deps: bump the minor-and-patch group with 10 updates

[dependabot]

Bumps the minor-and-patch group with 10 updates:

Package	From	To
github.com/agiledragon/gomonkey/v2	2.14.1	2.14.2
github.com/iotexproject/iotex-antenna-go/v2	2.6.4	2.7.0
github.com/iotexproject/iotex-proto	0.6.6-0.20260211020747-f26bd969ed16	0.6.10
github.com/uptrace/opentelemetry-go-extra/otelzap	0.2.2	0.3.2
go.etcd.io/bbolt	1.3.6	1.5.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	0.59.0	0.70.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	0.61.0	0.70.0
go.opentelemetry.io/otel	1.44.0	1.45.0
go.opentelemetry.io/otel/sdk	1.44.0	1.45.0
go.opentelemetry.io/otel/trace	1.44.0	1.45.0

Updates github.com/agiledragon/gomonkey/v2 from 2.14.1 to 2.14.2

Release notes

Sourced from github.com/agiledragon/gomonkey/v2's releases.

Fix Darwin ARM64 same-page SIGBUS and private method patch corruption

• Fix a potential SIGBUS on Darwin ARM64 when write removes execute permission from its own active page (NOP isolation was only 4 KiB on 16 KiB pages)
• Fix private method patch corruption on Darwin ARM64: short methods could be overrun by a 24-byte jump; now use a 4-byte B plus an executable trampoline

Reference: agiledragon/gomonkey#188

Commits

• 4d98643 Merge pull request #188 from JohnnyTing/fix/darwin-arm64-same-page-sigbus
• fafddf2 fix(darwin): prevent arm64 private method patch corruption
• 6ad276c fix(darwin): prevent arm64 same-page SIGBUS
• See full diff in compare view

Updates github.com/iotexproject/iotex-antenna-go/v2 from 2.6.4 to 2.7.0

Release notes

Sourced from github.com/iotexproject/iotex-antenna-go/v2's releases.

v2.7.0

What's Changed

• Support Ethereum typed transactions (EIP-2930/1559/4844/7702) by @​CoderZhi in iotexproject/iotex-antenna-go#113

Full Changelog: iotexproject/iotex-antenna-go@v2.6.4...v2.7.0

Commits

• 92b3098 Merge pull request #113 from iotexproject/support-typed-transactions
• cc33a21 feat: add SetCodeAuthorization wrapper using IoTeX chain IDs
• 3f629d5 address comment
• 006bf20 skip 5 testnet-dependent tests with drained burner account
• d793b0d support Ethereum typed transactions (AccessList/DynamicFee/Blob/SetCode)
• 3a9b3fb bump deps to track iotex-core v2.4.0
• See full diff in compare view

Updates github.com/iotexproject/iotex-proto from 0.6.6-0.20260211020747-f26bd969ed16 to 0.6.10

Release notes

Sourced from github.com/iotexproject/iotex-proto's releases.

v0.6.10

What's Changed

• feat(action): add voter reward destination action by @​envestcc in iotexproject/iotex-proto#177

Full Changelog: iotexproject/iotex-proto@v0.6.9...v0.6.10

v0.6.9

What's Changed

• feat(action): add SetVoterRewardOptIn action envelope by @​envestcc in iotexproject/iotex-proto#176

Full Changelog: iotexproject/iotex-proto@v0.6.8...v0.6.9

v0.6.8

What's Changed

• feat(action): add VoterRewardChunk RewardType for IIP-59 chunked drain by @​envestcc in iotexproject/iotex-proto#175

Full Changelog: iotexproject/iotex-proto@v0.6.7...v0.6.8

v0.6.7

What's Changed

• feat(action,state): add SetCommissionRate + commissionRate for IIP-59 by @​envestcc in iotexproject/iotex-proto#174

Full Changelog: iotexproject/iotex-proto@v0.6.6...v0.6.7

v0.6.6

What's Changed

• add authlist by @​envestcc in iotexproject/iotex-proto#167
• add identity to candidate by @​CoderZhi in iotexproject/iotex-proto#165
• Candidate activate with op by @​CoderZhi in iotexproject/iotex-proto#166
• Add bundle proto message and GetActPoolActions/SendActions RPC methods by @​CoderZhi in iotexproject/iotex-proto#171
• Add MessageType enum value for RPC and utils.go helper by @​CoderZhi in iotexproject/iotex-proto#172

Full Changelog: iotexproject/iotex-proto@v0.6.5...v0.6.6

upgrade protobuf to 1.4.2

No release notes provided.

Commits

• See full diff in compare view

Updates github.com/uptrace/opentelemetry-go-extra/otelzap from 0.2.2 to 0.3.2

Release notes

Sourced from github.com/uptrace/opentelemetry-go-extra/otelzap's releases.

v0.3.2

Please refer to CHANGELOG.md for details

v0.3.1

Please refer to CHANGELOG.md for details

v0.3.0

Please refer to CHANGELOG.md for details

v0.2.4

Please refer to CHANGELOG.md for details

v0.2.3

Please refer to CHANGELOG.md for details

Changelog

Sourced from github.com/uptrace/opentelemetry-go-extra/otelzap's changelog.

0.3.2 (2024-09-22)

0.3.1 (2024-06-13)

Bug Fixes

• otelgorm: make metric reporting work with prepared statements (d3f269a)

0.3.0 (2024-05-23)

Features

• convert otelzap to use logs api (3f68ff6)

0.2.4 (2024-03-18)

Bug Fixes

• otelsql: record error and status when SQL returns an error (1716db5), closes #115

0.2.3 (2023-09-27)

Bug Fixes

• otelsql: the connection to db must be closed after receiving the driver (39a2b46)

Commits

• 981c0d3 Merge pull request #136 from uptrace/release/v0.3.2
• ac7e808 Merge pull request #134 from rsergeychik/fix-float32-log-field-converter
• 150eedb chore: release v0.3.2 (release.sh)
• f7cfacc chore: fix script
• 20a3da6 chore: update dependencies
• da07ee0 fix float32 zapcore field converter
• e41a0f2 Merge pull request #130 from uptrace/release/v0.3.1
• 2e9198d chore: release v0.3.1 (release.sh)
• 2a1e172 go mod tidy
• aeefc42 Merge pull request #129 from magnusbaeck/connpool-sql-db
• Additional commits viewable in compare view

Updates go.etcd.io/bbolt from 1.3.6 to 1.5.0

Release notes

Sourced from go.etcd.io/bbolt's releases.

v1.5.0

See the CHANGELOG/v1.5.0 for more details.

v1.4.3

See the CHANGELOG/v1.4.3 for more details.

v1.4.2

See the CHANGELOG/v1.4.2 for more details.

v1.4.1

See the CHANGELOG/v1.4.1 for more details.

v1.4.0

See the CHANGELOG/v1.4.0 for more details.

v1.4.0-beta.0

See the CHANGELOG/v1.4.0-beta.0 for more details.

v1.3.12

See the CHANGELOG/v1.3.12 for more details.

v1.3.11

See the CHANGELOG/v1.3.11 for more details.

v1.3.10

See the CHANGELOG/v1.3.10 for more details.

v1.3.9

See the CHANGELOG/v1.3.9 for more details.

v1.3.8

See the CHANGELOG/v1.3.8 for more details.

v1.3.7

See the CHANGELOG/v1.3.7 for more details.

Commits

• e7a8b2d Merge pull request #1217 from pjsharath28/update-go-release-1.5
• a916f11 bump go 1.25.11
• 43ec888 Merge pull request #1212 from Elbehery/20260527_remove_maxSize_guard
• d43321f chore(test): remove redundant MaxSize guard in TestDB_MaxSizeExceededDoesNotGrow
• c13504d Merge pull request #1211 from ahrtr/20260526_maxsize_changelog
• 0a8fbd9 Merge pull request #1210 from Elbehery/20260526_support_data_size_limit
• 63896b7 Update changelog for the feature of supporting setting file size limit
• a85b887 Reimplement the feature of support setting data file size limit
• 443486e test: add and update tests for MaxSize and MMap behavior
• a1f42c4 Merge pull request #1208 from etcd-io/dependabot/github_actions/golangci/gola...
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.59.0 to 0.70.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0

Overview

Added

• Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)
• Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)
• Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)
• The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)
• Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)
• Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)
• Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)
• Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)
• Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)
• Add azurecontainerapps resource detector for Azure Container Apps. (#8939)
• Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)
• Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)
• Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

• Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)
• Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)
• Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)
• Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)
• Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)
• Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)
• The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

• Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)
• Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)
• Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)
• Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)
• Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)
• Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)
• Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)
• TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)
• Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)
• Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)
• Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)
• Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)
• Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)
• Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)
• Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)
• Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#9359)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

• Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)
• Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)
• Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)
• The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)
• Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)
• Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)
• Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)
• Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)
• Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)
• Add azurecontainerapps resource detector for Azure Container Apps. (#8939)
• Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)
• Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)
• Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

• Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)
• Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)
• Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)
• Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)
• Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)
• Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)
• The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

• Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)
• Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)
• Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)
• Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)
• Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)
• Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)
• Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)
• TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)
• Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)
• Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)
• Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)
• Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)
• Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)
• Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)
• Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)
• Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#9359)
• Strip connection number suffix from connection ID in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo to prevent unbounded metric cardinality. (#9352)

... (truncated)

Commits

• c8a87a6 Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0 (#9413)
• cde125c fix(deps): update aws-sdk-go-v2 monorepo (#9384)
• 88572a7 chore(deps): update googleapis to 6ac0973 (#9409)
• e4f511a chore(deps): update github/codeql-action action to v4.37.5 (#9410)
• 265eb0b fix(deps): update go.opentelemetry.io/otel digest to 48db2c6 (#9317)
• 941ba46 chore(deps): update github.com/charmbracelet/ultraviolet digest to 8b69304 (#...
• ededd3b chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.1 (#9406)
• 7c6e819 fix(deps): update module github.com/atombender/go-jsonschema to v0.24.1 (#9405)
• ec1e544 chore(deps): update github.com/lufia/plan9stats digest to 341c2f0 (#9403)
• 5d7e16a chore(deps): update github.com/golangci/rowserrcheck digest to d2031e3 (#9402)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.61.0 to 0.70.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.45.0/v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0

Overview

Added

• Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new resource detector for IBM Cloud VPC virtual server instances, ported from github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc. Detects cloud.provider, cloud.platform, cloud.region, cloud.availability_zone, cloud.account.id, cloud.resource_id, host.id, host.image.id, host.image.name, host.name, and host.type. (#9011)
• Add go.opentelemetry.io/contrib/detectors/k8sapi, a new resource detector that queries the Kubernetes API. Detects k8s.node.name and k8s.node.uid when K8S_NODE_NAME is set via the downward API, and k8s.cluster.uid derived from the kube-system namespace UID (works on any Kubernetes distribution). (#9108)
• Add new elasticbeanstalk resource detector for AWS Elastic Beanstalk, ported from processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk in opentelemetry-collector-contrib. (#8993)
• The resource created by go.opentelemetry.io/contrib/otelconf now includes default SDK attributes. (#8990)
• Add support for the aws.ecs resource detector in go.opentelemetry.io/contrib/otelconf/x. (#8915)
• Add support for the aws.eks resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9138)
• Add support for the azure.vm resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9074)
• Add support for the gcp resource detector in go.opentelemetry.io/contrib/otelconf/x. (#9137)
• Add go.opentelemetry.io/contrib/detectors/azure/azureappservice, a new resource detector for Azure App Service. Detects cloud.*, service.name, azure.resource_group.name, azure.app_service.instance.id, and deployment.environment.name from the WEBSITE_* and REGION_NAME environment variables. (#9289)
• Add azurecontainerapps resource detector for Azure Container Apps. (#8939)
• Add go.opentelemetry.io/contrib/detectors/azure/azurefunctions, a new resource detector for Azure Functions. Detects cloud.*, service.name, azure.resource_group.name, faas.instance, and deployment.environment.name from the FUNCTIONS_*, WEBSITE_*, CONTAINER_NAME, and REGION_NAME environment variables. (#9290)
• Add NewResourceDetector along with the WithAttributeFilter and WithTagKeyFilter options in go.opentelemetry.io/contrib/detectors/azure/azurevm. WithAttributeFilter restricts the returned resource to the attributes the filter accepts. WithTagKeyFilter opts in to azure.tag.<name> attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. (#9162)
• Add go.opentelemetry.io/contrib/detectors/vultr — a new resource detector for Vultr Cloud Compute instances, ported from processor/resourcedetectionprocessor/internal/vultr in opentelemetry-collector-contrib. Detects cloud.provider, cloud.platform, cloud.region, host.id, and host.name. (#8995)

Changed

• Upgrade go.opentelemetry.io/otel/semconv to v1.43.0, including updates across instrumentation and detector modules. See semantic-conventions v1.43.0 release for complete details. (#9337)
• Upgrade go.opentelemetry.io/otel/semconv to v1.42.0, including updates across instrumentation and detector modules. See semantic-conventions v1.42.0 release for complete details. (#9196)
• Use direct normalized-key lookups in Carrier.Get and Carrier.Keys in go.opentelemetry.io/contrib/propagators/envcar. (#9112)
• Update log bridge conversions to use attribute key-values instead of the removed log key-values in go.opentelemetry.io/contrib/bridges/otellogr, go.opentelemetry.io/contrib/bridges/otellogrus, go.opentelemetry.io/contrib/bridges/otelslog, and go.opentelemetry.io/contrib/bridges/otelzap. (#9180)
• The Version() function in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux has been replaced by const Version. (#9076)
• Set error.type attribute instead of adding exception span events in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#8977)
• Prefer the gRPC dial target over the resolved peer IP for the server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8904)
• The detector in go.opentelemetry.io/contrib/detectors/azure/azurevm now also detects cloud.account.id, cloud.availability_zone, azure.vm.name, azure.vm.size, azure.vm.scaleset.name, and azure.resource_group.name, and prefers osProfile.computerName for host.name (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. (#9162)

Fixed

• Fix Prometheus reader resource label filter configuration in go.opentelemetry.io/contrib/otelconf/v0.2.0. (#9062)
• Apply resource.detection/development.attributes.included and excluded filtering to resource detector attributes in go.opentelemetry.io/contrib/otelconf/x. (#9131)
• Honor the context configured with WithContext when constructing resources in go.opentelemetry.io/contrib/otelconf and go.opentelemetry.io/contrib/otelconf/x. (#9160)
• Handle nil response bodies from custom RoundTripper implementations in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp without panicking. (#9184)
• Fix incorrect (overestimated) sum calculation for runtime histograms in go.opentelemetry.io/contrib/instrumentation/runtime. (#9063)
• Fix Severity.UnmarshalText round trip for positive FATAL offsets above the named range in go.opentelemetry.io/contrib/processors/minsev. (#9197)
• Reduce binary size by fetching ConfigMaps via rest.HTTPClientFor instead of the Kubernetes clientset in go.opentelemetry.io/contrib/detectors/aws/eks. (#9284)
• TextMapPropagator in go.opentelemetry.io/contrib/propagators/autoprop returns the no-op propagator for empty input, matching the behavior of none. An unknown OTEL_PROPAGATORS value still returns an error with a nil propagator so NewTextMapPropagator falls back to the default TraceContext and Baggage propagators instead of disabling propagation. (#9163)
• Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in go.opentelemetry.io/contrib/bridges/otelslog. (#9238)
• Fix a data race in go.opentelemetry.io/contrib/bridges/otelslog where concurrent Handle calls could corrupt each other's log attributes because kvBuffer.KeyValues returned a slice aliasing a shared buffer. (#9229)
• Avoid a panic in go.opentelemetry.io/contrib/bridges/otelzap when a malformed error field contains a nil or non-error value. (#9068)
• Use azure.container_app.instance.id instead of service.instance.id for the replica name detected by go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps. (#9208)
• Preserve the underlying metadata errors returned with partial resources from go.opentelemetry.io/contrib/detectors/gcp. (#9069)
• Copy MultipartForm back to the request otelmux.Middleware was given after the wrapped handler returns, so net/http can find and remove the temp files ParseMultipartForm created on the context-derived request copy, when otelmux.Middleware wraps a handler directly, in go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux. This does not cover a handler panic, nor the common router.Use(...) integration, where gorilla/mux's own routing step makes an additional request copy the middleware cannot write back through; see gorilla/mux#777. (#9361)
• Report the b3 header from Fields() for the default B3Unspecified single-header injection encoding, matching what Inject writes, in go.opentelemetry.io/contrib/propagators/b3. (#9273)
• Fix go.opentelemetry.io/contrib/propagators/aws/xray producing deterministic trace and span IDs when the seed read from crypto/rand silently failed, by switching to math/rand/v2's concurrency-safe top-level generator. (#9359)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.45.0/2.5.2/0.70.0/0.37.2/0.25.0/0.20.0/0.16.2/0.17.0] - 2026-08-03

Added

• Add go.opentelemetry.io/contrib/detectors/ibmcloud/vpc, a new r...

  Description has been truncated

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud