fix: update OpenTelemetry to v1.44.0 and fix go.sum inconsistency #363

Merged
guettlibot merged 1 commits from refs/pull/363/head into main 2026-06-03 14:44:05 +00:00
guettlibot commented 2026-06-03 14:19:46 +00:00 (Migrated from codeberg.org)

What

PR #356 (Renovate) was blocked with "Artifact file update failure" because ci/go.sum was out of sync with ci/go.mod.

Root cause: The require section listed otel log packages at v0.17.0 while replace directives pinned them to v0.19.0, but go.sum only had hashes for v0.16.0. Renovate couldn't auto-update go.sum because the Dagger module's internal/dagger generated package isn't in version control, so standard go mod tidy couldn't resolve the full dependency graph.

Changes

  • Bumps go.opentelemetry.io/otel + otel/trace + otel/sdk v1.43.0 → v1.44.0 (implementing PR #356's intent)
  • Updates all related otel exporters and sub-packages to v1.44.0 / v0.20.0
  • Aligns replace directives from v0.19.0 → v0.20.0 (consistent with require section)
  • Also picks up grpc v1.79.3→v1.80.0 and proto/otlp v1.9.0→v1.10.0 (from go mod tidy)
  • Adds all missing h1: and /go.mod hashes to go.sum

Verification

  • go mod verify passes
  • Hashes fetched directly via go mod download -json from the official Go module proxy

Closes #359

## What PR #356 (Renovate) was blocked with "Artifact file update failure" because `ci/go.sum` was out of sync with `ci/go.mod`. **Root cause**: The `require` section listed otel log packages at v0.17.0 while `replace` directives pinned them to v0.19.0, but `go.sum` only had hashes for v0.16.0. Renovate couldn't auto-update go.sum because the Dagger module's `internal/dagger` generated package isn't in version control, so standard `go mod tidy` couldn't resolve the full dependency graph. ## Changes - Bumps `go.opentelemetry.io/otel` + `otel/trace` + `otel/sdk` v1.43.0 → v1.44.0 (implementing PR #356's intent) - Updates all related otel exporters and sub-packages to v1.44.0 / v0.20.0 - Aligns `replace` directives from v0.19.0 → v0.20.0 (consistent with require section) - Also picks up `grpc` v1.79.3→v1.80.0 and `proto/otlp` v1.9.0→v1.10.0 (from `go mod tidy`) - Adds all missing `h1:` and `/go.mod` hashes to `go.sum` ## Verification - `go mod verify` passes - Hashes fetched directly via `go mod download -json` from the official Go module proxy Closes #359
Sign in to join this conversation.