chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #684 · securesign/trillian

red-hat-konflux · 2026-05-12T23:22:17Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	patch	`v0.25.2` → `v0.25.3`
cloud.google.com/go/auth	indirect	minor	`v0.20.0` → `v0.24.0`	`v0.24.1`
cloud.google.com/go/auth/oauth2adapt	indirect	minor	`v0.2.8` → `v0.3.0`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.9.0` → `v0.10.0`
cloud.google.com/go/iam	indirect	minor	`v1.11.0` → `v1.14.0`
cloud.google.com/go/longrunning	indirect	major	`v0.13.0` → `v1.3.0`
cloud.google.com/go/monitoring	indirect	minor	`v1.29.0` → `v1.31.0`
cloud.google.com/go/profiler	indirect	minor	`v0.6.0` → `v0.7.0`
cloud.google.com/go/spanner	require	minor	`v1.91.0` → `v1.96.0`	`v1.96.1`
cloud.google.com/go/storage	indirect	minor	`v1.62.1` → `v1.69.0`
cloud.google.com/go/trace	indirect	minor	`v1.16.0` → `v1.17.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	indirect	minor	`v1.33.0` → `v1.38.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	indirect	minor	`v0.56.0` → `v0.62.0`
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	indirect	minor	`v0.56.0` → `v0.62.0`
github.com/apache/beam/sdks/v2	require	minor	`v2.72.0` → `v2.77.0`
github.com/avast/retry-go/v4	indirect	major	`v4.7.0` → `v5.0.0`
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.1`
github.com/cheggaaa/pb/v3	indirect	minor	`v3.1.6` → `v3.2.1`
github.com/clipperhouse/uax29/v2	indirect	minor	`v2.2.0` → `v2.7.0`
github.com/docker/go-connections	indirect	minor	`v0.7.0` → `v0.8.1`	`v0.8.2`
github.com/dustin/go-humanize	indirect	minor	`v1.0.1` → `v1.1.0`
github.com/envoyproxy/go-control-plane/envoy	indirect	minor	`v1.37.0` → `v1.39.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fullstorydev/grpcurl	require	patch	`v1.9.3` → `v1.9.4`
github.com/fxamacker/cbor/v2	indirect	patch	`v2.9.1` → `v2.9.6`
github.com/go-jose/go-jose/v4	indirect	patch	`v4.1.4` → `v4.1.5`
github.com/go-logr/logr	indirect	patch	`v1.4.3` → `v1.4.4`
github.com/go-openapi/jsonpointer	indirect	major	`v0.23.1` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	major	`v0.21.5` → `v1.0.3`
github.com/go-openapi/swag	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/conv	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/jsonname	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/loading	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.26.0` → `v0.29.2`
github.com/go-sql-driver/mysql	require	patch	`v1.10.0` → `v1.10.1`
github.com/gofrs/flock	indirect	patch	`v0.13.0` → `v0.13.1`
github.com/golang-cz/devslog	indirect	patch	`v0.0.15` → `v0.0.17`
github.com/google/go-licenses/v2	require	patch	`v2.0.0-alpha.1` → `v2.0.1`
github.com/google/pprof	indirect	digest	`92041b7` → `7bae8d8`
github.com/google/s2a-go	indirect	patch	`v0.1.9` → `v0.1.11`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.15` → `v0.3.23`
github.com/googleapis/gax-go/v2	indirect	minor	`v2.22.0` → `v2.26.2`
github.com/grpc-ecosystem/go-grpc-middleware	require	major	`v1.4.0` → `v2.3.4`
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus	indirect	patch	`v1.1.0` → `v1.1.1`
github.com/grpc-ecosystem/go-grpc-middleware/v2	indirect	patch	`v2.3.3` → `v2.3.4`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.29.0` → `v2.31.0`
github.com/huandu/xstrings	indirect	minor	`v1.5.0` → `v1.6.2`
github.com/imdario/mergo	indirect	major	`v0.3.16` → `v1.0.2`
github.com/jackc/pgx/v4	indirect	major	`v4.18.3` → `v5.11.0`
github.com/jackc/pgx/v5	require	minor	`v5.9.2` → `v5.11.0`
github.com/jackc/puddle/v2	indirect	patch	`v2.2.2` → `v2.2.3`
github.com/jhump/protoreflect	indirect	minor	`v1.18.0` → `v1.19.0`	`v2.0.0`
github.com/jhump/protoreflect/v2	indirect	patch	`v2.0.0-beta.1` → `v2.0.0-beta.2`	`v2.0.0`
github.com/klauspost/compress	indirect	minor	`v1.18.6` → `v1.20.1`
github.com/mattn/go-colorable	indirect	patch	`v0.1.14` → `v0.1.16`
github.com/mattn/go-isatty	indirect	patch	`v0.0.22` → `v0.0.24`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.23` → `v0.0.31`
github.com/olekukonko/tablewriter	indirect	major	`v0.0.5` → `v1.1.5`
github.com/onsi/ginkgo	indirect	major	`v1.16.5` → `v2.33.0`	`v2.33.1`
github.com/petermattis/goid	indirect	digest	`df67b19` → `abfca07`
github.com/planetscale/vtprotobuf	indirect	digest	`ba97887` → `8ae5a48`
github.com/prometheus/client_golang	require	minor	`v1.23.2` → `v1.24.1`	`v1.25.0`
github.com/prometheus/client_model	require	patch	`v0.6.2` → `v0.6.3`
github.com/prometheus/common	indirect	minor	`v0.67.5` → `v0.72.0`
github.com/prometheus/procfs	indirect	minor	`v0.20.1` → `v0.22.0`
github.com/prometheus/prometheus	indirect	minor	`v0.311.3` → `v0.315.0`
github.com/pseudomuto/protokit	indirect	minor	`v0.2.1` → `v0.3.0`
github.com/sirupsen/logrus	indirect	minor	`v1.9.4` → `v1.10.2`
github.com/spiffe/go-spiffe/v2	indirect	minor	`v2.7.0` → `v2.9.0`
github.com/stretchr/testify	indirect	minor	`v1.11.1` → `v1.12.1`
go.etcd.io/bbolt	indirect	minor	`v1.4.3` → `v1.5.0`
go.etcd.io/etcd/api/v3	indirect	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/client/pkg/v3	indirect	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/client/v3	require	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/etcdctl/v3	require	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/etcdutl/v3	indirect	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/pkg/v3	indirect	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/server/v3	require	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/tests/v3	indirect	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/etcd/v3	require	minor	`v3.6.14` → `v3.7.2`
go.etcd.io/raft/v3	indirect	minor	`v3.6.0` → `v3.7.0`
go.opentelemetry.io/contrib/detectors/gcp	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.69.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk/metric	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.44.0` → `v1.47.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.10.0` → `v1.11.1`
go.uber.org/zap	indirect	minor	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.5`
go.yaml.in/yaml/v3	indirect	patch	`v3.0.4` → `v3.0.5`
golang.org/x/crypto	require	minor	`v0.55.0` → `v0.57.0`	`v0.58.0`
golang.org/x/mod	indirect	minor	`v0.38.0` → `v0.41.0`	`v0.42.0`
golang.org/x/net	indirect	minor	`v0.58.0` → `v0.59.0`	`v0.61.0` (+1)
golang.org/x/oauth2	indirect	minor	`v0.36.0` → `v0.37.0`
golang.org/x/sync	require	minor	`v0.22.0` → `v0.24.0`
golang.org/x/sys	require	minor	`v0.47.0` → `v0.49.0`
golang.org/x/term	indirect	minor	`v0.45.0` → `v0.46.0`	`v0.47.0`
golang.org/x/text	indirect	minor	`v0.41.0` → `v0.42.0`	`v0.43.0`
golang.org/x/time	indirect	minor	`v0.15.0` → `v0.16.0`
golang.org/x/tools	require	minor	`v0.48.0` → `v0.51.0`	`v0.52.0`
google.golang.org/api	require	minor	`v0.278.0` → `v0.301.0`
google.golang.org/genproto	require	digest	`3700d41` → `fad4113`
google.golang.org/genproto/googleapis/api	require	digest	`3dc84a4` → `fad4113`
google.golang.org/genproto/googleapis/rpc	require	digest	`3dc84a4` → `fad4113`
google.golang.org/grpc	require	minor	`v1.83.2` → `v1.84.0`
google.golang.org/protobuf	require	patch	`v1.36.12-0.20260120151049-f2248ac996af` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`
gopkg.in/yaml.v2	require	major	`v2.4.0` → `v3.0.1`
k8s.io/api	require	minor	`v0.35.4` → `v0.37.1`
k8s.io/apimachinery	require	minor	`v0.35.4` → `v0.37.1`
k8s.io/client-go	require	minor	`v0.35.4` → `v0.37.1`
k8s.io/kube-openapi	indirect	digest	`da4e56f` → `e2e80c3`
k8s.io/utils	require	digest	`ff6756f` → `cf1189d`
sigs.k8s.io/json	indirect	digest	`2d32026` → `11ed52e`
sigs.k8s.io/structured-merge-diff/v6	indirect	major	`v6.4.0` → `v7.0.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.3`

Compare Source

What's Changed

Workaround inconsistent ? in proto textformat by @jnthntatum in #512
Update README with repository relocation notice by @dmitriplotnikov in #514
Add basic tests for out-of-range epoch int to timestamp conversions by @l46kok in #500
Update README with new repository link by @dmitriplotnikov in #519
Lint fixes for import by @jnthntatum in #521
CEL conformance test documentation: fix links in markdown by @AustinWise in #518
Avoid ? in textproto test cases. by @jnthntatum in #525
Add initial conformance tests for lists ext by @jnthntatum in #528

New Contributors

@dmitriplotnikov made their first contribution in #514
@AustinWise made their first contribution in #518

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.24.0`

bigquery: Support for the NUMERIC type.
bigtable:
- cbt: Optionally specify columns for read/lookup
- Support instance-level administration.
oslogin: New client for the OS Login API.
pubsub:
- The package is now stable. There will be no further breaking changes.
- Internal changes to improve Subscription.Receive behavior.
storage: Support updating bucket lifecycle config.
spanner: Support struct-typed parameter bindings.
texttospeech: New client for the Text-to-Speech API.

`v0.23.3`: auth: v0.23.3

Bug Fixes

Handle secureconnect helper failures gracefully (c2794c6)
Handle secureconnect helper failures gracefully (#20443) (c2794c6)

`v0.23.2`: auth: v0.23.2

Bug Fixes

auth: Eliminate timing race conditions in grpctransport otel tests (#20175) (#20382) (637505e)

`v0.23.1`: auth: v0.23.1

Bug Fixes

auth: Fix OpenTelemetry test flake in grpctransport (#20191) (e43ce28)

`v0.23.0`

Compare Source

bigquery: Add DDL stats to query statistics.
bigtable:
- cbt: Add cells-per-column limit for row lookup.
- cbt: Make it possible to combine read filters.
dlp: v2beta2 client removed. Use the v2 client instead.
firestore, spanner: Fix compilation errors due to protobuf changes.

`v0.22.0`

Compare Source

bigtable:
- cbt: Support cells per column limit for row read.
- bttest: Correctly handle empty RowSet.
- Fix ReadModifyWrite operation in emulator.
- Fix API path in GetCluster.
bigquery:
- BEHAVIOR CHANGE: Retry on 503 status code.
- Add dataset.DeleteWithContents.
- Add SchemaUpdateOptions for query jobs.
- Add Timeline to QueryStatistics.
- Add more stats to ExplainQueryStage.
- Support Parquet data format.
datastore:
- Support omitempty for times.
dlp:
- BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
  which is now out of beta.
- Add v2 client.
firestore:
- BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.
iam:
- Support JWT signing via SignJwt callopt.
profiler:
- BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
- BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
- Avoid returning empty serial port output.
pubsub:
- BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
- BEHAVIOR CHANGE: Don't backoff on EOF.
- pstest: Support Acknowledge and ModifyAckDeadline RPCs.
redis:
- Add v1 beta Redis client.
spanner:
- Support SessionLabels.
speech:
- Add api v1 beta1 client.
storage:
- BEHAVIOR CHANGE: Retry reads when retryable error occurs.
- Fix delete of object in requester-pays bucket.
- Support KMS integration.

`v0.21.0`

Compare Source

bigquery:
- Add OpenCensus tracing.
firestore:
- BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
  whose Exists method returns false. DocumentRef.Get and Transaction.Get
  return the non-nil DocumentSnapshot in addition to a NotFound error.
  DocumentRef.GetAll and Transaction.GetAll return a non-nil
  DocumentSnapshot instead of nil.
- Add DocumentIterator.Stop. Call Stop whenever you are done with a
  DocumentIterator.
- Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
  notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
- Canceling an RPC now always returns a grpc.Status with codes.Canceled.
spanner:
- Add CommitTimestamp, which supports inserting the commit timestamp of a
  transaction into a column.

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric)

`v0.62.0`: v1.38.0/v0.62.0

Compare Source

What's Changed

exporter/collector/logs: Add support for the gcp.operation attribute by @quentinmit in #1201
Prepare release v1.38.0/v0.62.0 by @quentinmit in #1203

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.61.0...v0.62.0

`v0.61.0`: v1.37.0/v0.61.0

Compare Source

What's Changed

Drop support for go 1.25 by @dashpole in #1190
Deprecate trace and metric exporters and add migration guide by @dashpole in #1192
Deprecate extension/googleclientauthextension module by @dashpole in #1187
fix: update Cloud Functions gen2 e2e test runtime to go126 by @dashpole in #1195
propagator: deprecate package and add missing module-level deprecations by @dashpole in #1196
detectors/gcp: deprecate GCP resource detection package by @dashpole in #1193
Prepare release v1.37.0/v0.61.0 by @dashpole in #1198

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.60.0...v0.61.0

`v0.60.0`: v1.36.0/v0.60.0

Compare Source

What's Changed

Add GKEHostType by @iblancasa in #1177
Update OpenTelemetry dependencies to fix govulncheck GO-2026-5158 by @dashpole in #1185
exporter/trace: update span attribute and event limits to match backend by @dashpole in #1186
Add support for go 1.27 and fix zizimor by @dashpole in #1188
Prepare release v1.36.0/v0.60.0 by @dashpole in #1189

New Contributors

@iblancasa made their first contribution in #1177

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.59.0...v0.60.0

`v0.59.0`

Compare Source

What's Changed

Adds support for resolving OpenTelemetry authentication extensions by @Angelawork in #1181
update golang.org/x/crypto by @braydonk in #1182
Update module google.golang.org/grpc to v1.82.1 [SECURITY] by @renovate-bot in #1184
Prepare release 0.59.0/1.35.0 by @braydonk in #1183

New Contributors

@Angelawork made their first contribution in #1181

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.58.0...v0.59.0

`v0.58.0`: v1.34.0/v0.58.0

Compare Source

What's Changed

googlemanagedprometheus: Add destination_project_quota by @braydonk in #1175
Prepare release v1.34.0/v0.58.0 by @braydonk in #1178

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.57.0...v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

Compare Source

What's Changed

Update module go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp to v1.43.0 [SECURITY] by @renovate-bot in #1146
Update module go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to v1.43.0 [SECURITY] by @renovate-bot in #1145
Update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [SECURITY] by @renovate-bot in #1144
[chore] retry_on_failure is removed from our exporter by @braydonk in #1151
downgrade davecgh/go-spew, pmezard/go-difflib to tagged releases by @thaJeztah in #1152
Update module go.opentelemetry.io/otel/sdk to v1.43.0 [SECURITY] by @renovate-bot in #1149
Update e2e-testing image to fix presubmits by @dashpole in #1155
Update go.opentelemetry.io/collector by @renovate-bot in #1073
Auto comment /gcbrun for dependency updates by @dashpole in #1154
Revert "Auto comment /gcbrun for dependency updates" by @dashpole in #1157
Update module github.com/prometheus/common to v0.67.5 by @renovate-bot in #1156
Bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.4.0 in /tools by @dependabot[bot] in #1118
Update golang.org/x by @renovate-bot in #1008
Combine dependency bumps by @dashpole in #1158
Update All Dependencies by @renovate-bot in #1161
Update all major dependencies by @dashpole in #1164
Update All Dependencies by @renovate-bot in #1163
Add AGENTS.md by @dashpole in #1165
Fix CodeQL permissions to allow uploading results by @dashpole in #1166
collector: bump golang.org/x/net to v0.55.0 to fix GO-2026-5026 by @dashpole in #1170
Migrate impersonate to use cloud.google.com/go/auth by @dashpole in #1169
fix: Support OTLP event_name field in logs exporter by @putcho01 in #1088
exporter/collector/logs: accept string-typed line in sourceLocation by @alliasgher in #1142
exporter/collector/logs: use parsed httpRequest.protocol instead of hardcoded HTTP/1.1 by @alliasgher in #1143
exporter/trace: sanitize invalid UTF-8 in span fields by @alliasgher in #1141
chore: update E2E tests to use centralized async cleanup 0.22.0 by @aabmass in #1171
Add support for cloud run worker pools by @dashpole in #1112
Prerelease 1.33.0/v0.57.0 by @avilevy18 in #1173

New Contributors

@thaJeztah made their first contribution in #1152
@putcho01 made their first contribution in #1088
@alliasgher made their first contribution in #1142

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

apache/beam (github.com/apache/beam/sdks/v2)

`v2.77.0`: Beam 2.77.0 release

Compare Source

We are happy to present the new 2.77.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.77.0, check out the detailed release notes.

Highlights

I/Os

Added schema_update_options to WriteToBigQuery file loads, allowing BigQuery load jobs to add nullable fields or relax required fields when appending data (Python) (#21141).
BigQueryIO now supports reading BigQuery Lakehouse runtime catalog (BigLake metastore) Iceberg tables with the Storage Read API, using 4-part project.catalog.namespace.table identifiers (or a TableReference with a composite catalog.namespace dataset id). Previously such references were silently mis-parsed (Java) (#39597) .
SolaceIO now supports reading and writing binary and text content data payload (Java) (#39875).
ClickHouseIO: support writing Decimal(P, S) / Decimal32/64/128/256 columns (Java) (#39840).
SolaceIO now supports reading and writing user properties (message metadata) (Java) (#40099).
[IcebergIO] AddFiles (IcebergAddFiles in YAML) can evolve the table schema before registering files, with schema_evolution_options, required_columns, incompatible_schema_handling and unverifiable_file_handling (Java/YAML, batch only) (#40144).

New Features / Improvements

(Java/Python) Watch can bound its deduplication state by event time, retiring an output key once the greatest emitted timestamp has moved more than the allowed lateness past it. Java adds Watch.growthOf(...).withTimestampCursor(). Python adds allowed_lateness for the existing timestamp_cursor option (#18459).
(Java) Spark Structured Streaming runner: stateful ParDo with state, timers, @RequiresTimeSortedInput and tagged outputs is now supported in batch mode (#39779).
(Python) Added support for Vertex AI Model Monitoring V2 in RunInference (#39738).
[Flink Runner] Added opt-in static round-robin split assignment for small bounded sources via the new sourceStaticSplitThresholdMb pipeline option. The default of 0 keeps the existing lazy pull-based assignment (#39873).
Added automatic caching of bounded, single-pane side-input views for classic Java Flink DataStream execution (#39866).
(Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

Portable Java SDK now encodes SchemaCoders in a portable way (#34672).
- Original custom Java coder encoding can still be obtained using StreamingOptions.setUpdateCompatibilityVersion("2.76") (#34672).
- Fixes (#36496), (#30276), (#29245).
(Python) TensorRTEngineHandlerNumPy now requires TensorRT 10 or later. TensorRT 8.x is no longer supported, since TensorRT 10 removed the engine binding API the handler was written against (#36306).
- Engines serialized by TensorRT 8.x must be rebuilt, as an engine can only be deserialized by the major version that built it.
- TensorRT 10 and later require a GPU with compute capability 7.5 or higher, which excludes NVIDIA Pascal and Volta GPUs.
- If dropping TensorRT 8.x support is a hard blocker for you, please comment on (#36306).

Bugfixes

(Java) Fixed the Spark runner firing processing-time timers in reverse timestamp order (#39824).
(Java) Fixed the Spark runner dropping the stored watermark of a streaming source with no update in a batch (#39822).
(Python) Fixed incorrect profiler options handling on portable runners (#39613).
(Java) KafkaIO dynamic reads no longer require the obsolete beam_fn_api experiment (#29998).
(Prism) Self-checkpointing splittable DoFns now resume after their requested delay instead of immediately, so polling SDFs no longer busy-spin (#39848).
(Java) MongoDbIO read splitting now preserves non-ObjectId _id types (e.g. string ids) instead of failing to parse the generated range filters (#39900).
(Go) Fixed GCS glob matching silently dropping objects when the glob pattern contains multi-byte characters (#39969).
(Python) Fixed TensorRTEngineHandlerNumPy failing with CUDA_ERROR_INVALID_VALUE on models with a single-element input or output tensor (#36306).
(Python) Fixed PickleCoder/_MemoizingPickleCoder.as_deterministic_coder() raising TypeError instead of returning a working deterministic coder (#28558).

According to git shortlog, the following people contributed to the 2.77.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Aditya Narayan, Ahmed Abualsaud, Alex Bevilacqua, Alexander Pochill, Ali Ebrahim, Andrew Crites, Arun Pandian, Ashwin S, Bruno Volpato, Chamikara Jayalath, Chris Gavin, Claire McGinty, Danny McCormick, Derrick Williams, Eiji Ogiwara, Elia Liu, Fabian Loris, Goutam Adwant, HansMarcus01, Israel Herraiz, Jack McCluskey, Jan Lukavský, Jeremy Schoemaker, Kenneth Knowles, Lalit Yadav, Lawrence Qiu, M Junaid Shaukat, Makoto Nagai, Maksym Tymoshyk, Manvith Panyam, Mattie Fu, Michael Gruschke, Mukesh Bhandarkar, Nicolas Gibanel, Paulius Kuzmickas, Radosław Stankiewicz, Ryan Wigglesworth, Sam Whittle, Sharan Teja M, Shizuma5, Shunping Huang, SreeramaYeshwanthGowd, Tobias Kaymak, Tom Newton, Udit Jain, Vitaly Terentyev, Yi Hu, ZIHAN DAI, akshayjadiyanv, claudevdm, darshan-sj, feefs, junaiddshaukat, kellen, nitinware, parveensania, tvalentyn

`v2.76.0`: Beam 2.76.0 release

Compare Source

We are happy to present the new 2.76.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.76.0, check out the detailed release notes.

Highlights

Added a full Iceberg batch and streaming changelog source (CDC) (#38831)
(Java) Added per-element OpenTelemetry trace propagation across stages in the Dataflow Streaming Runner. Enable it with --experiments=enable_otel_defaults,element_metadata_supported,disable_portable_worker. Cloud Trace incurs additional cost. (#33176)
(Java) Added OpenTelemetry header propagation support for both reads and writes in KafkaIO and PubSubIO. (#33176)
(Java) Added OpenTelemetry tracing support for SpannerIO change streams (#33176)
(Python) JmsIO (IBM MQ, ActiveMQ, and other providers) is now supported in Python via cross-language (#30716).

I/Os

Upgraded Iceberg dependency to 1.11.0 (Java) (#38925).
Add ArrowFlight IO (Java) (#20116).
Added a Delta Lake batch changelog source (CDC) (#39492)

New Features / Improvements

Added GroupIntoBatches transform and the standard
beam:coder:sharded_key:v1 coder to the Go SDK, along with
beam.Coder.IsDeterministic, beam.PCollection.WindowingStrategy,
and coder.RegisterDeterministicCoder for opt-in deterministic
custom coders (Go) (#19868).
TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to
encode finished bitset. SentinelBitSetCoder and BitSetCoder are state
compatible. Both coders can decode encoded bytes from the other coder
(#38139).
(Python) Removed the envoy-data-plane (and transitive betterproto) dependency; EnvoyRateLimiter now uses a small vendored protobuf definition instead, resolving dependency conflicts for downstream projects (#37854).
(Java) Supported acknowledge mode for JmsIO (#39253).
(Python) Staged files directory is now automatically added to sys.path on the Python SDK worker at startup. This makes Python files provided via the '--files_to_stage' pipeline option importable in the pipeline code and makes it easier to initialize Python SDK harness at startup via the --beam_plugins pipeline option. For more information, see the Staging Individual Files section of the dependency management docs. This behavior can be disabled by passing the '--experiments=no_staged_dir_in_sys_path' pipeline option (#39431).
(Python) Added equal_to_approx, an assert_that matcher that compares numeric pipeline outputs with a configurable tolerance (#18028).
(Python) Timestamp now supports variable subsecond precision, up to nanoseconds. The portable
beam:logical_type:timestamp:v1 logical type now maps to Python's Timestamp (#39344).
(Python) Added UnboundedSource, an interface for reading an infinite stream of records with checkpointing, watermark reporting, and bundle finalization. Read one with beam.io.Read
(#19137).
(Python) Added Watch, a transform that polls a growing set of outputs for each input element, deduplicates outputs across poll rounds, and stops per a user-supplied termination condition
(#21521).
(Python) Added support to analyze core dumps created after python worker segmentation faults with pystack (or gdb if installed) using the --profiler_agent=coredump pipeline option. (#39484).
(Python) Added Sample.Any, the Python equivalent of Java's Sample.any, which returns up to n arbitrary elements from a PCollection (#18552).

Breaking Changes

(Python) Removed google-perftools from the SDK container images. Users who wish to use --profiler_agent=tcmalloc should install google-perftools APT package in their custom container images separately (#39323).
[IcebergIO] Reading a timestamptz column will now return a Timestamp.MICROS Beam logical type to preserve
microseconds (the old Beam Schema.FieldType#DATETIME primitive type truncates past milliseconds). This may break
the following use cases when a timestamptz column is present:
- Existing streaming read pipelines.
- Managed Iceberg batch reads when upgraded from an older SDK.
- Python reads.
Use pipeline option --updateCompatibilityVersion=2.75.0 (or any older version) to keep the old behavior (#39344).
DoFn.process returning a str, bytes, or dict (instead of an iterable wrapping one) now raises a TypeError rather than silently iterating per-character/byte/key (Python) (#18712).
(Java) Added DRAINING and DRAINED states to PipelineResult, including runner state mappings and Dataflow update handling (#39020).
(Python) Typehints of dataclass fields are honored during type inferences. To restore the behavior of fallback-to-any,
use pipeline option --exclude_infer_dataclass_field_type (#38797).
However fixing forward is recommended.
(Java) IcebergIO and projects that use it must now be built with Java 17 or later as a result of Iceberg 1.11.0 upgrade (#38925).

Bugfixes

Fixed unresolved runtime ValueProvider options being stringified in Python Dataflow Flex Templates (#39499).
Fixed unbounded checkpoint state growth for splittable DoFns that self-checkpoint on the portable Flink runner (Java) (#27648).
Improved Java pipeline performance by avoiding repeated DoFn type descriptor resolution when creating cached invokers (#39309).
(Python) Fixed a memory leak in Python SDK caused by storing exceptions with potentially large stack frames in a cache (#39406).

Known Issues

(Java) Projects using the Flink runner with Flink 2.1 or later alongside libraries requiring org.lz4:lz4-java (e.g., Kafka clients) may encounter a Gradle capability conflict, because Flink 2.1+ ships at.yawk.lz4:lz4-java which declares the same capability. To resolve, add a capabilitiesResolution rule to your build.gradle that selects at.yawk.lz4:lz4-java (#38947).

According to git shortlog, the following people contributed to the 2.76.0 release. Thank you to all contributors!

ADITYA RAJ, Abdelrahman Ibrahim, Ahmed Abualsaud, Alexander Kolb, Amar3tto, Andrew Crites, Arun Pandian, Aryankn29, Atharva Moroney, Avi Kondareddy, Bruno Volpato, Chamikara Jayalath, Chris Qiu, Claire McGinty, Danny McCormick, Derrick Williams, Elia Liu, Florian TREHAUT, Guflly, HansMarcus01, Ian Liao, Ivy Xu, Jack McCluskey, KRITI MITTAL, Kenneth Knowles, Lalit Yadav, Manvith Panyam, Minh Vu, Nikita Grover, PRADDZY, Peter Tran, Radosław Stankiewicz, Ryan Wigglesworth, Shahar Epstein, Shunping Huang, SreeramaYeshwanthGowd, Steven van Rossum, Tarun Annapareddy, Tejas Iyer, Tobias Kaymak, Tomasz Wojdat, Utkarsh Parekh, Venkata Bharath Malapati, Vitaly Terentyev, Yi Hu, ZIHAN DAI, aibrahiim, akshayjadiyanv, atognolas, claudevdm, janaom, jayjayakumar, raman118, shunping, tvalentyn

`v2.75.0`: Beam 2.75.0 release

Compare Source

We are happy to present the new 2.75.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.75.0, check out the detailed release notes.

Highlights

Python SDK now supports memory profiling with Memray (#38853).
(Python) Added Qdrant VectorDatabaseWriteConfig implementation (#38141).

I/Os

Support for reading from Delta Lake added (Java) (#38551).
ClickHouseIO: support writing DateTime64(precision[, 'timezone']) columns with sub-second precision (Java) (#38466).
Upgraded IO Expansion Service to Java 17 ([#38974](h

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-05-13T02:57:18Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

2 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.25.9` -> `1.26.4`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.43.0` -> `v1.44.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.43.0` -> `v1.44.0`

red-hat-konflux · 2026-07-05T17:40:07Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label May 12, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch from 962162f to 2efd0c6 Compare May 13, 2026 02:57

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 17 times, most recently from 68fd81e to 30b0338 Compare May 22, 2026 06:26

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 10 times, most recently from 01893b3 to 3f52370 Compare May 28, 2026 02:54

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 15 times, most recently from a5cc312 to e38fdd2 Compare June 5, 2026 14:22

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 13 times, most recently from 97e43a3 to df4bcda Compare June 20, 2026 18:26

chore(deps): update go dependencies

ec3c162

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com> Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Navigation Menu

Repository navigation

chore(deps): update go dependencies - #684

chore(deps): update go dependencies#684
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

red-hat-konflux Bot commented May 12, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented May 13, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Jul 5, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented May 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v0.25.3

What's Changed

New Contributors

v0.24.0

v0.23.3: auth: v0.23.3

Bug Fixes

v0.23.2: auth: v0.23.2

Bug Fixes

v0.23.1: auth: v0.23.1

Bug Fixes

v0.23.0

v0.22.0

v0.21.0

v0.62.0: v1.38.0/v0.62.0

What's Changed

v0.61.0: v1.37.0/v0.61.0

What's Changed

v0.60.0: v1.36.0/v0.60.0

What's Changed

New Contributors

v0.59.0

What's Changed

New Contributors

v0.58.0: v1.34.0/v0.58.0

What's Changed

v0.57.0: v1.33.0/v0.57.0

What's Changed

New Contributors

v2.77.0: Beam 2.77.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

v2.76.0: Beam 2.76.0 release

Highlights

I/Os

New Features / Improvements

Breaking Changes

Bugfixes

Known Issues

v2.75.0: Beam 2.75.0 release

Highlights

I/Os

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented May 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented Jul 5, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented May 12, 2026 •

edited

Loading

`v0.25.3`

`v0.24.0`

`v0.23.3`: auth: v0.23.3

`v0.23.2`: auth: v0.23.2

`v0.23.1`: auth: v0.23.1

`v0.23.0`

`v0.22.0`

`v0.21.0`

`v0.62.0`: v1.38.0/v0.62.0

`v0.61.0`: v1.37.0/v0.61.0

`v0.60.0`: v1.36.0/v0.60.0

`v0.59.0`

`v0.58.0`: v1.34.0/v0.58.0

`v0.57.0`: v1.33.0/v0.57.0

`v2.77.0`: Beam 2.77.0 release

`v2.76.0`: Beam 2.76.0 release

`v2.75.0`: Beam 2.75.0 release

red-hat-konflux Bot commented May 13, 2026 •

edited

Loading