Skip to content

chore(deps): eol unstable upgrades — 9 packages (unstable: 2 · minor: 7) [sticker-award]#253

Closed
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomainfrom
engraver-auto-version-upgrade/unstable/go/sticker-award/4-1776935578
Closed

chore(deps): eol unstable upgrades — 9 packages (unstable: 2 · minor: 7) [sticker-award]#253
gh-worker-campaigns-3e9aa4[bot] wants to merge 1 commit intomainfrom
engraver-auto-version-upgrade/unstable/go/sticker-award/4-1776935578

Conversation

@gh-worker-campaigns-3e9aa4
Copy link
Copy Markdown

Summary: Security update — 9 packages upgraded (UNSTABLE changes included)

Manifests changed:

  • sticker-award (go)

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.


Updates

Package From To Type Dep Type Vulnerabilities Fixed
github.com/testcontainers/testcontainers-go v0.38.0 v0.42.0 unstable Direct -
github.com/testcontainers/testcontainers-go/modules/kafka v0.38.0 v0.42.0 unstable Direct -
github.com/IBM/sarama v1.45.2 v1.47.0 minor Direct -
github.com/cenkalti/backoff/v4 v4.2.1 v4.3.0 minor Transitive -
github.com/shirou/gopsutil/v4 v4.25.8-0.20250809033336-ffcdc2b7662f v4.26.3 minor Transitive -
go.opentelemetry.io/auto/sdk v1.1.0 v1.2.1 minor Transitive -
go.opentelemetry.io/otel v1.38.0 v1.43.0 minor Transitive -
go.opentelemetry.io/otel/metric v1.38.0 v1.43.0 minor Transitive -
go.opentelemetry.io/otel/trace v1.38.0 v1.43.0 minor Transitive -

Packages marked with "-" are updated due to dependency constraints.


Security Details

⚠️ Dependencies that have Reached EOL (1)
Dependency Unsafe Version EOL Date New Version Path
github.com/cenkalti/backoff/v4 v4.2.1 Apr 17, 2026 v4.3.0 sticker-award/go.mod

Review Checklist

Standard review:

  • Review changes for compatibility with your code
  • Check for breaking changes in release notes
  • Run tests locally or wait for CI
  • Approve and merge this PR

Update Mode: EOL Remediation

🤖 Generated by DataDog Automated Dependency Management System

@campaigner-prod
Copy link
Copy Markdown
Contributor

Release Notes

github.com/testcontainers/testcontainers-go (v0.38.0 → v0.42.0) — GitHub Release

v0.42.0

What's Changed

⚠️ Breaking Changes

🔒 Security

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency updates

(truncated)

v0.41.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

(truncated)

v0.40.0

What's Changed

⚠️ Breaking Changes

(truncated — see source for full notes)

github.com/testcontainers/testcontainers-go/modules/kafka (v0.38.0 → v0.42.0) — GitHub Release

v0.42.0

What's Changed

⚠️ Breaking Changes

🔒 Security

🐛 Bug Fixes

🧹 Housekeeping

📦 Dependency updates

(truncated)

v0.41.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

(truncated)

v0.40.0

What's Changed

⚠️ Breaking Changes

(truncated — see source for full notes)

github.com/IBM/sarama (v1.45.2 → v1.47.0) — GitHub Release

v1.47.0

What's Changed

🎉 New Features / Improvements

🐛 Fixes

🔧 Maintenance

📦 Dependency updates

(truncated)

v1.46.3

What's Changed

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

Full Changelog: IBM/sarama@v1.46.2...v1.46.3

v1.46.2

What's Changed

A big focus on improving our support for newer protocol versions in this release, particularly supporting a wider range of flexible versions

🎉 New Features / Improvements

🐛 Fixes

(truncated)

v1.46.1

[!NOTE]
The go.mod directive has been bumped to 1.24.0 as the minimum version of Go required for the module. This was necessary to continue to receive updates from some of the third party dependencies that Sarama makes use of.

What's Changed

🎉 New Features / Improvements

🐛 Fixes

📦 Dependency updates

🔧 Maintenance

(truncated — see source for full notes)

github.com/shirou/gopsutil/v4 (v4.25.8-0.20250809033336-ffcdc2b7662f → v4.26.3) — GitHub Release

v4.26.3

Important Notice

The temporary opt-out option WillBeDeletedOptOutMemAvailableCalc, introduced in v4.25.8, has been removed in this release.

Code that relied on this option may fail to build. If so, please update your code to work with the current VirtualMemoryStat.Used calculation, as the opt-out mechanism is no longer available.

What's Changed

cpu

disk

host

load

mem

(truncated)

v4.26.2

What's Changed

disk

host

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.26.1...v4.26.2

v4.26.1

What's Changed

disk

host

mem

process

sensor

New Contributors

Full Changelog: shirou/gopsutil@v4.25.12...v4.26.1

v4.25.12

What's Changed

cpu

disk

host

mem

process

New Contributors

Full Changelog: shirou/gopsutil@v4.25.11...v4.25.12

v4.25.11

(truncated — see source for full notes)

go.opentelemetry.io/auto/sdk (v1.1.0 → v1.2.1) — Changelog

Fixed

go.opentelemetry.io/otel (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated — see source for full notes)

go.opentelemetry.io/otel/metric (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated — see source for full notes)

go.opentelemetry.io/otel/trace (v1.38.0 → v1.43.0) — GitHub Release

v1.43.0

Added

Changed

  • Introduce the EMPTY Type in go.opentelemetry.io/otel/attribute to reflect that an empty value is now a valid value, with INVALID remaining as a deprecated

(truncated)

v1.42.0

Added

Changed

Fixed

Removed

What's Changed

(truncated)

v1.41.0

This release is the last to support Go 1.24. The next release will require at least Go 1.25.

Added

Fixed

What's Changed

(truncated — see source for full notes)


Generated by ADMS Sources: 7 GitHub Releases, 1 Changelog, 1 not available.

@seberm-6
Copy link
Copy Markdown

Hey, sorry for the noise. This was caused by a bug in our automated dependency update system that incorrectly included upstream changelog content in PR comments, triggering notifications to external contributors. The feature flag has been turned off and we're working on a fix. Sorry about that again.

@campaigner-prod campaigner-prod Bot closed this Apr 23, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant