Visitar URL original
[v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace otlptracegrpc and otlptracehttp to v1.45.0 by scottrigby · Pull Request #32760 · helm/helm · GitHub
Skip to content

[v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace otlptracegrpc and otlptracehttp to v1.45.0 - #32760

Merged
scottrigby merged 1 commit into
helm:dev-v3from
scottrigby:dev-v3-bump-otlptrace-v1.45.0
Oct 15, 2026
Merged

[v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace otlptracegrpc and otlptracehttp to v1.45.0#32760
scottrigby merged 1 commit into
helm:dev-v3from
scottrigby:dev-v3-bump-otlptrace-v1.45.0

Conversation

@scottrigby

@scottrigby scottrigby commented Oct 15, 2026

Copy link
Copy Markdown
Member

What this PR does / why we need it:

Fixes GO-2026-6505

Special notes for your reviewer:

See:

Indirect dependency pinned with:

go get go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0
go get go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0
go mod tidy

Relevant output of govulncheck:

% govulncheck ./...

Vulnerability #6: GO-2026-6505
    OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info
    logs in go.opentelemetry.io/otel/exporters/otlp/otlptrace
  More info: https://pkg.go.dev/vuln/GO-2026-6505
  Module: go.opentelemetry.io/otel/exporters/otlp/otlptrace
    Found in: go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.44.0
    Fixed in: go.opentelemetry.io/otel/exporters/otlp/otlptrace@v1.45.0
    
  Module: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    Found in: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.44.0
    Fixed in: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc@v1.45.0
    
  Module: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
    Found in: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.43.0
    Fixed in: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@v1.45.0

If applicable:

  • this PR contains user facing changes (the docs needed label should be applied if so)
  • this PR contains unit tests
  • this PR has been tested for backwards compatibility

@scottrigby
[v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptr…
8166b85 
…ace otlptracegrpc and otlptracehttp to v1.45.0

Signed-off-by: Scott Rigby <scott@r6by.com>
@scottrigby scottrigby added this to the 3.22.1 milestone Oct 15, 2026
@scottrigby scottrigby added the dependencies Pull requests that update a dependency file label Oct 15, 2026
@pull-request-size pull-request-size Bot added the size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. label Oct 15, 2026
@scottrigby scottrigby added the v3.x Issues and Pull Requests related to the major version v3 label Oct 15, 2026
sabre1041
sabre1041 approved these changes Oct 15, 2026
View reviewed changes

@sabre1041 sabre1041 left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@scottrigby
scottrigby merged commit d3b5cc3 into helm:dev-v3 Oct 15, 2026
5 checks passed
scottrigby added a commit that referenced this pull request Oct 15, 2026
@scottrigby
[v3] chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptr…
8d91c8f 
…ace otlptracegrpc and otlptracehttp to v1.45.0 (#32760)

Signed-off-by: Scott Rigby <scott@r6by.com>
(cherry picked from commit d3b5cc3)
Signed-off-by: Scott Rigby <scott@r6by.com>
@scottrigby scottrigby added the picked Indicates that a PR has been cherry-picked into the next release candidate. label Oct 15, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sabre1041 sabre1041 sabre1041 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file picked Indicates that a PR has been cherry-picked into the next release candidate. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. v3.x Issues and Pull Requests related to the major version v3

Projects

None yet

Milestone

3.22.1

Development

Successfully merging this pull request may close these issues.

2 participants

@scottrigby @sabre1041