[release-v1.23][gomod]: Bump the minor group across 1 directory with 21 updates by dependabot[bot] · Pull Request #1778 · openshift-knative/serving

dependabot · 2026-09-14T01:32:27Z

Bumps the minor group with 6 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.16.3`	`1.21.2`
github.com/google/go-containerregistry	`0.20.3`	`0.22.1`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.69.0`	`0.71.0`
go.opentelemetry.io/contrib/instrumentation/runtime	`0.69.0`	`0.71.0`
golang.org/x/sync	`0.22.0`	`0.23.0`
golang.org/x/sys	`0.47.0`	`0.48.0`

Updates github.com/cert-manager/cert-manager from 1.16.3 to 1.21.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.21.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.2 fixes controller and webhook panics, data races, ACME renewal and HTTP-01 solver bugs, and a Gateway API dnsNames bug. It stops the ACME and Vault issuers copying untrusted HTTP response bodies into status conditions and Events, and tightens ambient AWS credential use for namespaced Vault Issuers. It also updates Go and several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

ACME Issuer response bodies are no longer reflected into Issuer status conditions or Kubernetes Events. Only ACME problem documents are surfaced (bounded in length); other responses are reported by HTTP status code alone, with the full error available in the controller logs. (#9239, @FelixPhipps)

Cap ACME server response bodies at 16 MiB to guard against unbounded-body denial-of-service. (#9222, @FelixPhipps)

De-duplicate dnsNames when multiple Gateway/ListenerSet listeners share a Secret (#9234, @speer)

Fix certificate renewal windows using February 29 cron schedules across non-leap century years. (#9240, @wieghx)

Fix validating webhook panics when AdmissionReview requests omit optional fields, by routing identity, approval, and resource validation on the always-present Resource/SubResource fields and denying (rather than silently allowing) requests with an unset or mismatched resource. As a side effect, validation is now also enforced for equivalent-converted requests on non-v1 API versions, which previously could skip validation. (#9235, @lunarwhite)

Fixed HTTP-01 solver cleanup so that a solver ingress, pod or service that has already been deleted no longer fails the cleanup with a NotFound error. (#9278, @arpitjain099)

Fixed a bug where replaces field was being populated for the wrong issuer on issuer changes (#9236, @hjoshi123)

Fixed a data race in the ACME HTTP-01 self-check that could occur when custom DNS servers were configured. (#9313, @shashankvarma499)

Fixed a panic in the certificates-issuing controller when a CertificateRequest has a failure time set but no Ready condition. (#9238, @thc1006)

Fixed a race in pkg/scheduler where the cleanup of a fired timer could cancel a newer timer scheduled for the same object, silently dropping a rescheduled poll. (#9312, @shashankvarma499)

Fixed an issue where the body of a non-Vault HTTP response from spec.vault.server could be copied into the Vault Issuer's Ready condition and its Kubernetes Events. Such responses now report only the HTTP status code, and Vault's own error messages are truncated before being persisted. (#9262, @FelixPhipps)

Ingress-shim no longer removes the applyset label from cached Ingress and Gateway objects (#9314, @KR-Ravindra)

The ACME HTTP-01 self-check no longer reflects the fetched response body in Challenge.status.reason, preventing disclosure of internal response contents reachable via redirects. The response is still available in the controller's debug logs. (#9232, @FelixPhipps)

The vault issuer no longer authenticates to Vault using the cert-manager controller's ambient AWS credentials for AWS IAM auth on a namespaced Issuer, unless ambient credentials are explicitly enabled via --issuer-ambient-credentials. ClusterIssuer and explicit serviceAccountRef (IRSA) configurations are unaffected. (#9231, @FelixPhipps)

Other (Cleanup or Flake)

Upgrade Go to 1.26.6, which includes security fixes to the go command, and the crypto/tls, encoding/asn1, encoding/xml, html/template, net, net/http, and net/url packages. (#9151, @wallrj)

Upgrade Go to 1.26.8. (#9323, @wallrj)

Bump google.golang.org/grpc to v1.83.2 to fix reported security vulnerabilities (#9255, #9317)

Bump golang.org/x/crypto to v0.56.0 to fix reported security vulnerabilities (#9265)

v1.21.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.21.1 fixes a controller panic for Certificates with spec.renewal.policy: Disabled, a regression in 1.21.0 which caused log spam and dropped Secret informer events, Issuers and ClusterIssuers getting stuck at Ready=False (InvalidSolver) when a referenced ACME DNS-01 solver Secret is created after the Issuer, and the commented Gateway API example in the Helm chart values. It also updates several dependencies to fix reported security vulnerabilities.

All users should upgrade.

Changes by Kind

Bug or Regression

Avoid controller panic if a Certificate sets spec.renewal.policy=Disabled (#9038, @sklirg)

Fix Issuer/ClusterIssuer stuck at Ready=False/InvalidSolver after a missing ACME DNS-01 solver Secret is created (#9083, @SebTardif)

Fix log spam and dropped Secret informer events for non-cert-manager Secrets, caused by a generics regression introduced in 1.21.0. (#9037, @wallrj-cyberark)

Fixed the commented Gateway API config example in the Helm chart values to use gatewayAPI.enabled instead of the invalid gatewayAPI.enable. (#9012, @mateenali66)

Other (Cleanup or Flake)

... (truncated)

Commits

922a06a Merge pull request #9323 from wallrj/release-1.21-go-1.26.8
c5e1f72 Merge pull request #9326 from cert-manager/renovate/release-1.21-base-images
e5e15f8 chore(deps): update base images
4c0e4d2 Merge pull request #9321 from cert-manager-bot/cherry-pick-9320-to-release-1.21
1d69000 Update vendored Go to 1.26.8
8fdd7dc Merge pull request #9317 from cert-manager/renovate/release-1.21-go-google.go...
37fd8f8 fix(e2e): give each SelfSigned CSR spec its own Secret
5badcbd certificate-shim: do not mutate the cached object's labels (#9303) (#9314)
e4abe87 chore(deps): update module google.golang.org/grpc to v1.83.2 [security]
04e9f2b fix(acme): make the custom DNS server rotation counter atomic (#9273) (#9313)
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.3 to 0.22.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.22.1

What's Changed

Reject non-canonical IP literals in all SSRF guards by @shaggyinsomniac in google/go-containerregistry#2426

daemon: fix stale docker/docker reference in WithClient docs by @BobDu in google/go-containerregistry#2428

build(deps): bump the go-deps group across 2 directories with 4 updates by @dependabot[bot] in google/go-containerregistry#2422

authn: do not overwrite AuthConfig.Auth when username and password are empty by @nileshpatil6 in google/go-containerregistry#2420

build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in google/go-containerregistry#2423

Support pulling images by sha512 digest by @BobDu in google/go-containerregistry#2427

Allow empty label and annotation values in crane mutate by @theadsingh in google/go-containerregistry#2418

fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml by @tprussak in google/go-containerregistry#2434

validate: support index attestation manifests and empty configs by @Subserial in google/go-containerregistry#2414

name: improve error when parsing a reference with a URL scheme by @locker95 in google/go-containerregistry#2431

fix(build): install binaries to /ko-app and add to PATH (#2424) by @tprussak in google/go-containerregistry#2436

fix(release): honor declared Go toolchain by @rksharma-owg in google/go-containerregistry#2435

remote: apply checkRedirectSSRF to writer-side HTTP clients by @locker95 in google/go-containerregistry#2432

flatten: preserve config and layer media types when flattening by @Subserial in google/go-containerregistry#2438

fix(mutate): make Time layer updates lazy by @amarkdotdev in google/go-containerregistry#2429

build(deps): bump the go-deps group across 2 directories with 3 updates by @dependabot[bot] in google/go-containerregistry#2439

remote: copy manifest annotations to referrers fallback tag descriptors by @codysoyland in google/go-containerregistry#2441

New Contributors

@shaggyinsomniac made their first contribution in google/go-containerregistry#2426

@BobDu made their first contribution in google/go-containerregistry#2428

@nileshpatil6 made their first contribution in google/go-containerregistry#2420

@theadsingh made their first contribution in google/go-containerregistry#2418

@locker95 made their first contribution in google/go-containerregistry#2431

@rksharma-owg made their first contribution in google/go-containerregistry#2435

@codysoyland made their first contribution in google/go-containerregistry#2441

Full Changelog: google/go-containerregistry@v0.22.0...v0.22.1

v0.22.0

What's Changed

mutate: let Time and Canonical take tarball.LayerOption by @mzihlmann in google/go-containerregistry#2403

build: add multi-architecture Cloud Build configurations for crane, gcrane, and krane by @tprussak in google/go-containerregistry#2412

remote: resolve push-check credentials against the repository by @mzihlmann in google/go-containerregistry#2411

Allow single-character repository paths by @semx in google/go-containerregistry#2407

fix: add missing substitutions and workspace cleanup to new build files by @tprussak in google/go-containerregistry#2413

remote: retry failed Puller and Pusher initialization by @iahsanGill in google/go-containerregistry#2406

build(deps): bump the actions group across 1 directory with 8 updates by @dependabot[bot] in google/go-containerregistry#2405

build(deps): bump the go-deps group across 1 directory with 3 updates by @dependabot[bot] in google/go-containerregistry#2415

go.mod: bump Go version + add toolchain directive to replace .go-version file by @Subserial in google/go-containerregistry#2416

fix: Fix new build options and provenance by @tprussak in google/go-containerregistry#2417

fix(build): unify new build flow into cloudbuild_v2.yaml by @tprussak in google/go-containerregistry#2419

New Contributors

@mzihlmann made their first contribution in google/go-containerregistry#2403

@tprussak made their first contribution in google/go-containerregistry#2412

@semx made their first contribution in google/go-containerregistry#2407

... (truncated)

Commits

8a72a42 remote: copy manifest annotations to referrers fallback tag descriptors (#2441)
5765c35 build(deps): bump the go-deps group across 2 directories with 3 updates (#2439)
969402f fix(mutate): make Time layer updates lazy (#2429)
25c682e flatten: preserve config and layer media types when flattening (#2438)
79af990 remote: add SSRF redirect protection to writer-side HTTP clients (#2432)
4b9b3c7 fix(release): honor declared Go toolchain (#2435)
e033b9c fix(build): install binaries to /ko-app and add to PATH (#2424) (#2436)
8bd7902 name: return a helpful error when a reference contains a URL scheme (#2431)
163134d validate: support index attestation manifests and empty configs (#2414)
44f7ea3 fix(build): Use dependencies.gitSource in cloudbuild_v2.yaml (#2434)
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.69.0 to 0.71.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9139)

Support testing of [Go 1.27]. (#9524)

Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#9001)

Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#9292)

Deprecated

Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#9136)

Fixed

Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#9387)

Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#9395)

Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (#9429)

Reject OTLP exporter headers with an empty name in go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/otelconf/x, and go.opentelemetry.io/contrib/otelconf/v0.3.0, instead of forwarding invalid header names to OTLP exporters. (#9102)

go.opentelemetry.io/contrib/detectors/aws/lambda no longer returns an error when run outside of an AWS Lambda environment, matching the no-op behavior of other resource detectors. (#9464)

Convert Prometheus untyped metrics to OTLP Gauges in go.opentelemetry.io/contrib/bridges/prometheus. (#9099)

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

... (truncated)

Commits

c4c6248 Release v1.46.0/v2.5.3/v0.71.0/v0.37.3/v0.26.0/v0.20.1/v0.16.3/v0.18.0 (#9563)
11c8a13 fix(deps): update aws-sdk-go-v2 monorepo
0458b9d chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/ht...
638a0d5 fix(deps): update module github.com/moby/moby/api to v1.55.0
5089aa5 chore(deps): update googleapis to da73d73
a50857b chore(deps): update jaegertracing/jaeger docker tag to v2.20.0
aa4f4a5 chore(deps): update open-telemetry/shared-workflows action to v0.11.0
ccbbc14 fix(deps): update module github.com/aws/smithy-go to v1.28.0
9312464 chore(deps): update module github.com/docker/go-connections to v0.8.1
36c3b00 chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/runtime from 0.69.0 to 0.71.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/runtime's changelog.

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

Add support for the aws.ec2 resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9139)

Support testing of [Go 1.27]. (#9524)

Add go.opentelemetry.io/contrib/detectors/docker, a resource detector for Docker, ported from processor/resourcedetectionprocessor/internal/docker in opentelemetry-collector-contrib. (#9001)

Add S3AttributeBuilder to go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws that sets S3-specific span attributes following the OpenTelemetry S3 semantic conventions. (#9292)

Deprecated

Deprecate go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho. Use github.com/labstack/echo-opentelemetry instead. (#9136)

Fixed

Record error.type attribute on server spans in go.opentelemetry.io/contrib/instrumentation/github.com/emicklei/go-restful/otelrestful when a request is cancelled or ends in a 5xx error. (#9387)

Report ot-baggage-* extraction errors from go.opentelemetry.io/contrib/propagators/ot to otel.Handle instead of silently discarding them, while still attaching the successfully parsed baggage members to the context. (#9395)

Set error.type on the rpc.client.call.duration and rpc.server.call.duration metrics in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc when the RPC fails with a non-OK status, per the RPC semantic conventions. (#9429)

Reject OTLP exporter headers with an empty name in go.opentelemetry.io/contrib/otelconf, go.opentelemetry.io/contrib/otelconf/x, and go.opentelemetry.io/contrib/otelconf/v0.3.0, instead of forwarding invalid header names to OTLP exporters. (#9102)

go.opentelemetry.io/contrib/detectors/aws/lambda no longer returns an error when run outside of an AWS Lambda environment, matching the no-op behavior of other resource detectors. (#9464)

Convert Prometheus untyped metrics to OTLP Gauges in go.opentelemetry.io/contrib/bridges/prometheus. (#9099)

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)

Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)

Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)

The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)

Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)

Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)

Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)

Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)

Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)

Add azurecontainerapps resource detector for Azure Container Apps. (#8939)

Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)

Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)

Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)

Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)

... (truncated)

Commits

c4c6248 Release v1.46.0/v2.5.3/v0.71.0/v0.37.3/v0.26.0/v0.20.1/v0.16.3/v0.18.0 (#9563)
11c8a13 fix(deps): update aws-sdk-go-v2 monorepo
0458b9d chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/ht...
638a0d5 fix(deps): update module github.com/moby/moby/api to v1.55.0
5089aa5 chore(deps): update googleapis to da73d73
a50857b chore(deps): update jaegertracing/jaeger docker tag to v2.20.0
aa4f4a5 chore(deps): update open-telemetry/shared-workflows action to v0.11.0
ccbbc14 fix(deps): update module github.com/aws/smithy-go to v1.28.0
9312464 chore(deps): update module github.com/docker/go-connections to v0.8.1
36c3b00 chore(deps): update module github.com/felixge/httpsnoop to v1.1.0
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.44.0 to 1.46.0

Release notes

Sourced from go.opentelemetry.io/otel's releases.

v1.46.0/v0.68.0/v0.22.0/v0.0.19

This release is the last to support Go 1.25. The next release will require at least Go 1.26.

Added

Support testing of Go 1.27. (#8811)

Support http/json protocol in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8273, #8775, #8831)

Add Hasher struct and methods in go.opentelemetry.io/otel/attribute to compute authoritative Distinct hashes incrementally for attribute filtering and deduplication. (#8598)

Changed

Lazily evaluate filtered and dropped attributes on measurement hot paths in go.opentelemetry.io/otel/sdk/metric to avoid unnecessary attribute set allocations. (#8598)

Add ErrExporterShutdown to go.opentelemetry.io/otel/sdk/log and return it from the go.opentelemetry.io/otel/exporters/stdout/stdoutlog, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp exporters when Export is called after Shutdown. (#8773)

Clarify in go.opentelemetry.io/otel/log that calling Logger.Enabled is optional and that cached results can become stale. (#8764)

Fixed

Export dropped attribute counts in OTLP log records from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8829)

Name span events created from OpenTracing logs after the event log field, falling back to log, instead of always using an empty name in go.opentelemetry.io/otel/bridge/opentracing. (#8648)

Count exception attributes omitted due to the attribute count limit as dropped in go.opentelemetry.io/otel/sdk/log. (#8796)

Prevent log record and instrumentation scope attributes with empty keys from reaching processors and exporters in go.opentelemetry.io/otel/sdk/log. (#8797)

Fix a data race when span attributes are read concurrently in go.opentelemetry.io/otel/sdk/trace. (#8706)

Prevent a panic in (*Set).Filter when called on a nil receiver in go.opentelemetry.io/otel/attribute. (#8792)

The simple span and log processors record otel.sdk.processor.{span,log}.processed when the record is submitted to the exporter instead of after the export completes, and no longer set error.type from the export outcome, in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8705)

Prevent Resource.MarshalLog from panicking on nil resources in go.opentelemetry.io/otel/sdk/resource. (#8758)

What's Changed

chore(deps): update github/codeql-action action to v4.37.6 by @renovate[bot] in open-telemetry/opentelemetry-go#8697

chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.64.0 by @renovate[bot] in open-telemetry/opentelemetry-go#8698

chore(deps): update golang.org/x/telemetry digest to bdd03c3 by @renovate[bot] in open-telemetry/opentelemetry-go#8699

fix(deps): update module go.opentelemetry.io/collector/pdata to v1.64.0 by @renovate[bot] in open-telemetry/opentelemetry-go#8700

chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.30.0 by @renovate[bot] in open-telemetry/opentelemetry-go#8701

chore(deps): update module github.com/rogpeppe/go-internal to v1.16.0 by @renovate[bot] in open-telemetry/opentelemetry-go#8702

chore(deps): update module github.com/cloudflare/circl to v1.6.5 by @renovate[bot] in open-telemetry/opentelemetry-go#8703

Record processor.{span,log}.processed before invoking the exporter in simple processors by @cijothomas in open-telemetry/opentelemetry-go#8705

perf(sdk/metric): reduce benchmark suite execution time (#8683) by @dashpole in open-telemetry/opentelemetry-go#8688

chore(deps): update codspeedhq/action action to v5.0.3 by @renovate[bot] in open-telemetry/opentelemetry-go#8710

attempt 2: Lazily compute filtered and dropped attributes by @dashpole in open-telemetry/opentelemetry-go#8598

fix(deps): update googleapis to c8921c7 by @renovate[bot] in open-telemetry/opentelemetry-go#8712

chore(deps): update module github.com/santhosh-tekuri/jsonschema/v6 to v6.0.3 by @renovate[bot] in open-telemetry/opentelemetry-go#8708

chore(deps): update github.com/charmbracelet/ultraviolet digest to 402eeaa by @renovate[bot] in open-telemetry/opentelemetry-go#8716

chore(deps): update module github.com/dlclark/regexp2/v2 to v2.6.0 by @renovate[bot] in open-telemetry/opentelemetry-go#8715

chore(deps): update mvdan.cc/unparam digest to a64391f by @renovate[bot] in open-telemetry/opentelemetry-go#8717

fix(deps): update golang.org/x to a8b543c by @renovate[bot] in open-telemetry/opentelemetry-go#8720

fix(deps): update googleapis to ec0a776 by @renovate[bot] in open-telemetry/opentelemetry-go#8719

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.46.0/0.68.0/0.22.0/0.0.19] - 2026-08-25

This release is the last to support [Go 1.25]. The next release will require at least [Go 1.26].

Added

Support testing of [Go 1.27]. (#8811)

Support http/json protocol in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#8273, #8775, #8831)

Add Hasher struct and methods in go.opentelemetry.io/otel/attribute to compute authoritative Distinct hashes incrementally for attribute filtering and deduplication. (#8598)

Changed

Lazily evaluate filtered and dropped attributes on measurement hot paths in go.opentelemetry.io/otel/sdk/metric to avoid unnecessary attribute set allocations. (#8598)

Add ErrExporterShutdown to go.opentelemetry.io/otel/sdk/log and return it from the go.opentelemetry.io/otel/exporters/stdout/stdoutlog, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc, and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp exporters when Export is called after Shutdown. (#8773)

Clarify in go.opentelemetry.io/otel/log that calling Logger.Enabled is optional and that cached results can become stale. (#8764)

Fixed

Export dropped attribute counts in OTLP log records from go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc and go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#8829)

Name span events created from OpenTracing logs after the event log field, falling back to log, instead of always using an empty name in go.opentelemetry.io/otel/bridge/opentracing. (#8648)

Count exception attributes omitted due to the attribute count limit as dropped in go.opentelemetry.io/otel/sdk/log. (#8796)

Prevent log record and instrumentation scope attributes with empty keys from reaching processors and exporters in go.opentelemetry.io/otel/sdk/log. (#8797)

Fix a data race when span attributes are read concurrently in go.opentelemetry.io/otel/sdk/trace. (#8706)

Prevent a panic in (*Set).Filter when called on a nil receiver in go.opentelemetry.io/otel/attribute. (#8792)

The simple span and log processors record otel.sdk.processor.{span,log}.processed when the record is submitted to the exporter instead of after the export completes, and no longer set error.type from the export outcome, in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#8705)

Prevent Resource.MarshalLog from panicking on nil resources in go.opentelemetry.io/otel/sdk/resource. (#8758)

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Add experimental observability metrics to BatchProcessor in go.openteleme... Description has been truncated

…21 updates Bumps the minor group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.16.3` | `1.21.2` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.3` | `0.22.1` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.71.0` | | [go.opentelemetry.io/contrib/instrumentation/runtime](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.71.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.22.0` | `0.23.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.47.0` | `0.48.0` | Updates `github.com/cert-manager/cert-manager` from 1.16.3 to 1.21.2 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.16.3...v1.21.2) Updates `github.com/google/go-containerregistry` from 0.20.3 to 0.22.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.20.3...v0.22.1) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.69.0 to 0.71.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.71.0) Updates `go.opentelemetry.io/contrib/instrumentation/runtime` from 0.69.0 to 0.71.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.71.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/metric` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `go.opentelemetry.io/otel/trace` from 1.44.0 to 1.46.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.46.0) Updates `golang.org/x/sync` from 0.22.0 to 0.23.0 - [Commits](golang/sync@v0.22.0...v0.23.0) Updates `golang.org/x/sys` from 0.47.0 to 0.48.0 - [Commits](golang/sys@v0.47.0...v0.48.0) Updates `golang.org/x/time` from 0.10.0 to 0.15.0 - [Commits](golang/time@v0.10.0...v0.15.0) Updates `google.golang.org/api` from 0.198.0 to 0.286.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.198.0...v0.286.0) Updates `google.golang.org/grpc` from 1.82.1 to 1.83.2 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.82.1...v1.83.2) Updates `k8s.io/api` from 0.35.7 to 0.36.2 - [Commits](kubernetes/api@v0.35.7...v0.36.2) Updates `k8s.io/apiextensions-apiserver` from 0.35.7 to 0.36.2 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.35.7...v0.36.2) Updates `k8s.io/apimachinery` from 0.35.7 to 0.36.2 - [Commits](kubernetes/apimachinery@v0.35.7...v0.36.2) Updates `k8s.io/client-go` from 0.35.7 to 0.36.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.7...v0.36.2) Updates `k8s.io/code-generator` from 0.35.7 to 0.36.2 - [Commits](kubernetes/code-generator@v0.35.7...v0.36.2) Updates `k8s.io/kube-openapi` from 0.0.0-20250910181357-589584f1c912 to 0.0.0-20260501160325-927ab1f70cd6 - [Commits](https://github.com/kubernetes/kube-openapi/commits) Updates `k8s.io/utils` from 0.0.0-20251002143259-bc988d571ff4 to 0.0.0-20260626114624-be93311217bd - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-version: 1.21.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/google/go-containerregistry dependency-version: 0.22.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-version: 0.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/contrib/instrumentation/runtime dependency-version: 0.71.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.46.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: golang.org/x/sync dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: golang.org/x/sys dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: golang.org/x/time dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: google.golang.org/api dependency-version: 0.286.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: google.golang.org/grpc dependency-version: 1.83.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/api dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/apimachinery dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/client-go dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/code-generator dependency-version: 0.36.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/kube-openapi dependency-version: 0.0.0-20260501160325-927ab1f70cd6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260626114624-be93311217bd dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

openshift-ci · 2026-09-14T01:32:39Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci · 2026-09-14T01:32:43Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign kaustubh-pande for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 14, 2026

openshift-ci Bot added the needs-ok-to-test label Sep 14, 2026

openshift-ci Bot requested review from dsimansk and mvinkler September 14, 2026 01:32

Run make generate-release

93cc561

Navigation Menu

[release-v1.23][gomod]: Bump the minor group across 1 directory with 21 updates - #1778

[release-v1.23][gomod]: Bump the minor group across 1 directory with 21 updates#1778
dependabot[bot] wants to merge 2 commits into
release-v1.23from
dependabot/go_modules/release-v1.23/minor-674cb18abc

dependabot Bot commented on behalf of github Sep 14, 2026

Uh oh!

openshift-ci Bot commented Sep 14, 2026

Uh oh!

openshift-ci Bot commented Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Sep 14, 2026

v1.21.2

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

v1.21.1

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

v0.22.1

What's Changed

New Contributors

v0.22.0

What's Changed

New Contributors

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

Added

Deprecated

Fixed

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Changed

[1.46.0/2.5.3/0.71.0/0.37.3/0.26.0/0.20.1/0.16.3/0.18.0] - 2026-08-25

Added

Deprecated

Fixed

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

Changed

v1.46.0/v0.68.0/v0.22.0/v0.0.19

Added

Changed

Fixed

What's Changed

[1.46.0/0.68.0/0.22.0/0.0.19] - 2026-08-25

Added

Changed

Fixed

[1.45.0/0.67.0/0.21.0/0.0.18] - 2026-08-03

Added

Uh oh!

openshift-ci Bot commented Sep 14, 2026

Uh oh!

openshift-ci Bot commented Sep 14, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants