Skip to content

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Nov 25, 2025

This PR contains the following updates:

Package Type Update Change Age Confidence
cert-manager/cert-manager patch 1.19.1 -> 1.19.2 age confidence
docker/metadata-action action minor v5.9.0 -> v5.10.0 age confidence
gcr.io/distroless/static final digest e8a4044 -> 2b7c93f
github.com/onsi/ginkgo/v2 require patch v2.27.2 -> v2.27.3 age confidence
github.com/onsi/gomega require patch v1.38.2 -> v1.38.3 age confidence
github.com/open-telemetry/opentelemetry-operator require minor v0.140.0 -> v0.141.0 age confidence
go.opentelemetry.io/collector/component require minor v1.46.0 -> v1.47.0 age confidence
go.opentelemetry.io/collector/config/configauth require minor v1.46.0 -> v1.47.0 age confidence
go.opentelemetry.io/collector/config/configcompression require minor v1.46.0 -> v1.47.0 age confidence
go.opentelemetry.io/collector/config/configopaque require minor v1.46.0 -> v1.47.0 age confidence
go.opentelemetry.io/collector/config/configtelemetry require minor v0.140.0 -> v0.141.0 age confidence
go.opentelemetry.io/collector/otelcol require minor v0.140.0 -> v0.141.0 age confidence
go.opentelemetry.io/collector/pipeline require minor v1.46.0 -> v1.47.0 age confidence
go.opentelemetry.io/collector/service require minor v0.140.0 -> v0.141.0 age confidence
golang stage patch 1.25.2-alpine3.22 -> 1.25.5-alpine3.22 age confidence
golangci/golangci-lint minor 2.6.2 -> 2.7.2 age confidence
k8s.io/api require patch v0.34.2 -> v0.34.3 age confidence
k8s.io/apimachinery require patch v0.34.2 -> v0.34.3 age confidence
k8s.io/client-go require patch v0.34.2 -> v0.34.3 age confidence

Release Notes

cert-manager/cert-manager (cert-manager/cert-manager)

v1.19.2

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

We updated Go to fix some vulnerabilities in the standard library.

📖 Read the full 1.19 release notes on the cert-manager.io website before upgrading.

Changes since v1.19.1

Bug or Regression
  • Address false positive vulnerabilities CVE-2025-47914 and CVE-2025-58181 which were reported by Trivy. (#​8283, @​SgtCoDFish)
  • Update Go to v1.25.5 to fix CVE-2025-61727 and CVE-2025-61729 (#​8294, @​wallrj-cyberark)
  • Update global.nodeSelector to helm chart to perform a merge and allow for a single nodeSelector to be set across all services. (#​8233, @​cert-manager-bot)
Other (Cleanup or Flake)
docker/metadata-action (docker/metadata-action)

v5.10.0

Compare Source

Full Changelog: docker/metadata-action@v5.9.0...v5.10.0

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.27.3

Compare Source

2.27.3

Fixes

report exit result in case of failure [1c9f356]
fix data race [ece19c8]

onsi/gomega (github.com/onsi/gomega)

v1.38.3

Compare Source

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

open-telemetry/opentelemetry-operator (github.com/open-telemetry/opentelemetry-operator)

v0.141.0

Compare Source

0.141.0
💡 Enhancements 💡
  • collector: Ensure the collector container is always listed first in the podspec (#​4548)
    This is so tools like kubectx logs will always default to the collector container instead of any additional containers that are configured.
  • target allocator: make evaluation_interval configurable for Prometheus CR watcher (#​4520)
  • operator: Support for Kubernetes 1.34 version. (#​4415)
Components
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/component)

v1.47.0

🛑 Breaking changes 🛑
  • pkg/config/confighttp: Use configoptional.Optional for confighttp.ClientConfig.Cookies field (#​14021)
💡 Enhancements 💡
  • pkg/config/confighttp: Setting compression_algorithms to an empty list now disables automatic decompression, ignoring Content-Encoding (#​14131)
  • pkg/service: Update semantic conventions from internal telemetry to v1.37.0 (#​14232)
  • pkg/xscraper: Implement xscraper for Profiles. (#​13915)
🧰 Bug fixes 🧰
  • pkg/config/configoptional: Ensure that configoptional.None values resulting from unmarshaling are equivalent to configoptional.Optional zero value. (#​14218)
golangci/golangci-lint (golangci/golangci-lint)

v2.7.2

Compare Source

Released on 2025-12-07

  1. Linter bug fixes

v2.7.1

Compare Source

Released on 2025-12-04

  1. Linter bug fixes
    • modernize: disable stringscut analyzer

v2.7.0

Compare Source

Released on 2025-12-03

  1. Bug fixes
    • fix: clone args used by custom command
  2. Linters new features or changes
    • no-sprintf-host-port: from 0.2.0 to 0.3.1 (ignore string literals without a colon)
    • unqueryvet: from 1.2.1 to 1.3.0 (handles const and var declarations)
    • revive: from 1.12.0 to 1.13.0 (new option: enable-default-rules, new rules: forbidden-call-in-wg-go, unnecessary-if, inefficient-map-lookup)
    • modernize: from 0.38.0 to 0.39.0 (new analyzers: plusbuild, stringscut)
  3. Linters bug fixes
    • perfsprint: from 0.10.0 to 0.10.1
    • wrapcheck: from 2.11.0 to 2.12.0
    • godoc-lint: from 0.10.1 to 0.10.2
  4. Misc.
    • Add some flags to the custom command
  5. Documentation
    • docs: split changelog v1 and v2
kubernetes/api (k8s.io/api)

v0.34.3

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.34.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.34.3

Compare Source


Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Nov 25, 2025
@renovate renovate bot changed the title chore(deps): update golang docker tag to v1.25.4 chore(deps): update all dependencies Nov 27, 2025
@renovate renovate bot force-pushed the renovate/all branch 2 times, most recently from a8c5b53 to c91f5a0 Compare December 1, 2025 16:02
@renovate
Copy link
Contributor Author

renovate bot commented Dec 1, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 38 additional dependencies were updated

Details:

Package Change
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/collector/component/componentstatus v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/component/componenttest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/confmap v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/confmap/xconfmap v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/connector v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/connector/connectortest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/connector/xconnector v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/consumer v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/consumer/consumererror v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/consumer/consumertest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/consumer/xconsumer v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/exporter v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/exporter/exportertest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/exporter/xexporter v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/extension v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/extension/extensionauth v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/extension/extensioncapabilities v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/extension/extensiontest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/featuregate v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/internal/fanoutconsumer v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/internal/telemetry v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/pdata v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/pdata/pprofile v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/pdata/testdata v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/pdata/xpdata v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/pipeline/xpipeline v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/processor v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/processor/processortest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/processor/xprocessor v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/receiver v1.46.0 -> v1.47.0
go.opentelemetry.io/collector/receiver/receivertest v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/receiver/xreceiver v0.140.0 -> v0.141.0
go.opentelemetry.io/collector/service/hostcapabilities v0.140.0 -> v0.141.0
golang.org/x/oauth2 v0.31.0 -> v0.32.0
google.golang.org/genproto/googleapis/api v0.0.0-20250825161204-c5933d9347a5 -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/genproto/googleapis/rpc v0.0.0-20250825161204-c5933d9347a5 -> v0.0.0-20251022142026-3a174f9686a8
google.golang.org/grpc v1.76.0 -> v1.77.0

@renovate renovate bot force-pushed the renovate/all branch 6 times, most recently from 416afb4 to a7cbcf2 Compare December 9, 2025 18:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant