fix(deps): update go dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update
github.com/aws/aws-sdk-go-v2	v1.41.1 → v1.41.2			require	patch
github.com/aws/aws-sdk-go-v2/config	v1.32.7 → v1.32.10			require	patch
github.com/aws/aws-sdk-go-v2/service/s3	v1.95.1 → v1.96.2			require	minor
github.com/elastic/go-perf	30bec95 → af0ee0c			require	digest
github.com/golangci/golangci-lint/v2	v2.6.1 → v2.10.1			indirect	minor
github.com/klauspost/compress	v1.18.3 → v1.18.4			require	patch
github.com/zeebo/xxh3	v1.0.2 → v1.1.0			require	minor
go.opentelemetry.io/collector/cmd/builder	v0.146.1 → v0.147.0			indirect	minor
go.opentelemetry.io/collector/component	v1.50.0 → v1.53.0			require	minor
go.opentelemetry.io/collector/confmap/xconfmap	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/collector/consumer/consumertest	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/collector/consumer/xconsumer	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/collector/pdata	v1.50.0 → v1.53.0			require	minor
go.opentelemetry.io/collector/pdata/pprofile	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/collector/receiver	v1.50.0 → v1.53.0			require	minor
go.opentelemetry.io/collector/receiver/receivertest	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/collector/receiver/xreceiver	v0.144.0 → v0.147.0			require	minor
go.opentelemetry.io/otel	v1.39.0 → v1.41.0			require	minor
go.opentelemetry.io/otel/metric	v1.39.0 → v1.41.0			require	minor
golang.org/x/arch	v0.23.0 → v0.24.0			require	minor
golang.org/x/exp	701f63a → 3dfff04			require	digest
golang.org/x/sys	v0.40.0 → v0.41.0			require	minor
google.golang.org/grpc	v1.78.0 → v1.79.1			require	minor

---

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.41.2

Compare Source

Module Highlights

• github.com/aws/aws-sdk-go-v2/service/deadline: v1.14.0
  • Feature: Added fields to track cumulative task retry attempts for steps and jobs
• github.com/aws/aws-sdk-go-v2/service/ec2: v1.227.0
  • Feature: This release adds support for OdbNetworkArn as a target in VPC Route Tables
• github.com/aws/aws-sdk-go-v2/service/iotmanagedintegrations: v1.1.0
  • Feature: Adding managed integrations APIs for IoT Device Management to onboard and control devices across different manufacturers, connectivity protocols and third party vendor clouds. APIs include managed thing operations, provisioning profile management, and cloud connector operations.
• github.com/aws/aws-sdk-go-v2/service/keyspaces: v1.19.0
  • Feature: This release provides change data capture (CDC) streams support through updates to the Amazon Keyspaces API.
• github.com/aws/aws-sdk-go-v2/service/keyspacesstreams: v1.0.0
  • Release: New AWS service client module
  • Feature: This release adds change data capture (CDC) streams support through the new Amazon Keyspaces Streams API.
• github.com/aws/aws-sdk-go-v2/service/kms: v1.41.2
  • Documentation: This release updates AWS CLI examples for KMS APIs.
• github.com/aws/aws-sdk-go-v2/service/qbusiness: v1.27.0
  • Feature: Added support for App level authentication for QBusiness DataAccessor using AWS IAM Identity center Trusted Token issuer
• github.com/aws/aws-sdk-go-v2/service/workspaces: v1.58.0
  • Feature: Updated modifyStreamingProperties to support PrivateLink VPC endpoints for directories

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.10.1

Compare Source

Released on 2026-02-17

1. Fixes
   • buildssa panic

v2.10.0

Compare Source

Released on 2026-02-17

1. Linters new features or changes
   • ginkgolinter: from 0.22.0 to 0.23.0
   • gosec: from 2.22.11 to 2.23.0 (new rules: G117, G602, G701, G702, G703, G704, G705, G706)
   • staticcheck: from 0.6.1 to 0.7.0
2. Linters bug fixes
   • godoclint: from 0.11.1 to 0.11.2

v2.9.0

Compare Source

Released on 2026-02-10

1. Enhancements
   • 🎉 go1.26 support
2. Linters new features or changes
   • arangolint: from 0.3.1 to 0.4.0 (new rule: detect potential query injections)
   • ginkgolinter: from 0.21.2 to 0.22.0 (support for wrappers)
   • golines: from 0.14.0 to 0.15.0
   • misspell: from 0.7.0 to 0.8.0
   • unqueryvet: from 1.4.0 to 1.5.3 (new options: check-n1, check-sql-injection, check-tx-leaks, allow, custom-rules)
   • wsl: from 5.3.0 to 5.6.0 (new rule: after-block)
3. Linters bug fixes
   • modernize: from 0.41.0 to 0.42.0
   • prealloc: from 1.0.1 to 1.0.2
   • protogetter: from 0.3.18 to 0.3.20
4. Misc.
   • Log information about files when configuration verification
   • Emit an error when no linters enabled
   • Do not collect VCS information when loading code

v2.8.0

Compare Source

Released on 2026-01-07

1. Linters new features or changes
   • godoc-lint: from 0.10.2 to 0.11.1 (new rule: require-stdlib-doclink)
   • golines: from 442fd00 to 0.14.0
   • gomoddirectives: from 0.7.1 to 0.8.0
   • gosec: from daccba6 to 2.22.11 (new rule: G116)
   • modernize: from 0.39.0 to 0.40.0 (new analyzers: stringscut, unsafefuncs)
   • prealloc: from 1.0.0 to 1.0.1 (message changes)
   • unqueryvet: from 1.3.0 to 1.4.0 (new options: check-aliased-wildcard, check-string-concat, check-format-strings, check-string-builder, check-subqueries, ignored-functions, sql-builders)
2. Linters bug fixes
   • go-critic: from 0.14.2 to 0.14.3
   • go-errorlint: from 1.8.0 to 1.9.0
   • govet: from 0.39.0 to 0.40.0
   • protogetter: from 0.3.17 to 0.3.18
   • revive: add missing enable-default-rules setting
3. Documentation
   • docs: split installation page

v2.7.2

Compare Source

Released on 2025-12-07

1. Linter bug fixes
   • gosec: from 2.22.10 to daccba6

v2.7.1

Compare Source

Released on 2025-12-04

1. Linter bug fixes
   • modernize: disable stringscut analyzer

v2.7.0

Compare Source

1. Bug fixes
   • fix: clone args used by custom command
2. Linters new features or changes
   • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
   • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
   • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
   • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
3. Linters bug fixes
   • perfsprint: from 0.10.0 to 0.10.1
   • wrapcheck: from 2.11.0 to 2.12.0
   • godoc-lint: from 0.10.1 to 0.10.2
4. Misc.
   • Add some flags to the custom command
5. Documentation
   • docs: split changelog v1 and v2

v2.6.2

Compare Source

Released on 2025-11-14

1. Bug fixes
   • fmt command with symlinks
   • use file depending on build configuration to invalidate cache
2. Linters bug fixes
   • testableexamples: from 1.0.0 to 1.0.1
   • testpackage: from 1.1.1 to 1.1.2

klauspost/compress (github.com/klauspost/compress)

v1.18.4

Compare Source

What's Changed

• gzhttp: Add zstandard to server handler wrapper by @​klauspost in #​1121
• zstd: Add ResetWithOptions to encoder/decoder by @​klauspost in #​1122
• gzhttp: preserve qvalue when extra parameters follow in Accept-Encoding by @​analytically in #​1116

New Contributors

• @​analytically made their first contribution in #​1116
• @​ethaizone made their first contribution in #​1124
• @​zwass made their first contribution in #​1125

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

zeebo/xxh3 (github.com/zeebo/xxh3)

v1.1.0

Compare Source

open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/cmd/builder)

v0.147.0

Compare Source

💡 Enhancements 💡

• exporter/debug: Output bucket counts for exponential histogram data points in normal verbosity. (#​10463)
• pkg/exporterhelper: Add metadata_keys configuration to sending_queue.batch.partition to partition batches by client metadata (#​14139)
  The metadata_keys configuration option is now available in the sending_queue.batch.partition section for all exporters.
  When specified, batches are partitioned based on the values of the listed metadata keys, allowing separate batching per metadata partition. This feature
  is automatically configured when using exporterhelper.WithQueue().

🧰 Bug fixes 🧰

• cmd/builder: Fix duplicate error output when CLI command execution fails in the builder tool. (#​14436)

• cmd/mdatagen: Fix duplicate error output when CLI command execution fails in the mdatagen tool. (#​14436)

• cmd/mdatagen: Fix semconv URL validation for metrics with underscores in their names (#​14583)
  Metrics like system.disk.io_time now correctly validate against semantic convention URLs containing underscores in the anchor tag.

• extension/memory_limiter: Use ChainUnaryInterceptor instead of UnaryInterceptor to allow multiple interceptors. (#​14634)
  If multiple extensions that use the UnaryInterceptor are set the binary panics at start time.

• extension/memory_limiter: Add support for streaming services. (#​14634)

• pkg/config/configmiddleware: Add context.Context to HTTP middleware interface constructors. (#​14523)
  This is a breaking API change for components that implement or use extensionmiddleware.

• pkg/confmap: Fix another issue where configs could fail to decode when using interpolated values in string fields. (#​14034)
  For example, a resource attribute can be set via an environment variable to a string that is parseable as a number, e.g. 1234.

  (A similar bug was fixed in a previous release: that one was triggered when the field was nested in a struct,
  whereas this one is triggered when the field internally has type "pointer to string" rather than "string".)

• pkg/otelcol: The featuregate subcommand now rejects extra positional arguments instead of silently ignoring them. (#​14554)

• pkg/queuebatch: Fix data race in partition_batcher where resetTimer() was called outside mutex, causing concurrent timer.Reset() calls and unpredictable batch flush timing under load. (#​14491)

• pkg/scraperhelper: Log scrapers now emit log-appropriate receiver telemetry (#​14654)
  Log scrapers previously emitted the same receiver telemetry as metric scrapers,
  such as the otelcol_receiver_accepted_metric_points metric (instead of otelcol_receiver_accepted_log_records),
  or spans named receiver/myreceiver/MetricsReceived (instead of receiver/myreceiver/LogsReceived).

  This did not affect scraper-specific spans and metrics.

• processor/batch: Fixes a bug where the batch processor would not copy SchemaUrl metadata from resource and scope containers during partial batch splits. (#​12279, #​14620)

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.41.0: /v0.63.0/v0.17.0/v0.0.15

Compare Source

This release is the last to support Go 1.24.
The next release will require at least Go 1.25.

Added

• Support testing of Go 1.26. (#​7902)

Fixed

• Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits.
  New and Parse now return partial baggage along with an error when limits are exceeded.
  Errors from baggage extraction are reported to the global error handler. (#​7880)

What's Changed

• fix(deps): update googleapis to ce8ad4c by @​renovate[bot] in #​7860
• chore(deps): update otel/weaver docker tag to v0.21.0 by @​renovate[bot] in #​7865
• fix(deps): update module go.opentelemetry.io/collector/pdata to v1.51.0 by @​renovate[bot] in #​7863
• chore(deps): update golang.org/x/telemetry digest to fe4bb1c by @​renovate[bot] in #​7861
• chore(deps): update golang.org/x/telemetry digest to aaaaaa5 by @​renovate[bot] in #​7869
• sdk/log/observ: guard LogProcessed with Enabled by @​NesterovYehor in #​7848
• stdouttrace observability: skip metric work when instruments are disabled by @​NesterovYehor in #​7853
• chore(deps): update otel/weaver docker tag to v0.21.2 by @​renovate[bot] in #​7870
• fix(deps): update googleapis to 546029d by @​renovate[bot] in #​7871
• stdoutmetric observ: skip metric work when instruments are disabled by @​NesterovYehor in #​7868
• chore(deps): update fossas/fossa-action action to v1.8.0 by @​renovate[bot] in #​7879
• chore(deps): update github/codeql-action action to v4.32.2 by @​renovate[bot] in #​7878
• chore(deps): update module github.com/ghostiam/protogetter to v0.3.20 by @​renovate[bot] in #​7877
• chore(deps): update golang.org/x/telemetry digest to 86a5c4b by @​renovate[bot] in #​7876
• fix(deps): update module golang.org/x/sys to v0.41.0 by @​renovate[bot] in #​7885
• chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.6.0 by @​renovate[bot] in #​7884
• Checked if instrument enabled before measuring in prometheus by @​itssaharsh in #​7866
• exporter/otlploghttp: guard observ metrics with Enabled checks by @​NesterovYehor in #​7813
• chore(deps): update module github.com/go-git/go-git/v5 to v5.16.5 by @​renovate[bot] in #​7886
• chore(deps): update golang.org/x by @​renovate[bot] in #​7887
• fix(deps): update golang.org/x by @​renovate[bot] in #​7890
• fix(deps): update golang.org/x to 2842357 by @​renovate[bot] in #​7891
• fix(deps): update googleapis to 4cfbd41 by @​renovate[bot] in #​7889
• Checked if instrument enabled before measuring in oteltracegrpc by @​itssaharsh in #​7825
• Checked if Instrument Enabled before measuring in otlpgrpc by @​itssaharsh in #​7824
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.27.8 by @​renovate[bot] in #​7892
• chore(deps): update module github.com/golangci/golines to v0.15.0 by @​renovate[bot] in #​7893
• chore(deps): update module github.com/golangci/misspell to v0.8.0 by @​renovate[bot] in #​7894
• chore(deps): update golang.org/x/telemetry digest to 9f66fae by @​renovate[bot] in #​7898
• fix(deps): update module google.golang.org/grpc to v1.79.0 by @​renovate[bot] in #​7906
• Support Go 1.26 by @​dmathieu in #​7902
• fix(deps): update module google.golang.org/grpc to v1.79.1 by @​renovate[bot] in #​7908
• chore(deps): update github/codeql-action action to v4.32.3 by @​renovate[bot] in #​7909
• chore(deps): update module github.com/kevinburke/ssh_config to v1.5.0 by @​renovate[bot] in #​7911
• chore(deps): update module github.com/kevinburke/ssh_config to v1.6.0 by @​renovate[bot] in #​7913
• chore(deps): update actions/stale action to v10.2.0 by @​renovate[bot] in #​7917
• chore(deps): update module github.com/godoc-lint/godoc-lint to v0.11.2 by @​renovate[bot] in #​7916
• chore(deps): update module github.com/clipperhouse/uax29/v2 to v2.7.0 by @​renovate[bot] in #​7915
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.20 by @​renovate[bot] in #​7918
• chore(deps): update module github.com/grpc-ecosystem/grpc-gateway/v2 to v2.28.0 by @​renovate[bot] in #​7921
• Checked if Operation Enabled in otlptracehttp before performing operation by @​itssaharsh in #​7881
• chore(deps): update github/codeql-action action to v4.32.4 by @​renovate[bot] in #​7936
• chore(deps): update module github.com/mirrexone/unqueryvet to v1.5.4 by @​renovate[bot] in #​7939
• chore(deps): update module github.com/uudashr/gocognit to v1.2.1 by @​renovate[bot] in #​7947
• chore(deps): update module github.com/alexkohler/prealloc to v1.0.3 by @​renovate[bot] in #​7950
• chore(deps): update module github.com/go-git/go-billy/v5 to v5.8.0 by @​renovate[bot] in #​7953
• chore(deps): update lycheeverse/lychee-action action to v2.8.0 by @​renovate[bot] in #​7959
• chore(deps): update module github.com/go-git/go-git/v5 to v5.17.0 by @​renovate[bot] in #​7960
• chore(deps): update actions/setup-go action to v6.3.0 by @​renovate[bot] in #​7962
• Document metric api interfaces that methods need to be safe to be called concurrently by @​dashpole in #​7952
• ci: add govulncheck job to CI workflow and update lint target by @​pellared in #​7971
• Comply with W3C Baggage specification limits by @​XSAM in #​7880
• chore(deps): update module github.com/mgechev/revive to v1.14.0 by @​renovate[bot] in #​7895
• chore(deps): update github artifact actions (major) by @​renovate[bot] in #​7963
• chore(deps): update module github.com/kisielk/errcheck to v1.10.0 by @​renovate[bot] in #​7967
• chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 by @​renovate[bot] in #​7969
• fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b4d by @​renovate[bot] in #​7972
• chore(deps): update module github.com/sonatard/noctx to v0.5.0 by @​renovate[bot] in #​7968
• chore(deps): update module github.com/daixiang0/gci to v0.14.0 by @​renovate[bot] in #​7973
• chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 by @​renovate[bot] in #​7899
• Generate semconv/v1.40.0 by @​ChrsMark in #​7929
• Revert "Generate semconv/v1.40.0" by @​dmathieu in #​7978
• chore(deps): update github/codeql-action action to v4.32.5 by @​renovate[bot] in #​7980
• fix: add error handling for insecure HTTP endpoints with TLS client configuration by @​sandy2008 in #​7914
• Release 1.41.0/0.63.0/0.17.0/0.0.15 by @​pellared in #​7977

New Contributors

• @​NesterovYehor made their first contribution in #​7848
• @​sandy2008 made their first contribution in #​7914

Full Changelog: open-telemetry/opentelemetry-go@v1.40.0...v1.41.0

v1.40.0

Compare Source

grpc/grpc-go (google.golang.org/grpc)

v1.79.1: Release 1.79.1

Compare Source

Bug Fixes

• grpc: Remove the -dev suffix from the User-Agent header. (#​8902)

v1.79.0: Release 1.79.0

Compare Source

API Changes

• mem: Add experimental API SetDefaultBufferPool to change the default buffer pool. (#​8806)
  • Special Thanks: @​vanja-p
• experimental/stats: Update MetricsRecorder to require embedding the new UnimplementedMetricsRecorder (a no-op struct) in all implementations for forward compatibility. (#​8780)

Behavior Changes

• balancer/weightedtarget: Remove handling of Addresses and only handle Endpoints in resolver updates. (#​8841)

New Features

• experimental/stats: Add support for asynchronous gauge metrics through the new AsyncMetricReporter and RegisterAsyncReporter APIs. (#​8780)
• pickfirst: Add support for weighted random shuffling of endpoints, as described in gRFC A113.
  • This is enabled by default, and can be turned off using the environment variable GRPC_EXPERIMENTAL_PF_WEIGHTED_SHUFFLING. (#​8864)
• xds: Implement :authority rewriting, as specified in gRFC A81. (#​8779)
• balancer/randomsubsetting: Implement the random_subsetting LB policy, as specified in gRFC A68. (#​8650)
  • Special Thanks: @​marek-szews
• server: Include status detail headers, if available, when terminating a stream during request header processing. (#​8754)
  • Special Thanks: @​joybestourous

Bug Fixes

• credentials/tls: Fix a bug where the port was not stripped from the authority override before validation. (#​8726)
  • Special Thanks: @​Atul1710
• xds/priority: Fix a bug causing delayed failover to lower-priority clusters when a higher-priority cluster is stuck in CONNECTING state. (#​8813)
• health: Fix a bug where health checks failed for clients using legacy compression options (WithDecompressor or RPCDecompressor). (#​8765)
  • Special Thanks: @​sanki92
• transport: Fix an issue where the HTTP/2 server could skip header size checks when terminating a stream early. (#​8769)
  • Special Thanks: @​joybestourous

Performance Improvements

• credentials/alts: Optimize read buffer alignment to reduce copies. (#​8791)
• mem: Optimize pooling and creation of buffer objects. (#​8784)
• transport: Reduce slice re-allocations by reserving slice capacity. (#​8797)

---

Configuration

📅 Schedule: Branch creation - "before 8am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[rogercoll]

Looks like renovate does not run tidy with -modfile for the corresponding Go mod file; #1218