Dependency Dashboard

[renovate]

This issue lists Renovate updates and detected dependencies. Read the Dependency Dashboard docs to learn more.
View this repository on the Mend.io Web Portal.

Repository problems

These problems occurred while renovating this repository. View logs.

• WARN: Package lookup failures

---

Warning

Renovate failed to look up the following dependencies: Could not determine new digest for update (go package go.opentelemetry.io/proto/otlp/profiles/v1development), Could not determine new digest for update (go package go.opentelemetry.io/proto/slim/otlp/profiles/v1development).

Files affected: otlp/collector/profiles/v1development/go.mod, slim/otlp/collector/profiles/v1development/go.mod

---

Open

The following updates have all been created. To force a retry/rebase of any, click on a checkbox below.

• chore(deps): update github/codeql-action action to v4.31.4

Ignored or Blocked

The following updates are blocked by an existing closed PR. To recreate the PR, click on a checkbox below.

• chore(deps): update module github.com/go-git/gcfg to v2

Detected dependencies

dockerfile

dependencies.Dockerfile

• otel/build-protobuf 0.25.0

github-actions

.github/workflows/ci.yaml

• actions/setup-go v6
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• actions/setup-go v6

.github/workflows/fossa.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• fossas/fossa-action v1.7.0@3ebcea1862c6ffbd5cf1b4d0bd6b3fe7bd6f2cac

.github/workflows/ossf-scorecard.yml

• actions/checkout v5.0.1@93cb6efe18208431cddfb8368fd83d5badbf9bfd
• ossf/scorecard-action v2.4.3@4eaacf0543bb3f2c246792bd56e8cdeffafb205a
• actions/upload-artifact v5.0.0@330a01c490aca151604b8cf639adc76d48f6c5d4
• github/codeql-action v4.31.3@014f16e7ab1402f30e7c3329d33797e7948572db

gomod

go.mod

• go 1.24.0

internal/tools/go.mod

• go 1.24.0
• go.opentelemetry.io/build-tools/multimod v0.29.0
• dario.cat/mergo v1.0.2
• github.com/Microsoft/go-winio v0.6.2
• github.com/ProtonMail/go-crypto v1.3.0
• github.com/cloudflare/circl v1.6.1
• github.com/cyphar/filepath-securejoin v0.6.0
• github.com/emirpasic/gods v1.18.1
• github.com/fsnotify/fsnotify v1.9.0
• github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376@3a3c6141e376
• github.com/go-git/go-billy/v5 v5.6.2
• github.com/go-git/go-git/v5 v5.16.3
• github.com/go-viper/mapstructure/v2 v2.4.0
• github.com/golang/groupcache v0.0.0-20241129210726-2c02b8208cf8@2c02b8208cf8
• github.com/hashicorp/go-cleanhttp v0.5.2
• github.com/hashicorp/go-retryablehttp v0.7.8
• github.com/inconshreveable/mousetrap v1.1.0
• github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99@d14ea06fba99
• github.com/kevinburke/ssh_config v1.4.0
• github.com/klauspost/cpuid/v2 v2.3.0
• github.com/pelletier/go-toml/v2 v2.2.4
• github.com/pjbgf/sha1cd v0.5.0
• github.com/sagikazarmark/locafero v0.12.0
• github.com/sergi/go-diff v1.4.0
• github.com/skeema/knownhosts v1.3.2
• github.com/spf13/afero v1.15.0
• github.com/spf13/cast v1.10.0
• github.com/spf13/cobra v1.10.1
• github.com/spf13/pflag v1.0.10
• github.com/spf13/viper v1.21.0
• github.com/subosito/gotenv v1.6.0
• github.com/xanzy/ssh-agent v0.3.3
• go.opentelemetry.io/build-tools v0.29.0
• go.uber.org/multierr v1.11.0
• go.yaml.in/yaml/v3 v3.0.4
• golang.org/x/crypto v0.44.0
• golang.org/x/mod v0.30.0
• golang.org/x/net v0.47.0
• golang.org/x/sync v0.18.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• gopkg.in/warnings.v0 v0.1.2

otlp/collector/profiles/v1development/go.mod

• go 1.24.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
• go.opentelemetry.io/proto/otlp/profiles/v1development v0.0.0-20250721084824-6f76ca90124d@6f76ca90124d
• google.golang.org/grpc v1.77.0
• google.golang.org/protobuf v1.36.10
• go.opentelemetry.io/proto/otlp v1.9.0
• golang.org/x/net v0.47.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba
• google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba

otlp/go.mod

• go 1.24.0
• github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
• google.golang.org/grpc v1.77.0
• google.golang.org/protobuf v1.36.10
• golang.org/x/net v0.47.0
• golang.org/x/sys v0.38.0
• golang.org/x/text v0.31.0
• google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba
• google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba@95abcf5c77ba

otlp/profiles/v1development/go.mod

• go 1.24.0
• go.opentelemetry.io/proto/otlp v1.9.0
• google.golang.org/protobuf v1.36.10

slim/otlp/collector/profiles/v1development/go.mod

• go 1.24.0
• go.opentelemetry.io/proto/slim/otlp/profiles/v1development v0.0.0-20250721084824-6f76ca90124d@6f76ca90124d
• google.golang.org/protobuf v1.36.10
• go.opentelemetry.io/proto/slim/otlp v1.9.0

slim/otlp/go.mod

• go 1.24.0
• google.golang.org/protobuf v1.36.10

slim/otlp/profiles/v1development/go.mod

• go 1.24.0
• go.opentelemetry.io/proto/slim/otlp v1.9.0
• google.golang.org/protobuf v1.36.10

---

• Check this box to trigger a request for Renovate to run again on this repository