Skip to content

fix(deps): update opentelemetry-go monorepo - #592

Open
renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/opentelemetry-go-monorepo
Open

renovate-sh-app[bot] wants to merge 1 commit into
mainfrom
renovate/opentelemetry-go-monorepo

Conversation

@renovate-sh-app

@renovate-sh-app renovate-sh-app Bot commented Jun 3, 2026 •

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
go.opentelemetry.io/otel v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.22.0 → v0.23.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.22.0 → v0.23.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.36.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.43.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/prometheus v0.58.0 → v0.69.0 age confidence
go.opentelemetry.io/otel/exporters/prometheus v0.65.0 → v0.69.0 age confidence
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.22.0 → v0.23.0 age confidence
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.43.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.45.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/metric v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/sdk v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/sdk/metric v1.46.0 → v1.47.0 age confidence
go.opentelemetry.io/otel/trace v1.46.0 → v1.47.0 age confidence

Release Notes

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.47.0: /v0.69.0/v0.23.0/v0.1.0

Compare Source

This release contains the first stable release of the OpenTelemetry Go Logs API and SDK.
Our project stability guarantees now apply to the following modules:

  • go.opentelemetry.io/otel/log
  • go.opentelemetry.io/otel/sdk/log

See our versioning policy for more information about these stability guarantees.

Added
  • Add String method for KeyValue type in go.opentelemetry.io/otel/attribute. (#​8205)
  • Add String method for Set type in go.opentelemetry.io/otel/attribute. (#​8347)
  • Add WithMaxExportBatchSize to go.opentelemetry.io/otel/sdk/metric to configure the maximum export batch size for PeriodicReader. (#​8960)
  • Add WithAttributeValueDepthLimit, DefaultAttributeValueDepthLimit, and SpanLimits.AttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/trace to configure the maximum depth of span, event, link, and instrumentation scope attribute values. (#​8938)
  • Add WithAttributeValueDepthLimit in go.opentelemetry.io/otel/sdk/log to configure the maximum depth of log record and instrumentation scope attribute values. (#​8938)
  • Add WithMaxResponseSize to go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp,
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, and
    go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#​8941)
  • Add experimental ProbabilitySampler in go.opentelemetry.io/otel/sdk/trace/x that conforms to the OpenTelemetry specification's threshold-based sampling algorithm. (#​8123)
  • Add experimental *Binder extension interfaces in go.opentelemetry.io/otel/metric/x for instruments that support binding attributes ahead of time. (#​8760)
  • Add the experimental Finisher synchronous metric instrument extension interface to go.opentelemetry.io/otel/metric/x. (#​8906)
Changed
  • Use the OpenTelemetry Attribute Collection representation for non-OTLP protocols for metric data diffs in go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest. (#​8993)
  • Apply a maximum depth of 64 by default to span, event, link, log record, and instrumentation scope attribute values in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log. (#​8938)
  • Reduce allocations when applying attribute value length limits in go.opentelemetry.io/otel/sdk/trace and go.opentelemetry.io/otel/sdk/log by rebuilding composite values only when truncation is needed. (#​8912)
  • Decode traceparent using a hex lookup table in go.opentelemetry.io/otel/propagation, which rejects the specification-disallowed upper-case characters without a separate scan of the header. (#​8739)
  • Decode all characters at constant indices in TraceIDFromHex and SpanIDFromHex in go.opentelemetry.io/otel/trace to eliminate bounds checks. (#​8740)
Fixed
  • Count valid U+FFFD replacement characters toward attribute value length limits in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log.
  • Truncate string attribute values to empty strings when the configured length limit is zero, including malformed UTF-8, in go.opentelemetry.io/otel/trace, go.opentelemetry.io/otel/sdk/trace, and go.opentelemetry.io/otel/sdk/log. (#​9054)
  • Fix a data race in NewPeriodicReader where r.inst was assigned after the background goroutine was launched in go.opentelemetry.io/otel/sdk/metric. (#​9028)
  • Prevent precision loss for large int64 values in Sum, Histogram, and ExponentialHistogram aggregations in go.opentelemetry.io/otel/sdk/metric. (#​8981)
  • Ensure grpc.DialOption values passed via WithDialOption take precedence over conflicting internally-computed defaults in
    go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc,
    go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc, and
    go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#​8805, #​8834, #​8836)
  • Treat overflowing OTEL_METRIC_EXPORT_INTERVAL and OTEL_METRIC_EXPORT_TIMEOUT values as invalid in go.opentelemetry.io/otel/sdk/metric. (#​8800)
  • Prevent a panic in NewFixedSizeReservoir and FixedSizeReservoirProvider when given a negative size in go.opentelemetry.io/otel/sdk/metric/exemplar; negative sizes are now clamped to zero, consistent with a size of zero. (#​8832)
  • Preserve exponential histogram ZeroThreshold during OTLP metric export in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#​8801)
  • Ensure metric helpers in go.opentelemetry.io/otel/semconv/v1.32.0, go.opentelemetry.io/otel/semconv/v1.33.0, and go.opentelemetry.io/otel/semconv/v1.34.0 record measurements only once when no attributes are provided. (#​8849)
  • Treat empty OTEL_TRACES_SAMPLER and OTEL_TRACES_SAMPLER_ARG values as unset in go.opentelemetry.io/otel/sdk/trace. (#​8873)
  • Normalize global OTEL_EXPORTER_OTLP_ENDPOINT path joining in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp so trailing-slash base URLs do not produce double-slash log export paths. (#​8864)
  • Prevent a deadlock when formatting an error passed to RecordError calls back into the span in go.opentelemetry.io/otel/sdk/trace. (#​8815)
  • Prevent SimpleSpanProcessor.Shutdown from panicking when constructed with a nil exporter in go.opentelemetry.io/otel/sdk/trace. (#​8844)
  • Propagate invalid exponential histogram scale errors to Prometheus exporter self-observability metrics in go.opentelemetry.io/otel/exporters/prometheus. (#​8839)
  • Retain instrument advisory attributes configured with go.opentelemetry.io/otel/metric/x.WithDefaultAttributes when a matching View in go.opentelemetry.io/otel/sdk/metric does not specify an attribute filter. (#​8859)
  • Ignore HTTP URL paths when building OTLP/gRPC metric exporter targets from OTEL_EXPORTER_OTLP_ENDPOINT and OTEL_EXPORTER_OTLP_METRICS_ENDPOINT, while preserving unix:// and unix-abstract:// targets; treat unix-abstract:// endpoints as insecure in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#​8862)
  • Ignore HTTP(S) paths when deriving gRPC trace exporter endpoints from OTEL_EXPORTER_OTLP_ENDPOINT and OTEL_EXPORTER_OTLP_TRACES_ENDPOINT in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#​8852)
  • Bound memory used while parsing dense W3C property metadata by storing it compactly and materializing Property values on demand in go.opentelemetry.io/otel/baggage and go.opentelemetry.io/otel/propagation.
Removed
  • Remove the experimental OTEL_GO_X_METRIC_EXPORT_BATCH_SIZE environment variable in go.opentelemetry.io/otel/sdk/metric.
    Use the WithMaxExportBatchSize option instead. (#​8960)
What's Changed
New Contributors

Full Changelog: open-telemetry/opentelemetry-go@v1.47.0-rc.1...v1.47.0


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app

renovate-sh-app Bot commented Jun 3, 2026 •

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: apps/historian/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 15 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
github.com/prometheus/client_golang v1.23.2 -> v1.24.1
github.com/prometheus/client_model v0.6.2 -> v0.6.3
github.com/prometheus/common v0.68.1 -> v0.72.0
github.com/prometheus/procfs v0.20.1 -> v0.22.0
go.opentelemetry.io/otel/log v0.22.0 -> v1.47.0
go.opentelemetry.io/otel/sdk/log v0.22.0 -> v1.47.0
golang.org/x/crypto v0.56.0 -> v0.57.0
golang.org/x/net v0.58.0 -> v0.59.0
golang.org/x/oauth2 v0.36.0 -> v0.37.0
golang.org/x/sync v0.22.0 -> v0.23.0
golang.org/x/sys v0.47.0 -> v0.48.0
golang.org/x/term v0.45.0 -> v0.46.0
golang.org/x/text v0.41.0 -> v0.42.0
google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260928230214-8a89bd6388cc
google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260928230214-8a89bd6388cc
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 15 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
github.com/prometheus/client_golang v1.23.2 -> v1.24.1
github.com/prometheus/common v0.68.0 -> v0.72.0
golang.org/x/net v0.58.0 -> v0.59.0
golang.org/x/oauth2 v0.36.0 -> v0.37.0
golang.org/x/sync v0.22.0 -> v0.23.0
github.com/prometheus/client_model v0.6.2 -> v0.6.3
github.com/prometheus/procfs v0.16.1 -> v0.22.0
go.opentelemetry.io/otel/log v0.22.0 -> v1.47.0
go.opentelemetry.io/otel/sdk/log v0.22.0 -> v1.47.0
golang.org/x/crypto v0.56.0 -> v0.57.0
golang.org/x/mod v0.40.0 -> v0.41.0
golang.org/x/sys v0.47.0 -> v0.48.0
golang.org/x/text v0.41.0 -> v0.42.0
google.golang.org/genproto/googleapis/api v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260928230214-8a89bd6388cc
google.golang.org/genproto/googleapis/rpc v0.0.0-20260819154853-08b0e4226688 -> v0.0.0-20260928230214-8a89bd6388cc
File name: testing/alerting-gen/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
go 1.25.0 -> 1.26.0

@renovate-sh-app renovate-sh-app Bot changed the title fix(deps): update opentelemetry-go monorepo [security] fix(deps): update module go.opentelemetry.io/otel/trace to v1.44.0 Jun 4, 2026
@renovate-sh-app renovate-sh-app Bot changed the title fix(deps): update module go.opentelemetry.io/otel/trace to v1.44.0 fix(deps): update opentelemetry-go monorepo to v1.44.0 Jun 10, 2026
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch from 91365b9 to e6ec687 Compare June 15, 2026 18:05
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch from e6ec687 to d857a34 Compare June 23, 2026 09:04
@cursor

cursor Bot commented Jun 23, 2026 •

Copy link
Copy Markdown

PR Summary

Medium Risk
No code changes, but v1.44.0 can alter telemetry export behavior (metric cardinality cap, OTLP size limits, prometheus label formatting) for services that rely on transitive OTel SDK usage.

Overview
Bumps the OpenTelemetry Go stack across the root module, apps/historian, and testing/alerting-gen by refreshing go.mod / go.sum only—no application source changes.

Core API packages move from v1.43.0 to v1.44.0 (otel, trace, metric, sdk, and aligned OTLP trace/metric/stdout exporters). Log-related modules jump to v0.20.0 (from mixed v0.12.x / v0.19.x on the root module), and otel/exporters/prometheus moves to v0.66.0. Transitive pins shift with the upgrade—notably grpc-gateway/v2 v2.29.0, google.golang.org/grpc v1.81.1, newer golang.org/x/ toolchain deps, prometheus/procfs v0.20.1, and a new indirect github.com/prometheus/otlptranslator.

Reviewers should treat this as inheriting upstream v1.44.0 behavior changes at runtime (via dskit / autoexport paths), especially the metrics SDK default cardinality limit of 2000 and stricter baggage handling, even though this repo does not configure those options directly in the diff.

Reviewed by Cursor Bugbot for commit a2edb9e. Bugbot is set up for automated code reviews on this repo. Configure here.

@renovate-sh-app renovate-sh-app Bot changed the title fix(deps): update opentelemetry-go monorepo to v1.44.0 fix(deps): update opentelemetry-go monorepo Jun 23, 2026
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 10 times, most recently from def86a2 to b82ad51 Compare June 28, 2026 03:29

@cursor cursor Bot left a comment •

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Stale Bugbot comment from a previous run.

Comment thread go.mod Outdated
go.opentelemetry.io/otel/metric v1.44.0 // indirect
go.opentelemetry.io/otel/sdk v1.44.0 // indirect
go.opentelemetry.io/otel/sdk/log v0.20.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.44.0 // indirect

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Default metric cardinality cap

Medium Severity

Bumping go.opentelemetry.io/otel/sdk/metric to v1.44.0 turns on a default cardinality limit of 2000. Instruments with more distinct attribute sets can be dropped or rolled into an overflow bucket, which can silently change metrics for high-cardinality telemetry. This repo does not set WithCardinalityLimit or related env overrides anywhere.

Additional Locations (1)
Fix in Cursor Fix in Web

Reviewed by Cursor Bugbot for commit b82ad51. Configure here.

Comment thread go.mod Outdated
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 3 times, most recently from 0fea112 to 92d1e75 Compare July 2, 2026 09:03
@renovate-sh-app renovate-sh-app Bot changed the title fix(deps): update opentelemetry-go monorepo chore(deps): update opentelemetry-go monorepo Jul 4, 2026
@renovate-sh-app renovate-sh-app Bot changed the title chore(deps): update opentelemetry-go monorepo fix(deps): update opentelemetry-go monorepo Jul 4, 2026
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch from 92d1e75 to 1932f48 Compare July 5, 2026 03:28
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 3 times, most recently from 2d45a7f to d9769e6 Compare July 30, 2026 19:03
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 2 times, most recently from 4f553a2 to f3400de Compare August 5, 2026 16:04
@renovate-sh-app
renovate-sh-app Bot requested a review from a team as a code owner August 5, 2026 16:04
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 4 times, most recently from 3cb1089 to cd397b3 Compare August 12, 2026 22:03
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 4 times, most recently from 9349dee to b720874 Compare August 21, 2026 16:03
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 6 times, most recently from f772656 to d47b444 Compare September 3, 2026 10:03
@renovate-sh-app
renovate-sh-app Bot force-pushed the renovate/opentelemetry-go-monorepo branch 8 times, most recently from aac8aa8 to 6fe5b29 Compare September 12, 2026 19:04

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.

There are 2 total unresolved issues (including 1 from previous review).

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit bf42065. Configure here.

Comment thread apps/historian/go.sum
| datasource | package                                                           | from    | to      |
| ---------- | ----------------------------------------------------------------- | ------- | ------- |
| go         | go.opentelemetry.io/otel                                          | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc       | v0.22.0 | v0.23.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp       | v0.22.0 | v0.23.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.36.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc | v1.43.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp | v1.43.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlptrace                 | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc   | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp   | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/prometheus                     | v0.58.0 | v0.69.0 |
| go         | go.opentelemetry.io/otel/exporters/prometheus                     | v0.65.0 | v0.69.0 |
| go         | go.opentelemetry.io/otel/exporters/stdout/stdoutlog               | v0.22.0 | v0.23.0 |
| go         | go.opentelemetry.io/otel/exporters/stdout/stdoutmetric            | v1.36.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/stdout/stdoutmetric            | v1.43.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/exporters/stdout/stdouttrace             | v1.45.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/metric                                   | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/sdk                                      | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/sdk/metric                               | v1.46.0 | v1.47.0 |
| go         | go.opentelemetry.io/otel/trace                                    | v1.46.0 | v1.47.0 |


Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants