This patch updates the Go toolchain and container trust store following the eMudhra CA incident. It also includes dependency updates and aligns the OpenTelemetry log exporters.
N.B. Building from source now requires Go 1.27.3 or later. Container builds pull fresh base images.
What's Changed
- chore(deps): Bump cloud.google.com/go/storage from 1.67.1 to 1.68.0 by @dependabot[bot] in #1097
- chore(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc from 0.18.0 to 0.21.0 by @dependabot[bot] in #1090
- chore(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace from 1.43.0 to 1.45.0 by @dependabot[bot] in #1091
- chore(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.42.0 to 1.45.0 by @dependabot[bot] in #1092
- chore(deps): Bump the actions group across 1 directory with 6 updates by @dependabot[bot] in #1108
- chore(deps): Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp from 1.43.0 to 1.45.0 by @dependabot[bot] in #1094
- chore(deps): Bump google.golang.org/api from 0.297.0 to 0.305.0 by @dependabot[bot] in #1096
- chore(deps): Bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.1 by @dependabot[bot] in #1098
- chore(deps): Bump the gomod group across 1 directory with 6 updates by @dependabot[bot] in #1107
- fix(build): require eMudhra trust fixes by @leogr in #1110
- chore(deps): Bump docker/login-action from 4.6.0 to 4.7.0 in the actions group by @dependabot[bot] in #1120
- chore(deps): Bump github.com/go-chi/chi/v5 from 5.3.0 to 5.4.0 by @dependabot[bot] in #1111
- chore(deps): Bump the gomod group with 2 updates by @dependabot[bot] in #1112
- chore(deps): Bump github.com/onsi/gomega from 1.43.0 to 1.44.0 by @dependabot[bot] in #1113
- chore(deps): Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.113.0 to 1.114.5 by @dependabot[bot] in #1114
- chore(deps): Bump github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.10.10 to 1.11.1 by @dependabot[bot] in #1115
- chore(deps): Bump google.golang.org/api from 0.305.0 to 0.308.0 by @dependabot[bot] in #1116
- chore(deps): Bump cloud.google.com/go/storage from 1.68.0 to 1.70.0 by @dependabot[bot] in #1117
- chore(deps): Bump github.com/sigstore/sigstore from 1.10.10 to 1.11.1 by @dependabot[bot] in #1118
- chore(deps): Bump github.com/docker/cli from 29.8.0+incompatible to 29.9.2+incompatible by @dependabot[bot] in #1119
Full Changelog: v0.14.2...v0.14.3