Skip to content

chore(deps): eol unstable upgrades — 7 packages (unstable: 1 · minor: 6) [sticker-award]#252

Closed
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomainfrom
engraver-auto-version-upgrade/unstable/go/sticker-award/3-1776935578
Closed

chore(deps): eol unstable upgrades — 7 packages (unstable: 1 · minor: 6) [sticker-award]#252
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomainfrom
engraver-auto-version-upgrade/unstable/go/sticker-award/3-1776935578

Conversation

@gh-worker-campaigns-3e9aa4
Copy link
Copy Markdown

Summary: Security update — 7 packages upgraded (UNSTABLE changes included)

Manifests changed:

  • sticker-award (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
github.com/testcontainers/testcontainers-go v0.38.0 v0.42.0 unstable Direct -
github.com/cenkalti/backoff/v4 v4.2.1 v4.3.0 minor Transitive -
github.com/shirou/gopsutil/v4 v4.25.8-0.20250809033336-ffcdc2b7662f v4.26.3 minor Transitive -
go.opentelemetry.io/auto/sdk v1.1.0 v1.2.1 minor Transitive -
go.opentelemetry.io/otel v1.38.0 v1.43.0 minor Transitive -
go.opentelemetry.io/otel/metric v1.38.0 v1.43.0 minor Transitive -
go.opentelemetry.io/otel/trace v1.38.0 v1.43.0 minor Transitive -

Packages marked with "-" are updated due to dependency constraints.


Security Details

⚠️ Dependencies that have Reached EOL (1)
Dependency Unsafe Version EOL Date New Version Path
github.com/cenkalti/backoff/v4 v4.2.1 Apr 17, 2026 v4.3.0 sticker-award/go.mod

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: EOL Remediation

🤖 Generated by DataDog Automated Dependency Management System

@campaigner-prod
Copy link
Copy Markdown
Contributor

Release Notes

github.com/testcontainers/testcontainers-go (v0.38.0 → v0.42.0) — GitHub Release

v0.42.0

What's Changed

⚠️ Breaking Changes

🔒 Security

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency updates

(truncated)

v0.41.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

(truncated)

v0.40.0

What's Changed

⚠️ Breaking Changes

The below modules receive a breaking change in the signature of their functional options, as now all of them return an error when needed (returning nil for success). Therefore, you're only affected when assigning the options to variables.

  • Old: type Option func(*options)
  • New: type Option func(*options) error

🚀 Features

🐛 Bug Fixes

📖 Documentation

(truncated — see source for full notes)

github.com/shirou/gopsutil/v4 (v4.25.8-0.20250809033336-ffcdc2b7662f → v4.26.3) — GitHub Release

v4.26.3

Important Notice

The temporary opt-out option WillBeDeletedOptOutMemAvailableCalc, introduced in v4.25.8, has been removed in this release.

Code that relied on this option may fail to build. If so, please update your code to work with the current VirtualMemoryStat.Used calculation, as the opt-out mechanism is no longer available.

What's Changed

cpu

disk

host

load

mem

(truncated)

v4.26.2

What's Changed

disk

host

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.26.1...v4.26.2

v4.26.1

What's Changed

disk

host

mem

process

sensor

New Contributors

Full Changelog: shirou/gopsutil@v4.25.12...v4.26.1

v4.25.12

What's Changed

cpu

disk

host

mem

process

New Contributors

Full Changelog: shirou/gopsutil@v4.25.11...v4.25.12

v4.25.11

What's Changed

cpu

disk

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.10...v4.25.11

(and 2 more releases — view all)

go.opentelemetry.io/auto/sdk (v1.1.0 → v1.2.1) — Changelog

Fixed

go.opentelemetry.io/otel (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated)

(and 2 more releases — view all)

go.opentelemetry.io/otel/metric (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated)

(and 2 more releases — view all)

go.opentelemetry.io/otel/trace (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated)

(and 2 more releases — view all)


Generated by ADMS Sources: 5 GitHub Releases, 1 Changelog, 1 not available.

@seberm-6
Copy link
Copy Markdown

Hey, sorry for the noise. This was caused by a bug in our automated dependency update system that incorrectly included upstream changelog content in PR comments, triggering notifications to external contributors. The feature flag has been turned off and we're working on a fix. Sorry about that again.

@campaigner-prod campaigner-prod Bot closed this Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant