Bump the gomodupdates group with 6 updates

[dependabot]

Bumps the gomodupdates group with 6 updates:

Package	From	To
github.com/go-jose/go-jose/v3	3.0.2	3.0.3
github.com/go-openapi/spec	0.20.14	0.21.0
go.opentelemetry.io/otel	1.24.0	1.25.0
go.opentelemetry.io/otel/trace	1.24.0	1.25.0
golang.org/x/crypto	0.20.0	0.22.0
google.golang.org/protobuf	1.32.0	1.33.0

Updates github.com/go-jose/go-jose/v3 from 3.0.2 to 3.0.3

Release notes

Sourced from github.com/go-jose/go-jose/v3's releases.

Version 3.0.3

Fixed

• Limit decompression output size to prevent a DoS. Backport from v4.0.1.

Changelog

Sourced from github.com/go-jose/go-jose/v3's changelog.

v3.0.3

Fixed

• Limit decompression output size to prevent a DoS. Backport from v4.0.1.

Commits

• add6a28 v3: backport decompression limit fix (#107)
• 11bb4e7 doc: in v3 branch's README, point to v4 as latest (#101)
• See full diff in compare view

Updates github.com/go-openapi/spec from 0.20.14 to 0.21.0

Commits

• af9bab8 chore(go): go-openapi requires go.1.20 across the board
• 8937a3d updated dependencies
• fc76ee8 chore(lint): relinted
• c786eed fix(ci): remove dependency-type from dependabot groups
• 397f81b Bump the development-dependencies group with 1 update
• a68da9e ci: remove paths-ignore
• c21b34f Bump the development-dependencies group with 1 update
• 817cb94 chore(ci): prevents duplicate workflow runs
• 5c52f3d Bump the development-dependencies group with 3 updates
• 7e0aabf Bump the go-openapi-dependencies group with 1 update
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.24.0 to 1.25.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.25.0/0.47.0/0.0.8/0.1.0-alpha] 2024-04-05

Added

• Add WithProxy option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#4906)
• Add WithProxy option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlptracehttp. (#4906)
• Add AddLink method to the Span interface in go.opentelemetry.io/otel/trace. (#5032)
• The Enabled method is added to the Logger interface in go.opentelemetry.io/otel/log. This method is used to notify users if a log record will be emitted or not. (#5071)
• Add SeverityUndefined const to go.opentelemetry.io/otel/log. This value represents an unset severity level. (#5072)
• Add Empty function in go.opentelemetry.io/otel/log to return a KeyValue for an empty value. (#5076)
• Add go.opentelemetry.io/otel/log/global to manage the global LoggerProvider. This package is provided with the anticipation that all functionality will be migrate to go.opentelemetry.io/otel when go.opentelemetry.io/otel/log stabilizes. At which point, users will be required to migrage their code, and this package will be deprecated then removed. (#5085)
• Add support for Summary metrics in the go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc exporters. (#5100)
• Add otel.scope.name and otel.scope.version tags to spans exported by go.opentelemetry.io/otel/exporters/zipkin. (#5108)
• Add support for AddLink to go.opentelemetry.io/otel/bridge/opencensus. (#5116)
• Add String method to Value and KeyValue in go.opentelemetry.io/otel/log. (#5117)
• Add Exemplar support to go.opentelemetry.io/otel/exporters/prometheus. (#5111)
• Add metric semantic conventions to go.opentelemetry.io/otel/semconv/v1.24.0. Future semconv packages will include metric semantic conventions as well. (#4528)

Changed

• SpanFromContext and SpanContextFromContext in go.opentelemetry.io/otel/trace no longer make a heap allocation when the passed context has no span. (#5049)
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc now create a gRPC client in idle mode and with "dns" as the default resolver using grpc.NewClient. (#5151) Because of that WithDialOption ignores grpc.WithBlock, grpc.WithTimeout, and grpc.WithReturnConnectionError. Notice that grpc.DialContext which was used before is now deprecated.

Fixed

• Clarify the documentation about equivalence guarantees for the Set and Distinct types in go.opentelemetry.io/otel/attribute. (#5027)
• Prevent default ErrorHandler self-delegation. (#5137)
• Update all dependencies to address [GO-2024-2687]. (#5139)

Removed

• Drop support for [Go 1.20]. (#4967)

Deprecated

• Deprecate go.opentelemetry.io/otel/attribute.Sortable type. (#4734)
• Deprecate go.opentelemetry.io/otel/attribute.NewSetWithSortable function. (#4734)
• Deprecate go.opentelemetry.io/otel/attribute.NewSetWithSortableFiltered function. (#4734)

Commits

• 6628407 Release v1.25.0/v0.47.0/v0.0.8/v0.1.0-alpha (#5154)
• 82b49b4 Add otlploghttp package documentation (#5150)
• 5bd5582 dependabot updates Thu Apr 4 20:43:44 UTC 2024 (#5155)
• 6394b02 semconv: Add metric generation (#4880)
• 35c9570 Prevent default ErrorHandler self-delegation (#5137)
• 98fd439 Bump bump google.golang.org/grpc from 1.62.1 to 1.63.0 and use grpc.NewClient...
• 0168437 Add exemplar support to the prometheus exporter (#5111)
• e6e4e4a build(deps): bump benchmark-action/github-action-benchmark (#5142)
• 73ee3bb build(deps): bump codecov/codecov-action from 4.1.1 to 4.2.0 (#5140)
• 14e3f6b Add otlploghttp exporter skeleton (#5138)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.24.0 to 1.25.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.25.0/0.47.0/0.0.8/0.1.0-alpha] 2024-04-05

Added

• Add WithProxy option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#4906)
• Add WithProxy option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlptracehttp. (#4906)
• Add AddLink method to the Span interface in go.opentelemetry.io/otel/trace. (#5032)
• The Enabled method is added to the Logger interface in go.opentelemetry.io/otel/log. This method is used to notify users if a log record will be emitted or not. (#5071)
• Add SeverityUndefined const to go.opentelemetry.io/otel/log. This value represents an unset severity level. (#5072)
• Add Empty function in go.opentelemetry.io/otel/log to return a KeyValue for an empty value. (#5076)
• Add go.opentelemetry.io/otel/log/global to manage the global LoggerProvider. This package is provided with the anticipation that all functionality will be migrate to go.opentelemetry.io/otel when go.opentelemetry.io/otel/log stabilizes. At which point, users will be required to migrage their code, and this package will be deprecated then removed. (#5085)
• Add support for Summary metrics in the go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc exporters. (#5100)
• Add otel.scope.name and otel.scope.version tags to spans exported by go.opentelemetry.io/otel/exporters/zipkin. (#5108)
• Add support for AddLink to go.opentelemetry.io/otel/bridge/opencensus. (#5116)
• Add String method to Value and KeyValue in go.opentelemetry.io/otel/log. (#5117)
• Add Exemplar support to go.opentelemetry.io/otel/exporters/prometheus. (#5111)
• Add metric semantic conventions to go.opentelemetry.io/otel/semconv/v1.24.0. Future semconv packages will include metric semantic conventions as well. (#4528)

Changed

• SpanFromContext and SpanContextFromContext in go.opentelemetry.io/otel/trace no longer make a heap allocation when the passed context has no span. (#5049)
• go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc now create a gRPC client in idle mode and with "dns" as the default resolver using grpc.NewClient. (#5151) Because of that WithDialOption ignores grpc.WithBlock, grpc.WithTimeout, and grpc.WithReturnConnectionError. Notice that grpc.DialContext which was used before is now deprecated.

Fixed

• Clarify the documentation about equivalence guarantees for the Set and Distinct types in go.opentelemetry.io/otel/attribute. (#5027)
• Prevent default ErrorHandler self-delegation. (#5137)
• Update all dependencies to address [GO-2024-2687]. (#5139)

Removed

• Drop support for [Go 1.20]. (#4967)

Deprecated

• Deprecate go.opentelemetry.io/otel/attribute.Sortable type. (#4734)
• Deprecate go.opentelemetry.io/otel/attribute.NewSetWithSortable function. (#4734)
• Deprecate go.opentelemetry.io/otel/attribute.NewSetWithSortableFiltered function. (#4734)

Commits

• 6628407 Release v1.25.0/v0.47.0/v0.0.8/v0.1.0-alpha (#5154)
• 82b49b4 Add otlploghttp package documentation (#5150)
• 5bd5582 dependabot updates Thu Apr 4 20:43:44 UTC 2024 (#5155)
• 6394b02 semconv: Add metric generation (#4880)
• 35c9570 Prevent default ErrorHandler self-delegation (#5137)
• 98fd439 Bump bump google.golang.org/grpc from 1.62.1 to 1.63.0 and use grpc.NewClient...
• 0168437 Add exemplar support to the prometheus exporter (#5111)
• e6e4e4a build(deps): bump benchmark-action/github-action-benchmark (#5142)
• 73ee3bb build(deps): bump codecov/codecov-action from 4.1.1 to 4.2.0 (#5140)
• 14e3f6b Add otlploghttp exporter skeleton (#5138)
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.20.0 to 0.22.0

Commits

• d042a39 go.mod: update golang.org/x dependencies
• b92bf94 ssh: respect MaxAuthTries also for "none" auth attempts
• 6f79b5a ssh: add server side multi-step authentication
• 8d0d405 x/crypto/chacha20: cleanup chacha_ppc64le.s
• b91329d all: remove redundant words in comments and fix some typos
• 7067223 go.mod: update golang.org/x dependencies
• 0d2316b ssh/test: work around for TestCiphers failures on macOS
• See full diff in compare view

Updates google.golang.org/protobuf from 1.32.0 to 1.33.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Superseded by #76.