🏆 ยอดนิยม: elastic/cloudbeat/pull/

elastic-renovate-prod · 2026-08-27T19:20:29Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/docker/docker-credential-helpers	`v0.9.8` → `v0.9.9`

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

`v0.9.9`

Compare Source

What's Changed

update to go1.26.7
Dockerfile: update to debian trixie, libgcc-12-dev, ubuntu 24.04 (noble)
README: remove Go Report Card badge
build(deps): bump docker/* actions
build(deps): bump actions/checkout from 6.0.3 to 7.0.1
build(deps): bump actions/setup-go from 6.4.0 to 7.0.0
build(deps): bump codecov/codecov-action from 6.0.1 to 7.0.0
build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.10.0 to 1.11.0
build(deps): bump softprops/action-gh-release from 3.0.0 to 3.0.2

Full Changelog: docker/docker-credential-helpers@v0.9.8...v0.9.9

Configuration

📅 Schedule: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

…s to v0.9.9

mergify · 2026-08-27T19:41:19Z

Tick the box to add this pull request to the merge queue (same as @mergifyio queue).

Queue this pull request

) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.296.0` → `v0.297.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.297.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.296.0/v0.297.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>googleapis/google-api-go-client (google.golang.org/api)</summary> ### [`v0.297.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.297.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.296.0...v0.297.0) ##### Features - Move to go1.26.0 as the lowest supported go version ([#3724](https://redirect.github.com/googleapis/google-api-go-client/issues/3724)) ([7770e01](https://redirect.github.com/googleapis/google-api-go-client/commit/7770e01ef389ba48386a38befceca28a60ab3d1a)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…ential-gcr/v2 to v2.1.33 (main) (elastic#7601) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/GoogleCloudPlatform/docker-credential-gcr/v2](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr) | `v2.1.32` → `v2.1.33` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fGoogleCloudPlatform%2fdocker-credential-gcr%2fv2/v2.1.33?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fGoogleCloudPlatform%2fdocker-credential-gcr%2fv2/v2.1.32/v2.1.33?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>GoogleCloudPlatform/docker-credential-gcr (github.com/GoogleCloudPlatform/docker-credential-gcr/v2)</summary> ### [`v2.1.33`](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/releases/tag/v2.1.33) [Compare Source](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/compare/v2.1.32...v2.1.33) #### What's Changed - Upgrade Go version to 1.26 by [@&elastic#8203;ardagnir](https://redirect.github.com/ardagnir) in [#&elastic#8203;190](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/pull/190) - chore(deps): bump docker-cli to v29.6.2+incompatible by [@&elastic#8203;knechtionscoding](https://redirect.github.com/knechtionscoding) in [#&elastic#8203;192](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/pull/192) - chore(deps): remove unused docker/docker dependency from go.mod by [@&elastic#8203;Subserial](https://redirect.github.com/Subserial) in [#&elastic#8203;193](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/pull/193) #### New Contributors - [@&elastic#8203;ardagnir](https://redirect.github.com/ardagnir) made their first contribution in [#&elastic#8203;190](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/pull/190) - [@&elastic#8203;knechtionscoding](https://redirect.github.com/knechtionscoding) made their first contribution in [#&elastic#8203;192](https://redirect.github.com/GoogleCloudPlatform/docker-credential-gcr/pull/192) **Full Changelog**: <GoogleCloudPlatform/docker-credential-gcr@v2.1.32...v2.1.33> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…main) (elastic#7702) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/klauspost/compress](https://redirect.github.com/klauspost/compress) | `v1.19.1` → `v1.19.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fklauspost%2fcompress/v1.19.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fklauspost%2fcompress/v1.19.1/v1.19.2?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>klauspost/compress (github.com/klauspost/compress)</summary> ### [`v1.19.2`](https://redirect.github.com/klauspost/compress/releases/tag/v1.19.2) [Compare Source](https://redirect.github.com/klauspost/compress/compare/v1.19.1...v1.19.2) #### What's Changed - huff0: add arm64 assembly for Decompress4X/1X via avo lowering by [@&elastic#8203;lizthegrey](https://redirect.github.com/lizthegrey) in [#&elastic#8203;1172](https://redirect.github.com/klauspost/compress/pull/1172) - zstd: Re-enable unsafe decodeSync memory copies ([#&elastic#8203;1168](https://redirect.github.com/klauspost/compress/issues/1168)) by [@&elastic#8203;lizthegrey](https://redirect.github.com/lizthegrey) in [#&elastic#8203;1171](https://redirect.github.com/klauspost/compress/pull/1171) - zstd: fix arm64 asm frame offsets placing locals on the saved LR slot by [@&elastic#8203;lizthegrey](https://redirect.github.com/lizthegrey) in [#&elastic#8203;1176](https://redirect.github.com/klauspost/compress/pull/1176) - zstd: avoid racing MaxDecodedSize write on shared dict litEnc by [@&elastic#8203;zanarellidev](https://redirect.github.com/zanarellidev) in [#&elastic#8203;1182](https://redirect.github.com/klauspost/compress/pull/1182) - zstd: keep BuildDict recent-offsets positive and loadable by [@&elastic#8203;zanarellidev](https://redirect.github.com/zanarellidev) in [#&elastic#8203;1184](https://redirect.github.com/klauspost/compress/pull/1184) - zstd: handle zero-literal BuildDict corpus by [@&elastic#8203;cyphercodes](https://redirect.github.com/cyphercodes) in [#&elastic#8203;1178](https://redirect.github.com/klauspost/compress/pull/1178) - zstd: don't clear the registered dictionary when decoding past the window by [@&elastic#8203;sueun-dev](https://redirect.github.com/sueun-dev) in [#&elastic#8203;1177](https://redirect.github.com/klauspost/compress/pull/1177) #### New Contributors - [@&elastic#8203;zanarellidev](https://redirect.github.com/zanarellidev) made their first contribution in [#&elastic#8203;1183](https://redirect.github.com/klauspost/compress/pull/1183) - [@&elastic#8203;cyphercodes](https://redirect.github.com/cyphercodes) made their first contribution in [#&elastic#8203;1178](https://redirect.github.com/klauspost/compress/pull/1178) - [@&elastic#8203;sueun-dev](https://redirect.github.com/sueun-dev) made their first contribution in [#&elastic#8203;1177](https://redirect.github.com/klauspost/compress/pull/1177) **Full Changelog**: <klauspost/compress@v1.19.1...v1.19.2> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…804.0 (main) (elastic#7706) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/letsencrypt/boulder](https://redirect.github.com/letsencrypt/boulder) | `v0.20260729.0` → `v0.20260804.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fletsencrypt%2fboulder/v0.20260804.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fletsencrypt%2fboulder/v0.20260729.0/v0.20260804.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>letsencrypt/boulder (github.com/letsencrypt/boulder)</summary> ### [`v0.20260804.0`](https://redirect.github.com/letsencrypt/boulder/releases/tag/v0.20260804.0) [Compare Source](https://redirect.github.com/letsencrypt/boulder/compare/v0.20260729.0...v0.20260804.0) #### What's Changed - privatekey: Return a deterministic crypto.Signer from verifyMLDSA by [@&elastic#8203;beautifulentropy](https://redirect.github.com/beautifulentropy) in [#&elastic#8203;8926](https://redirect.github.com/letsencrypt/boulder/pull/8926) - cert-checker: configure issuers for CP/CPS lints by [@&elastic#8203;aarongable](https://redirect.github.com/aarongable) in [#&elastic#8203;8927](https://redirect.github.com/letsencrypt/boulder/pull/8927) - unsigned: implement RFC 9925 by [@&elastic#8203;jsha](https://redirect.github.com/jsha) in [#&elastic#8203;8901](https://redirect.github.com/letsencrypt/boulder/pull/8901) - trees/cosignature: Address remaining comments from [#&elastic#8203;8904](https://redirect.github.com/letsencrypt/boulder/issues/8904) by [@&elastic#8203;beautifulentropy](https://redirect.github.com/beautifulentropy) in [#&elastic#8203;8928](https://redirect.github.com/letsencrypt/boulder/pull/8928) - build(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.3 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;8929](https://redirect.github.com/letsencrypt/boulder/pull/8929) - observer: ccadb: check reported CRL shards for completeness by [@&elastic#8203;inahga](https://redirect.github.com/inahga) in [#&elastic#8203;8890](https://redirect.github.com/letsencrypt/boulder/pull/8890) - Remove sa.FQDNSetExists dead code by [@&elastic#8203;ezekiel](https://redirect.github.com/ezekiel) in [#&elastic#8203;8888](https://redirect.github.com/letsencrypt/boulder/pull/8888) **Full Changelog**: <letsencrypt/boulder@v0.20260729.0...v0.20260804.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

….21.9 (main) (elastic#7704) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/google/go-containerregistry](https://redirect.github.com/google/go-containerregistry) | `v0.21.8` → `v0.21.9` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogle%2fgo-containerregistry/v0.21.9?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogle%2fgo-containerregistry/v0.21.8/v0.21.9?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>google/go-containerregistry (github.com/google/go-containerregistry)</summary> ### [`v0.21.9`](https://redirect.github.com/google/go-containerregistry/releases/tag/v0.21.9) [Compare Source](https://redirect.github.com/google/go-containerregistry/compare/v0.21.8...v0.21.9) #### What's Changed - actions: pin slsa generator by version by [@&elastic#8203;Subserial](https://redirect.github.com/Subserial) in [#&elastic#8203;2395](https://redirect.github.com/google/go-containerregistry/pull/2395) - fix: prevent data race on scope refreshes within remote.writer by [@&elastic#8203;Subserial](https://redirect.github.com/Subserial) in [#&elastic#8203;2396](https://redirect.github.com/google/go-containerregistry/pull/2396) - fix: remove '.' from unsafe path prefixes by [@&elastic#8203;Subserial](https://redirect.github.com/Subserial) in [#&elastic#8203;2400](https://redirect.github.com/google/go-containerregistry/pull/2400) - build(deps): bump the actions group with 3 updates by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;2398](https://redirect.github.com/google/go-containerregistry/pull/2398) **Full Changelog**: <google/go-containerregistry@v0.21.8...v0.21.9> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

….2.1 (main) (elastic#7727) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [elastic/vault-github-token](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin) | patch | `v0.2.0` → `v0.2.1` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>elastic/vault-github-token-buildkite-plugin (elastic/vault-github-token)</summary> ### [`v0.2.1`](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/releases/tag/v0.2.1): vault-github-token-buildkite-plugin v0.2.1 [Compare Source](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/compare/v0.2.0...v0.2.1) ##### 🐛 Bug Fixes - Don't fail on buildkite-agent redactor add error by @&elastic#8203;[copilot-swe-agent\[bot\]](https://redirect.github.com/apps/copilot-swe-agent) in [#&elastic#8203;21](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/21) ##### 📝 Documentation - docs: bump version to v0.2.0 in README by @&elastic#8203;[github-actions\[bot\]](https://redirect.github.com/apps/github-actions) in [#&elastic#8203;14](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/14) ##### 🧰 Maintenance - build(deps): bump release-drafter/release-drafter from 7.2.1 to 7.3.0 in the github-actions group across 1 directory by @&elastic#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) in [#&elastic#8203;19](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/19) - build(deps): bump release-drafter/release-drafter from 7.2.0 to 7.2.1 in the github-actions group across 1 directory by @&elastic#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) in [#&elastic#8203;18](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/18) - build(deps): bump release-drafter/release-drafter from 7.1.1 to 7.2.0 in the github-actions group across 1 directory by @&elastic#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) in [#&elastic#8203;17](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/17) - build(deps): bump the github-actions group across 1 directory with 2 updates by @&elastic#8203;[dependabot\[bot\]](https://redirect.github.com/apps/dependabot) in [#&elastic#8203;15](https://redirect.github.com/elastic/vault-github-token-buildkite-plugin/issues/15) **Full Changelog**: <elastic/vault-github-token-buildkite-plugin@v0.2.0...v0.2.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…in) (elastic#7726) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [browser-actions/setup-chrome](https://redirect.github.com/browser-actions/setup-chrome) | action | patch | `v2.1.1` → `v2.1.2` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>browser-actions/setup-chrome (browser-actions/setup-chrome)</summary> ### [`v2.1.2`](https://redirect.github.com/browser-actions/setup-chrome/releases/tag/v2.1.2) [Compare Source](https://redirect.github.com/browser-actions/setup-chrome/compare/v2.1.1...v2.1.2) ##### Bug Fixes - drop 32-bit architecture support ([#&elastic#8203;648](https://redirect.github.com/browser-actions/setup-chrome/issues/648)) ([9532775](https://redirect.github.com/browser-actions/setup-chrome/commit/953277500f52e70f60076349a01f5f7c1f5c0de0)) - migrate to ESM and update all dependencies to latest ([#&elastic#8203;647](https://redirect.github.com/browser-actions/setup-chrome/issues/647)) ([7e4ea99](https://redirect.github.com/browser-actions/setup-chrome/commit/7e4ea994e24e9086130ac62b1b58d2ad91ee7f6e)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

) > ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [GitPython](https://redirect.github.com/gitpython-developers/GitPython) | `3.1.41` → `3.1.58` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/gitpython/3.1.58?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/gitpython/3.1.41/3.1.58?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>gitpython-developers/GitPython (GitPython)</summary> ### [`v3.1.58`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.58): - Security and Fixes [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58) #### What's Changed - test: allow Python startup before timeout by [@Byron](https://redirect.github.com/Byron) in [#2195](https://redirect.github.com/gitpython-developers/GitPython/pull/2195) - Resolve Windows hook Bash through PATH by [@Byron](https://redirect.github.com/Byron) in [#2199](https://redirect.github.com/gitpython-developers/GitPython/pull/2199) - Revert "Resolve Windows hook Bash through PATH" by [@Byron](https://redirect.github.com/Byron) in [#2200](https://redirect.github.com/gitpython-developers/GitPython/pull/2200) - test: focus pytest summary on unexpected failures by [@raisulchowdhury](https://redirect.github.com/raisulchowdhury) in [#2203](https://redirect.github.com/gitpython-developers/GitPython/pull/2203) - Validate submodule names before filesystem operations by [@Byron](https://redirect.github.com/Byron) in [#2202](https://redirect.github.com/gitpython-developers/GitPython/pull/2202) - Handle invalid submodule names during recursive updates by [@Byron](https://redirect.github.com/Byron) in [#2205](https://redirect.github.com/gitpython-developers/GitPython/pull/2205) - Fix Windows path handling on Python 3.13+ by [@Byron](https://redirect.github.com/Byron) in [#2196](https://redirect.github.com/gitpython-developers/GitPython/pull/2196) - fixup 2202 by [@Byron](https://redirect.github.com/Byron) in [#2206](https://redirect.github.com/gitpython-developers/GitPython/pull/2206) - Correct Windows hook Bash precedence by [@Byron](https://redirect.github.com/Byron) in [#2201](https://redirect.github.com/gitpython-developers/GitPython/pull/2201) - Harden config and Git option validation by [@Byron](https://redirect.github.com/Byron) in [#2204](https://redirect.github.com/gitpython-developers/GitPython/pull/2204) - Skip tests that need symlink privileges instead of erroring by [@Cyrus580529](https://redirect.github.com/Cyrus580529) in [#2197](https://redirect.github.com/gitpython-developers/GitPython/pull/2197) #### New Contributors - [@raisulchowdhury](https://redirect.github.com/raisulchowdhury) made their first contribution in [#2203](https://redirect.github.com/gitpython-developers/GitPython/pull/2203) - [@Cyrus580529](https://redirect.github.com/Cyrus580529) made their first contribution in [#2197](https://redirect.github.com/gitpython-developers/GitPython/pull/2197) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.57...3.1.58> ### [`v3.1.57`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.57): - Security and Fixes [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.56...3.1.57) #### What's Changed - Merge gitdb and smmap into the GitPython repository by [@Byron](https://redirect.github.com/Byron) in [#2179](https://redirect.github.com/gitpython-developers/GitPython/pull/2179) - build(deps): bump actions/setup-python from 6 to 7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2185](https://redirect.github.com/gitpython-developers/GitPython/pull/2185) - build(deps): bump the pre-commit group with 2 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2186](https://redirect.github.com/gitpython-developers/GitPython/pull/2186) - Bump Vampire/setup-wsl from 6.0.0 to 7.0.0 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2124](https://redirect.github.com/gitpython-developers/GitPython/pull/2124) - Render protected Traversable methods in the reference by [@pick7](https://redirect.github.com/pick7) in [#2192](https://redirect.github.com/gitpython-developers/GitPython/pull/2192) - Use standard prefixes for parsed patch diffs by [@pick7](https://redirect.github.com/pick7) in [#2191](https://redirect.github.com/gitpython-developers/GitPython/pull/2191) - Honor kill\_after\_timeout with output streams by [@pick7](https://redirect.github.com/pick7) in [#2189](https://redirect.github.com/gitpython-developers/GitPython/pull/2189) - Redact Authorization extra headers from command errors by [@pick7](https://redirect.github.com/pick7) in [#2188](https://redirect.github.com/gitpython-developers/GitPython/pull/2188) - Improve RemoteProgress parse return typing by [@pick7](https://redirect.github.com/pick7) in [#2187](https://redirect.github.com/gitpython-developers/GitPython/pull/2187) - Adopt basedpyright with a legacy baseline by [@Byron](https://redirect.github.com/Byron) in [#2194](https://redirect.github.com/gitpython-developers/GitPython/pull/2194) - Block unsafe Git file and URL options by [@Byron](https://redirect.github.com/Byron) in [#2193](https://redirect.github.com/gitpython-developers/GitPython/pull/2193) #### New Contributors - [@pick7](https://redirect.github.com/pick7) made their first contribution in [#2192](https://redirect.github.com/gitpython-developers/GitPython/pull/2192) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.56...3.1.57> ### [`v3.1.56`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.56): - SECURITY [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.55...3.1.56) #### What's Changed - Add support for Python 3.15 by [@hugovk](https://redirect.github.com/hugovk) in [#2183](https://redirect.github.com/gitpython-developers/GitPython/pull/2183) - fix: reject unsafe output options in Commit.count by [@Byron](https://redirect.github.com/Byron) in [#2184](https://redirect.github.com/gitpython-developers/GitPython/pull/2184) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.55...3.1.56> ### [`v3.1.55`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.55): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.55) #### What's Changed - fix: prevent environment expansion in remote URLs by [@Byron](https://redirect.github.com/Byron) in [#2181](https://redirect.github.com/gitpython-developers/GitPython/pull/2181) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.54...3.1.55> ### [`v3.1.54`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.54): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.54) #### What's Changed - Harden unsafe Git option validation by [@Byron](https://redirect.github.com/Byron) in [#2180](https://redirect.github.com/gitpython-developers/GitPython/pull/2180) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.53...3.1.54> ### [`v3.1.53`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.53): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53) #### What's Changed - feat(submodule): add deinit method to Submodule ([#2014](https://redirect.github.com/gitpython-developers/GitPython/issues/2014)) by [@mvanhorn](https://redirect.github.com/mvanhorn) in [#2129](https://redirect.github.com/gitpython-developers/GitPython/pull/2129) - typing: introduce sensible basedpyright defaults by [@Byron](https://redirect.github.com/Byron) in [#2174](https://redirect.github.com/gitpython-developers/GitPython/pull/2174) - fix: make `submodule.update()` after `submodule.deinit()` work by [@Byron](https://redirect.github.com/Byron) in [#2175](https://redirect.github.com/gitpython-developers/GitPython/pull/2175) - Fix commit hooks respecting core.hooksPath by [@Siesta0217](https://redirect.github.com/Siesta0217) in [#2159](https://redirect.github.com/gitpython-developers/GitPython/pull/2159) - fix: validate config section delimiters by [@Byron](https://redirect.github.com/Byron) in [#2176](https://redirect.github.com/gitpython-developers/GitPython/pull/2176) #### New Contributors - [@Siesta0217](https://redirect.github.com/Siesta0217) made their first contribution in [#2159](https://redirect.github.com/gitpython-developers/GitPython/pull/2159) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.52...3.1.53> ### [`v3.1.52`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.52): Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.51...3.1.52) <https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rwj8-pgh3-r573>: Environment-variable exfiltration via os.path.expandvars() on Repo.clone\_from() URL #### What's Changed - Skip cross-drive relative config test on Windows by [@Byron](https://redirect.github.com/Byron) in [#2171](https://redirect.github.com/gitpython-developers/GitPython/pull/2171) - fix: preserve literal clone URLs by [@Byron](https://redirect.github.com/Byron) in [#2172](https://redirect.github.com/gitpython-developers/GitPython/pull/2172) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.51...3.1.52> ### [`v3.1.51`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.51): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.51) #### What's Changed - Add AI-disclosure and quality requirements to the contribution guidelines by [@Byron](https://redirect.github.com/Byron) in [#2143](https://redirect.github.com/gitpython-developers/GitPython/pull/2143) - docs(cmd): clarify Git.execute() string vs list command argument by [@mvanhorn](https://redirect.github.com/mvanhorn) in [#2144](https://redirect.github.com/gitpython-developers/GitPython/pull/2144) - Rewrite Git.execute() command parameter docstring per [#2146](https://redirect.github.com/gitpython-developers/GitPython/issues/2146) by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2147](https://redirect.github.com/gitpython-developers/GitPython/pull/2147) - Document init script behavior with multiple master remotes by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2148](https://redirect.github.com/gitpython-developers/GitPython/pull/2148) - Bump git/ext/gitdb from `335c0f6` to `0a019a2` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2149](https://redirect.github.com/gitpython-developers/GitPython/pull/2149) - Support relative worktree paths (git 2.48+ worktree.useRelativePaths) by [@elovelan](https://redirect.github.com/elovelan) in [#2151](https://redirect.github.com/gitpython-developers/GitPython/pull/2151) - Defer xfail condition evaluation with xfail\_if\_raises context manager by [@elovelan](https://redirect.github.com/elovelan) in [#2153](https://redirect.github.com/gitpython-developers/GitPython/pull/2153) - Run more submodule tests on Cygwin (fix flaky xfails) by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2154](https://redirect.github.com/gitpython-developers/GitPython/pull/2154) - Cut xtrace noise from POSIX-ownership diagnostic steps by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2156](https://redirect.github.com/gitpython-developers/GitPython/pull/2156) - Support index diffs against the empty tree by [@puneetdixit200](https://redirect.github.com/puneetdixit200) in [#2155](https://redirect.github.com/gitpython-developers/GitPython/pull/2155) - refactor: seperate out Progress type by [@LoeschMaximilian](https://redirect.github.com/LoeschMaximilian) in [#2157](https://redirect.github.com/gitpython-developers/GitPython/pull/2157) - Bump <https://github.com/astral-sh/ruff-pre-commit> from v0.15.12 to 0.15.15 in the pre-commit group by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2160](https://redirect.github.com/gitpython-developers/GitPython/pull/2160) - Bump actions/checkout from 6 to 7 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2164](https://redirect.github.com/gitpython-developers/GitPython/pull/2164) - Bump git/ext/gitdb from `0a019a2` to `4950ea9` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2165](https://redirect.github.com/gitpython-developers/GitPython/pull/2165) - Bump <https://github.com/astral-sh/ruff-pre-commit> from v0.15.15 to 0.15.20 in the pre-commit group by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2166](https://redirect.github.com/gitpython-developers/GitPython/pull/2166) - Add Commit.is\_shallow property; document stats() limitation at shallow boundary by [@harshitayadavv](https://redirect.github.com/harshitayadavv) in [#2167](https://redirect.github.com/gitpython-developers/GitPython/pull/2167) - Allow relative config paths with includes by [@Byron](https://redirect.github.com/Byron) in [#2169](https://redirect.github.com/gitpython-developers/GitPython/pull/2169) - Reject abbreviated forms of unsafe git options by [@Byron](https://redirect.github.com/Byron) in [#2168](https://redirect.github.com/gitpython-developers/GitPython/pull/2168) - guard unsafe git command options by [@Byron](https://redirect.github.com/Byron) in [#2163](https://redirect.github.com/gitpython-developers/GitPython/pull/2163) #### New Contributors - [@elovelan](https://redirect.github.com/elovelan) made their first contribution in [#2151](https://redirect.github.com/gitpython-developers/GitPython/pull/2151) - [@puneetdixit200](https://redirect.github.com/puneetdixit200) made their first contribution in [#2155](https://redirect.github.com/gitpython-developers/GitPython/pull/2155) - [@LoeschMaximilian](https://redirect.github.com/LoeschMaximilian) made their first contribution in [#2157](https://redirect.github.com/gitpython-developers/GitPython/pull/2157) - [@harshitayadavv](https://redirect.github.com/harshitayadavv) made their first contribution in [#2167](https://redirect.github.com/gitpython-developers/GitPython/pull/2167) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.50...3.1.51> ### [`v3.1.50`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.50) [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.49...3.1.50) #### What's Changed - Bump <https://github.com/astral-sh/ruff-pre-commit> from v0.15.8 to 0.15.12 in the pre-commit group by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2140](https://redirect.github.com/gitpython-developers/GitPython/pull/2140) - Bump git/ext/gitdb from `335c0f6` to `53c94d6` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2141](https://redirect.github.com/gitpython-developers/GitPython/pull/2141) - Fix Repo() autodiscovery in linked worktrees when GIT\_DIR is set by [@meliezer](https://redirect.github.com/meliezer) in [#2128](https://redirect.github.com/gitpython-developers/GitPython/pull/2128) - Validate config key names before writing by [@Byron](https://redirect.github.com/Byron) in [#2142](https://redirect.github.com/gitpython-developers/GitPython/pull/2142) #### New Contributors - [@meliezer](https://redirect.github.com/meliezer) made their first contribution in [#2128](https://redirect.github.com/gitpython-developers/GitPython/pull/2128) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.49...3.1.50> ### [`v3.1.49`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.49): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.48...3.1.49) #### What's Changed - reject control chars in written values in configuration by [@Byron](https://redirect.github.com/Byron) in [#2137](https://redirect.github.com/gitpython-developers/GitPython/pull/2137) - Improve pure Python rev-parse coverage and behavior by [@Copilot](https://redirect.github.com/Copilot) in [#2136](https://redirect.github.com/gitpython-developers/GitPython/pull/2136) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.48...3.1.49> ### [`v3.1.48`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.48): - Security [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.47...3.1.48) Accidentally deleted the previous GH release, it did mention the advisory this fixes. #### What's Changed - prevent out-of-repo access when manipulating references. by [@Byron](https://redirect.github.com/Byron) in [#2134](https://redirect.github.com/gitpython-developers/GitPython/pull/2134) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.47...3.1.48> ### [`v3.1.47`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.47): - with security fixes [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.46...3.1.47) #### Advisories - <https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-rpm5-65cw-6hj4> - <https://github.com/gitpython-developers/GitPython/security/advisories/GHSA-x2qx-6953-8485> #### What's Changed - Prepare next release by [@Byron](https://redirect.github.com/Byron) in [#2095](https://redirect.github.com/gitpython-developers/GitPython/pull/2095) - Bump git/ext/gitdb from `335c0f6` to `4c63ee6` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2096](https://redirect.github.com/gitpython-developers/GitPython/pull/2096) - DOC: README Add urls and updated a relative url by [@Timour-Ilyas](https://redirect.github.com/Timour-Ilyas) in [#2098](https://redirect.github.com/gitpython-developers/GitPython/pull/2098) - Fix GitConfigParser ignoring multiple \[include] path entries by [@daniel7an](https://redirect.github.com/daniel7an) in [#2100](https://redirect.github.com/gitpython-developers/GitPython/pull/2100) - Switch back from Alpine to Debian for WSL by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2108](https://redirect.github.com/gitpython-developers/GitPython/pull/2108) - Bump git/ext/gitdb from `4c63ee6` to `5c1b303` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2106](https://redirect.github.com/gitpython-developers/GitPython/pull/2106) - Run `gc.collect()` twice in `test_rename` on Python 3.12 by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2109](https://redirect.github.com/gitpython-developers/GitPython/pull/2109) - fix: guard AutoInterrupt terminate during interpreter shutdown by [@lweyrich1](https://redirect.github.com/lweyrich1) in [#2105](https://redirect.github.com/gitpython-developers/GitPython/pull/2105) - Improve CI infrastructure for pre-commit by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2110](https://redirect.github.com/gitpython-developers/GitPython/pull/2110) - Bump the pre-commit group with 5 updates by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2111](https://redirect.github.com/gitpython-developers/GitPython/pull/2111) - Upgrade Sphinx for 3.14 support; drop doc build support on 3.8; test 3.14 by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2112](https://redirect.github.com/gitpython-developers/GitPython/pull/2112) - Fix `Repo.active_branch` resolution for reftable-backed repositories by [@Copilot](https://redirect.github.com/Copilot) in [#2114](https://redirect.github.com/gitpython-developers/GitPython/pull/2114) - docs: warn about GitDB performance with large commits by [@mvanhorn](https://redirect.github.com/mvanhorn) in [#2115](https://redirect.github.com/gitpython-developers/GitPython/pull/2115) - cmd: fix kwarg formatting in docstring example by [@UweSchwaeke](https://redirect.github.com/UweSchwaeke) in [#2117](https://redirect.github.com/gitpython-developers/GitPython/pull/2117) - Bump <https://github.com/astral-sh/ruff-pre-commit> from v0.15.5 to 0.15.8 in the pre-commit group by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2122](https://redirect.github.com/gitpython-developers/GitPython/pull/2122) - Add trailer support for commit creation by [@Krishnachaitanyakc](https://redirect.github.com/Krishnachaitanyakc) in [#2116](https://redirect.github.com/gitpython-developers/GitPython/pull/2116) - Harden commit trailer subprocess handling and align trailer I/O paths by [@Copilot](https://redirect.github.com/Copilot) in [#2125](https://redirect.github.com/gitpython-developers/GitPython/pull/2125) - git.cmd.Git.execute(..): fix `with_stdout=False` by [@ngie-eign](https://redirect.github.com/ngie-eign) in [#2126](https://redirect.github.com/gitpython-developers/GitPython/pull/2126) - Make sure that multi-options are checked after splitting them with `shlex` by [@Byron](https://redirect.github.com/Byron) in [#2130](https://redirect.github.com/gitpython-developers/GitPython/pull/2130) - Block unsafe underscored git kwargs / Fix for GHSA-rpm5-65cw-6hj4 by [@WesR](https://redirect.github.com/WesR) in [#2131](https://redirect.github.com/gitpython-developers/GitPython/pull/2131) #### New Contributors - [@Timour-Ilyas](https://redirect.github.com/Timour-Ilyas) made their first contribution in [#2098](https://redirect.github.com/gitpython-developers/GitPython/pull/2098) - [@daniel7an](https://redirect.github.com/daniel7an) made their first contribution in [#2100](https://redirect.github.com/gitpython-developers/GitPython/pull/2100) - [@lweyrich1](https://redirect.github.com/lweyrich1) made their first contribution in [#2105](https://redirect.github.com/gitpython-developers/GitPython/pull/2105) - [@Copilot](https://redirect.github.com/Copilot) made their first contribution in [#2114](https://redirect.github.com/gitpython-developers/GitPython/pull/2114) - [@mvanhorn](https://redirect.github.com/mvanhorn) made their first contribution in [#2115](https://redirect.github.com/gitpython-developers/GitPython/pull/2115) - [@UweSchwaeke](https://redirect.github.com/UweSchwaeke) made their first contribution in [#2117](https://redirect.github.com/gitpython-developers/GitPython/pull/2117) - [@Krishnachaitanyakc](https://redirect.github.com/Krishnachaitanyakc) made their first contribution in [#2116](https://redirect.github.com/gitpython-developers/GitPython/pull/2116) - [@ngie-eign](https://redirect.github.com/ngie-eign) made their first contribution in [#2126](https://redirect.github.com/gitpython-developers/GitPython/pull/2126) - [@WesR](https://redirect.github.com/WesR) made their first contribution in [#2131](https://redirect.github.com/gitpython-developers/GitPython/pull/2131) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.46...3.1.47> ### [`v3.1.46`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.46) [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.45...3.1.46) #### What's Changed - Prepare a new release by [@Byron](https://redirect.github.com/Byron) in [#2063](https://redirect.github.com/gitpython-developers/GitPython/pull/2063) - Bump actions/checkout from 4 to 5 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2067](https://redirect.github.com/gitpython-developers/GitPython/pull/2067) - Bump git/ext/gitdb from `335c0f6` to `39d7dbf` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2068](https://redirect.github.com/gitpython-developers/GitPython/pull/2068) - Bump actions/setup-python from 5 to 6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2070](https://redirect.github.com/gitpython-developers/GitPython/pull/2070) - Bump git/ext/gitdb from `39d7dbf` to `f8fdfec` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2071](https://redirect.github.com/gitpython-developers/GitPython/pull/2071) - Fix type hint for `SymbolicReference.reference` property by [@emmanuel-ferdman](https://redirect.github.com/emmanuel-ferdman) in [#2074](https://redirect.github.com/gitpython-developers/GitPython/pull/2074) - feat: Add support for hasconfig git rule. by [@bvanelli](https://redirect.github.com/bvanelli) in [#2075](https://redirect.github.com/gitpython-developers/GitPython/pull/2075) - Bump github/codeql-action from 3 to 4 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2076](https://redirect.github.com/gitpython-developers/GitPython/pull/2076) - Use actual return type in annotation for method submodule\_update by [@extrwi](https://redirect.github.com/extrwi) in [#2078](https://redirect.github.com/gitpython-developers/GitPython/pull/2078) - Bump git/ext/gitdb from `f8fdfec` to `65321a2` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2082](https://redirect.github.com/gitpython-developers/GitPython/pull/2082) - Preliminary support for index format v3 by [@blahgeek](https://redirect.github.com/blahgeek) in [#2081](https://redirect.github.com/gitpython-developers/GitPython/pull/2081) - Bump actions/checkout from 5 to 6 by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2084](https://redirect.github.com/gitpython-developers/GitPython/pull/2084) - Pin `mypy==1.18.2` by [@George-Ogden](https://redirect.github.com/George-Ogden) in [#2087](https://redirect.github.com/gitpython-developers/GitPython/pull/2087) - Respect `os.Pathlike` by [@George-Ogden](https://redirect.github.com/George-Ogden) in [#2086](https://redirect.github.com/gitpython-developers/GitPython/pull/2086) - Bump git/ext/gitdb from `65321a2` to `4c63ee6` by [@dependabot](https://redirect.github.com/dependabot)\[bot] in [#2093](https://redirect.github.com/gitpython-developers/GitPython/pull/2093) - Join `Pathlike` Object to Tree by [@George-Ogden](https://redirect.github.com/George-Ogden) in [#2094](https://redirect.github.com/gitpython-developers/GitPython/pull/2094) #### New Contributors - [@emmanuel-ferdman](https://redirect.github.com/emmanuel-ferdman) made their first contribution in [#2074](https://redirect.github.com/gitpython-developers/GitPython/pull/2074) - [@bvanelli](https://redirect.github.com/bvanelli) made their first contribution in [#2075](https://redirect.github.com/gitpython-developers/GitPython/pull/2075) - [@extrwi](https://redirect.github.com/extrwi) made their first contribution in [#2078](https://redirect.github.com/gitpython-developers/GitPython/pull/2078) - [@blahgeek](https://redirect.github.com/blahgeek) made their first contribution in [#2081](https://redirect.github.com/gitpython-developers/GitPython/pull/2081) - [@George-Ogden](https://redirect.github.com/George-Ogden) made their first contribution in [#2087](https://redirect.github.com/gitpython-developers/GitPython/pull/2087) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.45...3.1.46> ### [`v3.1.45`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.45) [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.44...3.1.45) #### What's Changed - Fix various version-related CI breakages by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1987](https://redirect.github.com/gitpython-developers/GitPython/pull/1987) - Do some CI cleanup to make reports clearer and future changes easier by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1989](https://redirect.github.com/gitpython-developers/GitPython/pull/1989) - Affirm that gitdb and smmap advisories can also be created by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1991](https://redirect.github.com/gitpython-developers/GitPython/pull/1991) - Fix links to gitdb and smmap `SECURITY.md` files by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1992](https://redirect.github.com/gitpython-developers/GitPython/pull/1992) - Test Python 3.13 regularly on Ubuntu and macOS on CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1990](https://redirect.github.com/gitpython-developers/GitPython/pull/1990) - Repo.rev\_parse: Handle <tag>^{commit} correctly by [@flichtenheld](https://redirect.github.com/flichtenheld) in [#1996](https://redirect.github.com/gitpython-developers/GitPython/pull/1996) - Fuzzing: Fix Broken Fuzz Test for Git Submodule Handling by [@DaveLak](https://redirect.github.com/DaveLak) in [#1997](https://redirect.github.com/gitpython-developers/GitPython/pull/1997) - Work around Cygwin CI failure [#2004](https://redirect.github.com/gitpython-developers/GitPython/issues/2004), except for `test_installation` by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2007](https://redirect.github.com/gitpython-developers/GitPython/pull/2007) - Mark `test_installation` xfail on Cygwin CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2009](https://redirect.github.com/gitpython-developers/GitPython/pull/2009) - `IndexFile._to_relative_path` - fix case where absolute path gets stripped of trailing slash by [@kamilkozik7](https://redirect.github.com/kamilkozik7) in [#2012](https://redirect.github.com/gitpython-developers/GitPython/pull/2012) - Use WSL1 on CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2010](https://redirect.github.com/gitpython-developers/GitPython/pull/2010) - Test free-threaded Python (but only on Linux) by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2011](https://redirect.github.com/gitpython-developers/GitPython/pull/2011) - Use property decorator to support typing by [@Andrej730](https://redirect.github.com/Andrej730) in [#2015](https://redirect.github.com/gitpython-developers/GitPython/pull/2015) - Fix some incorrect sphinx markups in the docstrings by [@koyuki7w](https://redirect.github.com/koyuki7w) in [#2018](https://redirect.github.com/gitpython-developers/GitPython/pull/2018) - replace quansight-labs/setup-python with actions/setup-python by [@ngoldbaum](https://redirect.github.com/ngoldbaum) in [#2019](https://redirect.github.com/gitpython-developers/GitPython/pull/2019) - remove type assertions from util.py by [@gcmarx](https://redirect.github.com/gcmarx) in [#2028](https://redirect.github.com/gitpython-developers/GitPython/pull/2028) - correctly handle `uname-cmd` that doesn't point to an executable file by [@gcmarx](https://redirect.github.com/gcmarx) in [#2026](https://redirect.github.com/gitpython-developers/GitPython/pull/2026) - Use newer ruff style by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2031](https://redirect.github.com/gitpython-developers/GitPython/pull/2031) - Have CodeQL scan GitHub Actions workflows as well as Python code by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2032](https://redirect.github.com/gitpython-developers/GitPython/pull/2032) - Specify explicit `contents: read` workflow permissions by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2033](https://redirect.github.com/gitpython-developers/GitPython/pull/2033) - Fix GitConfigParser not removing quotes from values by [@betaboon](https://redirect.github.com/betaboon) in [#2035](https://redirect.github.com/gitpython-developers/GitPython/pull/2035) - Preserve quoted leading and trailing single-line config var whitespace by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2036](https://redirect.github.com/gitpython-developers/GitPython/pull/2036) - Refactor Git.{AutoInterrupt,CatFileContentStream} nesting by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2037](https://redirect.github.com/gitpython-developers/GitPython/pull/2037) - Fix Git.{AutoInterrupt,CatFileContentStream} static typing by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2039](https://redirect.github.com/gitpython-developers/GitPython/pull/2039) - Fix CI `mypy` command on free-threaded Python by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2040](https://redirect.github.com/gitpython-developers/GitPython/pull/2040) - Split Cygwin CI into non-`performance` and `performance` test jobs by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2042](https://redirect.github.com/gitpython-developers/GitPython/pull/2042) - Express conditional `setuptools` requirement statically by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2043](https://redirect.github.com/gitpython-developers/GitPython/pull/2043) - Fix ambiguous `_safer_popen_windows` comment by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2044](https://redirect.github.com/gitpython-developers/GitPython/pull/2044) - Clarify `USE_SHELL` warning helper signature by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2045](https://redirect.github.com/gitpython-developers/GitPython/pull/2045) - Test `ConfigParser` with whitespace outside the value by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2046](https://redirect.github.com/gitpython-developers/GitPython/pull/2046) - Remove explicit empty `""` handling in ConfigParser by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2047](https://redirect.github.com/gitpython-developers/GitPython/pull/2047) - Various style improvements by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2049](https://redirect.github.com/gitpython-developers/GitPython/pull/2049) - Don't remove quotes if `\` or `"` are present inside by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2048](https://redirect.github.com/gitpython-developers/GitPython/pull/2048) - fix updating submodules with relative urls by [@david0](https://redirect.github.com/david0) in [#2051](https://redirect.github.com/gitpython-developers/GitPython/pull/2051) - Run `cat_file.py` fixture without site customizations by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2052](https://redirect.github.com/gitpython-developers/GitPython/pull/2052) - Fix Cygwin installation on CI for `pip` by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2053](https://redirect.github.com/gitpython-developers/GitPython/pull/2053) - Fail `test_installation` on warnings, and remove deprecated license classifier by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#2054](https://redirect.github.com/gitpython-developers/GitPython/pull/2054) - Add clearer error version for unsupported index error by [@tombedor](https://redirect.github.com/tombedor) in [#2055](https://redirect.github.com/gitpython-developers/GitPython/pull/2055) - Fix name collision by [@NMertsch](https://redirect.github.com/NMertsch) in [#2060](https://redirect.github.com/gitpython-developers/GitPython/pull/2060) - Allow relative path url in submodules for submodule\_update by [@t-webber](https://redirect.github.com/t-webber) in [#2062](https://redirect.github.com/gitpython-developers/GitPython/pull/2062) #### New Contributors - [@flichtenheld](https://redirect.github.com/flichtenheld) made their first contribution in [#1996](https://redirect.github.com/gitpython-developers/GitPython/pull/1996) - [@kamilkozik7](https://redirect.github.com/kamilkozik7) made their first contribution in [#2012](https://redirect.github.com/gitpython-developers/GitPython/pull/2012) - [@koyuki7w](https://redirect.github.com/koyuki7w) made their first contribution in [#2018](https://redirect.github.com/gitpython-developers/GitPython/pull/2018) - [@ngoldbaum](https://redirect.github.com/ngoldbaum) made their first contribution in [#2019](https://redirect.github.com/gitpython-developers/GitPython/pull/2019) - [@gcmarx](https://redirect.github.com/gcmarx) made their first contribution in [#2028](https://redirect.github.com/gitpython-developers/GitPython/pull/2028) - [@betaboon](https://redirect.github.com/betaboon) made their first contribution in [#2035](https://redirect.github.com/gitpython-developers/GitPython/pull/2035) - [@david0](https://redirect.github.com/david0) made their first contribution in [#2051](https://redirect.github.com/gitpython-developers/GitPython/pull/2051) - [@tombedor](https://redirect.github.com/tombedor) made their first contribution in [#2055](https://redirect.github.com/gitpython-developers/GitPython/pull/2055) - [@NMertsch](https://redirect.github.com/NMertsch) made their first contribution in [#2060](https://redirect.github.com/gitpython-developers/GitPython/pull/2060) - [@t-webber](https://redirect.github.com/t-webber) made their first contribution in [#2062](https://redirect.github.com/gitpython-developers/GitPython/pull/2062) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.44...3.1.45> ### [`v3.1.44`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.44) [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.43...3.1.44) #### What's Changed - Fix typo in \_get\_exe\_extensions PATHEXT fallback by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1890](https://redirect.github.com/gitpython-developers/GitPython/pull/1890) - Don't suppress pytest warning summaries by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1892](https://redirect.github.com/gitpython-developers/GitPython/pull/1892) - Update the comment about `--mixed` and paths by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1894](https://redirect.github.com/gitpython-developers/GitPython/pull/1894) - Fixed an error updating shallow submodules by [@EduardTalanov](https://redirect.github.com/EduardTalanov) in [#1899](https://redirect.github.com/gitpython-developers/GitPython/pull/1899) - Initial Migration of Fuzz Tests & Integration Scripts From the OSS-Fuzz Project Repo by [@DaveLak](https://redirect.github.com/DaveLak) in [#1901](https://redirect.github.com/gitpython-developers/GitPython/pull/1901) - Fuzzer Migration Follow-ups by [@DaveLak](https://redirect.github.com/DaveLak) in [#1903](https://redirect.github.com/gitpython-developers/GitPython/pull/1903) - Dockerize "Direct Execution of Fuzz Targets" by [@DaveLak](https://redirect.github.com/DaveLak) in [#1904](https://redirect.github.com/gitpython-developers/GitPython/pull/1904) - Fix Fuzzer Crash in ClusterFuzz Due to Missing Git Executable by [@DaveLak](https://redirect.github.com/DaveLak) in [#1906](https://redirect.github.com/gitpython-developers/GitPython/pull/1906) - Add GitPython's Standard License Header Comments to Shell Scripts by [@DaveLak](https://redirect.github.com/DaveLak) in [#1907](https://redirect.github.com/gitpython-developers/GitPython/pull/1907) - Fix `IndexError` in `GitConfigParser` When a Quoted Config Value Contains a Trailing New Line by [@DaveLak](https://redirect.github.com/DaveLak) in [#1908](https://redirect.github.com/gitpython-developers/GitPython/pull/1908) - Attempt 2 - Fix Missing Git Executable Causing ClusterFuzz Crash by [@DaveLak](https://redirect.github.com/DaveLak) in [#1909](https://redirect.github.com/gitpython-developers/GitPython/pull/1909) - Replace the Suboptimal `fuzz_tree.py` Harness With a Better Alternative by [@DaveLak](https://redirect.github.com/DaveLak) in [#1910](https://redirect.github.com/gitpython-developers/GitPython/pull/1910) - Add git.Blob Fuzz Target by [@DaveLak](https://redirect.github.com/DaveLak) in [#1911](https://redirect.github.com/gitpython-developers/GitPython/pull/1911) - lint: switch order Ruff's hooks `fix` -> `format` by [@Borda](https://redirect.github.com/Borda) in [#1912](https://redirect.github.com/gitpython-developers/GitPython/pull/1912) - Update OSS-Fuzz Scripts to Use New QA-Assets Repo Structure by [@DaveLak](https://redirect.github.com/DaveLak) in [#1913](https://redirect.github.com/gitpython-developers/GitPython/pull/1913) - Add `Diff` Fuzz Target by [@DaveLak](https://redirect.github.com/DaveLak) in [#1914](https://redirect.github.com/gitpython-developers/GitPython/pull/1914) - Instrument test utility functions to increase fuzzer efficiency by [@DaveLak](https://redirect.github.com/DaveLak) in [#1915](https://redirect.github.com/gitpython-developers/GitPython/pull/1915) - Add the `.git` subdir as another `safe.directory` on Cygwin CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1916](https://redirect.github.com/gitpython-developers/GitPython/pull/1916) - Bump Vampire/setup-wsl from 3.0.0 to 3.1.0 by [@dependabot](https://redirect.github.com/dependabot) in [#1917](https://redirect.github.com/gitpython-developers/GitPython/pull/1917) - Add Submodules Fuzz Target by [@DaveLak](https://redirect.github.com/DaveLak) in [#1919](https://redirect.github.com/gitpython-developers/GitPython/pull/1919) - Add graceful handling of expected exceptions in fuzz\_submodule.py by [@DaveLak](https://redirect.github.com/DaveLak) in [#1922](https://redirect.github.com/gitpython-developers/GitPython/pull/1922) - precommit: enable `validate-pyproject` by [@Borda](https://redirect.github.com/Borda) in [#1921](https://redirect.github.com/gitpython-developers/GitPython/pull/1921) - typing fixes - DiffIndex generic type and IndexFile items by [@Andrej730](https://redirect.github.com/Andrej730) in [#1925](https://redirect.github.com/gitpython-developers/GitPython/pull/1925) - Fix Improper Import Order Breaking `fuzz_submodule` Fuzzer by [@DaveLak](https://redirect.github.com/DaveLak) in [#1926](https://redirect.github.com/gitpython-developers/GitPython/pull/1926) - Fix iter\_change\_type diff renamed property to prevent warning by [@kamilkrzyskow](https://redirect.github.com/kamilkrzyskow) in [#1918](https://redirect.github.com/gitpython-developers/GitPython/pull/1918) - fixed doc to not faulty do [#1924](https://redirect.github.com/gitpython-developers/GitPython/issues/1924) by [@zerothi](https://redirect.github.com/zerothi) in [#1932](https://redirect.github.com/gitpython-developers/GitPython/pull/1932) - fix: fix incoherent beginning whitespace by [@cardoeng](https://redirect.github.com/cardoeng) in [#1933](https://redirect.github.com/gitpython-developers/GitPython/pull/1933) - Change aliases to work around mypy issue. by [@PatrickMassot](https://redirect.github.com/PatrickMassot) in [#1935](https://redirect.github.com/gitpython-developers/GitPython/pull/1935) - precommit: enable `end-of-file-fixer` by [@Borda](https://redirect.github.com/Borda) in [#1920](https://redirect.github.com/gitpython-developers/GitPython/pull/1920) - lint: add typos check by [@Borda](https://redirect.github.com/Borda) in [#1888](https://redirect.github.com/gitpython-developers/GitPython/pull/1888) - Add type of change to files\_dict of a commit by [@JonasScharpf](https://redirect.github.com/JonasScharpf) in [#1943](https://redirect.github.com/gitpython-developers/GitPython/pull/1943) - Enable Python 3.8 and 3.9 on M1 runners by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1944](https://redirect.github.com/gitpython-developers/GitPython/pull/1944) - Use Alpine Linux in WSL on CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1945](https://redirect.github.com/gitpython-developers/GitPython/pull/1945) - Remove the non-ARM macOS CI jobs by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1946](https://redirect.github.com/gitpython-developers/GitPython/pull/1946) - Fix Several Bugs in the `fuzz_submodule` Causing a lot of False Alarms in the OSS-Fuzz Bug Tracker by [@DaveLak](https://redirect.github.com/DaveLak) in [#1950](https://redirect.github.com/gitpython-developers/GitPython/pull/1950) - Gracefully handle `PermissionError` exceptions that crash fuzzer by [@DaveLak](https://redirect.github.com/DaveLak) in [#1951](https://redirect.github.com/gitpython-developers/GitPython/pull/1951) - Fuzzing: Gracefully Handle Uninteresting Error to Fix OSS-Fuzz Issue by [@DaveLak](https://redirect.github.com/DaveLak) in [#1952](https://redirect.github.com/gitpython-developers/GitPython/pull/1952) - Update and adjust pre-commit hooks by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1953](https://redirect.github.com/gitpython-developers/GitPython/pull/1953) - Upgrade sphinx to \~7.1.2 by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1954](https://redirect.github.com/gitpython-developers/GitPython/pull/1954) - Don't support building documentation on Python 3.7 by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1956](https://redirect.github.com/gitpython-developers/GitPython/pull/1956) - \_to\_relative\_path to support mixing slashes and backslashes by [@Andrej730](https://redirect.github.com/Andrej730) in [#1961](https://redirect.github.com/gitpython-developers/GitPython/pull/1961) - Update base.py by [@alex20230721](https://redirect.github.com/alex20230721) in [#1965](https://redirect.github.com/gitpython-developers/GitPython/pull/1965) - Fix Fetch progress bar by [@fvalette-ledger](https://redirect.github.com/fvalette-ledger) in [#1971](https://redirect.github.com/gitpython-developers/GitPython/pull/1971) #### New Contributors - [@EduardTalanov](https://redirect.github.com/EduardTalanov) made their first contribution in [#1899](https://redirect.github.com/gitpython-developers/GitPython/pull/1899) - [@DaveLak](https://redirect.github.com/DaveLak) made their first contribution in [#1901](https://redirect.github.com/gitpython-developers/GitPython/pull/1901) - [@Andrej730](https://redirect.github.com/Andrej730) made their first contribution in [#1925](https://redirect.github.com/gitpython-developers/GitPython/pull/1925) - [@kamilkrzyskow](https://redirect.github.com/kamilkrzyskow) made their first contribution in [#1918](https://redirect.github.com/gitpython-developers/GitPython/pull/1918) - [@zerothi](https://redirect.github.com/zerothi) made their first contribution in [#1932](https://redirect.github.com/gitpython-developers/GitPython/pull/1932) - [@cardoeng](https://redirect.github.com/cardoeng) made their first contribution in [#1933](https://redirect.github.com/gitpython-developers/GitPython/pull/1933) - [@PatrickMassot](https://redirect.github.com/PatrickMassot) made their first contribution in [#1935](https://redirect.github.com/gitpython-developers/GitPython/pull/1935) - [@JonasScharpf](https://redirect.github.com/JonasScharpf) made their first contribution in [#1943](https://redirect.github.com/gitpython-developers/GitPython/pull/1943) - [@alex20230721](https://redirect.github.com/alex20230721) made their first contribution in [#1965](https://redirect.github.com/gitpython-developers/GitPython/pull/1965) - [@fvalette-ledger](https://redirect.github.com/fvalette-ledger) made their first contribution in [#1971](https://redirect.github.com/gitpython-developers/GitPython/pull/1971) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.43...3.1.44> ### [`v3.1.43`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.43) [Compare Source](https://redirect.github.com/gitpython-developers/GitPython/compare/3.1.42...3.1.43) #### Particularly Important Changes These are likely to affect you, please do take a careful look. - Issue and test deprecation warnings by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1886](https://redirect.github.com/gitpython-developers/GitPython/pull/1886) - Fix version\_info cache invalidation, typing, parsing, and serialization by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1838](https://redirect.github.com/gitpython-developers/GitPython/pull/1838) - Document manual refresh path treatment by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1839](https://redirect.github.com/gitpython-developers/GitPython/pull/1839) - Improve static typing and docstrings related to git object types by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1859](https://redirect.github.com/gitpython-developers/GitPython/pull/1859) #### Other Changes - Test in Docker with Alpine Linux on CI by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1826](https://redirect.github.com/gitpython-developers/GitPython/pull/1826) - Build online docs (RTD) with -W and dependencies by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1843](https://redirect.github.com/gitpython-developers/GitPython/pull/1843) - Suggest full-path refresh() in failure message by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1844](https://redirect.github.com/gitpython-developers/GitPython/pull/1844) - `repo.blame` and `repo.blame_incremental` now accept `None` as the `rev` parameter. by [@Gaubbe](https://redirect.github.com/Gaubbe) in [#1846](https://redirect.github.com/gitpython-developers/GitPython/pull/1846) - Make sure diff always uses the default diff driver when `create_patch=True` by [@can-taslicukur](https://redirect.github.com/can-taslicukur) in [#1832](https://redirect.github.com/gitpython-developers/GitPython/pull/1832) - Revise docstrings, comments, and a few messages by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1850](https://redirect.github.com/gitpython-developers/GitPython/pull/1850) - Expand what is included in the API Reference by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1855](https://redirect.github.com/gitpython-developers/GitPython/pull/1855) - Restore building of documentation downloads by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1856](https://redirect.github.com/gitpython-developers/GitPython/pull/1856) - Revise type annotations slightly by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1860](https://redirect.github.com/gitpython-developers/GitPython/pull/1860) - Updating regex pattern to handle unicode whitespaces. by [@jcole-crowdstrike](https://redirect.github.com/jcole-crowdstrike) in [#1853](https://redirect.github.com/gitpython-developers/GitPython/pull/1853) - Use upgraded pip in test fixture virtual environment by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1864](https://redirect.github.com/gitpython-developers/GitPython/pull/1864) - lint: replace `flake8` with `ruff` check by [@Borda](https://redirect.github.com/Borda) in [#1862](https://redirect.github.com/gitpython-developers/GitPython/pull/1862) - lint: switch Black with `ruff-format` by [@Borda](https://redirect.github.com/Borda) in [#1865](https://redirect.github.com/gitpython-developers/GitPython/pull/1865) - Update readme and tox.ini for recent tooling changes by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1868](https://redirect.github.com/gitpython-developers/GitPython/pull/1868) - Split tox lint env into three envs, all safe by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1870](https://redirect.github.com/gitpython-developers/GitPython/pull/1870) - Slightly broaden Ruff, and update and clarify tool configuration by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1871](https://redirect.github.com/gitpython-developers/GitPython/pull/1871) - Add a "doc" extra for documentation build dependencies by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1872](https://redirect.github.com/gitpython-developers/GitPython/pull/1872) - Describe `Submodule.__init__` parent\_commit parameter by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1877](https://redirect.github.com/gitpython-developers/GitPython/pull/1877) - Include TagObject in git.types.Tree\_ish by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1878](https://redirect.github.com/gitpython-developers/GitPython/pull/1878) - Improve Sphinx role usage, including linking Git manpages by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1879](https://redirect.github.com/gitpython-developers/GitPython/pull/1879) - Replace all wildcard imports with explicit imports by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1880](https://redirect.github.com/gitpython-developers/GitPython/pull/1880) - Clarify how tag objects are usually tree-ish and commit-ish by [@EliahKagan](https://redirect.github.com/EliahKagan) in [#1881](https://redirect.github.com/gitpython-developers/GitPython/pull/1881) #### New Contributors - [@Gaubbe](https://redirect.github.com/Gaubbe) made their first contribution in [#1846](https://redirect.github.com/gitpython-developers/GitPython/pull/1846) - [@can-taslicukur](https://redirect.github.com/can-taslicukur) made their first contribution in [#1832](https://redirect.github.com/gitpython-developers/GitPython/pull/1832) - [@jcole-crowdstrike](https://redirect.github.com/jcole-crowdstrike) made their first contribution in [#1853](https://redirect.github.com/gitpython-developers/GitPython/pull/1853) - [@Borda](https://redirect.github.com/Borda) made their first contribution in [#1862](https://redirect.github.com/gitpython-developers/GitPython/pull/1862) **Full Changelog**: <https://github.com/gitpython-developers/GitPython/compare/3.1.42...3.1.43> ### [`v3.1.42`](https://redirect.github.com/gitpython-developers/GitPython/releases/tag/3.1.42) [Compare Source](https://redirect.githu </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [loguru](https://redirect.github.com/Delgan/loguru) ([changelog](https://redirect.github.com/Delgan/loguru/blob/master/CHANGELOG.rst)) | `0.7.0` → `0.7.3` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/loguru/0.7.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/loguru/0.7.0/0.7.3?slim=true) | | [loguru](https://redirect.github.com/Delgan/loguru) ([changelog](https://redirect.github.com/Delgan/loguru/blob/master/CHANGELOG.rst)) | `0.7.2` → `0.7.3` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/loguru/0.7.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/loguru/0.7.2/0.7.3?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>Delgan/loguru (loguru)</summary> ### [`v0.7.3`](https://redirect.github.com/Delgan/loguru/blob/HEAD/CHANGELOG.rst#073-2024-12-06) [Compare Source](https://redirect.github.com/Delgan/loguru/compare/0.7.2...0.7.3) \===================== - Fix Cython incompatibility caused by the absence of underlying stack frames, which resulted in a `ValueError` during logging (`#&elastic#8203;88 <https://github.com/Delgan/loguru/issues/88>`\_). - Fix possible `RuntimeError` when removing all handlers with `logger.remove()` due to thread-safety issue (`#&elastic#8203;1183 <https://github.com/Delgan/loguru/issues/1183>`*, thanks `@jeremyk <https://github.com/jeremyk>`*). - Fix `diagnose=True` option of exception formatting not working as expected with Python 3.13 (`#&elastic#8203;1235 <https://github.com/Delgan/loguru/issues/1235>`*, thanks `@etianen <https://github.com/etianen>`*). - Fix non-standard level names not fully compatible with `logging.Formatter()` (`#&elastic#8203;1231 <https://github.com/Delgan/loguru/issues/1231>`*, thanks `@yechielb2000 <https://github.com/yechielb2000>`*). - Fix inability to display a literal `"\"` immediately before color markups (`#&elastic#8203;988 <https://github.com/Delgan/loguru/issues/988>`\_). - Fix possible infinite recursion when an exception is raised from a `__repr__` method decorated with `logger.catch()` (`#&elastic#8203;1044 <https://github.com/Delgan/loguru/issues/1044>`\_). - Improve performance of `datetime` formatting while logging messages (`#&elastic#8203;1201 <https://github.com/Delgan/loguru/issues/1201>`*, thanks `@trim21 <https://github.com/trim21>`*). - Reduce startup time in the presence of installed but unused `IPython` third-party library (`#&elastic#8203;1001 <https://github.com/Delgan/loguru/issues/1001>`*, thanks `@zakstucke <https://github.com/zakstucke>`*). ### [`v0.7.2`](https://redirect.github.com/Delgan/loguru/blob/HEAD/CHANGELOG.rst#072-2023-09-11) [Compare Source](https://redirect.github.com/Delgan/loguru/compare/0.7.1...0.7.2) \===================== - Add support for formatting of `ExceptionGroup` errors (`#&elastic#8203;805 <https://github.com/Delgan/loguru/issues/805>`\_). - Fix possible `RuntimeError` when using `multiprocessing.set_start_method()` after importing the `logger` (`#&elastic#8203;974 <https://github.com/Delgan/loguru/issues/974>`\_). - Fix formatting of possible `__notes__` attached to an `Exception` (`#&elastic#8203;980 <https://github.com/Delgan/loguru/issues/980>`\_). ### [`v0.7.1`](https://redirect.github.com/Delgan/loguru/blob/HEAD/CHANGELOG.rst#071-2023-09-04) [Compare Source](https://redirect.github.com/Delgan/loguru/compare/0.7.0...0.7.1) \===================== - Add a new `context` optional argument to `logger.add()` specifying `multiprocessing` context (like `"spawn"` or `"fork"`) to be used internally instead of the default one (`#&elastic#8203;851 <https://github.com/Delgan/loguru/issues/851>`\_). - Add support for true colors on Windows using ANSI/VT console when available (`#&elastic#8203;934 <https://github.com/Delgan/loguru/issues/934>`*, thanks `@tunaflsh <https://github.com/tunaflsh>`*). - Fix possible deadlock when calling `logger.complete()` with concurrent logging of an asynchronous sink (`#&elastic#8203;906 <https://github.com/Delgan/loguru/issues/906>`\_). - Fix file possibly rotating too early or too late when re-starting an application around midnight (`#&elastic#8203;894 <https://github.com/Delgan/loguru/issues/894>`\_). - Fix inverted `"<hide>"` and `"<strike>"` color tags (`#&elastic#8203;943 <https://github.com/Delgan/loguru/pull/943>`*, thanks `@tunaflsh <https://github.com/tunaflsh>`*). - Fix possible untraceable errors raised when logging non-unpicklable `Exception` instances while using `enqueue=True` (`#&elastic#8203;329 <https://github.com/Delgan/loguru/issues/329>`\_). - Fix possible errors raised when logging non-picklable `Exception` instances while using `enqueue=True` (`#&elastic#8203;342 <https://github.com/Delgan/loguru/issues/342>`*, thanks `@ncoudene <https://github.com/ncoudene>`*). - Fix missing seconds and microseconds when formatting timezone offset that requires such accuracy (`#&elastic#8203;961 <https://github.com/Delgan/loguru/issues/961>`\_). - Raise `ValueError` if an attempt to use nanosecond precision for time formatting is detected (`#&elastic#8203;855 <https://github.com/Delgan/loguru/issues/855>`\_). </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [docker](https://redirect.github.com/docker/docker-py) ([changelog](https://docker-py.readthedocs.io/en/stable/change-log.html)) | `7.1.0` → `7.2.0` | ![age](https://developer.mend.io/api/mc/badges/age/pypi/docker/7.2.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/pypi/docker/7.1.0/7.2.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>docker/docker-py (docker)</summary> ### [`v7.2.0`](https://redirect.github.com/docker/docker-py/releases/tag/7.2.0) [Compare Source](https://redirect.github.com/docker/docker-py/compare/7.1.0...7.2.0) #### Upgrade Notes - `docker.from_env()` now honors the active Docker CLI context when `DOCKER_HOST` is not set. - This means the client may connect to the daemon selected by `DOCKER_CONTEXT` or the current context in `~/.docker/config.json`, matching Docker CLI behavior more closely. - If your application relied on the previous default connection behavior, set `DOCKER_HOST` explicitly, set `DOCKER_CONTEXT=default`, or pass `use_context=False` to `DockerClient.from_env()`. - Added `docker.from_context()` / `DockerClient.from_context()` for explicitly creating a client from a Docker CLI context. #### Features - Added support for Docker contexts when creating the default client - Added subpath support for volumes #### Bugfixes - Fixed `exec_run` documentation for the `stream` parameter - Fixed image loading to avoid depending on the deprecated `JSONMessage.error` field - Preserved the rotated unlock key in swarm integration tests - Fixed SSL certificate generation in tests - Fixed IPv6 integration tests by explicitly enabling IPv6 where required #### Miscellaneous - Updated tests for newer Docker Engine behavior - CI and build updates #### What's Changed - tests/exec: expect 127 exit code for missing executable by [@&elastic#8203;laurazard](https://redirect.github.com/laurazard) in [#&elastic#8203;3290](https://redirect.github.com/docker/docker-py/pull/3290) - fixing doc for stream param in exec\_run by [@&elastic#8203;yasonk](https://redirect.github.com/yasonk) in [#&elastic#8203;3292](https://redirect.github.com/docker/docker-py/pull/3292) - Bump default API version to 1.45 (Moby 26.0/26.1) by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3261](https://redirect.github.com/docker/docker-py/pull/3261) - Set a dummy-version if none set, and remove unused APT\_MIRROR build-arg by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3267](https://redirect.github.com/docker/docker-py/pull/3267) - test\_service\_logs: stop testing experimental versions by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;2442](https://redirect.github.com/docker/docker-py/pull/2442) - Makefile: fix circular reference for integration-dind by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3297](https://redirect.github.com/docker/docker-py/pull/3297) - image load: don't depend on deprecated JSONMessage.error field by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3307](https://redirect.github.com/docker/docker-py/pull/3307) - integration: test\_create\_volume\_invalid\_driver allow either 400 or 404 by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3296](https://redirect.github.com/docker/docker-py/pull/3296) - integration: adjust tests for omitted "OnBuild" by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3336](https://redirect.github.com/docker/docker-py/pull/3336) - Implement Subpath Support for Volumes in Docker-Py ([#&elastic#8203;3243](https://redirect.github.com/docker/docker-py/issues/3243)) by [@&elastic#8203;Khushiyant](https://redirect.github.com/Khushiyant) in [#&elastic#8203;3270](https://redirect.github.com/docker/docker-py/pull/3270) - tests: fix ssl generation by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3365](https://redirect.github.com/docker/docker-py/pull/3365) - test/integration: don't check for deprecated Networks field by [@&elastic#8203;thaJeztah](https://redirect.github.com/thaJeztah) in [#&elastic#8203;3362](https://redirect.github.com/docker/docker-py/pull/3362) - test: Skip from\_env\_unix tests if DOCKER\_HOST is network socket by [@&elastic#8203;ricardobranco777](https://redirect.github.com/ricardobranco777) in [#&elastic#8203;3366](https://redirect.github.com/docker/docker-py/pull/3366) - test\_connect\_with\_ipv6\_address: enable IPv6 by [@&elastic#8203;robmry](https://redirect.github.com/robmry) in [#&elastic#8203;3372](https://redirect.github.com/docker/docker-py/pull/3372) - test\_create\_with\_ipv6\_address: enable IPv6 by [@&elastic#8203;robmry](https://redirect.github.com/robmry) in [#&elastic#8203;3373](https://redirect.github.com/docker/docker-py/pull/3373) - tests: Migrate off gpg2 and regenerate key [`ed25519`](https://redirect.github.com/docker/docker-py/commit/ed25519) by [@&elastic#8203;vvoland](https://redirect.github.com/vvoland) in [#&elastic#8203;3399](https://redirect.github.com/docker/docker-py/pull/3399) - gha: Pin to digests by [@&elastic#8203;vvoland](https://redirect.github.com/vvoland) in [#&elastic#8203;3408](https://redirect.github.com/docker/docker-py/pull/3408) - Fix integration tests on non-amd64 hosts and add ARM64 CI by [@&elastic#8203;vvoland](https://redirect.github.com/vvoland) in [#&elastic#8203;3407](https://redirect.github.com/docker/docker-py/pull/3407) - integration/swarm: Preserve rotated unlock key by [@&elastic#8203;vvoland](https://redirect.github.com/vvoland) in [#&elastic#8203;3410](https://redirect.github.com/docker/docker-py/pull/3410) - \[DKP-2535] Honour context if present for default client, add contexts support by [@&elastic#8203;ebriney](https://redirect.github.com/ebriney) in [#&elastic#8203;3401](https://redirect.github.com/docker/docker-py/pull/3401) - docs: 7.2.0 changelog by [@&elastic#8203;vvoland](https://redirect.github.com/vvoland) in [#&elastic#8203;3415](https://redirect.github.com/docker/docker-py/pull/3415) #### New Contributors - [@&elastic#8203;laurazard](https://redirect.github.com/laurazard) made their first contribution in [#&elastic#8203;3290](https://redirect.github.com/docker/docker-py/pull/3290) - [@&elastic#8203;yasonk](https://redirect.github.com/yasonk) made their first contribution in [#&elastic#8203;3292](https://redirect.github.com/docker/docker-py/pull/3292) - [@&elastic#8203;ricardobranco777](https://redirect.github.com/ricardobranco777) made their first contribution in [#&elastic#8203;3366](https://redirect.github.com/docker/docker-py/pull/3366) - [@&elastic#8203;robmry](https://redirect.github.com/robmry) made their first contribution in [#&elastic#8203;3372](https://redirect.github.com/docker/docker-py/pull/3372) - [@&elastic#8203;ebriney](https://redirect.github.com/ebriney) made their first contribution in [#&elastic#8203;3401](https://redirect.github.com/docker/docker-py/pull/3401) **Full Changelog**: <docker/docker-py@7.1.0...7.2.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

> ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [go.opentelemetry.io/collector/client](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fclient/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fclient/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/component](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fcomponent/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fcomponent/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/config/configoptional](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconfig%2fconfigoptional/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconfig%2fconfigoptional/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/config/configretry](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconfig%2fconfigretry/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconfig%2fconfigretry/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/confmap](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconfmap/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconfmap/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/confmap/xconfmap](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconfmap%2fxconfmap/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconfmap%2fxconfmap/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/consumer](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconsumer/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconsumer/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/consumer/consumererror](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fconsumer%2fconsumererror/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fconsumer%2fconsumererror/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/exporter](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fexporter/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fexporter/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/exporter/exporterhelper](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fexporter%2fexporterhelper/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fexporter%2fexporterhelper/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/extension](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fextension/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fextension/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/extension/xextension](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fextension%2fxextension/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fextension%2fxextension/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/featuregate](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2ffeaturegate/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/internal/componentalias](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2finternal%2fcomponentalias/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2finternal%2fcomponentalias/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/pdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/pdata/pprofile](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata%2fpprofile/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata%2fpprofile/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/pdata/xpdata](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpdata%2fxpdata/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpdata%2fxpdata/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/collector/pipeline](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v1.59.0` → `v1.64.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpipeline/v1.64.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpipeline/v1.59.0/v1.64.0?slim=true) | | [go.opentelemetry.io/collector/pipeline/xpipeline](https://redirect.github.com/open-telemetry/opentelemetry-collector) | `v0.153.0` → `v0.158.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcollector%2fpipeline%2fxpipeline/v0.158.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcollector%2fpipeline%2fxpipeline/v0.153.0/v0.158.0?slim=true) | | [go.opentelemetry.io/contrib/detectors/gcp](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib) | `v1.44.0` → `v1.45.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2fdetectors%2fgcp/v1.45.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2fdetectors%2fgcp/v1.44.0/v1.45.0?slim=true) | | [go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-sdk-go-v2/otelaws](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib) | `v0.69.0` → `v0.70.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fgithub.com%2faws%2faws-sdk-go-v2%2fotelaws/v0.70.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2finstrumentation%2fgithub.com%2faws%2faws-sdk-go-v2%2fotelaws/v0.69.0/v0.70.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.44.0` → `v1.45.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlpmetric%2fotlpmetricgrpc/v1.45.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlpmetric%2fotlpmetricgrpc/v1.44.0/v1.45.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.44.0` → `v1.45.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.45.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace/v1.44.0/v1.45.0?slim=true) | | [go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc](https://redirect.github.com/open-telemetry/opentelemetry-go) | `v1.44.0` → `v1.45.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracegrpc/v1.45.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlptrace%2fotlptracegrpc/v1.44.0/v1.45.0?slim=true) | | [go.opentelemetry.io/proto/otlp](https://redirect.github.com/open-telemetry/opentelemetry-proto-go) | `v1.10.0` → `v1.11.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fproto%2fotlp/v1.11.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fproto%2fotlp/v1.10.0/v1.11.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/client)</summary> ### [`v1.64.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1640v01580) ##### 🚀 New components 🚀 - `processor/queuebatch`: New `queuebatchprocessor` to replace the legacy `batchprocessor`. ([#15047](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15047), [#13582](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13582), [#12022](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/12022), [#11308](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/11308), [#8272](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/8272), [#6046](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/6046)) New implementation is based exporterhelper, uses same configuration as `sending_queue`. ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add first-class extended type aliases (int64, duration, opaque\_string, id, opaque\_map, etc.) to config schemas in metadata.yaml ([#15513](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15513)) Authors can now write `type: int64`, `type: duration`, `type: opaque_string`, `type: id`, or `type: opaque_map` directly as a property type in the `config:` section of `metadata.yaml`. Each alias expands to the correct JSON Schema representation and Go type automatically. Existing uses of standard JSON Schema types, `format:`, and `x-customType:` remain supported without migration. - `extension/memory_limiter`: Promote the memory limiter extension to beta stability. ([#14533](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14533)) ##### 🧰 Bug fixes 🧰 - `cmd/mdatagen`: Removes the extra line in the documentation.md around description ([#15664](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15664)) - `cmd/mdatagen`: Auto-enable v1 metrics when legacy metric is enabled and v1 feature gate is on ([#15650](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15650)) When the v1 feature gate is enabled and a legacy metric is enabled, the corresponding v1 metric is now programmatically enabled so users don't need to add the v1 metric to their config. - `cmd/mdatagen`: Fix incorrect collision warning for versioned metrics with different emitted names ([#15648](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15648)) Same name collision detection (type/attribute checks) was being used for versioned metrics with different names. This caused the legacy metric to be disabled which was incorrect and also a warning msg was being incorrectly logged that stated the metrics had the same name when in fact they had different names. - `cmd/mdatagen`: Versioned metrics don't handle renamed attributes with same type ([#15595](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15595)) Versioned metrics need to support emitting legacy and latest attributes when the metric name is the same but the attributes names differ. This was not working when the attributes name changed but the type remained the same. Here we add support to versioned metrics with renamed attributes where those attributes have the same type. - `exporter/debug`: Fix profile sample attribute formatting for non-string values ([#15647](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15647)) Previously, non-string values produced malformed output such as `%!s(int64=42)`. Profile sample attributes now use the debug exporter's typed attribute format, such as `Int(42)`. This will also change strings from `hello-world` to `Str(hello-world)`. - `pkg/config/configtls`: Fix goroutine and file descriptor leak when `client_ca_file_reload` is enabled ([#9221](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/9221)) Every call to `ServerConfig.LoadTLSConfig` with `client_ca_file_reload` enabled started a file watcher goroutine that could never be stopped, since the reloader was not reachable from the returned `*tls.Config`. The client CA file is now checked for changes while TLS handshakes are served, at most once per second, matching how `reload_interval` already reloads the server certificate. No background goroutine is started, so nothing is left behind when a server is torn down and recreated.  ### [`v1.63.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1630v01570) ##### 🛑 Breaking changes 🛑 - `pkg/exporterhelper`: Replace histogram bucket boundaries for `otelcol_exporter_queue_batch_send_size_bytes` and `otelcol_processor_batch_batch_send_size_bytes` with a power-of-2 byte-scale set spanning 128 B to 16 MiB. ([#15535](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15535)) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads, and `otelcol_exporter_queue_batch_send_size_bytes` topped out at 6000 bytes so nearly all observations fell into the `+Inf` overflow bucket. The new boundaries are powers of two from 128 B to [`1677721`](https://redirect.github.com/open-telemetry/opentelemetry-collector/commit/16777216) (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the two metrics directly comparable on the same dashboards. Dashboards or alerts that hard-code specific `le` values for these histograms will need to be updated. - `processor/batch`: Replace histogram bucket boundaries for `otelcol_processor_batch_batch_send_size_bytes` with a power-of-2 byte-scale set spanning 128 B to 16 MiB. ([#15535](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15535)) The previous boundaries included many small sub-kilobyte buckets that were not useful for byte-scale payloads. The new boundaries are powers of two from 128 B to [`1677721`](https://redirect.github.com/open-telemetry/opentelemetry-collector/commit/16777216) (16 MiB), giving a meaningful distribution for real batch payload sizes (including small timeout-flushed batches) and keeping the metric directly comparable with `otelcol_exporter_queue_batch_send_size_bytes` on the same dashboards. Dashboards or alerts that hard-code specific `le` values for this histogram will need to be updated. ##### 💡 Enhancements 💡 - `all`: Bootstrap `config.schema.yaml` for core components (debug/otlp/otlphttp exporters, otlp receiver, batch/memory\_limiter processors, memory\_limiter/zpages extensions). Implements Phase 1 of the component configuration schema roadmap RFC. ([#14543](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14543)) Schemas are generated using the `schemagen` tool from opentelemetry-collector-contrib and hand-tuned to capture validation rules and references to shared library schemas (confighttp, configgrpc, configretry, exporterhelper, etc.). A `.schemagen.yaml` settings file and a `generate-schemas` Makefile target are added so the schemas can be regenerated reproducibly. - `pkg/service`: Apply experimental `service::telemetry::resource::detection/development` resource detection to the Collector's internal telemetry resource. ([#14311](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14311)) This follows the OpenTelemetry configuration schema by treating `service::telemetry::resource::detection/development::detectors` as detector selection. Currently supported detector entries are `container`, `host`, `process`, and `service`. See the OpenTelemetry Configuration Go support table and search for `ExperimentalResourceDetector` for current detector support: <https://github.com/open-telemetry/opentelemetry-configuration/blob/main/language-support-status.md#go> Example: ```yaml service: telemetry: resource: attributes: - name: foo value: bar detection/development: detectors: - host: {} ``` - `pkg/service`: Add `service.partialReload` feature gate (Alpha) and `service.partialReloadReceivers` feature gate (Beta) that together restart only receivers on config reload when non-receiver config sections are unchanged, avoiding unnecessary disruption to processors, exporters, and extensions. Enable with `--feature-gates=service.partialReload`. ([#5966](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/5966)) ##### 🧰 Bug fixes 🧰 - `exporter/debug`: Fix the scope index printed by the `normal` verbosity marshaler; each scope was labelled with its parent resource's index instead of its own position ([#15541](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15541)) Affected all four signals (logs, traces, metrics, profiles) — e.g. the second scope under a resource printed `#0` instead of `#1`. - `pkg/config/configgrpc`: Fix `WaitForReady` option not being applied to gRPC client connections. ([#15615](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15615)) - `pkg/featuregate`: Fix panic when a `--feature-gates` value contains an empty comma-separated element (e.g. `--feature-gates=alpha,`) ([#15536](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15536)) An empty identifier now produces a returned error instead of an index-out-of-range panic during flag parsing. - `pkg/service`: Fix collector startup panic when a resource detector emits a slice-valued attribute (e.g. the `process` detector's `process.command_args`) ([#15571](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15571)) `createResource` passed the OTel SDK attribute value straight into `pcommon.Value.FromRaw`, which only accepts `[]any` for slices, so any string, int, float, or bool slice resource attribute produced an `<Invalid value type>` error and aborted `service.New`. Slice-typed attributes are now converted element-wise. - `pkg/service`: Record status events reported by extensions ([#15557](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15557))  ### [`v1.62.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1620v01560) ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add support for defining stability levels for resource attributes ([#15312](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15312)) - `cmd/mdatagen`: Add semantic convention reference to resource attributes ([#15313](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15313)) - `processor/memory_limiter`: Adding health events for the memorylimiter ([#14700](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14700)) Publish health event from memorylimiter using componentstatus.ReportStatus ##### 🧰 Bug fixes 🧰 - `cmd/mdatagen`: Removes the extra line in the documentation.md between extended description and table ([#15458](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15458)) - `exporter/otlp_http`: Treat errors parsing successful (2xx) HTTP response bodies as permanent errors to prevent retrying already-accepted data. ([#15386](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15386)) When a server returns a 2xx status but the response body exceeds the 64kB read limit, the body is truncated and proto unmarshaling fails. Previously this was treated as a retryable error, causing duplicate data to be exported. Now it is marked as a permanent error so the retry logic will not re-send data that was already accepted by the server. - `pkg/config/configretry`: Always validate BackOffConfig fields regardless of the Enabled flag. ([#15437](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15437)) - `pkg/service`: Ensure receivers always start after all other components ([#15495](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15495)) There was previously a race condition where multiple receivers using a shared internal implementation, such as the OTLP receiver, could start sending telemetry into a pipeline before all its components had fully started. - `processor/memory_limiter`: Fix degenerate collector performance when exporter has problems causing permanent CPU-burning GC loop ([#4981](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/4981)) Forced GC runs now use exponential backoff when deemed ineffective (still above soft limit and less than 5% reclaimed) to avoid preventing recovery by overloading CPU with excessive GC runs. The cap on the backoff interval is exposed via `max_gc_interval_when_soft_limited` and `max_gc_interval_when_hard_limited` (both default `30s`); set either to `0` to disable backoff on that path. - `provider/env`: Fix empty env var default resolving to nil instead of empty string ([#14587](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14587)) When using ${env:VAR:-} with an unset variable, the empty default now correctly resolves to an empty string instead of nil.  ### [`v1.61.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1610v01550) ##### 🛑 Breaking changes 🛑 - `pkg/confighttp`: Remove stabilized gate `confighttp.framedSnappy` ([#15420](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15420)) - `pkg/configoptional`: Remove stabilized gate `configoptional.AddEnabledField`. ([#15421](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15421)) - `pkg/confmap`: Remove stabilized featuregate `confmap.newExpandedValueSanitizer` ([#15418](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15418)) - `pkg/exporterhelper`: Remove stable gate `exporter.PersistRequestContext`. ([#15424](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15424)) - `pkg/otelcol`: Remove stable gate `otelcol.printInitialConfig` ([#15425](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15425)) - `pkg/service`: Remove stable featuregate `telemetry.UseLocalHostAsDefaultMetricsAddress` ([#15419](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15419)) - `pkg/xpdata`: Remove stable gate `pdata.enableRefCounting`. ([#15426](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15426)) - `processor/memory_limiter`: Rename deprecated memory limiter metrics to include the `memory_limiter` prefix (e.g. `otelcol_processor_memory_limiter_*`) to clarify they are specific to this processor. ([#11203](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/11203)) ##### 🚀 New components 🚀 - `cmd/schemagen`: Move the `schemagen` CLI from opentelemetry-collector-contrib to this repository as `cmd/schemagen`. ([#14543](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14543)) The tool's source is identical to the upstream contrib version (github.com/open-telemetry/opentelemetry-collector-contrib/cmd/schemagen) except for the module path and the test fixtures' namespace, which now reflect the collector module (go.opentelemetry.io/collector/cmd/schemagen). A contrib-only integration test that pointed at three contrib components is removed; contrib's existing `make generate-schemas` + git-diff CI continues to exercise the FactoryMaps feature against real-world components. ##### 💡 Enhancements 💡 - `cmd/mdatagen`: Add support for versioned metrics ([#15309](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15309)) Allows metadata to specify versioned metrics for migrating to new semantic conventions. There are two scenarios catered for when the metric name stays the same during migration. When a metric name stays the same but its type differs, just the latest metric is emitted with the new type. When a metric name stays the same but its attributes differ, the latest version is emitted with combined attributes during the migration period. - `cmd/schemagen`: Add `overlayFile` support to deep-merge hand-curated schema fragments into generated schemas. ([#14543](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14543)) Components can declare an `overlayFile` in `.schemagen.yaml` pointing to a YAML file whose keys are recursively merged into the auto-generated schema after generation. This allows injecting descriptions, constraints, or additional properties that cannot be derived from Go types. Originally added to the contrib copy of `cmd/schemagen` in [open-telemetry/opentelemetry-collector-contrib#48917](https://redirect.github.com/open-telemetry/opentelemetry-collector-contrib/issues/48917) and brought over with the tool in this move. - `cmd/schemagen`: Add `-p` flag to specify a custom Go package pattern for the config struct. ([#14543](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14543)) The new `-p` flag lets callers override the default `.` package pattern with an arbitrary Go package selector (e.g. a sub-package whose `Config` type schemagen should walk). Originally added to the contrib copy of `cmd/schemagen` in [open-telemetry/opentelemetry-collector-contrib#48966](https://redirect.github.com/open-telemetry/opentelemetry-collector-contrib/issues/48966) and brought over with the tool in this move. ##### 🧰 Bug fixes 🧰 - `cmd/mdatagen`: Fix an issue when the last feature gate is removed, stale files are left. ([#15423](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15423)) - `cmd/mdatagen`: Fix known acronyms at the end of generated Go identifiers to be all-caps, same as in any other position ([#15438](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15438)) - `cmd/schemagen`: Fix mode detection when using `-p` to target a package outside the current directory. ([#15453](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15453)) A new `-m component|package` flag is available as a manual override when auto-detection is not possible.  ### [`v1.60.0`](https://redirect.github.com/open-telemetry/opentelemetry-collector/blob/HEAD/CHANGELOG.md#v1600v01540) ##### 🛑 Breaking changes 🛑 - `cmd/builder`: The `--skip-get-modules` flag will no longer regenerate your `go.mod` file. ([#15390](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15390)) This is mostly a bug fix, as it led to adverse behaviour that was unintended in the described flow in the README. Now when you run `--skip-get-modules`, your `go.mod` file will truly be untouched by `ocb` as the info log claims. ##### 💡 Enhancements 💡 - `pkg/config/configtls`: Add `include_insecure_cipher_suites` to configtls to enable insecure cipher suites. Insecure cipher suites are disabled by default for security. ([#13829](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/13829)) - `pkg/confighttp`: Add `ExposedHeaders` field to `CORSConfig` to allow setting the `Access-Control-Expose-Headers` response header. ([#15119](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15119)) ##### 🧰 Bug fixes 🧰 - `cmd/mdatagen`: Removes the extra line in the README.md between status and description ([#15306](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/15306)) - `pkg/exporterhelper`: Fix nil-pointer panic in `sending_queue::batch` Unmarshal when `sending_queue::sizer` is set and `sending_queue::batch::enabled` is false. ([#14687](https://redirect.github.com/open-telemetry/opentelemetry-collector/issues/14687)) When `sending_queue::sizer` was set and `sending_queue::batch::enabled: false` cleared the batch Optional to None, the sizer-inheritance branch in `queuebatch.Config.Unmarshal` dereferenced a nil Optional and crashed the collector at startup. The branch now also requires `Batch.HasValue()`.  </details> <details> <summary>open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/detectors/gcp)</summary> ### [`v1.45.0`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v1.45.0): /v2.5.2/v0.70.0/v0.37.2/v0.25.0/v0.20.0/v0.16.2/v0.17.0 [Compare Source](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/compare/v1.44.0...v1.45.0) #### Overview ##### Added - Add `go.opentelemetry.io/contrib/detectors/ibmcloud/vpc`, a new resource detector for IBM Cloud VPC virtual server instances, ported from `github.com/open-telemetry/opentelemetry-collector-contrib/processor/resourcedetectionprocessor/internal/ibmcloud/vpc`. Detects `cloud.provider`, `cloud.platform`, `cloud.region`, `cloud.availability_zone`, `cloud.account.id`, `cloud.resource_id`, `host.id`, `host.image.id`, `host.image.name`, `host.name`, and `host.type`. ([#9011](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9011)) - Add `go.opentelemetry.io/contrib/detectors/k8sapi`, a new resource detector that queries the Kubernetes API. Detects `k8s.node.name` and `k8s.node.uid` when `K8S_NODE_NAME` is set via the downward API, and `k8s.cluster.uid` derived from the kube-system namespace UID (works on any Kubernetes distribution). ([#9108](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9108)) - Add new `elasticbeanstalk` resource detector for AWS Elastic Beanstalk, ported from `processor/resourcedetectionprocessor/internal/aws/elasticbeanstalk` in opentelemetry-collector-contrib. ([#8993](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8993)) - The resource created by `go.opentelemetry.io/contrib/otelconf` now includes [default SDK attributes](https://pkg.go.dev/go.opentelemetry.io/otel/sdk/resource#Default). ([#8990](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8990)) - Add support for the `aws.ecs` resource detector in `go.opentelemetry.io/contrib/otelconf/x`. ([#8915](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8915)) - Add support for the `aws.eks` resource detector in `go.opentelemetry.io/contrib/otelconf/x`. ([#9138](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9138)) - Add support for the `azure.vm` resource detector in `go.opentelemetry.io/contrib/otelconf/x`. ([#9074](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9074)) - Add support for the `gcp` resource detector in `go.opentelemetry.io/contrib/otelconf/x`. ([#9137](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9137)) - Add `go.opentelemetry.io/contrib/detectors/azure/azureappservice`, a new resource detector for Azure App Service. Detects `cloud.*`, `service.name`, `azure.resource_group.name`, `azure.app_service.instance.id`, and `deployment.environment.name` from the `WEBSITE_*` and `REGION_NAME` environment variables. ([#9289](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9289)) - Add `azurecontainerapps` resource detector for Azure Container Apps. ([#8939](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8939)) - Add `go.opentelemetry.io/contrib/detectors/azure/azurefunctions`, a new resource detector for Azure Functions. Detects `cloud.*`, `service.name`, `azure.resource_group.name`, `faas.instance`, and `deployment.environment.name` from the `FUNCTIONS_*`, `WEBSITE_*`, `CONTAINER_NAME`, and `REGION_NAME` environment variables. ([#9290](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9290)) - Add `NewResourceDetector` along with the `WithAttributeFilter` and `WithTagKeyFilter` options in `go.opentelemetry.io/contrib/detectors/azure/azurevm`. `WithAttributeFilter` restricts the returned resource to the attributes the filter accepts. `WithTagKeyFilter` opts in to `azure.tag.<name>` attributes for the VM tags whose keys satisfy the provided predicate; no VM tags are emitted without it. ([#9162](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9162)) - Add `go.opentelemetry.io/contrib/detectors/vultr` — a new resource detector for Vultr Cloud Compute instances, ported from `processor/resourcedetectionprocessor/internal/vultr` in `opentelemetry-collector-contrib`. Detects `cloud.provider`, `cloud.platform`, `cloud.region`, `host.id`, and `host.name`. ([#8995](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8995)) ##### Changed - Upgrade `go.opentelemetry.io/otel/semconv` to `v1.43.0`, including updates across instrumentation and detector modules. See [semantic-conventions v1.43.0 release](https://redirect.github.com/open-telemetry/semantic-conventions/releases/tag/v1.43.0) for complete details. ([#9337](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9337)) - Upgrade `go.opentelemetry.io/otel/semconv` to `v1.42.0`, including updates across instrumentation and detector modules. See [semantic-conventions v1.42.0 release](https://redirect.github.com/open-telemetry/semantic-conventions/releases/tag/v1.42.0) for complete details. ([#9196](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9196)) - Use direct normalized-key lookups in `Carrier.Get` and `Carrier.Keys` in `go.opentelemetry.io/contrib/propagators/envcar`. ([#9112](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9112)) - Update log bridge conversions to use attribute key-values instead of the removed log key-values in `go.opentelemetry.io/contrib/bridges/otellogr`, `go.opentelemetry.io/contrib/bridges/otellogrus`, `go.opentelemetry.io/contrib/bridges/otelslog`, and `go.opentelemetry.io/contrib/bridges/otelzap`. ([#9180](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9180)) - The `Version()` function in `go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux` has been replaced by `const Version`. ([#9076](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9076)) - Set `error.type` attribute instead of adding `exception` span events in `go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin`. ([#8977](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8977)) - Prefer the gRPC dial target over the resolved peer IP for the `server.address` and `server.port` attributes in `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`. ([#8904](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/8904)) - The detector in `go.opentelemetry.io/contrib/detectors/azure/azurevm` now also detects `cloud.account.id`, `cloud.availability_zone`, `azure.vm.name`, `azure.vm.size`, `azure.vm.scaleset.name`, and `azure.resource_group.name`, and prefers `osProfile.computerName` for `host.name` (falling back to the VM name), reconciling it with the collector-contrib Azure resource detector. ([#9162](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9162)) ##### Fixed - Fix Prometheus reader resource label filter configuration in `go.opentelemetry.io/contrib/otelconf/v0.2.0`. ([#9062](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9062)) - Apply `resource.detection/development.attributes.included` and `excluded` filtering to resource detector attributes in `go.opentelemetry.io/contrib/otelconf/x`. ([#9131](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9131)) - Honor the context configured with `WithContext` when constructing resources in `go.opentelemetry.io/contrib/otelconf` and `go.opentelemetry.io/contrib/otelconf/x`. ([#9160](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9160)) - Handle nil response bodies from custom `RoundTripper` implementations in `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` without panicking. ([#9184](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9184)) - Fix incorrect (overestimated) sum calculation for runtime histograms in `go.opentelemetry.io/contrib/instrumentation/runtime`. ([#9063](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9063)) - Fix `Severity.UnmarshalText` round trip for positive `FATAL` offsets above the named range in `go.opentelemetry.io/contrib/processors/minsev`. ([#9197](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9197)) - Reduce binary size by fetching ConfigMaps via `rest.HTTPClientFor` instead of the Kubernetes clientset in `go.opentelemetry.io/contrib/detectors/aws/eks`. ([#9284](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9284)) - `TextMapPropagator` in `go.opentelemetry.io/contrib/propagators/autoprop` returns the no-op propagator for empty input, matching the behavior of `none`. An unknown `OTEL_PROPAGATORS` value still returns an error with a nil propagator so `NewTextMapPropagator` falls back to the default TraceContext and Baggage propagators instead of disabling propagation. ([#9163](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9163)) - Preserve error-valued attributes nested in a group as grouped attributes instead of silently dropping them in `go.opentelemetry.io/contrib/bridges/otelslog`. ([#9238](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9238)) - Fix a data race in `go.opentelemetry.io/contrib/bridges/otelslog` where concurrent `Handle` calls could corrupt each other's log attributes because `kvBuffer.KeyValues` returned a slice aliasing a shared buffer. ([#9229](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9229)) - Avoid a panic in `go.opentelemetry.io/contrib/bridges/otelzap` when a malformed error field contains a nil or non-error value. ([#9068](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9068)) - Use `azure.container_app.instance.id` instead of `service.instance.id` for the replica name detected by `go.opentelemetry.io/contrib/detectors/azure/azurecontainerapps`. ([#9208](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9208)) - Preserve the underlying metadata errors returned with partial resources from `go.opentelemetry.io/contrib/detectors/gcp`. ([#9069](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9069)) - Copy `MultipartForm` back to the request `otelmux.Middleware` was given after the wrapped handler returns, so `net/http` can find and remove the temp files `ParseMultipartForm` created on the context-derived request copy, when `otelmux.Middleware` wraps a handler directly, in `go.opentelemetry.io/contrib/instrumentation/github.com/gorilla/mux/otelmux`. This does not cover a handler panic, nor the common `router.Use(...)` integration, where `gorilla/mux`'s own routing step makes an additional request copy the middleware cannot write back through; see [gorilla/mux#777](https://redirect.github.com/gorilla/mux/pull/777). ([#9361](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9361)) - Report the `b3` header from `Fields()` for the default `B3Unspecified` single-header injection encoding, matching what `Inject` writes, in `go.opentelemetry.io/contrib/propagators/b3`. ([#9273](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9273)) - Fix `go.opentelemetry.io/contrib/propagators/aws/xray` producing deterministic trace and span IDs when the seed read from `crypto/rand` silently failed, by switching to `math/rand/v2`'s concurrency-safe top-level generator. ([#9359](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9359)) - Strip connection number suffix from connection ID in `go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/v2/mongo/otelmongo` to prevent unbounded metric cardinality. ([#9352](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9352)) - Strip connection number suffix from connection ID in `go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo` so the `network.peer.address` and `net.peer.name` span attributes reflect the actual host instead of the raw connection ID. ([#9352](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9352)) - Record `network.protocol.version` (and `network.protocol.name`) from the response's negotiated protocol instead of the request's stamped `Proto` in `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp`, so an HTTP/1.1-shaped request that gets upgraded to HTTP/2 via ALPN is no longer misreported as HTTP/1.1 on the client span and request metrics. ([#9371](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/issues/9371)) #### What's Changed - chore(deps): update module github.com/alecthomas/chroma/v2 to v2.26.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9041](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9041) - fix(deps): update golang.org/x to [`c761662`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/c761662) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9037](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9037) - chore(deps): update module github.com/rogpeppe/go-internal to v1.15.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9035](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9035) - chore(deps): update prom/prometheus docker tag to v3.12.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9040](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9040) - chore(deps): update module github.com/mattn/go-colorable to v0.1.15 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9061](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9061) - chore(deps): update module github.com/butuzov/mirror to v1.3.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9060](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9060) - chore(deps): update module github.com/mattn/go-runewidth to v0.0.24 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9065](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9065) - chore(deps): update module github.com/prometheus/common to v0.68.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9066](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9066) - chore(deps): update module github.com/go-playground/validator/v10 to v10.30.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9067](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9067) - chore(deps): update go-openapi packages to v0.21.6 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9071](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9071) - fix(otelzap): avoid panic on malformed error fields by [@omer-cengel](https://redirect.github.com/omer-cengel) in [#9068](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9068) - chore(deps): update github.com/charmbracelet/ultraviolet digest to [`6cf7526`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/6cf7526) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9077](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9077) - fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.5 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9078](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9078) - chore(deps): update module github.com/securego/gosec/v2 to v2.27.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9079](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9079) - chore(deps): update github/codeql-action action to v4.36.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9083](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9083) - fix(deps): update module github.com/hetznercloud/hcloud-go/v2 to v2.42.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9084](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9084) - fix(deps): update module github.com/aws/smithy-go to v1.27.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9085](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9085) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9091](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9091) - chore(deps): update actions/checkout action to v6.0.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9086](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9086) - chore(deps): update github.com/golangci/rowserrcheck digest to [`0ec5bd2`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/0ec5bd2) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9087](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9087) - chore(deps): update k8s.io/kube-openapi digest to [`865597e`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/865597e) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9092](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9092) - chore(deps): update module github.com/bytedance/sonic to v1.15.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9093](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9093) - chore(deps): update module github.com/prometheus/common to v0.68.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9089](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9089) - chore(deps): update github/codeql-action action to v4.36.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9094](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9094) - fix(deps): update module github.com/aws/smithy-go to v1.27.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9095](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9095) - chore(deps): update module github.com/ldez/gomoddirectives to v0.9.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9090](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9090) - fix(deps): update module github.com/googlecloudplatform/opentelemetry-operations-go/detectors/gcp to v1.33.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9096](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9096) - chore(deps): update module github.com/dlclark/regexp2/v2 to v2.1.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9039](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9039) - feat: add Azure Container Apps resource detector by [@kathiehuang](https://redirect.github.com/kathiehuang) in [#8939](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8939) - chore(deps): update codecov/codecov-action action to v7 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9105](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9105) - chore(deps): update module github.com/quic-go/quic-go to v0.60.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9101](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9101) - chore(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9110](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9110) - fix(deps): update module github.com/aws/smithy-go to v1.27.2 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9100](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9100) - fix(deps): update aws-sdk-go-v2 monorepo by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9038](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9038) - chore(deps): update module github.com/dlclark/regexp2/v2 to v2.2.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9104](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9104) - \[chore] use renovate config:best-practices by [@pellared](https://redirect.github.com/pellared) in [#9042](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9042) - chore(deps): pin dependencies by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9115](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9115) - chore(deps): update actions/checkout action to v6.0.3 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9117](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9117) - chore(deps): update go-openapi packages to v0.26.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9106](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9106) - chore(deps): update actions/stale action to v10.3.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9120](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9120) - chore(deps): update actions/setup-go action to v6.4.0 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9119](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9119) - chore(deps): update actions/upload-artifact action to v7.0.1 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9118](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9118) - chore(deps): update actions/cache action to v5.0.5 by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9116](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9116) - Switch version from function to string in otelmux by [@ElenaZvereva](https://redirect.github.com/ElenaZvereva) in [#9076](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9076) - otelconf: add default attributes to configuration-provided resource by [@peschinskiy](https://redirect.github.com/peschinskiy) in [#8990](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/8990) - Add AGENTS.md for opentelemetry-go-contrib by [@dashpole](https://redirect.github.com/dashpole) in [#9064](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9064) - chore(deps): update github.com/charmbracelet/ultraviolet digest to [`2399af7`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/2399af7) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9109](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9109) - chore(deps): update googleapis to [`62b3387`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/62b3387) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9111](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9111) - chore(deps): update golang:1.26 docker digest to [`792443b`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/792443b) by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9123](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9123) - fix(deps): update golang.org/x by [@renovate](https://redirect.github.com/renovate)\[bot] in [#9125](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/pull/9125) - chore(deps): update golang:1.26-alpine docker digest to [`7a3e500`](https://redirect.github.com/open-telemetry/opentelemetry-go-contrib/commit/7a3e500) by [@&#8 </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…3.4 (main) (elastic#7929) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/containerd/containerd/v2](https://redirect.github.com/containerd/containerd) | `v2.3.3` → `v2.3.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainerd%2fcontainerd%2fv2/v2.3.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcontainerd%2fcontainerd%2fv2/v2.3.3/v2.3.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>containerd/containerd (github.com/containerd/containerd/v2)</summary> ### [`v2.3.4`](https://redirect.github.com/containerd/containerd/releases/tag/v2.3.4): containerd 2.3.4 [Compare Source](https://redirect.github.com/containerd/containerd/compare/v2.3.3...v2.3.4) Welcome to the v2.3.4 release of containerd! The fourth patch release for containerd 2.3 contains various fixes and updates. ##### Highlights ##### Container Runtime Interface (CRI) - Disable checkpoint restore in CreateContainer by default, requiring the enable\_experimental\_restore\_via\_create configuration option to enable ([#&elastic#8203;13913](https://redirect.github.com/containerd/containerd/pull/13913)) - Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI ([#&elastic#8203;13914](https://redirect.github.com/containerd/containerd/pull/13914)) - Deprecate checkpoint restore in CreateContainer ([#&elastic#8203;13868](https://redirect.github.com/containerd/containerd/pull/13868)) - Support non-UTF-8 binary environment variable values in CRI ([#&elastic#8203;13454](https://redirect.github.com/containerd/containerd/pull/13454)) - Enable OCI runtime feature introspection for non-runc runtimes in CRI ([#&elastic#8203;13778](https://redirect.github.com/containerd/containerd/pull/13778)) - Disable checkpoint restore codepaths when CRIU is not installed and add enable\_criu configuration option ([#&elastic#8203;13734](https://redirect.github.com/containerd/containerd/pull/13734)) - Normalize sandbox image references in CRI to resolve images without domain prefixes ([#&elastic#8203;13759](https://redirect.github.com/containerd/containerd/pull/13759)) ##### Node Resource Interface (NRI) - Emit deprecation warnings for plugins using deprecated NRI interfaces ([#&elastic#8203;13935](https://redirect.github.com/containerd/containerd/pull/13935)) ##### Runtime - Enable log scrubbing by default on Windows ([#&elastic#8203;13904](https://redirect.github.com/containerd/containerd/pull/13904)) - Fix memory leak in OOM watcher map when stopping container monitoring ([#&elastic#8203;13870](https://redirect.github.com/containerd/containerd/pull/13870)) - Avoid orphaning shims on transient errors when loading process IDs ([#&elastic#8203;13857](https://redirect.github.com/containerd/containerd/pull/13857)) - Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming ([#&elastic#8203;13803](https://redirect.github.com/containerd/containerd/pull/13803)) ##### Snapshotters - Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata ([#&elastic#8203;13876](https://redirect.github.com/containerd/containerd/pull/13876)) ##### Breaking - Disable checkpoint restore in CreateContainer by default, requiring the enable\_experimental\_restore\_via\_create configuration option to enable ([#&elastic#8203;13913](https://redirect.github.com/containerd/containerd/pull/13913)) ##### Deprecations - Deprecate checkpoint restore in CreateContainer ([#&elastic#8203;13868](https://redirect.github.com/containerd/containerd/pull/13868)) Please try out the release binaries and report any issues at <https://github.com/containerd/containerd/issues>. ##### Contributors - Samuel Karp - Maksym Pavlenko - Mike Brown - Akihiro Suda - Derek McGowan - Jordan Liggitt - Paweł Gronowski - Amir Alavi - Andrew Halaney - Bing Hongtao - Chris Henzie - Harshal Patel - Krisztian Litkey - Phil Estes - Wei Fu - ningmingxiao ##### Changes <details><summary>35 commits</summary> <p> - [`c1f5360ef`](https://redirect.github.com/containerd/containerd/commit/c1f5360ef7b9afb748d4119ad7be665ba5144480) Prepare release notes for v2.3.4 - cri: disable restore in CreateContainer by default ([#&elastic#8203;13913](https://redirect.github.com/containerd/containerd/pull/13913)) - [`928c03c68`](https://redirect.github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f) cri: disable restore in CreateContainer by default - nri,deprecation: record and emit warnings for NRI deprecations. ([#&elastic#8203;13935](https://redirect.github.com/containerd/containerd/pull/13935)) - [`5966e2edb`](https://redirect.github.com/containerd/containerd/commit/5966e2edb15bb939aa2bb73649fbad73a2b04094) nri,deprecation: emit warnings for old NRI plugins. - Set the default of runtimeFeatures.UserNamespacesHostNetwork to true ([#&elastic#8203;13914](https://redirect.github.com/containerd/containerd/pull/13914)) - [`ab52c58f1`](https://redirect.github.com/containerd/containerd/commit/ab52c58f16ac50bb6724354bf36cbb4da480c2a2) Set the default of runtimeFeatures.UserNamespacesHostNetwork to true - Use ScrubLogs by default on Windows ([#&elastic#8203;13904](https://redirect.github.com/containerd/containerd/pull/13904)) - [`0c255158a`](https://redirect.github.com/containerd/containerd/commit/0c255158aa1ecab40aafc42269cfc018a46eb627) ctr: add --scrub-logs flag for Windows - [`1c2b13dc9`](https://redirect.github.com/containerd/containerd/commit/1c2b13dc975468197e57321e25fd09163f78a75a) cri/config: use ScrubLogs by default on Windows - snapshots/erofs: keep lowers stacked above a merged fsmeta ([#&elastic#8203;13876](https://redirect.github.com/containerd/containerd/pull/13876)) - [`0c511e068`](https://redirect.github.com/containerd/containerd/commit/0c511e068b7d6dd815418185a235b3ba3347c65a) snapshots/erofs: keep lowers stacked above a merged fsmeta - cri: deprecate restore in CreateContainer ([#&elastic#8203;13868](https://redirect.github.com/containerd/containerd/pull/13868)) - [`dc98141df`](https://redirect.github.com/containerd/containerd/commit/dc98141df70d3d72d46125c6f30de0d2de648086) cri: deprecate restore in CreateContainer - internal/oom: Fix memory leak by removing watcher from map on Stop ([#&elastic#8203;13870](https://redirect.github.com/containerd/containerd/pull/13870)) - [`537d82d54`](https://redirect.github.com/containerd/containerd/commit/537d82d545759d4a072d564d4937707af2650163) internal/oom: Fix memory leak by removing watcher from map on Stop - shim\_load: Consider shim leaked only if we can't find pids ([#&elastic#8203;13857](https://redirect.github.com/containerd/containerd/pull/13857)) - [`decf97a9c`](https://redirect.github.com/containerd/containerd/commit/decf97a9c7c26f92391d2c862d35832e0a291e80) shim\_load: Consider shim leaked only if we can't find pids - core/runtime/v2: Drop checkpointctl module dependency ([#&elastic#8203;13840](https://redirect.github.com/containerd/containerd/pull/13840)) - [`796f07dc8`](https://redirect.github.com/containerd/containerd/commit/796f07dc853d9ae8a3a1278fe47436755a4bc3b7) core/runtime/v2: Drop checkpointctl module dependency - Handle \[]byte envvar value for CRI ([#&elastic#8203;13454](https://redirect.github.com/containerd/containerd/pull/13454)) - [`751fddddb`](https://redirect.github.com/containerd/containerd/commit/751fddddbb630631e12fd63e5dac4a9530188822) Handle \[]byte envvar value - [`0bce9060e`](https://redirect.github.com/containerd/containerd/commit/0bce9060ef3401e690b541dd6d2008c2abc50b0d) update to v0.36.x kubernetes dependencies - fix(cri): introspect OCI runtime features for non-runc runtimes ([#&elastic#8203;13778](https://redirect.github.com/containerd/containerd/pull/13778)) - [`61a8f6f45`](https://redirect.github.com/containerd/containerd/commit/61a8f6f45e34660d787988e8a7e7a218f556369c) fix(cri): introspect OCI runtime features for non-runc runtimes - core/runtime/v2: Preserve protobuf shim response bytes ([#&elastic#8203;13803](https://redirect.github.com/containerd/containerd/pull/13803)) - [`1d28017be`](https://redirect.github.com/containerd/containerd/commit/1d28017be295005bfa3aee1d47afe86341d391b6) core/runtime/v2: Preserve protobuf shim response bytes - Disable checkpoint restore codepath when CRIU is not installed ([#&elastic#8203;13734](https://redirect.github.com/containerd/containerd/pull/13734)) - [`374091d67`](https://redirect.github.com/containerd/containerd/commit/374091d67c1966969b772594ba96a74f4357bc7a) github/workflows: install criu in node-e2e - [`db03e3968`](https://redirect.github.com/containerd/containerd/commit/db03e39685448a1d87025a2ca3a1e4e42713102d) cri: add enable\_criu configuration option - [`dacd4c7d0`](https://redirect.github.com/containerd/containerd/commit/dacd4c7d00f4a5fd71197e67afdb6355e8536e4f) cri: validate CRIU availability and version early - ci: bound Go fuzzing by execution count ([#&elastic#8203;13785](https://redirect.github.com/containerd/containerd/pull/13785)) - [`890a9c86c`](https://redirect.github.com/containerd/containerd/commit/890a9c86cd9918e53c1ef1b57c6539a943196cd5) ci: bound Go fuzzing by execution count - cri: auto-add prefix for pause image ([#&elastic#8203;13759](https://redirect.github.com/containerd/containerd/pull/13759)) - [`0b2f1d078`](https://redirect.github.com/containerd/containerd/commit/0b2f1d078124b52f4c8030dc686f2d65c1dfc17c) cri: auto-add prefix for pause image </p> </details> ##### Dependency Changes - **k8s.io/api** v0.36.0 -> v0.36.3 - **k8s.io/apimachinery** v0.36.0 -> v0.36.3 - **k8s.io/client-go** v0.36.0 -> v0.36.3 - **k8s.io/component-base** v0.36.0 -> v0.36.3 - **k8s.io/cri-api** v0.36.0 -> v0.36.3 - **k8s.io/cri-client** v0.36.0 -> v0.36.3 - **k8s.io/cri-streaming** v0.36.0 -> v0.36.3 - **sigs.k8s.io/structured-merge-diff/v6** v6.3.2 -> v6.3.3 Previous release can be found at [v2.3.3](https://redirect.github.com/containerd/containerd/releases/tag/v2.3.3) ##### Which file should I download? - `containerd-<VERSION>-<OS>-<ARCH>.tar.gz`: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04). - `containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz`: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent. In addition to containerd, typically you will have to install [runc](https://redirect.github.com/opencontainers/runc/releases) and [CNI plugins](https://redirect.github.com/containernetworking/plugins/releases) from their official sites too. See also the [Getting Started](https://redirect.github.com/containerd/containerd/blob/main/docs/getting-started.md) documentation. </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…7930) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [helm.sh/helm/v4](https://redirect.github.com/helm/helm) | `v4.2.3` → `v4.2.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/helm.sh%2fhelm%2fv4/v4.2.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/helm.sh%2fhelm%2fv4/v4.2.3/v4.2.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>helm/helm (helm.sh/helm/v4)</summary> ### [`v4.2.4`](https://redirect.github.com/helm/helm/releases/tag/v4.2.4): Helm v4.2.4 [Compare Source](https://redirect.github.com/helm/helm/compare/v4.2.3...v4.2.4) Helm v4.2.4 is a patch release. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom-lfx.platform.linuxfoundation.org/meeting/91295593969?password=17825db5-c698-44cc-9f00-ef1f61f5d3fb) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Notable Changes - fix: Improve error reporting for helm template --debug with --show-only- [#&elastic#8203;31185](https://redirect.github.com/helm/helm/issues/31185) by [@&elastic#8203;kyokuping](https://redirect.github.com/kyokuping) - fix: fetch logs from all containers in test pods- [#&elastic#8203;32099](https://redirect.github.com/helm/helm/issues/32099) by [@&elastic#8203;SebTardif](https://redirect.github.com/SebTardif) - fix(provenance): check error return in Digest and encodeRelease- [#&elastic#8203;32136](https://redirect.github.com/helm/helm/issues/32136) by [@&elastic#8203;SebTardif](https://redirect.github.com/SebTardif) - fix panic on repeated IsReachable calls- [#&elastic#8203;32184](https://redirect.github.com/helm/helm/issues/32184) by [@&elastic#8203;atkrad](https://redirect.github.com/atkrad) - fix: set \[pull,push] scope when helm push to a registry(use token auth) - v4- [#&elastic#8203;31211](https://redirect.github.com/helm/helm/issues/31211) by [@&elastic#8203;kimsungmin1](https://redirect.github.com/kimsungmin1) - Fix missing conflict retry with server-side apply- [#&elastic#8203;32088](https://redirect.github.com/helm/helm/issues/32088) by [@&elastic#8203;Kajot-dev](https://redirect.github.com/Kajot-dev) - Properly format the extra field in gzipped packages- [#&elastic#8203;31884](https://redirect.github.com/helm/helm/issues/31884) by [@&elastic#8203;ouillie](https://redirect.github.com/ouillie) - Fix vanishing empty lines- [#&elastic#8203;32327](https://redirect.github.com/helm/helm/issues/32327) by [@&elastic#8203;matheuscscp](https://redirect.github.com/matheuscscp) - fix: pass registry client to downloader.Manager in upgrade- [#&elastic#8203;32400](https://redirect.github.com/helm/helm/issues/32400) by [@&elastic#8203;SetagGnaw](https://redirect.github.com/SetagGnaw) - chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1- [#&elastic#8203;32450](https://redirect.github.com/helm/helm/issues/32450) - fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158- [#&elastic#8203;32521](https://redirect.github.com/helm/helm/issues/32521) by [@&elastic#8203;TerryHowe](https://redirect.github.com/TerryHowe) #### Installation and Upgrading Download Helm v4.2.4. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v4.2.4-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-darwin-amd64.tar.gz.sha256sum) / 6c163d687ca03c3b5c01928e53bbbcf9518278f47ce7a2f249a5a08e8bdaa2bc) - [MacOS arm64](https://get.helm.sh/helm-v4.2.4-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-darwin-arm64.tar.gz.sha256sum) / d747eb4e28bd2727173d15b759fa0a17822291ec09db7ced3d55af290a3661a2) - [Linux amd64](https://get.helm.sh/helm-v4.2.4-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-amd64.tar.gz.sha256sum) / c306b46f719b0a4da32d0f78ee21bf90ce8d602f15b22ab753f0674d1670a7f3) - [Linux arm](https://get.helm.sh/helm-v4.2.4-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-arm.tar.gz.sha256sum) / 894e901f7daaf9b458baad7b5c685bfeef49070d7d53f99687bd5846a6c13639) - [Linux arm64](https://get.helm.sh/helm-v4.2.4-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-arm64.tar.gz.sha256sum) / 564de2191b881e9f71b5606b25345821ea1682f06ab90499d3ab22b530176da1) - [Linux i386](https://get.helm.sh/helm-v4.2.4-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-386.tar.gz.sha256sum) / 45297aeac0c65173a89e8de832997f952ba5115c2db09b2e3f2c23a601e70583) - [Linux loong64](https://get.helm.sh/helm-v4.2.4-linux-loong64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-loong64.tar.gz.sha256sum) / faafbfecc1a06196e650c3ce0c74d5ac32cb1c0c0a855fa76e59dd100cb8d4c4) - [Linux ppc64le](https://get.helm.sh/helm-v4.2.4-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-ppc64le.tar.gz.sha256sum) / 5c00073e9d493de201384bb7eb19d60615bd7c39db52148473e8ce6da84bc70a) - [Linux s390x](https://get.helm.sh/helm-v4.2.4-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-s390x.tar.gz.sha256sum) / 5396a35fca5fa46e5614140363f389ce66f96886c1b25f256d9e3028299422fa) - [Linux riscv64](https://get.helm.sh/helm-v4.2.4-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v4.2.4-linux-riscv64.tar.gz.sha256sum) / d8532a3524ca842887b15ab794377dc9c8ced8f26264c84171b4b0aafff05411) - [Windows amd64](https://get.helm.sh/helm-v4.2.4-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v4.2.4-windows-amd64.zip.sha256sum) / e94d83a4706fd82078c98dade2079fa9d9680c1c2bfb93bfc304ee6bc2412a32) - [Windows arm64](https://get.helm.sh/helm-v4.2.4-windows-arm64.zip) ([checksum](https://get.helm.sh/helm-v4.2.4-windows-arm64.zip.sha256sum) / dbe8b49ea9877abe3d77354a792efb01920da9f65a492fcb8b4fce4e08bbae8f) This release was signed with `208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155` and can be found at [@&elastic#8203;scottrigby](https://redirect.github.com/scottrigby) [keybase account](https://keybase.io/r6by). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-4) on any system with `bash`. #### What's Next - 4.3.0 and 3.22.0 are the next minor releases scheduled for September 9, 2026 #### Changelog - Minimal fix to build failure from [#&elastic#8203;31211](https://redirect.github.com/helm/helm/issues/31211). [`3900f43`](https://redirect.github.com/helm/helm/commit/3900f434fd3ef2b84065dc04508df48f288dba00) (Scott Rigby) - fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 ([#&elastic#8203;32521](https://redirect.github.com/helm/helm/issues/32521)) [`f7c6e8f`](https://redirect.github.com/helm/helm/commit/f7c6e8f0f1e0e649e8d03b1535db4f3b8d0c9af2) (Terry Howe) - chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 [`035a2c3`](https://redirect.github.com/helm/helm/commit/035a2c38e9a75ca0988c8449c0b7257f30d04064) (dependabot\[bot]) - fix: pass registry client to downloader.Manager in upgrade [`f76a5f4`](https://redirect.github.com/helm/helm/commit/f76a5f46a952f731cc1543f348121297c8b3f6cc) (Gates Wang) - Apply suggestions [`5a7c6c7`](https://redirect.github.com/helm/helm/commit/5a7c6c7c732b04ad6517b452d538da9e18993d67) (Will Noble) - Properly format the extra field in gzipped packages [`2281848`](https://redirect.github.com/helm/helm/commit/22818486ce0fc18d92e01ba39faf65f70ffa8865) (Will Noble) - Fix missing conflict retry with server-side apply ([#&elastic#8203;32088](https://redirect.github.com/helm/helm/issues/32088)) [`2c979a1`](https://redirect.github.com/helm/helm/commit/2c979a17ac6b6d7bfe2d6650b69fa9effe963d4d) (Jakub Jaruszewski) - Potential fix for pull request finding [`2bd2c66`](https://redirect.github.com/helm/helm/commit/2bd2c66544634e419ede3cfa18952cce5a5acd08) (kimsungmin1) - fix(registry): resolve golangci-lint issues in token-auth tests [`183a540`](https://redirect.github.com/helm/helm/commit/183a5402291c553898b9c404bc17c95c81ea1c6c) (kimsm28) - chore: go mod tidy after rebase on main [`08d8da1`](https://redirect.github.com/helm/helm/commit/08d8da1aa9080772e57ab5bf5b00b3c13364af00) (kimsm28) - fix(registry): use plain-http registry in token-auth scope test [`9655b5a`](https://redirect.github.com/helm/helm/commit/9655b5aecc0d36142d0620ff5ed762065a997739) (kimsm28) - Update pkg/registry/client.go [`430dfac`](https://redirect.github.com/helm/helm/commit/430dfac3eeab03886f511761e3969f738f760364) (Terry Howe) - test: improve client\_scope\_test.go to avoid data races and brittle assertions [`9569605`](https://redirect.github.com/helm/helm/commit/9569605eccf8318fe25bf78c46c4eb462ce8fc3f) (kimsm28) - fix typos in withScopeHint function comment [`63f2b68`](https://redirect.github.com/helm/helm/commit/63f2b6809919e5e8e3e04f52064a536a14f1ff9b) (kimsm28) - fix registry test failures by adjusting DockerRegistryHost and auth server listener management [`f7488c0`](https://redirect.github.com/helm/helm/commit/f7488c0be8c65dd16386c215cac4332900667278) (kimsm28) - fix variable naming requestUrl -> requestURL [`8fe78fb`](https://redirect.github.com/helm/helm/commit/8fe78fbe46eb2db5c75ab1cc89699c750017dca6) (kimsm28) - fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder [`d0670d2`](https://redirect.github.com/helm/helm/commit/d0670d2fb2c3426cde4b41927b5e9b8b4370df93) (kimsm28) - change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) [`804256e`](https://redirect.github.com/helm/helm/commit/804256ef659226f26b2222ccb8f9cf18ef1b1946) (kimsungmin1) - change client\_scope\_test.go to use httptest [`d79bceb`](https://redirect.github.com/helm/helm/commit/d79bceb807692512461d8007040c41bcd1547041) (kimsungmin1) - fix typo [`d34fcd9`](https://redirect.github.com/helm/helm/commit/d34fcd9264225a1e6296c4b0ee124dc69f3b3ecc) (kimsungmin1) - remove freeport dependency [`9fbd190`](https://redirect.github.com/helm/helm/commit/9fbd190c30addb4786e4fe930a0fe98bf354116a) (kimsungmin1) - add newline in license header [`9275661`](https://redirect.github.com/helm/helm/commit/9275661357afdfe12b8ce561e8103673f16cca8d) (kimsungmin1) - fix scope when helm push to a registry that use token auth [`fef91f3`](https://redirect.github.com/helm/helm/commit/fef91f3e6942a20148542461eaebfb24f2c09584) (kimsungmin1) - fix panic on repeated IsReachable calls [`e89ce68`](https://redirect.github.com/helm/helm/commit/e89ce68bc5fec430bc1e2f0aef1aca6a2e71f795) (Mohammad Abdolirad) - fix(provenance): check error return in Digest [`ff1ac83`](https://redirect.github.com/helm/helm/commit/ff1ac83bfb1246cdf1b57a4db0042085cc8b265d) (Sebastien Tardif) - fix: address review feedback [`4b4dedb`](https://redirect.github.com/helm/helm/commit/4b4dedb2bdcfac886c124a361a5126e3c5e3c5df) (Sebastien Tardif) - fix: fetch logs from all containers in test pods [`7c80103`](https://redirect.github.com/helm/helm/commit/7c8010322b8639cdf7844ac1ae5f8d444db43935) (Sebastien Tardif) - chore: rename savedErr to clear its specific purpose [`ecc9cd2`](https://redirect.github.com/helm/helm/commit/ecc9cd2f1b5b53dadcd12395c032bc5b3ca02937) (Jeaeun Kim) - chore: fix lint [`f6211ba`](https://redirect.github.com/helm/helm/commit/f6211ba49bfbf5768ea44be3a1402869a4709b37) (Jeaeun Kim) - chore: store err separately for clarity [`3507ea5`](https://redirect.github.com/helm/helm/commit/3507ea5bfdbad921684ac131896b6968c76e9ca6) (Jeaeun Kim) - chore: Improve error reporting for `helm template --debug` with `--show-only` [`211ffae`](https://redirect.github.com/helm/helm/commit/211ffae93d2d741a2dbcd74b4aa2a1bc2fc27d5f) (Jeaeun Kim) - Address review comments [`51a9837`](https://redirect.github.com/helm/helm/commit/51a9837ba177812c381515886c4f0cd0b7a633e6) (Matheus Pimenta) - Fix vanishing empty lines [`83a8b70`](https://redirect.github.com/helm/helm/commit/83a8b70ffc1bcf97bb293cf6b35bd3b5093e8c30) (Matheus Pimenta) **Full Changelog**: <helm/helm@v4.2.3...v4.2.4> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…v9 to v9.22.0 (main) (elastic#7933) > ℹ️ **Note** > > This PR body was truncated due to platform limits. This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/redis/go-redis/extra/redisotel/v9](https://redirect.github.com/redis/go-redis) | `v9.5.3` → `v9.22.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fredis%2fgo-redis%2fextra%2fredisotel%2fv9/v9.22.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fredis%2fgo-redis%2fextra%2fredisotel%2fv9/v9.5.3/v9.22.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>redis/go-redis (github.com/redis/go-redis/extra/redisotel/v9)</summary> ### [`v9.22.0`](https://redirect.github.com/redis/go-redis/releases/tag/v9.22.0): 9.22.0 [Compare Source](https://redirect.github.com/redis/go-redis/compare/v9.21.0...v9.22.0) This is a minor release introducing two flagship (experimental) features — **client-side caching** and **automatic pipelining** — alongside support for Redis 8.10, new commands, and a large batch of stability and parser-robustness fixes. It consolidates everything shipped in 9.22.0-beta.1, so the notes below cover the full 9.21.0 → 9.22.0 upgrade. ⚠️ Two changes to be aware of when upgrading from 9.21.0: - **Default configuration values changed** ([#3918](https://redirect.github.com/redis/go-redis/pull/3918)): read/write timeouts, retry backoff, cluster state reload interval, and TCP keep-alive defaults are now aligned with the cross-SDK configuration proposal (see the highlight below). Explicitly configured values are unaffected. - **`WaitAOF` return type corrected** ([#3888](https://redirect.github.com/redis/go-redis/pull/3888)): `WaitAOF` now returns `*IntSliceCmd`, matching the two-integer reply of `WAITAOF` (previously `*IntCmd`, which failed to parse the reply at runtime). Code referencing the old return type needs a one-line update. #### 🚀 Highlights ##### Client-Side Caching (Experimental) The standalone `Client` gains server-assisted client-side caching built on RESP3 `CLIENT TRACKING`. Enable it by setting `ClientSideCacheConfig` in `Options` (or supply your own cache via `ClientSideCache` — e.g. to share one cache across clients). Cacheable read results are served from a local in-process cache and invalidated automatically when the server reports a change, cutting round trips for read-heavy workloads. The invalidation architecture is selected by `ClientSideCacheStrategy`; the default (and currently only) strategy is `CSCStrategySharedTracking`: one shared cache, every pool connection runs plain `CLIENT TRACKING ON`, and a background drainer applies buffered invalidations — portable (no BCAST) and consistent with the other Redis client libraries. Requirements and guardrails: RESP3 (`Protocol: 3`), standalone client, DB 0 only; commands that would change the connection identity (`SELECT`, `AUTH`, ...) are rejected while caching is enabled, and CSC is disabled when a credentials provider is set (fixed `Username`/`Password` work and are namespaced). See the README's [client-side caching section](README.md#client-side-caching) and the runnable [example](example/client-side-caching). **Experimental:** the API may change in a minor release. ([#3941](https://redirect.github.com/redis/go-redis/pull/3941)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) ##### Automatic Pipelining (Experimental) `AutoPipeliner` is a background batcher that coalesces commands from many concurrent goroutines into Redis pipelines, multiplying throughput without any manual pipeline management. It comes in two faces, available on `Client` and `ClusterClient` (and configurable via `Options.AutoPipelineOptions` / `UniversalOptions.AutoPipelineOptions`): - **`AutoPipeline()`** — the blocking face: a drop-in `Cmdable` where each call blocks until executed, exactly like a plain client, while concurrent callers' commands batch together under the hood (measured locally over loopback: \~1M+ SET/sec vs \~100k unpipelined; indicative, not a guarantee). Per-goroutine command order is preserved. - **`AsyncAutoPipeline()`** — the deferred face: command calls return immediately and every typed result accessor (`Val`/`Result`/`Err`/...) blocks until the command has executed. Submit a window of commands, then read the results, to keep pipelines deep (\~2–3M SET/sec locally; indicative). `AutoPipelineOptions` controls batching: `MaxBatchSize` (soft target, default 200; the blocking face's preset uses 300), `MaxBatchBytes` (approximate payload cap so huge values flush as several bounded writes), `MaxFlushDelay` with optional `AdaptiveDelay` (delay scales down as the queue fills), and `MaxConcurrentBatches` (default 1 = a single ordered batch stream; raising it requires `Unordered: true`, so ordering is never lost by accident — `Validate()` rejects the combination otherwise). A usage tour and throughput comparison live in [`example/autopipeline`](example/autopipeline). **Experimental:** the API may change in a future release — pin your go-redis version if you adopt it. ([#3942](https://redirect.github.com/redis/go-redis/pull/3942)) by [@ndyakov](https://redirect.github.com/ndyakov), with help from [@cxljs](https://redirect.github.com/cxljs) ##### Redis 8.10 Support This release adds support for **Redis 8.10**. The README's supported-versions list now includes Redis 8.10, and CI runs the full suite against the `redislabs/client-libs-test:8.10.0` image by default ([#3920](https://redirect.github.com/redis/go-redis/pull/3920), [#3940](https://redirect.github.com/redis/go-redis/pull/3940)). Coverage for the new commands and options that ship with Redis 8.10: - **`HIMPORT`** ([#3919](https://redirect.github.com/redis/go-redis/pull/3919)) — bulk hash import via server-side fieldsets, exposed as `HImportPrepare`, `HImportSet`, `HImportDiscard`, and `HImportDiscardAll`. Fieldsets are session state scoped to a single physical connection, which does not mix well with connection pooling — so the client keeps a versioned fieldset registry and lazily replays the `PREPARE` on whichever pooled connection executes a `SET` that needs it, at most once per connection, with no extra round trip (the `PREPARE` is injected into the same write as the `SET`). - **`LMOVEM` / `BLMOVEM`** ([#3913](https://redirect.github.com/redis/go-redis/pull/3913)) — move multiple elements between lists in one call. - **`SUNIONCARD` / `SDIFFCARD`** ([#3897](https://redirect.github.com/redis/go-redis/pull/3897)) — cardinality of set union/difference without materializing the result. - **`XREAD` / `XREADGROUP` `MAXCOUNT` and `MAXSIZE`** ([#3898](https://redirect.github.com/redis/go-redis/pull/3898)) — bound how much data a stream read returns. - **`TS.READ`** ([#3896](https://redirect.github.com/redis/go-redis/pull/3896)), **`TS.QUERYLABELS`** ([#3926](https://redirect.github.com/redis/go-redis/pull/3926)), **`TS.NRANGE` / `TS.NREVRANGE`** ([#3870](https://redirect.github.com/redis/go-redis/pull/3870)) with multiple aggregators per key ([#3937](https://redirect.github.com/redis/go-redis/pull/3937)), and **`EXCLUDEEMPTY`** on `TS.MRANGE` / `TS.MREVRANGE` ([#3912](https://redirect.github.com/redis/go-redis/pull/3912)) — new time-series query surface. - **`FT.ALIASLIST`** ([#3925](https://redirect.github.com/redis/go-redis/pull/3925)), **`COLLECT` reducer for `FT.AGGREGATE`** ([#3886](https://redirect.github.com/redis/go-redis/pull/3886)), **`RERANK` on HNSW vector fields in `FT.CREATE`** ([#3927](https://redirect.github.com/redis/go-redis/pull/3927)), and **`FT.HYBRID` timeout warnings** ([#3911](https://redirect.github.com/redis/go-redis/pull/3911)) — search coverage. ##### Cross-SDK Aligned Defaults Default configuration values now follow the cross-SDK configuration proposal shared by all Redis client libraries ([#3918](https://redirect.github.com/redis/go-redis/pull/3918)): | Setting | Old default | New default | | ------------------------------ | ----------- | --------------------------------------------------------- | | `ReadTimeout` / `WriteTimeout` | 3s | 5s | | Retry backoff (min/max) | 8ms / 512ms | 10ms / 1s | | Cluster state reload interval | 10s | 60s | | TCP keep-alive | 5min period | 30s idle / 5s interval / 3 probes (`net.KeepAliveConfig`) | Applications that set these values explicitly are unaffected; applications relying on the old defaults inherit the new ones. ##### Data-Race and Parser Hardening Sweep A systematic audit fixed data races across the client — hooks (`AddHook`, [#3868](https://redirect.github.com/redis/go-redis/pull/3868)), `Ring.SetAddrs` ([#3862](https://redirect.github.com/redis/go-redis/pull/3862)), cluster node slices ([#3861](https://redirect.github.com/redis/go-redis/pull/3861)), pub/sub reconnect ([#3906](https://redirect.github.com/redis/go-redis/pull/3906)), maintenance notifications ([#3894](https://redirect.github.com/redis/go-redis/pull/3894), [#3872](https://redirect.github.com/redis/go-redis/pull/3872)), pool handoff ([#3876](https://redirect.github.com/redis/go-redis/pull/3876)), and `redisotel` ([#3881](https://redirect.github.com/redis/go-redis/pull/3881)) — and hardened the RESP parsers against malformed or unexpected replies: over-reads on nil replies ([#3874](https://redirect.github.com/redis/go-redis/pull/3874)), integer overflow when skipping map/attribute bodies ([#3877](https://redirect.github.com/redis/go-redis/pull/3877)), unhashable RESP3 map keys ([#3873](https://redirect.github.com/redis/go-redis/pull/3873)), odd-length flat replies ([#3900](https://redirect.github.com/redis/go-redis/pull/3900)), mismatched declared array lengths ([#3907](https://redirect.github.com/redis/go-redis/pull/3907)), unexpected extra reply frames ([#3884](https://redirect.github.com/redis/go-redis/pull/3884)), and nil elements in numeric/bool slice replies ([#3922](https://redirect.github.com/redis/go-redis/pull/3922)). ##### PubSub `Receive` Hang Fix `PeekPushNotificationName` blocked until 36 bytes were buffered, so a short subscribe confirmation (channel name of six or fewer characters) on an otherwise idle connection hung `PubSub.Receive` forever — a regression introduced in 9.20.1 by [#3842](https://redirect.github.com/redis/go-redis/pull/3842). The peek now parses whatever is already buffered and only waits for one more byte when the frame prefix is valid but incomplete. Fixes [#3935](https://redirect.github.com/redis/go-redis/issues/3935). ([#3936](https://redirect.github.com/redis/go-redis/pull/3936)) by [@ndyakov](https://redirect.github.com/ndyakov) ##### Correct Cluster Transaction Retries The cluster transaction pipeline treated a `MULTI`...`EXEC` block as independently retryable commands, which could scatter a transaction across nodes or send malformed transactions on retry. Redirects (`MOVED`/`ASK`/`TRYAGAIN`) and aborts are now handled at the whole-transaction level, matching Redis transaction semantics: the transaction is re-routed and retried as a unit, never partially ([#3909](https://redirect.github.com/redis/go-redis/pull/3909)) by [@cxljs](https://redirect.github.com/cxljs). ##### Credential Redaction in Command Tracing `rediscmd.AppendCmd` — used by `redisotel` and `rediscensus` to render commands into span attributes — now redacts credential arguments as `<redacted>`: `AUTH`, `HELLO ... AUTH`, `CONFIG SET` of `requirepass` / `masterauth` / TLS key passphrases, `ACL SETUSER` password rules, and `MIGRATE ... AUTH`/`AUTH2`. The client sends `HELLO ... AUTH` on every handshake and `AUTH` on every streaming-credentials rotation through the regular hook chain, so tracing hooks previously captured credentials even when the application never issued an auth command itself ([#3939](https://redirect.github.com/redis/go-redis/pull/3939)) by [@saddamr3e](https://redirect.github.com/saddamr3e). #### ✨ New Features - **Client-side caching**: server-assisted caching for the standalone client via `ClientSideCacheConfig` / `ClientSideCache`, with the `CSCStrategySharedTracking` invalidation strategy ([#3941](https://redirect.github.com/redis/go-redis/pull/3941)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **Automatic pipelining**: `AutoPipeline()` (blocking) and `AsyncAutoPipeline()` (deferred results) on `Client` and `ClusterClient`, configured via `AutoPipelineOptions` ([#3942](https://redirect.github.com/redis/go-redis/pull/3942)) by [@ndyakov](https://redirect.github.com/ndyakov), with help from [@cxljs](https://redirect.github.com/cxljs) - **`HIMPORT` command family**: `HImportPrepare` / `HImportSet` / `HImportDiscard` / `HImportDiscardAll` with lazy per-connection fieldset prepare replay ([#3919](https://redirect.github.com/redis/go-redis/pull/3919)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`LMOVEM` / `BLMOVEM`**: move multiple list elements in one call, with `COUNT` (up to N) or `EXACTLY` (all-or-nothing) semantics via `LMoveMArgs` ([#3913](https://redirect.github.com/redis/go-redis/pull/3913)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`SUnionCard` / `SDiffCard`**: cardinality of set union/difference ([#3897](https://redirect.github.com/redis/go-redis/pull/3897)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`XRead` / `XReadGroup` `MAXCOUNT` / `MAXSIZE`**: bound stream read responses by entry count or payload size ([#3898](https://redirect.github.com/redis/go-redis/pull/3898)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`TS.READ`**: read samples from a series starting at a given timestamp, with `TSReadEarliest` (`-`), `TSReadLatest` (`+`), and `TSReadNew` (`$`) sentinels ([#3896](https://redirect.github.com/redis/go-redis/pull/3896)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`TS.QUERYLABELS`**: query label names/values across time series ([#3926](https://redirect.github.com/redis/go-redis/pull/3926)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`TS.NRANGE` / `TS.NREVRANGE`**: range queries across multiple series ([#3870](https://redirect.github.com/redis/go-redis/pull/3870)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa), with multiple aggregators per key ([#3937](https://redirect.github.com/redis/go-redis/pull/3937)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`TS.MRANGE` / `TS.MREVRANGE` `EXCLUDEEMPTY`**: skip series with no samples in the result ([#3912](https://redirect.github.com/redis/go-redis/pull/3912)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`FT.ALIASLIST`**: list all index aliases ([#3925](https://redirect.github.com/redis/go-redis/pull/3925)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`FT.AGGREGATE` `COLLECT` reducer**: collect grouped values into an array ([#3886](https://redirect.github.com/redis/go-redis/pull/3886)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`FT.CREATE` `RERANK`**: `RERANK` parameter on HNSW vector field definitions ([#3927](https://redirect.github.com/redis/go-redis/pull/3927)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`FT.HYBRID` timeout warnings**: timeout warnings are now populated in hybrid search results ([#3911](https://redirect.github.com/redis/go-redis/pull/3911)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`FT.HYBRID` KNN `SHARD_K_RATIO`** (Redis 8.8+): per-shard K ratio for KNN clauses ([#3841](https://redirect.github.com/redis/go-redis/pull/3841)) by [@ndyakov](https://redirect.github.com/ndyakov) #### 🐛 Bug Fixes - **PubSub `Receive` hang**: peek push-notification names without demanding 36 buffered bytes, fixing a hang on short subscribe confirmations (fixes [#3935](https://redirect.github.com/redis/go-redis/issues/3935), regression from 9.20.1) ([#3936](https://redirect.github.com/redis/go-redis/pull/3936)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Cluster transactions**: re-route the whole tx pipeline on redirect/abort instead of per-command ([#3909](https://redirect.github.com/redis/go-redis/pull/3909)) by [@cxljs](https://redirect.github.com/cxljs) - **Credential leak in traces**: `rediscmd.AppendCmd` redacts credential arguments (`AUTH`, `HELLO ... AUTH`, `CONFIG SET` secret params, `ACL SETUSER` password rules, `MIGRATE AUTH`/`AUTH2`), so `redisotel` / `rediscensus` span attributes no longer contain passwords ([#3939](https://redirect.github.com/redis/go-redis/pull/3939)) by [@saddamr3e](https://redirect.github.com/saddamr3e) - **`WaitAOF` return type**: returns `*IntSliceCmd` matching the two-integer `WAITAOF` reply ([#3888](https://redirect.github.com/redis/go-redis/pull/3888)) by [@CipherN9](https://redirect.github.com/CipherN9) - **`Ring.Publish` routing**: publish to the shard that owns the topic instead of a round-robined one ([#3893](https://redirect.github.com/redis/go-redis/pull/3893)) by [@dkindel](https://redirect.github.com/dkindel) - **Pool `OnRemove` hooks**: fire `OnRemove` on `putConn` eviction paths so removal hooks see every evicted connection ([#3932](https://redirect.github.com/redis/go-redis/pull/3932)) by [@cxljs](https://redirect.github.com/cxljs) - **`UniversalClient` `InfoMap`**: added `InfoMap` to the `Cmdable` interface ([#3904](https://redirect.github.com/redis/go-redis/pull/3904)) by [@nazarli-shabnam](https://redirect.github.com/nazarli-shabnam) - **`SlowLogGet` context**: pass the caller's context instead of a background one ([#3915](https://redirect.github.com/redis/go-redis/pull/3915)) by [@sonnemusk](https://redirect.github.com/sonnemusk) - **`ModuleLoadex` nil config**: return an error instead of panicking on nil config ([#3916](https://redirect.github.com/redis/go-redis/pull/3916)) by [@sonnemusk](https://redirect.github.com/sonnemusk) - **`ParseURL` IPv6 hosts**: keep single brackets for IPv6 hosts without a port ([#3882](https://redirect.github.com/redis/go-redis/pull/3882)) by [@sueun-dev](https://redirect.github.com/sueun-dev) - **`ParseURL` durations**: treat unit durations `<= 0` as disabled ([#3866](https://redirect.github.com/redis/go-redis/pull/3866)) by [@sueun-dev](https://redirect.github.com/sueun-dev) - **Nil `*uint8` encoding**: encode nil `*uint8` as `"0"` like other numeric pointers ([#3869](https://redirect.github.com/redis/go-redis/pull/3869)) by [@sueun-dev](https://redirect.github.com/sueun-dev) - **`JSONSliceCmd` read errors**: return the read error from `readReply` instead of swallowing it ([#3903](https://redirect.github.com/redis/go-redis/pull/3903)) by [@saddamr3e](https://redirect.github.com/saddamr3e) - **RESP parser hardening**: reconcile declared entry-array lengths ([#3907](https://redirect.github.com/redis/go-redis/pull/3907)), handle nil elements in int/uint/bool slice parsers ([#3922](https://redirect.github.com/redis/go-redis/pull/3922)), drain unexpected reply frames ([#3884](https://redirect.github.com/redis/go-redis/pull/3884)), reject odd-length flat replies in Z/KeyValue parsers ([#3900](https://redirect.github.com/redis/go-redis/pull/3900)), avoid int overflow when skipping map/attr bodies ([#3877](https://redirect.github.com/redis/go-redis/pull/3877)), don't over-read nil replies in `Reader.Discard` ([#3874](https://redirect.github.com/redis/go-redis/pull/3874)) by [@saddamr3e](https://redirect.github.com/saddamr3e); reject unhashable keys in RESP3 map parsing ([#3873](https://redirect.github.com/redis/go-redis/pull/3873)) by [@iabdullah215](https://redirect.github.com/iabdullah215) - **Data races**: hook state during `AddHook` ([#3868](https://redirect.github.com/redis/go-redis/pull/3868)), `onNewNode` during `Ring.SetAddrs` ([#3862](https://redirect.github.com/redis/go-redis/pull/3862)), shared masters/slaves slices in cluster ([#3861](https://redirect.github.com/redis/go-redis/pull/3861)), shared `opt.Addr` during pub/sub reconnect ([#3906](https://redirect.github.com/redis/go-redis/pull/3906)), `clusterStateReloadCallback` in maintnotifications ([#3894](https://redirect.github.com/redis/go-redis/pull/3894)), conn reader in `isHealthyConn` during handoff ([#3876](https://redirect.github.com/redis/go-redis/pull/3876)) by [@saddamr3e](https://redirect.github.com/saddamr3e); handoff race window in maintnotifications ([#3872](https://redirect.github.com/redis/go-redis/pull/3872)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`redisotel`**: use `ObservableCounter` for cumulative pool stats ([#3914](https://redirect.github.com/redis/go-redis/pull/3914)) by [@Solaris-star](https://redirect.github.com/Solaris-star); avoid a data race on shared attributes during `MinIdleConns` warmup ([#3881](https://redirect.github.com/redis/go-redis/pull/3881)) by [@ndyakov](https://redirect.github.com/ndyakov) #### 🧰 Maintenance - **Cross-SDK default alignment**: new defaults for timeouts, retry backoff, cluster state reload, and TCP keep-alive ([#3918](https://redirect.github.com/redis/go-redis/pull/3918)) by [@ndyakov](https://redirect.github.com/ndyakov) - **CI on Redis 8.10**: 8.10 made the default test version ([#3920](https://redirect.github.com/redis/go-redis/pull/3920)) with version gating by major.minor ([#3908](https://redirect.github.com/redis/go-redis/pull/3908)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa); the test stack now runs the GA `redislabs/client-libs-test:8.10.0` image and 8.8 was dropped from the CI matrix ([#3940](https://redirect.github.com/redis/go-redis/pull/3940)) - **Type-safe atomics**: use typed `sync/atomic` value types ([#3860](https://redirect.github.com/redis/go-redis/pull/3860)) and remove the dead `assertUnstableCommand` RESP3 path ([#3928](https://redirect.github.com/redis/go-redis/pull/3928)) by [@cxljs](https://redirect.github.com/cxljs) - **Docs**: clarify that `ExpireTime` / `PExpireTime` return Unix timestamps ([#3917](https://redirect.github.com/redis/go-redis/pull/3917)) by [@sonnemusk](https://redirect.github.com/sonnemusk); remove a duplicate example step ([#3875](https://redirect.github.com/redis/go-redis/pull/3875)) by [@andy-stark-redis](https://redirect.github.com/andy-stark-redis) #### 👥 Contributors We'd like to thank all the contributors who worked on this release! [@andy-stark-redis](https://redirect.github.com/andy-stark-redis), [@CipherN9](https://redirect.github.com/CipherN9), [@cxljs](https://redirect.github.com/cxljs), [@dkindel](https://redirect.github.com/dkindel), [@iabdullah215](https://redirect.github.com/iabdullah215), [@nazarli-shabnam](https://redirect.github.com/nazarli-shabnam), [@ndyakov](https://redirect.github.com/ndyakov), [@ofekshenawa](https://redirect.github.com/ofekshenawa), [@saddamr3e](https://redirect.github.com/saddamr3e), [@Solaris-star](https://redirect.github.com/Solaris-star), [@sonnemusk](https://redirect.github.com/sonnemusk), [@sueun-dev](https://redirect.github.com/sueun-dev) *** **Full Changelog**: <https://github.com/redis/go-redis/compare/v9.21.0...v9.22.0> ### [`v9.21.0`](https://redirect.github.com/redis/go-redis/releases/tag/v9.21.0): 9.21.0 [Compare Source](https://redirect.github.com/redis/go-redis/compare/v9.20.1...v9.21.0) This is a minor release adding new features and bug fixes. There are no breaking changes; upgrading from 9.20.x is a drop-in replacement. #### 🚀 Highlights ##### Zero-copy `GetToBuffer` / `SetFromBuffer` Two new `StringCmdable` methods let callers read and write Redis string values directly into and from pre-allocated byte buffers, eliminating the per-call payload allocation that `Get`/`Set` incur: ```go GetToBuffer(ctx, key, buf) *ZeroCopyStringCmd // reads into buf; ZeroCopyStringCmd { Val() int; Bytes() []byte; Result() (int, error) } SetFromBuffer(ctx, key, buf) *StatusCmd ``` `GetToBuffer` decodes the bulk reply straight into the caller-owned `buf` (no intermediate allocation); a buffer that is too small returns an error after draining the payload, so the connection stays aligned for the next reply. `SetFromBuffer` is provided for API symmetry — it dispatches to the same `[]byte` writer path as `Set(ctx, key, buf, 0)` and produces byte-identical output on the wire. Available on `*Client`, `*ClusterClient`, `*Ring`, `*Conn` and `Pipeliner`. ([#3834](https://redirect.github.com/redis/go-redis/pull/3834)) by [@ndyakov](https://redirect.github.com/ndyakov) ##### Explicit `LIMIT 0` for stream trimming Redis treats `XTRIM`/`XADD` approximate-trim (`~`) `LIMIT 0` as "disable the trimming effort cap entirely", which differs from omitting `LIMIT` (the implicit `100 * stream-node-max-entries` default). The command builders previously only emitted `LIMIT` when `limit > 0`, so callers could never send an explicit `LIMIT 0`. Following the `KeepTTL = -1` precedent, the new `XTrimLimitDisabled = -1` sentinel now emits an explicit `LIMIT 0`; `limit == 0` keeps the historical no-`LIMIT` behavior, so existing callers produce byte-identical commands. ([#3848](https://redirect.github.com/redis/go-redis/pull/3848)) by [@TheRealMal](https://redirect.github.com/TheRealMal) #### ✨ New Features - **Zero-copy buffer string commands**: new `GetToBuffer` / `SetFromBuffer` on `StringCmdable` and the `ZeroCopyStringCmd` result type, reading/writing string values into caller-owned buffers without per-call payload allocation ([#3834](https://redirect.github.com/redis/go-redis/pull/3834)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`XTrimLimitDisabled` sentinel**: `XTRIM`/`XADD` approximate trimming can now send an explicit `LIMIT 0` to disable the trim effort cap, via the new `XTrimLimitDisabled = -1` sentinel ([#3848](https://redirect.github.com/redis/go-redis/pull/3848)) by [@TheRealMal](https://redirect.github.com/TheRealMal) - **PubSub health-check timeouts**: `channel.initHealthCheck` now bounds the `Ping` it issues with a fresh per-check timeout context (the exported `pingTimeout` / `reconnectTimeout`) instead of `context.TODO()`, so a stuck health-check Ping can no longer block indefinitely ([#3819](https://redirect.github.com/redis/go-redis/pull/3819)) by [@abdellani](https://redirect.github.com/abdellani) - **Skip redundant `UNWATCH` in `Tx.Close`**: a transaction now tracks whether a `WATCH` is still active (`watchArmed`) and only issues `UNWATCH` on `Close` when it is, removing an extra round trip on the common `WATCH`/.../`EXEC` and no-key `Watch` paths while never returning a connection to the pool with an active watch ([#3854](https://redirect.github.com/redis/go-redis/pull/3854)) by [@fcostaoliveira](https://redirect.github.com/fcostaoliveira) #### 🐛 Bug Fixes - **`maintnotifications` `ModeAuto` fail-open**: `ModeAuto` now stays fail-open when the server does not support maintenance notifications — connections are retired and tracking is guarded during downgrade so the client keeps working instead of erroring ([#3853](https://redirect.github.com/redis/go-redis/pull/3853)) by [@terrorobe](https://redirect.github.com/terrorobe) #### 👥 Contributors We'd like to thank all the contributors who worked on this release! [@abdellani](https://redirect.github.com/abdellani), [@fcostaoliveira](https://redirect.github.com/fcostaoliveira), [@ndyakov](https://redirect.github.com/ndyakov), [@terrorobe](https://redirect.github.com/terrorobe), [@TheRealMal](https://redirect.github.com/TheRealMal) ### [`v9.20.1`](https://redirect.github.com/redis/go-redis/releases/tag/v9.20.1): 9.20.1 [Compare Source](https://redirect.github.com/redis/go-redis/compare/v9.20.0...v9.20.1) This is a patch release containing bug fixes only. There are no new features or breaking changes; upgrading from 9.20.0 is a drop-in replacement. #### 🚀 Highlights ##### RESP3 pub/sub message loss fixed `PeekPushNotificationName` previously inspected only the bytes already buffered by `bufio`, so when a push frame header straddled a buffer fill boundary it could return a **truncated** notification name (e.g. `"messa"` instead of `"message"`). The push processor then mis-routed the frame and `ReadReply` silently dropped it, causing intermittent RESP3 pub/sub message loss. The peek now grows its window (36 bytes → up to 4 KiB) and reads more from the connection until the header is complete, cleanly separating incomplete prefixes from corrupt frames (including overflow-safe bulk-length handling). Fixes [#3839](https://redirect.github.com/redis/go-redis/issues/3839). ([#3842](https://redirect.github.com/redis/go-redis/pull/3842)) by [@ndyakov](https://redirect.github.com/ndyakov) #### 🐛 Bug Fixes - **RESP3 push peeking**: `PeekPushNotificationName` no longer returns a truncated notification name when a push frame header spans a buffer boundary, preventing silent RESP3 pub/sub message loss (fixes [#3839](https://redirect.github.com/redis/go-redis/issues/3839)) ([#3842](https://redirect.github.com/redis/go-redis/pull/3842)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`FT.HYBRID` vector params**: Vector data is now always sent via `PARAMS` with auto-generated param names (`__vector_param_N`, with collision avoidance) when `VectorParamName` is omitted, since Redis no longer accepts inline vector blobs; the `FTHybridOptions.Params` map is no longer mutated, so the same options struct can be reused across calls ([#3844](https://redirect.github.com/redis/go-redis/pull/3844)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`CLUSTER SHARDS` forward compatibility**: Unknown shard- and node-level attributes in the `CLUSTER SHARDS` reply are now skipped via `DiscardNext()` instead of erroring, so clients keep working when the server introduces new fields ([#3843](https://redirect.github.com/redis/go-redis/pull/3843)) by [@madolson](https://redirect.github.com/madolson) - **PubSub double reconnect**: `PubSub.releaseConn` no longer reconnects twice when a connection is both unusable (or pending handoff) and reports a bad-connection error, avoiding a wasted connection establish-then-close cycle ([#3833](https://redirect.github.com/redis/go-redis/pull/3833)) by [@cxljs](https://redirect.github.com/cxljs) #### 👥 Contributors We'd like to thank all the contributors who worked on this release! [@cxljs](https://redirect.github.com/cxljs), [@madolson](https://redirect.github.com/madolson), [@ndyakov](https://redirect.github.com/ndyakov) *** **Full Changelog**: <https://github.com/redis/go-redis/compare/v9.20.0...v9.20.1> ### [`v9.20.0`](https://redirect.github.com/redis/go-redis/releases/tag/v9.20.0): 9.20.0 [Compare Source](https://redirect.github.com/redis/go-redis/compare/v9.19.0...v9.20.0) #### 🚀 Highlights ##### Redis 8.8 Support This release adds support for **Redis 8.8**. The README's supported-versions list now includes Redis 8.8 alongside 8.0/8.2/8.4, and CI exercises the `8.8` client-libs-test image across the full suite (Makefile, build workflow, doctests, run-tests action, and docker-compose). Coverage for the new commands that ship in the 8.x line, rounded out in this release: - **`AR*` array data type** ([#3813](https://redirect.github.com/redis/go-redis/pull/3813)) — new array data structure, exposed via the `ArrayCmdable` interface (see the experimental-features highlight below). - **`INCREX`** ([#3816](https://redirect.github.com/redis/go-redis/pull/3816)) — atomic increment with expiration in a single round-trip. - **`XNACK`** ([#3790](https://redirect.github.com/redis/go-redis/pull/3790)) — explicit negative-acknowledge of pending stream entries. - **`XAUTOCLAIM` PEL deletes** ([#3798](https://redirect.github.com/redis/go-redis/pull/3798)) — `XAUTOCLAIM`/`XAUTOCLAIMJUSTID` now return the list of deleted message IDs from the pending entries list. - **`TS.RANGE` multiple aggregators** ([#3791](https://redirect.github.com/redis/go-redis/pull/3791)) — `TS.RANGE`/`TS.REVRANGE`/`TS.MRANGE`/`TS.MREVRANGE` accept multiple aggregators in a single call. - **`Z(UNION|INTER|DIFF)` `COUNT` aggregator** ([#3802](https://redirect.github.com/redis/go-redis/pull/3802)) — `COUNT` reducer for sorted-set set operations. - **`JSON.SET FPHA`** ([#3797](https://redirect.github.com/redis/go-redis/pull/3797)) — new `FPHA` argument that specifies the floating-point type for homogeneous FP arrays. CI image bump ([#3814](https://redirect.github.com/redis/go-redis/pull/3814)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa). Command coverage contributions by [@cxljs](https://redirect.github.com/cxljs), [@elena-kolevska](https://redirect.github.com/elena-kolevska), [@Khukharr](https://redirect.github.com/Khukharr), [@ndyakov](https://redirect.github.com/ndyakov), and [@ofekshenawa](https://redirect.github.com/ofekshenawa). ##### Stable RESP3 for RediSearch (`UnstableResp3` deprecated) `FT.SEARCH`, `FT.AGGREGATE`, `FT.INFO`, `FT.SPELLCHECK`, and `FT.SYNDUMP` now parse RESP3 (map) responses into the same typed result objects as RESP2 — `Val()` and `Result()` work uniformly on both protocols, no flag required. Previously, RESP3 search responses required `UnstableResp3: true` and were returned as opaque maps accessible only via `RawResult()` / `RawVal()`. As a result, the `UnstableResp3` option is now a **no-op** across every options struct (`Options`, `ClusterOptions`, `UniversalOptions`, `FailoverOptions`, `RingOptions`) and has been marked `// Deprecated:`. The field is retained for backwards compatibility — existing code that sets `UnstableResp3: true` will continue to compile and behave identically — but it will be removed in a future release and new code should not set it. `RawResult()` / `RawVal()` continue to work for callers that prefer the raw RESP payload. ([#3741](https://redirect.github.com/redis/go-redis/pull/3741)) by [@ndyakov](https://redirect.github.com/ndyakov) ##### Experimental Array Data Structure Commands Adds an experimental `ArrayCmdable` interface with the `AR*` command family (`ARSet`, `ARGet`, `ARGetRange`, `ARMSet`, `ARMGet`, `ARDel`, `ARDelRange`, `ARScan`, `ARSeek`, `ARNext`, `ARLastItems`, `ARGrep`, `ARGrepWithValues`, `ARInfo`/`ARInfoFull`, and typed reducers `AROpSum`/`AROpMin`/`AROpMax`/`AROpAnd`/`AROpOr`/`AROpXor`/`AROpMatch`/`AROpUsed`) for working with Redis 8.8's new array data type. **API is experimental and may change in a future release.** ([#3813](https://redirect.github.com/redis/go-redis/pull/3813)) by [@cxljs](https://redirect.github.com/cxljs) #### ✨ New Features - **RESP3 search parser**: First-class RESP3 parsing for `FT.SEARCH`/`FT.AGGREGATE`/`FT.INFO`/`FT.SPELLCHECK`/`FT.SYNDUMP` responses with backwards compatibility for RESP2 ([#3741](https://redirect.github.com/redis/go-redis/pull/3741)) by [@ndyakov](https://redirect.github.com/ndyakov) - **INCREX**: New `INCREX` command support — atomic increment with expiration ([#3816](https://redirect.github.com/redis/go-redis/pull/3816)) by [@ndyakov](https://redirect.github.com/ndyakov) - **XNACK**: Client support for the `XNACK` stream command for explicitly negative-acknowledging pending entries ([#3790](https://redirect.github.com/redis/go-redis/pull/3790)) by [@elena-kolevska](https://redirect.github.com/elena-kolevska) - **TS range multiple aggregators**: `TS.RANGE`/`TS.REVRANGE`/`TS.MRANGE`/`TS.MREVRANGE` now accept multiple aggregators in a single call ([#3791](https://redirect.github.com/redis/go-redis/pull/3791)) by [@elena-kolevska](https://redirect.github.com/elena-kolevska) - **`XAutoClaim` deleted IDs**: `XAUTOCLAIM`/`XAUTOCLAIMJUSTID` now return the list of deleted message IDs from the PEL ([#3798](https://redirect.github.com/redis/go-redis/pull/3798)) by [@Khukharr](https://redirect.github.com/Khukharr) - **`JSON.SET FPHA`**: `JSON.SET` accepts a new `FPHA` argument that specifies the floating-point type for homogeneous floating-point arrays ([#3797](https://redirect.github.com/redis/go-redis/pull/3797)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Sorted-set union/intersection COUNT**: `ZUNION`/`ZINTER`/`ZDIFF` aggregator now supports `COUNT` ([#3802](https://redirect.github.com/redis/go-redis/pull/3802)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **`FT.HYBRID` vector validation**: Validates hybrid-search vector input types and adds proper typed vector parameters ([#3756](https://redirect.github.com/redis/go-redis/pull/3756)) by [@DengY11](https://redirect.github.com/DengY11) - **Cluster pool wait stats**: `ClusterClient.PoolStats()` now accumulates `WaitCount` and `WaitDurationNs` across all node pools (previously always zero) ([#3809](https://redirect.github.com/redis/go-redis/pull/3809)) by [@LINKIWI](https://redirect.github.com/LINKIWI) #### 🐛 Bug Fixes - **TLS-only Cluster PubSub**: `CLUSTER SLOTS` port-0 entries now fall back to the origin endpoint's port, fixing `dial tcp <ip>:0: connection refused` on TLS-only clusters started with `--port 0 --tls-port <port>` (fixes [#3726](https://redirect.github.com/redis/go-redis/issues/3726)) ([#3828](https://redirect.github.com/redis/go-redis/pull/3828)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Sharded PubSub reconnect routing**: `PubSub.conn()` now passes both regular (`c.channels`) and sharded (`c.schannels`) channels into the per-PubSub `newConn` closure. Previously, `ClusterClient.SSubscribe`-only PubSubs reconnected to a random node (because the routing closure saw an empty channel list), the `SSUBSCRIBE` was sent to the wrong shard, and the resulting `MOVED` reply was silently dropped ([#3829](https://redirect.github.com/redis/go-redis/pull/3829)) by [@ndyakov](https://redirect.github.com/ndyakov) - **ClusterClient `Watch` retry**: User errors returned from a `Watch` callback are no longer subjected to cluster-retry classification; transient cluster errors still retry, but a callback returning e.g. `net.ErrClosed` short-circuits immediately ([#3821](https://redirect.github.com/redis/go-redis/pull/3821)) by [@obiyang](https://redirect.github.com/obiyang) - **Sentinel concurrent-probe leak**: `MasterAddr`'s concurrent sentinel probe now closes the non-winning sentinel clients instead of leaking them ([#3827](https://redirect.github.com/redis/go-redis/pull/3827)) by [@cxljs](https://redirect.github.com/cxljs) - **Sentinel rediscovery loop on master-only setups**: `replicaAddrs` no longer tears down the cached sentinel client when the replica list is empty, eliminating a continuous rediscovery loop on master-only Sentinel deployments that flooded logs and added per-operation latency ([#3795](https://redirect.github.com/redis/go-redis/pull/3795)) by [@shahyash2609](https://redirect.github.com/shahyash2609) - **Pool `CloseConn` hooks**: `Pool.CloseConn` now triggers registered hooks, fixing a memory leak when connections are closed explicitly rather than via the normal removal path ([#3818](https://redirect.github.com/redis/go-redis/pull/3818)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Dial TCP error redirection**: Wrapped `dial tcp` errors are now correctly classified as redirectable so cluster routing can recover from a single unreachable node ([#3810](https://redirect.github.com/redis/go-redis/pull/3810)) by [@vladisa88](https://redirect.github.com/vladisa88) - **Pool `Close` health checks**: `ConnPool.Close` now only runs health checks against idle connections, avoiding spurious activity on connections still in use ([#3805](https://redirect.github.com/redis/go-redis/pull/3805)) by [@ndyakov](https://redirect.github.com/ndyakov) - **VLinks return type**: Fixed the return type of `VLINKS`/`VLINKSWITHSCORES` vector-set replies ([#3820](https://redirect.github.com/redis/go-redis/pull/3820)) by [@romanpovol](https://redirect.github.com/romanpovol) #### 🧪 Testing & Infrastructure - **Flaky tests**: Stabilized several flaky tests in the sentinel and pool suites ([#3815](https://redirect.github.com/redis/go-redis/pull/3815)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Sentinel failover metric race**: Fixed a data race in the sentinel failover metric test ([#3824](https://redirect.github.com/redis/go-redis/pull/3824)) by [@cxljs](https://redirect.github.com/cxljs) - **`waitForSentinelClusterStable` post-conditions**: The sentinel test harness now waits for replicas to be fully connected (not just present in the count) and is robust to randomized spec ordering after failover specs, eliminating an intermittent `Expected master to equal slave` flake ([#3830](https://redirect.github.com/redis/go-redis/pull/3830)) by [@ndyakov](https://redirect.github.com/ndyakov) - **`govulncheck` workflow**: New scheduled GitHub Actions workflow runs `govulncheck` on every push, PR, and weekly, surfacing newly disclosed Go vulnerabilities even when no code changes ([#3779](https://redirect.github.com/redis/go-redis/pull/3779)) by [@solardome](https://redirect.github.com/solardome) - **CI Redis 8.8-rc1**: CI now exercises the 8.8-rc1 Redis image ([#3814](https://redirect.github.com/redis/go-redis/pull/3814)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) #### 🧰 Maintenance - **`Cmd.Slot()` lookup refactor**: Caches the per-command `CommandInfo` and short-circuits keyless commands before the switch dispatch, removing redundant `Peek` calls ([#3804](https://redirect.github.com/redis/go-redis/pull/3804)) by [@retr0-kernel](https://redirect.github.com/retr0-kernel) - **stdlib `math/rand`**: Replaced `internal/rand` with `math/rand` from the standard library now that the minimum Go version is 1.24 ([#3823](https://redirect.github.com/redis/go-redis/pull/3823)) by [@cxljs](https://redirect.github.com/cxljs) - **ConnPool queue channel**: Removed the unused queue channel from `ConnPool`, trimming the pool's footprint ([#3826](https://redirect.github.com/redis/go-redis/pull/3826)) by [@cxljs](https://redirect.github.com/cxljs) - **Extra packages LICENSE**: Added a LICENSE file to each `extra/*` package ([#3817](https://redirect.github.com/redis/go-redis/pull/3817)) by [@ndyakov](https://redirect.github.com/ndyakov) - **README & CI image**: Documentation refresh and bumped the default CI image tag ([#3822](https://redirect.github.com/redis/go-redis/pull/3822)) by [@ndyakov](https://redirect.github.com/ndyakov) #### 👥 Contributors We'd like to thank all the contributors who worked on this release! [@cxljs](https://redirect.github.com/cxljs), [@DengY11](https://redirect.github.com/DengY11), [@elena-kolevska](https://redirect.github.com/elena-kolevska), [@Khukharr](https://redirect.github.com/Khukharr), [@LINKIWI](https://redirect.github.com/LINKIWI), [@ndyakov](https://redirect.github.com/ndyakov), [@obiyang](https://redirect.github.com/obiyang), [@ofekshenawa](https://redirect.github.com/ofekshenawa), [@retr0-kernel](https://redirect.github.com/retr0-kernel), [@romanpovol](https://redirect.github.com/romanpovol), [@shahyash2609](https://redirect.github.com/shahyash2609), [@solardome](https://redirect.github.com/solardome), [@vladisa88](https://redirect.github.com/vladisa88) *** **Full Changelog**: <https://github.com/redis/go-redis/compare/v9.19.0...v9.20.0> ### [`v9.19.0`](https://redirect.github.com/redis/go-redis/releases/tag/v9.19.0): 9.19.0 [Compare Source](https://redirect.github.com/redis/go-redis/compare/v9.18.0...v9.19.0) #### 🚀 Highlights ##### FIPS-Compatible Script Helper `Script` now supports a FIPS-safe execution mode that avoids client-side SHA-1 computation, which is blocked in strict FIPS environments. A new `NewScriptServerSHA` constructor uses `SCRIPT LOAD` to obtain and cache the digest from the server, then runs commands via `EVALSHA`/`EVALSHA_RO`. Falls back to `EVAL`/`EVALRO` if loading fails, and transparently retries once on `NOSCRIPT`. The default behavior is unchanged for existing users. ([#3700](https://redirect.github.com/redis/go-redis/pull/3700)) by [@chaitanyabodlapati](https://redirect.github.com/chaitanyabodlapati) ##### FT.AGGREGATE Step-Based Pipeline Builder Added a new step-based `FT.AGGREGATE` pipeline API via `FTAggregateOptions.Steps`, allowing `LOAD`, `APPLY`, `GROUPBY`, and `SORTBY` (with per-step `MAX`) to be repeated and interleaved in arbitrary order — matching Redis's native multi-stage aggregation semantics. The legacy `Load`/`Apply`/`GroupBy`/`SortBy`/`SortByMax` fields are now deprecated. ([#3782](https://redirect.github.com/redis/go-redis/pull/3782)) by [@ndyakov](https://redirect.github.com/ndyakov) ##### Raw RESP Protocol Access Added `DoRaw` and `DoRawWriteTo` methods for executing arbitrary commands and reading the raw RESP response. Useful for proxying, custom protocol inspection, and working with commands not yet wrapped by go-redis. ([#3713](https://redirect.github.com/redis/go-redis/pull/3713)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) ##### Configurable Dial Retry Backoff Added `DialerRetryBackoff` option (plumbed through `Options`, `ClusterOptions`, `RingOptions`, `FailoverOptions`) to let callers customize the delay between failed dial attempts. Helpers `DialRetryBackoffConstant` and `DialRetryBackoffExponential` (with jitter and cap) are provided out of the box. Dial timeout is now also applied **per attempt** rather than across all retries. ([#3706](https://redirect.github.com/redis/go-redis/pull/3706), [#3705](https://redirect.github.com/redis/go-redis/pull/3705)) by [@mwhooker](https://redirect.github.com/mwhooker) #### ✨ New Features - **FT.AGGREGATE Steps**: Step-based pipeline builder for `FT.AGGREGATE` with support for repeated/interleaved `LOAD`, `APPLY`, `GROUPBY`, and `SORTBY` stages ([#3782](https://redirect.github.com/redis/go-redis/pull/3782)) by [@ndyakov](https://redirect.github.com/ndyakov) - **VectorSet commands**: Added `VISMEMBER` and `WITHATTRIBS` support ([#3753](https://redirect.github.com/redis/go-redis/pull/3753)) by [@romanpovol](https://redirect.github.com/romanpovol) - **FIPS-safe Script**: `NewScriptServerSHA` uses `SCRIPT LOAD` to obtain the digest from the server, avoiding client-side SHA-1 ([#3700](https://redirect.github.com/redis/go-redis/pull/3700)) by [@chaitanyabodlapati](https://redirect.github.com/chaitanyabodlapati) - **Raw RESP access**: `DoRaw` and `DoRawWriteTo` for raw RESP protocol access ([#3713](https://redirect.github.com/redis/go-redis/pull/3713)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **Dial retry backoff**: `DialerRetryBackoff` function option with constant and exponential helpers ([#3706](https://redirect.github.com/redis/go-redis/pull/3706)) by [@mwhooker](https://redirect.github.com/mwhooker) - **Typed NOSCRIPT error**: Redis `NOSCRIPT` replies are now surfaced as a typed error for easier handling ([#3738](https://redirect.github.com/redis/go-redis/pull/3738)) by [@LINKIWI](https://redirect.github.com/LINKIWI) - **PubSub ClientSetName**: Added `ClientSetName` method to `PubSub` ([#3727](https://redirect.github.com/redis/go-redis/pull/3727)) by [@Flack74](https://redirect.github.com/Flack74) - **ReplicaOf**: New `ReplicaOf` method replaces the deprecated `SlaveOf` ([#3720](https://redirect.github.com/redis/go-redis/pull/3720)) by [@Copilot](https://redirect.github.com/apps/copilot-swe-agent) - **HSCAN BinaryUnmarshaler**: `HScan` now supports types implementing `encoding.BinaryUnmarshaler` ([#3768](https://redirect.github.com/redis/go-redis/pull/3768)) by [@Aaditya-dubey1](https://redirect.github.com/Aaditya-dubey1) #### 🐛 Bug Fixes - **Auto hostname type detection**: Improved endpoint type detection for maintenance notifications using DNS-based classification; handles empty hosts and expanded private-IP ranges ([#3789](https://redirect.github.com/redis/go-redis/pull/3789)) by [@ndyakov](https://redirect.github.com/ndyakov) - **HELLO fallback**: Don't send `CLIENT MAINT_NOTIFICATIONS` handshake when `HELLO` fails and connection falls back to RESP2; fail fast when explicitly enabled with RESP3 ([#3788](https://redirect.github.com/redis/go-redis/pull/3788)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Dial TCP retry**: `ShouldRetry` now treats `net.OpError` with `Op == "dial"` timeout errors as safe to retry since no command was sent ([#3787](https://redirect.github.com/redis/go-redis/pull/3787)) by [@vladisa88](https://redirect.github.com/vladisa88) - **wrappedOnClose leak**: Fixed resource leak caused by repeatedly wrapping `baseClient` close logic; replaced with a bounded, concurrency-safe named-hook registry ([#3785](https://redirect.github.com/redis/go-redis/pull/3785)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Pool Close() on stale connections**: Suppress close errors (e.g., TLS `closeNotify` timeouts) for connections already dropped by the server due to idle timeout ([#3778](https://redirect.github.com/redis/go-redis/pull/3778)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **FIFO waiter ordering**: Fixed race in `ConnStateMachine.notifyWaiters` that could wake multiple waiters under a single mutex hold and violate FIFO ordering ([#3777](https://redirect.github.com/redis/go-redis/pull/3777)) by [@0x48core](https://redirect.github.com/0x48core) - **Lua READONLY detection**: Detect `READONLY` errors embedded in Lua script error messages on read-only replicas so commands are correctly retried ([#3769](https://redirect.github.com/redis/go-redis/pull/3769)) by [@zhengjilei](https://redirect.github.com/zhengjilei) - **VectorScoreSliceCmd RESP2**: Fixed `VSimWithScores`, `VSimWithArgsWithScores`, and `VLinksWithScores` which were broken on RESP2 connections returning flat arrays instead of maps ([#3767](https://redirect.github.com/redis/go-redis/pull/3767)) by [@Copilot](https://redirect.github.com/apps/copilot-swe-agent) - **Closed connection handling**: Two fixes for closed connection handling in the pool ([#3764](https://redirect.github.com/redis/go-redis/pull/3764)) by [@cxljs](https://redirect.github.com/cxljs) - **ZRangeArgs Rev**: Fixed `ZRangeArgs` with `Rev` + `ByScore`/`ByLex` incorrectly swapping `Start`/`Stop`, breaking `ZRANGESTORE` ([#3751](https://redirect.github.com/redis/go-redis/pull/3751)) by [@Copilot](https://redirect.github.com/apps/copilot-swe-agent) - **OTel metric instrument types**: Fixed metric instrument types in `redisotel-native` ([#3743](https://redirect.github.com/redis/go-redis/pull/3743)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **Options.clone() data race**: Fixed data race when cloning `Options` ([#3739](https://redirect.github.com/redis/go-redis/pull/3739)) by [@rubensayshi](https://redirect.github.com/rubensayshi) - **Connection closure metrics**: Fixed connection closure metrics and enabled all metric groups by default in `redisotel-native` ([#3735](https://redirect.github.com/redis/go-redis/pull/3735)) by [@ofekshenawa](https://redirect.github.com/ofekshenawa) - **OTel semconv v1.38.0**: Use metric definition from `otel/semconv/v1.38.0` in `redisotel-native` ([#3731](https://redirect.github.com/redis/go-redis/pull/3731)) by [@wzy9607](https://redirect.github.com/wzy9607) - **SETNX semantics**: Use `SET ... NX` instead of the deprecated `SETNX` command ([#3723](https://redirect.github.com/redis/go-redis/pull/3723)) by [@ndyakov](https://redirect.github.com/ndyakov) - **TIME keyless routing**: Mark `TIME` as a keyless command for correct cluster routing ([#3722](https://redirect.github.com/redis/go-redis/pull/3722)) by [@fatal10110](https://redirect.github.com/fatal10110) - **Dial timeout per retry**: Dial timeout now applies per attempt instead of across all retry attempts combined ([#3705](https://redirect.github.com/redis/go-redis/pull/3705)) by [@mwhooker](https://redirect.github.com/mwhooker) - **Cluster metrics attributes**: Fixed `pool.name` being appended per node, which corrupted and dropped user-provided custom attributes ([#3699](https://redirect.github.com/redis/go-redis/pull/3699)) by [@Jesse-Bonfire](https://redirect.github.com/Jesse-Bonfire) - **initConn nil dereference**: Fixed nil pointer dereference and potential deadlock in `*baseClient.initConn()`; added explicit nil option guards to client constructors ([#3676](https://redirect.github.com/redis/go-redis/pull/3676)) by [@olde-ducke](https://redirect.github.com/olde-ducke) #### ⚡ Performance - **RESP reader**: Optimized RESP reader by eliminating intermediate string allocations ([#3774](https://redirect.github.com/redis/go-redis/pull/3774)) by [@Aaditya-dubey1](https://redirect.github.com/Aaditya-dubey1) - **Inline rendezvous hashing**: Replaced `github.com/dgryski/go-rendezvous` dependency with an in-repo implementation in `internal/hashtag`, reducing the dependency graph while preserving algorithm parity ([#3762](https://redirect.github.com/redis/go-redis/pull/3762)) by [@bigsk05](https://redirect.github.com/bigsk05) #### 🧪 Testing & Infrastructure - **Release automation**: Added `repository`, `ref`, and `client-libs-test-image-tag` inputs to the `run-tests` composite action; `redis-version` is now optional so unstable builds use `REDIS_VERSION` from the Makefile ([#3749](https://redirect.github.com/redis/go-redis/pull/3749)) by [@dariaguy](https://redirect.github.com/dariaguy) - **Go 1.24**: Updated minimum Go version to 1.24 and use `-compat=1.24` in release scripts ([#3714](https://redirect.github.com/redis/go-redis/pull/3714), [#3754](https://redirect.github.com/redis/go-redis/pull/3754)) by [@ndyakov](https://redirect.github.com/ndyakov), [@cxljs](https://redirect.github.com/cxljs) #### 🧰 Maintenance - **Pool state machine**: Removed redundant `Conn.closed` atomic field in favor of the state machine's `StateClosed` ([#3783](https://redirect.github.com/redis/go-redis/pull/3783)) by [@cxljs](https://redirect.github.com/cxljs) - **OTel SDK**: Updated OpenTelemetry SDK dependencies in `redisotel`/`redisotel-native` ([#3770](https://redirect.github.com/redis/go-redis/pull/3770)) by [@ndyakov](https://redirect.github.com/ndyakov) - **Go 1.21+ built-ins**: Use `maps.Keys`, `slices.Collect`, `slices.Contains`, `clear()`, and `slices.SortFunc` instead of custom helpers ([#3758](https://redirect.github.com/redis/go-redis/pull/3758), [#3746](https://redirect.github.com/redis/go-redis/pull/3746)) by [@cxljs](https://redirect.github.com/cxljs) - **HGetAll docs**: Added Go doc comment to `HGetAll` describing behavior and comp </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…astic#7936) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/api](https://redirect.github.com/googleapis/google-api-go-client) | `v0.292.0` → `v0.293.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fapi/v0.293.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fapi/v0.292.0/v0.293.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>googleapis/google-api-go-client (google.golang.org/api)</summary> ### [`v0.293.0`](https://redirect.github.com/googleapis/google-api-go-client/releases/tag/v0.293.0) [Compare Source](https://redirect.github.com/googleapis/google-api-go-client/compare/v0.292.0...v0.293.0) ##### Features - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3689](https://redirect.github.com/googleapis/google-api-go-client/issues/3689)) ([82ee53b](https://redirect.github.com/googleapis/google-api-go-client/commit/82ee53b794c25614818788285e4d6fca4cfaa1ec)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3691](https://redirect.github.com/googleapis/google-api-go-client/issues/3691)) ([07e3f98](https://redirect.github.com/googleapis/google-api-go-client/commit/07e3f98c6d7c44f348bbc05f64f432ec46f435ab)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3692](https://redirect.github.com/googleapis/google-api-go-client/issues/3692)) ([8ab2586](https://redirect.github.com/googleapis/google-api-go-client/commit/8ab25861a802d778288129a603846c65b844d8ec)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3693](https://redirect.github.com/googleapis/google-api-go-client/issues/3693)) ([3ca7257](https://redirect.github.com/googleapis/google-api-go-client/commit/3ca7257fbaff1a073464989df9a284e7088f2917)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3694](https://redirect.github.com/googleapis/google-api-go-client/issues/3694)) ([6855532](https://redirect.github.com/googleapis/google-api-go-client/commit/68555327f8bf789f35a7e0d0ebfe9fac16530a68)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3696](https://redirect.github.com/googleapis/google-api-go-client/issues/3696)) ([b7d7362](https://redirect.github.com/googleapis/google-api-go-client/commit/b7d7362fc13addec7389a279e6483db7e8f1159f)) - **all:** Auto-regenerate discovery clients ([#&elastic#8203;3697](https://redirect.github.com/googleapis/google-api-go-client/issues/3697)) ([9f826b1](https://redirect.github.com/googleapis/google-api-go-client/commit/9f826b1a20348948d7ae728134651c3dcbccf5db)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [cel.dev/expr](https://redirect.github.com/cel-expr/cel-spec) | `v0.25.2` → `v0.25.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/cel.dev%2fexpr/v0.25.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/cel.dev%2fexpr/v0.25.2/v0.25.3?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>cel-expr/cel-spec (cel.dev/expr)</summary> ### [`v0.25.3`](https://redirect.github.com/cel-expr/cel-spec/releases/tag/v0.25.3) [Compare Source](https://redirect.github.com/cel-expr/cel-spec/compare/v0.25.2...v0.25.3) #### What's Changed - Workaround inconsistent ? in proto textformat by [@&elastic#8203;jnthntatum](https://redirect.github.com/jnthntatum) in [#&elastic#8203;512](https://redirect.github.com/cel-expr/cel-spec/pull/512) - Update README with repository relocation notice by [@&elastic#8203;dmitriplotnikov](https://redirect.github.com/dmitriplotnikov) in [#&elastic#8203;514](https://redirect.github.com/cel-expr/cel-spec/pull/514) - Add basic tests for out-of-range epoch int to timestamp conversions by [@&elastic#8203;l46kok](https://redirect.github.com/l46kok) in [#&elastic#8203;500](https://redirect.github.com/cel-expr/cel-spec/pull/500) - Update README with new repository link by [@&elastic#8203;dmitriplotnikov](https://redirect.github.com/dmitriplotnikov) in [#&elastic#8203;519](https://redirect.github.com/cel-expr/cel-spec/pull/519) - Lint fixes for import by [@&elastic#8203;jnthntatum](https://redirect.github.com/jnthntatum) in [#&elastic#8203;521](https://redirect.github.com/cel-expr/cel-spec/pull/521) - CEL conformance test documentation: fix links in markdown by [@&elastic#8203;AustinWise](https://redirect.github.com/AustinWise) in [#&elastic#8203;518](https://redirect.github.com/cel-expr/cel-spec/pull/518) - Avoid ? in textproto test cases. by [@&elastic#8203;jnthntatum](https://redirect.github.com/jnthntatum) in [#&elastic#8203;525](https://redirect.github.com/cel-expr/cel-spec/pull/525) - Add initial conformance tests for lists ext by [@&elastic#8203;jnthntatum](https://redirect.github.com/jnthntatum) in [#&elastic#8203;528](https://redirect.github.com/cel-expr/cel-spec/pull/528) #### New Contributors - [@&elastic#8203;dmitriplotnikov](https://redirect.github.com/dmitriplotnikov) made their first contribution in [#&elastic#8203;514](https://redirect.github.com/cel-expr/cel-spec/pull/514) - [@&elastic#8203;AustinWise](https://redirect.github.com/AustinWise) made their first contribution in [#&elastic#8203;518](https://redirect.github.com/cel-expr/cel-spec/pull/518) **Full Changelog**: <cel-expr/cel-spec@v0.25.2...v0.25.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…in) (elastic#7955) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/go-openapi/loads](https://redirect.github.com/go-openapi/loads) | `v0.25.0` → `v0.25.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgo-openapi%2floads/v0.25.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgo-openapi%2floads/v0.25.0/v0.25.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>go-openapi/loads (github.com/go-openapi/loads)</summary> ### [`v0.25.1`](https://redirect.github.com/go-openapi/loads/releases/tag/v0.25.1) [Compare Source](https://redirect.github.com/go-openapi/loads/compare/v0.25.0...v0.25.1) #### [0.25.1](https://redirect.github.com/go-openapi/loads/tree/v0.25.1) - 2026-08-14 **Full Changelog**: <go-openapi/loads@v0.25.0...v0.25.1> 8 commits in this release. *** ##### Fixed bugs - fix(errors): fix error wrapping by [@&elastic#8203;fredbi](https://redirect.github.com/fredbi) in [#&elastic#8203;165](https://redirect.github.com/go-openapi/loads/pull/165) [...](https://redirect.github.com/go-openapi/loads/commit/3cd66bb2a0d71d08c4249053b039148a8cae38bb) ##### Documentation - doc: updated contributors file by [@&elastic#8203;bot-go-openapi\[bot\]](https://redirect.github.com/bot-go-openapi\[bot]) in [#&elastic#8203;161](https://redirect.github.com/go-openapi/loads/pull/161) [...](https://redirect.github.com/go-openapi/loads/commit/c289d0b3218b38f7602851969adfd61d22e583f8) ##### Updates - build(deps): bump github.com/go-openapi/analysis from 0.25.5 to 0.26.0 in the go-openapi-dependencies group across 1 directory by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;163](https://redirect.github.com/go-openapi/loads/pull/163) [...](https://redirect.github.com/go-openapi/loads/commit/c5a9a83c1207157f99b524569a085fd2a891b4dd) - build(deps): bump the development-dependencies group with 9 updates by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;164](https://redirect.github.com/go-openapi/loads/pull/164) [...](https://redirect.github.com/go-openapi/loads/commit/01e48a4acd154fdc789d50e0dea4823560e750b6) - build(deps): bump the development-dependencies group with 9 updates by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;162](https://redirect.github.com/go-openapi/loads/pull/162) [...](https://redirect.github.com/go-openapi/loads/commit/06b652ff85bc3e1493f9ed4b3b6f258c54189aec) - build(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 in the other-dependencies group across 1 directory by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;160](https://redirect.github.com/go-openapi/loads/pull/160) [...](https://redirect.github.com/go-openapi/loads/commit/46207465fb5f179b44328c22795dde810943749c) - build(deps): bump the go-openapi-dependencies group with 2 updates by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;159](https://redirect.github.com/go-openapi/loads/pull/159) [...](https://redirect.github.com/go-openapi/loads/commit/f4933a0d4241084855f3f65cfdd05b69a1173f0a) - build(deps): bump the development-dependencies group with 9 updates by [@&elastic#8203;dependabot\[bot\]](https://redirect.github.com/dependabot\[bot]) in [#&elastic#8203;158](https://redirect.github.com/go-openapi/loads/pull/158) [...](https://redirect.github.com/go-openapi/loads/commit/83f593d46ede4e4afde434e430a6bb815bff1c9c) *** ##### People who contributed to this release - [@&elastic#8203;fredbi](https://redirect.github.com/fredbi) *** **[loads](https://redirect.github.com/go-openapi/loads) license terms** [![License][license-badge]][license-url] [license-badge]: http://img.shields.io/badge/license-Apache%20v2-orange.svg [license-url]: https://redirect.github.com/go-openapi/loads/?tab=Apache-2.0-1-ov-file#readme </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…(main) (elastic#7971) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/open-policy-agent/opa](https://redirect.github.com/open-policy-agent/opa) | `v1.19.0` → `v1.19.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fopen-policy-agent%2fopa/v1.19.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fopen-policy-agent%2fopa/v1.19.0/v1.19.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>open-policy-agent/opa (github.com/open-policy-agent/opa)</summary> ### [`v1.19.1`](https://redirect.github.com/open-policy-agent/opa/releases/tag/v1.19.1) [Compare Source](https://redirect.github.com/open-policy-agent/opa/compare/v1.19.0...v1.19.1) This release uses the latest version of Go (1.26.6) to build OPA, fixing stdlib vulnerabilities in code that OPA's HTTP handler and crypto builtins use: - <https://pkg.go.dev/vuln/GO-2026-6218> - <https://pkg.go.dev/vuln/GO-2026-6091> - <https://pkg.go.dev/vuln/GO-2026-6090> - <https://pkg.go.dev/vuln/GO-2026-6089> - <https://pkg.go.dev/vuln/GO-2026-6088> - <https://pkg.go.dev/vuln/GO-2026-5972> - <https://pkg.go.dev/vuln/GO-2026-5026> It is otherwise the same code as v1.19.0. Note that users building their own OPA binaries and images already control the Golang version, so this is not relevant for them. ##### Miscellaneous - build(go): bump to 1.26.6 (authored by [@&elastic#8203;srenatus](https://redirect.github.com/srenatus)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…in) (elastic#7968) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/fxamacker/cbor/v2](https://redirect.github.com/fxamacker/cbor) | `v2.9.2` → `v2.9.3` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2ffxamacker%2fcbor%2fv2/v2.9.3?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2ffxamacker%2fcbor%2fv2/v2.9.2/v2.9.3?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>fxamacker/cbor (github.com/fxamacker/cbor/v2)</summary> ### [`v2.9.3`](https://redirect.github.com/fxamacker/cbor/releases/tag/v2.9.3) [Compare Source](https://redirect.github.com/fxamacker/cbor/compare/v2.9.2...v2.9.3) This release fixes a potential panic when decoding into a `time.Time` from a CBOR byte string, map, or array under certain conditions. Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with `timeTag = DecTagRequired`. Upgrading to v2.9.3 is recommended. The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing. #### What's Changed - Skip data item when decoding to time.Time fails under certain conditions by [@&elastic#8203;fxamacker](https://redirect.github.com/fxamacker) in [#&elastic#8203;803](https://redirect.github.com/fxamacker/cbor/pull/803) **Full Changelog**: <fxamacker/cbor@v2.9.2...v2.9.3> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…rc.5 (main) (elastic#8048) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/containerd/platforms](https://redirect.github.com/containerd/platforms) | `v1.0.0-rc.4` → `v1.0.0-rc.5` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fcontainerd%2fplatforms/v1.0.0-rc.5?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fcontainerd%2fplatforms/v1.0.0-rc.4/v1.0.0-rc.5?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>containerd/platforms (github.com/containerd/platforms)</summary> ### [`v1.0.0-rc.5`](https://redirect.github.com/containerd/platforms/releases/tag/v1.0.0-rc.5) [Compare Source](https://redirect.github.com/containerd/platforms/compare/v1.0.0-rc.4...v1.0.0-rc.5) #### What's Changed - Fix WS2022 compat on hosts past the latest LTSC by [@&elastic#8203;zylxjtu](https://redirect.github.com/zylxjtu) in [#&elastic#8203;34](https://redirect.github.com/containerd/platforms/pull/34) #### New Contributors - [@&elastic#8203;zylxjtu](https://redirect.github.com/zylxjtu) made their first contribution in [#&elastic#8203;34](https://redirect.github.com/containerd/platforms/pull/34) **Full Changelog**: <containerd/platforms@v1.0.0-rc.4...v1.0.0-rc.5> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

elastic#8049) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/stretchr/testify](https://redirect.github.com/stretchr/testify) | `v1.12.0` → `v1.12.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fstretchr%2ftestify/v1.12.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fstretchr%2ftestify/v1.12.0/v1.12.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>stretchr/testify (github.com/stretchr/testify)</summary> ### [`v1.12.1`](https://redirect.github.com/stretchr/testify/releases/tag/v1.12.1) [Compare Source](https://redirect.github.com/stretchr/testify/compare/v1.12.0...v1.12.1) This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own. #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@&elastic#8203;harryzcy](https://redirect.github.com/harryzcy) in [#&elastic#8203;1935](https://redirect.github.com/stretchr/testify/pull/1935) - change yaml library to go.yaml.in/yaml/v3 by [@&elastic#8203;boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) in [#&elastic#8203;1772](https://redirect.github.com/stretchr/testify/pull/1772) #### New Contributors - [@&elastic#8203;harryzcy](https://redirect.github.com/harryzcy) made their first contribution in [#&elastic#8203;1935](https://redirect.github.com/stretchr/testify/pull/1935) - [@&elastic#8203;boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) made their first contribution in [#&elastic#8203;1772](https://redirect.github.com/stretchr/testify/pull/1772) **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> #### What's Changed - Change yaml library to `go.yaml.in/yaml/v3` by [@&elastic#8203;harryzcy](https://redirect.github.com/harryzcy) in [#&elastic#8203;1935](https://redirect.github.com/stretchr/testify/pull/1935) - change yaml library to go.yaml.in/yaml/v3 by [@&elastic#8203;boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) in [#&elastic#8203;1772](https://redirect.github.com/stretchr/testify/pull/1772) #### New Contributors - [@&elastic#8203;harryzcy](https://redirect.github.com/harryzcy) made their first contribution in [#&elastic#8203;1935](https://redirect.github.com/stretchr/testify/pull/1935) - [@&elastic#8203;boekkooi-impossiblecloud](https://redirect.github.com/boekkooi-impossiblecloud) made their first contribution in [#&elastic#8203;1772](https://redirect.github.com/stretchr/testify/pull/1772) **Full Changelog**: <stretchr/testify@v1.12.0...v1.12.1> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…in) (elastic#8050) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [browser-actions/setup-chrome](https://redirect.github.com/browser-actions/setup-chrome) | action | minor | `v2.1.2` → `v2.2.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>browser-actions/setup-chrome (browser-actions/setup-chrome)</summary> ### [`v2.2.0`](https://redirect.github.com/browser-actions/setup-chrome/releases/tag/v2.2.0) [Compare Source](https://redirect.github.com/browser-actions/setup-chrome/compare/v2.1.2...v2.2.0) ##### Features - Linux arm64 support ([#&elastic#8203;655](https://redirect.github.com/browser-actions/setup-chrome/issues/655)) ([e85e55d](https://redirect.github.com/browser-actions/setup-chrome/commit/e85e55dd7e2227e0844c07c57f52720fb1266334)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

elastic#8053) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [updatecli/updatecli-action](https://redirect.github.com/updatecli/updatecli-action) | action | minor | `v3.5.0` → `v3.6.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>updatecli/updatecli-action (updatecli/updatecli-action)</summary> ### [`v3.6.0`](https://redirect.github.com/updatecli/updatecli-action/releases/tag/v3.6.0): 🌈 [Compare Source](https://redirect.github.com/updatecli/updatecli-action/compare/v3.5.0...v3.6.0) ##### Changes - deps(github/action): bump all dependencies @&elastic#8203;[updateclibot\[bot\]](https://redirect.github.com/apps/updateclibot) ([#&elastic#8203;1144](https://redirect.github.com/updatecli/updatecli-action/issues/1144)) - deps: update updatecli version to v0.120.1 @&elastic#8203;[updateclibot\[bot\]](https://redirect.github.com/apps/updateclibot) ([#&elastic#8203;1155](https://redirect.github.com/updatecli/updatecli-action/issues/1155)) ##### 🧰 Maintenance - deps: bump Updatecli GH action to v0.120.1 @&elastic#8203;[updateclibot\[bot\]](https://redirect.github.com/apps/updateclibot) ([#&elastic#8203;1156](https://redirect.github.com/updatecli/updatecli-action/issues/1156)) ##### Contributors [@&elastic#8203;updateclibot\[bot\]](https://redirect.github.com/apps/updateclibot) and updateclibot </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…elastic#8018) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mikefarah/yq/v4](https://redirect.github.com/mikefarah/yq) | `v4.53.3` → `v4.53.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmikefarah%2fyq%2fv4/v4.53.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmikefarah%2fyq%2fv4/v4.53.3/v4.53.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>mikefarah/yq (github.com/mikefarah/yq/v4)</summary> ### [`v4.53.4`](https://redirect.github.com/mikefarah/yq/releases/tag/v4.53.4) [Compare Source](https://redirect.github.com/mikefarah/yq/compare/v4.53.3...v4.53.4) - Close input files after processing each one ([#&elastic#8203;2796](https://redirect.github.com/mikefarah/yq/issues/2796)) ([#&elastic#8203;2808](https://redirect.github.com/mikefarah/yq/issues/2808)) Thanks [@&elastic#8203;MsfPablo](https://redirect.github.com/MsfPablo) - Fixed non string HCL string keys ([#&elastic#8203;2795](https://redirect.github.com/mikefarah/yq/issues/2795)) - Fixed heap allocation bug ([#&elastic#8203;2809](https://redirect.github.com/mikefarah/yq/issues/2809)) Thanks [@&elastic#8203;MsfPablo](https://redirect.github.com/MsfPablo) - Fix deleting commented empty list YAML output ([#&elastic#8203;2765](https://redirect.github.com/mikefarah/yq/issues/2765)) Thanks [@&elastic#8203;dpersek](https://redirect.github.com/dpersek) - Fix (has) return false for negative array indices ([#&elastic#8203;2769](https://redirect.github.com/mikefarah/yq/issues/2769)) Thanks [@&elastic#8203;maximilize](https://redirect.github.com/maximilize) - Fix (sort): avoid int64 overflow comparing large integers ([#&elastic#8203;2771](https://redirect.github.com/mikefarah/yq/issues/2771)) Thanks [@&elastic#8203;maximilize](https://redirect.github.com/maximilize) - Fix: preserve correct parent references in explode merge anchor reconstruction ([#&elastic#8203;2730](https://redirect.github.com/mikefarah/yq/issues/2730)) Thanks [@&elastic#8203;vomba](https://redirect.github.com/vomba) - Improve Guard ExpressionParser initialization with sync.Once ([#&elastic#8203;2789](https://redirect.github.com/mikefarah/yq/issues/2789)) Thanks [@&elastic#8203;arcaven](https://redirect.github.com/arcaven) - Fix: reject negative indent instead of panicking ([#&elastic#8203;2746](https://redirect.github.com/mikefarah/yq/issues/2746)) Thanks [@&elastic#8203;StressTestor](https://redirect.github.com/StressTestor) - Fix: parse signed hex and octal integers ([#&elastic#8203;2749](https://redirect.github.com/mikefarah/yq/issues/2749)) Thanks [@&elastic#8203;StressTestor](https://redirect.github.com/StressTestor) - Fix: skip UTF-8 BOM when processing front matter ([#&elastic#8203;2751](https://redirect.github.com/mikefarah/yq/issues/2751)) Thanks [@&elastic#8203;StressTestor](https://redirect.github.com/StressTestor) - Fix !!merge tag regression for yq ([#&elastic#8203;2705](https://redirect.github.com/mikefarah/yq/issues/2705)) Thanks [@&elastic#8203;W-Floyd](https://redirect.github.com/W-Floyd) - Default to yaml when a file's extension is not a recognised format ([#&elastic#8203;2785](https://redirect.github.com/mikefarah/yq/issues/2785)) Thanks [@&elastic#8203;devthedevil](https://redirect.github.com/devthedevil) - Bumped dependencies </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/sigstore/protobuf-specs](https://redirect.github.com/sigstore/protobuf-specs) | `v0.5.1` → `v0.5.2` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsigstore%2fprotobuf-specs/v0.5.2?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsigstore%2fprotobuf-specs/v0.5.1/v0.5.2?slim=true) | | [github.com/sigstore/rekor](https://redirect.github.com/sigstore/rekor) | `v1.5.3` → `v1.5.4` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fsigstore%2frekor/v1.5.4?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fsigstore%2frekor/v1.5.3/v1.5.4?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>sigstore/protobuf-specs (github.com/sigstore/protobuf-specs)</summary> ### [`v0.5.2`](https://redirect.github.com/sigstore/protobuf-specs/blob/HEAD/CHANGELOG.md#v052) [Compare Source](https://redirect.github.com/sigstore/protobuf-specs/compare/v0.5.1...v0.5.2) - Add monitor configuration protobuf definition ([#&elastic#8203;907](https://redirect.github.com/sigstore/protobuf-specs/pull/907)) - Add custom java\_package to envelope.proto ([#&elastic#8203;923](https://redirect.github.com/sigstore/protobuf-specs/pull/923)) </details> <details> <summary>sigstore/rekor (github.com/sigstore/rekor)</summary> ### [`v1.5.4`](https://redirect.github.com/sigstore/rekor/blob/HEAD/CHANGELOG.md#v154) [Compare Source](https://redirect.github.com/sigstore/rekor/compare/v1.5.3...v1.5.4) #### Features - search: add `subject` field for SAN-based lookup ([#&elastic#8203;2850](https://redirect.github.com/sigstore/rekor/issues/2850)) - Change default CLI upload type to hashedrekord ([#&elastic#8203;2885](https://redirect.github.com/sigstore/rekor/issues/2885)) - separate read/write sql traffic for indexservice into separate pools ([#&elastic#8203;2914](https://redirect.github.com/sigstore/rekor/issues/2914)) #### Bug Fixes - better handle connection issues ([#&elastic#8203;2931](https://redirect.github.com/sigstore/rekor/issues/2931)) - fix pprof arg ([#&elastic#8203;2932](https://redirect.github.com/sigstore/rekor/issues/2932)) - fix shadowed err, wrong err label ([#&elastic#8203;2907](https://redirect.github.com/sigstore/rekor/issues/2907)) - alpine: hash only the bytes read when computing the control.tar.gz digest ([#&elastic#8203;2908](https://redirect.github.com/sigstore/rekor/issues/2908)) - return a 400 error for invalid TreeID ([#&elastic#8203;2895](https://redirect.github.com/sigstore/rekor/issues/2895)) - Return the file error instead of the URL error for a missing artifact path ([#&elastic#8203;2872](https://redirect.github.com/sigstore/rekor/issues/2872)) - Apply proactive hardening against malformed requests ([#&elastic#8203;2945](https://redirect.github.com/sigstore/rekor/issues/2945)) #### Improvements - remove repetitive viper lookups from api endpoints ([#&elastic#8203;2922](https://redirect.github.com/sigstore/rekor/issues/2922)) - move CI containers to GHCR ([#&elastic#8203;2943](https://redirect.github.com/sigstore/rekor/issues/2943)) - remove unused semver type version map ([#&elastic#8203;2918](https://redirect.github.com/sigstore/rekor/issues/2918)) - test against valkey ([#&elastic#8203;2916](https://redirect.github.com/sigstore/rekor/issues/2916)) - Remove unmaintained scripts/createdb.sh dev helper ([#&elastic#8203;2905](https://redirect.github.com/sigstore/rekor/issues/2905)) - test mysql with production dsn strings ([#&elastic#8203;2906](https://redirect.github.com/sigstore/rekor/issues/2906)) - create interface for TrillianClient ([#&elastic#8203;2896](https://redirect.github.com/sigstore/rekor/issues/2896)) - use more efficient table schema for indexes ([#&elastic#8203;2903](https://redirect.github.com/sigstore/rekor/issues/2903)) - Migrate off deprecated golang.org/x/crypto/openpgp ([#&elastic#8203;2883](https://redirect.github.com/sigstore/rekor/issues/2883)) - minimize duplicative JSON parsing while handling entries ([#&elastic#8203;2880](https://redirect.github.com/sigstore/rekor/issues/2880)) - remove duplicative log entry ([#&elastic#8203;2881](https://redirect.github.com/sigstore/rekor/issues/2881)) - optimize DSSE memory and cpu while parsing and verifying envs ([#&elastic#8203;2879](https://redirect.github.com/sigstore/rekor/issues/2879)) - update builder to use go1.26.4 ([#&elastic#8203;2873](https://redirect.github.com/sigstore/rekor/issues/2873)) - upgrade grpc-ecosystem/go-grpc-middleware to v2 ([#&elastic#8203;2921](https://redirect.github.com/sigstore/rekor/issues/2921)) - Migrate gopkg.in/yaml.v2 to sigs.k8s.io/yaml ([#&elastic#8203;2919](https://redirect.github.com/sigstore/rekor/issues/2919)) - numerous upgraded dependencies #### Documentation - docs(cli): add usage examples to rekor-cli commands ([#&elastic#8203;2851](https://redirect.github.com/sigstore/rekor/issues/2851)) #### Contributors - ahmagdyfb - Bob Callaway - Carlos Tadeu Panato Junior - Chiman Jain - Hayden - Jason Hall - Nikhil J - Ogulcan Aydogan - Pujitha Paladugu - Sueun Cho </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://redirect.github.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…elastic#8078) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/mikefarah/yq/v4](https://redirect.github.com/mikefarah/yq) | `v4.53.4` → `v4.53.6` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmikefarah%2fyq%2fv4/v4.53.6?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmikefarah%2fyq%2fv4/v4.53.4/v4.53.6?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>mikefarah/yq (github.com/mikefarah/yq/v4)</summary> ### [`v4.53.6`](https://redirect.github.com/mikefarah/yq/releases/tag/v4.53.6) [Compare Source](https://redirect.github.com/mikefarah/yq/compare/v4.53.5...v4.53.6) - Fixing release build issue - Fixed line wrapping bug ([#&elastic#8203;2824](https://redirect.github.com/mikefarah/yq/issues/2824), [#&elastic#8203;2823](https://redirect.github.com/mikefarah/yq/issues/2823)) Thanks [@&elastic#8203;mxey](https://redirect.github.com/mxey) - Bumped dependencies ### [`v4.53.5`](https://redirect.github.com/mikefarah/yq/compare/v4.53.4...v4.53.5) [Compare Source](https://redirect.github.com/mikefarah/yq/compare/v4.53.4...v4.53.5) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…ry-operations-go/internal/resourcemapping to v0.60.0 (main) (elastic#8082) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `v0.59.0` → `v0.60.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fGoogleCloudPlatform%2fopentelemetry-operations-go%2finternal%2fresourcemapping/v0.60.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fGoogleCloudPlatform%2fopentelemetry-operations-go%2finternal%2fresourcemapping/v0.59.0/v0.60.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping)</summary> ### [`v0.60.0`](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases/tag/v0.60.0): v1.36.0/v0.60.0 [Compare Source](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/v0.59.0...v0.60.0) #### What's Changed - Add GKEHostType by [@&elastic#8203;iblancasa](https://redirect.github.com/iblancasa) in [#&elastic#8203;1177](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1177) - Update OpenTelemetry dependencies to fix govulncheck GO-2026-5158 by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1185](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1185) - exporter/trace: update span attribute and event limits to match backend by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1186](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1186) - Add support for go 1.27 and fix zizimor by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1188](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1188) - Prepare release v1.36.0/v0.60.0 by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1189](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1189) #### New Contributors - [@&elastic#8203;iblancasa](https://redirect.github.com/iblancasa) made their first contribution in [#&elastic#8203;1177](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1177) **Full Changelog**: <GoogleCloudPlatform/opentelemetry-operations-go@v0.59.0...v0.60.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

… (main) (elastic#8083) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/huandu/go-sqlbuilder](https://redirect.github.com/huandu/go-sqlbuilder) | `v1.42.1` → `v1.43.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fhuandu%2fgo-sqlbuilder/v1.43.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fhuandu%2fgo-sqlbuilder/v1.42.1/v1.43.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>huandu/go-sqlbuilder (github.com/huandu/go-sqlbuilder)</summary> ### [`v1.43.0`](https://redirect.github.com/huandu/go-sqlbuilder/releases/tag/v1.43.0) [Compare Source](https://redirect.github.com/huandu/go-sqlbuilder/compare/v1.42.1...v1.43.0) #### What's Changed - `[FIX]` Interpolate: keep ClickHouse whole-number floats and non-finite values typed correctly by [@&elastic#8203;youdie006](https://redirect.github.com/youdie006) in [#&elastic#8203;244](https://redirect.github.com/huandu/go-sqlbuilder/issues/244) - `[FIX]` Escape ANSI interpolation string literals in [#&elastic#8203;246](https://redirect.github.com/huandu/go-sqlbuilder/issues/246) - `[FIX]` Escape identifier delimiters in Flavor.Quote in [#&elastic#8203;245](https://redirect.github.com/huandu/go-sqlbuilder/issues/245) #### New Contributors - [@&elastic#8203;youdie006](https://redirect.github.com/youdie006) made their first contribution in [#&elastic#8203;244](https://redirect.github.com/huandu/go-sqlbuilder/issues/244) - [@&elastic#8203;KrisKennawayDD](https://redirect.github.com/KrisKennawayDD) addressed two CVE issues **Full Changelog**: <huandu/go-sqlbuilder@v1.42.0...v1.43.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…n) (elastic#8084) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/lestrrat-go/dsig](https://redirect.github.com/lestrrat-go/dsig) | `v1.3.0` → `v1.4.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2flestrrat-go%2fdsig/v1.4.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2flestrrat-go%2fdsig/v1.3.0/v1.4.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>lestrrat-go/dsig (github.com/lestrrat-go/dsig)</summary> ### [`v1.4.0`](https://redirect.github.com/lestrrat-go/dsig/releases/tag/v1.4.0) [Compare Source](https://redirect.github.com/lestrrat-go/dsig/compare/v1.3.0...v1.4.0) #### What's Changed - Bump actions/cache from 5.0.4 to 5.0.5 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;15](https://redirect.github.com/lestrrat-go/dsig/pull/15) - Bump goreleaser/goreleaser-action from 7.0.0 to 7.2.2 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;18](https://redirect.github.com/lestrrat-go/dsig/pull/18) - Bump actions/stale from 10.2.0 to 10.3.0 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;19](https://redirect.github.com/lestrrat-go/dsig/pull/19) - Bump actions/stale from 10.3.0 to 11.0.0 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;32](https://redirect.github.com/lestrrat-go/dsig/pull/32) - Bump github/codeql-action from 4 to 4.37.4 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;34](https://redirect.github.com/lestrrat-go/dsig/pull/34) - point workflows at v1 instead of main by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;38](https://redirect.github.com/lestrrat-go/dsig/pull/38) - fix autodoc closing fence and ref in links by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;40](https://redirect.github.com/lestrrat-go/dsig/pull/40) - Bump github/codeql-action from 4.37.4 to 4.37.7 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;35](https://redirect.github.com/lestrrat-go/dsig/pull/35) - Bump github.com/stretchr/testify from 1.11.1 to 1.12.0 by [@&elastic#8203;dependabot](https://redirect.github.com/dependabot)\[bot] in [#&elastic#8203;36](https://redirect.github.com/lestrrat-go/dsig/pull/36) - retire codecov by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;41](https://redirect.github.com/lestrrat-go/dsig/pull/41) - run lint on pull requests by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;42](https://redirect.github.com/lestrrat-go/dsig/pull/42) - add gofmt to lint and format the tree by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;43](https://redirect.github.com/lestrrat-go/dsig/pull/43) - collapse smoke tests into CI by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;44](https://redirect.github.com/lestrrat-go/dsig/pull/44) - add ML-DSA signatures for Go 1.27 by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;37](https://redirect.github.com/lestrrat-go/dsig/pull/37) - prepare v1.4.0 by [@&elastic#8203;lestrrat](https://redirect.github.com/lestrrat) in [#&elastic#8203;45](https://redirect.github.com/lestrrat-go/dsig/pull/45) **Full Changelog**: <lestrrat-go/dsig@v1.3.0...v1.4.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…main) (elastic#8086) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/googleapis/gax-go/v2](https://redirect.github.com/googleapis/gax-go) | `v2.23.0` → `v2.24.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.24.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fgoogleapis%2fgax-go%2fv2/v2.23.0/v2.24.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>googleapis/gax-go (github.com/googleapis/gax-go/v2)</summary> ### [`v2.24.0`](https://redirect.github.com/googleapis/gax-go/releases/tag/v2.24.0) [Compare Source](https://redirect.github.com/googleapis/gax-go/compare/v2.23.0...v2.24.0) ##### Features - **iterator:** remove build constraint ([#&elastic#8203;525](https://redirect.github.com/googleapis/gax-go/issues/525)) ([b3f4053](https://redirect.github.com/googleapis/gax-go/commit/b3f40539135c909c38030fda9b1a25503d576051)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

….1.7 (main) (elastic#8068) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/package-url/packageurl-go](https://redirect.github.com/package-url/packageurl-go) | `v0.1.6` → `v0.1.7` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.7?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fpackage-url%2fpackageurl-go/v0.1.6/v0.1.7?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>package-url/packageurl-go (github.com/package-url/packageurl-go)</summary> ### [`v0.1.7`](https://redirect.github.com/package-url/packageurl-go/releases/tag/v0.1.7) [Compare Source](https://redirect.github.com/package-url/packageurl-go/compare/v0.1.6...v0.1.7) #### What's Changed - Merge identical return branches in adjustMlflowName by [@&elastic#8203;gshk99](https://redirect.github.com/gshk99) in [#&elastic#8203;92](https://redirect.github.com/package-url/packageurl-go/pull/92) - Percent-decode subpath when parsing by [@&elastic#8203;sueun-dev](https://redirect.github.com/sueun-dev) in [#&elastic#8203;96](https://redirect.github.com/package-url/packageurl-go/pull/96) - make brew name and namespace lower-case by [@&elastic#8203;william-elastisys](https://redirect.github.com/william-elastisys) in [#&elastic#8203;102](https://redirect.github.com/package-url/packageurl-go/pull/102) - Reject npm purl with bare scope and no name by [@&elastic#8203;arpitjain099](https://redirect.github.com/arpitjain099) in [#&elastic#8203;95](https://redirect.github.com/package-url/packageurl-go/pull/95) - Percent-encode sub-delimiters in name/version path segments by [@&elastic#8203;czunker](https://redirect.github.com/czunker) in [#&elastic#8203;93](https://redirect.github.com/package-url/packageurl-go/pull/93) - add support for vcpkg purl-type by [@&elastic#8203;william-elastisys](https://redirect.github.com/william-elastisys) in [#&elastic#8203;105](https://redirect.github.com/package-url/packageurl-go/pull/105) - make cpan namespace optional by [@&elastic#8203;william-elastisys](https://redirect.github.com/william-elastisys) in [#&elastic#8203;103](https://redirect.github.com/package-url/packageurl-go/pull/103) #### New Contributors - [@&elastic#8203;gshk99](https://redirect.github.com/gshk99) made their first contribution in [#&elastic#8203;92](https://redirect.github.com/package-url/packageurl-go/pull/92) - [@&elastic#8203;sueun-dev](https://redirect.github.com/sueun-dev) made their first contribution in [#&elastic#8203;96](https://redirect.github.com/package-url/packageurl-go/pull/96) - [@&elastic#8203;william-elastisys](https://redirect.github.com/william-elastisys) made their first contribution in [#&elastic#8203;102](https://redirect.github.com/package-url/packageurl-go/pull/102) - [@&elastic#8203;arpitjain099](https://redirect.github.com/arpitjain099) made their first contribution in [#&elastic#8203;95](https://redirect.github.com/package-url/packageurl-go/pull/95) - [@&elastic#8203;czunker](https://redirect.github.com/czunker) made their first contribution in [#&elastic#8203;93](https://redirect.github.com/package-url/packageurl-go/pull/93) **Full Changelog**: <package-url/packageurl-go@v0.1.6...v0.1.7> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…n-library-for-go to v1.9.0 (main) (elastic#8079) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/AzureAD/microsoft-authentication-library-for-go](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go) | `v1.8.0` → `v1.9.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fAzureAD%2fmicrosoft-authentication-library-for-go/v1.9.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fAzureAD%2fmicrosoft-authentication-library-for-go/v1.8.0/v1.9.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)</summary> ### [`v1.9.0`](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/releases/tag/v1.9.0) [Compare Source](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/compare/v1.8.0...v1.9.0) #### What's Changed - ci: stage MSAL Go pipeline + add Managed Identity IMDS & Azure Arc E2E tests by [@&elastic#8203;gladjohn](https://redirect.github.com/gladjohn) in [#&elastic#8203;641](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/641) - Fix intermittent "context canceled" token failures in managed identity retry() by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;642](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/642) - Add user-assigned managed identity (UAMI) support for Azure Arc (MSAL.NET [#&elastic#8203;6128](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/issues/6128) parity) by [@&elastic#8203;gladjohn](https://redirect.github.com/gladjohn) in [#&elastic#8203;644](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/644) - Reject legacy RFC 1423 encrypted PEM in CertFromPEM by [@&elastic#8203;Robbie-Microsoft](https://redirect.github.com/Robbie-Microsoft) in [#&elastic#8203;645](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/645) - Harden regional authority validation by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;650](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/650) - fix(managedidentity): pin Service Fabric TLS certificate by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;656](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/656) - Fix ID token credential type casing by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;657](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/657) - Fix WS-Trust endpoint selection helper by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;655](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/655) - Prepare MSAL Go 1.9.0 release by [@&elastic#8203;4gust](https://redirect.github.com/4gust) in [#&elastic#8203;658](https://redirect.github.com/AzureAD/microsoft-authentication-library-for-go/pull/658) **Full Changelog**: <AzureAD/microsoft-authentication-library-for-go@v1.8.0...v1.9.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…astic#7603) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [google.golang.org/grpc](https://redirect.github.com/grpc/grpc-go) | `v1.83.0` → `v1.83.1` | ![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.83.1?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.83.0/v1.83.1?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.83.1`](https://redirect.github.com/grpc/grpc-go/releases/tag/v1.83.1): Release 1.83.1 [Compare Source](https://redirect.github.com/grpc/grpc-go/compare/v1.83.0...v1.83.1) ### Security - xds/rbac: Fix a bug where nested `Principal` or `Permission` rules with `:scheme` or `grpc-` prefixed header matchers were not rejected, which could cause DENY rules to fail open. ([#&elastic#8203;9258](https://redirect.github.com/grpc/grpc-go/issues/9258)) - Special Thanks: [@&elastic#8203;nvxbug](https://redirect.github.com/nvxbug) - xds/rbac: Fix a bug where the `host` header matcher was not being replaced with `:authority` in nested `Principal` or `Permission` rules. ([#&elastic#8203;9258](https://redirect.github.com/grpc/grpc-go/issues/9258)) - Special Thanks: [@&elastic#8203;nvxbug](https://redirect.github.com/nvxbug) - xds/rbac: Fix a bug where a header matcher whose name was not lowercase, such as `X-Role`, matched no header, which could cause DENY rules to fail open. ([#&elastic#8203;9332](https://redirect.github.com/grpc/grpc-go/issues/9332)) - Special Thanks: [@&elastic#8203;alimony](https://redirect.github.com/alimony) - xds/rbac: Fix a bug where a `:scheme` or `grpc-` prefixed header matcher was accepted when its name was not lowercase. ([#&elastic#8203;9332](https://redirect.github.com/grpc/grpc-go/issues/9332)) - Special Thanks: [@&elastic#8203;alimony](https://redirect.github.com/alimony) - xds/rbac: Fix a bug where a `Host` header matcher was not replaced with `:authority`. ([#&elastic#8203;9332](https://redirect.github.com/grpc/grpc-go/issues/9332)) - Special Thanks: [@&elastic#8203;alimony](https://redirect.github.com/alimony) ### Performance - transport: Restrict memory overhead of buffering small data frames. ([#&elastic#8203;9331](https://redirect.github.com/grpc/grpc-go/issues/9331)) </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

…ry-operations-go/exporter/metric to v0.60.0 (main) (elastic#8081) This PR contains the following updates: | Package | Change | [Age](https://docs.renovatebot.com/merge-confidence/) | [Confidence](https://docs.renovatebot.com/merge-confidence/) | |---|---|---|---| | [github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go) | `v0.59.0` → `v0.60.0` | ![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fGoogleCloudPlatform%2fopentelemetry-operations-go%2fexporter%2fmetric/v0.60.0?slim=true) | ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fGoogleCloudPlatform%2fopentelemetry-operations-go%2fexporter%2fmetric/v0.59.0/v0.60.0?slim=true) | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes <details> <summary>GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)</summary> ### [`v0.60.0`](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/releases/tag/v0.60.0): v1.36.0/v0.60.0 [Compare Source](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/compare/v0.59.0...v0.60.0) #### What's Changed - Add GKEHostType by [@&elastic#8203;iblancasa](https://redirect.github.com/iblancasa) in [#&elastic#8203;1177](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1177) - Update OpenTelemetry dependencies to fix govulncheck GO-2026-5158 by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1185](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1185) - exporter/trace: update span attribute and event limits to match backend by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1186](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1186) - Add support for go 1.27 and fix zizimor by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1188](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1188) - Prepare release v1.36.0/v0.60.0 by [@&elastic#8203;dashpole](https://redirect.github.com/dashpole) in [#&elastic#8203;1189](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1189) #### New Contributors - [@&elastic#8203;iblancasa](https://redirect.github.com/iblancasa) made their first contribution in [#&elastic#8203;1177](https://redirect.github.com/GoogleCloudPlatform/opentelemetry-operations-go/pull/1177) **Full Changelog**: <GoogleCloudPlatform/opentelemetry-operations-go@v0.59.0...v0.60.0> </details> --- ### Configuration 📅 **Schedule**: Branch creation - Between 01:00 AM and 01:59 AM, Monday through Friday ( * 1 * * 1-5 ) (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate).  Co-authored-by: elastic-renovate-prod[bot] <174716857+elastic-renovate-prod[bot]@users.noreply.github.com>

chore(deps): update module github.com/docker/docker-credential-helper…

f43fd29

…s to v0.9.9

elastic-renovate-prod Bot requested a review from a team as a code owner August 27, 2026 19:20

elastic-renovate-prod Bot added backport-skip dependencies Pull requests that update a dependency file renovate renovate-auto-approve Team:Security-Cloud Services labels Aug 27, 2026

elastic-renovate-prod Bot enabled auto-merge August 27, 2026 19:20

github-actions Bot approved these changes Aug 27, 2026

View reviewed changes

elastic-renovate-prod Bot added this pull request to the merge queue Aug 27, 2026

Merged via the queue into 8.19 with commit e5abe6d Aug 27, 2026
15 of 17 checks passed

elastic-renovate-prod Bot deleted the renovate/8.19-docker branch August 27, 2026 19:58

Navigation Menu

Repository navigation

chore(deps): update module github.com/docker/docker-credential-helpers to v0.9.9 (8.19) - #8203

chore(deps): update module github.com/docker/docker-credential-helpers to v0.9.9 (8.19)#8203
elastic-renovate-prod[bot] merged 1 commit into
8.19from
renovate/8.19-docker

elastic-renovate-prod Bot commented Aug 27, 2026

Uh oh!

mergify Bot commented Aug 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

elastic-renovate-prod Bot commented Aug 27, 2026

Release Notes

v0.9.9

What's Changed

Configuration

Uh oh!

mergify Bot commented Aug 27, 2026

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v0.9.9`