chore(deps): update google.golang.org/genproto digest to da73d73

[renovate-sh-app]

This PR contains the following updates:

Package	Type	Update	Change
google.golang.org/genproto	replace	digest	79d6a2a → da73d73

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

[renovate-sh-app]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated

Details:

Package	Change
go.opentelemetry.io/otel	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/trace	v1.43.0 -> v1.44.0
golang.org/x/net	v0.52.0 -> v0.56.0
golang.org/x/sync	v0.20.0 -> v0.22.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	v0.61.0 -> v0.67.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric	v1.36.0 -> v1.43.0
go.opentelemetry.io/otel/metric	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/sdk	v1.43.0 -> v1.44.0
go.opentelemetry.io/otel/sdk/metric	v1.43.0 -> v1.44.0
golang.org/x/crypto	v0.49.0 -> v0.53.0
golang.org/x/mod	v0.33.0 -> v0.37.0
golang.org/x/sys	v0.42.0 -> v0.47.0
golang.org/x/text	v0.35.0 -> v0.40.0
golang.org/x/tools	v0.42.0 -> v0.47.0
google.golang.org/genproto/googleapis/api	v0.0.0-20260401024825-9d38bb4040a9 -> v0.0.0-20260819154853-08b0e4226688
google.golang.org/genproto/googleapis/rpc	v0.0.0-20260401024825-9d38bb4040a9 -> v0.0.0-20260819154853-08b0e4226688
google.golang.org/grpc	v1.80.0 -> v1.82.1
google.golang.org/protobuf	v1.36.11 -> v1.36.12

[cursor]

PR Summary

Medium Risk
Dependency-only change but affects gRPC, genproto, and OTel stacks used transitively by dskit/alertmanager; verify build and tests after merge.

Overview
Renovate bumps the monolithic google.golang.org/genproto replace pin from 79d6a2a48846 to 925bb5da69e7, keeping the existing workaround for ambiguous genproto imports (dskit / gogo/status). go.sum and several indirect requires move with that resolution—notably OpenTelemetry (go.opentelemetry.io/otel and SDK/metric to 1.44), gRPC (1.81.1), split genproto/googleapis/{api,rpc} snapshots, and golang.org/x/{net,sync,crypto,mod,sys,text,tools}.

There is no application source change; only module lockfiles.

^{Reviewed by Cursor Bugbot for commit 9c4e96e. Bugbot is set up for automated code reviews on this repo. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.}

^{Reviewed by Cursor Bugbot for commit 2e6f354. Configure here.}

[cursor]

Genproto replace snapshots diverged

Medium Severity

The monolithic google.golang.org/genproto replace now points at commit 87f3d3e, while the googleapis/api and googleapis/rpc replaces still pin 79d6a2a. The workaround comment in go.mod states all three should come from the same snapshot; before this change the monolithic replace matched those pins. Mixing snapshots can yield incompatible generated types across gRPC and OpenTelemetry paths.

Additional Locations (1)

• go.mod#L146-L148

 

^{Reviewed by Cursor Bugbot for commit 2e6f354. Configure here.}