chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] #530
There are no files selected for viewing
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -1,8 +1,6 @@ | ||
| module github.com/grafana/alerting | ||
|
|
||
| go 1.25.0 | ||
|
|
||
| require ( | ||
| github.com/Masterminds/sprig/v3 v3.2.1 | ||
|
|
@@ -27,12 +25,12 @@ require ( | |
| github.com/prometheus/client_golang v1.22.0 | ||
| github.com/prometheus/common v0.64.0 | ||
| github.com/prometheus/common/sigv4 v0.1.0 | ||
| github.com/stretchr/testify v1.11.1 | ||
| go.opentelemetry.io/otel v1.43.0 | ||
| go.opentelemetry.io/otel/trace v1.43.0 | ||
| golang.org/x/net v0.52.0 | ||
| golang.org/x/oauth2 v0.35.0 | ||
| golang.org/x/sync v0.20.0 | ||
| gopkg.in/mail.v2 v2.3.1 | ||
| gopkg.in/telebot.v3 v3.2.1 | ||
| gopkg.in/yaml.v2 v2.4.0 | ||
|
|
@@ -46,7 +44,7 @@ require ( | |
| github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect | ||
| github.com/beorn7/perks v1.0.1 // indirect | ||
| github.com/cenkalti/backoff/v4 v4.2.1 // indirect | ||
| github.com/cenkalti/backoff/v5 v5.0.3 // indirect | ||
| github.com/cespare/xxhash/v2 v2.3.0 // indirect | ||
| github.com/coreos/go-systemd/v22 v22.5.0 // indirect | ||
| github.com/docker/go-units v0.5.0 // indirect | ||
|
|
@@ -69,7 +67,7 @@ require ( | |
| github.com/golang/protobuf v1.5.4 // indirect | ||
| github.com/google/btree v1.1.3 // indirect | ||
| github.com/grafana/otel-profiling-go v0.5.1 // indirect | ||
| github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0 // indirect | ||
| github.com/hashicorp/errwrap v1.1.0 // indirect | ||
| github.com/hashicorp/go-immutable-radix v1.3.1 // indirect | ||
| github.com/hashicorp/go-metrics v0.5.4 // indirect | ||
|
|
@@ -112,7 +110,7 @@ require ( | |
| github.com/uber/jaeger-client-go v2.28.0+incompatible // indirect | ||
| github.com/uber/jaeger-lib v2.2.0+incompatible // indirect | ||
| go.mongodb.org/mongo-driver v1.14.0 // indirect | ||
| go.opentelemetry.io/auto/sdk v1.2.1 // indirect | ||
| go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 // indirect | ||
| go.opentelemetry.io/contrib/exporters/autoexport v0.61.0 // indirect | ||
| go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 // indirect | ||
|
|
@@ -121,7 +119,7 @@ require ( | |
| go.opentelemetry.io/contrib/samplers/jaegerremote v0.30.0 // indirect | ||
| go.opentelemetry.io/otel/exporters/jaeger v1.17.0 // indirect | ||
| go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.12.2 // indirect | ||
| go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0 // indirect | ||
|
There was a problem hiding this comment. OTel exporter version skew with shared log dependenciesHigh Severity The   Reviewed by Cursor Bugbot for commit 13ec50e. Configure here. |
||
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.36.0 // indirect | ||
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0 // indirect | ||
| go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 // indirect | ||
|
|
@@ -131,22 +129,23 @@ require ( | |
| go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.12.2 // indirect | ||
| go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 // indirect | ||
| go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.36.0 // indirect | ||
| go.opentelemetry.io/otel/log v0.19.0 // indirect | ||
| go.opentelemetry.io/otel/metric v1.43.0 // indirect | ||
| go.opentelemetry.io/otel/sdk v1.43.0 // indirect | ||
| go.opentelemetry.io/otel/sdk/log v0.19.0 // indirect | ||
| go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect | ||
| go.opentelemetry.io/proto/otlp v1.10.0 // indirect | ||
| go.uber.org/atomic v1.11.0 // indirect | ||
| golang.org/x/crypto v0.49.0 // indirect | ||
| golang.org/x/mod v0.33.0 // indirect | ||
| golang.org/x/sys v0.42.0 // indirect | ||
| golang.org/x/text v0.35.0 // indirect | ||
| golang.org/x/tools v0.42.0 // indirect | ||
| golang.org/x/tools/godoc v0.1.0-deprecated // indirect | ||
| google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 // indirect | ||
| google.golang.org/grpc v1.80.0 // indirect | ||
| google.golang.org/protobuf v1.36.11 // indirect | ||
| gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect | ||
| ) | ||
|
|
||
|
|
||
Oops, something went wrong.
Oops, something went wrong.
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Workspace go version lower than module requirement
Medium Severity
The
go.modfile now requires Go 1.25.0, butgo.workstill specifies Go 1.24.4. This mismatch violates Go workspace rules, leading to confusing toolchain behavior, workspace operation failures, and errors during local development. Additionally, removing thetoolchaindirective reduces build reproducibility.Reviewed by Cursor Bugbot for commit 13ec50e. Configure here.