Bump the gomod-all group with 2 updates

[dependabot]

Bumps the gomod-all group with 2 updates: github.com/slack-go/slack and go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda.

Updates github.com/slack-go/slack from 0.21.0 to 0.22.0

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.22.0

What's Changed

Added

• OAuth PKCE support - OAuthOptionCodeVerifier option for GetOAuthV2Response, plus GenerateCodeVerifier() and GenerateCodeChallenge() helpers (RFC 7636). client_secret is now conditionally omitted when empty in both GetOAuthV2ResponseContext and RefreshOAuthV2TokenContext.
• Manifest scope fields - BotOptional and UserOptional on OAuthScopes.
• Rich text styles - Underline, Highlight, ClientHighlight, and Unlink on RichTextSectionTextStyle. Style field on RichTextSectionUserGroupElement.
• Assistant search context - Sort, SortDir, Before, After, Highlight, IncludeContextMessages, IncludeDeletedUsers, IncludeMessageBlocks, IncludeArchivedChannels, DisableSemanticSearch, Modifiers, TermClauses parameters and new response types (AssistantSearchContextFile, AssistantSearchContextChannel, AssistantSearchContextMessageContext).

Fixed

• socketmode: malformed JSON no longer forces reconnect - json.SyntaxError and json.UnmarshalTypeError now emit an EventTypeIncomingError event and continue reading instead of killing the WebSocket connection.
• socketmode: debug_reconnects query param applied correctly - the parameter was silently discarded due to a missing url.RawQuery assignment.
• ChannelTypes and ContentTypes now send comma-separated values instead of repeated form keys, matching the convention used by every other method in the library.

Docs

• assistant:write scope marked as deprecated in favour of chat:write.

Full Changelog: v0.21.1...v0.22.0

v0.21.1

Added

• MessageEvent channel type helpers — New ChannelTypeChannel, ChannelTypeGroup, ChannelTypeIM, and ChannelTypeMPIM constants plus IsChannel(), IsGroup(), IsIM(), and IsMpIM() convenience methods on MessageEvent. No more comparing raw strings to figure out where a message came from:

if ev.IsIM() {
    // handle direct message
}

Fixed

• MessageEvent doc typo — ChannelType documentation listed "mim" instead of the correct "mpim".
• Duplicate attachment/block serialization — MsgOptionAttachments and MsgOptionBlocks were serializing payloads twice (once for the response-URL JSON path, once for the form POST path). Serialization now happens once inside formSender.BuildRequestContext. (#1547)

[!NOTE] UnsafeApplyMsgOptions no longer includes attachments/blocks keys in the returned values, since marshalling is deferred to send time. This function is documented as unsupported.

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.22.0] - 2026-04-12

Added

• Added missing parameters to assistant.search.context (Sort, SortDir, Before, After, Highlight, IncludeContextMessages, IncludeDeletedUsers, IncludeMessageBlocks, IncludeArchivedChannels, DisableSemanticSearch, Modifiers, TermClauses) and new response types (AssistantSearchContextFile, AssistantSearchContextChannel, AssistantSearchContextMessageContext) to match the full Real-Time Search API surface.
• Added Underline, Highlight, ClientHighlight, and Unlink fields to RichTextSectionTextStyle. Added Style field to RichTextSectionUserGroupElement.
• Added BotOptional and UserOptional fields to OAuthScopes for app manifests.
• Added PKCE support for OAuth: OAuthOptionCodeVerifier option for GetOAuthV2Response, GenerateCodeVerifier() and GenerateCodeChallenge() helper functions (RFC 7636). client_secret is now conditionally omitted when empty in both GetOAuthV2ResponseContext and RefreshOAuthV2TokenContext.

Fixed

• ChannelTypes and ContentTypes now send comma-separated values instead of repeated form keys, matching the convention used by every other method in the library.
• In socketmode malformed JSON messages no longer force an unnecessary reconnect. Instead the error is emitted and the connection continues as normal.

[0.21.1] - 2026-04-08

Added

• slackevents.ChannelType* constants and MessageEvent helpers — Added ChannelTypeChannel, ChannelTypeGroup, ChannelTypeIM, ChannelTypeMPIM constants and IsChannel(), IsGroup(), IsIM(), IsMpIM() methods on MessageEvent so callers no longer need to compare raw strings.

Fixed

• Duplicate attachment/block serialization in MsgOptionAttachments / MsgOptionBlocks — Attachments and blocks were serialized twice: once into typed struct fields (for the JSON response-URL path) and again into url.Values (for the form POST path). Serialization for the form path now happens inside formSender.BuildRequestContext, so each sender owns its own marshalling. This fixes the long-standing FIXME and eliminates redundant json.Marshal calls in the option functions. (#1547)

  [!NOTE] UnsafeApplyMsgOptions returns config.values directly. After this change, attachments and blocks keys are no longer present in those values since marshalling is deferred to send time. This function is documented as unsupported.

Commits

• f482b19 chore: v0.22.0
• 3a5db9d chore: fix staticcheck errors (#1548)
• 19e0416 ci: add staticcheck
• f7a9616 chore: add staticcheck to mise
• 38dc2b9 chore: simplify with fmt.Fprintf
• d86412e fix(socketmode): skip reconnect on malformed JSON messages
• 3d2c59d chore: fix linting and formatting issues
• 7c6fb1f fix(socketmode): apply debug_reconnects query param to URL
• 5a498f6 feat(oauth): add PKCE support for OAuth v2 token exchange
• 86249b5 feat(manifests): add optional scope fields to OAuthScopes
• Additional commits viewable in compare view

Updates go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda from 0.67.0 to 0.68.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda's releases.

Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
• Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
• Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

• Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
• Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
• Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

• Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

• Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

What's Changed

• chore(deps): update module github.com/jgautheron/goconst to v1.9.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8651
• chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8652
• chore(deps): update golang.org/x/telemetry digest to e526e8a by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8647
• chore(deps): update module k8s.io/klog/v2 to v2.140.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8650
• chore(deps): update module github.com/mgechev/revive to v1.14.0 by @​mmorel-35 in open-telemetry/opentelemetry-go-contrib#8646
• chore(deps): update module github.com/mgechev/revive to v1.15.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8539
• chore: fix noctx issues by @​mmorel-35 in open-telemetry/opentelemetry-go-contrib#8645
• chore(deps): update golang.org/x by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8655
• chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8654
• chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8653
• fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8657
• Limit the number of bytes read from the zpages body by @​dmathieu in open-telemetry/opentelemetry-go-contrib#8656
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8648
• fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8661
• chore(deps): update github.com/securego/gosec/v2 digest to 8895462 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8663
• otelconf: support OTEL_CONFIG_FILE as it is no longer experimental by @​codeboten in open-telemetry/opentelemetry-go-contrib#8639
• chore(deps): update module github.com/sonatard/noctx to v0.5.1 by @​renovate[bot] in open-telemetry/opentelemetry-go-contrib#8664

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/github.com/aws/aws-lambda-go/otellambda's changelog.

[1.43.0/2.5.0/0.68.0/0.37.0/0.23.0/0.18.0/0.16.0/0.15.0] - 2026-04-03

Added

• Add Resource method to SDK in go.opentelemetry.io/contrib/otelconf/v0.3.0 to expose the resolved SDK resource from declarative configuration. (#8660)
• Add support to set the configuration file via OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)
• Add support for service resource detector in go.opentelemetry.io/contrib/otelconf. (#8674)
• Add support for attribute_count_limit and attribute_value_length_limit in tracer provider configuration in go.opentelemetry.io/contrib/otelconf. (#8687)
• Add support for attribute_count_limit and attribute_value_length_limit in logger provider configuration in go.opentelemetry.io/contrib/otelconf. (#8686)
• Add support for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)
• Add support for OTEL_SEMCONV_STABILITY_OPT_IN in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. Supported values are rpc (default), rpc/dup and rpc/old. (#8726)
• Add the http.route metric attribute to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#8632)

Changed

• Prepend _ to the normalized environment variable name when the key starts with a digit in go.opentelemetry.io/contrib/propagators/envcar, ensuring POSIX compliance. (#8678)
• Move experimental types from go.opentelemetry.io/contrib/otelconf to go.opentelemetry.io/contrib/otelconf/x. (#8529)
• Normalize cached environment variable names in go.opentelemetry.io/contrib/propagators/envcar, aligning Carrier.Keys output with the carrier's normalized key format. (#8761)

Fixed

• Fix go.opentelemetry.io/contrib/otelconf Prometheus reader converting OTel dot-style label names (e.g. service.name) to underscore-style (service_name) in target_info when both without_type_suffix and without_units are set. Use NoTranslation instead of UnderscoreEscapingWithoutSuffixes to preserve dot-style label names while still suppressing metric name suffixes. (#8763)
• Limit the request body size at 1MB in go.opentelemetry.io/contrib/zpages. (#8656)
• Fix server spans using the client's address and port for server.address and server.port attributes in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#8723)

Removed

• Host ID resource detector has been removed when configuring the host resource detector in go.opentelemetry.io/contrib/otelconf. (#8581)

Deprecated

• Deprecate OTEL_EXPERIMENTAL_CONFIG_FILE in favour of OTEL_CONFIG_FILE in go.opentelemetry.io/contrib/otelconf. (#8639)

Commits

• 45977a4 Release v1.43.0/v2.5.0/v0.68.0/v0.37.0/v0.23.0/v0.18.0/v0.16.0/v0.15.0 (#8769)
• 0fcc152 fix(deps): update module github.com/googlecloudplatform/opentelemetry-operati...
• eaba3cd chore(deps): update googleapis to 6f92a3b (#8776)
• 6df430c chore(deps): update module github.com/jgautheron/goconst to v1.10.0 (#8771)
• ae90e32 Fix otelconf prometheus label escaping (#8763)
• f202c3f otelconf: move experimental types to otelconf/x (#8529)
• 8ddaece fix(deps): update aws-sdk-go-v2 monorepo (#8764)
• c7c03a4 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8766)
• 717a85a envcar: normalize cached environment variable names (#8761)
• ad990b6 fix(deps): update module github.com/aws/smithy-go to v1.24.3 (#8765)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions