fix(deps): update module golang.org/x/crypto to v0.58.0

chore(deps): update golang docker tag to v1.27.2 (#1004 )
fix: release to the Gitea API on its public URL (#997 )
2026-10-12 17:24:39 +00:00 · 2026-10-08 22:12:39 +00:00 · 2026-10-07 21:51:04 +00:00 · 2026-10-07 21:50:21 +00:00 · 2026-10-07 21:30:25 +00:00 · 2026-10-07 20:35:47 +00:00
7 changed files with 33 additions and 32 deletions
@@ -61,11 +61,15 @@ jobs:
        with:
          version: '~> v2'
          args: check
-      - name: Test release build
+      - name: Install goreleaser
        uses: goreleaser/goreleaser-action@v7
        with:
          version: '~> v2'
-          args: release --snapshot --clean
+          install-only: true
+      # Without the runner's GOCACHEPROG (gobuildcache): goreleaser's parallel
+      # go builds contend for its per-entry locks and time out.
+      - name: Test release build
+        run: env -u GOCACHEPROG goreleaser release --snapshot --clean

  build:
    needs: [check, vulnerabilities, check-release]
@@ -5,9 +5,6 @@ on:
    tags:
      - 'v*'

-env:
-  RELEASE_TOKEN_FILE: /runner-secrets/release-token
-
 jobs:
  release:
    runs-on: ubuntu-latest
@@ -30,4 +27,5 @@ jobs:
        run: |
          GITEA_TOKEN=$(cat "${RELEASE_TOKEN_FILE}")
          export GITEA_TOKEN
-          goreleaser release --clean
+          # Without GOCACHEPROG: parallel builds contend for gobuildcache's locks.
+          env -u GOCACHEPROG goreleaser release --clean
@@ -2,7 +2,7 @@ project_name: unbound-schemas
 version: 2

 gitea_urls:
-  api: http://gitea-http.gitea.svc.cluster.local:3000/api/v1
+  api: https://git.unbound.se/api/v1
  download: https://gitea.unbound.se

 env:
@@ -1,4 +1,4 @@
-FROM amd64/golang:1.27.1@sha256:2c9f73fbc9fe381c63ba57bcbab4ea1c9135604011985a0891bc5fe5d1febfca as modules
+FROM amd64/golang:1.27.2@sha256:9e036bef9c3cd035cae4aeff523b3997c3c8aa993b13d112a71ea90143e87e48 as modules
 WORKDIR /build
 ADD go.* /build
 RUN go mod download
@@ -21,18 +21,17 @@ require (
 	github.com/stretchr/testify v1.12.1
 	github.com/vektah/gqlparser/v2 v2.5.60
 	github.com/wundergraph/graphql-go-tools/v2 v2.26.0
-	go.opentelemetry.io/contrib/bridges/otelslog v0.20.1
+	go.opentelemetry.io/contrib/bridges/otelslog v0.21.0
 	go.opentelemetry.io/otel v1.47.0
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.47.0
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.47.0
 	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.23.0
-	go.opentelemetry.io/otel/log v1.47.0
 	go.opentelemetry.io/otel/sdk v1.47.0
 	go.opentelemetry.io/otel/sdk/log v1.47.0
 	go.opentelemetry.io/otel/sdk/metric v1.47.0
 	go.opentelemetry.io/otel/trace v1.47.0
-	golang.org/x/crypto v0.57.0
-	golang.org/x/sync v0.23.0
+	golang.org/x/crypto v0.58.0
+	golang.org/x/sync v0.24.0
 	gopkg.in/yaml.v3 v3.0.1
 )

@@ -81,16 +80,17 @@ require (
 	github.com/wundergraph/go-arena v1.3.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.47.0 // indirect
+	go.opentelemetry.io/otel/log v1.47.0 // indirect
 	go.opentelemetry.io/otel/metric v1.47.0 // indirect
 	go.opentelemetry.io/proto/otlp v1.11.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.2 // indirect
 	go.yaml.in/yaml/v3 v3.0.5 // indirect
 	golang.org/x/mod v0.41.0 // indirect
-	golang.org/x/net v0.59.0 // indirect
-	golang.org/x/sys v0.48.0 // indirect
-	golang.org/x/text v0.42.0 // indirect
-	golang.org/x/tools v0.49.0 // indirect
+	golang.org/x/net v0.60.0 // indirect
+	golang.org/x/sys v0.49.0 // indirect
+	golang.org/x/text v0.43.0 // indirect
+	golang.org/x/tools v0.51.0 // indirect
 	google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc // indirect
 	google.golang.org/genproto/googleapis/rpc v0.0.0-20260928230214-8a89bd6388cc // indirect
 	google.golang.org/grpc v1.83.2 // indirect
@@ -227,8 +227,8 @@ github.com/wundergraph/graphql-go-tools/v2 v2.26.0 h1:LkBu77I+Mp7lAfHulnHgug7W+n
 github.com/wundergraph/graphql-go-tools/v2 v2.26.0/go.mod h1:2+FpG5/GRCFYw+fU8jmid4bF+362KtCio5Fo7fzNvhU=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/contrib/bridges/otelslog v0.20.1 h1:5sHc4ToTFjfSZCtGAAM6jPunICAmJX73htv372T4ipc=
-go.opentelemetry.io/contrib/bridges/otelslog v0.20.1/go.mod h1:oa6kgvyz/3GYW04dohd0++xJIH4xdQY8PAbpeCMaM8M=
+go.opentelemetry.io/contrib/bridges/otelslog v0.21.0 h1:/CdgE52i1OEPHhsGUqrggYNRaZy4v4YgVenGd52dRBI=
+go.opentelemetry.io/contrib/bridges/otelslog v0.21.0/go.mod h1:9pBdbVbuehIDzxN4accnzzxEUPT8Nq7grbZMo+J1VN4=
 go.opentelemetry.io/otel v1.47.0 h1:j7ALJ/zgkS7Z6aeJW09p8VC9804bC+PpeTfCD4XPnOM=
 go.opentelemetry.io/otel v1.47.0/go.mod h1:8wS9O2qfXrYrzp6hIF/HOYJJf/wIhFPhR2xLuP+iXQU=
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.47.0 h1:7kszRN4Ze5GeAkUnBjBSUIunVBMA+mZIG04auueqguM=
@@ -267,31 +267,31 @@ go.yaml.in/yaml/v3 v3.0.5 h1:N6y/pJk8buWs9NY5ERU2HSMfm+IuD/OtfdAnq6kESPw=
 go.yaml.in/yaml/v3 v3.0.5/go.mod h1:HVTZu1O7/Vkt2N+BFy8Zza+lnLsABggaTM2ZpNIGuKg=
 golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w=
 golang.org/x/crypto v0.0.0-20190426145343-a29dc8fdc734/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI=
-golang.org/x/crypto v0.57.0 h1:3ZVCjf8Ggz7zneR/EHRVx68Ctf+2pmIMP2UFhh9cC6M=
-golang.org/x/crypto v0.57.0/go.mod h1:Fdz0i5U6CoizGwLda9DttjSk6qlZo25zYNtR+ycvuZA=
+golang.org/x/crypto v0.58.0 h1:COkYLr4k7nDI4r6QtMML2AfzeIswWHAJthLS6K/M/54=
+golang.org/x/crypto v0.58.0/go.mod h1:Xh+kl5A+M0gMiWDytH2Hhr5Z7WbNCpv/eB/EFgfSk+w=
 golang.org/x/mod v0.41.0 h1:qJmnOUb4YB+FsEuM3HcWucdZASCPGhsX6uljO6pog0c=
 golang.org/x/mod v0.41.0/go.mod h1:Ek9pY8RKWXwsWvd3rQiHYtMqkjSUV+s1Rj7j4H5Ur6o=
 golang.org/x/net v0.0.0-20180906233101-161cd47e91fd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4=
 golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg=
 golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s=
-golang.org/x/net v0.59.0 h1:5zfYln+w5XCxwrnMMJPufRgNoXEaGxl0wo5GqPXyues=
-golang.org/x/net v0.59.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
+golang.org/x/net v0.60.0 h1:79p50tfZlm0J9YfoDsSi639qSXNGVwEzOPLCxM2FsYU=
+golang.org/x/net v0.60.0/go.mod h1:2DA/G1UfVbCpQPeWTmMPGY7Cs2PkBkwu743bVX5PIVg=
 golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM=
-golang.org/x/sync v0.23.0 h1:KameEIfc1IkluZyXWLn39Wd4tURc6GbCiISGiZm2bQk=
-golang.org/x/sync v0.23.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
+golang.org/x/sync v0.24.0 h1:iqiDrGoDgyuvAKrhLQthUEzU/R378N78gXbBjxed7oA=
+golang.org/x/sync v0.24.0/go.mod h1:sUUOizhqBxiL6pEWpqNLUiaJn1ShEbZ6BBqskPbjZm0=
 golang.org/x/sys v0.0.0-20180909124046-d0be0721c37e/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY=
 golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs=
-golang.org/x/sys v0.48.0 h1:bbX/i/6MgT9BVLM9RT1thmxL04yeTAhbEz4SyadbXoo=
-golang.org/x/sys v0.48.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
+golang.org/x/sys v0.49.0 h1:XbzkgYJHdqh/8m2Uu0W/dQv8nktxx4BFHp1M0gROTXA=
+golang.org/x/sys v0.49.0/go.mod h1:hNLxWAXmnKAxqDtdwIYC4bM9oQPEecfsnNMuSxOs3og=
 golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ=
 golang.org/x/text v0.3.2/go.mod h1:bEr9sfX3Q8Zfm5fL9x+3itogRgK3+ptLWKqgva+5dAk=
-golang.org/x/text v0.42.0 h1:JbOZXgfeCPU9gacVtYliJqOhD+zhrEqK4LfdpmlUZqI=
-golang.org/x/text v0.42.0/go.mod h1:ojzP1Z+2QtioaF8DTtO8K5q7JWVVYwZKenzujK0Zd0E=
+golang.org/x/text v0.43.0 h1:1QivrlhwAsnMOcqgOdl9my7s9OyZl8O5/UGUTJVXoWc=
+golang.org/x/text v0.43.0/go.mod h1:hbSIYA/amXcRXTFSZqh8tWHEoqRvvbKPJ2uz/KU+a+s=
 golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ=
-golang.org/x/tools v0.49.0 h1:3NI7VXzL9+1WZD52Dx2ttoPwD5DWrFGpl9mFZDlmisI=
-golang.org/x/tools v0.49.0/go.mod h1:SJNXV9DBKT0UbdttsQjbfJlAE/q+y36++zo3uL3N0Oo=
+golang.org/x/tools v0.51.0 h1:k4Xc/1Om9jwkBJBo4NVLMSARBoWtK10mx+W5BnXCeAI=
+golang.org/x/tools v0.51.0/go.mod h1:9eEncMayCV6zRMGhR5eZEC2iBx98qWcF1HZ9Z7wJOoA=
 gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
 gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
 google.golang.org/genproto/googleapis/api v0.0.0-20260928230214-8a89bd6388cc h1:rZHRz0ogq4Pid1IKtA/ivHi8XONVF5tqUQXA2TtgpkE=
@@ -12,7 +12,6 @@ import (
 	"go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp"
 	"go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp"
 	"go.opentelemetry.io/otel/exporters/stdout/stdoutlog"
-	"go.opentelemetry.io/otel/log/global"
 	"go.opentelemetry.io/otel/propagation"
 	"go.opentelemetry.io/otel/sdk/log"
 	"go.opentelemetry.io/otel/sdk/metric"
@@ -75,7 +74,7 @@ func SetupOTelSDK(ctx context.Context, enabled bool, serviceName, buildVersion,
 	processor := log.NewSimpleProcessor(logExporter)
 	logProvider := log.NewLoggerProvider(log.WithProcessor(processor))

-	global.SetLoggerProvider(logProvider)
+	otel.SetLoggerProvider(logProvider)
 	shutdownFuncs = append(shutdownFuncs, logProvider.Shutdown)

 	exp, err := otlpmetrichttp.New(ctx)
Author	SHA1	Message	Date
renovate	3d83a6a592	fix(deps): update module golang.org/x/crypto to v0.58.0 schemas / check (pull_request) Waiting to run Details schemas / vulnerabilities (pull_request) Waiting to run Details schemas / check-release (pull_request) Waiting to run Details schemas / build (pull_request) Waiting for needed jobs Details pre-commit / pre-commit (pull_request) Waiting to run Details renovate/stability-days Updates have met minimum release age requirement Details	2026-10-12 17:24:39 +00:00
renovate	280fd5d610	chore(deps): update golang docker tag to v1.27.2 (#1004 ) schemas / build (push) Successful in 7m33s Details schemas / deploy-prod (push) Failing after 23s Details schemas / check (push) Successful in 2m14s Details schemas / vulnerabilities (push) Successful in 2m26s Details schemas / check-release (push) Successful in 3m55s Details pre-commit / pre-commit (push) Successful in 4m9s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 41s Details Unbound Release / Create Tag (push) Successful in 11s Details Unbound Release / Check Preconditions (push) Successful in 21s Details Unbound Release / Create Release (push) Skipped Details Release / release (push) Successful in 1m14s Details	2026-10-08 22:12:39 +00:00
argoyle	2e63eb00b3	fix: release to the Gitea API on its public URL (#997 ) schemas / vulnerabilities (push) Successful in 3m22s Details schemas / check-release (push) Successful in 3m49s Details schemas / check (push) Successful in 3m54s Details Unbound Release / Check Preconditions (push) Successful in 48s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 46s Details pre-commit / pre-commit (push) Successful in 2m34s Details Unbound Release / Create Tag (push) Successful in 12s Details Release / release (push) Successful in 2m11s Details schemas / build (push) Successful in 15m1s Details schemas / deploy-prod (push) Failing after 32s Details goreleaser's gitea_urls.api still pointed at the AWS in-cluster service (gitea-http.gitea.svc.cluster.local), which does not resolve from the Frostmoln runner. Use https://git.unbound.se/api/v1. Also drop RELEASE_TOKEN_FILE=/runner-secrets/release-token (the AWS runner mount); the Frostmoln runner exports RELEASE_TOKEN_FILE itself. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #997	2026-10-07 21:51:04 +00:00
renovate	db7980c556	fix(deps): update module go.opentelemetry.io/contrib/bridges/otelslog to v0.21.0 (#993 ) schemas / vulnerabilities (push) Successful in 3m8s Details schemas / check-release (push) Successful in 3m44s Details schemas / check (push) Successful in 4m27s Details Unbound Release / Check Preconditions (push) Successful in 54s Details Unbound Release / Create Release (push) Skipped Details pre-commit / pre-commit (push) Successful in 7m3s Details Unbound Release / Create Tag (push) Successful in 22s Details Release / release (push) Successful in 5m57s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m8s Details schemas / build (push) Successful in 16m15s Details schemas / deploy-prod (push) Failing after 29s Details This PR contains the following updates: \| Package \| Change \| [Age](https://docs.renovatebot.com/merge-confidence/) \| [Confidence](https://docs.renovatebot.com/merge-confidence/) \| \|---\|---\|---\|---\| \| [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) \| `v0.20.1` → `v0.21.0` \| ![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fcontrib%2fbridges%2fotelslog/v0.21.0?slim=true) \| ![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fcontrib%2fbridges%2fotelslog/v0.20.1/v0.21.0?slim=true) \| --- ### Release Notes <details> <summary>open-telemetry/opentelemetry-go-contrib (go.opentelemetry.io/contrib/bridges/otelslog)</summary> ### [`v0.21.0`](https://github.com/open-telemetry/opentelemetry-go-contrib/releases/tag/v0.21.0) #### 0.21.0 - 2021-06-18 ##### Fixed - Dockerfile based examples for `otelgin` and `otelmacaron`. ([#767](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/767)) ##### Changed - Supported minimum version of Go bumped from 1.14 to 1.15. ([#787](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/787)) - EKS Resource Detector now use the Kubernetes Go client to obtain the ConfigMap. ([#813](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/813)) ##### Removed - Remove service name from `otelmongodb` configuration and span attributes. ([#763](https://github.com/open-telemetry/opentelemetry-go-contrib/issues/763)) </details> --- ### Configuration 📅 Schedule: (UTC) - Branch creation - At any time (no schedule defined) - Automerge - At any time (no schedule defined) 🚦 Automerge: Enabled. ♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 Ignore: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate CLI](https://github.com/renovatebot/renovate). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xMzMuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjEzMy4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119--> Reviewed-on: https://git.unbound.se/unboundsoftware/schemas/pulls/993 Co-authored-by: Renovate Bot <renovate@unbound.se>	2026-10-07 21:50:21 +00:00
renovate	7f0a184805	fix(deps): update module github.com/vektah/gqlparser/v2 to v2.5.60 (#995 ) schemas / vulnerabilities (push) Successful in 2m53s Details schemas / check (push) Successful in 3m47s Details schemas / check-release (push) Successful in 4m10s Details Unbound Release / Check Preconditions (push) Successful in 1m20s Details Unbound Release / Create Release (push) Skipped Details Unbound Release / Create Tag (push) Successful in 37s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 40s Details Release / release (push) Successful in 2m0s Details pre-commit / pre-commit (push) Successful in 5m1s Details schemas / build (push) Successful in 10m7s Details schemas / deploy-prod (push) Failing after 20s Details	2026-10-07 21:30:25 +00:00
renovate	f8894540d5	chore(deps): update golang:1.27.1 docker digest to 45639bc (#996 ) schemas / vulnerabilities (push) Successful in 2m24s Details schemas / check-release (push) Successful in 2m30s Details Unbound Release / Create Release (push) Skipped Details schemas / check (push) Successful in 2m36s Details Unbound Release / Check Preconditions (push) Successful in 15s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m4s Details Unbound Release / Create Tag (push) Successful in 48s Details Release / release (push) Successful in 2m12s Details pre-commit / pre-commit (push) Successful in 2m23s Details schemas / build (push) Successful in 7m50s Details schemas / deploy-prod (push) Failing after 25s Details	2026-10-07 20:35:47 +00:00
argoyle	7d2773f6a1	fix(monitoring): use otel.SetLoggerProvider (#998 ) Unbound Release / Create Tag (push) Successful in 1m10s Details pre-commit / pre-commit (push) Successful in 8m13s Details Unbound Release / Generate Changelog and Handle PR (push) Successful in 1m56s Details Release / release (push) Successful in 5m49s Details schemas / vulnerabilities (push) Successful in 3m35s Details schemas / check (push) Successful in 4m16s Details schemas / build (push) Skipped Details schemas / check-release (push) Failing after 4m4s Details schemas / deploy-prod (push) Skipped Details Unbound Release / Check Preconditions (push) Successful in 53s Details Unbound Release / Create Release (push) Skipped Details opentelemetry-go v1.47.0 (#990) deprecates `go.opentelemetry.io/otel/log/global`. staticcheck SA1019 in `golangci-lint-full` now fails pre-commit on every PR (e.g. #997). Swap `global.SetLoggerProvider` for `otel.SetLoggerProvider` and drop the import. `go mod tidy` marks `otel/log` indirect. Locally: `golangci-lint-full` passed, `go test ./...` passed. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu Reviewed-on: #998	2026-10-07 19:25:32 +00:00