build(deps): bump the go group with 3 updates

[dependabot]

Bumps the go group with 3 updates: github.com/getsentry/sentry-go, github.com/go-chi/chi/v5 and github.com/stretchr/testify.

Updates github.com/getsentry/sentry-go from 0.48.0 to 0.49.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.49.0

Breaking Changes 🛠

• removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

• add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

• (echo) Propagate span through request context by @​EricGusmao in #1385
• Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

• Bump github.com/labstack/echo/v5 from 5.0.3 to 5.2.0 in /echo by @​dependabot in #1399
• Bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 by @​dependabot in #1397
• Bump getsentry/craft from 2.26.6 to 2.27.2 by @​dependabot in #1381
• Bump actions/setup-go from 6.4.0 to 7.0.0 by @​dependabot in #1382
• Bump actions/checkout from 6.0.3 to 7.0.1 by @​dependabot in #1380
• Bump google.golang.org/grpc to 1.82.1 and golang.org/x/sys to 0.46.0 by @​dependabot in #1375
• Bump golang.org/x/text to v0.39.0 and x/net to v0.56.0 by @​giortzisg in #1374

Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.49.0

Breaking Changes 🛠

• removing DisableLogs and DisableMetrics client options. Sending metrics and logs is already gated by the usage of our APIs already, so having a global kill switch is counter intuitive. Users that won't to opt out should just not call the relevant APIs or setup the integrations. by @​giortzisg in #1392

New Features ✨

• add WithProxyoption for OTLP. This allows setting an otlptracehttp.HTTPTransportProxyFunc for the span exporter by @​pierrre in #1377

Bug Fixes 🐛

• (echo) Propagate span through request context by @​EricGusmao in #1385
• Skip recover frames on panic. This changes stacktrace behavior for captured panics, removing sentry.Recover frames to focus on the actual panic frames. The changes might affect issue grouping. by @​giortzisg in #1364

Internal Changes 🔧

Deps

• Bump github.com/labstack/echo/v5 from 5.0.3 to 5.2.0 in /echo by @​dependabot in #1399
• Bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 by @​dependabot in #1397
• Bump getsentry/craft from 2.26.6 to 2.27.2 by @​dependabot in #1381
• Bump actions/setup-go from 6.4.0 to 7.0.0 by @​dependabot in #1382
• Bump actions/checkout from 6.0.3 to 7.0.1 by @​dependabot in #1380
• Bump google.golang.org/grpc to 1.82.1 and golang.org/x/sys to 0.46.0 by @​dependabot in #1375
• Bump golang.org/x/text to v0.39.0 and x/net to v0.56.0 by @​giortzisg in #1374

Commits

• 78b09d1 release: 0.49.0
• eff9f37 build(deps): bump github.com/labstack/echo/v5 from 5.0.3 to 5.2.0 in /echo (#...
• c60a2f6 feat!: remove DisableLogs and DisableMetrics options (#1392)
• c3f2330 build(deps): bump github.com/gorilla/websocket from 1.5.1 to 1.5.3 (#1397)
• 9bb14a7 fix(echo): propagate span through request context (#1385)
• fb9acd8 build(deps): bump getsentry/craft from 2.26.6 to 2.27.2 (#1381)
• 17f540e feat(otel/otlp): add WithProxy option to span exporter (#1377)
• ed9834e build(deps): bump actions/setup-go from 6.4.0 to 7.0.0 (#1382)
• af6d9db build(deps): bump actions/checkout from 6.0.3 to 7.0.1 (#1380)
• 93223f7 build(deps): bump google.golang.org/grpc to 1.82.1 and golang.org/x/sys to 0....
• Additional commits viewable in compare view

Updates github.com/go-chi/chi/v5 from 5.3.1 to 5.3.2

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.3.2

What's Changed

• feat(middleware): add text/markdown, text/csv, text/vtt to default compressible types by @​VojtechVitek in go-chi/chi#1151
• docs: deployment recipe for middleware.ClientIPFromXFFTrustedProxies() by @​VojtechVitek in go-chi/chi#1111
• fix: don't drop handlers that collide with a Mount()/Route() pattern by @​VojtechVitek in go-chi/chi#1148
• Don't duplicate methods in Allow: header for 405 responses by @​flimzy in go-chi/chi#1029
• fix(middleware): reject catch-all compress wildcards by @​VojtechVitek in go-chi/chi#1156
  • middleware.NewCompressor(level, "/*") never worked and silently compressed nothing. Instead of turning it into a compress-everything catch-all (as proposed in go-chi/chi#868 and go-chi/chi#1121), we decided to reject both "/" and "/*" at construction and panic. Compressing every response wastes CPU on already-compressed types (zip, jpeg, png), which is why the middleware keeps a curated default list. Users should pass explicit content types.

Full Changelog: go-chi/chi@v5.3.1...v5.3.2

Commits

• 3893906 fix(middleware): reject catch-all compress wildcards "/" and "/*" (#1156)
• 9b6ddcd Don't duplicate methods in Allow: header for 405 responses (#1029)
• 29164f0 fix: don't drop handlers that collide with a Mount()/Route() pattern (#1148)
• bc02284 docs: deployment recipe + verify checklist for ClientIPFromXFFTrustedProxies ...
• 60ecea5 feat(middleware): add text/markdown, text/csv, text/vtt to default compressib...
• See full diff in compare view

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

• 959dbda Merge pull request #1935 from harryzcy/yaml-update
• 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
• 0358d0e change yaml library to go.yaml.in/yaml/v3
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions