Skip to content

fix(deps): update go dependencies#1237

Merged
christos68k merged 2 commits intomainfrom
renovate/go-dependencies
Mar 11, 2026
Merged

fix(deps): update go dependencies#1237
christos68k merged 2 commits intomainfrom
renovate/go-dependencies

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 10, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/aws/aws-sdk-go-v2/service/s3 v1.96.3v1.96.4 age confidence
github.com/cilium/ebpf v0.20.0v0.21.0 age confidence
github.com/golangci/golangci-lint/v2 v2.10.1v2.11.3 age confidence
go.opentelemetry.io/otel v1.41.0v1.42.0 age confidence
go.opentelemetry.io/otel/metric v1.41.0v1.42.0 age confidence
go.opentelemetry.io/proto/otlp/profiles/v1development v0.2.0v0.3.0 age confidence
golang.org/x/arch v0.24.0v0.25.0 age confidence
golang.org/x/sync v0.19.0v0.20.0 age confidence
golang.org/x/sys v0.41.0v0.42.0 age confidence
google.golang.org/grpc v1.79.1v1.79.2 age confidence

Release Notes

cilium/ebpf (github.com/cilium/ebpf)

v0.21.0: : Struct Ops, Weak Symbols and BTF deduplication

Compare Source

Hi, everyone! The Cilium project is proud to announce v0.21.0 of ebpf-go, our first major 2026 feature release. Please note that this version comes with a few breaking changes for XDP users that may require some intervention based on your use case, so please read the following section carefully before upgrading! We've also removed some long-deprecated APIs.

Breaking changes
XDP Attach Type

This release saw a change to the ELF parsing logic, specifically to XDP programs. Previously, XDP programs had their ProgramSpec.AttachType set to AttachNone. Prompted by upstream changes in Linux 6.18, XDP programs now come with an AttachXDP attach type. This change ensures compatibility with kernels going forward, as well as better interoperability with libbpf-based tools using shared PROG_ARRAY maps.

tl;dr: Linux 6.18 and later disallows mixing attach types within the same program array.

If your application uses a pinned program array, you may need to manually change the attach type of your XDP programs to AttachNone before they are loaded to ensure they can still be inserted into maps containing pre-upgrade programs.

The same goes for BPF links. If you're updating an XDP link created by an older version of ebpf-go, you need to ensure your XDP program is loaded with the same attach type the link was initially created with, or updating will fail with EINVAL.

For an example of how to deal with this change, here's the the Cilium PR that implemented logic to try both attach types when updating links.

Windows helper function rename

ebpf-for-windows was upgraded from 0.21.0 to v1.0.0-rc1. efW made breaking changes to the names of helper functions, our API has been updated to match:

New Features
  • Struct ops — The ELF reader can now parse struct ops sections, building MapSpecs and resolving function-pointer members. link.AttachStructOps has been added to allow attaching a StructOpsMap as a link. A sched_ext example can be found here.
  • Weak symbol & ELF linking — Programs and maps defined as weak symbols are now fully supported. The ELF reader performs per-symbol decoding for both ProgramSpec and MapSpec, meaning linked objects (produced via bpftool gen object) are now handled correctly.
  • BTF type deduplication — btf.Builder can now deduplicate types while generating a BTF blob. Deduplication can be enabled by passing BuilderOptions to NewBuilder with the Deduplication field set to true.
  • ProgramSpec.Compatible was added — ProgramSpec.Tag is now deprecated. The new ProgramSpec.Compatible method compares a loaded program's tag against both SHA-1 and SHA-256 hashes of the spec, ensuring correct behaviour across kernels — including kernel v6.18+, which switched to SHA-256 for program hashing.
  • ProgramInfo improvements — The program name as reported by ProgramInfo.Name is now sourced from BTF func info when available to provide the full program name if it's longer than 15 bytes.
  • LinkInfo improvements — Added a number of methods and types related to reading back link info.
  • Reverse symbol lookup — Added Executable.Symbol to resolve addresses to a symbol and relative offset.
  • Uprobe/kprobe link feature probing — HaveBPFLinkKprobeMulti, HaveBPFLinkUprobeMulti, and HaveBPFLinkKprobeSession are now exported from the features package, making it easier to probe for multi-attach support before loading programs.
  • Program run batching — A new RunOptions.BatchSize option has been added to support batching when running programs.
Bug Fixes
  • Allow weak kfuncs loading without CAP_SYS_ADMIN — Loading programs with weak kfuncs on kernels that don't have the kfunc no longer fails with "operation not permitted" when the caller lacks CAP_SYS_ADMIN. The permission error is now treated as "not found" for weak kfuncs.
  • ELF reader nil panic — Fixed a panic that could occur when loading an ELF without BTF due to a nil extInfo pointer. Along with the fix, a suite of regression tests was added that exercises the core loader logic with non-BTF ELFs as well.
  • QueryResult.HaveLinkInfo heuristic — The heuristic has been updated to check for at least one attached program with a non-zero link ID, fixing a false positive introduced by a kernel change that began populating the revision field for cgroup queries.
  • Windows map/program count — Increased the default map and program count on Windows to reduce failures when loading collections with more maps than previously allocated.
More breaking changes
Deprecations

In this release we have removed a number of features which had been deprecated for a while.

Breaking changes to Memory, Variable and VariableSpec
Breaking changes to link info
Breaking changes to BTF API

We exported methods and types from the btf package. This allowed us to directly assign BTF func info, line info and CO-RE relocations to instructions from outside of the btf package, making some methods unneeded and thus got removed.

What's Changed
New Contributors

Full Changelog: cilium/ebpf@v0.20.0...v0.21.0

golangci/golangci-lint (github.com/golangci/golangci-lint/v2)

v2.11.3

Compare Source

Released on 2026-03-10

  1. Linters bug fixes

v2.11.2

Compare Source

Released on 2026-03-07

  1. Fixes
    • fmt: fix error when using the fmt command with explicit paths.

v2.11.1

Compare Source

Released on 2026-03-06

Due to an error related to AUR, some artifacts of the v2.11.0 release have not been published.

This release contains the same things as v2.11.0.

v2.11.0

Compare Source

Released on 2026-03-06

  1. Linters new features or changes
    • errcheck: from 1.9.0 to 1.10.0 (exclude crypto/rand.Read by default)
    • gosec: from 2.23.0 to 2.24.6 (new rules: G113, G118, G119, G120, G121, G122, G123, G408, G707)
    • noctx: from 0.4.0 to 0.5.0 (new detection: httptest.NewRequestWithContext)
    • prealloc: from 1.0.2 to 1.1.0
    • revive: from 1.14.0 to 1.15.0 (⚠️ Breaking change: package-related checks moved from var-naming to a new rule package-naming)
  2. Linters bug fixes
    • gocognit: from 1.2.0 to 1.2.1
    • gosec: from 2.24.6 to 2.24.7
    • unqueryvet: from 1.5.3 to 1.5.4
open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.42.0: /v0.64.0/v0.18.0/v0.0.16

Compare Source

Added
  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package.
    The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions.
    See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#​7985)
  • Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#​7924)
Changed
  • TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#​7856)
Fixed
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#​7931)
  • Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#​7964)
  • Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#​7834)
Removed
  • Drop support for [Go 1.24]. (#​7984)

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-go@v1.41.0...v1.42.0

grpc/grpc-go (google.golang.org/grpc)

v1.79.2: Release 1.79.2

Compare Source

Bug Fixes

  • stats: Prevent redundant error logging in health/ORCA producers by skipping stats/tracing processing when no stats handler is configured. (#​8874)

Configuration

📅 Schedule: Branch creation - "before 8am every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot requested review from a team as code owners March 10, 2026 00:45
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Mar 10, 2026
@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 10, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.19 -> v1.4.20
github.com/davecgh/go-spew v1.1.1 -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/mdlayher/socket v0.4.1 -> v0.5.1
github.com/pmezard/go-difflib v1.0.0 -> v1.0.1-0.20181226105442-5d4384ee4fb2
go.opentelemetry.io/otel/trace v1.41.0 -> v1.42.0
go.opentelemetry.io/proto/otlp v1.9.0 -> v1.10.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260209200024-4cfbd4190f57
File name: tools.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
github.com/MirrexOne/unqueryvet v1.5.3 -> v1.5.4
github.com/alexkohler/prealloc v1.0.2 -> v1.1.0
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.19 -> v1.4.20
github.com/davecgh/go-spew v1.1.1 -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/kisielk/errcheck v1.9.0 -> v1.10.0
github.com/mdlayher/socket v0.4.1 -> v0.5.1
github.com/mgechev/revive v1.14.0 -> v1.15.0
github.com/pmezard/go-difflib v1.0.0 -> v1.0.1-0.20181226105442-5d4384ee4fb2
github.com/securego/gosec/v2 v2.23.0 -> v2.24.8-0.20260309165252-619ce2117e08
github.com/sonatard/noctx v0.4.0 -> v0.5.0
github.com/uudashr/gocognit v1.2.0 -> v1.2.1
go.opentelemetry.io/otel/trace v1.41.0 -> v1.42.0
go.opentelemetry.io/proto/otlp v1.9.0 -> v1.10.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20260122232226-8e98ce8d340d -> v0.0.0-20260209200024-4cfbd4190f57
File name: tools/probe-ctrl/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated

Details:

Package Change
github.com/mdlayher/socket v0.4.1 -> v0.5.1
go.opentelemetry.io/otel v1.41.0 -> v1.42.0
go.opentelemetry.io/otel/metric v1.41.0 -> v1.42.0
golang.org/x/arch v0.24.0 -> v0.25.0
golang.org/x/sync v0.19.0 -> v0.20.0
golang.org/x/sys v0.41.0 -> v0.42.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260209200024-4cfbd4190f57
google.golang.org/grpc v1.79.1 -> v1.79.2

@rogercoll
Copy link
Copy Markdown
Contributor

Fixing CI error in #1238

@renovate renovate Bot force-pushed the renovate/go-dependencies branch 2 times, most recently from 54e7bde to c7ee993 Compare March 10, 2026 13:11
@linux-foundation-easycla
Copy link
Copy Markdown

linux-foundation-easycla Bot commented Mar 11, 2026

CLA Signed

The committers listed above are authorized under a signed CLA.

  • ✅ login: florianl / name: Florian Lehner (9be846c)
  • ✅ login: renovate[bot] / name: renovate[bot] (896a933)

@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 11, 2026

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@florianl florianl force-pushed the renovate/go-dependencies branch from a479813 to a90abd4 Compare March 11, 2026 08:34
@florianl
Copy link
Copy Markdown
Member

/easycla

@florianl florianl force-pushed the renovate/go-dependencies branch from a90abd4 to 9be846c Compare March 11, 2026 08:38
@christos68k christos68k merged commit 7a5ccb2 into main Mar 11, 2026
32 checks passed
@christos68k christos68k deleted the renovate/go-dependencies branch March 11, 2026 08:52
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants