Skip to content

build(deps): Upgrade otelcollector to v0.129.0#1228

Closed
azure-monitor-assistant[bot] wants to merge 5 commits into
grace/improve-upgrade-botfrom
bot/otelcollector-upgrade-v0.129.0
Closed

build(deps): Upgrade otelcollector to v0.129.0#1228
azure-monitor-assistant[bot] wants to merge 5 commits into
grace/improve-upgrade-botfrom
bot/otelcollector-upgrade-v0.129.0

Conversation

@azure-monitor-assistant
Copy link
Copy Markdown
Contributor

This PR upgrades the otelcollector to the latest version available for the opentelemetry-collector and opentelemetry-operator.

It was automatically generated by the GitHub Actions workflow.

The summary of the OSS changelog is below:

Prometheusreceiver Changes

v0.127.0 to v0.129.0

Generated on: 2025-07-18 22:26:21


v0.129.0

  • [FEATURE] prometheusreceiver: Promote the receiver.prometheusreceiver.RemoveLegacyResourceAttributes featuregate to stable (#40572) It has been beta since v0.126.0
  • [BUG FIX] prometheusreceiver: Fix invalid metric name validation error in scrape start from target allocator. (#35459, #40788) Prometheus made setting metric_name_validation_scheme, metric_name_escaping_scheme mandatory mandatory, use sane defaults.

Summary

Category Count
Breaking Changes 0
Features 1
Bug Fixes 1
Other Changes 0
Total 2

Target-allocator Changes

v0.127.0 to v0.129.1

Generated on: 2025-07-18 22:26:34


0.129.1

  • [BREAKING] targetallocator, collector: Remove stable feature gate PrometheusOperatorIsAvailable (#4141)
  • [FEATURE] target allocator: Adds support for HTML output in the target allocator. (#3622)
  • [BUG FIX] target allocator: ensure stable iteration order of target labels when generating hash (#4082)
  • [BUG FIX] target allocator: Fix OpenShift must-gather for Target Allocator (#4084)

Summary

Category Count
Breaking Changes 1
Features 1
Bug Fixes 2
Other Changes 0
Total 4

dependabot Bot added 3 commits July 18, 2025 10:16
…1.37.0 in /internal/referenceapp/golang (#1221)

Bumps
[go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go)
from 1.36.0 to 1.37.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel/sdk/metric's
changelog</a>.</em></p>
<blockquote>
<h2>[1.37.0/0.59.0/0.13.0] 2025-06-25</h2>
<h3>Added</h3>
<ul>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.33.0</code> package.
The package contains semantic conventions from the <code>v1.33.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.33.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.32.0.</code>(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6799">#6799</a>)</li>
<li>The <code>go.opentelemetry.io/otel/semconv/v1.34.0</code> package.
The package contains semantic conventions from the <code>v1.34.0</code>
version of the OpenTelemetry Semantic Conventions. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6812">#6812</a>)</li>
<li>Add metric's schema URL as <code>otel_scope_schema_url</code> label
in <code>go.opentelemetry.io/otel/exporters/prometheus</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/5947">#5947</a>)</li>
<li>Add metric's scope attributes as <code>otel_scope_[attribute]</code>
labels in <code>go.opentelemetry.io/otel/exporters/prometheus</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/5947">#5947</a>)</li>
<li>Add <code>EventName</code> to <code>EnabledParameters</code> in
<code>go.opentelemetry.io/otel/log</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6825">#6825</a>)</li>
<li>Add <code>EventName</code> to <code>EnabledParameters</code> in
<code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6825">#6825</a>)</li>
<li>Changed handling of
<code>go.opentelemetry.io/otel/exporters/prometheus</code> metric
renaming to add unit suffixes when it doesn't match one of the
pre-defined values in the unit suffix map. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6839">#6839</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/bridge/opentracing</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6827">#6827</a>)</li>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/exporters/zipkin</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6829">#6829</a>)</li>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/metric</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6832">#6832</a>)</li>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/sdk/resource</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6834">#6834</a>)</li>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6835">#6835</a>)</li>
<li>The semantic conventions have been upgraded from
<code>v1.26.0</code> to <code>v1.34.0</code> in
<code>go.opentelemetry.io/otel/trace</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6836">#6836</a>)</li>
<li><code>Record.Resource</code> now returns
<code>*resource.Resource</code> instead of
<code>resource.Resource</code> in
<code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6864">#6864</a>)</li>
<li>Retry now shows error cause for context timeout in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>,
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>,
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>,
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>,
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>,
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6898">#6898</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Stop stripping trailing slashes from configured endpoint URL in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6710">#6710</a>)</li>
<li>Stop stripping trailing slashes from configured endpoint URL in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6710">#6710</a>)</li>
<li>Stop stripping trailing slashes from configured endpoint URL in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6710">#6710</a>)</li>
<li>Stop stripping trailing slashes from configured endpoint URL in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6710">#6710</a>)</li>
<li>Validate exponential histogram scale range for Prometheus
compatibility in
<code>go.opentelemetry.io/otel/exporters/prometheus</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6822">#6822</a>)</li>
<li>Context cancellation during metric pipeline produce does not corrupt
data in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6914">#6914</a>)</li>
</ul>
<h3>Removed</h3>
<ul>
<li><code>go.opentelemetry.io/otel/exporters/prometheus</code> no longer
exports <code>otel_scope_info</code> metric. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6770">#6770</a>)</li>
</ul>
<h2>[0.12.2] 2025-05-22</h2>
<h3>Fixed</h3>
<ul>
<li>Retract <code>v0.12.0</code> release of
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
module that contains invalid dependencies. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6804">#6804</a>)</li>
<li>Retract <code>v0.12.0</code> release of
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>
module that contains invalid dependencies. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6804">#6804</a>)</li>
<li>Retract <code>v0.12.0</code> release of
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutlog</code> module
that contains invalid dependencies. (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6804">#6804</a>)</li>
</ul>
<h2>[0.12.1] 2025-05-21</h2>
<h3>Fixes</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/69e81088ad40f45a0764597326722dea8f3f00a8"><code>69e8108</code></a>
Release 1.37.0/0.59.0/0.13.0 (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6925">#6925</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/67ca271b2c716fa4b3cc3c9c9c76fa41a1d49429"><code>67ca271</code></a>
chore(deps): update golang.org/x/telemetry digest to fef9409 (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6929">#6929</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/b4fad0aef80597799f0760d516e18a849425e4c9"><code>b4fad0a</code></a>
chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to
v2.27...</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/553779c161e9bb7bbc1670b3a92a1bf3ceefb859"><code>553779c</code></a>
chore: add missing ) in GPG hyperlink (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6928">#6928</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/351a51f1ed18f0e35b1cf85400834d5c75d71322"><code>351a51f</code></a>
Use existing schema URLs in tests (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6924">#6924</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/a365d8505dcacd384f674bd8a69fa961d0be576a"><code>a365d85</code></a>
Add test for logging from a span in the opentracing bridge (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6919">#6919</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/787518f061916a334e0175cd7391f02ca5659ff1"><code>787518f</code></a>
chore(deps): update google.golang.org/genproto/googleapis/rpc digest to
513f2...</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/fbfb44a20ffb5d29bd5f6aab670832ed3ee4e7de"><code>fbfb44a</code></a>
chore(deps): update golang.org/x (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6923">#6923</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/98f76937b89ed889763a782428d5c5f499077c46"><code>98f7693</code></a>
chore: flatten bridge/opentracing/internal package (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6916">#6916</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/1b803e1a59be88aec93a2158def43b6964b7a9d5"><code>1b803e1</code></a>
fix(deps): update module github.com/prometheus/common to v0.65.0 (<a
href="https://github.com/open-telemetry/opentelemetry-go/issues/6921">#6921</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.36.0...v1.37.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel/sdk/metric&package-manager=go_modules&previous-version=1.36.0&new-version=1.37.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ternal/referenceapp/golang (#1226)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from
1.72.1 to 1.73.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's
releases</a>.</em></p>
<blockquote>
<h2>Release 1.73.0</h2>
<h1>New Features</h1>
<ul>
<li>balancer/ringhash: move LB policy from xds/internal to exported path
to facilitate use without xds (<a
href="https://github.com/grpc/grpc-go/issues/8249">#8249</a>)</li>
<li>xds: enable least request LB policy by default. It can be disabled
by setting <code>GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=false</code> in
your environment. (<a
href="https://github.com/grpc/grpc-go/issues/8253">#8253</a>)</li>
<li>grpc: add a <code>CallAuthority</code> Call Option that can be used
to overwrite the http <code>:authority</code> header on per-RPC basis.
(<a
href="https://github.com/grpc/grpc-go/issues/8068">#8068</a>)</li>
<li>stats/opentelemetry: add trace event for name resolution delay. (<a
href="https://github.com/grpc/grpc-go/issues/8074">#8074</a>)</li>
<li>health: added <code>List</code> method to gRPC Health service. (<a
href="https://github.com/grpc/grpc-go/issues/8155">#8155</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/marcoshuck"><code>@​marcoshuck</code></a></li>
</ul>
</li>
<li>ringhash: implement features from gRFC A76. (<a
href="https://github.com/grpc/grpc-go/issues/8159">#8159</a>)</li>
<li>xds: add functionality to support SPIFFE Bundle Maps as roots of
trust in XDS which can be enabled by setting
<code>GRPC_EXPERIMENTAL_XDS_MTLS_SPIFFE=true</code>. (<a
href="https://github.com/grpc/grpc-go/issues/8167">#8167</a>,
<a
href="https://github.com/grpc/grpc-go/issues/8180">#8180</a>,
<a
href="https://github.com/grpc/grpc-go/issues/8229">#8229</a>,
<a
href="https://github.com/grpc/grpc-go/issues/8343">#8343</a>)</li>
</ul>
<h1>Bug Fixes</h1>
<ul>
<li>xds: locality ID metric label is changed to make it consistent with
<a
href="https://github.com/grpc/proposal/blob/master/A78-grpc-metrics-wrr-pf-xds.md#optional-xds-locality-label">gRFC
A78</a>. (<a
href="https://github.com/grpc/grpc-go/issues/8256">#8256</a>)</li>
<li>client: fail RPCs on the client when using extremely short contexts
that expire before the <code>grpc-timeout</code> header is created. (<a
href="https://github.com/grpc/grpc-go/issues/8312">#8312</a>)</li>
<li>server: non-positive <code>grpc-timeout</code> header values are now
rejected. This is consistent with the <a
href="https://github.com/grpc/grpc/blob/master/doc/PROTOCOL-HTTP2.md#requests">gRPC
protocol spec</a>. (<a
href="https://github.com/grpc/grpc-go/issues/8290">#8290</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/evanj"><code>@​evanj</code></a></li>
</ul>
</li>
<li>xds: fix reported error string when LRS load reporting interval is
invalid. (<a
href="https://github.com/grpc/grpc-go/issues/8224">#8224</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/alingse"><code>@​alingse</code></a></li>
</ul>
</li>
</ul>
<h1>Performance Improvements</h1>
<ul>
<li>credentials/alts: improve read performance by optimizing buffer
copies and allocations. (<a
href="https://github.com/grpc/grpc-go/issues/8271">#8271</a>)</li>
<li>server: improve performance of RPC handling by avoid a status proto
copy (<a
href="https://github.com/grpc/grpc-go/issues/8282">#8282</a>)
<ul>
<li>Special Thanks: <a
href="https://github.com/evanj"><code>@​evanj</code></a></li>
</ul>
</li>
</ul>
<h1>Documentation</h1>
<ul>
<li>examples/features/opentelemetry: modify example to demonstrate
tracing using OpenTelemtry plugin. (<a
href="https://github.com/grpc/grpc-go/issues/8056">#8056</a>)</li>
</ul>
<h2>Release 1.72.2</h2>
<h1>Bug Fixes</h1>
<ul>
<li>client: restore support for <code>NO_PROXY</code> environment
variable when connecting to locally-resolved addresses (case 2 from <a
href="https://github.com/grpc/proposal/blob/master/A1-http-connect-proxy-support.md">gRFC
A1</a>). (<a
href="https://github.com/grpc/grpc-go/issues/8329">#8329</a>)</li>
<li>balancer/least_request: fix panic on resolver errors. (<a
href="https://github.com/grpc/grpc-go/issues/8333">#8333</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-go/commit/c52d02553f2649c28d0279bca17909a3a08de022"><code>c52d025</code></a>
Change version to 1.73.0 (<a
href="https://github.com/grpc/grpc-go/issues/8322">#8322</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/ac60db1864c340dee6e5718fad7dee439775766e"><code>ac60db1</code></a>
Add flag guarding SPIFFE Bundle provider (<a
href="https://github.com/grpc/grpc-go/issues/8343">#8343</a>)
(<a
href="https://github.com/grpc/grpc-go/issues/8382">#8382</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/183c148c4e63b5770c8b9bdfc7d38fc0811e2742"><code>183c148</code></a>
balancer/ringhash: Add experimental notice in package comment (<a
href="https://github.com/grpc/grpc-go/issues/8364">#8364</a>)
(<a
href="https://github.com/grpc/grpc-go/issues/8365">#8365</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/b610465ce4bd1af616bad0389185276fb8d19bb8"><code>b610465</code></a>
delegatingresolver: avoid proxy for resolved addresses in NO_PROXY env
(<a
href="https://github.com/grpc/grpc-go/issues/8329">#8329</a>...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/96c4308a9958ccd2bcaffffd53d8fa6c380058b7"><code>96c4308</code></a>
balancer/least_request : Fix panic while handling resolver errors (<a
href="https://github.com/grpc/grpc-go/issues/8333">#8333</a>)
(<a
href="https://github.com/grpc/grpc-go/issues/8">#8</a>...</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/af5146b69698317950518c934e9eb14341df6858"><code>af5146b</code></a>
grpc: update contributing.md (<a
href="https://github.com/grpc/grpc-go/issues/8318">#8318</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/09166b665e8b6442bc70e88cdef580da9e7b7b06"><code>09166b6</code></a>
cleanup: remove unused constants in generic xdsclient (<a
href="https://github.com/grpc/grpc-go/issues/8315">#8315</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/e3f13e75a60a13287fc537cb7974680f1eb99dc7"><code>e3f13e7</code></a>
transport: Prevent sending negative timeouts (<a
href="https://github.com/grpc/grpc-go/issues/8312">#8312</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/b89909b7bd0d9bd333aab291e90fec1fa8d45ce9"><code>b89909b</code></a>
leakcheck: Fix flaky test TestCheck (<a
href="https://github.com/grpc/grpc-go/issues/8309">#8309</a>)</li>
<li><a
href="https://github.com/grpc/grpc-go/commit/709023de87a25ae63b000139295af10589edffee"><code>709023d</code></a>
grpcsync/event: Simplify synchronization (<a
href="https://github.com/grpc/grpc-go/issues/8308">#8308</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-go/compare/v1.72.1...v1.73.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.72.1&new-version=1.73.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ollector/prometheus-ui (#1227)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.24.0 to 0.27.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/oauth2/commit/681b4d8edca1bcfea5bce685d77ea7b82ed3e7b3"><code>681b4d8</code></a>
jws: split token into fixed number of parts</li>
<li><a
href="https://github.com/golang/oauth2/commit/3f78298beea38fb76a3fbca33e3056f4b7eb5502"><code>3f78298</code></a>
all: upgrade go directive to at least 1.23.0 [generated]</li>
<li><a
href="https://github.com/golang/oauth2/commit/109dabf9017129171d1807e485ca5633ecd095ac"><code>109dabf</code></a>
endpoints: add links/provider for Discord</li>
<li><a
href="https://github.com/golang/oauth2/commit/ac571fa341c2a2b979d2b2c8341fd24767ef5d47"><code>ac571fa</code></a>
oauth2: fix docs for Config.DeviceAuth</li>
<li><a
href="https://github.com/golang/oauth2/commit/314ee5b92bf23c4973aa8e61eba3ff458e80eef2"><code>314ee5b</code></a>
endpoints: add patreon endpoint</li>
<li><a
href="https://github.com/golang/oauth2/commit/b9c813be7d0ec3262d46deb8677ba5cda93d95ec"><code>b9c813b</code></a>
google: add warning about externally-provided credentials</li>
<li><a
href="https://github.com/golang/oauth2/commit/49a531d12a9ad6fa9f5a070d577ac752ada772c9"><code>49a531d</code></a>
all: make method and struct comments match the names</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.24.0...v0.27.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.24.0&new-version=0.27.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/Azure/prometheus-collector/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@azure-monitor-assistant azure-monitor-assistant Bot force-pushed the bot/otelcollector-upgrade-v0.129.0 branch from c5168a0 to a22d439 Compare July 18, 2025 22:26
@azure-monitor-assistant
Copy link
Copy Markdown
Contributor Author

✅ Building the otelcollector and related go binaries succeeded. No breaking changes were detected.
The otelcollector was successfully upgraded to version v0.129.0.

@azure-monitor-assistant
Copy link
Copy Markdown
Contributor Author

CVE Changes Report

The following CVE changes were detected when upgrading to version v0.129.0:

=== CVE Changes Report ===
Removed CVEs:
  - CVE-2023-4806 from prometheusui with severity MEDIUM and package 
  - CVE-2025-22872 from prometheusui with severity MEDIUM and package golang.org/x/net
  - CVE-2024-33601 from  with severity HIGH and package 
  - CVE-2024-33600 from prometheusui with severity MEDIUM and package 
  - CVE-2024-33599 from  with severity HIGH and package 
  - CVE-2023-4527 from prometheusui with severity MEDIUM and package 
Added CVEs:

The trivyignore file was updated to ignore the new CVEs.

@azure-monitor-assistant
Copy link
Copy Markdown
Contributor Author

/azp run

@azure-pipelines
Copy link
Copy Markdown

Commenter does not have sufficient privileges for PR 1228 in repo Azure/prometheus-collector

@gracewehner gracewehner force-pushed the bot/otelcollector-upgrade-v0.129.0 branch 2 times, most recently from 621197c to 34dba7e Compare July 20, 2025 07:02
@gracewehner gracewehner force-pushed the bot/otelcollector-upgrade-v0.129.0 branch from 8153fe6 to 39661a2 Compare July 22, 2025 07:04
@gracewehner
Copy link
Copy Markdown
Contributor

Closing to re-run action

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant