Skip to content

build(deps): bump the go_modules group across 1 directory with 11 updates#1

Open
dependabot[bot] wants to merge 1 commit intov2from
dependabot/go_modules/go_modules-a7b5ef46db
Open

build(deps): bump the go_modules group across 1 directory with 11 updates#1
dependabot[bot] wants to merge 1 commit intov2from
dependabot/go_modules/go_modules-a7b5ef46db

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Nov 7, 2024

Bumps the go_modules group with 3 updates in the / directory: github.com/containerd/containerd, github.com/docker/docker and github.com/moby/buildkit.

Updates github.com/containerd/containerd from 1.6.19 to 1.6.26

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.6.26

Welcome to the v1.6.26 release of containerd!

The twenty-sixth patch release for containerd 1.6 contains various fixes and updates.

Notable Updates

  • Fix windows default path overwrite issue (#9441)
  • Update push to inherit distribution sources from parent (#9453)
  • Mask /sys/devices/virtual/powercap path in runtime spec and deny in default apparmor profile (GHSA-7ww5-4wqc-m92c)

Deprecation Warnings

  • Emit deprecation warning for AUFS snapshotter usage (#9448)
  • Emit deprecation warning for v1 runtime usage (#9468)
  • Emit deprecation warning for CRI v1alpha1 usage (#9468)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Samuel Karp
  • Derek McGowan
  • Kohei Tokunaga
  • Phil Estes
  • Bjorn Neergaard
  • Sebastiaan van Stijn
  • Brian Goff
  • Charity Kathure
  • Kazuyoshi Kato
  • Milas Bowman
  • Wei Fu
  • ruiwen-zhao

Changes

  • [release/1.6] Prepare release notes for v1.6.26 (#9490)
    • ac5c5d3e0 Prepare release notes for v1.6.26
  • Github Security Advisory GHSA-7ww5-4wqc-m92c
    • 02f07fe19 contrib/apparmor: deny /sys/devices/virtual/powercap
    • c94577e78 oci/spec: deny /sys/devices/virtual/powercap
  • [release/1.6] update to go1.20.12, test go1.21.5 (#9472)
    • 7cbdfc92e update to go1.20.12, test go1.21.5
    • 024b1cce6 update to go1.20.11, test go1.21.4
  • [release/1.6] Add cri-api v1alpha2 usage warning to all api calls (#9484)

... (truncated)

Commits
  • 3dd1e88 Merge pull request #9490 from dmcgowan/prepare-1.6.26
  • 746b910 Merge pull request from GHSA-7ww5-4wqc-m92c
  • ac5c5d3 Prepare release notes for v1.6.26
  • e7ca005 Merge pull request #9472 from thaJeztah/1.6_update_golang_1.20.12
  • 7cbdfc9 update to go1.20.12, test go1.21.5
  • 024b1cc update to go1.20.11, test go1.21.4
  • 2e40459 Merge pull request #9484 from ruiwen-zhao/cri-api-warning-1.6
  • 64e56bf Add cri-api v1alpha2 usage warning to all api calls
  • c566b7d Merge pull request #9468 from samuelkarp/deprecation-warning-runtime-1.6
  • efefd3b tasks: emit warning for runc v1 runtime
  • Additional commits viewable in compare view

Updates github.com/docker/docker from 23.0.3+incompatible to 25.0.6+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.6

25.0.6

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a fix for CVE-2024-41110 / GHSA-v23v-6jw2-98fq that impacted setups using authorization plugins (AuthZ) for access control.

Bug fixes and enhancements

  • [25.0] remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47695
  • [25.0 backport] Fix a nil dereference when getting image history for images having layers without the Created value set. moby/moby#47759
  • [25.0 backport] apparmor: Allow confined runc to kill containers. moby/moby#47830
  • [25.0 backport] Fix an issue where rapidly promoting a Swarm node after another node was demoted could cause the promoted node to fail its promotion. moby/moby#47869
  • [25.0 backport] don't depend on containerd platform.Parse to return a typed error. moby/moby#47890
  • [25.0 backport] builder/mobyexporter: Add missing nil check moby/moby#47987

Packaging updates

Full Changelog: moby/moby@v25.0.5...v25.0.6

v25.0.5

25.0.5

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a security fix for CVE-2024-29018, a potential data exfiltration from 'internal' networks via authoritative DNS servers.

Bug fixes and enhancements

  • CVE-2024-29018: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589

  • plugin: fix mounting /etc/hosts when running in UserNS. moby/moby#47588

  • rootless: fix open /etc/docker/plugins: permission denied. moby/moby#47587

  • Fix multiple parallel docker build runs leaking disk space. moby/moby#47527

... (truncated)

Commits
  • b08a51f Merge pull request #48231 from austinvazquez/backport-vendor-otel-v0.46.1-to-...
  • d151b0f vendor: OTEL v0.46.1 / v1.21.0
  • c6ba9a5 Merge pull request #48225 from austinvazquez/backport-workflow-artifact-reten...
  • 4673a3c Merge pull request #48227 from austinvazquez/backport-backport-branch-check-t...
  • 30f8908 github/ci: Check if backport is opened against the expected branch
  • 7454d6a ci: update workflow artifacts retention
  • 65cc597 Merge commit from fork
  • b722836 Merge pull request #48199 from austinvazquez/update-containerd-binary-to-1.7.20
  • e8ecb9c update containerd binary to v1.7.20
  • e6cae1f update containerd binary to v1.7.19
  • Additional commits viewable in compare view

Updates github.com/moby/buildkit from 0.11.5 to 0.12.5

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.12.5

https://hub.docker.com/r/moby/buildkit

Notable changes:

This release contains following security fixes:

v0.12.4

Welcome to the 0.12.4 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Notable changes

  • Fix possible concurrent map access on remote cache export #4346
  • Fix hang on debug server listener #4361
  • Fix possible deadlock in History API under high number of parallel builds #4362
  • Fix possible panic on handling deleted records in History API #4451
  • Fix possible data corruption in zstd library #4372

v0.12.3

Welcome to the 0.12.3 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Notable changes

  • Fix possible duplicate source files in provenance attestation for chained builds #4190
  • Fix possible negative step time in progressbar for step shared with other build request #4183
  • Fix properly closing history and cache DB on shutdown to avoid corruption #4185 #4189
  • Fix incorrect error handling for invalid HTTP source URLs #4201
  • Fix fallback cases for ambiguous insecure configuration provided for registry used as push target. #4299
  • Fix possible data race with parallel image config resolves #4157
  • Fix regression in v0.12 for clients waiting on buildkitd to become available #4200
  • Fix Cgroup NS handling for hosts supporting only CgroupV1 #4308

v0.12.2

Welcome to the 0.12.2 release of buildkit!

... (truncated)

Commits
  • bac3f2b update runc to v1.1.12
  • f781267 exec: add extra validation for submount sources
  • d089e0b oci: fix error handling on submount calls
  • 00fe637 executor: recheck mount stub path within root after container run
  • 92cc595 llbsolver: make sure interactive container API validates entitlements
  • 5026d95 gateway: pass executor with build and not access worker directly
  • 7718bd5 pb: add extra validation to protobuf types
  • e1924dc sourcepolicy: add validations for nil values
  • 96663dd exporter: add validation for platforms key value
  • 481d9c4 exporter: add validation for invalid platorm
  • Additional commits viewable in compare view

Updates github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible

Release notes

Sourced from github.com/docker/distribution's releases.

v2.8.2

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2

v2.8.2-beta.2

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2-beta.2

v2.8.2-beta.1

NOTE: This is a pre-release that does not contain any artifacts!

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2-beta.1

Commits
  • 7c354a4 Merge pull request #3915 from distribution/2.8.2-release-notes
  • a173a9c Add v2.8.2 release notes
  • 4894d35 Merge pull request #3914 from vvoland/handle-forbidden-28
  • f067f66 Merge pull request #3783 from ndeloof/accept-encoding-28
  • 483ad69 registry/errors: Parse http forbidden as denied
  • 2b0f84d Revert "registry/client: set Accept: identity header when getting layers"
  • 320d6a1 Merge pull request #3912 from distribution/2.8.2-beta.2-release-notes
  • 5f3ca1b Add release notes for 2.8.2-beta.2 release
  • cb840f6 Merge pull request #3911 from thaJeztah/2.8_backport_fix_releaser_filenames
  • e884644 Dockerfile: fix filenames of artifacts
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.29.0 to 0.40.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.15.0/0.40.0/0.9.0] - 2023-02-27

This release is the last to support [Go 1.18]. The next release will require at least [Go 1.19].

Added

  • Support [Go 1.20]. (#3372)
  • Add SpanNameFormatter option to package go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#3343)

Changed

  • Change to use protobuf parser instead of encoding/json to accept enums as strings in go.opentelemetry.io/contrib/samplers/jaegerremote. (#3183)

Fixed

  • Remove use of deprecated "math/rand".Seed in go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama/example/producer. (#3396)
  • Do not assume "aws" partition in ecs detector to prevent panic in go.opentelemetry.io/contrib/detectors/aws/ecs. (#3167)
  • The span name of producer spans from go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama is corrected to use publish instead of send. (#3369)
  • Attribute types are corrected in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#3369)
    • aws.dynamodb.table_names is now a string slice value.
    • aws.dynamodb.global_secondary_indexes is now a string slice value.
    • aws.dynamodb.local_secondary_indexes is now a string slice value.
    • aws.dynamodb.attribute_definitions is now a string slice value.
    • aws.dynamodb.global_secondary_index_updates is now a string slice value.
    • aws.dynamodb.provisioned_read_capacity is now a float64 value.
    • aws.dynamodb.provisioned_write_capacity is now a float64 value.

[1.14.0/0.39.0/0.8.0] - 2023-02-07

Changed

  • Change runtime.uptime instrument in go.opentelemetry.io/contrib/instrumentation/runtime from Int64ObservableUpDownCounter to Int64ObservableCounter, since the value is monotonic. (#3347)
  • samplers/jaegerremote: change to use protobuf parser instead of encoding/json to accept enums as strings. (#3183)

Fixed

  • The GCE detector in go.opentelemetry.io/contrib/detectors/gcp includes the "cloud.region" attribute when appropriate. (#3367)

[1.13.0/0.38.0/0.7.0] - 2023-01-30

Added

  • Add WithSpanNameFormatter to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to allow customizing span names. (#3041)
  • Add missing recommended AWS Lambda resource attributes faas.instance and faas.max_memory in go.opentelemetry.io/contrib/detectors/aws/lambda. (#3148)
  • Improve documentation for go.opentelemetry.io/contrib/samplers/jaegerremote by providing examples of sampling endpoints. (#3147)
  • Add WithServerName to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to set the primary server name of a Handler. (#3182)

Changed

... (truncated)

Commits

Updates go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace from 0.29.0 to 0.40.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace's changelog.

[1.15.0/0.40.0/0.9.0] - 2023-02-27

This release is the last to support [Go 1.18]. The next release will require at least [Go 1.19].

Added

  • Support [Go 1.20]. (#3372)
  • Add SpanNameFormatter option to package go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#3343)

Changed

  • Change to use protobuf parser instead of encoding/json to accept enums as strings in go.opentelemetry.io/contrib/samplers/jaegerremote. (#3183)

Fixed

  • Remove use of deprecated "math/rand".Seed in go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama/example/producer. (#3396)
  • Do not assume "aws" partition in ecs detector to prevent panic in go.opentelemetry.io/contrib/detectors/aws/ecs. (#3167)
  • The span name of producer spans from go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama is corrected to use publish instead of send. (#3369)
  • Attribute types are corrected in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#3369)
    • aws.dynamodb.table_names is now a string slice value.
    • aws.dynamodb.global_secondary_indexes is now a string slice value.
    • aws.dynamodb.local_secondary_indexes is now a string slice value.
    • aws.dynamodb.attribute_definitions is now a string slice value.
    • aws.dynamodb.global_secondary_index_updates is now a string slice value.
    • aws.dynamodb.provisioned_read_capacity is now a float64 value.
    • aws.dynamodb.provisioned_write_capacity is now a float64 value.

[1.14.0/0.39.0/0.8.0] - 2023-02-07

Changed

  • Change runtime.uptime instrument in go.opentelemetry.io/contrib/instrumentation/runtime from Int64ObservableUpDownCounter to Int64ObservableCounter, since the value is monotonic. (#3347)
  • samplers/jaegerremote: change to use protobuf parser instead of encoding/json to accept enums as strings. (#3183)

Fixed

  • The GCE detector in go.opentelemetry.io/contrib/detectors/gcp includes the "cloud.region" attribute when appropriate. (#3367)

[1.13.0/0.38.0/0.7.0] - 2023-01-30

Added

  • Add WithSpanNameFormatter to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to allow customizing span names. (#3041)
  • Add missing recommended AWS Lambda resource attributes faas.instance and faas.max_memory in go.opentelemetry.io/contrib/detectors/aws/lambda. (#3148)
  • Improve documentation for go.opentelemetry.io/contrib/samplers/jaegerremote by providing examples of sampling endpoints. (#3147)
  • Add WithServerName to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to set the primary server name of a Handler. (#3182)

Changed

... (truncated)

Commits

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.29.0 to 0.40.0

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.15.0/0.40.0/0.9.0] - 2023-02-27

This release is the last to support [Go 1.18]. The next release will require at least [Go 1.19].

Added

  • Support [Go 1.20]. (#3372)
  • Add SpanNameFormatter option to package go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#3343)

Changed

  • Change to use protobuf parser instead of encoding/json to accept enums as strings in go.opentelemetry.io/contrib/samplers/jaegerremote. (#3183)

Fixed

  • Remove use of deprecated "math/rand".Seed in go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama/example/producer. (#3396)
  • Do not assume "aws" partition in ecs detector to prevent panic in go.opentelemetry.io/contrib/detectors/aws/ecs. (#3167)
  • The span name of producer spans from go.opentelemetry.io/contrib/instrumentation/github.com/Shopify/sarama/otelsarama is corrected to use publish instead of send. (#3369)
  • Attribute types are corrected in go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws. (#3369)
    • aws.dynamodb.table_names is now a string slice value.
    • aws.dynamodb.global_secondary_indexes is now a string slice value.
    • aws.dynamodb.local_secondary_indexes is now a string slice value.
    • aws.dynamodb.attribute_definitions is now a string slice value.
    • aws.dynamodb.global_secondary_index_updates is now a string slice value.
    • aws.dynamodb.provisioned_read_capacity is now a float64 value.
    • aws.dynamodb.provisioned_write_capacity is now a float64 value.

[1.14.0/0.39.0/0.8.0] - 2023-02-07

Changed

  • Change runtime.uptime instrument in go.opentelemetry.io/contrib/instrumentation/runtime from Int64ObservableUpDownCounter to Int64ObservableCounter, since the value is monotonic. (#3347)
  • samplers/jaegerremote: change to use protobuf parser instead of encoding/json to accept enums as strings. (#3183)

Fixed

  • The GCE detector in go.opentelemetry.io/contrib/detectors/gcp includes the "cloud.region" attribute when appropriate. (#3367)

[1.13.0/0.38.0/0.7.0] - 2023-01-30

Added

  • Add WithSpanNameFormatter to go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux to allow customizing span names. (#3041)
  • Add missing recommended AWS Lambda resource attributes faas.instance and faas.max_memory in go.opentelemetry.io/contrib/detectors/aws/lambda. (#3148)
  • Improve documentation for go.opentelemetry.io/contrib/samplers/jaegerremote by providing examples of sampling endpoints. (#3147)
  • Add WithServerName to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to set the primary server name of a Handler. (#3182)

Changed

... (truncated)

Commits

Updates golang.org/x/crypto from 0.2.0 to 0.14.0

Commits
  • e3cc52e go.mod: update golang.org/x dependencies
  • 833695f ssh: add server side support for ping@openssh.com protocol extension
  • ec07f4e chacha20: drop Go 1.10 compatibility for arm64
  • b665ba6 all: use crypto/ed25519 instead of golang.org/x/crypto/ed25519
  • a1aeb9b ssh: add test cases for compatibility with old (buggy) clients
  • 28c53ff ssh: add MultiAlgorithmSigner
  • 3f0842a sha3: have ShakeHash extend hash.Hash
  • e90f1e1 cryptobyte: add uint48 methods
  • d359caa ssh: support for marshaling keys using the OpenSSH format
  • c5370d2 ssh: check the declared public key algo against decoded one
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.7.0 to 0.17.0

Commits
  • b225e7c http2: limit maximum handler goroutines to MaxConcurrentStreams
  • 88194ad go.mod: update golang.org/x dependencies
  • 2b60a61 quic: fix several bugs in flow control accounting
  • 73d82ef quic: handle DATA_BLOCKED frames
  • 5d5a036 quic: handle streams moving from the data queue to the meta queue
  • 350aad2 quic: correctly extend peer's flow control window after MAX_DATA
  • 21814e7 quic: validate connection id transport parameters
  • a600b35 quic: avoid redundant MAX_DATA updates
  • ea63359 http2: check stream body is present on read timeout
  • ddd8598 quic: version negotiation
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.50.1 to 1.58.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.58.3

Security

  • server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

    In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.58.2

Bug Fixes

  • balancer/weighted_round_robin: fix ticker leak on update

    A new ticker is created every time there is an update of addresses or configuration, but was not properly stopped. This change stops the ticker when it is no longer needed.

Release 1.58.1

Bug Fixes

  • grpc: fix a bug that was decrementing active RPC count too early for streaming RPCs; leading to channel moving to IDLE even though it had open streams
  • grpc: fix a bug where transports were not being closed upon channel entering IDLE

Release 1.58.0

API Changes

See #6472 for details about these changes.

  • balancer: add StateListener to NewSubConnOptions for SubConn state updates and deprecate Balancer.UpdateSubConnState (#6481)
    • UpdateSubConnState will be deleted in the future.
  • balancer: add SubConn.Shutdown and deprecate Balancer.RemoveSubConn (#6493)
    • RemoveSubConn will be deleted in the future.
  • resolver: remove deprecated AddressType (#6451)
    • This was previously used as a signal to enable the "grpclb" load balancing policy, and to pass LB addresses to the policy. Instead, balancer/grpclb/state.Set() should be used to add these addresses to the name resolver's output. The built-in "dns" name resolver already does this.
  • resolver: add new field Endpoints to State and deprecate Addresses (#6471)
    • Addresses will be deleted in the future.

New Features

  • balancer/leastrequest: Add experimental support for least request LB policy and least request configured as a custom xDS policy (#6510, #6517)
    • Set GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=true to enable
  • stats: Add an RPC event for blocking caused by the LB policy's picker (#6422)

Bug Fixes

  • clusterresolver: fix deadlock when dns resolver responds inline with update or error at build time (#6563)
  • grpc: fix a bug where the channel could erroneously report TRANSIENT_FAILURE when actually moving to IDLE (#6497)
  • balancergroup: do not cache closed sub-balancers by default; affects rls, weightedtarget and clustermanager LB policies (#6523)
  • client: fix a bug that prevented detection of RPC status in trailers-only RPC responses when using ClientStream.Header(), and prevented retry of the RPC (#6557)

Performance Improvements

  • client & server: Add experimental [With]SharedWriteBuffer to improve performance by reducing allocations when sending RPC messages. (Disabled by default.) (#6309)

... (truncated)

Commits

@dependabot
build(deps): bump the go_modules group across 1 directory with 11 upd…
aceb70f 
…ates

Bumps the go_modules group with 3 updates in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd), [github.com/docker/docker](https://github.com/docker/docker) and [github.com/moby/buildkit](https://github.com/moby/buildkit).


Updates `github.com/containerd/containerd` from 1.6.19 to 1.6.26
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.6.19...v1.6.26)

Updates `github.com/docker/docker` from 23.0.3+incompatible to 25.0.6+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v23.0.3...v25.0.6)

Updates `github.com/moby/buildkit` from 0.11.5 to 0.12.5
- [Release notes](https://github.com/moby/buildkit/releases)
- [Commits](moby/buildkit@v0.11.5...v0.12.5)

Updates `github.com/docker/distribution` from 2.8.1+incompatible to 2.8.2+incompatible
- [Release notes](https://github.com/docker/distribution/releases)
- [Commits](distribution/distribution@v2.8.1...v2.8.2)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.29.0 to 0.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.29.0...zpages/v0.40.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace` from 0.29.0 to 0.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.29.0...zpages/v0.40.0)

Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.29.0 to 0.40.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.29.0...zpages/v0.40.0)

Updates `golang.org/x/crypto` from 0.2.0 to 0.14.0
- [Commits](golang/crypto@v0.2.0...v0.14.0)

Updates `golang.org/x/net` from 0.7.0 to 0.17.0
- [Commits](golang/net@v0.7.0...v0.17.0)

Updates `google.golang.org/grpc` from 1.50.1 to 1.58.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.50.1...v1.58.3)

Updates `google.golang.org/protobuf` from 1.28.1 to 1.31.0

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/moby/buildkit
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/docker/distribution
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants