fix(deps): update golang - autoclosed by renovate-bot · Pull Request #2954 · GoogleCloudPlatform/microservices-demo

renovate-bot · 2025-04-07T00:59:30Z

This PR contains the following updates:

Package	Change	Type	Update
cloud.google.com/go/alloydbconn	`v1.15.0` -> `v1.17.0`	require	minor
cloud.google.com/go/compute/metadata	`v0.6.0` -> `v0.9.0`	require	minor
cloud.google.com/go/profiler	`v0.4.2` -> `v0.4.3`	require	patch
cloud.google.com/go/secretmanager	`v1.14.6` -> `v1.16.0`	require	minor
github.com/go-playground/validator/v10	`v10.25.0` -> `v10.28.0`	require	minor
github.com/jackc/pgx/v5	`v5.7.4` -> `v5.7.6`	require	patch
go (source)	`1.24.3` -> `1.25.4`	toolchain	minor
go (source)	`1.24.1` -> `1.25.4`	toolchain	minor
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`v0.60.0` -> `v0.63.0`	require	minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.60.0` -> `v0.63.0`	require	minor
go.opentelemetry.io/otel	`v1.35.0` -> `v1.38.0`	require	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.35.0` -> `v1.38.0`	require	minor
go.opentelemetry.io/otel/sdk	`v1.35.0` -> `v1.38.0`	require	minor
golang.org/x/net	`v0.38.0` -> `v0.47.0`	require	minor
google.golang.org/grpc	`v1.71.0` -> `v1.77.0`	require	minor
google.golang.org/protobuf	`v1.36.6` -> `v1.36.10`	require	patch

Release Notes

googlecloudplatform/alloydb-go-connector (cloud.google.com/go/alloydbconn)

`v1.17.0`

Compare Source

Features

add support for login scope (#726) (6be93e2), closes #432
add support for WithCredentials option (#723) (73ec88a), closes #646

Bug Fixes

use correct short Instance URI form in logging (#719) (3cfa07f)

`v1.16.0`

Compare Source

Features

add support for per-dial IAM AuthN config (#713) (3f405d4)

`v1.15.6`

Compare Source

Bug Fixes

return error with conflicting credential opts (#705) (bb3dc3a)

`v1.15.5`

Compare Source

Bug Fixes

update dependencies to latest (#700) (dbc02c0)

`v1.15.4`

Compare Source

Bug Fixes

update dependencies to latest (#693) (86a621d)

`v1.15.3`

Compare Source

Bug Fixes

reduce the number of memory allocations and latency overhead (#686) (274ce04)

`v1.15.2`

Compare Source

Bug Fixes

update dependencies to latest (#680) (8962c17)

`v1.15.1`

Compare Source

Bug Fixes

configure Cloud Monitoring client correctly (#673) (91d86af)
shut down the internal exporter only once (#671) (16a6782), closes #776

googleapis/google-cloud-go (cloud.google.com/go/compute/metadata)

`v0.9.0`

Breaking changes to some autogenerated clients.
rpcreplay package added.

`v0.8.0`

Compare Source

profiler package added.
storage:
- Retry Objects.Insert call.
- Add ProgressFunc to WRiter.
pubsub: breaking changes:
- Publish is now asynchronous (announcement).
- Subscription.Pull replaced by Subscription.Receive, which takes a callback (announcement).
- Message.Done replaced with Message.Ack and Message.Nack.

`v0.7.0`

Compare Source

Release of a client library for Spanner. See
the
blog
post.
Note that although the Spanner service is beta, the Go client library is alpha.

go-playground/validator (github.com/go-playground/validator/v10)

`v10.28.0`: Release 10.28.0

Compare Source

What's Changed

Update workflow.yml to support 2 most recent major versions by @nodivbyzero in #1417
Bump actions/checkout from 4 to 5 by @dependabot[bot] in #1456
Go 1.25 support by @nodivbyzero in #1459
Bump github.com/gabriel-vasile/mimetype from 1.4.8 to 1.4.10 by @dependabot[bot] in #1463
Bump golang.org/x/text from 0.22.0 to 0.29.0 by @dependabot[bot] in #1464
Bump actions/setup-go from 5 to 6 by @dependabot[bot] in #1465
Bump golang.org/x/crypto from 0.33.0 to 0.42.0 by @dependabot[bot] in #1467
fix: should panic when define duplicate field param in required_if by @duyquang6 in #1468
Fixed missing keys from returned errors in map validation by @gelozr in #1284
Added https_url tag by @ahmedkamalio in #1461
docs: add description for 'port' validator by @nodivbyzero in #1435
Add alphaspace validator by @takaaa220 in #1343

New Contributors

@duyquang6 made their first contribution in #1468
@gelozr made their first contribution in #1284
@ahmedkamalio made their first contribution in #1461
@takaaa220 made their first contribution in #1343

Full Changelog: go-playground/validator@v10.27.0...v10.28.0

`v10.27.0`: Release 10.27.0

Compare Source

What's Changed

Fix Release version badge on README page by @nodivbyzero in #1406
fix russian E.164 error message by @prigornitskiy in #1349
chore: remove unnecessary statement by @qshuai in #1200
Re-enable several linters by @nodivbyzero in #1412
add support to tag validateFn by @peczenyj in #1363
Bump golang.org/x/crypto from 0.33.0 to 0.35.0 in /_examples/validate_fn by @dependabot in #1418
Bump golang.org/x/net from 0.34.0 to 0.38.0 in /_examples/validate_fn by @dependabot in #1419
Align required_without with the contract stated in the documentation by @jmfrees in #1422
Add translation example by @cxlblm in #1394
doc(errors): mention RegisterTagNameFunc for FieldError.Field by @khan-ajamal in #1358
Bump golangci/golangci-lint-action from 7 to 8 by @dependabot in #1425
feat(translation): add en translation for urn_rfc2141 by @ryanmalesic in #1431
fix: panics when private field is validated by @ykalchevskiy in #1423
Fix: support validation for map values with struct types by @JunaidIslam2105 in #1433
Omitzero does not work with slice and map bug by @JunaidIslam2105 in #1436
Fix: Validator panics when 'nil' is used along with required if for slices and maps by @JunaidIslam2105 in #1442
docs: typos by @eqsdxr in #1440
fix: make "file://" fail url validation by @bfabio in #1444
disable way too aggressive and disagreeable linters by @deankarn in #1445
use golangci lint file for disables by @deankarn in #1447

New Contributors

@prigornitskiy made their first contribution in #1349
@qshuai made their first contribution in #1200
@peczenyj made their first contribution in #1363
@jmfrees made their first contribution in #1422
@cxlblm made their first contribution in #1394
@khan-ajamal made their first contribution in #1358
@ryanmalesic made their first contribution in #1431
@ykalchevskiy made their first contribution in #1423
@JunaidIslam2105 made their first contribution in #1433
@eqsdxr made their first contribution in #1440
@bfabio made their first contribution in #1444

Full Changelog: go-playground/validator@v10.26.0...v10.27.0

`v10.26.0`

Compare Source

What's Changed

Use correct pointer in errors.As(). Fix "panic: errors: *target must be interface or implement error" in examples. by @antonsoroko in #1378
Create dependabot by @nodivbyzero in #1373
Bump golangci/golangci-lint-action from 4 to 6 by @dependabot in #1381
Bump golang.org/x/text from 0.21.0 to 0.22.0 by @dependabot in #1383
Bump golang.org/x/crypto from 0.32.0 to 0.33.0 by @dependabot in #1382
feat(translations): improve Indonesian translations and add tests by @fathiraz in #1376
Fix time.Duration translation error by @nodivbyzero in #1154
Update Project Status button by @nodivbyzero in #1380
Remove gitter.im link from README.md by @nodivbyzero in #1366
Docs: fix Base64RawURL usage by @196Ikuchil in #1336
Fix length check on dns_rfc1035_label tag by @KimNorgaard in #1214
Add Korean by @jkh0kr in #1338
add german translations by @max-weis in #1322
Update workflow to support the last three Go versions by @nodivbyzero in #1393
Fix: Nil pointer dereference in Arabic translations by @BlackSud0 in #1391
Translate to thai by @maetad in #1202
Feat: add EIN validation by @henrriusdev in #1384
Fix reference to parameter name in docs by @yegvla in #1400
use mail.ParseAddress to cover missing email validations by @eladb2011 in #1395
Update linter to v2.0.2 by @nodivbyzero in #1405

New Contributors

@antonsoroko made their first contribution in #1378
@dependabot made their first contribution in #1381
@fathiraz made their first contribution in #1376
@196Ikuchil made their first contribution in #1336
@KimNorgaard made their first contribution in #1214
@jkh0kr made their first contribution in #1338
@max-weis made their first contribution in #1322
@BlackSud0 made their first contribution in #1391
@maetad made their first contribution in #1202
@henrriusdev made their first contribution in #1384
@yegvla made their first contribution in #1400
@eladb2011 made their first contribution in #1395

Full Changelog: go-playground/validator@v10.25.0...v10.26.0

jackc/pgx (github.com/jackc/pgx/v5)

`v5.7.6`

Compare Source

`v5.7.5`

Compare Source

golang/go (go)

`v1.25.4`

`v1.25.3`

`v1.25.2`

`v1.25.1`

`v1.25.0`

`v1.24.10`

`v1.24.9`

`v1.24.8`

`v1.24.7`

`v1.24.6`

`v1.24.5`

`v1.24.4`

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

`v1.38.0`: /v0.60.0/v0.14.0/v0.0.13

Compare Source

Overview

This release is the last to support Go 1.23. The next release will require at least Go 1.24.

Added

Add native histogram exemplar support in go.opentelemetry.io/otel/exporters/prometheus. (#6772)
Add template attribute functions to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6939)
- ContainerLabel
- DBOperationParameter
- DBSystemParameter
- HTTPRequestHeader
- HTTPResponseHeader
- K8SCronJobAnnotation
- K8SCronJobLabel
- K8SDaemonSetAnnotation
- K8SDaemonSetLabel
- K8SDeploymentAnnotation
- K8SDeploymentLabel
- K8SJobAnnotation
- K8SJobLabel
- K8SNamespaceAnnotation
- K8SNamespaceLabel
- K8SNodeAnnotation
- K8SNodeLabel
- K8SPodAnnotation
- K8SPodLabel
- K8SReplicaSetAnnotation
- K8SReplicaSetLabel
- K8SStatefulSetAnnotation
- K8SStatefulSetLabel
- ProcessEnvironmentVariable
- RPCConnectRPCRequestMetadata
- RPCConnectRPCResponseMetadata
- RPCGRPCRequestMetadata
- RPCGRPCResponseMetadata
Add ErrorType attribute helper function to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6962)
Add WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log which can be used to disable deduplication for log records. (#6968)
Add WithCardinalityLimit option to configure the cardinality limit in go.opentelemetry.io/otel/sdk/metric. (#6996, #7065, #7081, #7164, #7165, #7179)
Add Clone method to Record in go.opentelemetry.io/otel/log that returns a copy of the record with no shared state. (#7001)
Add experimental self-observability span and batch span processor metrics in go.opentelemetry.io/otel/sdk/trace. Check the go.opentelemetry.io/otel/sdk/trace/internal/x package documentation for more information. (#7027, #6393, #7209)
The go.opentelemetry.io/otel/semconv/v1.36.0 package. The package contains semantic conventions from the v1.36.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.34.0.(#7032, #7041)
Add support for configuring Prometheus name translation using WithTranslationStrategy option in go.opentelemetry.io/otel/exporters/prometheus. The current default translation strategy when UTF-8 mode is enabled is NoUTF8EscapingWithSuffixes, but a future release will change the default strategy to UnderscoreEscapingWithSuffixes for compliance with the specification. (#7111)
Add experimental self-observability log metrics in go.opentelemetry.io/otel/sdk/log. Check the go.opentelemetry.io/otel/sdk/log/internal/x package documentation for more information. (#7121)
Add experimental self-observability trace exporter metrics in go.opentelemetry.io/otel/exporters/stdout/stdouttrace. Check the go.opentelemetry.io/otel/exporters/stdout/stdouttrace/internal/x package documentation for more information. (#7133)
Support testing of [Go 1.25]. (#7187)
The go.opentelemetry.io/otel/semconv/v1.37.0 package. The package contains semantic conventions from the v1.37.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.36.0.(#7254)

Changed

Optimize TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/sdk/trace. (#6791)
Change AssertEqual in go.opentelemetry.io/otel/log/logtest to accept TestingT in order to support benchmarks and fuzz tests. (#6908)
Change DefaultExemplarReservoirProviderSelector in go.opentelemetry.io/otel/sdk/metric to use runtime.GOMAXPROCS(0) instead of runtime.NumCPU() for the FixedSizeReservoirProvider default size. (#7094)

Fixed

SetBody method of Record in go.opentelemetry.io/otel/sdk/log now deduplicates key-value collections (log.Value of log.KindMap from go.opentelemetry.io/otel/log). (#7002)
Fix go.opentelemetry.io/otel/exporters/prometheus to not append a suffix if it's already present in metric name. (#7088)
Fix the go.opentelemetry.io/otel/exporters/stdout/stdouttrace self-observability component type and name. (#7195)
Fix partial export count metric in go.opentelemetry.io/otel/exporters/stdout/stdouttrace. (#7199)

Deprecated

Deprecate WithoutUnits and WithoutCounterSuffixes options, preferring WithTranslationStrategy instead. (#7111)
Deprecate support for OTEL_GO_X_CARDINALITY_LIMIT environment variable in go.opentelemetry.io/otel/sdk/metric. Use WithCardinalityLimit option instead. (#7166)

What's Changed

chore(deps): update golang.org/x/telemetry digest to 96f361d by @renovate[bot] in #7054
fix(deps): update googleapis to a45f3df by @renovate[bot] in #7058
chore(deps): update github/codeql-action action to v3.29.3 by @renovate[bot] in #7055
fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.3.0 by @renovate[bot] in #7060
chore(deps): update module github.com/securego/gosec/v2 to v2.22.7 by @renovate[bot] in #7059
chore(deps): update python:3.13.5-slim-bullseye docker digest to 89aa817 by @renovate[bot] in #7061
chore(deps): update python:3.13.5-slim-bullseye docker digest to 17c88fd by @renovate[bot] in #7062
Fix markdown-fail-fast on push by @MrAlias in #7057
sdk/trace: self-observability: span metrics by @pellared in #7027
chore(deps): update module github.com/ldez/grignotin to v0.10.0 by @renovate[bot] in #7072
fix(deps): update module google.golang.org/grpc to v1.74.2 by @renovate[bot] in #7073
chore(deps): update python:3.13.5-slim-bullseye docker digest to ba65ee6 by @renovate[bot] in #7068
sdk/metric: do not document default cardinality limit by @pellared in #7065
docs: unify doc comments for functions returning bool by @pellared in #7064
fix(deps): update module go.opentelemetry.io/collector/pdata to v1.36.1 by @renovate[bot] in #7070
fix(deps): update github.com/prometheus/otlptranslator digest to fce6240 by @renovate[bot] in #7075
fix(deps): update module github.com/cenkalti/backoff/v5 to v5.0.3 by @renovate[bot] in #7077
chore(deps): update github/codeql-action action to v3.29.4 by @renovate[bot] in #7076
Add Flc as an approver by @pellared in #7053
chore(deps): update module go.opentelemetry.io/build-tools to v0.25.0 by @renovate[bot] in #7079
fix(deps): update build-tools to v0.25.0 by @renovate[bot] in #7080
chore(deps): update python:3.13.5-slim-bullseye docker digest to 846d391 by @renovate[bot] in #7078
chore(deps): update module github.com/bombsimon/wsl/v5 to v5.1.1 by @renovate[bot] in #7082
chore(deps): update module github.com/daixiang0/gci to v0.13.7 by @renovate[bot] in #7085
fix(deps): update github.com/prometheus/otlptranslator digest to ab8d56d by @renovate[bot] in #7088
fix: add mock server URL to .lycheeignore by @flc1125 in #7090
chore(deps): update module github.com/sonatard/noctx to v0.4.0 by @renovate[bot] in #7092
chore(deps): update golang.org/x/telemetry digest to 1581f0a by @renovate[bot] in #7096
fix(deps): update googleapis to f173205 by @renovate[bot] in #7097
chore(deps): update module github.com/4meepo/tagalign to v1.4.3 by @renovate[bot] in #7098
Modernize by @ash2k in #7089
Remove notice about internaltest which is not generated anymore by @dmathieu in #7093
sdk/metric: use runtime.GOMAXPROCS(0) instead of runtime.NumCPU() in DefaultExemplarReservoirProviderSelector for the FixedSizeReservoirProvider default size by @lzakharov in #7094
ci: Add use-any linter by @flc1125 in #7091
chore: enable gocritic linter by @mmorel-35 in #7095
chore(deps): update module github.com/sagikazarmark/locafero to v0.10.0 by @renovate[bot] in #7100
chore(deps): update golang.org/x/telemetry digest to 28f32e4 by @renovate[bot] in #7099
fix(deps): update module go.opentelemetry.io/collector/pdata to v1.37.0 by @renovate[bot] in #7101
fix(deps): update build-tools to v0.26.0 by @renovate[bot] in #7105
chore(deps): update github/codeql-action action to v3.29.5 by @renovate[bot] in #7103
Fix names in experimental readmes by @pellared in #7106
fix(deps): update module go.opentelemetry.io/proto/otlp to v1.7.1 by @renovate[bot] in #7108
fix(deps): update module github.com/prometheus/client_golang to v1.23.0 by @renovate[bot] in #7109
Add changelog entry for version bump of otlptranslator - suffixes are now deduplicated by @ArthurSens in #7086
fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.3.1 by @renovate[bot] in #7118
chore: enable extra-rules from gofumpt by @mmorel-35 in #7114
chore(deps): update module github.com/alecthomas/chroma/v2 to v2.20.0 by @renovate[bot] in #7125
fix(deps): update googleapis to a7a43d2 by @renovate[bot] in #7126
sdk/metric: Apply Cardinality Limits to Aggregations by @ysolomchenko in #7081
chore: enable unused-parameter rule from revive by @mmorel-35 in #7122
Add support for native histogram exemplars by @shivanthzen in #6772
chore(deps): update golang.org/x/telemetry digest to 9469f96 by @renovate[bot] in #7134
chore(deps): update module github.com/charmbracelet/x/ansi to v0.10.1 by @renovate[bot] in #7135
Testing: Run sync measure benchmarks in parallel by @dashpole in #7113
chore(deps): update actions/download-artifact action to v5 by @renovate[bot] in #7136
Add benchmark for map access using attribute Equivalent by @dashpole in #7123
Add security insights document to repository by @MrAlias in #7129
sdk/log: self-observability: log created metric by @mahendrabishnoi2 in #7121
fix(deps): update golang.org/x by @renovate[bot] in #7138
chore(deps): update actions/cache action to v4.2.4 by @renovate[bot] in #7140
fix(deps): update module google.golang.org/protobuf to v1.36.7 by @renovate[bot] in #7141
chore(deps): update lycheeverse/lychee-action action to v2.5.0 by @renovate[bot] in #7143
chore(deps): update github/codeql-action action to v3.29.6 by @renovate[bot] in #7144
chore(deps): update golang.org/x/telemetry digest to 01f7bf4 by @renovate[bot] in #7146
chore(deps): update golang.org/x by @renovate[bot] in #7147
chore: enable ptrToRefParam from go-critic by @mmorel-35 in #7131
chore(deps): update python docker tag to v3.13.6 by @renovate[bot] in #7148
chore(deps): update golang.org/x by @renovate[bot] in #7149
chore(deps): update python:3.13.6-slim-bullseye docker digest to e98b521 by @renovate[bot] in #7151
chore(deps): update github/codeql-action action to v3.29.7 by @renovate[bot] in #7152
chore(deps): update github/codeql-action action to v3.29.8 by @renovate[bot] in #7156
fix(deps): update golang.org/x by @renovate[bot] in #7153
fix(deps): update golang.org/x/exp digest to a408d31 by @renovate[bot] in #7158
fix(deps): update module github.com/prometheus/otlptranslator to v0.0.1 by @renovate[bot] in #7159
chore: enable unused-receiver rule from revive by @mmorel-35 in #7130
feat(stdouttrace): add experimental self-observability metrics by @flc1125 in #7133
chore(deps): update actions/checkout action to v5 by @renovate[bot] in #7168
sdk/log: Add EventNam

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

forking-renovate · 2025-04-21T16:29:15Z

ℹ Artifact update notice

File name: src/checkoutservice/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

25 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.116.0` -> `v0.121.2`
`cloud.google.com/go/auth`	`v0.11.0` -> `v0.16.1`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/compute/metadata`	`v0.6.0` -> `v0.7.0`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/google/pprof`	`v0.0.0-20240903155634-a8630aee4ab9` -> `v0.0.0-20250602020802-c6617b811d0e`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.0` -> `v2.14.2`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.26.1` -> `v2.27.2`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/proto/otlp`	`v1.5.0` -> `v1.7.1`
`golang.org/x/crypto`	`v0.36.0` -> `v0.41.0`
`golang.org/x/net`	`v0.38.0` -> `v0.43.0`
`golang.org/x/oauth2`	`v0.27.0` -> `v0.30.0`
`golang.org/x/sync`	`v0.12.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.31.0` -> `v0.35.0`
`golang.org/x/text`	`v0.23.0` -> `v0.28.0`
`golang.org/x/time`	`v0.8.0` -> `v0.11.0`
`google.golang.org/api`	`v0.210.0` -> `v0.235.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250505200425-f936aa4a68b2`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250218202821-56aae31c358a` -> `v0.0.0-20250825161204-c5933d9347a5`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250218202821-56aae31c358a` -> `v0.0.0-20250825161204-c5933d9347a5`

File name: src/frontend/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

25 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go/compute/metadata`	`v0.6.0` -> `v0.7.0`
`cloud.google.com/go`	`v0.116.0` -> `v0.121.2`
`cloud.google.com/go/auth`	`v0.11.0` -> `v0.16.1`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/google/pprof`	`v0.0.0-20240903155634-a8630aee4ab9` -> `v0.0.0-20250602020802-c6617b811d0e`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.0` -> `v2.14.2`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.26.1` -> `v2.27.2`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/proto/otlp`	`v1.5.0` -> `v1.7.1`
`golang.org/x/crypto`	`v0.36.0` -> `v0.41.0`
`golang.org/x/net`	`v0.38.0` -> `v0.43.0`
`golang.org/x/oauth2`	`v0.27.0` -> `v0.30.0`
`golang.org/x/sync`	`v0.12.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.31.0` -> `v0.35.0`
`golang.org/x/text`	`v0.23.0` -> `v0.28.0`
`golang.org/x/time`	`v0.8.0` -> `v0.11.0`
`google.golang.org/api`	`v0.210.0` -> `v0.235.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250505200425-f936aa4a68b2`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250218202821-56aae31c358a` -> `v0.0.0-20250825161204-c5933d9347a5`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250218202821-56aae31c358a` -> `v0.0.0-20250825161204-c5933d9347a5`

File name: src/productcatalogservice/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

32 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.118.3` -> `v0.121.2`
`cloud.google.com/go/alloydb`	`v1.14.1` -> `v1.18.0`
`cloud.google.com/go/auth`	`v0.15.0` -> `v0.16.5`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.7` -> `v0.2.8`
`cloud.google.com/go/compute/metadata`	`v0.6.0` -> `v0.8.0`
`cloud.google.com/go/iam`	`v1.4.1` -> `v1.5.2`
`cloud.google.com/go/longrunning`	`v0.6.4` -> `v0.6.7`
`cloud.google.com/go/monitoring`	`v1.24.0` -> `v1.24.2`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.51.0` -> `v0.53.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.51.0` -> `v0.53.0`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/google/pprof`	`v0.0.0-20240903155634-a8630aee4ab9` -> `v0.0.0-20250602020802-c6617b811d0e`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.5` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.1` -> `v2.15.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.26.1` -> `v2.27.2`
`go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`	`v0.59.0` -> `v0.61.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/proto/otlp`	`v1.5.0` -> `v1.7.1`
`golang.org/x/crypto`	`v0.36.0` -> `v0.41.0`
`golang.org/x/net`	`v0.38.0` -> `v0.43.0`
`golang.org/x/oauth2`	`v0.28.0` -> `v0.31.0`
`golang.org/x/sync`	`v0.12.0` -> `v0.16.0`
`golang.org/x/sys`	`v0.31.0` -> `v0.35.0`
`golang.org/x/text`	`v0.23.0` -> `v0.28.0`
`golang.org/x/time`	`v0.11.0` -> `v0.13.0`
`google.golang.org/api`	`v0.224.0` -> `v0.249.0`
`google.golang.org/genproto`	`v0.0.0-20250303144028-a0af3efb3deb` -> `v0.0.0-20250603155806-513f23925822`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250303144028-a0af3efb3deb` -> `v0.0.0-20250825161204-c5933d9347a5`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250303144028-a0af3efb3deb` -> `v0.0.0-20250826171959-ef028d996bc1`

File name: src/shippingservice/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

23 additional dependencies were updated

Details:

Package	Change
`cloud.google.com/go`	`v0.116.0` -> `v0.121.2`
`cloud.google.com/go/auth`	`v0.11.0` -> `v0.16.1`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.6` -> `v0.2.8`
`cloud.google.com/go/compute/metadata`	`v0.6.0` -> `v0.7.0`
`github.com/go-logr/logr`	`v1.4.2` -> `v1.4.3`
`github.com/google/pprof`	`v0.0.0-20240903155634-a8630aee4ab9` -> `v0.0.0-20250602020802-c6617b811d0e`
`github.com/google/s2a-go`	`v0.1.8` -> `v0.1.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.4` -> `v0.3.6`
`github.com/googleapis/gax-go/v2`	`v2.14.0` -> `v2.14.2`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.54.0` -> `v0.60.0`
`go.opentelemetry.io/otel`	`v1.34.0` -> `v1.37.0`
`go.opentelemetry.io/otel/metric`	`v1.34.0` -> `v1.37.0`
`go.opentelemetry.io/otel/trace`	`v1.34.0` -> `v1.37.0`
`golang.org/x/crypto`	`v0.36.0` -> `v0.42.0`
`golang.org/x/oauth2`	`v0.27.0` -> `v0.30.0`
`golang.org/x/sync`	`v0.12.0` -> `v0.17.0`
`golang.org/x/sys`	`v0.31.0` -> `v0.36.0`
`golang.org/x/text`	`v0.23.0` -> `v0.29.0`
`golang.org/x/time`	`v0.8.0` -> `v0.11.0`
`google.golang.org/api`	`v0.210.0` -> `v0.235.0`
`google.golang.org/genproto`	`v0.0.0-20241118233622-e639e219e697` -> `v0.0.0-20250505200425-f936aa4a68b2`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20250106144421-5f5ef82da422` -> `v0.0.0-20250707201910-8d1bb00bc6a7`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20250115164207-1a7da9e5054f` -> `v0.0.0-20250707201910-8d1bb00bc6a7`

forking-renovate · 2025-10-01T23:24:33Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/checkoutservice/go.sum

Command failed: go get -t ./...
go: module google.golang.org/grpc@v1.77.0 requires go >= 1.24.0; switching to go1.24.10
go: downloading go1.24.10 (linux/amd64)
go: download go1.24.10: golang.org/toolchain@v0.0.1-go1.24.10.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

File name: src/frontend/go.sum

Command failed: go get -t ./...
go: module cloud.google.com/go/compute/metadata@v0.9.0 requires go >= 1.24.0; switching to go1.24.10
go: downloading go1.24.10 (linux/amd64)
go: download go1.24.10: golang.org/toolchain@v0.0.1-go1.24.10.linux-amd64: verifying module: checksum database disabled by GOSUMDB=off

renovate-bot requested a review from yoshi-approver as a code owner April 7, 2025 00:59

forking-renovate Bot added dependencies Pull requests that update a dependency file lang: go Issues specific to Go. labels Apr 7, 2025

renovate-bot requested a review from a team as a code owner April 7, 2025 00:59

renovate-bot force-pushed the renovate/golang branch from c26d27c to efac73e Compare April 8, 2025 00:28

renovate-bot force-pushed the renovate/golang branch from efac73e to 705bca6 Compare April 21, 2025 16:29

renovate-bot force-pushed the renovate/golang branch 2 times, most recently from 5bde9c7 to a3d3240 Compare April 28, 2025 05:05

renovate-bot force-pushed the renovate/golang branch from a3d3240 to 3925f91 Compare May 13, 2025 01:04

renovate-bot force-pushed the renovate/golang branch 4 times, most recently from 3d2f1b4 to 97c053c Compare May 25, 2025 03:58

renovate-bot force-pushed the renovate/golang branch 9 times, most recently from 68abcb6 to fb2a001 Compare June 2, 2025 20:20

renovate-bot force-pushed the renovate/golang branch 7 times, most recently from 38a7d8a to 3c474ab Compare June 18, 2025 21:26

renovate-bot force-pushed the renovate/golang branch 5 times, most recently from 211cce0 to 4e400e6 Compare July 15, 2025 19:05

renovate-bot force-pushed the renovate/golang branch 3 times, most recently from 020c7e4 to 902a382 Compare July 23, 2025 22:17

renovate-bot force-pushed the renovate/golang branch 6 times, most recently from 314c141 to 982d324 Compare July 29, 2025 22:02

renovate-bot force-pushed the renovate/golang branch 8 times, most recently from 348c69b to e0c5d95 Compare August 8, 2025 02:13

renovate-bot force-pushed the renovate/golang branch 5 times, most recently from 664bdad to 202c8d9 Compare August 14, 2025 15:42

fix(deps): update golang

9fcc6e7

mathieu-benoit mentioned this pull request Nov 29, 2025

Bump container base images to fix CVEs #3160

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update golang - autoclosed#2954

fix(deps): update golang - autoclosed#2954
renovate-bot wants to merge 1 commit intoGoogleCloudPlatform:mainfrom
renovate-bot:renovate/golang

renovate-bot commented Apr 7, 2025 •

edited

Loading

Uh oh!

forking-renovate Bot commented Apr 21, 2025 •

edited

Loading

Uh oh!

forking-renovate Bot commented Oct 1, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

renovate-bot commented Apr 7, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

v10.28.0: Release 10.28.0

What's Changed

New Contributors

v10.27.0: Release 10.27.0

What's Changed

New Contributors

What's Changed

New Contributors

v1.38.0: /v0.60.0/v0.14.0/v0.0.13

Overview

Added

Changed

Fixed

Deprecated

What's Changed

Configuration

Uh oh!

forking-renovate Bot commented Apr 21, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ Artifact update notice

File name: src/checkoutservice/go.mod

File name: src/frontend/go.mod

File name: src/productcatalogservice/go.mod

File name: src/shippingservice/go.mod

Uh oh!

forking-renovate Bot commented Oct 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: src/checkoutservice/go.sum

File name: src/frontend/go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

renovate-bot commented Apr 7, 2025 •

edited

Loading

`v10.28.0`: Release 10.28.0

`v10.27.0`: Release 10.27.0

`v1.38.0`: /v0.60.0/v0.14.0/v0.0.13

forking-renovate Bot commented Apr 21, 2025 •

edited

Loading

forking-renovate Bot commented Oct 1, 2025 •

edited

Loading