Skip to content

chore(deps): update all non-major dependencies#233

Merged
alecthomas merged 1 commit intomainfrom
renovate/all-minor-patch
Mar 30, 2026
Merged

chore(deps): update all non-major dependencies#233
alecthomas merged 1 commit intomainfrom
renovate/all-minor-patch

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate Bot commented Mar 30, 2026 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/goproxy/goproxy v0.25.0 → v0.26.0 age confidence require minor
github.com/minio/minio-go/v7 v7.0.98 → v7.0.99 age confidence require patch
github.com/open-policy-agent/opa v1.14.1 → v1.15.0 age confidence require minor
go 1.26.0 → 1.26.1 age confidence patch
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.66.0 → v0.67.0 age confidence require minor
go.opentelemetry.io/otel v1.41.0 → v1.42.0 age confidence require minor
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.41.0 → v1.42.0 age confidence require minor
go.opentelemetry.io/otel/exporters/prometheus v0.63.0 → v0.64.0 age confidence require minor
go.opentelemetry.io/otel/metric v1.41.0 → v1.42.0 age confidence require minor
go.opentelemetry.io/otel/sdk v1.41.0 → v1.42.0 age confidence require minor
go.opentelemetry.io/otel/sdk/metric v1.41.0 → v1.42.0 age confidence require minor
golang.org/x/mod v0.33.0 → v0.34.0 age confidence require minor
goreleaser 2.14.1 → 2.14.3 age confidence patch
just 1.46.0 → 1.48.1 age confidence minor
lefthook 2.1.2 → 2.1.4 age confidence patch
proctor 0.9.2 → 0.9.3 age confidence patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

goproxy/goproxy (github.com/goproxy/goproxy)

v0.26.0

Compare Source

Bug Fixes
  • GoFetcher: stop hardcoding GOSUMDB=off in Go subprocess environment (#​169) (b841258), closes #​168
Code Refactoring
Tests
Miscellaneous Chores
minio/minio-go (github.com/minio/minio-go/v7)

v7.0.99

Compare Source

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.15.0

Compare Source

This release contains a mix of new features, performance improvements, and bugfixes. Notably:

  • Add logger plugin interface and file logger implementation with log rotation
  • Custom HTTPAuthPlugin behavior change, all per-request authentication logic must be moved from NewClient() to
    Prepare()
  • AWS signing supports for web identity for assume role credentials
Logger Plugin Support (#​8434) (authored by @​srenatus)

OPA now supports pluggable logging implementations via the logger plugin interface, which is based on Go's standard log/slog.Handler interface. This allows any slog.Handler implementation to be used as a logger plugin. Loggers can be configured via the server.logger_plugin configuration option and used for both runtime logging and decision logs. OPA includes a built-in file logger plugin (file_logger) that writes structured JSON logs with rotation support using lumberjack. Users can also implement and register custom logger plugins when building OPA.

Example configuration for server logging:

server:
  logger_plugin: file_logger

plugins:
  file_logger:
    path: /var/log/opa/server.log
    max_size_mb: 100
    max_age_days: 28
    max_backups: 3
    compress: true
    level: info

Example configuration for decision logs using the same plugin:

server:
  logger_plugin: file_logger

decision_logs:
  plugin: file_logger

plugins:
  file_logger:
    path: /var/log/opa/server.log
    max_size_mb: 100
    max_age_days: 28
    max_backups: 3
    compress: true
    level: info
Custom HTTPAuthPlugin behavior change (#​8376) (authored by @​srenatus)

The HTTPAuthPlugin.NewClient() method is now called once per Client instance and cached rather than being called for
every request. Custom plugins that performed per-request operations in NewClient() (such as request counters,
per-request transport wrapping, or logging/metrics side effects) will now only execute those operations once. All
per-request authentication logic must be moved from NewClient() to Prepare(). All plugins included in OPA have been
updated and are unaffected by this change.

Runtime, SDK, Tooling
  • plugins/logger: Add logger plugin interface and file logger implementation with log rotation (#​8434) (authored by
    @​srenatus)
  • plugins/logs: Decision logs can now use logger plugins for output (#​8434) (authored by @​srenatus)
  • logging: Add BufferedLogger to capture early startup logs before plugins are initialized (#​8434) (authored by
    @​srenatus)
  • plugins/rest: Configurable re-read interval for TLS client certificates via cert_reread_interval_seconds field.
    Defaults to re-reading on every request for backwards compatibility.
    The implementation also uses content hashing to detect changes and avoid re-parsing unchanged TLS certificates and
    keys. (#​8376) (authored by @​srenatus)
  • plugins/rest: All TLS configurations now inherit the minimum version and TLS ciphersuites as configured for the
    server. (#​8376) (authored by @​srenatus)
  • internal/providers/aws: Refactor deprecated crypto/elliptic APIs to crypto/ecdh (#​8395) (authored by @​kanywst)
  • plugins/rest: AWS Signing - Allow Service Account (Web Identity) credentials for Assume Role Credentials (#​8386) (
    authored by @​tiagogviegas)
Compiler, Topdown and Rego
  • ast: fix overlapping array and scalar pattern in rule index (authored by @​srenatus)
Bundles
Docs, Website, Ecosystem
Miscellaneous
golang/go (go)

v1.26.1

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.42.0: /v0.64.0/v0.18.0/v0.0.16

Compare Source

Added
  • Add go.opentelemetry.io/otel/semconv/v1.40.0 package.
    The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions.
    See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#​7985)
  • Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#​7924)
Changed
  • TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#​7856)
Fixed
  • Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#​7931)
  • Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#​7964)
  • Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#​7834)
Removed
  • Drop support for [Go 1.24]. (#​7984)

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-go@v1.41.0...v1.42.0

goreleaser/goreleaser (goreleaser)

v2.14.3

Announcement

Read the official announcement: Announcing GoReleaser v2.14.

Changelog

Other work

Full Changelog: goreleaser/goreleaser@v2.14.2...v2.14.3

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

v2.14.2

Announcement

Read the official announcement: Announcing GoReleaser v2.14.

Changelog

Bug fixes
Documentation updates
Other work

Full Changelog: goreleaser/goreleaser@v2.14.1...v2.14.2

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

casey/just (just)

v1.48.1

Compare Source

v1.48.0

Compare Source

Added
Changed
Misc

v1.47.1

Compare Source

Fixed
  • Block on running parallel dependencies (#​3139 by casey)
  • Fix setting-exported assignment visibility in child modules (#​3128 by casey)
Added
  • Add eager keyword to force evaluation of unused assignments (#​3131 by casey)
Changed
  • Only evaluate used variables in --evaluate and --command (#​3130 by casey)
Misc

v1.47.0

Compare Source

Added
Changed
Misc
evilmartians/lefthook (lefthook)

v2.1.4

Compare Source

v2.1.3

Compare Source

alecthomas/proctor (proctor)

v0.9.3

What's Changed

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
Copy link
Copy Markdown
Contributor Author

renovate Bot commented Mar 30, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated

Details:

Package Change
github.com/aofei/backoff v1.1.0 -> v1.2.0
go.opentelemetry.io/otel/trace v1.41.0 -> v1.42.0
google.golang.org/grpc v1.79.1 -> v1.79.3

@renovate renovate Bot requested a review from a team as a code owner March 30, 2026 01:33
@renovate renovate Bot requested review from alecthomas and removed request for a team March 30, 2026 01:33
@renovate renovate Bot force-pushed the renovate/all-minor-patch branch from 657a7c7 to b6e0629 Compare March 30, 2026 01:48
@alecthomas alecthomas merged commit 6efa580 into main Mar 30, 2026
8 checks passed
@alecthomas alecthomas deleted the renovate/all-minor-patch branch March 30, 2026 02:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@alecthomas alecthomas alecthomas approved these changes

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@alecthomas