Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package
golang-github-prometheus-alertmanager for openSUSE:Factory checked in at
2026-11-06 19:57:28
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager (Old)
and
/work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.3759290
(New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "golang-github-prometheus-alertmanager"
Fri Nov 6 19:57:28 2026 rev:40 rq:1395747 version:0.34.2
Changes:
--------
---
/work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager/golang-github-prometheus-alertmanager.changes
2026-10-05 13:04:34.496240652 +0200
+++
/work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.3759290/golang-github-prometheus-alertmanager.changes
2026-11-06 20:03:41.774627317 +0100
@@ -1,0 +2,12 @@
+Fri Oct 30 06:01:13 UTC 2026 - Johannes Kastl
<[email protected]>
+
+- update to 0.34.2:
+ * [SECURITY] api: Alertmanager no longer sends CORS headers by
+ default. This means api/v2 now disallows cross-origin requests.
+ This is a breaking change. The new --web.cors.origin flag can
+ be used to restore the previous behaviour. #5664
+ * [SECURITY] Build with Go 1.26.10, which distrusts the eight
+ compromised eMudhra intermediate CA certificates in
+ crypto/x509. CVE-2026-111943
+
+-------------------------------------------------------------------
Old:
----
alertmanager-0.34.1.tar.gz
ui-0.34.1.tar.gz
New:
----
alertmanager-0.34.2.tar.gz
ui-0.34.2.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ golang-github-prometheus-alertmanager.spec ++++++
--- /var/tmp/diff_new_pack.MF4l2n/_old 2026-11-06 20:03:44.350735199 +0100
+++ /var/tmp/diff_new_pack.MF4l2n/_new 2026-11-06 20:03:44.360735618 +0100
@@ -17,7 +17,7 @@
Name: golang-github-prometheus-alertmanager
-Version: 0.34.1
+Version: 0.34.2
Release: 0
Summary: Prometheus Alertmanager
License: Apache-2.0
@@ -35,8 +35,8 @@
# Lifted from Debian's alertmanager package
Patch1: 0001-Default-settings.patch
BuildRequires: fdupes
+BuildRequires: go1.26 >= 1.26.10
BuildRequires: golang-github-prometheus-promu >= 0.12.0
-BuildRequires: golang(API) >= 1.26
Requires(pre): group(prometheus)
Requires(pre): user(prometheus)
Provides: prometheus-alertmanager = %{version}
++++++ alertmanager-0.34.1.tar.gz -> alertmanager-0.34.2.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/.golangci.yml
new/alertmanager-0.34.2/.golangci.yml
--- old/alertmanager-0.34.1/.golangci.yml 2026-09-17 09:16:22.000000000
+0200
+++ new/alertmanager-0.34.2/.golangci.yml 2026-10-29 10:28:32.000000000
+0100
@@ -38,6 +38,9 @@
- "^ ?scheme value"
period: true
capital: true
+ modernize:
+ disable:
+ - newexpr
revive:
rules:
- name: blank-imports
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/CHANGELOG.md
new/alertmanager-0.34.2/CHANGELOG.md
--- old/alertmanager-0.34.1/CHANGELOG.md 2026-09-17 09:16:22.000000000
+0200
+++ new/alertmanager-0.34.2/CHANGELOG.md 2026-10-29 10:28:32.000000000
+0100
@@ -1,5 +1,10 @@
## main / (unreleased)
+## 0.34.2 / 2026-10-29
+
+* [SECURITY] api: Alertmanager no longer sends CORS headers by default. This
means `api/v2` now disallows cross-origin requests. This is a breaking change.
The new `--web.cors.origin` flag can be used to restore the previous behaviour.
#5664
+* [SECURITY] Build with Go 1.26.10, which distrusts the eight compromised
eMudhra intermediate CA certificates in `crypto/x509`. CVE-2026-111943
+
## 0.34.1 / 2026-09-17
* [BUGFIX] inhibit: Fix several issues related to inhibitions that caused
alerts to be improperly un-muted in some cases. #5542, #5449, #5559
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/Procfile
new/alertmanager-0.34.2/Procfile
--- old/alertmanager-0.34.1/Procfile 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/Procfile 2026-10-29 10:28:32.000000000 +0100
@@ -1,4 +1,4 @@
-a1: ./alertmanager --log.level=debug --storage.path=$TMPDIR/a1
--web.listen-address=:9093 --cluster.listen-address=127.0.0.1:8001
--config.file=examples/ha/alertmanager.yml
+a1: ./alertmanager --log.level=debug --storage.path=$TMPDIR/a1
--web.listen-address=:9093 --cluster.listen-address=127.0.0.1:8001
--config.file=examples/ha/alertmanager.yml
--web.cors.origin='http://localhost:\d+'
a2: ./alertmanager --log.level=debug --storage.path=$TMPDIR/a2
--web.listen-address=:9094 --cluster.listen-address=127.0.0.1:8002
--cluster.peer=127.0.0.1:8001 --config.file=examples/ha/alertmanager.yml
a3: ./alertmanager --log.level=debug --storage.path=$TMPDIR/a3
--web.listen-address=:9095 --cluster.listen-address=127.0.0.1:8003
--cluster.peer=127.0.0.1:8001 --config.file=examples/ha/alertmanager.yml
wh: go run ./examples/webhook/echo.go
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/VERSION
new/alertmanager-0.34.2/VERSION
--- old/alertmanager-0.34.1/VERSION 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/VERSION 2026-10-29 10:28:32.000000000 +0100
@@ -1 +1 @@
-0.34.1
+0.34.2
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/api/api.go
new/alertmanager-0.34.2/api/api.go
--- old/alertmanager-0.34.1/api/api.go 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/api/api.go 2026-10-29 10:28:32.000000000 +0100
@@ -19,6 +19,7 @@
"fmt"
"log/slog"
"net/http"
+ "regexp"
"runtime"
"strings"
"time"
@@ -28,6 +29,7 @@
"github.com/prometheus/common/model"
"github.com/prometheus/common/promslog"
"github.com/prometheus/common/route"
+ "github.com/rs/cors"
"go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp"
apiv2 "github.com/prometheus/alertmanager/api/v2"
@@ -43,6 +45,7 @@
type API struct {
v2 *apiv2.API
deprecationRouter *V1DeprecationRouter
+ corsHandler func(http.Handler) http.Handler
requestDuration *prometheus.HistogramVec
requestsInFlight prometheus.Gauge
@@ -72,6 +75,9 @@
// larger. Status code 503 is served for GET requests that would exceed
// the concurrency limit.
Concurrency int
+ // CORSHandler is created by NewCORSHandler. If nil, no CORS headers are
+ // sent.
+ CORSHandler func(http.Handler) http.Handler
// Logger is used for logging, if nil, no logging will happen.
Logger *slog.Logger
// Registry is used to register Prometheus metrics. If nil, no metrics
@@ -151,6 +157,7 @@
return &API{
deprecationRouter:
NewV1DeprecationRouter(l.With("version", "v1")),
v2: v2,
+ corsHandler: opts.CORSHandler,
requestDuration: opts.RequestDuration,
requestsInFlight: requestsInFlight,
concurrencyLimitExceeded: concurrencyLimitExceeded,
@@ -177,6 +184,12 @@
if routePrefix != "/" {
apiPrefix = routePrefix
}
+
+ v2Handler := api.v2.Handler
+ if api.corsHandler != nil {
+ v2Handler = api.corsHandler(v2Handler)
+ }
+
mux.Handle(
apiPrefix+"/api/v2/",
api.instrumentHandler(
@@ -184,7 +197,7 @@
api.limitHandler(
http.StripPrefix(
apiPrefix,
- api.v2.Handler,
+ v2Handler,
),
),
),
@@ -193,6 +206,25 @@
return mux
}
+// NewCORSHandler allows origins matching the fully anchored regex origin.
+func NewCORSHandler(origin string) (func(http.Handler) http.Handler, error) {
+ if origin == "" {
+ return nil, nil
+ }
+ re, err := regexp.Compile("^(?:" + origin + ")$")
+ if err != nil {
+ return nil, err
+ }
+ return cors.New(cors.Options{
+ AllowOriginFunc: re.MatchString,
+ AllowedMethods: []string{http.MethodGet, http.MethodPost,
http.MethodDelete},
+ AllowedHeaders: []string{"*"},
+ // Browsers otherwise cache preflights for only 5s, adding an
+ // OPTIONS round trip to almost every non-simple request.
+ MaxAge: 600,
+ }).Handler, nil
+}
+
// Update config and resolve timeout of each API. APIv2 also needs
// setAlertStatus to be updated.
func (api *API) Update(cfg *config.Config, setAlertStatus func(ctx
context.Context, labels model.LabelSet)) {
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/api/v2/api.go
new/alertmanager-0.34.2/api/v2/api.go
--- old/alertmanager-0.34.1/api/v2/api.go 2026-09-17 09:16:22.000000000
+0200
+++ new/alertmanager-0.34.2/api/v2/api.go 2026-10-29 10:28:32.000000000
+0100
@@ -34,7 +34,6 @@
"github.com/prometheus/client_golang/prometheus"
prometheus_model "github.com/prometheus/common/model"
"github.com/prometheus/common/version"
- "github.com/rs/cors"
"go.opentelemetry.io/otel/codes"
"github.com/prometheus/alertmanager/alert"
@@ -140,8 +139,7 @@
openAPI.SilenceGetSilencesHandler =
silence_ops.GetSilencesHandlerFunc(api.getSilencesHandler)
openAPI.SilencePostSilencesHandler =
silence_ops.PostSilencesHandlerFunc(api.postSilencesHandler)
- handleCORS := cors.Default().Handler
- api.Handler = handleCORS(setResponseHeaders(openAPI.Serve(nil)))
+ api.Handler = setResponseHeaders(openAPI.Serve(nil))
return &api, nil
}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/app/app.go
new/alertmanager-0.34.2/app/app.go
--- old/alertmanager-0.34.1/app/app.go 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/app/app.go 2026-10-29 10:28:32.000000000 +0100
@@ -401,6 +401,7 @@
Peer: clusterPeer,
Timeout: opts.HTTPTimeout,
Concurrency: opts.GetConcurrency,
+ CORSHandler: opts.CORSHandler,
Logger: logger.With("component", "api"),
Registry: reg,
RequestDuration: m.requestDuration,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/app/cors_test.go
new/alertmanager-0.34.2/app/cors_test.go
--- old/alertmanager-0.34.1/app/cors_test.go 1970-01-01 01:00:00.000000000
+0100
+++ new/alertmanager-0.34.2/app/cors_test.go 2026-10-29 10:28:32.000000000
+0100
@@ -0,0 +1,95 @@
+// Copyright The Prometheus Authors
+// Licensed under the Apache License, Version 2.0 (the "License");
+// you may not use this file except in compliance with the License.
+// You may obtain a copy of the License at
+//
+// http://www.apache.org/licenses/LICENSE-2.0
+//
+// Unless required by applicable law or agreed to in writing, software
+// distributed under the License is distributed on an "AS IS" BASIS,
+// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+// See the License for the specific language governing permissions and
+// limitations under the License.
+
+package app
+
+import (
+ "net/http"
+ "testing"
+
+ "github.com/stretchr/testify/require"
+
+ "github.com/prometheus/alertmanager/api"
+)
+
+func TestCORS(t *testing.T) {
+ const allowed = "https://a.example.com";
+ corsHandler, err := api.NewCORSHandler(`https://a\.example\.com`)
+ require.NoError(t, err)
+
+ type check struct {
+ name string
+ path string
+ origin string
+ wantAllowOrigin string
+ }
+ tests := []struct {
+ name string
+ routePrefix string
+ corsHandler func(http.Handler) http.Handler
+ checks []check
+ }{
+ {
+ name: "enabled",
+ corsHandler: corsHandler,
+ checks: []check{
+ {name: "v2", path: "/api/v2/silences", origin:
allowed, wantAllowOrigin: allowed},
+ {name: "suffixed origin", path:
"/api/v2/silences", origin: "https://a.example.com.evil.net"},
+ {name: "other origin", path:
"/api/v2/silences", origin: "https://b.example.com"},
+ {name: "metrics", path: "/metrics", origin:
allowed},
+ {name: "reload", path: "/-/reload", origin:
allowed},
+ },
+ },
+ {
+ name: "enabled under a route prefix",
+ routePrefix: "/alertmanager",
+ corsHandler: corsHandler,
+ checks: []check{
+ {name: "v2", path: "/api/v2/silences", origin:
allowed, wantAllowOrigin: allowed},
+ {name: "metrics", path: "/metrics", origin:
allowed},
+ },
+ },
+ {
+ name: "disabled",
+ checks: []check{
+ {name: "v2", path: "/api/v2/silences", origin:
allowed},
+ },
+ },
+ }
+ for _, tc := range tests {
+ t.Run(tc.name, func(t *testing.T) {
+ opts := testOptions(t)
+ opts.RoutePrefix = tc.routePrefix
+ opts.CORSHandler = tc.corsHandler
+ a, err := New(opts)
+ require.NoError(t, err)
+ require.NoError(t, a.Start())
+ t.Cleanup(func() { _ = a.Stop(t.Context()) })
+ waitHealthy(t, a.Addr()+tc.routePrefix)
+
+ for _, c := range tc.checks {
+ t.Run(c.name, func(t *testing.T) {
+ req, err :=
http.NewRequest(http.MethodOptions, "http://"+a.Addr()+tc.routePrefix+c.path,
http.NoBody)
+ require.NoError(t, err)
+ req.Header.Set("Origin", c.origin)
+
req.Header.Set("Access-Control-Request-Method", http.MethodPost)
+
+ resp, err := http.DefaultClient.Do(req)
+ require.NoError(t, err)
+ t.Cleanup(func() { _ =
resp.Body.Close() })
+ require.Equal(t, c.wantAllowOrigin,
resp.Header.Get("Access-Control-Allow-Origin"))
+ })
+ }
+ })
+ }
+}
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/app/options.go
new/alertmanager-0.34.2/app/options.go
--- old/alertmanager-0.34.1/app/options.go 2026-09-17 09:16:22.000000000
+0200
+++ new/alertmanager-0.34.2/app/options.go 2026-10-29 10:28:32.000000000
+0100
@@ -17,6 +17,7 @@
"errors"
"fmt"
"log/slog"
+ "net/http"
"time"
"github.com/prometheus/client_golang/prometheus"
@@ -67,6 +68,7 @@
WebConfig *web.FlagConfig
ExternalURL string
RoutePrefix string
+ CORSHandler func(http.Handler) http.Handler
GetConcurrency int
HTTPTimeout time.Duration
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/cmd/alertmanager/main.go
new/alertmanager-0.34.2/cmd/alertmanager/main.go
--- old/alertmanager-0.34.1/cmd/alertmanager/main.go 2026-09-17
09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/cmd/alertmanager/main.go 2026-10-29
10:28:32.000000000 +0100
@@ -31,6 +31,7 @@
"github.com/prometheus/common/version"
webflag "github.com/prometheus/exporter-toolkit/web/kingpinflag"
+ "github.com/prometheus/alertmanager/api"
"github.com/prometheus/alertmanager/app"
"github.com/prometheus/alertmanager/cluster"
"github.com/prometheus/alertmanager/featurecontrol"
@@ -63,6 +64,7 @@
webConfig = webflag.AddFlags(kingpin.CommandLine, ":9093")
externalURL = kingpin.Flag("web.external-url", "The URL
under which Alertmanager is externally reachable (for example, if Alertmanager
is served via a reverse proxy). Used for generating relative and absolute links
back to Alertmanager itself. If the URL has a path portion, it will be used to
prefix all HTTP endpoints served by Alertmanager. If omitted, relevant URL
components will be derived automatically.").String()
routePrefix = kingpin.Flag("web.route-prefix", "Prefix for
the internal routes of web endpoints. Defaults to path of
--web.external-url.").String()
+ corsOrigin = kingpin.Flag("web.cors.origin", `Regex for
CORS origin. It is fully anchored, so it must match the whole origin including
scheme and port, and dots must be escaped. Browser pages from matching origins
may call the API. Example: 'https?://(domain1|domain2)\.com'. If empty, no CORS
headers are sent.`).String()
getConcurrency = kingpin.Flag("web.get-concurrency", "Maximum
number of GET requests processed concurrently. If negative or zero, the limit
is GOMAXPROC or 8, whichever is larger.").Default("0").Int()
httpTimeout = kingpin.Flag("web.timeout", "Timeout for HTTP
requests. If negative or zero, no timeout is set.").Default("0").Duration()
@@ -108,6 +110,12 @@
}
compat.InitFromFlags(logger, ff)
+ corsHandler, err := api.NewCORSHandler(*corsOrigin)
+ if err != nil {
+ logger.Error("error parsing --web.cors.origin", "err", err)
+ return 1
+ }
+
if ff.EnableAutoGOMEMLIMIT() {
if *memlimitRatio <= 0.0 || *memlimitRatio > 1.0 {
logger.Error("--auto-gomemlimit.ratio must be greater
than 0 and less than or equal to 1.")
@@ -167,6 +175,7 @@
WebConfig: webConfig,
ExternalURL: *externalURL,
RoutePrefix: *routePrefix,
+ CORSHandler: corsHandler,
GetConcurrency: *getConcurrency,
HTTPTimeout: *httpTimeout,
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/go.mod
new/alertmanager-0.34.2/go.mod
--- old/alertmanager-0.34.1/go.mod 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/go.mod 2026-10-29 10:28:32.000000000 +0100
@@ -1,6 +1,6 @@
module github.com/prometheus/alertmanager
-go 1.25.0
+go 1.26.0
require (
connectrpc.com/connect v1.20.0
@@ -48,16 +48,16 @@
github.com/xlab/treeprint v1.2.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
v0.69.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
- go.opentelemetry.io/otel v1.44.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
- go.opentelemetry.io/otel/sdk v1.44.0
- go.opentelemetry.io/otel/trace v1.44.0
- golang.org/x/mod v0.40.0
- golang.org/x/net v0.58.0
- golang.org/x/text v0.41.0
- google.golang.org/grpc v1.83.1
+ go.opentelemetry.io/otel v1.45.0
+ go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0
+ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0
+ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0
+ go.opentelemetry.io/otel/sdk v1.45.0
+ go.opentelemetry.io/otel/trace v1.45.0
+ golang.org/x/mod v0.41.0
+ golang.org/x/net v0.60.0
+ golang.org/x/text v0.42.0
+ google.golang.org/grpc v1.83.2
google.golang.org/protobuf v1.36.11
gopkg.in/telebot.v3 v3.3.8
gopkg.in/yaml.v2 v2.4.0
@@ -120,17 +120,17 @@
github.com/twmb/franz-go/pkg/kmsg v1.13.1 // indirect
github.com/xhit/go-str2duration/v2 v2.1.0 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
- go.opentelemetry.io/otel/metric v1.44.0 // indirect
- go.opentelemetry.io/proto/otlp v1.10.0 // indirect
+ go.opentelemetry.io/otel/metric v1.45.0 // indirect
+ go.opentelemetry.io/proto/otlp v1.11.0 // indirect
go.yaml.in/yaml/v2 v2.4.4 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
- golang.org/x/crypto v0.55.0 // indirect
+ golang.org/x/crypto v0.57.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
- golang.org/x/sync v0.22.0 // indirect
- golang.org/x/sys v0.47.0 // indirect
+ golang.org/x/sync v0.23.0 // indirect
+ golang.org/x/sys v0.48.0 // indirect
golang.org/x/time v0.15.0 // indirect
golang.org/x/tools v0.49.0 // indirect
- google.golang.org/genproto/googleapis/api
v0.0.0-20260526163538-3dc84a4a5aaa // indirect
- google.golang.org/genproto/googleapis/rpc
v0.0.0-20260526163538-3dc84a4a5aaa // indirect
+ google.golang.org/genproto/googleapis/api
v0.0.0-20260803160001-6ac0973c030d // indirect
+ google.golang.org/genproto/googleapis/rpc
v0.0.0-20260803160001-6ac0973c030d // indirect
gopkg.in/yaml.v3 v3.0.1 // indirect
)
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/go.sum
new/alertmanager-0.34.2/go.sum
--- old/alertmanager-0.34.1/go.sum 2026-09-17 09:16:22.000000000 +0200
+++ new/alertmanager-0.34.2/go.sum 2026-10-29 10:28:32.000000000 +0100
@@ -587,25 +587,25 @@
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace
v0.69.0/go.mod h1:3jnStNwSufK+f5ktjL4EPcwtig4rtd81NS70lqHuXl8=
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
h1:8tvICD4vSTOOsNrsI4Ljf6C+6UKvpTEH5XY3JMoyPoo=
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0/go.mod
h1:z9+yiacE0IHRqM4qFfkbt/JYlmYXgss8GY/jXoNuPJI=
-go.opentelemetry.io/otel v1.44.0
h1:JjwHmHpA4iZ3wBxluu2fbbE7j4kqlE8jXyAyPXH7HqU=
-go.opentelemetry.io/otel v1.44.0/go.mod
h1:BMgjTHL9WPRlRjL2oZCBTL4whCGtXch2H4BhOPIAyYc=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
h1:4YsVu3B8+3qtWYYrsUYgn0OG78pN0rnNPRGX4SbokQI=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0/go.mod
h1:+wnlSn0mD1ADVMe3v9Z/WIaiz6q6gL2J/ejaAmdmv80=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
h1:qazEJlUOQzhCpzQpFETGby7EdqjI1wsd0W+6Gg1SCTU=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0/go.mod
h1:fOD2Yefuxixkx3ahVNf0O/PERb6r4OlbxfATVnYvzCo=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
h1:lgh3PiVrRUWMLOVSkQicxzZll5NjF1r+AtsX1XRIHw0=
-go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0/go.mod
h1:5Cnhth3m/AgOeTgE3ex12pPmiu/gGtZit03kSzx9X7s=
-go.opentelemetry.io/otel/metric v1.44.0
h1:1w0gILTcHdr3YI+ixLyjemwrVnsMURbTZFrSYCdDdmc=
-go.opentelemetry.io/otel/metric v1.44.0/go.mod
h1:8O7hanEPBNgEMmybD3s2VBKcgWOCsA6tzHBPODAiquo=
-go.opentelemetry.io/otel/sdk v1.44.0
h1:nHYwb9lK+fJPU/dnT6s7W7Z8itMWyqrnVfbheVYrZ58=
-go.opentelemetry.io/otel/sdk v1.44.0/go.mod
h1:Osuydd3Se74nqjAKxid74N5eC+jfEqfTegHRnq58oK0=
-go.opentelemetry.io/otel/sdk/metric v1.44.0
h1:3LlKgI+VjbVsjNRFZJZAJ30WjXC5VkNRks6si09iEfI=
-go.opentelemetry.io/otel/sdk/metric v1.44.0/go.mod
h1:5B5pMARnXxKhltooO4xUuCBorl65a4EpnTalObqOigA=
-go.opentelemetry.io/otel/trace v1.44.0
h1:jxF5CsGYCe74MCRx2X4g7WsY/VBKRqqpNvXlX/6gtIk=
-go.opentelemetry.io/otel/trace v1.44.0/go.mod
h1:oLl1jrMQAVo6v3GAggN+1VH9VIz9iUSvW53sW1Q8PIE=
+go.opentelemetry.io/otel v1.45.0
h1:pdrWmLHofpubmArBv1LgFSv1Z0Ie/ppdZzu+kUN5EeU=
+go.opentelemetry.io/otel v1.45.0/go.mod
h1:XZxIqPapzEYnhNSScF5DIqXhm/rYi0FzCe2XddAwZfQ=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0
h1:QRefszxJmfPdjXUUm3j6iDzY03mTPXMjqErFqQ67vUg=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0/go.mod
h1:Tiz03lTBVBrm7eWZBOidzEaYaJa8tjwGUGv6d8mlTyk=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0
h1:fG5MCxGz8+2VtrN/WgqSpJFctVz24gpxj8CxkKmc8Ww=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0/go.mod
h1:BmAYTn+3ysbRe+IU2msxmf5Rx3g6DHvex+tWI3LdhYI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0
h1:QBajQ2SrwQijzHyZbQlPsuIzpl/ll8DY6wPWsajeGcI=
+go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.45.0/go.mod
h1:08ZQLjrPLQ6R4kAXvuOvODEer5Yh4CoFvll5qB2BCI8=
+go.opentelemetry.io/otel/metric v1.45.0
h1:7Eg1uH7CJ5cXv9is6tnBe1FI6rj1nwUdbFypRm3br/M=
+go.opentelemetry.io/otel/metric v1.45.0/go.mod
h1:HAPbm1nd3p1PmFH7v2dR+6BjXxw+Lq4a2+pndMAm08s=
+go.opentelemetry.io/otel/sdk v1.45.0
h1:4VVSMgQ83dUgW2aoX5f6JgLvHwIvzcuLnF9lUdCSpCw=
+go.opentelemetry.io/otel/sdk v1.45.0/go.mod
h1:Sr40LgXV7DsKMMJMKOhUWOgMWTfAaqvm2kF0g7ilwuA=
+go.opentelemetry.io/otel/sdk/metric v1.45.0
h1:oVFszMfyj1Am6s24Vtc7wBb8BKLcwepJjNEYILuiE3o=
+go.opentelemetry.io/otel/sdk/metric v1.45.0/go.mod
h1:vUWUxDZvu1WVRj8JA8S0AdhsPrZoDpA2DdZauIh4mDA=
+go.opentelemetry.io/otel/trace v1.45.0
h1:l/mP6Uv7oNO7/TblbhpbgMidxhq1uO/rPsikOyVhxag=
+go.opentelemetry.io/otel/trace v1.45.0/go.mod
h1:qoJJA2xNMnxRrdISU/kLtfUH2wNeQbiv+jhs/CxI8bc=
go.opentelemetry.io/proto/otlp v0.7.0/go.mod
h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
-go.opentelemetry.io/proto/otlp v1.10.0
h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g=
-go.opentelemetry.io/proto/otlp v1.10.0/go.mod
h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk=
+go.opentelemetry.io/proto/otlp v1.11.0
h1:5rrYs0Ykyj50sdU/JU0x8etU+LubXWb+gED6TbEdMIk=
+go.opentelemetry.io/proto/otlp v1.11.0/go.mod
h1:SmVizdCOAm3XBtG1g1NnOdhW6jtddT72hLMhv8VwA8E=
go.uber.org/atomic v1.7.0/go.mod
h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc=
go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
go.uber.org/goleak v1.3.0/go.mod
h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
@@ -625,8 +625,8 @@
golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod
h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4=
golang.org/x/crypto v0.0.0-20211108221036-ceb1ce70b4fa/go.mod
h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc=
golang.org/x/crypto v0.0.0-20220411220226-7b82a4e95df4/go.mod
h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4=
-golang.org/x/crypto v0.55.0 h1:+KWHjbgOaAQ66dh/YlkZKHlz9ZUlq61AFirAR9ntP8M=
-golang.org/x/crypto v0.55.0/go.mod
h1:uq0V9dE/fzQuJtbnL+2EhWOE63vo164FY8xqEnV9xis=
+golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=
+golang.org/x/crypto v0.57.0/go.mod
h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA=
golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod
h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod
h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA=
golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod
h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8=
@@ -662,8 +662,8 @@
golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA=
-golang.org/x/mod v0.40.0 h1:hUv+3cXcdRHz08UmSiOob7sadHig73uo5bkXxQ/tvUs=
-golang.org/x/mod v0.40.0/go.mod h1:0/weTWkPWGBikyTWAX3dkjVztMmBA5hM0DH6BElSupE=
+golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
+golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
golang.org/x/net v0.0.0-20181114220301-adae6a3d119a/go.mod
h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
@@ -711,8 +711,8 @@
golang.org/x/net v0.0.0-20220412020605-290c469a71a5/go.mod
h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
golang.org/x/net v0.0.0-20220425223048-2871e0cb64e4/go.mod
h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
golang.org/x/net v0.0.0-20220520000938-2e3eb7b945c2/go.mod
h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk=
-golang.org/x/net v0.58.0 h1:ynWG7rqYi4ccpTEuPZ2QGWHktVEM9DMCj9yzDE0Q7To=
-golang.org/x/net v0.58.0/go.mod h1:YwCddHnFlT7eLQqVprV19OnhLGtc5xOKgE0RyqgfWAU=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod
h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U=
golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod
h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod
h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw=
@@ -747,8 +747,8 @@
golang.org/x/sync v0.0.0-20201207232520-09787c993a3a/go.mod
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
golang.org/x/sync v0.0.0-20220513210516-0976fa681c29/go.mod
h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.22.0 h1:SZjpbeLmrCk4xhRSZFNZW5gFUeCeFgjekvI/+gfScek=
-golang.org/x/sync v0.22.0/go.mod
h1:9xrNwdLfx4jkKbNva9FpL6vEN7evnE43NNNJQ2LF3+0=
+golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
+golang.org/x/sync v0.23.0/go.mod
h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
golang.org/x/sys v0.0.0-20180823144017-11551d06cbcc/go.mod
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
golang.org/x/sys v0.0.0-20180905080454-ebe1bf3edb33/go.mod
h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
@@ -827,8 +827,8 @@
golang.org/x/sys v0.0.0-20220412211240-33da011f77ad/go.mod
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220502124256-b6088ccd6cba/go.mod
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod
h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
-golang.org/x/sys v0.47.0 h1:o7XGOvZQCADBQQ4Y7VNq2dRWQR7JmOUW8Kxx4ZsNgWs=
-golang.org/x/sys v0.47.0/go.mod h1:4GL1E5IUh+htKOUEOaiffhrAeqysfVGipDYzABqnCmw=
+golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
+golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod
h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo=
golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod
h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8=
golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod
h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
@@ -840,8 +840,8 @@
golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ=
golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ=
-golang.org/x/text v0.41.0 h1:vz/seA0lnX87Othu2f/0L24RcgrXD9/YFTSuGjj3rH8=
-golang.org/x/text v0.41.0/go.mod
h1:jvf1O8ajNzZqhSrQBPbutR/EB83Cc0CFrezNQIwbb5M=
+golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
+golang.org/x/text v0.42.0/go.mod
h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod
h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod
h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod
h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ=
@@ -1036,10 +1036,10 @@
google.golang.org/genproto v0.0.0-20220429170224-98d788798c3e/go.mod
h1:8w6bsBMX6yCPbAVTeqQHvzxW0EIFigd5lZyahWgyfDo=
google.golang.org/genproto v0.0.0-20220505152158-f39f71e6c8f3/go.mod
h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4=
google.golang.org/genproto v0.0.0-20220519153652-3a47de7e79bd/go.mod
h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4=
-google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
h1:Kjn0N0tCrDgiAFW+lGO4JZ3ck44CehvJQMAwj9QF0G8=
-google.golang.org/genproto/googleapis/api
v0.0.0-20260526163538-3dc84a4a5aaa/go.mod
h1:q4lMZS6kskjT5HvCPrnnypcDPVJqT/f4nfxmkE7gryY=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
h1:mZHHdPZl0dbGHCflZgAq/Q468DWVFcU2whhB2KAo8fk=
-google.golang.org/genproto/googleapis/rpc
v0.0.0-20260526163538-3dc84a4a5aaa/go.mod
h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
+google.golang.org/genproto/googleapis/api v0.0.0-20260803160001-6ac0973c030d
h1:FarXi840EJWSHYTN3ERkADbPWjl307+FGrA22KAVjjc=
+google.golang.org/genproto/googleapis/api
v0.0.0-20260803160001-6ac0973c030d/go.mod
h1:K/+WGbmBY7aNW1HDw1fJnKYo10i0DkAX6pows00dLig=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260803160001-6ac0973c030d
h1:IL4hdHzcUv2l/gcg98/Rj3FbtE6axwqslOW8SW0C+S0=
+google.golang.org/genproto/googleapis/rpc
v0.0.0-20260803160001-6ac0973c030d/go.mod
h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
google.golang.org/grpc v1.19.0/go.mod
h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
google.golang.org/grpc v1.20.1/go.mod
h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
google.golang.org/grpc v1.21.1/go.mod
h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM=
@@ -1070,8 +1070,8 @@
google.golang.org/grpc v1.45.0/go.mod
h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ=
google.golang.org/grpc v1.46.0/go.mod
h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
google.golang.org/grpc v1.46.2/go.mod
h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
-google.golang.org/grpc v1.83.1 h1:HIO0+BEtBP6soyqvqC8sNUjZ7bTs+0hFQuFF+RAy++Y=
-google.golang.org/grpc v1.83.1/go.mod
h1:kDyl6SKsiHKt0uylY5gtn5cEjkrIOhQOGDgIc4JGwzQ=
+google.golang.org/grpc v1.83.2 h1:EManeRomTObA0BU7I8vXgg/78uE5MJ9M8B39EX2WscU=
+google.golang.org/grpc v1.83.2/go.mod
h1:YPI1hK3kDked6iHvgX3tR0y+nX/qpMFKhPgFsokw1S8=
google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod
h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod
h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod
h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/alertmanager-0.34.1/tracing/tracing.go
new/alertmanager-0.34.2/tracing/tracing.go
--- old/alertmanager-0.34.1/tracing/tracing.go 2026-09-17 09:16:22.000000000
+0200
+++ new/alertmanager-0.34.2/tracing/tracing.go 2026-10-29 10:28:32.000000000
+0100
@@ -31,7 +31,7 @@
"go.opentelemetry.io/otel/propagation"
"go.opentelemetry.io/otel/sdk/resource"
tracesdk "go.opentelemetry.io/otel/sdk/trace"
- semconv "go.opentelemetry.io/otel/semconv/v1.41.0"
+ semconv "go.opentelemetry.io/otel/semconv/v1.43.0"
"go.opentelemetry.io/otel/trace"
"go.opentelemetry.io/otel/trace/noop"
"google.golang.org/grpc/credentials"
++++++ ui-0.34.1.tar.gz -> ui-0.34.2.tar.gz ++++++
++++++ vendor.tar.gz ++++++
/work/SRC/openSUSE:Factory/golang-github-prometheus-alertmanager/vendor.tar.gz
/work/SRC/openSUSE:Factory/.golang-github-prometheus-alertmanager.new.3759290/vendor.tar.gz
differ: char 136, line 1
