Skip to content

Comments

chore(deps): update all dependencies#191

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all
Open

chore(deps): update all dependencies#191
renovate[bot] wants to merge 1 commit intomainfrom
renovate/all

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Feb 19, 2026

This PR contains the following updates:

Package Type Update Change Age Confidence
aquasecurity/trivy-action action patch 0.34.00.34.1 age confidence
github.com/open-telemetry/opentelemetry-operator require minor v0.144.0v0.145.0 age confidence
go.opentelemetry.io/collector/component require minor v1.50.0v1.52.0 age confidence
go.opentelemetry.io/collector/config/configauth require minor v1.50.0v1.52.0 age confidence
go.opentelemetry.io/collector/config/configcompression require minor v1.50.0v1.52.0 age confidence
go.opentelemetry.io/collector/config/configopaque require minor v1.50.0v1.52.0 age confidence
go.opentelemetry.io/collector/config/configtelemetry require minor v0.142.0v0.146.1 age confidence
go.opentelemetry.io/collector/otelcol require minor v0.142.0v0.146.1 age confidence
go.opentelemetry.io/collector/pipeline require minor v1.50.0v1.52.0 age confidence
go.opentelemetry.io/collector/service require minor v0.142.0v0.146.1 age confidence
sigs.k8s.io/controller-runtime require minor v0.22.5v0.23.1 age confidence

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.34.1

Compare Source

What's Changed

Full Changelog: aquasecurity/trivy-action@0.34.0...0.34.1

open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)

v0.145.0

Compare Source

0.145.0

🛑 Breaking changes 🛑
  • collector: Remove operator.collector.default.config feature gate (#​4473)
🚀 New components 🚀
  • clusterObservability: Inital implementation of ClusterObservability CRD (#​3820)
    This change provides an initial implementation of the Cluster Observability CRD and operator control loop.
    Reconcilation is disabled by default.
    Currently, the CRD is not included in the operator bundle and must be installed manually.
    To enable reconciliation, enable the --feature-gates=+operator.clusterobservability feature gate.
💡 Enhancements 💡
  • target allocator: Add readiness and liveness probe configurations for target allocator CRD (#​4639)
  • target allocator: Make the least-weighted target allocation strategy take job name into account. (#​3128)
    Uses job name instead of "first match" to when number of targets is equal. The effect is to spread out targets with the same job name across collectors.
🧰 Bug fixes 🧰
  • target allocator: Fix TLS certificate hot-reload for mTLS connections (#​4368)
    The Target Allocator now automatically reloads TLS certificates when they are renewed
    by cert-manager. Previously, certificate renewals required a pod restart because
    certificates were only loaded once at startup. The fix uses fsnotify to watch the
    certificate directory and dynamically reloads certificates via the GetCertificate
    callback, enabling seamless certificate rotation without downtime.

  • collector: Configure collector to reload client certificate periodically (#​4657)
    When the collector connects to the target allocator over mTLS, certificates were not automatically reloaded after expiration. This adds reload_interval to the TLS configuration, enabling the Prometheus receiver to periodically reload certificates from disk.

    The default interval of 5 minutes provides a good balance between picking up renewed certificates promptly and avoiding unnecessary overhead.

  • operator: Set Kubernetes API server egress network policy port dynamically. (#​4411)
    The operator network policy egress rule for the Kubernetes API server was hardcoded to port 6443.
    This PR uses uses endpointslices.discovery.k8s.io -n default kubernetes to get the port and IP addresses of the Kubernetes API server
    for the operator egress network policy.

Components
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)

v1.52.0

v1.51.0

💡 Enhancements 💡
  • pkg/scraperhelper: ScraperID has been added to the logs for metrics, logs, and profiles (#​14461)
🧰 Bug fixes 🧰
  • exporter/otlp_grpc: Fix the OTLP exporter balancer to use round_robin by default, as intended. (#​14090)

  • pkg/config/configoptional: Fix Unmarshal methods not being called when config is wrapped inside Optional (#​14500)
    This bug notably manifested in the fact that the sending_queue::batch::sizer config for exporters
    stopped defaulting to sending_queue::sizer, which sometimes caused the wrong units to be used
    when configuring sending_queue::batch::min_size and max_size.

    As part of the fix, xconfmap exposes a new xconfmap.WithForceUnmarshaler option, to be used in the Unmarshal methods
    of wrapper types like configoptional.Optional to make sure the Unmarshal method of the inner type is called.

    The default behavior remains that calling conf.Unmarshal on the confmap.Conf passed as argument to an Unmarshal
    method will skip any top-level Unmarshal methods to avoid infinite recursion in standard use cases.

  • pkg/confmap: Fix an issue where configs could fail to decode when using interpolated values in string fields. (#​14413)
    For example, a header can be set via an environment variable to a string that is parseable as a number, e.g. 1234

  • pkg/service: Don't error on startup when process metrics are enabled on unsupported OSes (e.g. AIX) (#​14307)

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.23.1

Compare Source

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

Compare Source

🔆 Highlights

⚠️ Breaking changes

  • Dependencies: Update to k8s.io/* v1.35 by @​alvaroaleman @​dongjiang1989 @​kannon92 (#​3316, #​3349, #​3386, #​3391, #​3401)
  • Client: Add subresource Apply support by @​alvaroaleman in #​3321
  • Events: Migration to the new events API by @​clebs in #​3262
    • Using the new GetEventRecorderFor requires updating your rbac for events to use the events.k8s.io apiGroup rather than the `` (core) apiGroup
  • Fakeclient: Set ResourceVersion for SSA Create by @​alvaroaleman in #​3311
  • Webhooks: Generic Validator and Defaulter by @​alvaroaleman in #​3360
    • Existing code of the form builder.WebhookManagedBy(mgr).For(&corev1.Deployment{}) has to be changed to builder.WebhookManagedBy(mgr, &appsv1.Deployment{})
    • Existing webhook implementations have to be changed to take the concrete object rather than runtime.Object, for example from ValidateCreate(ctx context.Context, obj runtime.Object) (admission.Warnings, error) to ValidateCreate(ctx context.Context, obj *appsv1.Deployment) (admission.Warnings, error)

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

Dependencies

Added
  • github.com/Masterminds/semver/v3: v3.4.0
  • github.com/gkampitakis/ciinfo: v0.3.2
  • github.com/gkampitakis/go-diff: v1.3.2
  • github.com/gkampitakis/go-snaps: v0.5.15
  • github.com/goccy/go-yaml: v1.18.0
  • github.com/joshdk/go-junit: v1.0.0
  • github.com/maruel/natural: v1.1.1
  • github.com/mfridman/tparse: v0.18.0
  • github.com/tidwall/gjson: v1.18.0
  • github.com/tidwall/match: v1.1.1
  • github.com/tidwall/pretty: v1.2.1
  • github.com/tidwall/sjson: v1.2.5
  • go.uber.org/automaxprocs: v1.6.0
  • golang.org/x/tools/go/expect: v0.1.0-deprecated
  • golang.org/x/tools/go/packages/packagestest: v0.1.1-deprecated
Changed
  • github.com/go-logr/logr: v1.4.2 → v1.4.3
  • github.com/google/pprof: d1b30fe → 27863c8
  • github.com/onsi/ginkgo/v2: v2.22.0 → v2.27.2
  • github.com/onsi/gomega: v1.36.1 → v1.38.2
  • github.com/prometheus/client_golang: v1.22.0 → v1.23.2
  • github.com/prometheus/client_model: v0.6.1 → v0.6.2
  • github.com/prometheus/common: v0.62.0 → v0.66.1
  • github.com/prometheus/procfs: v0.15.1 → v0.16.1
  • github.com/rogpeppe/go-internal: v1.13.1 → v1.14.1
  • github.com/spf13/cobra: v1.9.1 → v1.10.0
  • github.com/spf13/pflag: v1.0.6 → v1.0.9
  • github.com/stretchr/testify: v1.10.0 → v1.11.1
  • go.etcd.io/bbolt: v1.4.2 → v1.4.3
  • go.etcd.io/etcd/api/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/client/pkg/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/client/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/pkg/v3: v3.6.4 → v3.6.5
  • go.etcd.io/etcd/server/v3: v3.6.4 → v3.6.5
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.58.0 → v0.61.0
  • go.opentelemetry.io/otel/metric: v1.35.0 → v1.36.0
  • go.opentelemetry.io/otel/sdk/metric: v1.34.0 → v1.36.0
  • go.opentelemetry.io/otel/sdk: v1.34.0 → v1.36.0
  • go.opentelemetry.io/otel/trace: v1.35.0 → v1.36.0
  • go.opentelemetry.io/otel: v1.35.0 → v1.36.0
  • go.yaml.in/yaml/v2: v2.4.2 → v2.4.3
  • golang.org/x/crypto: v0.36.0 → v0.45.0
  • golang.org/x/mod: v0.21.0 → v0.29.0
  • golang.org/x/net: v0.38.0 → v0.47.0
  • golang.org/x/oauth2: v0.27.0 → v0.30.0
  • golang.org/x/sync: v0.12.0 → v0.18.0
  • golang.org/x/sys: v0.31.0 → v0.38.0
  • golang.org/x/telemetry: bda5523078029d
  • golang.org/x/term: v0.30.0 → v0.37.0
  • golang.org/x/text: v0.23.0 → v0.31.0
  • golang.org/x/tools: v0.26.0 → v0.38.0
  • golang.org/x/xerrors: 5ec99f89bdfabe
  • google.golang.org/genproto/googleapis/rpc: a0af3ef200df99
  • google.golang.org/grpc: v1.72.1 → v1.72.2
  • google.golang.org/protobuf: v1.36.5 → v1.36.8
  • gopkg.in/evanphx/json-patch.v4: v4.12.0 → v4.13.0
  • k8s.io/api: v0.34.0 → v0.35.0
  • k8s.io/apiextensions-apiserver: v0.34.0 → v0.35.0
  • k8s.io/apimachinery: v0.34.0 → v0.35.0
  • k8s.io/apiserver: v0.34.0 → v0.35.0
  • k8s.io/client-go: v0.34.0 → v0.35.0
  • k8s.io/code-generator: v0.34.0 → v0.35.0
  • k8s.io/component-base: v0.34.0 → v0.35.0
  • k8s.io/gengo/v2: 85fd79dec3ebc5
  • k8s.io/kms: v0.34.0 → v0.35.0
  • k8s.io/kube-openapi: f3f2b99589584f
  • k8s.io/utils: 4c0f3b2bc988d5
  • sigs.k8s.io/json: cfa47c32d32026
Removed
  • github.com/kisielk/errcheck: v1.5.0
  • github.com/kisielk/gotool: v1.0.0
  • gopkg.in/yaml.v2: v2.4.0

New Contributors

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.23.0

Thanks to all our contributors! 😊


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Feb 19, 2026
@renovate
Copy link
Contributor Author

renovate bot commented Feb 19, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 56 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.0 -> 1.25.3
github.com/go-openapi/jsonpointer v0.22.1 -> v0.22.4
github.com/go-openapi/jsonreference v0.21.3 -> v0.21.4
github.com/goccy/go-yaml v1.18.0 -> v1.19.2
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4 -> v2.27.7
go.opentelemetry.io/collector/component/componentstatus v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/component/componenttest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/confmap v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/confmap/xconfmap v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/connector v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/connector/connectortest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/connector/xconnector v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/consumer v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/consumer/consumererror v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/consumer/consumertest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/consumer/xconsumer v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/exporter v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/exporter/exportertest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/exporter/xexporter v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/extension v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/extension/extensionauth v1.51.0 -> v1.52.0
go.opentelemetry.io/collector/extension/extensioncapabilities v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/extension/extensiontest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/featuregate v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/internal/componentalias v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/internal/fanoutconsumer v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/internal/telemetry v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/pdata v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/pdata/pprofile v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/pdata/testdata v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/pdata/xpdata v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/pipeline/xpipeline v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/processor v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/processor/processortest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/processor/xprocessor v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/receiver v1.50.0 -> v1.52.0
go.opentelemetry.io/collector/receiver/receivertest v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/receiver/xreceiver v0.144.0 -> v0.146.1
go.opentelemetry.io/collector/service/hostcapabilities v0.142.0 -> v0.146.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 -> v0.65.0
go.opentelemetry.io/contrib/otelconf v0.19.0 -> v0.20.0
go.opentelemetry.io/contrib/propagators/b3 v1.38.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/prometheus v0.61.0 -> v0.62.0
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.15.0 -> v0.16.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.39.0 -> v1.40.0
go.opentelemetry.io/otel/sdk/log v0.15.0 -> v0.16.0
golang.org/x/exp v0.0.0-20251002181428-27f1f14c8bb9 -> v0.0.0-20260112195511-716be5621a96
google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260128011058-8636f8732409
google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b -> v0.0.0-20260128011058-8636f8732409

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants