fix(deps): bump the gomod-group group across 1 directory with 4 updates

[dependabot]

Bumps the gomod-group group with 3 updates in the / directory: github.com/thomaspoignant/go-feature-flag, go.opentelemetry.io/collector/pdata and google.golang.org/grpc.

Updates github.com/thomaspoignant/go-feature-flag from 1.52.1 to 1.55.0

Release notes

Sourced from github.com/thomaspoignant/go-feature-flag's releases.

v1.55.0

1.55.0 (2026-07-02)

This version is including brand new features that were requested by a lot of users such as:

• The possibility to add or delete flag sets at runtime, you can now automatically add or remove flag set without a restart 🙌.
• You can now also export your data to Google Big Query
• You can add a certificated in your http retriever, allowing to secure your connections.

And as always this version contains bug fixes and dependencies update.

🚀 New Features

• add Google BigQuery exporter (#5356) (cee47d4)
• python-provider: automate WASM/WASI version bump (#5541) (6ddc99d)
• relayproxy: add and remove flagsets at runtime without a restart (#5488) (4c9bb15)
• support client certificate in http retriever (#5446) (260b719)

🐛 Bug Fixes

• relayproxy: prevent panic on concurrent websocket writes (#5469) (1c847f2)

🔧 Chores

• Bump @​babel/preset-env in /examples/openfeature_web/webapp (#5494) (eb09c92)
• Bump @​openfeature/core in /examples/openfeature_react/react-app (#5497) (818b74a)
• Bump @​openfeature/react-sdk (#5499) (ff87fa0)
• Bump @​openfeature/server-sdk (#5483) (b9bfc7a)
• Bump @​openfeature/web-sdk in /examples/openfeature_web/webapp (#5498) (18c6dcd)
• Bump @​types/react in /examples/openfeature_react/react-app (#5473) (fdda149)
• Bump @​typescript-eslint/eslint-plugin (#5430) (d604983)
• Bump @​typescript-eslint/eslint-plugin (#5474) (2516e1f)
• Bump @​typescript-eslint/eslint-plugin (#5503) (cbc9645)
• Bump actions/checkout from 6.0.3 to 7.0.0 (#5508) (3d0a5bb)
• Bump actions/setup-java from 5.2.0 to 5.3.0 (#5506) (517a60d)
• Bump cloud.google.com/go/bigquery from 1.74.0 to 1.77.0 (#5451) (a3cfc35)
• Bump cloud.google.com/go/storage from 1.62.2 to 1.62.3 (#5441) (bf33e64)
• Bump dev.openfeature:sdk (#5527) (4612050)
• Bump eslint in /examples/openfeature_react/react-app (#5434) (503a571)
• Bump eslint in /examples/openfeature_react/react-app (#5505) (a64f9c9)
• Bump eslint in /examples/openfeature_web/webapp (#5428) (c814b4d)
• Bump eslint in /examples/openfeature_web/webapp (#5500) (e7b553e)
• Bump eslint-plugin-react-refresh (#5495) (dd00e04)
• Bump github.com/aws/aws-sdk-go-v2 from 1.41.12 to 1.42.0 (#5456) (8794041)
• Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5437) (133a520)
• Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5454) (991601a)
• Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5457) (e9ffaf2)
• Bump github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager (#5466) (2d6ebd3)

... (truncated)

Commits

• e7f17e4 chore(main): release 1.55.0 (#5422)
• 4d0876d chore(main): release openfeature/providers/python-provider 1.2.0 (#5334)
• 6ddc99d feat(python-provider): automate WASM/WASI version bump (#5541)
• a5ede16 Remove broken flag test capability from the flag editor (#5540)
• ebf9f69 docs: fix inaccuracies in root README.md (#5539)
• ebe16fe chore(main): release cmd/wasm 0.2.3 (#5298)
• 77443b0 chore(dependency): Bump module modules/core 0.7.2 (#5536)
• 74c59d5 chore(dependency): Bump module modules/core 0.7.2 (#5535)
• 3e8df90 chore(main): release modules/core 0.7.2 (#5297)
• 0fd2e8e fix: apply scheduled rollout steps in chronological order (#5534)
• Additional commits viewable in compare view

Updates github.com/thomaspoignant/go-feature-flag/modules/core from 0.6.1 to 0.7.2

Release notes

Sourced from github.com/thomaspoignant/go-feature-flag/modules/core's releases.

modules/core: v0.7.2

0.7.2 (2026-07-01)

🐛 Bug Fixes

• apply scheduled rollout steps in chronological order (#5534) (0fd2e8e)

🔧 Chores

• Bump github.com/aws/aws-sdk-go-v2 from 1.41.10 to 1.41.11 (#5409) (1badd80)
• Bump github.com/aws/aws-sdk-go-v2/service/s3 (#5360) (9752a72)
• Bump github.com/aws/aws-sdk-go-v2/service/s3 (#5410) (e9bf102)
• Bump github.com/aws/aws-sdk-go-v2/service/s3 (#5490) (52994bd)
• Bump github.com/testcontainers/testcontainers-go (#5511) (a772730)
• Bump golang.org/x/net from 0.53.0 to 0.54.0 (#5296) (b31655a)
• dependencies: Bump github.com/diegoholiveira/jsonlogic/v3 (#5475) (ffb36b2)
• dependencies: Bump github.com/diegoholiveira/jsonlogic/v3 (#5492) (0415c4e)

modules/core: v0.7.1

0.7.1 (2026-05-15)

💨 Performances

• rule: cache parsed nikunjy targeting query evaluators (#5174) (7af8fc2)

🔧 Chores

• Bump github.com/aws/aws-sdk-go-v2 from 1.41.6 to 1.41.7 (#5225) (c228000)
• Bump github.com/aws/aws-sdk-go-v2/config from 1.32.16 to 1.32.17 (#5228) (977be4f)
• dependencies: Bump github.com/diegoholiveira/jsonlogic/v3 (#5250) (0511cc4)

⚙️ CI/CD

• zizmor 3 (#5255) (4b4e03a)

modules/core: v0.7.0

0.7.0 (2026-04-29)

🚀 New Features

• modules/core: add ConvertInternalFlagToDto converter (#5177) (6d6b6a4)

🔧 Chores

... (truncated)

Commits

• 3e8df90 chore(main): release modules/core 0.7.2 (#5297)
• 0fd2e8e fix: apply scheduled rollout steps in chronological order (#5534)
• 6e948b9 chore: Bump Microsoft.NET.Test.Sdk from 18.6.0 to 18.7.0 (#5532)
• 757efb7 fix(website): make navbar mega-menus responsive on mobile (#5531)
• 01af87f docs: Disable featuredHtml in navbar resources
• 9d9e1c6 feat(website): rebuild top navbar with mega-menus and product landing pages (...
• 4af0a36 Update readme with the sponsor list (#5530)
• 233f243 chore: Bump OpenFeature from 2.13.0 to 2.14.0 (#5528)
• 4612050 chore: Bump dev.openfeature:sdk (#5527)
• 043039e chore: Bump google.golang.org/api from 0.285.0 to 0.286.0 (#5526)
• Additional commits viewable in compare view

Updates go.opentelemetry.io/collector/pdata from 1.60.0 to 1.61.0

Release notes

Sourced from go.opentelemetry.io/collector/pdata's releases.

v1.61.0/v0.155.0

Images and binaries here: https://github.com/open-telemetry/opentelemetry-collector-releases/releases/tag/v0.155.0

End User Changelog

🛑 Breaking changes 🛑

• pkg/confighttp: Remove stabilized gate confighttp.framedSnappy (#15420)
• pkg/configoptional: Remove stabilized gate configoptional.AddEnabledField. (#15421)
• pkg/confmap: Remove stabilized featuregate confmap.newExpandedValueSanitizer (#15418)
• pkg/exporterhelper: Remove stable gate exporter.PersistRequestContext. (#15424)
• pkg/otelcol: Remove stable gate otelcol.printInitialConfig (#15425)
• pkg/service: Remove stable featuregate telemetry.UseLocalHostAsDefaultMetricsAddress (#15419)
• pkg/xpdata: Remove stable gate pdata.enableRefCounting. (#15426)
• processor/memory_limiter: Rename deprecated memory limiter metrics to include the memory_limiter prefix (e.g. otelcol_processor_memory_limiter_*) to clarify they are specific to this processor. (#11203)

🚀 New components 🚀

• cmd/schemagen: Move the schemagen CLI from opentelemetry-collector-contrib to this repository as cmd/schemagen. (#14543) The tool's source is identical to the upstream contrib version (github.com/open-telemetry/opentelemetry-collector-contrib/cmd/schemagen) except for the module path and the test fixtures' namespace, which now reflect the collector module (go.opentelemetry.io/collector/cmd/schemagen). A contrib-only integration test that pointed at three contrib components is removed; contrib's existing make generate-schemas + git-diff CI continues to exercise the FactoryMaps feature against real-world components.

💡 Enhancements 💡

• cmd/mdatagen: Add support for versioned metrics (#15309) Allows metadata to specify versioned metrics for migrating to new semantic conventions. There are two scenarios catered for when the metric name stays the same during migration. When a metric name stays the same but its type differs, just the latest metric is emitted with the new type. When a metric name stays the same but its attributes differ, the latest version is emitted with combined attributes during the migration period.

• cmd/schemagen: Add overlayFile support to deep-merge hand-curated schema fragments into generated schemas. (#14543) Components can declare an overlayFile in .schemagen.yaml pointing to a YAML file whose keys are recursively merged into the auto-generated schema after generation. This allows injecting descriptions, constraints, or additional properties that cannot be derived from Go types. Originally added to the contrib copy of cmd/schemagen in open-telemetry/opentelemetry-collector-contrib#48917 and brought over with the tool in this move.

• cmd/schemagen: Add -p flag to specify a custom Go package pattern for the config struct. (#14543) The new -p flag lets callers override the default . package pattern with an arbitrary Go package selector (e.g. a sub-package whose Config type schemagen should walk). Originally added to the contrib copy of cmd/schemagen in

... (truncated)

Changelog

Sourced from go.opentelemetry.io/collector/pdata's changelog.

v1.61.0/v0.155.0

🛑 Breaking changes 🛑

• cmd/mdatagen: Remove the reaggregation_enabled metadata setting and always generate per-metric reaggregation config. (#15305) Legacy metadata files that still contain reaggregation_enabled are accepted, but the value is ignored.

🚩 Deprecations 🚩

• pkg/service: Deprecate service.Settings.CollectorConf and extensioncapabilities.ConfigWatcher in favor of service.Settings.ConfigSnapshot and extensioncapabilities.ConfigSnapshotWatcher, which provide effective and unexpanded configuration representations. (#15432)

💡 Enhancements 💡

• pkg/config/configmiddleware: Migrated middleware config to schema based (#15440)
• pkg/pdata: Add DisallowUnknownFields option to JSONUnmarshaler in plog, ptrace, pmetric, pprofile, and xpdata to error on JSON fields not defined by the OTLP schema. (#15279) When DisallowUnknownFields is false (the default), unknown fields are silently ignored, matching the previous behavior. Warning: enabling this option breaks forwards compatibility with future evolutions of the OTLP format, as fields added to the format in newer versions will be rejected as unknown.

🧰 Bug fixes 🧰

• cmd/mdatagen: Fix known acronyms at the end of generated Go identifiers to be all-caps, same as in any other position (#15438)

Commits

• 41da2fb [chore] Prepare release v1.61.0/v0.155.0 (#15479)
• e4e58cd [cmd/mdatagen] Remove reaggregation feature gate (#15385)
• d3d6e34 Update All golang.org/x packages (#15448)
• f3bace0 [pkg/config/configmiddleware] Migrate middleware config to schema based (#15440)
• acb8813 [chore][cmd/mdatagen] Prevent overwriting authoritative definitions with ref-...
• 668fc59 [pkg/service] Add config snapshot watcher (#15399)
• 415d3dc docs: fix typo derefenceable -> dereferenceable in configoptional (#15465)
• 7f41344 [featuregate] Fix incorrect ToVersion comment (#15457)
• 6951ec5 processor/memorylimiter: rename deprecated metrics to include memory_limiter ...
• 8ab0da4 [processor] Clarify recommended processor ordering with inline reasoning (#15...
• Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.81.1 to 1.82.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.82.0

Behavior Changes

• server: Remove support for GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKING environment varibale. Strict incoming RPC path validation (which has been the default since v1.79.3) can no longer be disabled. (#9112)
• transport: Add environment variable to change the default max header list size from 16MB to 8KB. This may be enabled by setting GRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)
• balancer: Load Balancing policy registry is now case-sensitive. Set GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false (and file an issue) to revert to case-insensitive behavior. (#9017)

New Features

• experimental/stats: Expose a new API, NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)
  • Special Thanks: @​seth-epps
• client: Return a portion of the response body in the error message, when the client receives an unexpected non-gRPC HTTP response, to make debugging easier. (#8929)
  • Special Thanks: @​chengxilo
• server: Add environment variable GRPC_GO_SERVER_GOROUTINE_LABELS that controls setting runtime/pprof.Labels on goroutines spawned by the server. Set GRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=true to add the grpc.method label on goroutines spawned to handle incoming requests. (#9082)
  • Special Thanks: @​dfinkel

Bug Fixes

• xds/server: Fix a memory leak of HTTP filter instances occurring when route configurations are updated in-place during a Route Discovery Service (RDS) update. (#9138)
• grpc: In the deprecated gzip Compressor (used via the deprecated WithCompressor dial option), enforce the MaxRecvMsgSize limit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)
  • Special Thanks: @​evilgensec
• stats/opentelemetry: Record retry attempts, grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)
• encoding: Ensure Close() is always called on readers returned from Compressor.Decompress if possible. (#9135)
• channelz: Fix the LastMessageSentTimestamp and LastMessageReceivedTimestamp fields in SocketMetrics to ensure they contain correct timestamp values. (#9109)

Commits

• bd23985 Change version to 1.82.0 (#9170)
• 0f3086d Fix minor issues not covered by PR #9137 (#9147)
• fef07fb internal: Split v3procservicepb import into pb and grpc for extproc (#9163)
• 91dd64f transport: surface subsequent data when receiving non-gRPC header (#8929)
• adc97de test/kokoro: add config for regional-td test (#9158)
• 57c9ff1 xds: ensure full-string matching for RBAC Filter rules (#9148)
• b58f32d server: Set a pprof label on new stream goroutines (#9082)
• 6c98be3 refactor(transport): extract shared stream state handling logic in `loopyWrit...
• bcaa6f4 rls: only reset backoff on recovery from TRANSIENT_FAILURE (#9137)
• 429e6e0 balancer: expose endpoint weight and hostname as experimental APIs (#9074)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.