chore(deps): Bump the go-dependencies group across 1 directory with 5 updates

[dependabot]

Bumps the go-dependencies group with 5 updates in the / directory:

Package	From	To
github.com/hashicorp/go-metrics	0.5.4	0.6.0
github.com/minio/minio-go/v7	7.2.0	7.2.1
github.com/opentracing-contrib/go-grpc	0.1.3	0.1.4
golang.org/x/net	0.55.0	0.56.0
go.opentelemetry.io/collector/pdata	1.60.0	1.61.0

Updates github.com/hashicorp/go-metrics from 0.5.4 to 0.6.0

Release notes

Sourced from github.com/hashicorp/go-metrics's releases.

v0.6.0

What's Changed

• Added a RunBackgroundCleanup method to the Prometheus sink that periodically clears expired metrics if they are not collected. This is available only with the hashicorpmetrics build tag.
• DataDog metrics will now include a trailing newline, allowing dogstatsd agent operators to enable truncation detection via dogstatsd_eol_required.
• Dependency and toolchain updates to bring dependencies current on upstream security updates.

Full Changelog: hashicorp/go-metrics@v0.5.4...v0.6.0

Commits

• 794fef7 update go.mod to current oldstable (#209)
• 163ebc8 [chore] : Bump the go group across 1 directory with 7 updates (#187)
• 536d702 Remove test dependency on custom library (#208)
• 8008473 CI: update checks and copywrite config (#207)
• 22b1078 [chore] : Bump the actions group across 1 directory with 4 updates (#198)
• 30cb4af prometheus: periodically clear expired metrics (#206)
• ff4b5d9 compliance: fix invalid team from CODEOWNERS file (#205)
• 4f22c66 Merge pull request #204 from hashicorp/remove-ip-compliance-codeowner
• 5da556b Add nomad-eng, consul-core, and vault-core as co-owners per reviewer feedback
• 1f5763d Remove ip-compliance team from CODEOWNERS, transfer ownership to raft-force
• Additional commits viewable in compare view

Updates github.com/minio/minio-go/v7 from 7.2.0 to 7.2.1

Commits

• 7e34713 feat: support in mc inventory for custom run schedule (#2244)
• 016d0fd feat: stream GetObjectAnnotation payload via io.ReadCloser (#2243)
• 6c51637 feat: stream PutObjectAnnotation payload via io.ReadSeeker (#2242)
• 07c682a feat: add object annotation client APIs (#2241)
• 53b504a fix: caching defer bug (#2237)
• 291e83f add new aws region ap-southeast-6 (#2234)
• See full diff in compare view

Updates github.com/opentracing-contrib/go-grpc from 0.1.3 to 0.1.4

Release notes

Sourced from github.com/opentracing-contrib/go-grpc's releases.

v0.1.4

What's Changed

🐛 Bug Fixes

• Fix issue where successful server streaming calls can incorrectly be marked as failing due to context cancellation by @​charleskorn in opentracing-contrib/go-grpc#16

⬆️ Dependencies

• Update lucacome/draft-release action to v2.2.0 by @​renovate[bot] in opentracing-contrib/go-grpc#73
• Update actions/dependency-review-action action to v5 by @​renovate[bot] in opentracing-contrib/go-grpc#75
• Update module google.golang.org/grpc to v1.81.1 by @​renovate[bot] in opentracing-contrib/go-grpc#74
• Update actions/checkout action to v7 by @​renovate[bot] in opentracing-contrib/go-grpc#76

New Contributors

• @​charleskorn made their first contribution in opentracing-contrib/go-grpc#16

Full Changelog: opentracing-contrib/go-grpc@v0.1.3...v0.1.4

Commits

• c961bd5 Update actions/checkout action to v7 (#76)
• ac7cf9e Fix issue where successful server streaming calls can incorrectly be marked a...
• bc171b2 Update module google.golang.org/grpc to v1.81.1 (#74)
• bbedf6f Update actions/dependency-review-action action to v5 (#75)
• 2f88a58 Update lucacome/draft-release action to v2.2.0 (#73)
• See full diff in compare view

Updates golang.org/x/net from 0.55.0 to 0.56.0

Commits

• 9e7fdbf internal/http3: fix wrong argument being given when validating header value
• b686e5f internal/http3: add gzip support to transport
• 8a34885 go.mod: update golang.org/x dependencies
• 72eaf98 dns/dnsmessage: correctly validate SVCB record parameter order
• 82e7868 dns/dnsmessage: avoid panic when parsing SVCB record with truncated data
• b64f1fa internal/http3: add server support for "Trailer:" magic prefix
• 2707ee2 internal/http3: implement HTTP/3 clientConn methods
• 31358cc internal/http3: snapshot response headers at WriteHeader time
• 8ecbaa9 html: don't adjust xml:base
• 8ae811a html: properly handle end script tag in fragment mode
• Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/pdata from 1.60.0 to 1.61.0

Release notes

Sourced from go.opentelemetry.io/collector/pdata's releases.

v1.61.0/v0.155.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.155.0

End User Changelog

🛑 Breaking changes 🛑

• pkg/confighttp: Remove stabilized gate confighttp.framedSnappy (#15420)
• pkg/configoptional: Remove stabilized gate configoptional.AddEnabledField. (#15421)
• pkg/confmap: Remove stabilized featuregate confmap.newExpandedValueSanitizer (#15418)
• pkg/exporterhelper: Remove stable gate exporter.PersistRequestContext. (#15424)
• pkg/otelcol: Remove stable gate otelcol.printInitialConfig (#15425)
• pkg/service: Remove stable featuregate telemetry.UseLocalHostAsDefaultMetricsAddress (#15419)
• pkg/xpdata: Remove stable gate pdata.enableRefCounting. (#15426)
• processor/memory_limiter: Rename deprecated memory limiter metrics to include the memory_limiter prefix (e.g. otelcol_processor_memory_limiter_*) to clarify they are specific to this processor. (#11203)

🚀 New components 🚀

• cmd/schemagen: Move the schemagen CLI from opentelemetry-collector-contrib to this repository as cmd/schemagen. (#14543) The tool's source is identical to the upstream contrib version (github.com/open-telemetry/opentelemetry-collector-contrib/cmd/schemagen) except for the module path and the test fixtures' namespace, which now reflect the collector module (go.opentelemetry.io/collector/cmd/schemagen). A contrib-only integration test that pointed at three contrib components is removed; contrib's existing make generate-schemas + git-diff CI continues to exercise the FactoryMaps feature against real-world components.

💡 Enhancements 💡

• cmd/mdatagen: Add support for versioned metrics (#15309) Allows metadata to specify versioned metrics for migrating to new semantic conventions. There are two scenarios catered for when the metric name stays the same during migration. When a metric name stays the same but its type differs, just the latest metric is emitted with the new type. When a metric name stays the same but its attributes differ, the latest version is emitted with combined attributes during the migration period.

• cmd/schemagen: Add overlayFile support to deep-merge hand-curated schema fragments into generated schemas. (#14543) Components can declare an overlayFile in .schemagen.yaml pointing to a YAML file whose keys are recursively merged into the auto-generated schema after generation. This allows injecting descriptions, constraints, or additional properties that cannot be derived from Go types. Originally added to the contrib copy of cmd/schemagen in open-telemetry/opentelemetry-collector-contrib#48917 and brought over with the tool in this move.

• cmd/schemagen: Add -p flag to specify a custom Go package pattern for the config struct. (#14543) The new -p flag lets callers override the default . package pattern with an arbitrary Go package selector (e.g. a sub-package whose Config type schemagen should walk). Originally added to the contrib copy of cmd/schemagen in

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.61.0/v0.155.0

🛑 Breaking changes 🛑

• cmd/mdatagen: Remove the reaggregation_enabled metadata setting and always generate per-metric reaggregation config. (#15305) Legacy metadata files that still contain reaggregation_enabled are accepted, but the value is ignored.

🚩 Deprecations 🚩

• pkg/service: Deprecate service.Settings.CollectorConf and extensioncapabilities.ConfigWatcher in favor of service.Settings.ConfigSnapshot and extensioncapabilities.ConfigSnapshotWatcher, which provide effective and unexpanded configuration representations. (#15432)

💡 Enhancements 💡

• pkg/config/configmiddleware: Migrated middleware config to schema based (#15440)
• pkg/pdata: Add DisallowUnknownFields option to JSONUnmarshaler in plog, ptrace, pmetric, pprofile, and xpdata to error on JSON fields not defined by the OTLP schema. (#15279) When DisallowUnknownFields is false (the default), unknown fields are silently ignored, matching the previous behavior. Warning: enabling this option breaks forwards compatibility with future evolutions of the OTLP format, as fields added to the format in newer versions will be rejected as unknown.

🧰 Bug fixes 🧰

• cmd/mdatagen: Fix known acronyms at the end of generated Go identifiers to be all-caps, same as in any other position (#15438)

Commits

• 41da2fb [chore] Prepare release v1.61.0/v0.155.0 (#15479)
• e4e58cd [cmd/mdatagen] Remove reaggregation feature gate (#15385)
• d3d6e34 Update All golang.org/x packages (#15448)
• f3bace0 [pkg/config/configmiddleware] Migrate middleware config to schema based (#15440)
• acb8813 [chore][cmd/mdatagen] Prevent overwriting authoritative definitions with ref-...
• 668fc59 [pkg/service] Add config snapshot watcher (#15399)
• 415d3dc docs: fix typo derefenceable -> dereferenceable in configoptional (#15465)
• 7f41344 [featuregate] Fix incorrect ToVersion comment (#15457)
• 6951ec5 processor/memorylimiter: rename deprecated metrics to include memory_limiter ...
• 8ab0da4 [processor] Clarify recommended processor ordering with inline reasoning (#15...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions