git: 37d4040848fb - main - www/{pomerium-envoy-custom,pomerium}: update to 1.36.8-p1 / 0.32.9

From: Xin LI <delphij_at_FreeBSD.org>
Date: Mon, 29 Jun 2026 15:01:38 UTC
The branch main has been updated by delphij:

URL: https://cgit.FreeBSD.org/ports/commit/?id=37d4040848fb47d7cd2c4f593f499b2cfdce4d55

commit 37d4040848fb47d7cd2c4f593f499b2cfdce4d55
Author:     Xin LI <delphij@FreeBSD.org>
AuthorDate: 2026-06-28 15:32:07 +0000
Commit:     Xin LI <delphij@FreeBSD.org>
CommitDate: 2026-06-29 15:01:16 +0000

    www/{pomerium-envoy-custom,pomerium}: update to 1.36.8-p1 / 0.32.9
---
 www/pomerium-envoy-custom/Makefile                 |  51 ++++++-
 www/pomerium-envoy-custom/distinfo                 |  10 +-
 .../files/envoy_freebsd-dependency-imports.patch   |  82 +++++++----
 www/pomerium-envoy-custom/files/patch-WORKSPACE    |  12 +-
 www/pomerium/Makefile                              |  53 ++++----
 www/pomerium/distinfo                              | 106 +++++++--------
 www/pomerium/files/modules.txt                     | 150 +++++++++++----------
 7 files changed, 271 insertions(+), 193 deletions(-)

diff --git a/www/pomerium-envoy-custom/Makefile b/www/pomerium-envoy-custom/Makefile
index 5e03c54283ab..c594d78ba56d 100644
--- a/www/pomerium-envoy-custom/Makefile
+++ b/www/pomerium-envoy-custom/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	pomerium-envoy-custom
 DISTVERSIONPREFIX=	v
-DISTVERSION=	1.36.5-p1
-PORTREVISION=	2
+DISTVERSION=	1.36.8-p1
 CATEGORIES=	www
 DIST_SUBDIR=	${PORTNAME}
 
@@ -12,7 +11,7 @@ WWW=		https://pomerium.io/
 LICENSE=	APACHE20
 LICENSE_FILE=	${WRKSRC}/LICENSE
 
-ENVOY_SRC_COMMIT=	41749943780b54b70b510b1b1a4805ae529e174a
+ENVOY_SRC_COMMIT=	ee7784f95f506e2a606ae668f0d9f70f9d26af83
 ENVOY_API_COMMIT=	f8b75d1efa92bbf534596a013d9ca5873f79dd30
 
 USES=		cmake:indirect compiler:c++20-lang gmake go:no_targets java \
@@ -399,6 +398,7 @@ BAZEL_BUILD_OPTS=	--distdir=${WRKDIR}/bazel-distdir \
 			--override_repository=fuzzing_pip3=${WRKDIR}/sys_repos/pip3_stub \
 			--override_repository=io_bazel_rules_go=${WRKDIR}/sys_repos/io_bazel_rules_go \
 			--override_repository=com_google_absl=${WRKDIR}/sys_repos/com_google_absl \
+			--override_repository=envoy=${WRKDIR}/envoy-src \
 			--action_env=MAKE=${GMAKE} --host_linkopt=-lm \
 			--linkopt=-lm --linkopt=-L${LOCALBASE}/lib \
 			--cxxopt=-Wno-nullability-completeness \
@@ -456,6 +456,51 @@ post-patch:
 	done
 
 pre-build:
+# Pre-extract @envoy upstream source and apply all patches ourselves.
+# Bypasses Bazel's http_archive patch mechanism, which does not reliably
+# invalidate the cached external-repo when patch file content changes.
+# --override_repository=envoy=... (in BAZEL_BUILD_OPTS) tells Bazel to use
+# this pre-patched local directory instead of fetching via http_archive.
+	${RM} -rf ${WRKDIR}/envoy-src
+	${MKDIR} ${WRKDIR}/envoy-src
+	${TAR} xf ${DISTDIR}/${DIST_SUBDIR}/${ENVOY_SRC_COMMIT}.zip \
+		--strip-components=1 \
+		-C ${WRKDIR}/envoy-src
+	for f in \
+	    0001-revert-deps-drop-BoringSSL-linkstatic-patch-38621.patch \
+	    0002-bump-dependencies.patch \
+	    0003-envoy-copts.patch \
+	    0004-pgv.patch \
+	    0005-suppress-duplicate-wip-warnings.patch \
+	    0006-coverage-format.patch \
+	    0007-user-space-io-handle.patch \
+	    0008-cel-cpp-compatibility.patch \
+	    tmp-envoy-41815.patch \
+	    tmp-transport-socket-options.patch \
+	    freebsd-rules-foreign-cc.patch \
+	    freebsd-dependency-imports.patch \
+	    freebsd-envoy-cmake-generate-args.patch \
+	    freebsd-foreign-cc-ares.patch \
+	    freebsd-foreign-cc-nghttp2.patch \
+	    freebsd-foreign-cc-maxmind.patch \
+	    freebsd-maxmind-extension.patch \
+	    freebsd-foreign-cc-zlib.patch \
+	    freebsd-foreign-cc-zstd.patch \
+	    freebsd-foreign-cc-luajit.patch \
+	    freebsd-luajit.patch \
+	    freebsd-platform.patch \
+	    freebsd-terminate-thread.patch \
+	    freebsd-thread-impl.patch \
+	    freebsd-address-impl.patch \
+	    freebsd-io-socket-handle-impl-h.patch \
+	    freebsd-io-socket-handle-impl-cc.patch \
+	    freebsd-lz4-qat-removal.patch \
+	    freebsd-inotify.patch; do \
+	    ${PATCH} -p1 -d ${WRKDIR}/envoy-src < ${WRKSRC}/patches/envoy/$$f || exit 1; \
+	done
+# Also clear any stale Bazel-cached @envoy tree (safety net).
+	${RM} -rf ${WRKDIR}/bazel-out/external/envoy \
+	           ${WRKDIR}/bazel-out/external/envoy.marker
 	for f in rules_python_py_runtime_info_freebsd.patch \
 	    rules_python_py_executable_freebsd.patch \
 	    rules_python_runtime_env_toolchain_freebsd.patch; do \
diff --git a/www/pomerium-envoy-custom/distinfo b/www/pomerium-envoy-custom/distinfo
index 36eef2bc3b78..7228cd98a257 100644
--- a/www/pomerium-envoy-custom/distinfo
+++ b/www/pomerium-envoy-custom/distinfo
@@ -1,6 +1,6 @@
-TIMESTAMP = 1777618321
-SHA256 (pomerium-envoy-custom/41749943780b54b70b510b1b1a4805ae529e174a.zip) = 26de1f5b0497a3b4dba9b6157fc555f3c9f4e1f21214462ebff5b19649304e9f
-SIZE (pomerium-envoy-custom/41749943780b54b70b510b1b1a4805ae529e174a.zip) = 41271285
+TIMESTAMP = 1782359735
+SHA256 (pomerium-envoy-custom/ee7784f95f506e2a606ae668f0d9f70f9d26af83.zip) = 6064371695a3cae6819f45407d275dc432ce59b95bb18071cfd2e981295baa80
+SIZE (pomerium-envoy-custom/ee7784f95f506e2a606ae668f0d9f70f9d26af83.zip) = 41291859
 SHA256 (pomerium-envoy-custom/V_10_2_P1.zip) = 8eb83ec34ac4714ca3c545e593d5cfb7f383ee80cfcafd9a04424539390a6398
 SIZE (pomerium-envoy-custom/V_10_2_P1.zip) = 2447062
 SHA256 (pomerium-envoy-custom/a413fcc9c46a020a746907136a384c227f3cd095.zip) = 4fd719717102b308527528fa26ea93ce3c9d583aae8ffaf68e1199906ce22382
@@ -155,8 +155,8 @@ SHA256 (pomerium-envoy-custom/v0.7.0.zip) = e620541456e725349341621b2daaa03e3470
 SIZE (pomerium-envoy-custom/v0.7.0.zip) = 1893247
 SHA256 (pomerium-envoy-custom/v0.0.0-20191204190536-9bdfabe68543.zip) = a93010abd3c4f483710c37fb87511a776942f709b4c1820a28d099d448680390
 SIZE (pomerium-envoy-custom/v0.0.0-20191204190536-9bdfabe68543.zip) = 22282
-SHA256 (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 32403b027c0970e328e6746a166c166d5eb7b8ea331dabecb73591650921f683
-SIZE (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 368293
+SHA256 (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = b16b4fdcf7f5990f73c3097b972c3fc0c5d4045736e65b6f768cfab2e8761400
+SIZE (pomerium-envoy-custom/pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = 368288
 SHA256 (pomerium-envoy-custom/aspect-build-bazel-lib-v2.16.0_GH0.tar.gz) = 092f841dd9ea8e736ea834f304877a25190a762d0f0a6c8edac9f94aac8bbf16
 SIZE (pomerium-envoy-custom/aspect-build-bazel-lib-v2.16.0_GH0.tar.gz) = 191222
 SHA256 (pomerium-envoy-custom/grailbio-bazel-compilation-database-40864791135333e1446a04553b63cbe744d358d0_GH0.tar.gz) = acd2a9eaf49272bb1480c67d99b82662f005b596a8c11739046a4220ec73c4da
diff --git a/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch b/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
index a8434d350db9..40825a647903 100644
--- a/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
+++ b/www/pomerium-envoy-custom/files/envoy_freebsd-dependency-imports.patch
@@ -1,11 +1,9 @@
-diff --git a/bazel/dependency_imports.bzl b/bazel/dependency_imports.bzl
-index fc4309a..fa9bcb2 100644
 --- a/bazel/dependency_imports.bzl
 +++ b/bazel/dependency_imports.bzl
-@@ -1,28 +1,16 @@
+@@ -1,96 +1,54 @@
 -load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains", "register_yq_toolchains")
-+load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains")
 -load("@base_pip3//:requirements.bzl", pip_dependencies = "install_deps")
++load("@aspect_bazel_lib//lib:repositories.bzl", "register_jq_toolchains")
  load("@bazel_gazelle//:deps.bzl", "gazelle_dependencies", "go_repository")
 -load("@build_bazel_rules_apple//apple:repositories.bzl", "apple_rules_dependencies")
  load("@com_github_aignas_rules_shellcheck//:deps.bzl", "shellcheck_dependencies")
@@ -17,8 +15,9 @@ index fc4309a..fa9bcb2 100644
  load("@envoy_toolshed//compile:sanitizer_libs.bzl", "setup_sanitizer_libs")
  load("@envoy_toolshed//coverage/grcov:grcov_repository.bzl", "grcov_repository")
 -load("@fuzzing_pip3//:requirements.bzl", pip_fuzzing_dependencies = "install_deps")
- load("@io_bazel_rules_go//go:deps.bzl", "go_download_sdk", "go_register_toolchains", "go_rules_dependencies")
+-load("@io_bazel_rules_go//go:deps.bzl", "go_download_sdk", "go_register_toolchains", "go_rules_dependencies")
 -load("@proxy_wasm_rust_sdk//bazel:dependencies.bzl", "proxy_wasm_rust_sdk_dependencies")
++load("@io_bazel_rules_go//go:deps.bzl", "go_register_toolchains", "go_rules_dependencies")
  load("@rules_buf//buf:repositories.bzl", "rules_buf_toolchains")
  load("@rules_cc//cc:extensions.bzl", "compatibility_proxy_repo")
  load("@rules_foreign_cc//foreign_cc:repositories.bzl", "rules_foreign_cc_dependencies")
@@ -32,7 +31,13 @@ index fc4309a..fa9bcb2 100644
  
  # go version for rules_go
  GO_VERSION = "1.24.6"
-@@ -36,7 +23,6 @@ BUF_VERSION = "v1.56.0"
+ 
+ JQ_VERSION = "1.7"
+ YQ_VERSION = "4.24.4"
+ 
+ BUF_SHA = "5790beb45aaf51a6d7e68ca2255b22e1b14c9ae405a6c472cdcfc228c66abfc1"
+ BUF_VERSION = "v1.56.0"
+ 
  def envoy_dependency_imports(
          go_version = GO_VERSION,
          jq_version = JQ_VERSION,
@@ -40,9 +45,15 @@ index fc4309a..fa9bcb2 100644
          buf_sha = BUF_SHA,
          buf_version = BUF_VERSION):
      compatibility_proxy_repo()
-@@ -47,41 +33,14 @@ def envoy_dependency_imports(
+     rules_foreign_cc_dependencies(
+         register_default_tools = False,
+         register_built_tools = False,
+     )
      go_rules_dependencies()
-     go_register_toolchains(version = "host")
+-    go_register_toolchains(go_version)
+-    if go_version != "host":
+-        envoy_download_go_sdks(go_version)
++    go_register_toolchains(version = "host")
      gazelle_dependencies(go_sdk = "go_sdk")
 -    apple_rules_dependencies()
 -    pip_dependencies()
@@ -83,7 +94,21 @@ index fc4309a..fa9bcb2 100644
      parser_deps()
  
      rules_buf_toolchains(
-@@ -168,9 +127,14 @@ def envoy_dependency_imports(
+         sha256 = buf_sha,
+         version = buf_version,
+     )
+ 
+     setup_sanitizer_libs()
+ 
+     # These dependencies, like most of the Go in this repository, exist only for the API.
+@@ -168,92 +126,63 @@
+         sum = "h1:B/lvg4tQ5hfFZd4V2hcSfFVfUvAK6GSFKxIIzwnkv8g=",
+         version = "v0.0.0-20220520190051-1e77728a1eaa",
+         build_external = "external",
+         build_directives = [
+             "gazelle:resolve go google.golang.org/genproto/googleapis/api/expr/v1alpha1 @org_golang_google_genproto_googleapis_api//expr/v1alpha1",
+         ],
+     )
      go_repository(
          name = "com_github_spf13_afero",
          importpath = "github.com/spf13/afero",
@@ -92,15 +117,16 @@ index fc4309a..fa9bcb2 100644
 +        sum = "h1:EaGW2JJh15aKOejeuJ+wpFSHnbd7GE6Wvp3TsNhb6LY=",
 +        version = "v1.10.0",
          build_external = "external",
-+        build_directives = [
-+            "gazelle:resolve go golang.org/x/text/runes @org_golang_x_text//runes",
-+            "gazelle:resolve go golang.org/x/text/transform @org_golang_x_text//transform",
-+            "gazelle:resolve go golang.org/x/text/unicode/norm @org_golang_x_text//unicode/norm",
-+        ],
          # project_url = "https://pkg.go.dev/github.com/spf13/afero",
          # last_update = "2021-03-20"
          # use_category = ["api"],
-@@ -179,9 +143,18 @@ def envoy_dependency_imports(
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.6.1/dependencies.bzl#L60-L65"
+         build_directives = [
+             "gazelle:resolve go golang.org/x/text/runes @org_golang_x_text//runes",
+             "gazelle:resolve go golang.org/x/text/transform @org_golang_x_text//transform",
+             "gazelle:resolve go golang.org/x/text/unicode/norm @org_golang_x_text//unicode/norm",
+         ],
+     )
      go_repository(
          name = "com_github_lyft_protoc_gen_star_v2",
          importpath = "github.com/lyft/protoc-gen-star/v2",
@@ -110,18 +136,19 @@ index fc4309a..fa9bcb2 100644
 +        version = "v2.0.4-0.20230330145011-496ad1ac90a4",
          build_external = "external",
 +        build_file_generation = "on",
-+        build_directives = [
-+            "gazelle:resolve go github.com/spf13/afero @com_github_spf13_afero//:afero",
+         # project_url = "https://pkg.go.dev/github.com/lyft/protoc-gen-star",
+         # last_update = "2023-01-06"
+         # use_category = ["api"],
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.10.1/dependencies.bzl#L35-L40"
+         build_directives = [
+             "gazelle:resolve go github.com/spf13/afero @com_github_spf13_afero//:afero",
 +            "gazelle:resolve go google.golang.org/protobuf/proto @org_golang_google_protobuf//proto",
 +            "gazelle:resolve go google.golang.org/protobuf/runtime/protoimpl @org_golang_google_protobuf//runtime/protoimpl",
 +            "gazelle:resolve go google.golang.org/protobuf/types/descriptorpb @org_golang_google_protobuf//types/descriptorpb",
 +            "gazelle:resolve go google.golang.org/protobuf/types/pluginpb @org_golang_google_protobuf//types/pluginpb",
-+        ],
+         ],
 +        build_extra_args = ["-exclude=lang/go/goimports.go"],
-         # project_url = "https://pkg.go.dev/github.com/lyft/protoc-gen-star",
-         # last_update = "2023-01-06"
-         # use_category = ["api"],
-@@ -190,8 +163,8 @@ def envoy_dependency_imports(
+     )
      go_repository(
          name = "com_github_iancoleman_strcase",
          importpath = "github.com/iancoleman/strcase",
@@ -132,13 +159,20 @@ index fc4309a..fa9bcb2 100644
          build_external = "external",
          # project_url = "https://pkg.go.dev/github.com/iancoleman/strcase",
          # last_update = "2020-11-22"
-@@ -206,39 +179,5 @@ def envoy_dependency_imports(
+         # use_category = ["api"],
+         # source = "https://github.com/bufbuild/protoc-gen-validate/blob/v0.6.1/dependencies.bzl#L23-L28"
+     )
+     go_repository(
+         name = "com_github_planetscale_vtprotobuf",
+         importpath = "github.com/planetscale/vtprotobuf",
+         sum = "h1:ujRGEVWJEoaxQ+8+HMl8YEpGaDAgohgZxJ5S+d2TTFQ=",
+         version = "v0.6.1-0.20240409071808-615f978279ca",
          build_external = "external",
      )
  
 -    protoc_gen_jsonschema_go_dependencies()
      rules_proto_grpc_toolchains()
- 
+-
 -def envoy_download_go_sdks(go_version):
 -    go_download_sdk(
 -        name = "go_linux_amd64",
diff --git a/www/pomerium-envoy-custom/files/patch-WORKSPACE b/www/pomerium-envoy-custom/files/patch-WORKSPACE
index 2fa04dda109c..2995ee90ffbb 100644
--- a/www/pomerium-envoy-custom/files/patch-WORKSPACE
+++ b/www/pomerium-envoy-custom/files/patch-WORKSPACE
@@ -1,4 +1,4 @@
---- WORKSPACE.orig	2026-03-16 21:25:50 UTC
+--- WORKSPACE.orig	2026-06-25 04:52:37 UTC
 +++ WORKSPACE
 @@ -2,31 +2,6 @@ load("@bazel_tools//tools/build_defs/repo:http.bzl", "
  
@@ -29,7 +29,7 @@
 -
 -hedron_compile_commands_setup_transitive_transitive_transitive()
 -
- envoy_version = "41749943780b54b70b510b1b1a4805ae529e174a"
+ envoy_version = "ee7784f95f506e2a606ae668f0d9f70f9d26af83"
  
  openssh_version = "V_10_2_P1"
 @@ -57,6 +32,26 @@ http_archive(
@@ -57,11 +57,11 @@
 +        "//patches/envoy:freebsd-lz4-qat-removal.patch",
 +        "//patches/envoy:freebsd-inotify.patch",
      ],
-     sha256 = "26de1f5b0497a3b4dba9b6157fc555f3c9f4e1f21214462ebff5b19649304e9f",
+     sha256 = "6064371695a3cae6819f45407d275dc432ce59b95bb18071cfd2e981295baa80",
      strip_prefix = "envoy-" + envoy_version,
-@@ -87,9 +82,30 @@ envoy_python_dependencies()
+@@ -89,7 +84,28 @@ load("@envoy//bazel:dependency_imports.bzl", "envoy_de
  
- envoy_python_dependencies()
+ load("@envoy//bazel:dependency_imports.bzl", "envoy_dependency_imports")
  
 +# FreeBSD: Pre-register rules_proto 7.1.0 before envoy_dependency_imports() runs.
 +# rules_proto_grpc_toolchains() (called inside envoy_dependency_imports) would otherwise
@@ -76,8 +76,6 @@
 +    url = "https://github.com/bazelbuild/rules_proto/archive/refs/tags/7.1.0.tar.gz",
 +)
 +
- load("@envoy//bazel:dependency_imports.bzl", "envoy_dependency_imports")
- 
  envoy_dependency_imports()
 +
 +# FreeBSD: Register @local_jdk compile toolchains before DEFAULT.WORKSPACE.SUFFIX
diff --git a/www/pomerium/Makefile b/www/pomerium/Makefile
index 3afa87c12515..6a76ec37bd7b 100644
--- a/www/pomerium/Makefile
+++ b/www/pomerium/Makefile
@@ -1,7 +1,6 @@
 PORTNAME=	pomerium
 DISTVERSIONPREFIX=	v
-DISTVERSION=	0.32.7
-PORTREVISION=	2
+DISTVERSION=	0.32.9
 PORTEPOCH=	1
 CATEGORIES=	www
 
@@ -49,7 +48,7 @@ GH_TUPLE=	\
 		FiloSottile:csrf:v0.2.1:filosottile_csrf/vendor/filippo.io/csrf \
 		FiloSottile:keygen:790df0a991a0:filosottile_keygen/vendor/filippo.io/keygen \
 		GoogleCloudPlatform:opentelemetry-operations-go:v0.54.0:googlecloudplatform_opentelemetry_operations_go/vendor/github.com/GoogleCloudPlatform/opentelemetry-operations-go \
-		GoogleCloudPlatform:opentelemetry-operations-go:detectors/gcp/v1.30.0:googlecloudplatform_opentelemetry_operations_go_gcp \
+		GoogleCloudPlatform:opentelemetry-operations-go:detectors/gcp/v1.31.0:googlecloudplatform_opentelemetry_operations_go_gcp \
 		Masterminds:semver:v3.4.0:masterminds_semver_v3/vendor/github.com/Masterminds/semver/v3 \
 		Microsoft:go-winio:v0.6.2:microsoft_go_winio/vendor/github.com/Microsoft/go-winio \
 		RaduBerinde:axisds:5135a0650657:raduberinde_axisds/vendor/github.com/RaduBerinde/axisds \
@@ -110,7 +109,7 @@ GH_TUPLE=	\
 		ebitengine:purego:v0.8.4:ebitengine_purego/vendor/github.com/ebitengine/purego \
 		envoyproxy:go-control-plane:envoy/v1.36.0:envoyproxy_go_control_plane/vendor/github.com/envoyproxy/go-control-plane \
 		envoyproxy:protoc-gen-validate:v1.3.0:envoyproxy_protoc_gen_validate/vendor/github.com/envoyproxy/protoc-gen-validate \
-		exaring:otelpgx:v0.9.4:exaring_otelpgx/vendor/github.com/exaring/otelpgx \
+		exaring:otelpgx:v0.10.0:exaring_otelpgx/vendor/github.com/exaring/otelpgx \
 		fatih:color:v1.18.0:fatih_color/vendor/github.com/fatih/color \
 		felixge:httpsnoop:v1.0.4:felixge_httpsnoop/vendor/github.com/felixge/httpsnoop \
 		fsnotify:fsnotify:v1.9.0:fsnotify_fsnotify/vendor/github.com/fsnotify/fsnotify \
@@ -119,8 +118,8 @@ GH_TUPLE=	\
 		getsentry:sentry-go:v0.27.0:getsentry_sentry_go/vendor/github.com/getsentry/sentry-go \
 		go-chi:chi:v5.2.3:go_chi_chi_v5/vendor/github.com/go-chi/chi/v5 \
 		go-ini:ini:v1.67.0:go_ini_ini/vendor/github.com/go-ini/ini \
-		go-jose:go-jose:v3.0.4:go_jose_go_jose_v3/vendor/github.com/go-jose/go-jose/v3 \
-		go-jose:go-jose:v4.1.3:go_jose_go_jose_v4/vendor/github.com/go-jose/go-jose/v4 \
+		go-jose:go-jose:v3.0.5:go_jose_go_jose_v3/vendor/github.com/go-jose/go-jose/v3 \
+		go-jose:go-jose:v4.1.4:go_jose_go_jose_v4/vendor/github.com/go-jose/go-jose/v4 \
 		go-kit:log:v0.2.1:go_kit_log/vendor/github.com/go-kit/log \
 		go-logfmt:logfmt:v0.6.0:go_logfmt_logfmt/vendor/github.com/go-logfmt/logfmt \
 		go-logr:logr:v1.4.3:go_logr_logr/vendor/github.com/go-logr/logr \
@@ -132,26 +131,26 @@ GH_TUPLE=	\
 		gobwas:glob:v0.2.3:gobwas_glob/vendor/github.com/gobwas/glob \
 		goccy:go-json:v0.10.5:goccy_go_json/vendor/github.com/goccy/go-json \
 		gogo:protobuf:v1.3.2:gogo_protobuf/vendor/github.com/gogo/protobuf \
-		golang:crypto:v0.47.0:golang_crypto/vendor/golang.org/x/crypto \
+		golang:crypto:v0.52.0:golang_crypto/vendor/golang.org/x/crypto \
 		golang:exp:944ab1f22d93:golang_exp/vendor/golang.org/x/exp \
 		golang:groupcache:2c02b8208cf8:golang_groupcache/vendor/github.com/golang/groupcache \
-		golang:mod:v0.32.0:golang_mod/vendor/golang.org/x/mod \
-		golang:net:v0.49.0:golang_net/vendor/golang.org/x/net \
-		golang:oauth2:v0.34.0:golang_oauth2/vendor/golang.org/x/oauth2 \
+		golang:mod:v0.36.0:golang_mod/vendor/golang.org/x/mod \
+		golang:net:v0.55.0:golang_net/vendor/golang.org/x/net \
+		golang:oauth2:v0.35.0:golang_oauth2/vendor/golang.org/x/oauth2 \
 		golang:snappy:v1.0.0:golang_snappy/vendor/github.com/golang/snappy \
-		golang:sync:v0.19.0:golang_sync/vendor/golang.org/x/sync \
-		golang:sys:v0.40.0:golang_sys/vendor/golang.org/x/sys \
-		golang:term:v0.39.0:golang_term/vendor/golang.org/x/term \
-		golang:text:v0.33.0:golang_text/vendor/golang.org/x/text \
+		golang:sync:v0.21.0:golang_sync/vendor/golang.org/x/sync \
+		golang:sys:v0.46.0:golang_sys/vendor/golang.org/x/sys \
+		golang:term:v0.44.0:golang_term/vendor/golang.org/x/term \
+		golang:text:v0.38.0:golang_text/vendor/golang.org/x/text \
 		golang:time:v0.14.0:golang_time/vendor/golang.org/x/time \
-		golang:tools:v0.41.0:golang_tools/vendor/golang.org/x/tools \
+		golang:tools:v0.45.0:golang_tools/vendor/golang.org/x/tools \
 		google:btree:v1.1.3:google_btree/vendor/github.com/google/btree \
 		google:cel-go:v0.26.1:google_cel_go/vendor/github.com/google/cel-go \
 		google:cel-spec:v0.25.1:google_cel_spec/vendor/cel.dev/expr \
 		google:go-cmp:v0.7.0:google_go_cmp/vendor/github.com/google/go-cmp \
 		google:go-genproto:9219d122eba9:google_go_genproto/vendor/google.golang.org/genproto \
-		google:go-genproto:0a764e51fe1b:google_go_genproto_api/vendor/google.golang.org/genproto/googleapis/api \
-		google:go-genproto:97cd9d5aeac2:google_go_genproto_rpc/vendor/google.golang.org/genproto/googleapis/rpc \
+		google:go-genproto:9d38bb4040a9:google_go_genproto_api/vendor/google.golang.org/genproto/googleapis/api \
+		google:go-genproto:6f92a3bedf2d:google_go_genproto_rpc/vendor/google.golang.org/genproto/googleapis/rpc \
 		google:go-jsonnet:v0.21.0:google_go_jsonnet/vendor/github.com/google/go-jsonnet \
 		google:go-tpm:v0.9.8:google_go_tpm/vendor/github.com/google/go-tpm \
 		google:jsonschema-go:v0.4.2:google_jsonschema_go/vendor/github.com/google/jsonschema-go \
@@ -172,8 +171,8 @@ GH_TUPLE=	\
 		gorilla:websocket:e064f32e3674:gorilla_websocket/vendor/github.com/gorilla/websocket \
 		gregjones:httpcache:901d90724c79:gregjones_httpcache/vendor/github.com/gregjones/httpcache \
 		grpc-ecosystem:go-grpc-middleware:v2.3.3:grpc_ecosystem_go_grpc_middleware_v2/vendor/github.com/grpc-ecosystem/go-grpc-middleware/v2 \
-		grpc-ecosystem:grpc-gateway:v2.27.3:grpc_ecosystem_grpc_gateway_v2/vendor/github.com/grpc-ecosystem/grpc-gateway/v2 \
-		grpc:grpc-go:v1.79.3:grpc_grpc_go/vendor/google.golang.org/grpc \
+		grpc-ecosystem:grpc-gateway:v2.28.0:grpc_ecosystem_grpc_gateway_v2/vendor/github.com/grpc-ecosystem/grpc-gateway/v2 \
+		grpc:grpc-go:v1.80.0:grpc_grpc_go/vendor/google.golang.org/grpc \
 		hashicorp:errwrap:v1.1.0:hashicorp_errwrap/vendor/github.com/hashicorp/errwrap \
 		hashicorp:go-hclog:v1.6.2:hashicorp_go_hclog/vendor/github.com/hashicorp/go-hclog \
 		hashicorp:go-immutable-radix:v1.0.0:hashicorp_go_immutable_radix/vendor/github.com/hashicorp/go-immutable-radix \
@@ -237,12 +236,12 @@ GH_TUPLE=	\
 		onsi:ginkgo:v1.16.5:onsi_ginkgo/vendor/github.com/onsi/ginkgo \
 		open-policy-agent:opa:v1.12.1:open_policy_agent_opa/vendor/github.com/open-policy-agent/opa \
 		open-telemetry:opentelemetry-go-contrib:detectors/gcp/v1.39.0:open_telemetry_opentelemetry_go_contrib/vendor/go.opentelemetry.io/contrib \
-		open-telemetry:opentelemetry-go-contrib:instrumentation/google.golang.org/grpc/otelgrpc/v0.64.0:open_telemetry_opentelemetry_go_contrib_1 \
-		open-telemetry:opentelemetry-go-contrib:instrumentation/net/http/otelhttp/v0.64.0:open_telemetry_opentelemetry_go_contrib_2 \
-		open-telemetry:opentelemetry-go-contrib:propagators/autoprop/v0.64.0:open_telemetry_opentelemetry_go_contrib_3 \
+		open-telemetry:opentelemetry-go-contrib:instrumentation/google.golang.org/grpc/otelgrpc/v0.68.0:open_telemetry_opentelemetry_go_contrib_1 \
+		open-telemetry:opentelemetry-go-contrib:instrumentation/net/http/otelhttp/v0.68.0:open_telemetry_opentelemetry_go_contrib_2 \
+		open-telemetry:opentelemetry-go-contrib:propagators/autoprop/v0.68.0:open_telemetry_opentelemetry_go_contrib_3 \
 		open-telemetry:opentelemetry-go-instrumentation:sdk/v1.2.1:open_telemetry_opentelemetry_go_instrumentation \
-		open-telemetry:opentelemetry-go:v1.40.0:open_telemetry_opentelemetry_go/vendor/go.opentelemetry.io/otel \
-		open-telemetry:opentelemetry-proto-go:v1.9.0:open_telemetry_opentelemetry_proto_go \
+		open-telemetry:opentelemetry-go:v1.43.0:open_telemetry_opentelemetry_go/vendor/go.opentelemetry.io/otel \
+		open-telemetry:opentelemetry-proto-go:v1.10.0:open_telemetry_opentelemetry_proto_go \
 		opencontainers:go-digest:v1.0.0:opencontainers_go_digest/vendor/github.com/opencontainers/go-digest \
 		opencontainers:image-spec:v1.1.1:opencontainers_image_spec/vendor/github.com/opencontainers/image-spec \
 		pelletier:go-toml:v2.2.4:pelletier_go_toml_v2/vendor/github.com/pelletier/go-toml/v2 \
@@ -253,7 +252,7 @@ GH_TUPLE=	\
 		planetscale:vtprotobuf:0393e58bdf10:planetscale_vtprotobuf/vendor/github.com/planetscale/vtprotobuf \
 		pmezard:go-difflib:5d4384ee4fb2:pmezard_go_difflib/vendor/github.com/pmezard/go-difflib \
 		pomerium:datasource:1f58110d0e17:pomerium_datasource/vendor/github.com/pomerium/datasource \
-		pomerium:envoy-custom:v1.36.5-p1:pomerium_envoy_custom/vendor/github.com/pomerium/envoy-custom \
+		pomerium:envoy-custom:v1.36.8-p1:pomerium_envoy_custom/vendor/github.com/pomerium/envoy-custom \
 		pomerium:protoutil:19d2ae5b7518:pomerium_protoutil/vendor/github.com/pomerium/protoutil \
 		pomerium:webauthn:d32e028c3f7e:pomerium_webauthn/vendor/github.com/pomerium/webauthn \
 		power-devops:perfstat:82ca36839d55:power_devops_perfstat/vendor/github.com/power-devops/perfstat \
@@ -261,7 +260,7 @@ GH_TUPLE=	\
 		prometheus:client_model:v0.6.2:prometheus_client_model/vendor/github.com/prometheus/client_model \
 		prometheus:common:v0.67.5:prometheus_common/vendor/github.com/prometheus/common \
 		prometheus:otlptranslator:v1.0.0:prometheus_otlptranslator/vendor/github.com/prometheus/otlptranslator \
-		prometheus:procfs:v0.19.2:prometheus_procfs/vendor/github.com/prometheus/procfs \
+		prometheus:procfs:v0.20.1:prometheus_procfs/vendor/github.com/prometheus/procfs \
 		prometheus:statsd_exporter:v0.22.7:prometheus_statsd_exporter/vendor/github.com/prometheus/statsd_exporter \
 		protocolbuffers:protobuf-go:v1.36.11:protocolbuffers_protobuf_go/vendor/google.golang.org/protobuf \
 		quic-go:qpack:v0.6.0:quic_go_qpack/vendor/github.com/quic-go/qpack \
@@ -314,7 +313,7 @@ GH_TUPLE=	\
 		xeipuuv:gojsonpointer:02993c407bfb:xeipuuv_gojsonpointer/vendor/github.com/xeipuuv/gojsonpointer \
 		xeipuuv:gojsonreference:bd5ef7bd5415:xeipuuv_gojsonreference/vendor/github.com/xeipuuv/gojsonreference \
 		xo:terminfo:abceb7e1c41e:xo_terminfo/vendor/github.com/xo/terminfo \
-		yaml:go-yaml:v2.4.3:yaml_go_yaml_v2/vendor/go.yaml.in/yaml/v2 \
+		yaml:go-yaml:v2.4.4:yaml_go_yaml_v2/vendor/go.yaml.in/yaml/v2 \
 		yaml:go-yaml:v3.0.4:yaml_go_yaml_v3b/vendor/go.yaml.in/yaml/v3 \
 		yashtewari:glob-intersection:v0.2.0:yashtewari_glob_intersection/vendor/github.com/yashtewari/glob-intersection \
 		yosida95:uritemplate:v3.0.2:yosida95_uritemplate_v3/vendor/github.com/yosida95/uritemplate/v3 \
diff --git a/www/pomerium/distinfo b/www/pomerium/distinfo
index 4f443448f9df..344d651032fd 100644
--- a/www/pomerium/distinfo
+++ b/www/pomerium/distinfo
@@ -1,10 +1,10 @@
-TIMESTAMP = 1778215152
+TIMESTAMP = 1782359383
 SHA256 (fa4f82cfbf4d.tar.gz) = 891b75c04158d7ac1eccec7bf376b2d2cfb8a5f4d57f5cf4ef4daf4dede25afe
 SIZE (fa4f82cfbf4d.tar.gz) = 3290
 SHA256 (v1.36.11-20251209175733-2a1774d88802.1.zip) = b4928dfcf0ef0f3b485ccd35ca08ef58357d8ecdc9899d267784b789b5873c8f
 SIZE (v1.36.11-20251209175733-2a1774d88802.1.zip) = 116757
-SHA256 (pomerium-pomerium-v0.32.7_GH0.tar.gz) = 7a3fd6d8b3b1ff49645a82da1a83a6713afb1b631cf45bb2dab56eeb0c2dfaeb
-SIZE (pomerium-pomerium-v0.32.7_GH0.tar.gz) = 1909983
+SHA256 (pomerium-pomerium-v0.32.9_GH0.tar.gz) = ca69ae564e584be021dd2af85b8ccda0f791842dff9488f1e463cb26916f1d7c
+SIZE (pomerium-pomerium-v0.32.9_GH0.tar.gz) = 1910108
 SHA256 (Azure-go-ansiterm-faa5f7b0171c_GH0.tar.gz) = 16edfdc38ba67f0edc9508b882c7bb2bbeb2ac71aea3f7a78a5f745c0a75d2d4
 SIZE (Azure-go-ansiterm-faa5f7b0171c_GH0.tar.gz) = 22895
 SHA256 (CAFxX-httpcompression-v0.0.9_GH0.tar.gz) = 1e0b095d0fed3500971483ae3efe65ad0d857b62008af937d02e05ca9b316226
@@ -19,8 +19,8 @@ SHA256 (FiloSottile-keygen-790df0a991a0_GH0.tar.gz) = da7a52efefa1b26c8cc9f81014
 SIZE (FiloSottile-keygen-790df0a991a0_GH0.tar.gz) = 9545
 SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-v0.54.0_GH0.tar.gz) = 6d5ee45f0d081c99aa90cd4d8458c37a864835fabdb77584bf66a51c4c88da5d
 SIZE (GoogleCloudPlatform-opentelemetry-operations-go-v0.54.0_GH0.tar.gz) = 1158265
-SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.30.0_GH0.tar.gz) = 766a76f654f5d2ab5a4557b14bfb70e848ac3eff02b38d4855317a0974cf94e6
-SIZE (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.30.0_GH0.tar.gz) = 1159329
+SHA256 (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.31.0_GH0.tar.gz) = 48425fd0befdfab61b79d8c3eb341f3d85882de9127dff5861162340cbfb0f68
+SIZE (GoogleCloudPlatform-opentelemetry-operations-go-detectors-gcp-v1.31.0_GH0.tar.gz) = 1160942
 SHA256 (Masterminds-semver-v3.4.0_GH0.tar.gz) = 47f43127587cd7750f2054c9ebab8851a3ea2011aefd7cc5319624dac8810799
 SIZE (Masterminds-semver-v3.4.0_GH0.tar.gz) = 30813
 SHA256 (Microsoft-go-winio-v0.6.2_GH0.tar.gz) = 0bf0aedbb0a38c494fda60804679e270fe98ca05dc9c2659584df1e3e1e0bd17
@@ -141,8 +141,8 @@ SHA256 (envoyproxy-go-control-plane-envoy-v1.36.0_GH0.tar.gz) = dea2aaa916aa7a35
 SIZE (envoyproxy-go-control-plane-envoy-v1.36.0_GH0.tar.gz) = 3684745
 SHA256 (envoyproxy-protoc-gen-validate-v1.3.0_GH0.tar.gz) = 26dc6db523ee943af51fdfc292658a2dbe7046735654f1dc839745988f0fe26b
 SIZE (envoyproxy-protoc-gen-validate-v1.3.0_GH0.tar.gz) = 190514
-SHA256 (exaring-otelpgx-v0.9.4_GH0.tar.gz) = feee1c13cce3d12f318de3011329860cee259dfbaf3ac266c20d40bbc0ebddaf
-SIZE (exaring-otelpgx-v0.9.4_GH0.tar.gz) = 15873
+SHA256 (exaring-otelpgx-v0.10.0_GH0.tar.gz) = effb95ba7ce11e04168b6a9044e0d5666e214bc65e8e5392a287a4fa807483c7
+SIZE (exaring-otelpgx-v0.10.0_GH0.tar.gz) = 16165
 SHA256 (fatih-color-v1.18.0_GH0.tar.gz) = 586b2b42a4165ac52b35808be1238f90d109789bfcb1ddecd3f512eddbac0a9f
 SIZE (fatih-color-v1.18.0_GH0.tar.gz) = 12717
 SHA256 (felixge-httpsnoop-v1.0.4_GH0.tar.gz) = ffb63ba081e4c2360342dea2079d08b8560c315b2f458885fd34639786a1aa3d
@@ -159,10 +159,10 @@ SHA256 (go-chi-chi-v5.2.3_GH0.tar.gz) = 7099aa43243f3ed21dd5cde7a63c2a6b09403533
 SIZE (go-chi-chi-v5.2.3_GH0.tar.gz) = 87936
 SHA256 (go-ini-ini-v1.67.0_GH0.tar.gz) = 06ba51234140118d1b6064f1817aa89cc971c6e7ce04cb9d286e6660d89296c8
 SIZE (go-ini-ini-v1.67.0_GH0.tar.gz) = 53531
-SHA256 (go-jose-go-jose-v3.0.4_GH0.tar.gz) = 37a602b9edf79aa6a1c4976aaef5c6d87248040882f952aaad2afeb39f69765d
-SIZE (go-jose-go-jose-v3.0.4_GH0.tar.gz) = 320917
-SHA256 (go-jose-go-jose-v4.1.3_GH0.tar.gz) = 2e6ca9b7c384154486c7cb04465103415b8808e2a98f17118646ee217c3c7acf
-SIZE (go-jose-go-jose-v4.1.3_GH0.tar.gz) = 321258
+SHA256 (go-jose-go-jose-v3.0.5_GH0.tar.gz) = d1195e5f8712785b247476d63df886e2c5bbb7defa721c4ed8a311d5da72dfa7
+SIZE (go-jose-go-jose-v3.0.5_GH0.tar.gz) = 322240
+SHA256 (go-jose-go-jose-v4.1.4_GH0.tar.gz) = a8c9fade9971831045e8b7d78f641546639f9f0088477e8d9717a637320c8004
+SIZE (go-jose-go-jose-v4.1.4_GH0.tar.gz) = 322427
 SHA256 (go-kit-log-v0.2.1_GH0.tar.gz) = b37718967f9cbdb3eea4aa2fa9420b7d329b6bab7f9b85f970db197257226152
 SIZE (go-kit-log-v0.2.1_GH0.tar.gz) = 30579
 SHA256 (go-logfmt-logfmt-v0.6.0_GH0.tar.gz) = e4c26af3226cee1486004da7ebb1f0b8485df62513cca6671edf7c4d420fadfd
@@ -185,32 +185,32 @@ SHA256 (goccy-go-json-v0.10.5_GH0.tar.gz) = 15a6994e238a3d520816d53eacd115e6d3fd
 SIZE (goccy-go-json-v0.10.5_GH0.tar.gz) = 399031
 SHA256 (gogo-protobuf-v1.3.2_GH0.tar.gz) = 2bb4b13d6e56b3911f09b8e9ddd15708477fbff8823c057cc79dd99c9a452b34
 SIZE (gogo-protobuf-v1.3.2_GH0.tar.gz) = 2038725
-SHA256 (golang-crypto-v0.47.0_GH0.tar.gz) = b0945266477967f1e5000fb396fca14e91affb701c3ed9d91a6091da57e91809
-SIZE (golang-crypto-v0.47.0_GH0.tar.gz) = 2148933
+SHA256 (golang-crypto-v0.52.0_GH0.tar.gz) = ff347c068bf7bc9affc18579ef637740750aa269f9c0afb82d4f3a7a9269a20f
+SIZE (golang-crypto-v0.52.0_GH0.tar.gz) = 2136175
 SHA256 (golang-exp-944ab1f22d93_GH0.tar.gz) = 21c85f787e766c27a84a3b7ef7dcdfac8b87940dd7be702737aabe2d176d2cfc
 SIZE (golang-exp-944ab1f22d93_GH0.tar.gz) = 1762417
 SHA256 (golang-groupcache-2c02b8208cf8_GH0.tar.gz) = b1c7464afcdeeca03a78abc75a514e9dcf03f87be4d407f64f8a5357596b4dbb
 SIZE (golang-groupcache-2c02b8208cf8_GH0.tar.gz) = 26678
-SHA256 (golang-mod-v0.32.0_GH0.tar.gz) = 720e07d384a0dd9822afd605670ba645d1c2e53981a0b9b303c1ddc3a1f0d150
-SIZE (golang-mod-v0.32.0_GH0.tar.gz) = 126357
-SHA256 (golang-net-v0.49.0_GH0.tar.gz) = b1b704222b6be7ed2e1f8c0d456b973c708b6065a1fe9aab1526a10baf5c01a1
-SIZE (golang-net-v0.49.0_GH0.tar.gz) = 1528587
-SHA256 (golang-oauth2-v0.34.0_GH0.tar.gz) = 7b5aa72ed4631661a3a8fafbc779724296b57d946bd2c0d5e513e48c8e83329f
-SIZE (golang-oauth2-v0.34.0_GH0.tar.gz) = 100945
+SHA256 (golang-mod-v0.36.0_GH0.tar.gz) = 21c13bc31e267cccd1daa515d6769649165acc856119f793bef364ab57a70565
+SIZE (golang-mod-v0.36.0_GH0.tar.gz) = 127866
+SHA256 (golang-net-v0.55.0_GH0.tar.gz) = 38f60aa36e15d9233e9a4386f020168adaca5c829a60b7e80ab6f942dd47ffb1
+SIZE (golang-net-v0.55.0_GH0.tar.gz) = 1341991
+SHA256 (golang-oauth2-v0.35.0_GH0.tar.gz) = 6183dae34900fc962e6f8303c635b7887b72ca4b011093ebdb384e14229945e4
+SIZE (golang-oauth2-v0.35.0_GH0.tar.gz) = 102697
 SHA256 (golang-snappy-v1.0.0_GH0.tar.gz) = 433e6bf6a8380f57dd92020542d865802124e4a9139dc0b1fab5ff51704310bf
 SIZE (golang-snappy-v1.0.0_GH0.tar.gz) = 66168
-SHA256 (golang-sync-v0.19.0_GH0.tar.gz) = bb77b590cf5b3703d30cbd19a4ac7ed5f0fb4af67fbc87340ba06023e81db533
-SIZE (golang-sync-v0.19.0_GH0.tar.gz) = 18196
-SHA256 (golang-sys-v0.40.0_GH0.tar.gz) = 1f52e73c517335a1d3c1d62ac5dbd36af6d397ad9bfb78a991c2b4d772ca3ce7
-SIZE (golang-sys-v0.40.0_GH0.tar.gz) = 1535845
-SHA256 (golang-term-v0.39.0_GH0.tar.gz) = af3fd180f332a354cbdfee08b4fab0f4a8c00f4637b96e76ee0d9344e34173f5
-SIZE (golang-term-v0.39.0_GH0.tar.gz) = 16449
-SHA256 (golang-text-v0.33.0_GH0.tar.gz) = c693bfb21a3b4cc433a85c1ba726887c675366976593c7588f177064a01e6252
-SIZE (golang-text-v0.33.0_GH0.tar.gz) = 8970561
+SHA256 (golang-sync-v0.21.0_GH0.tar.gz) = 375daf62cdc3612f7155587763b2b15562ac5aff1e38000c5853a5c1644f7dc7
+SIZE (golang-sync-v0.21.0_GH0.tar.gz) = 18187
+SHA256 (golang-sys-v0.46.0_GH0.tar.gz) = d5987b98206b0dca2768fd31ef078e40a1671db231c062f175bfea6af6d3176b
+SIZE (golang-sys-v0.46.0_GH0.tar.gz) = 1549880
+SHA256 (golang-term-v0.44.0_GH0.tar.gz) = b5238a70779c6aad2b9309565a2d5744823e7efba857e8c6086b37b5d918983a
+SIZE (golang-term-v0.44.0_GH0.tar.gz) = 16449
+SHA256 (golang-text-v0.38.0_GH0.tar.gz) = a2506f66cd14b919b0314d396530bfc325d14b2242b5547f827506bee65995b8
+SIZE (golang-text-v0.38.0_GH0.tar.gz) = 6772269
 SHA256 (golang-time-v0.14.0_GH0.tar.gz) = beae412dac1d5dd931348f9c40c346b730330020172b12a8b529bf452a9da2fb
 SIZE (golang-time-v0.14.0_GH0.tar.gz) = 12526
-SHA256 (golang-tools-v0.41.0_GH0.tar.gz) = 2df1ea5f56bb095c396b3a2d65252db15321165e785b7e5d9f5d78230e1cc68f
-SIZE (golang-tools-v0.41.0_GH0.tar.gz) = 8346906
+SHA256 (golang-tools-v0.45.0_GH0.tar.gz) = 1763e56760a51f25ddf1e73cc8ada35c3f81f2fa1094b6118acaa8ec5a51a146
+SIZE (golang-tools-v0.45.0_GH0.tar.gz) = 8503442
 SHA256 (google-btree-v1.1.3_GH0.tar.gz) = ecb1f97cff16ce5b18a12ed31728a82a8e0df0c0181febf2b9c39dd3ed362ffd
 SIZE (google-btree-v1.1.3_GH0.tar.gz) = 19772
 SHA256 (google-cel-go-v0.26.1_GH0.tar.gz) = f2d94e621d87f361713b220419c54f3630c6f23368b8e643d50f4330da16ac1d
@@ -221,10 +221,10 @@ SHA256 (google-go-cmp-v0.7.0_GH0.tar.gz) = c98f4f998ad8134b26816500b5c4c5cd63299
 SIZE (google-go-cmp-v0.7.0_GH0.tar.gz) = 105149
 SHA256 (google-go-genproto-9219d122eba9_GH0.tar.gz) = 7437c020a141617d99b56cacd848e7567a573136b25836b3834c3eb95340851d
 SIZE (google-go-genproto-9219d122eba9_GH0.tar.gz) = 5914335
-SHA256 (google-go-genproto-0a764e51fe1b_GH0.tar.gz) = 4247e7f1aea325c27ba18f172c9ebacb0d509413b60ba67a822ae532e4a552a9
-SIZE (google-go-genproto-0a764e51fe1b_GH0.tar.gz) = 5924455
-SHA256 (google-go-genproto-97cd9d5aeac2_GH0.tar.gz) = a2da073360202c657f54bcfad28fe6355c25527765d3adef54291a860371d632
-SIZE (google-go-genproto-97cd9d5aeac2_GH0.tar.gz) = 5924246
+SHA256 (google-go-genproto-9d38bb4040a9_GH0.tar.gz) = f6d914f748f038b6d2e3f9842d369f69ed193c65a4e83b46f929f3d5d562b981
+SIZE (google-go-genproto-9d38bb4040a9_GH0.tar.gz) = 5951642
+SHA256 (google-go-genproto-6f92a3bedf2d_GH0.tar.gz) = 7d14f1c664322581dbe357098fc061d5deefcca3c626e5e8a2cd24154248dd2a
+SIZE (google-go-genproto-6f92a3bedf2d_GH0.tar.gz) = 5951736
 SHA256 (google-go-jsonnet-v0.21.0_GH0.tar.gz) = ee7aa004e78fb49608bcf28142a7494dc204a07cc07d323dd2cff3d97298c696
 SIZE (google-go-jsonnet-v0.21.0_GH0.tar.gz) = 757762
 SHA256 (google-go-tpm-v0.9.8_GH0.tar.gz) = 93b44f860c962bc92b7ab5af4d9b19b2e497e1e46a14a9a7500af13f46742587
@@ -265,10 +265,10 @@ SHA256 (gregjones-httpcache-901d90724c79_GH0.tar.gz) = 2280e11c0ac820bc32717ccb8
 SIZE (gregjones-httpcache-901d90724c79_GH0.tar.gz) = 14164
 SHA256 (grpc-ecosystem-go-grpc-middleware-v2.3.3_GH0.tar.gz) = 653cae72dbba078a04eb6eda0e8b330b3832a5794af28829c32a965aa26a29d0
 SIZE (grpc-ecosystem-go-grpc-middleware-v2.3.3_GH0.tar.gz) = 334677
-SHA256 (grpc-ecosystem-grpc-gateway-v2.27.3_GH0.tar.gz) = 9717bae2d2f783d73f165d57a1f70327abf21629198527b2be09efe43f5ba167
-SIZE (grpc-ecosystem-grpc-gateway-v2.27.3_GH0.tar.gz) = 908363
-SHA256 (grpc-grpc-go-v1.79.3_GH0.tar.gz) = cf6ccdf552571e6a85072bcbbc16d0d6d7e71591f9415ee1c8e3e4bb4d5a6e51
-SIZE (grpc-grpc-go-v1.79.3_GH0.tar.gz) = 2973062
+SHA256 (grpc-ecosystem-grpc-gateway-v2.28.0_GH0.tar.gz) = 3ccc41d6384f478413c9e84cf1560ba7184b302f8f030ded12063b85d2b7156e
+SIZE (grpc-ecosystem-grpc-gateway-v2.28.0_GH0.tar.gz) = 933882
+SHA256 (grpc-grpc-go-v1.80.0_GH0.tar.gz) = 69942eecf155d0e8d9ea5e74284254e92961b01865daabd06f15361ed1557115
+SIZE (grpc-grpc-go-v1.80.0_GH0.tar.gz) = 2993187
 SHA256 (hashicorp-errwrap-v1.1.0_GH0.tar.gz) = 0d73891a7a179e50a142ac8832db97b17c792d29ae205b0e6aeedde4c43d51a4
 SIZE (hashicorp-errwrap-v1.1.0_GH0.tar.gz) = 8581
 SHA256 (hashicorp-go-hclog-v1.6.2_GH0.tar.gz) = 1c7898893b0260c07bf07d7a9f5685e89e43d4f95343bb74e93552b6c51d5c17
@@ -395,18 +395,18 @@ SHA256 (open-policy-agent-opa-v1.12.1_GH0.tar.gz) = 52dbb092c56102fff61bb920d441
 SIZE (open-policy-agent-opa-v1.12.1_GH0.tar.gz) = 20514844
 SHA256 (open-telemetry-opentelemetry-go-contrib-detectors-gcp-v1.39.0_GH0.tar.gz) = 226e02872e29d9d4cec6f937b0525d157b3496efbee1def096113e9d3a2dc46c
 SIZE (open-telemetry-opentelemetry-go-contrib-detectors-gcp-v1.39.0_GH0.tar.gz) = 769509
-SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.64.0_GH0.tar.gz) = c4a542d5a7b25ab8c1055539931f96e5dc52e42356729e471164b3ce670345e1
-SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.64.0_GH0.tar.gz) = 768582
-SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.64.0_GH0.tar.gz) = 8c1894cf42fdd29c1f156fad38b95fc8e147fc563b689b956a4327f20010fa9d
-SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.64.0_GH0.tar.gz) = 769389
-SHA256 (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.64.0_GH0.tar.gz) = f0e39fe2532d3c285ac1a4581040343d23272289cfe2ebe49fd881078aa1a7a3
-SIZE (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.64.0_GH0.tar.gz) = 769549
+SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.68.0_GH0.tar.gz) = b3d7ea4bc31fa1be9848cf534dc3887734ec7fa80298c95aa97f3ccc5a24d962
+SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-google.golang.org-grpc-otelgrpc-v0.68.0_GH0.tar.gz) = 836045
+SHA256 (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.68.0_GH0.tar.gz) = 4ad91b08b6700d5803e5758a0bed12223abe7c5c8442d83ffb5abd39b11e33a1
+SIZE (open-telemetry-opentelemetry-go-contrib-instrumentation-net-http-otelhttp-v0.68.0_GH0.tar.gz) = 838032
+SHA256 (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.68.0_GH0.tar.gz) = fca863897676aa4c3b8810b26fe66a464dd9ac53844d0a0ed91894049cde4e06
+SIZE (open-telemetry-opentelemetry-go-contrib-propagators-autoprop-v0.68.0_GH0.tar.gz) = 837749
 SHA256 (open-telemetry-opentelemetry-go-instrumentation-sdk-v1.2.1_GH0.tar.gz) = 7556703696704f18af8de85e4b545cd7e92329ecfd98d11bf4bcb700497d9192
 SIZE (open-telemetry-opentelemetry-go-instrumentation-sdk-v1.2.1_GH0.tar.gz) = 1876442
-SHA256 (open-telemetry-opentelemetry-go-v1.40.0_GH0.tar.gz) = 1c3432b6ed2c6499ebda757388698ce82b435812d92faef221e3682f1a5cddfb
-SIZE (open-telemetry-opentelemetry-go-v1.40.0_GH0.tar.gz) = 3490904
-SHA256 (open-telemetry-opentelemetry-proto-go-v1.9.0_GH0.tar.gz) = 87b9d9dab8f5f4ceae467fe7c277cac4804621d052e39b82c06ff96b54c9961e
-SIZE (open-telemetry-opentelemetry-proto-go-v1.9.0_GH0.tar.gz) = 150753
+SHA256 (open-telemetry-opentelemetry-go-v1.43.0_GH0.tar.gz) = f8ce59f6705b718114124b234a5761a9e9141261faa9b31d4a2a86b14e988e52
+SIZE (open-telemetry-opentelemetry-go-v1.43.0_GH0.tar.gz) = 3727029
+SHA256 (open-telemetry-opentelemetry-proto-go-v1.10.0_GH0.tar.gz) = 2d39f83c69410c481293b005abfc2c2b259b1281179687099384aa948666d501
+SIZE (open-telemetry-opentelemetry-proto-go-v1.10.0_GH0.tar.gz) = 153463
 SHA256 (opencontainers-go-digest-v1.0.0_GH0.tar.gz) = 1e74706d265c92f62793af741e322163f3c08afa66f5a7926c9b9ccb44fed230
 SIZE (opencontainers-go-digest-v1.0.0_GH0.tar.gz) = 24456
 SHA256 (opencontainers-image-spec-v1.1.1_GH0.tar.gz) = fff64f2ae3a11a307227d27ba599f1e56b436301c5a2faedd57907ac97d2ac94
@@ -427,8 +427,8 @@ SHA256 (pmezard-go-difflib-5d4384ee4fb2_GH0.tar.gz) = 8574a5cbc435057352a17ff9e6
 SIZE (pmezard-go-difflib-5d4384ee4fb2_GH0.tar.gz) = 11395
 SHA256 (pomerium-datasource-1f58110d0e17_GH0.tar.gz) = 0b17bf2fa93f76b8b676215d32461de1f799abdc999ec94f470d16b935ed3341
 SIZE (pomerium-datasource-1f58110d0e17_GH0.tar.gz) = 411602
-SHA256 (pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 32403b027c0970e328e6746a166c166d5eb7b8ea331dabecb73591650921f683
-SIZE (pomerium-envoy-custom-v1.36.5-p1_GH0.tar.gz) = 368293
+SHA256 (pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = b16b4fdcf7f5990f73c3097b972c3fc0c5d4045736e65b6f768cfab2e8761400
+SIZE (pomerium-envoy-custom-v1.36.8-p1_GH0.tar.gz) = 368288
 SHA256 (pomerium-protoutil-19d2ae5b7518_GH0.tar.gz) = 5dd6d5e0b691a5a21a2961c4d12a2afbbfc4e186cea48ae4b93271d31e748bd9
 SIZE (pomerium-protoutil-19d2ae5b7518_GH0.tar.gz) = 53474
 SHA256 (pomerium-webauthn-d32e028c3f7e_GH0.tar.gz) = 7781a322aa9927a715e14c9e55e7b22b5087db6a1493eab26a20049e347f011d
@@ -443,8 +443,8 @@ SHA256 (prometheus-common-v0.67.5_GH0.tar.gz) = 3e9d4be0e970dcf186fa5bd814afc4fb
 SIZE (prometheus-common-v0.67.5_GH0.tar.gz) = 161241
 SHA256 (prometheus-otlptranslator-v1.0.0_GH0.tar.gz) = 51efc9ed3e61af4192331dba2942bd6f919cc7af4b31c093c19e18d5ea8f3af1
 SIZE (prometheus-otlptranslator-v1.0.0_GH0.tar.gz) = 21689
-SHA256 (prometheus-procfs-v0.19.2_GH0.tar.gz) = 4baea25247b086587a51683a8492a9c71fbcef3e86ca68ae586f179ede9af940
-SIZE (prometheus-procfs-v0.19.2_GH0.tar.gz) = 271093
+SHA256 (prometheus-procfs-v0.20.1_GH0.tar.gz) = 1a8aa841f1e7df438f05302fce5ec5ab320a41b691cb1346cd20059bf89cb59e
+SIZE (prometheus-procfs-v0.20.1_GH0.tar.gz) = 279208
 SHA256 (prometheus-statsd_exporter-v0.22.7_GH0.tar.gz) = b90c39a0382c079abce26490132df21b9500a8d59402e4d9eec79358619d05d8
 SIZE (prometheus-statsd_exporter-v0.22.7_GH0.tar.gz) = 129312
 SHA256 (protocolbuffers-protobuf-go-v1.36.11_GH0.tar.gz) = 517b935001f3d43640489cd1aab531a3ed5927fb34379fa6cb1c1a514e9cb8e8
@@ -549,8 +549,8 @@ SHA256 (xeipuuv-gojsonreference-bd5ef7bd5415_GH0.tar.gz) = f99765bc8692e620f8abc
 SIZE (xeipuuv-gojsonreference-bd5ef7bd5415_GH0.tar.gz) = 6958
 SHA256 (xo-terminfo-abceb7e1c41e_GH0.tar.gz) = f309fc85594b3a03d622ebe275a841b97101c4189f85fff18fc051a2e5a4878c
 SIZE (xo-terminfo-abceb7e1c41e_GH0.tar.gz) = 35180
-SHA256 (yaml-go-yaml-v2.4.3_GH0.tar.gz) = bfd8a614fbceeccd1e24f6775a054581aa27b3ca32fa381c67a0a5b4d7a9c028
-SIZE (yaml-go-yaml-v2.4.3_GH0.tar.gz) = 73305
+SHA256 (yaml-go-yaml-v2.4.4_GH0.tar.gz) = e80715d6f56fd2d9bdf1bb3c1024bddfd819cd4facb4af6d59d14d4cfa2aa1f9
+SIZE (yaml-go-yaml-v2.4.4_GH0.tar.gz) = 73818
 SHA256 (yaml-go-yaml-v3.0.4_GH0.tar.gz) = 1b3eeb663eb0c09b462dc3383fccc99164fab8f6818a7046336f2fe2c45c764b
 SIZE (yaml-go-yaml-v3.0.4_GH0.tar.gz) = 92661
 SHA256 (yashtewari-glob-intersection-v0.2.0_GH0.tar.gz) = 50a02dcb565612b9f41814f0f87305e36986163709b0b7c429654b7030d98c7f
diff --git a/www/pomerium/files/modules.txt b/www/pomerium/files/modules.txt
index d5c992935dab..6f8587237ce1 100644
--- a/www/pomerium/files/modules.txt
+++ b/www/pomerium/files/modules.txt
@@ -107,7 +107,7 @@ github.com/CAFxX/httpcompression/contrib/klauspost/zstd
 # github.com/DataDog/zstd v1.5.7
 ## explicit; go 1.14
 github.com/DataDog/zstd
-# github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0
+# github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0
 ## explicit; go 1.24.0
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp
 # github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.54.0
@@ -650,7 +650,7 @@ github.com/envoyproxy/go-control-plane/envoy/type/v3
 # github.com/envoyproxy/protoc-gen-validate v1.3.0
 ## explicit; go 1.21.1
 github.com/envoyproxy/protoc-gen-validate/validate
-# github.com/exaring/otelpgx v0.9.4
+# github.com/exaring/otelpgx v0.10.0
 ## explicit; go 1.22.0
 github.com/exaring/otelpgx
 # github.com/fatih/color v1.18.0
@@ -692,13 +692,13 @@ github.com/go-chi/chi/v5/middleware
 # github.com/go-ini/ini v1.67.0
 ## explicit
 github.com/go-ini/ini
-# github.com/go-jose/go-jose/v3 v3.0.4
+# github.com/go-jose/go-jose/v3 v3.0.5
 ## explicit; go 1.12
 github.com/go-jose/go-jose/v3
 github.com/go-jose/go-jose/v3/cipher
 github.com/go-jose/go-jose/v3/json
 github.com/go-jose/go-jose/v3/jwt
-# github.com/go-jose/go-jose/v4 v4.1.3
+# github.com/go-jose/go-jose/v4 v4.1.4
 ## explicit; go 1.24.0
 github.com/go-jose/go-jose/v4
 github.com/go-jose/go-jose/v4/cipher
@@ -868,7 +868,7 @@ github.com/gregjones/httpcache
 ## explicit; go 1.23.0
 github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors
 github.com/grpc-ecosystem/go-grpc-middleware/v2/interceptors/logging
-# github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3
+# github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
 ## explicit; go 1.24.0
 github.com/grpc-ecosystem/grpc-gateway/v2/internal/httprule
 github.com/grpc-ecosystem/grpc-gateway/v2/runtime
@@ -1251,7 +1251,7 @@ github.com/pmezard/go-difflib/difflib
 ## explicit; go 1.24.0
 github.com/pomerium/datasource/internal/httputil
 github.com/pomerium/datasource/pkg/directory
-# github.com/pomerium/envoy-custom v1.36.5-p1
+# github.com/pomerium/envoy-custom v1.36.8-p1
 ## explicit; go 1.23.0
 github.com/pomerium/envoy-custom/api/extensions/filters/network/ssh
 github.com/pomerium/envoy-custom/api/extensions/http/early_header_mutation/trace_context
@@ -1291,8 +1291,8 @@ github.com/prometheus/common/model
 # github.com/prometheus/otlptranslator v1.0.0
 ## explicit; go 1.23.0
 github.com/prometheus/otlptranslator
-# github.com/prometheus/procfs v0.19.2
-## explicit; go 1.24.0
+# github.com/prometheus/procfs v0.20.1
+## explicit; go 1.25.0
 github.com/prometheus/procfs
 github.com/prometheus/procfs/internal/fs
 github.com/prometheus/procfs/internal/util
@@ -1573,32 +1573,32 @@ go.opentelemetry.io/auto/sdk/internal/telemetry
 # go.opentelemetry.io/contrib/detectors/gcp v1.39.0
 ## explicit; go 1.24.0
 go.opentelemetry.io/contrib/detectors/gcp
-# go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc/internal
-# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/request
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp/internal/semconv
-# go.opentelemetry.io/contrib/propagators/autoprop v0.64.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/autoprop v0.68.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/autoprop
-# go.opentelemetry.io/contrib/propagators/aws v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/aws v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/aws/xray
-# go.opentelemetry.io/contrib/propagators/b3 v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/b3 v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/b3
-# go.opentelemetry.io/contrib/propagators/jaeger v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/jaeger v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/jaeger
-# go.opentelemetry.io/contrib/propagators/ot v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/contrib/propagators/ot v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/contrib/propagators/ot
-# go.opentelemetry.io/otel v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel
 go.opentelemetry.io/otel/attribute
 go.opentelemetry.io/otel/attribute/internal
@@ -1606,6 +1606,7 @@ go.opentelemetry.io/otel/attribute/internal/xxhash
 go.opentelemetry.io/otel/baggage
 go.opentelemetry.io/otel/codes
 go.opentelemetry.io/otel/internal/baggage
+go.opentelemetry.io/otel/internal/errorhandler
 go.opentelemetry.io/otel/internal/global
 go.opentelemetry.io/otel/propagation
 go.opentelemetry.io/otel/semconv/internal
@@ -1613,33 +1614,33 @@ go.opentelemetry.io/otel/semconv/v1.17.0
 go.opentelemetry.io/otel/semconv/v1.26.0
 go.opentelemetry.io/otel/semconv/v1.27.0
 go.opentelemetry.io/otel/semconv/v1.37.0
-go.opentelemetry.io/otel/semconv/v1.37.0/httpconv
-go.opentelemetry.io/otel/semconv/v1.37.0/otelconv
 go.opentelemetry.io/otel/semconv/v1.37.0/rpcconv
-go.opentelemetry.io/otel/semconv/v1.39.0
-go.opentelemetry.io/otel/semconv/v1.39.0/otelconv
 go.opentelemetry.io/otel/semconv/v1.4.0
-# go.opentelemetry.io/otel/bridge/opencensus v1.39.0
-## explicit; go 1.24.0
+go.opentelemetry.io/otel/semconv/v1.40.0
+go.opentelemetry.io/otel/semconv/v1.40.0/httpconv
+go.opentelemetry.io/otel/semconv/v1.40.0/otelconv
+go.opentelemetry.io/otel/semconv/v1.40.0/rpcconv
+# go.opentelemetry.io/otel/bridge/opencensus v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/bridge/opencensus
 go.opentelemetry.io/otel/bridge/opencensus/internal
 go.opentelemetry.io/otel/bridge/opencensus/internal/oc2otel
 go.opentelemetry.io/otel/bridge/opencensus/internal/ocmetric
 go.opentelemetry.io/otel/bridge/opencensus/internal/otel2oc
-# go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/envconfig
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/oconf
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc/internal/transform
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal/tracetransform
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/counter
@@ -1648,8 +1649,8 @@ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/observ
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc/internal/x
-# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.39.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/counter
@@ -1658,20 +1659,20 @@ go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/observ
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/otlpconfig
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/retry
 go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp/internal/x
-# go.opentelemetry.io/otel/exporters/prometheus v0.61.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/exporters/prometheus v0.65.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/exporters/prometheus
 go.opentelemetry.io/otel/exporters/prometheus/internal
 go.opentelemetry.io/otel/exporters/prometheus/internal/counter
 go.opentelemetry.io/otel/exporters/prometheus/internal/observ
 go.opentelemetry.io/otel/exporters/prometheus/internal/x
-# go.opentelemetry.io/otel/metric v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/metric v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/metric
 go.opentelemetry.io/otel/metric/embedded
 go.opentelemetry.io/otel/metric/noop
-# go.opentelemetry.io/otel/sdk v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/sdk v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/sdk
 go.opentelemetry.io/otel/sdk/instrumentation
 go.opentelemetry.io/otel/sdk/internal/x
@@ -1679,8 +1680,8 @@ go.opentelemetry.io/otel/sdk/resource
 go.opentelemetry.io/otel/sdk/trace
 go.opentelemetry.io/otel/sdk/trace/internal/env
 go.opentelemetry.io/otel/sdk/trace/internal/observ
-# go.opentelemetry.io/otel/sdk/metric v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/sdk/metric v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/sdk/metric
 go.opentelemetry.io/otel/sdk/metric/exemplar
 go.opentelemetry.io/otel/sdk/metric/internal
@@ -1688,14 +1689,14 @@ go.opentelemetry.io/otel/sdk/metric/internal/aggregate
 go.opentelemetry.io/otel/sdk/metric/internal/observ
 go.opentelemetry.io/otel/sdk/metric/internal/reservoir
 go.opentelemetry.io/otel/sdk/metric/metricdata
-# go.opentelemetry.io/otel/trace v1.40.0
-## explicit; go 1.24.0
+# go.opentelemetry.io/otel/trace v1.43.0
+## explicit; go 1.25.0
 go.opentelemetry.io/otel/trace
 go.opentelemetry.io/otel/trace/embedded
 go.opentelemetry.io/otel/trace/internal/telemetry
 go.opentelemetry.io/otel/trace/noop
-# go.opentelemetry.io/proto/otlp v1.9.0
-## explicit; go 1.23.0
+# go.opentelemetry.io/proto/otlp v1.10.0
+## explicit; go 1.24.0
 go.opentelemetry.io/proto/otlp/collector/metrics/v1
 go.opentelemetry.io/proto/otlp/collector/trace/v1
 go.opentelemetry.io/proto/otlp/common/v1
@@ -1730,14 +1731,14 @@ go.uber.org/zap/zapcore
 # go.uber.org/zap/exp v0.3.0
 ## explicit; go 1.19
 go.uber.org/zap/exp/zapslog
-# go.yaml.in/yaml/v2 v2.4.3
+# go.yaml.in/yaml/v2 v2.4.4
 ## explicit; go 1.15
 go.yaml.in/yaml/v2
 # go.yaml.in/yaml/v3 v3.0.4
 ## explicit; go 1.16
 go.yaml.in/yaml/v3
-# golang.org/x/crypto v0.47.0
-## explicit; go 1.24.0
+# golang.org/x/crypto v0.52.0
+## explicit; go 1.25.0
 golang.org/x/crypto/blake2b
 golang.org/x/crypto/blowfish
 golang.org/x/crypto/chacha20
@@ -1761,13 +1762,13 @@ golang.org/x/crypto/ssh/internal/bcrypt_pbkdf
 golang.org/x/exp/constraints
 golang.org/x/exp/maps
 golang.org/x/exp/slices
-# golang.org/x/mod v0.32.0
-## explicit; go 1.24.0
+# golang.org/x/mod v0.36.0
+## explicit; go 1.25.0
 golang.org/x/mod/internal/lazyregexp
 golang.org/x/mod/module
 golang.org/x/mod/semver
-# golang.org/x/net v0.49.0
-## explicit; go 1.24.0
+# golang.org/x/net v0.55.0
+## explicit; go 1.25.0
 golang.org/x/net/bpf
 golang.org/x/net/html
 golang.org/x/net/html/atom
@@ -1776,6 +1777,7 @@ golang.org/x/net/http2
 golang.org/x/net/http2/hpack
 golang.org/x/net/idna
 golang.org/x/net/internal/httpcommon
+golang.org/x/net/internal/httpsfv
 golang.org/x/net/internal/iana
 golang.org/x/net/internal/socket
 golang.org/x/net/internal/socks
@@ -1786,7 +1788,7 @@ golang.org/x/net/nettest
 golang.org/x/net/proxy
 golang.org/x/net/publicsuffix
 golang.org/x/net/trace
-# golang.org/x/oauth2 v0.34.0
+# golang.org/x/oauth2 v0.35.0
 ## explicit; go 1.24.0
 golang.org/x/oauth2
 golang.org/x/oauth2/authhandler
@@ -1798,24 +1800,24 @@ golang.org/x/oauth2/google/internal/stsexchange
 golang.org/x/oauth2/internal
 golang.org/x/oauth2/jws
 golang.org/x/oauth2/jwt
-# golang.org/x/sync v0.19.0
-## explicit; go 1.24.0
+# golang.org/x/sync v0.21.0
+## explicit; go 1.25.0
 golang.org/x/sync/errgroup
 golang.org/x/sync/semaphore
 golang.org/x/sync/singleflight
-# golang.org/x/sys v0.40.0
-## explicit; go 1.24.0
+# golang.org/x/sys v0.46.0
+## explicit; go 1.25.0
 golang.org/x/sys/cpu
 golang.org/x/sys/execabs
 golang.org/x/sys/plan9
 golang.org/x/sys/unix
 golang.org/x/sys/windows
 golang.org/x/sys/windows/registry
-# golang.org/x/term v0.39.0
-## explicit; go 1.24.0
+# golang.org/x/term v0.44.0
+## explicit; go 1.25.0
 golang.org/x/term
-# golang.org/x/text v0.33.0
-## explicit; go 1.24.0
+# golang.org/x/text v0.38.0
+## explicit; go 1.25.0
 golang.org/x/text/cases
 golang.org/x/text/encoding
 golang.org/x/text/encoding/internal
*** 54 LINES SKIPPED ***