 3 updates in the /services/auth directory: google.golang.org/grpc, github.com/nats-io/nats.go and golang.org/x/crypto.
Bumps the go-minor-and-patch group with 1 update in the /services/bff directory: google.golang.org/grpc.
Bumps the go-minor-and-patch group with 3 updates in the /services/billing directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 2 updates in the /services/experiment-tracker directory: google.golang.org/grpc and github.com/nats-io/nats.go.
Bumps the go-minor-and-patch group with 3 updates in the /services/feature-store directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 3 updates in the /services/inference-gateway directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 3 updates in the /services/model-monitor directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 2 updates in the /services/model-serving directory: google.golang.org/grpc and github.com/nats-io/nats.go.
Bumps the go-minor-and-patch group with 3 updates in the /services/notification directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.
Bumps the go-minor-and-patch group with 2 updates in the /services/pipeline-orchestrator directory: google.golang.org/grpc and github.com/nats-io/nats.go.
Bumps the go-minor-and-patch group with 3 updates in the /services/registry directory: google.golang.org/grpc, github.com/nats-io/nats.go and github.com/redis/go-redis/v9.

Updates google.golang.org/grpc from 1.79.3 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

• server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
• xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

• server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
• transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
• balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

• experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • Special Thanks: @​seth-epps
• client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • Special Thanks: @​chengxilo
• server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
  • Special Thanks: @​dfinkel

Bug Fixes

• xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
• grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • Special Thanks: @​evilgensec
• stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
• encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
• channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

• ebd8f06 Change version to 1.82.1 (#9238)
• 4ea465d Cherry-pick commits (#9236)
• 9494a2c Change version to 1.82.1-dev (#9171)
• bd23985 Change version to 1.82.0 (#9170)
• 0f3086d Fix minor issues not covered by PR #9137 (#9147)
• fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
• 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
• adc97de test/kokoro: add config for regional-td test (#9158)
• 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
• b58f32d server: Set a pprof label on new stream goroutines (#9082)
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

• server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
• xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

• server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
• transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
• balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

• experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • Special Thanks: @​seth-epps
• client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • Special Thanks: @​chengxilo
• server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
  • Special Thanks: @​dfinkel

Bug Fixes

• xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
• grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • Special Thanks: @​evilgensec
• stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
• encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
• channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

• ebd8f06 Change version to 1.82.1 (#9238)
• 4ea465d Cherry-pick commits (#9236)
• 9494a2c Change version to 1.82.1-dev (#9171)
• bd23985 Change version to 1.82.0 (#9170)
• 0f3086d Fix minor issues not covered by PR #9137 (#9147)
• fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
• 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
• adc97de test/kokoro: add config for regional-td test (#9158)
• 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
• b58f32d server: Set a pprof label on new stream goroutines (#9082)
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.82.1

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.1

Security

• server: Stop reading from the connection when flooded by HTTP/2 frames. The default value for this limit is 100 frames, excluding DATA and HEADERS, and may be changed by setting environment variable GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.
• xds/rbac: Support Metadata and RequestedServerName permissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.
• xds/rbac: Fix panic when parsing unsupported fields in NotRule/NotId permissions.
• xds/rbac: Support the deprecated source_ip principal identifier by treating it as equivalent to direct_remote_ip.

Release 1.82.0

Behavior Changes

• server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
• transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
• balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

• experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • Special Thanks: @​seth-epps
• client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • Special Thanks: @​chengxilo
• server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
  • Special Thanks: @​dfinkel

Bug Fixes

• xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
• grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • Special Thanks: @​evilgensec
• stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
• encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
• channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Release 1.81.1

Security

• xds/rbac: Fix a potential authorization bypass caused by incorrectly falling through URI/DNS SANs to Subject Distinguished Name (DN) when matching the authenticated principal name. With this fix, only the first non-empty identity source will be used, as per gRFC A41. (#9111)
  • Special Thanks: @​al4an444

Bug Fixes

• otel: Segregate client and server RPC information used for metrics and traces, to avoid one overwriting the other. (#9081)

Release 1.81.0

Behavior Changes

• balancer/rls: Switch gauge metrics to asynchronous emission (once per collection cycle) to reduce telemetry noise and align with other gRPC language implementations. (#8808)

Dependencies

... (truncated)

Commits

• ebd8f06 Change version to 1.82.1 (#9238)
• 4ea465d Cherry-pick commits (#9236)
• 9494a2c Change version to 1.82.1-dev (#9171)
• bd23985 Change version to 1.82.0 (#9170)
• 0f3086d Fix minor issues not covered by PR #9137 (#9147)
• fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
• 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
• adc97de test/kokoro: add config for regional-td test (#9158)
• 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
• b58f32d server: Set a pprof label on new stream goroutines (#9082)
• Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.48.0 to 1.52.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.52.0

Changelog

This release focuses on 2.14 nats-server features support.

ADDED

• JetStream:
  • Added fast batch stream config field (#2052)
  • Added message scheduling headers and publish opts (#2051)
  • Updated StreamConfig with Consumer field and added AckFlowControlPolicy (#2070)
  • Added reset consumer API (#2069)

FIXED

• Core NATS:
  • Fix Subscription.StatusChanged channel closure on Closed Subscription. Thanks @​nithimani38-prog for the contribution (#2034)

IMPROVED

• Fixed Flaky JS cluster tests (#2062)

Complete Changes

nats-io/nats.go@v1.51.0...v1.52.0

Release v1.51.0

Changelog

ADDED

• Core NATS:
  • Option to customize write buffer size (#2057)
  • Option to automatically reconnect on write error (#2055)
  • Accessors for JetStream API level and IsSysAccount from ServerInfo (#2060)

FIXED

• Core NATS:
  • Make websocket frame validation more robust (#2050)
• JetStream:
  • Fix deadlock in Consume() when calling Stop/Drain from ConsumeErrHandler (#2059)

IMPROVED

• Fix typos in tests. Thanks @​deining for the contribution (#2049)
• Fix deprecation warnings by bumping GH actions to their latest versions. Thanks @​deining for the contibution (#2048)
• Code linting: remove functions min and max. Thanks @​deining for the contribution (#2047)

Complete Changes

... (truncated)

Commits

• e9f2a36 Release v1.52.0 (#2074)
• 609274f [FIXED] Subscription.StatusChanged channel closure on Closed Subscription (#2...
• f7cde74 [IMPROVED] Use latest release build for badge in README (#2064)
• c7476ea [IMPROVED] Reject empty consumer info in CONSUMER.RESET response (#2072)
• 8fde36f [ADDED] ResetConsumer JetStream API (#2069)
• dcfd0fc [ADDED] StreamSource.Consumer config field and AckFlowControlPolicy (#2070)
• 7a28503 [ADDED] Publish options and consts for message scheduling (#2051)
• 6c91a51 [ADDED] AllowBatchPublish stream config field (#2052)
• a614d0b [FIXED] Flaky JS cluster tests due to race in setupJSClusterWithSize (#2062)
• 17b6fd1 Release v1.51.0 (#2061)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.67.0 to 0.69.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

v1.44.0/v2.5.1/v0.69.0/v0.37.1/v0.24.0/v0.19.0/v0.16.1/v0.16.0

Added

• Add error.type attribute to http.client.request.duration for transport failures in otelhttp. (#8801)
• Add examples for prometheus compatibility document. (#8716)
• Add support for cardinality_limits in PeriodicMetricReader in otelconf. (#8885)
• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/x to expose the resolved SDK resource from declarative configuration. (#8913)
• Add go.opentelemetry.io/contrib/detectors/hetzner, a new resource detector for Hetzner Cloud servers, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/hetzner. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, host.id, and host.name. (#8979)

Changed

• Set error field as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otellogrus. (#8776)
• Set the "error" field (e.g. created via zap.Error) as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otelzap. (#8719)
• Set fields implementing error interface from slog records as record.SetErr instead of plain attributes in go.opentelemetry.io/contrib/bridges/otelslog. (#8774)
• Set emitted errors in go.opentelemetry.io/contrib/bridges/otellogr as record errors (Record.SetErr) instead of exception.message attributes. (#8775)

Fixed

• Fix header attributes lost when using sub-spans in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#8797)
• Validate encoding configuration for OTLP HTTP exporters in go.opentelemetry.io/contrib/otelconf. (#8772)
• Remove the custom body wrapper from the request's body after the request is processed to allow body type comparisons with the original type in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6914)
• Unknown or empty HTTP methods now report "_OTHER" instead of "GET" across all HTTP instrumentations to align with OpenTelemetry semantic conventions. (#8868)
• The default span name formatter in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now conforms to the OpenTelemetry HTTP semantic conventions for server span names. (#8871)
  • The default span name is now {method} {route} (e.g. GET /foo/{id}) when a route pattern is available, or {method} (e.g. GET) otherwise.

Removed

• Remove the deprecated WithSpanOptions option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8991)

What's Changed

• otelconf: validate encoding configuration for OTLP HTTP exporters by @​sonalgaud12 in open-telemetry/opentelemetry-go-contrib#8772
• fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.99.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8780
• chore(deps): update prom/prometheus docker tag to v3.11.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8779
• otellogrus: Set error field as record.SetErr by @​sonalgaud12 in open-telemetry/opentelemetry-go-contrib#8778
• chore(deps): update module golang.org/x/sys to v0.43.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8783
• chore(deps): update golang.org/x/telemetry digest to 93c7c8a by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8786
• chore(deps): update module github.com/mattn/go-isatty to v0.0.21 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8787
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.23 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8788
• chore(deps): update golang.org/x by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8791
• chore(deps): update actions/github-script action to v9 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8795
• fix(deps): update golang.org/x by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8794
• otelzap: set error field as record.SetErr by @​iblancasa in open-telemetry/opentelemetry-go-contrib#8719
• fix(deps): update golang.org/x to 746e56f by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8796
• chore(deps): update module golang.org/x/arch to v0.26.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8798
• Check if otelgrpc metrics are enabled by @​dashpole in open-telemetry/opentelemetry-go-contrib#8792
• chore(deps): update actions/upload-artifact action to v7.0.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8800
• Check instrument enabled in deprecatedruntime by @​dashpole in open-telemetry/opentelemetry-go-contrib#8793
• chore(deps): update module github.com/ashanbrown/forbidigo/v2 to v2.3.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8804
• chore(deps): update module github.com/ashanbrown/makezero/v2 to v2.2.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8802
• chore(deps): update module github.com/manuelarte/funcorder to v0.6.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8803

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.44.0/2.5.1/0.69.0/0.37.1/0.24.0/0.19.0/0.16.1/0.16.0] - 2026-05-28

Added

• Add error.type attribute to http.client.request.duration for transport failures in otelhttp. (#8801)
• Add examples for prometheus compatibility document. (#8716)
• Add support for cardinality_limits in PeriodicMetricReader in otelconf. (#8885)
• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/x to expose the resolved SDK resource from declarative configuration. (#8913)
• Add go.opentelemetry.io/contrib/detectors/hetzner, a new resource detector for Hetzner Cloud servers, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/hetzner. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, host.id, and host.name. (#8979)

Changed

• Set error field as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otellogrus. (#8776)
• Set the "error" field (e.g. created via zap.Error) as record.SetErr instead of a plain attribute in go.opentelemetry.io/contrib/bridges/otelzap. (#8719)
• Set fields implementing error interface from slog records as record.SetErr instead of plain attributes in go.opentelemetry.io/contrib/bridges/otelslog. (#8774)
• Set emitted errors in go.opentelemetry.io/contrib/bridges/otellogr as record errors (Record.SetErr) instead of exception.message attributes. (#8775)

Fixed

• Fix header attributes lost when using sub-spans in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace. (#8797)
• Validate encoding configuration for OTLP HTTP exporters in go.opentelemetry.io/contrib/otelconf. (#8772)
• Remove the custom body wrapper from the request's body after the request is processed to allow body type comparisons with the original type in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp and go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. (#6914)
• Unknown or empty HTTP methods now report "_OTHER" instead of "GET" across all HTTP instrumentations to align with OpenTelemetry semantic conventions. (#8868)
• The default span name formatter in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp now conforms to the OpenTelemetry HTTP semantic conventions for server span names. (#8871)
  • The default span name is now {method} {route} (e.g. GET /foo/{id}) when a route pattern is available, or {method} (e.g. GET) otherwise.

Removed

• Remove the deprecated WithSpanOptions option in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8991)

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
• Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
• Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

... (truncated)

Commits

• 03b2bcd Release v1.44.0/v2.5.1/v0.69.0/v0.37.1/v0.24.0/v0.19.0/v0.16.1/v0.16.0 (#9033)
• 80c46d4 chore(deps): update module github.com/alecthomas/chroma/v2 to v2.26.0 (#9034)
• 51f2921 fix(deps): update module github.com/hetznercloud/hcloud-go/v2 to v2.41.2 (#9026)
• db82162 fix(deps): update aws-sdk-go-v2 monorepo (#9031)
• 5a3e533 fix(deps): update module github.com/aws/smithy-go to v1.26.0 (#9032)
• c67843c otelhttp: Remove custom wrapper after handling request (#6914)
• c0a4135 docs(otelhttptrace): add performance guidance for WithoutSubSpans (#8785)
• a51a867 otelconf: implement cardinality_limits support in PeriodicMetricReader (#8885)
• dead6e5 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (#8994)
• 979ce18 chore(deps): update module github.com/jgautheron/goconst to v1.10.2 (#9030)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.42.0 to 1.44.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.44.0/0.66.0/0.20.0/0.0.17] 2026-05-27

Added

• Add ByteSlice and ByteSliceValue functions for new BYTESLICE attribute type in go.opentelemetry.io/otel/attribute. (#7948)
• Apply attribute value limit to the KindBytes attribute type in go.opentelemetry.io/otel/sdk/log. (#7990)
• Apply attribute value limit to the BYTESLICE attribute type in go.opentelemetry.io/otel/sdk/trace. (#7990)
• Support BYTESLICE attributes in go.opentelemetry.io/otel/trace. (#8153)
• Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8153)
• Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8153)
• Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8153)
• Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8153)
• Add String method for Value type in go.opentelemetry.io/otel/attribute. (#8142)
• Add Slice and SliceValue functions for new SLICE attribute type in go.opentelemetry.io/otel/attribute. (#8166)
• Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#8216)
• Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#8216)
• Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#8216)
• Support SLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#8216)
• Apply AttributeValueLengthLimit to attribute.SLICE type attribute values in go.opentelemetry.io/otel/sdk/trace, recursively truncating contained string values. (#8217)
• Add Error field on Record type in go.opentelemetry.io/otel/log/logtest. (#8148)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#8157)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8157)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#8157)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#8157)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#8157)
• Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8157)
• Add Settable to go.opentelemetry.io/otel/metric/x to allow reusing attribute options. (#8178)
• Add experimental support for splitting metric data across multiple batches in go.opentelemetry.io/otel/sdk/metric. Set OTEL_GO_X_METRIC_EXPORT_BATCH_SIZE=<max_size> to enable for all periodic readers. See go.opentelemetry.io/otel/sdk/metric/internal/x for feature documentation. (#8071)
• Add experimental self-observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. Enable with OTEL_GO_X_OBSERVABILITY=true environment variable. See go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/x for feature documentation. (#8192)
• Add experimental self-observability metrics in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. Enable with OTEL_GO_X_OBSERVABILITY=true environment variable. See go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrich...

  Description has been truncated

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.