dependabot[bot] opened a new pull request, #25: URL: https://github.com/apache/casbin-caddy-authz/pull/25
Bumps [go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://github.com/open-telemetry/opentelemetry-go) from 0.16.0 to 0.19.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-go/releases";>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp's releases</a>.</em></p> <blockquote> <h2>Release v0.19.0</h2> <h3>Added</h3> <ul> <li>Added <code>Marshaler</code> config option to <code>otlphttp</code> to enable otlp over json or protobufs. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1586";>#1586</a>)</li> <li>A <code>ForceFlush</code> method to the <code>"go.opentelemetry.io/otel/sdk/trace".TracerProvider</code> to flush all registered <code>SpanProcessor</code>s. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608";>#1608</a>)</li> <li>Added <code>WithSampler</code> and <code>WithSpanLimits</code> to tracer provider. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1633";>#1633</a>, <a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1702";>#1702</a>)</li> <li><code>"go.opentelemetry.io/otel/trace".SpanContext</code> now has a <code>remote</code> property, and <code>IsRemote()</code> predicate, that is true when the <code>SpanContext</code> has been extracted from remote context data. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1701";>#1701</a>)</li> <li>A <code>Valid</code> method to the <code>"go.opentelemetry.io/otel/attribute".KeyValue</code> type. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703";>#1703</a>)</li> </ul> <h3>Changed</h3> <ul> <li><code>trace.SpanContext</code> is now immutable and has no exported fields. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1573";>#1573</a>) <ul> <li><code>trace.NewSpanContext()</code> can be used in conjunction with the <code>trace.SpanContextConfig</code> struct to initialize a new <code>SpanContext</code> where all values are known.</li> </ul> </li> <li>Update the <code>ForceFlush</code> method signature to the <code>"go.opentelemetry.io/otel/sdk/trace".SpanProcessor</code> to accept a <code>context.Context</code> and return an error. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608";>#1608</a>)</li> <li>Update the <code>Shutdown</code> method to the <code>"go.opentelemetry.io/otel/sdk/trace".TracerProvider</code> return an error on shutdown failure. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608";>#1608</a>)</li> <li>The SimpleSpanProcessor will now shut down the enclosed <code>SpanExporter</code> and gracefully ignore subsequent calls to <code>OnEnd</code> after <code>Shutdown</code> is called. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1612";>#1612</a>)</li> <li><code>"go.opentelemetry.io/sdk/metric/controller.basic".WithPusher</code> is replaced with <code>WithExporter</code> to provide consistent naming across project. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1656";>#1656</a>)</li> <li>Added non-empty string check for trace <code>Attribute</code> keys. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1659";>#1659</a>)</li> <li>Add <code>description</code> to SpanStatus only when <code>StatusCode</code> is set to error. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1662";>#1662</a>)</li> <li>Jaeger exporter falls back to <code>resource.Default</code>'s <code>service.name</code> if the exported Span does not have one. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673";>#1673</a>)</li> <li>Jaeger exporter populates Jaeger's Span Process from Resource. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673";>#1673</a>)</li> <li>Renamed the <code>LabelSet</code> method of <code>"go.opentelemetry.io/otel/sdk/resource".Resource</code> to <code>Set</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1692";>#1692</a>)</li> <li>Changed <code>WithSDK</code> to <code>WithSDKOptions</code> to accept variadic arguments of <code>TracerProviderOption</code> type in <code>go.opentelemetry.io/otel/exporters/trace/jaeger</code> package. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693";>#1693</a>)</li> <li>Changed <code>WithSDK</code> to <code>WithSDKOptions</code> to accept variadic arguments of <code>TracerProviderOption</code> type in <code>go.opentelemetry.io/otel/exporters/trace/zipkin</code> package. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693";>#1693</a>)</li> <li><code>"go.opentelemetry.io/otel/sdk/resource".NewWithAttributes</code> will now drop any invalid attributes passed. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703";>#1703</a>)</li> <li><code>"go.opentelemetry.io/otel/sdk/resource".StringDetector</code> will now error if the produced attribute is invalid. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703";>#1703</a>)</li> </ul> <h3>Removed</h3> <ul> <li>Removed <code>serviceName</code> parameter from Zipkin exporter and uses resource instead. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1549";>#1549</a>)</li> <li>Removed <code>WithConfig</code> from tracer provider to avoid overriding configuration. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1633";>#1633</a>)</li> <li>Removed the exported <code>SimpleSpanProcessor</code> and <code>BatchSpanProcessor</code> structs. These are now returned as a SpanProcessor interface from their respective constructors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1638";>#1638</a>)</li> <li>Removed <code>WithRecord()</code> from <code>trace.SpanOption</code> when creating a span. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1660";>#1660</a>)</li> <li>Removed setting status to <code>Error</code> while recording an error as a span event in <code>RecordError</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1663";>#1663</a>)</li> <li>Removed <code>jaeger.WithProcess</code> configuration option. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673";>#1673</a>)</li> <li>Removed <code>ApplyConfig</code> method from <code>"go.opentelemetry.io/otel/sdk/trace".TracerProvider</code> and the now unneeded <code>Config</code> struct. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693";>#1693</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Jaeger Exporter: Ensure mapping between OTEL and Jaeger span data complies with the specification. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1626";>#1626</a>)</li> <li><code>SamplingResult.TraceState</code> is correctly propagated to a newly created span's <code>SpanContext</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1655";>#1655</a>)</li> <li>The <code>otel-collector</code> example now correctly flushes metric events prior to shutting down the exporter. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1678";>#1678</a>)</li> <li>Do not set span status message in <code>SpanStatusFromHTTPStatusCode</code> if it can be inferred from <code>http.status_code</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1681";>#1681</a>)</li> <li>Synchronization issues in global trace delegate implementation. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1686";>#1686</a>)</li> <li>Reduced excess memory usage by global <code>TracerProvider</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1687";>#1687</a>)</li> </ul> <hr /> <h2>Raw changes made between v0.18.0 and v0.19.0</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md";>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp's changelog</a>.</em></p> <blockquote> <h2>[1.43.0/0.65.0/0.19.0] 2026-04-02</h2> <h3>Added</h3> <ul> <li>Add <code>IsRandom</code> and <code>WithRandom</code> on <code>TraceFlags</code>, and <code>IsRandom</code> on <code>SpanContext</code> in <code>go.opentelemetry.io/otel/trace</code> for <a href="https://www.w3.org/TR/trace-context-2/#random-trace-id-flag";>W3C Trace Context Level 2 Random Trace ID Flag</a> support. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8012";>#8012</a>)</li> <li>Add service detection with <code>WithService</code> in <code>go.opentelemetry.io/otel/sdk/resource</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7642";>#7642</a>)</li> <li>Add <code>DefaultWithContext</code> and <code>EnvironmentWithContext</code> in <code>go.opentelemetry.io/otel/sdk/resource</code> to support plumbing <code>context.Context</code> through default and environment detectors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8051";>#8051</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Support attributes with empty value (<code>attribute.EMPTY</code>) in <code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Add support for per-series start time tracking for cumulative metrics in <code>go.opentelemetry.io/otel/sdk/metric</code>. Set <code>OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true</code> to enable. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8060";>#8060</a>)</li> <li>Add <code>WithCardinalityLimitSelector</code> for metric reader for configuring cardinality limits specific to the instrument kind. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7855";>#7855</a>)</li> </ul> <h3>Changed</h3> <ul> <li>Introduce the <code>EMPTY</code> Type in <code>go.opentelemetry.io/otel/attribute</code> to reflect that an empty value is now a valid value, with <code>INVALID</code> remaining as a deprecated alias of <code>EMPTY</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> <li>Improve slice handling in <code>go.opentelemetry.io/otel/attribute</code> to optimize short slice values with fixed-size fast paths. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8039";>#8039</a>)</li> <li>Improve performance of span metric recording in <code>go.opentelemetry.io/otel/sdk/trace</code> by returning early if self-observability is not enabled. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8067";>#8067</a>)</li> <li>Improve formatting of metric data diffs in <code>go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8073";>#8073</a>)</li> </ul> <h3>Deprecated</h3> <ul> <li>Deprecate <code>INVALID</code> in <code>go.opentelemetry.io/otel/attribute</code>. Use <code>EMPTY</code> instead. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8038";>#8038</a>)</li> </ul> <h3>Fixed</h3> <ul> <li>Return spec-compliant <code>TraceIdRatioBased</code> description. This is a breaking behavioral change, but it is necessary to make the implementation <a href="https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased";>spec-compliant</a>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8027";>#8027</a>)</li> <li>Fix a race condition in <code>go.opentelemetry.io/otel/sdk/metric</code> where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8056";>#8056</a>)</li> <li>Limit HTTP response body to 4 MiB in <code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code> to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108";>#8108</a>)</li> <li>Limit HTTP response body to 4 MiB in <code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code> to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108";>#8108</a>)</li> <li>Limit HTTP response body to 4 MiB in <code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code> to mitigate excessive memory usage caused by a misconfigured or malicious server. Responses exceeding the limit are treated as non-retryable errors. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8108";>#8108</a>)</li> <li><code>WithHostID</code> detector in <code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for <code>kenv</code> command on BSD. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8113";>#8113</a>)</li> <li>Fix missing <code>request.GetBody</code> in <code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code> to correctly handle HTTP2 GOAWAY frame. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8096";>#8096</a>)</li> </ul> <h2>[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06</h2> <h3>Added</h3> <ul> <li>Add <code>go.opentelemetry.io/otel/semconv/v1.40.0</code> package. The package contains semantic conventions from the <code>v1.40.0</code> version of the OpenTelemetry Semantic Conventions. See the <a href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.40.0/MIGRATION.md";>migration documentation</a> for information on how to upgrade from <code>go.opentelemetry.io/otel/semconv/v1.39.0</code>. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7985";>#7985</a>)</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/2b4fa9681bd0c69574aaa879039382002b220204";><code>2b4fa96</code></a> Release v0.19.0 (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1710";>#1710</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/4beb70416e1272c578edfe1d5f88a3a2236da178";><code>4beb704</code></a> sdk/trace: removing ApplyConfig and Config (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693";>#1693</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/1d42be1601e2d9bbd1101780759520e3f3960a29";><code>1d42be1</code></a> Rename WithDefaultSampler TracerProvider option to WithSampler and update doc...</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/860d5d86e7ace12bf2b2ca8e437d2d4fc68a6913";><code>860d5d8</code></a> Add flag to determine whether SpanContext is remote (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1701";>#1701</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/0fe65e6bd2b3fad00289427e0bac1974086d4326";><code>0fe65e6</code></a> Comply with OpenTelemetry attributes specification (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703";>#1703</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/888843519dae308f165d1d20c095bb6352baeb52";><code>8888435</code></a> Bump google.golang.org/api from 0.40.0 to 0.41.0 in /exporters/trace/jaeger (...</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/345f264a137ed7162c30d14dd4739b5b72f76537";><code>345f264</code></a> breaking(zipkin): removes servicName from zipkin exporter. (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1697";>#1697</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/62cbf0f240112813105d7056506496b59740e0c2";><code>62cbf0f</code></a> Populate Jaeger's Span.Process from Resource (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673";>#1673</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/28eaaa9a919d03227856d83e2149b85f78d57775";><code>28eaaa9</code></a> Add a test to prove the Tracer is safe for concurrent calls (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1665";>#1665</a>)</li> <li><a href="https://github.com/open-telemetry/opentelemetry-go/commit/8b1be11a549eefb6efeda2f940cbda70b3c3d08d";><code>8b1be11</code></a> Rename resource pkg label vars and methods (<a href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1692";>#1692</a>)</li> <li>Additional commits viewable in <a href="https://github.com/open-telemetry/opentelemetry-go/compare/v0.16.0...v0.19.0";>compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/apache/casbin-caddy-authz/network/alerts). </details> -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
