build(deps): bump the go-minor-patch group across 1 directory with 14 updates - #93
Merged
nickmarden merged 2 commits intoAug 10, 2026
Merged
Conversation
Docker Image Builtdocker pull ghcr.io/tight-line/ballast:pr-93-1faf7cfHelm (values override)image:
repository: ghcr.io/tight-line/ballast
tag: "pr-93-1faf7cf"Image expires ~15 days after PR closes. |
Contributor
|
@dependabot rebase |
dependabot
Bot
force-pushed
the
dependabot/go_modules/go-minor-patch-4fbf3a850b
branch
from
August 10, 2026 18:37
31b594b to
757f0ba
Compare
nickmarden
added a commit
that referenced
this pull request
Aug 10, 2026
Dependency Review has been failing on every Go module bump with a bare "fetch failed" (PR #93, run 31419996907) while passing on Docker and Actions bumps. show-openssf-scorecard defaults to true, so for each added dependency the action needs the project's source repo URL. GitHub's dependency-change API supplies source_repository_url for Actions (and the action synthesizes it from owner/repo anyway), but leaves it null for most Go modules, so the action falls back to api.deps.dev to look it up. Unlike the Scorecard lookup that follows it, that deps.dev call has no error handling upstream, so egress blocking surfaces as an unhandled fetch rejection and fails the job before any dependency is reviewed. Allow api.deps.dev and api.securityscorecards.dev. The latter was also being blocked; it fails quietly, so the Scorecard summary was empty rather than fatal.
… updates Bumps the go-minor-patch group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.21.0` | `9.22.0` | | [go.opentelemetry.io/contrib/bridges/otelzap](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.19.0` | `0.20.0` | | [go.opentelemetry.io/contrib/bridges/prometheus](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.69.0` | `0.70.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc](https://github.com/open-telemetry/opentelemetry-go) | `0.20.0` | `0.21.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go) | `0.20.0` | `0.21.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp](https://github.com/open-telemetry/opentelemetry-go) | `1.44.0` | `1.45.0` | | [go.opentelemetry.io/otel/exporters/prometheus](https://github.com/open-telemetry/opentelemetry-go) | `0.66.0` | `0.67.0` | Updates `github.com/redis/go-redis/v9` from 9.21.0 to 9.22.0 - [Release notes](https://github.com/redis/go-redis/releases) - [Changelog](https://github.com/redis/go-redis/blob/master/RELEASE-NOTES.md) - [Commits](redis/go-redis@v9.21.0...v9.22.0) Updates `go.opentelemetry.io/contrib/bridges/otelzap` from 0.19.0 to 0.20.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@v0.19.0...v0.20.0) Updates `go.opentelemetry.io/contrib/bridges/prometheus` from 0.69.0 to 0.70.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.69.0...zpages/v0.70.0) Updates `go.opentelemetry.io/otel` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.20.0...log/v0.21.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.20.0...log/v0.21.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/exporters/prometheus` from 0.66.0 to 0.67.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@metric/x/v0.66.0...metric/x/v0.67.0) Updates `go.opentelemetry.io/otel/log` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.20.0...log/v0.21.0) Updates `go.opentelemetry.io/otel/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) Updates `go.opentelemetry.io/otel/sdk/log` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v0.20.0...log/v0.21.0) Updates `go.opentelemetry.io/otel/sdk/metric` from 1.44.0 to 1.45.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.44.0...v1.45.0) --- updated-dependencies: - dependency-name: github.com/redis/go-redis/v9 dependency-version: 9.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/contrib/bridges/otelzap dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/contrib/bridges/prometheus dependency-version: 0.70.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/exporters/prometheus dependency-version: 0.67.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/log dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/sdk/log dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch - dependency-name: go.opentelemetry.io/otel/sdk/metric dependency-version: 1.45.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-minor-patch ... Signed-off-by: dependabot[bot] <support@github.com>
go.opentelemetry.io/otel/log v0.21.0 drops its own log.KeyValue and log.Value in favor of the stable attribute package types, so Record.WalkAttributes now hands the callback an attribute.KeyValue. The old signature no longer compiles, which failed `go vet` and took down every job that runs `make check` on this branch. attribute.Key is its own string type, hence the conversion when indexing the map. No go.mod change: go.opentelemetry.io/otel is already a direct requirement, and otel/log stays one because logger.go still uses otellog.LoggerProvider. The assertion is unchanged and still passes, so the otelzap bridge still promotes structured keys to top-level attributes as before.
nickmarden
force-pushed
the
dependabot/go_modules/go-minor-patch-4fbf3a850b
branch
from
August 10, 2026 19:10
757f0ba to
1faf7cf
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-minor-patch group with 8 updates in the / directory:
9.21.09.22.00.19.00.20.00.69.00.70.00.20.00.21.00.20.00.21.01.44.01.45.01.44.01.45.00.66.00.67.0Updates
github.com/redis/go-redis/v9from 9.21.0 to 9.22.0Release notes
Sourced from github.com/redis/go-redis/v9's releases.
... (truncated)
Changelog
Sourced from github.com/redis/go-redis/v9's changelog.
... (truncated)
Commits
c7f59a2chore(release): prepare 9.22.0 (#3947)c994cfcfeat(autopipeline): automatic command pipelining (#3942)228b463chore(deps): bump actions/stale from 10 to 11 (#3944)a6be850feat(csc): add standalone client-side caching (#3941)82b0213chore(release): prepare 9.22.0-beta.1 (#3940)8eb9583fix(rediscmd): redact credential args in AppendCmd (#3939)90fd088chore(ci): point 8.10 testing at custom client-libs-test image (#3938)93f961afeat(timeseries): support multiple aggregators per key in TS.NRANGE (#3937)49e0041feat(himport): HIMPORT command with lazy per-connection prepare (#3919)3dd9675fix(proto): peek push notification name without demanding 36 bytes (#3936)Updates
go.opentelemetry.io/contrib/bridges/otelzapfrom 0.19.0 to 0.20.0Release notes
Sourced from go.opentelemetry.io/contrib/bridges/otelzap's releases.
Changelog
Sourced from go.opentelemetry.io/contrib/bridges/otelzap's changelog.
... (truncated)
Commits
0e5bef9Release v0.20.0 (#758)4d6b37eupdate grpc example commands (#756)7b51f7aBump github.com/emicklei/go-restful/v3 from 3.5.0 to 3.5.1 in /instrumentatio...8db2eaeBump actions/cache from v2.1.4 to v2.1.5 (#752)57cfdfcBump github.com/aws/aws-sdk-go from 1.38.17 to 1.38.21 in /detectors/aws (#751)e1a7c47Bump github.com/emicklei/go-restful/v3 (#745)b82a9a1Bump github.com/labstack/echo/v4 from 4.2.1 to 4.2.2 in /instrumentation/gith...960b296Bump github.com/gin-gonic/gin from 1.6.3 to 1.7.1 in /instrumentation/github....ac15859Bump google.golang.org/grpc from 1.36.1 to 1.37.0 in /instrumentation/google....988a57dBump github.com/emicklei/go-restful/v3 from 3.4.0 to 3.5.0 in /instrumentatio...Updates
go.opentelemetry.io/contrib/bridges/prometheusfrom 0.69.0 to 0.70.0Changelog
Sourced from go.opentelemetry.io/contrib/bridges/prometheus's changelog.
... (truncated)
Commits
c8a87a6Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0 (#9413)cde125cfix(deps): update aws-sdk-go-v2 monorepo (#9384)88572a7chore(deps): update googleapis to 6ac0973 (#9409)e4f511achore(deps): update github/codeql-action action to v4.37.5 (#9410)265eb0bfix(deps): update go.opentelemetry.io/otel digest to 48db2c6 (#9317)941ba46chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...ededd3bchore(deps): update module github.com/lucasb-eyer/go-colorful to v1...Description has been truncated