[SirLouen]

What

Moves the OpenTelemetry modules that postgresblob reaches indirectly from 1.46.0 to 1.47.0. It is the same change Dependabot opened in #154 and #155.

Why

1.47.0 fixes GHSA-q7gw-24fr-5p69. Dependabot did not answer @dependabot rebase on #154, so its branch still builds on Go 1.27.3 and fails vulncheck on GO-2026-6859, which main fixed by moving to Go 1.27.4.

Testing Instructions

go build ./..., go vet ./... and govulncheck ./... pass in postgresblob on Go 1.27.4. CI runs the tests against PostgreSQL.

Summary by CodeRabbit

• Chores
  • Updated internal telemetry components to consistent versions. This behind-the-scenes maintenance does not add or remove user-facing capabilities, change workflows, or require any action. No other product changes are included in this update.

[coderabbitai]

No actionable comments were generated in the recent review.

Walkthrough

The postgresblob module now uses OpenTelemetry dependencies at v1.47.0. The update adds the indirect otel/log dependency and upgrades five existing indirect dependencies from v1.46.0.

Changes: OpenTelemetry dependency update

Layer / File(s)	Summary
Update OpenTelemetry dependency versions postgresblob/go.mod	The module adds indirect otel/log and sets it and five existing OpenTelemetry dependencies to v1.47.0.

Estimated code review effort: 1 (Trivial) | ~4 minutes

Change: Other

Merge Risk: Minimal · up to 6615f

This updates indirect OpenTelemetry dependencies to v1.47.0, which the author reports fixes a security advisory. No code behavior changes are visible, and merge risk is minimal.

Pre-merge checks: 4

Check name	Status	Explanation
Description Check		Check skipped - CodeRabbit’s high-level summary is enabled.
Title check		The title names the change: bumping the OpenTelemetry modules from 1.46.0 to 1.47.0 in postgresblob. The raw summary confirms that go.mod now pins these modules at v1.47.0, and the objectives describe…
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Title check

Explanation

The title names the change: bumping the OpenTelemetry modules from 1.46.0 to 1.47.0 in postgresblob. The raw summary confirms that go.mod now pins these modules at v1.47.0, and the objectives describe the same update. The title is concise, specific, and follows the conventional commit style. It does not cover the otel/log addition, but that is a minor detail.

Finishing Touches

Generate unit tests (beta)

• Commit to this branch
• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

Share

• X
• Mastodon
• Reddit
• LinkedIn

Recent review info

Run configuration

• Source mode: Auto
• Repository: Unavailable
• Branch: Unavailable
• File: No configuration file from this repository applied
• Commit: Unavailable
• Layers: Organization UI
• Review profile: ASSERTIVE
• Plan: Advanced
• Run ID: a5d94c4a-10e9-45b1-9e78-0f7a77662317

Commits

Reviewing files that changed from the base of the PR and between 4933b8c and 6615f78.

Files ignored due to path filters: 1

• postgresblob/go.sum is excluded by !**/*.sum

Files selected for processing: 1

• postgresblob/go.mod

Included review availability: This review used your included allowance. Your plan provides up to 1 included review per hour; 0 remain after this review.

[codescene-access]

No application code in the PR — skipped Code Health checks.

See analysis details in CodeScene

Quality Gate Profile: Clean Code Collective
Install CodeScene MCP: safeguard and uplift AI-generated code. Catch issues early with our IDE extension and CLI tool.

[greptile-apps]

Confidence Score: 5/5

[Low impact] The PR appears safe to merge.

Summary

Updates the indirect OpenTelemetry dependencies used by postgresblob from 1.46.0 to 1.47.0.

• Builds of the PostgreSQL blob module now use OpenTelemetry 1.47.0.

No actionable issues found. Build and test results were not independently reproduced.

_{Reviews (1) · Last reviewed commit: "build(postgresblob): bump the OpenTeleme..." · Reviewed by Greptile}