chore(deps): Bump the go-dependencies group across 1 directory with 9 updates by dependabot[bot] · Pull Request #7679 · cortexproject/cortex

dependabot · 2026-07-08T13:29:00Z

Bumps the go-dependencies group with 9 updates in the / directory:

Package	From	To
github.com/hashicorp/consul/api	`1.34.3`	`1.34.4`
github.com/klauspost/compress	`1.18.7`	`1.19.0`
golang.org/x/sync	`0.21.0`	`0.22.0`
google.golang.org/grpc	`1.81.1`	`1.82.0`
github.com/aws/aws-sdk-go-v2	`1.42.0`	`1.42.1`
github.com/aws/aws-sdk-go-v2/config	`1.32.26`	`1.32.28`
github.com/aws/aws-sdk-go-v2/service/dynamodb	`1.59.1`	`1.60.0`
github.com/prometheus/procfs	`0.21.0`	`0.21.1`
go.opentelemetry.io/collector/pdata	`1.61.0`	`1.62.0`

Updates github.com/hashicorp/consul/api from 1.34.3 to 1.34.4

Commits

50d22e5 sub module release go mod update
5efece6 Backport of chore: update memberlist dependency from v0.5.4 to v0.6.0 across ...
c171789 Backport of update all actions which were using deprecated node20 to node24 i...
8aef944 Backport of upgrade alpine base image to 3.24 into release/2.0.x (#23715)
1f5b203 post release 2.0.1 changelog and version upgrade 2.0.2-dev (#23714)
695e7a8 Backport of Consul ENT: Addition of ext-proc changes to consul into release/2...
5c48b0b Backport of config-entry(api-gateway): add ext_authz filter surface (Enterpri...
451537c Backport: Compatibility testing for nomad and vault versions with latest vers...
c9606f6 Backport of fix: don't request client cert SDS when only CAFile is set into r...
b80641a Backport of xds: return errors from public listener finalization into release...
Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.18.7 to 1.19.0

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.19.0

What's Changed

zstd: Add true concurrent stream encoding by @klauspost in klauspost/compress#1136

zstd: arm64 decoder asm by @lizthegrey in klauspost/compress#1160

zstd: avoid unused BuildDict encoder allocation by @snissn in klauspost/compress#1147

flate: Add inflate checkpoints by @klauspost in klauspost/compress#1154

snappy/s2: Limit length of varint in decodedLen by @eustas in klauspost/compress#1148

gzhttp: match qvalue parameter case-insensitively (RFC 7231) by @z9z in klauspost/compress#1149

zip: add NameDecoder callback for legacy encoding rewrite by @SAY-5 in klauspost/compress#1150

huff0: Allow building tables from histogram. by @klauspost in klauspost/compress#1155

huff0: Allow building table from oversized histogram. by @klauspost in klauspost/compress#1156

s2sx: Clean symlink targets by @klauspost in klauspost/compress#1163

New Contributors

@snissn made their first contribution in klauspost/compress#1147

@eustas made their first contribution in klauspost/compress#1148

@z9z made their first contribution in klauspost/compress#1149

@SAY-5 made their first contribution in klauspost/compress#1150

@HNO3Miracle made their first contribution in klauspost/compress#1165

Full Changelog: klauspost/compress@v1.18.6...v1.19.0

Commits

f0953f9 flate: fix buffer formatting in tests (#1165)
ab2e3cc zstd: Add arm64 decoder asm (#1160)
bb2723d Merge commit from fork
539243b s2sx: Clean symlink targets (#1163)
bd9228c Apply go fix and check in CI (#1158)
4cc176c zstd: Add true concurrent stream encoding (#1136)
4705fcb build(deps): bump the github-actions group with 3 updates (#1157)
e9c2e56 huff0: Allow building table from oversized histogram. (#1156)
ecdb779 huff0: Allow building tables from histogram. (#1155)
38efa45 zip: add NameDecoder callback for legacy encoding rewrite (#1150)
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.21.0 to 0.22.0

Commits

1eb64d4 semaphore: panic on negative weights
See full diff in compare view

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)

transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)

balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)

Special Thanks: @seth-epps

client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)

Special Thanks: @chengxilo

server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)

Special Thanks: @dfinkel

Bug Fixes

xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)

grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)

Special Thanks: @evilgensec

stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)

encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)

channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Commits

bd23985 Change version to 1.82.0 (#9170)
0f3086d Fix minor issues not covered by PR #9137 (#9147)
fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
adc97de test/kokoro: add config for regional-td test (#9158)
57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
b58f32d server: Set a pprof label on new stream goroutines (#9082)
6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.42.0 to 1.42.1

Commits

b4784c1 Release 2026-07-01
97c0201 Regenerated Clients
6687238 Update endpoints model
995297f Update API model
c26cfc6 Fix bump smithy-go to cover multiple issues (#3461)
fae66b8 Set transfer manager error as the first error seen, preventing race condition...
cf0eabd Release 2026-06-30
ad0c091 Regenerated Clients
196e961 Update endpoints model
1529ead Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.32.26 to 1.32.28

Commits

fc087ca Release 2026-07-06
a0dc66e Regenerated Clients
0e93979 Update endpoints model
1e51eb5 Update API model
a4cd1c9 add serialization snapshot tests (#3463)
8d5a855 set rollout strategy 2 (#3467)
bdb9681 Release 2026-07-02
dad37d5 Regenerated Clients
019a359 Update endpoints model
c51ba98 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/dynamodb from 1.59.1 to 1.60.0

Commits

4d36126 Release 2024-08-20
5ba784c Regenerated Clients
d447ea1 Update API model
33d4eab Remove deprecated codestar service (#2754)
6fe0e9b Release 2024-08-19
3c84b64 Regenerated Clients
c78cc2e Update endpoints model
72a29e1 Update API model
c8a8274 Release 2024-08-16
ebfdc50 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/prometheus/procfs from 0.21.0 to 0.21.1

Commits

3c943fd Fix invalid format strings (#832)
See full diff in compare view

Updates go.opentelemetry.io/collector/pdata from 1.61.0 to 1.62.0

Release notes

Sourced from go.opentelemetry.io/collector/pdata's releases.

v1.62.0/v0.156.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.156.0

End User Changelog

💡 Enhancements 💡

cmd/mdatagen: Add support for defining stability levels for resource attributes (#15312)

cmd/mdatagen: Add semantic convention reference to resource attributes (#15313)

processor/memory_limiter: Adding health events for the memorylimiter (#14700) Publish health event from memorylimiter using componentstatus.ReportStatus

🧰 Bug fixes 🧰

cmd/mdatagen: Removes the extra line in the documentation.md between extended description and table (#15458)

exporter/otlp_http: Treat errors parsing successful (2xx) HTTP response bodies as permanent errors to prevent retrying already-accepted data. (#15386) When a server returns a 2xx status but the response body exceeds the 64kB read limit, the body is truncated and proto unmarshaling fails. Previously this was treated as a retryable error, causing duplicate data to be exported. Now it is marked as a permanent error so the retry logic will not re-send data that was already accepted by the server.

pkg/config/configretry: Always validate BackOffConfig fields regardless of the Enabled flag. (#15437)

pkg/service: Ensure receivers always start after all other components (#15495) There was previously a race condition where multiple receivers using a shared internal implementation, such as the OTLP receiver, could start sending telemetry into a pipeline before all its components had fully started.

processor/memory_limiter: Fix degenerate collector performance when exporter has problems causing permanent CPU-burning GC loop (#4981) Forced GC runs now use exponential backoff when deemed ineffective (still above soft limit and less than 5% reclaimed) to avoid preventing recovery by overloading CPU with excessive GC runs. The cap on the backoff interval is exposed via max_gc_interval_when_soft_limited and max_gc_interval_when_hard_limited (both default 30s); set either to 0 to disable backoff on that path.

provider/env: Fix empty env var default resolving to nil instead of empty string (#14587) When using ${env:VAR:-} with an unset variable, the empty default now correctly resolves to an empty string instead of nil.

API Changelog

🛑 Breaking changes 🛑

pkg/pprofile: add bounds checks to FromAttributeIndices (#15517)

💡 Enhancements 💡

cmd/mdatagen: Add field_name field to go_struct config in metadata.yaml to allow customizing the Go struct field name for generated config properties. (#15486)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.62.0/v0.156.0

🛑 Breaking changes 🛑

pkg/pprofile: add bounds checks to FromAttributeIndices (#15517)

💡 Enhancements 💡

cmd/mdatagen: Add field_name field to go_struct config in metadata.yaml to allow customizing the Go struct field name for generated config properties. (#15486)

cmd/mdatagen: Handle enum validators in generated config structs (#14805) Supported validators include enum.

cmd/mdatagen: Generate named Go types for primitive exported config schemas. (#15487) Primitive exported configs for string, integer, number, and boolean schemas now produce distinct exported types while default values and validation remain on referencing fields.

🧰 Bug fixes 🧰

pkg/pprofile: fix wrong error sentinel in SetString (#15511)

Commits

0a6056f [chore] Prepare release v1.62.0/v0.156.0 (#15546)
00f6354 [chore] Add clarification about org membership check (#15533)
a6b5d5c Document that Patch releases of Go may be adopted (#15052)
5d48fde [processor/memorylimiter] Fix degenerate GC loop when exporter has problems (...
1bca59a Update module github.com/cenkalti/backoff/v6 to v7 (#15522)
193fe1b [pdata/pprofile] add bounds checks to FromAttributeIndices (#15517)
8100c50 Update All golang.org/x packages (#15515)
b5f3f35 Update github-actions deps (#15516)
eec2fa2 Update module github.com/klauspost/compress to v1.18.7 (#15518)
956556f Update module google.golang.org/grpc to v1.82.0 (#15521)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates Bumps the go-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/hashicorp/consul/api](https://github.com/hashicorp/consul) | `1.34.3` | `1.34.4` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.18.7` | `1.19.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.21.0` | `0.22.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.81.1` | `1.82.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.42.0` | `1.42.1` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.32.26` | `1.32.28` | | [github.com/aws/aws-sdk-go-v2/service/dynamodb](https://github.com/aws/aws-sdk-go-v2) | `1.59.1` | `1.60.0` | | [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.21.0` | `0.21.1` | | [go.opentelemetry.io/collector/pdata](https://github.com/open-telemetry/opentelemetry-collector) | `1.61.0` | `1.62.0` | Updates `github.com/hashicorp/consul/api` from 1.34.3 to 1.34.4 - [Release notes](https://github.com/hashicorp/consul/releases) - [Changelog](https://github.com/hashicorp/consul/blob/main/CHANGELOG.md) - [Commits](hashicorp/consul@api/v1.34.3...api/v1.34.4) Updates `github.com/klauspost/compress` from 1.18.7 to 1.19.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Commits](klauspost/compress@v1.18.7...v1.19.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `google.golang.org/grpc` from 1.81.1 to 1.82.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.81.1...v1.82.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.42.0 to 1.42.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.42.0...v1.42.1) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.32.26 to 1.32.28 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.32.26...config/v1.32.28) Updates `github.com/aws/aws-sdk-go-v2/service/dynamodb` from 1.59.1 to 1.60.0 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ssm/v1.59.1...service/s3/v1.60.0) Updates `github.com/prometheus/procfs` from 0.21.0 to 0.21.1 - [Release notes](https://github.com/prometheus/procfs/releases) - [Commits](prometheus/procfs@v0.21.0...v0.21.1) Updates `go.opentelemetry.io/collector/pdata` from 1.61.0 to 1.62.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-collector/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-collector/blob/main/CHANGELOG-API.md) - [Commits](open-telemetry/opentelemetry-collector@pdata/v1.61.0...pdata/v1.62.0) --- updated-dependencies: - dependency-name: github.com/hashicorp/consul/api dependency-version: 1.34.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/klauspost/compress dependency-version: 1.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.82.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.32.28 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: github.com/aws/aws-sdk-go-v2/service/dynamodb dependency-version: 1.60.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies - dependency-name: github.com/prometheus/procfs dependency-version: 0.21.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-dependencies - dependency-name: go.opentelemetry.io/collector/pdata dependency-version: 1.62.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 8, 2026

dosubot Bot added the type/chore Something that needs to be done; not a bug or a feature label Jul 8, 2026

pull-request-size Bot added the size/M label Jul 8, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): Bump the go-dependencies group across 1 directory with 9 updates#7679

chore(deps): Bump the go-dependencies group across 1 directory with 9 updates#7679
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/go-dependencies-14d6d69fe1

dependabot Bot commented on behalf of github Jul 8, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

dependabot Bot commented on behalf of github Jul 8, 2026

v1.19.0

What's Changed

New Contributors

Release 1.82.0

Behavior Changes

New Features

Bug Fixes

v1.62.0/v0.156.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.156.0

End User Changelog

💡 Enhancements 💡

🧰 Bug fixes 🧰

API Changelog

🛑 Breaking changes 🛑

💡 Enhancements 💡

v1.62.0/v0.156.0

🛑 Breaking changes 🛑

💡 Enhancements 💡

🧰 Bug fixes 🧰

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants