fix(deps): update go-libraries

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Confidence	Type	Update	Pending
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/trace	v1.36.0 → v1.37.0			require	minor
github.com/ossf/osv-schema/bindings/go	f3f8263 → b388a18			require	digest
go (source)	1.27.0 → 1.27.1			golang	patch
golang.org/x/oauth2	v0.36.0 → v0.37.0			require	minor
golang.org/x/sync	v0.22.0 → v0.23.0			require	minor
google.golang.org/api	v0.294.0 → v0.297.0			require	minor
mvdan.cc/sh/v3	v3.13.1 → v3.14.0			require	minor	v3.14.1

---

Release Notes

golang/go (go)

v1.27.1

googleapis/google-api-go-client (google.golang.org/api)

v0.297.0

Compare Source

Features

• Move to go1.26.0 as the lowest supported go version (#​3724) (7770e01)

v0.296.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3718) (6d6e873)
• all: Auto-regenerate discovery clients (#​3720) (3264fb2)
• all: Auto-regenerate discovery clients (#​3722) (bfa0bef)

v0.295.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​3715) (ddc3759)
• all: Auto-regenerate discovery clients (#​3717) (9e79798)

mvdan/sh (mvdan.cc/sh/v3)

v3.14.0

Compare Source

This release drops support for Go 1.25 and includes many enhancements, particularly in the interpreter, which implements more shell features and fixes many divergences from Bash.

• cmd/shfmt
  • Add --detect to find shell files by executable bit or shebang - #​944
• syntax
  • Add Preorder, an iterator over all nodes, complementing Walk
  • Add encoding.TextUnmarshaler implementations for each operator type
  • Support ${ foo;} and ${|foo;} inside double quotes - #​1368
  • Support array elements in {varname} redirects, like exec {fds[3]}>&- - #​719
  • Backslashes inside backquotes within double quotes escape double quotes - #​1083
  • Allow pound signs in associative array keys like ${args[cmd,#]} - #​1285
  • Don't treat # as the start of a comment inside [[ ]] tests - #​1326
  • Don't join then or do with a semicolon when heredocs are pending - #​1047
  • Print a space after ! in arithmetic expressions, avoiding history expansion - #​987
  • Space nested closing parentheses like the opening ones - #​876
  • Make SplitBraces reject malformed sequences and skip backslash escapes - #​1330
  • Zsh: support the ${=name}, ${~name}, and ${^name} prefixes - #​1238
  • Zsh: support the ;| case terminator and leading parentheses for globs - #​1293, #​1279
  • Zsh: parse subscript flag arguments as patterns, and allow [ globs in arrays - #​1278, #​1322
• syntax/typedjson
  • Encode operators as their syntax form, such as ">>", rather than integers - #​1321
  • Return errors rather than panicking on malformed input
• interp
  • Add BashOpts to set Bash options like shopt - #​962
  • Add AccessHandler to control file access checks, used by -r and cd - #​1318
  • Add HandlerContext.LastExitStatus, and provide a HandlerContext to stat handlers
  • Implement the help and times builtins, as well as $- - #​1398
  • Implement the ;& and ;;& case terminators - #​1391
  • Implement the -N test operator, and make -nt and -ot follow POSIX - #​1340
  • Support sparse indexed arrays such as a=([5]=x) - #​1373
  • Run files as shell scripts when exec fails with ENOEXEC - #​1065
  • Support empty here-documents, and don't expand quoted ones - #​1390
  • Support js/wasm, where subprocesses and pipes are unavailable
  • Keep the redirections applied by exec with no arguments
  • Only fire the exit trap when the shell exits, rather than after every Run
• expand
  • Add BracesSeq with a config and error reporting, deprecating Braces
  • Add Variable.Indexes to describe sparse indexed arrays
  • Support integer bases in arithmetic - #​339
  • Short-circuit the arithmetic && and || operators - #​1371
  • Apply per-element operators to quoted array expansions like "${a[@]%o}" - #​1081
  • Make unquoted ${!arr[@]} consistent with the quoted form - #​672
  • Fix many divergences from Bash in arithmetic, string, and brace expansions
  • Reject unsupported Zsh syntax rather than panicking - #​1363
• pattern
  • Treat an unmatched [ as a literal character, like Bash - #​1372
  • Fix panics and mismatches in bracket expressions, such as [![:space:]]
• fileutil
  • Recognize dash shebangs as POSIX shell for -ln=auto - #​1307

Consider becoming a sponsor if you benefit from the work that went into this release!

Binaries built on go version go1.27.0 linux/amd64 with:

CGO_ENABLED=0 go build -trimpath -ldflags="-w -s"

---

Configuration

📅 Schedule: (in timezone Australia/Sydney)

• Branch creation
  • "before 6am on wednesday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[forking-renovate]

ℹ️ Artifact update notice

File name: go/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package	Change
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	v0.60.0 -> v0.61.0