Update module go.opentelemetry.io/otel/bridge/opentracing to v1.45.0 [SECURITY] (#1136)

> ℹ️ **Note**
> 
> This PR body was truncated due to platform limits.

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/otel/bridge/opentracing](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v1.33.0` → `v1.45.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fbridge%2fopentracing/v1.45.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fbridge%2fopentracing/v1.33.0/v1.45.0?slim=true)
|

---

### OpenTelemetry-Go: Unsynchronized baggage map can panic under
concurrent access
[CVE-2026-45404](https://nvd.nist.gov/vuln/detail/CVE-2026-45404) /
[GHSA-42cj-99w8-cp2p](https://redirect.github.com/advisories/GHSA-42cj-99w8-cp2p)

<details>
<summary>More information</summary>

#### Details
##### Summary

`go.opentelemetry.io/otel/bridge/opentracing` introduced an
unsynchronized `extraBaggageItems` map on `bridgeSpan`. One goroutine
can write this map through `Span.SetBaggageItem` while another goroutine
reads and iterates it during correlation baggage propagation, which can
trigger Go's fatal concurrent map access panic and crash the process.
The finding is low severity because exploitation requires a specific
OpenTracing bridge configuration and concurrent use of the same span.

Introduced in commit: 8cddf30

##### Details

`bridge/opentracing/bridge.go:80-85` adds `extraBaggageItems
map[string]string` to `bridgeSpan` without a mutex or other
synchronization primitive. `bridge/opentracing/bridge.go:219-234` shows
`SetBaggageItem` calling `updateOtelContext`, which lazily creates the
map and writes `s.extraBaggageItems[restrictedKey] = value` without
locking. `bridge/opentracing/bridge.go:359-377` shows
`correlationGetHook` reading `bSpan.extraBaggageItems`, checking
`len(items)`, and iterating `for k, v := range items` without locking.
The finding evidence also identifies
`api/correlation/context.go:160-165` as the path where
`correlation.MapFromContext` invokes the get hook, allowing a read path
to run concurrently with baggage writes.

Because Go maps are not safe for concurrent read/write access,
concurrent `SetBaggageItem` and `correlation.MapFromContext` calls on
the same hooked `bridgeSpan` can terminate the process with a runtime
error such as `fatal error: concurrent map read and map write` or `fatal
error: concurrent map iteration and map write`.

##### PoC


[validation-artifact.zip](https://redirect.github.com/user-attachments/files/27494614/validation-artifact.zip)

The validation artifact contains a PoC at
`validation-artifact.tar:validation_poc_concurrent_map.go` and
supporting notes at `validation-artifact.tar:validation_poc_README.txt`.

Use a checkout of `pellared/opentelemetry-go` at commit `8cddf30` with
Go module downloads enabled. The local validation environment could not
complete the run because `GOPROXY=off` blocked dependency resolution;
that blocked output is saved in
`validation-artifact.tar:validation_poc_run.log`.

Commands:

```sh
cd /path/to/opentelemetry-go
git checkout 8cddf30
tar -xOf /path/to/finding-directory/validation-artifact.tar validation_poc_concurrent_map.go > ./validation_poc_concurrent_map.go
GOPROXY=https://proxy.golang.org,direct go run ./validation_poc_concurrent_map.go
```

The PoC starts a `BridgeTracer`, creates a span, installs correlation
hooks with `tracer.NewHookedContext(ctx)`, initializes baggage once,
then runs one goroutine repeatedly calling `span.SetBaggageItem(...)`
while another repeatedly calls `otelcorrelation.MapFromContext(ctx)`. A
vulnerable build is expected to terminate with a Go runtime concurrent
map access error, for example:

```text
fatal error: concurrent map read and map write
```

or:

```text
fatal error: concurrent map iteration and map write
```

##### Impact

This is a race condition / improper synchronization vulnerability in a
shared Go map. Applications using the OpenTelemetry OpenTracing bridge
with correlation hooks can crash if the same `bridgeSpan` is accessed
concurrently, with one execution path setting baggage and another
propagating correlation baggage. The practical impact is denial of
service for the affected application process; exposure depends on
whether application request handling or internal concurrency can trigger
those operations on the same span.

#### Severity
- CVSS Score: 5.9 / 10 (Medium)
- Vector String:
`CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N`

#### References
-
[https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p](https://redirect.github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p)
-
[https://github.com/open-telemetry/opentelemetry-go/pull/8693](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8693)
-
[https://github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/93a693edeed0e07ce5ebd1dfe67af42d1e2055d8)
-
[https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0)
-
[https://github.com/advisories/GHSA-42cj-99w8-cp2p](https://redirect.github.com/advisories/GHSA-42cj-99w8-cp2p)

This data is provided by the [GitHub Advisory
Database](https://redirect.github.com/advisories/GHSA-42cj-99w8-cp2p)
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).
</details>

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-go
(go.opentelemetry.io/otel/bridge/opentracing)</summary>

###
[`v1.45.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v1.45.0):
/v0.67.0/v0.21.0/v0.0.18

[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v1.44.0...v1.45.0)

#### Overview

##### Added

- Add experimental observability metrics to `BatchProcessor` in
`go.opentelemetry.io/otel/sdk/log`.
([#&#8203;7124](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7124))
- Add the experimental `WithUnsafeAttributes` no-copy attribute option
to `go.opentelemetry.io/otel/metric/x` for future performance
improvements. This API is a work in progress.
([#&#8203;8251](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8251))
- Add `Map` and `MapValue` functions for the new `MAP` attribute type in
`go.opentelemetry.io/otel/attribute`.
([#&#8203;8445](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8445))
- Support `MAP` attributes in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`.
([#&#8203;8453](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8453))
- Support `MAP` attributes in
`go.opentelemetry.io/otel/exporters/otlp/otlplog`.
([#&#8203;8453](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8453))
- Support `MAP` attributes in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric`.
([#&#8203;8453](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8453))
- Support `MAP` attributes in
`go.opentelemetry.io/otel/exporters/zipkin`.
([#&#8203;8453](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8453))
- Apply `AttributeValueLengthLimit` recursively to values contained in
`attribute.MAP` attributes in `go.opentelemetry.io/otel/sdk/trace`.
([#&#8203;8454](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8454))
- Remove duplicate keys from `attribute.MAP` values in
`go.opentelemetry.io/otel/sdk/resource` using last-value-wins semantics.
([#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8471))
- Remove duplicate keys by default from `attribute.MAP` values in
instrumentation scope attributes in `go.opentelemetry.io/otel/sdk/log`
using last-value-wins semantics.
([#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8471))
- Remove duplicate keys by default from `attribute.MAP` values in span,
event, link, and instrumentation scope attributes in
`go.opentelemetry.io/otel/sdk/trace` using last-value-wins semantics.
([#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8471))
- Remove duplicate keys by default from `attribute.MAP` values in
measurement and instrumentation scope attributes in
`go.opentelemetry.io/otel/sdk/metric` using last-value-wins semantics.
([#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8471))
- Extend `WithAllowKeyDuplication` in `go.opentelemetry.io/otel/sdk/log`
to disable duplicate-key removal in `attribute.MAP` values for
instrumentation scope attributes.
([#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8471))
- Add the `go.opentelemetry.io/otel/semconv/v1.42.0` package.
The package contains semantic conventions from the `v1.42.0` version of
the OpenTelemetry Semantic Conventions.
See the [migration documentation](./semconv/v1.42.0/MIGRATION.md) for
information on how to upgrade from
`go.opentelemetry.io/otel/semconv/v1.41.0`.
([#&#8203;8484](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8484))
- Add `WithoutPanicRecording` as a `TracerProviderOption` in
`go.opentelemetry.io/otel/sdk/trace` to disable exception event
recording for panics.
([#&#8203;8532](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8532))
- Add the `go.opentelemetry.io/otel/semconv/v1.43.0` package.
The package contains semantic conventions from the `v1.43.0` version of
the OpenTelemetry Semantic Conventions.
See the [migration documentation](./semconv/v1.43.0/MIGRATION.md) for
information on how to upgrade from
`go.opentelemetry.io/otel/semconv/v1.42.0`.
([#&#8203;8628](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8628))

##### Changed

- `HistogramReservoir` in `go.opentelemetry.io/otel/sdk/metric/exemplar`
now uses a time-unbiased sampling algorithm for exemplars.
([#&#8203;8306](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8306))
- ⚠️ **Breaking Change:** Use `go.opentelemetry.io/otel/attribute.Value`
and `go.opentelemetry.io/otel/attribute.KeyValue` for log bodies and
attributes in `go.opentelemetry.io/otel/log`,
`go.opentelemetry.io/otel/log/logtest`,
`go.opentelemetry.io/otel/sdk/log`, and
`go.opentelemetry.io/otel/sdk/log/logtest`.
([#&#8203;8490](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8490))
- Encode log bodies and attributes as
`go.opentelemetry.io/otel/attribute.Value` JSON in
`go.opentelemetry.io/otel/exporters/stdout/stdoutlog`.
([#&#8203;8490](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8490))
- Improve the performance of hashing `BOOLSLICE`, `INT64SLICE`,
`FLOAT64SLICE`, and `STRINGSLICE` attribute values by avoiding
reflection for short slices in `go.opentelemetry.io/otel/attribute`.
([#&#8203;8511](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8511))
- ⚠️ **Breaking Change:** `WithEndpointURL` in
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` no
longer appends the default signal path when an endpoint URL has no path,
making the behavior consistent with
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` and with
setting the endpoint through `OTEL_EXPORTER_OTLP_METRICS_ENDPOINT`. If
the URL has no path component, the root path (`/`) is used. Use
`WithEndpointURL(url.JoinPath(endpoint, "/v1/metrics"))` to preserve the
previous behavior.
([#&#8203;8538](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8538))
- ⚠️ **Breaking Change:** `WithEndpointURL` in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` no
longer appends the default signal path when an endpoint URL has no path,
making the behavior consistent with
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` and with
setting the endpoint through `OTEL_EXPORTER_OTLP_TRACES_ENDPOINT`. If
the URL has no path component, the root path (`/`) is used. Use
`WithEndpointURL(url.JoinPath(endpoint, "/v1/traces"))` to preserve the
previous behavior.
([#&#8203;8538](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8538))

##### Deprecated

- Deprecate `WithExportBufferSize` in
`go.opentelemetry.io/otel/sdk/log`. The option remains available for
source compatibility but no longer affects behavior; `BatchProcessor` no
longer maintains a separate export-request buffer.
([#&#8203;8620](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8620))

##### Removed

- ⚠️ **Breaking Change:** Remove `Kind`, `Value`, `KeyValue`, their
constructors, and attribute conversion helpers from
`go.opentelemetry.io/otel/log`.
([#&#8203;8490](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8490))
- ⚠️ **Breaking Change:** Remove the `AttributeValueLengthLimit` and
`AttributeCountLimit` fields from `RecordFactory` in
`go.opentelemetry.io/otel/sdk/log/logtest`; records produced by the
factory now keep attribute limits disabled so test code can append exact
attributes.
([#&#8203;8556](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8556))

##### Fixed

- Apply TLS certificates configured through environment variables to
gRPC connections in
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`.
- Prevent panics in `go.opentelemetry.io/otel/bridge/opentracing` when
OpenTracing baggage is propagated concurrently with
`Span.SetBaggageItem`.
- Fix an off-by-one error in `FixedSizeReservoir` in
`go.opentelemetry.io/otel/sdk/metric/exemplar` that prevented the first
exemplar from being sampled after the reservoir was filled.
([#&#8203;8309](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8309))
- Interpret HTTP `Retry-After` header values as seconds instead of
nanoseconds when retrying OTLP HTTP exports in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`,
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`, and
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`.
([#&#8203;8383](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8383))
- Fix a memory leak in the `Reservoir` implementation in
`go.opentelemetry.io/otel/sdk/metric/exemplar`, where storing the full
`context.Context` pinned large objects such as gRPC transport buffers.
([#&#8203;8389](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8389))
- Prevent a non-empty attribute set whose computed hash is zero from
collapsing to an empty set in `go.opentelemetry.io/otel/attribute`.
([#&#8203;8402](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8402))
- Fix histogram data point reuse in
`go.opentelemetry.io/otel/sdk/metric` aggregation to avoid leaking stale
sum, minimum, and maximum values when they are disabled in subsequent
collections.
([#&#8203;8403](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8403))
- Avoid preallocating scope attributes when they are disabled in
`go.opentelemetry.io/otel/exporters/prometheus`.
([#&#8203;8404](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8404))
- Support HTTP-date values in the HTTP `Retry-After` header when
retrying OTLP HTTP exports in
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`,
`go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`, and
`go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`.
([#&#8203;8417](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8417))
- Reduce histogram heap allocations by reusing `BucketCounts` and
`Exemplars` slices across `Collect` cycles in the cumulative histogram
aggregation in `go.opentelemetry.io/otel/sdk/metric`.
([#&#8203;8428](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8428))
- Fix `go.opentelemetry.io/otel/exporters/stdout/stdouttrace`
self-observability to record `error.type` on the operation-duration
histogram when the `exportedSpans` metric is disabled.
([#&#8203;8432](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8432))
- Stop including trace exporter endpoint configuration in internal logs
from `go.opentelemetry.io/otel/sdk/trace`,
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`,
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`,
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`, and
`go.opentelemetry.io/otel/exporters/zipkin`.
([#&#8203;8438](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8438))
- Fix invalid error formatting for out-of-range JSON code values in
`go.opentelemetry.io/otel/codes`.
([#&#8203;8497](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8497))
- Clarify in `go.opentelemetry.io/otel/log` that `Logger.Enabled` should
be checked for every log emission because its result may change over
time.
([#&#8203;8565](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8565))
- Preserve user-provided exception attributes while independently
deriving missing exception message and type attributes in
`go.opentelemetry.io/otel/sdk/log`.
([#&#8203;8566](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8566))
- Make `WithAttributeCountLimit(0)` and
`OTEL_LOGRECORD_ATTRIBUTE_COUNT_LIMIT=0` discard all log record
attributes in `go.opentelemetry.io/otel/sdk/log`.
([#&#8203;8570](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8570))
- Clarify that the `Record` methods of `Float64Histogram` and
`Int64Histogram` in `go.opentelemetry.io/otel/metric` expect
non-negative values.
([#&#8203;8574](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8574))
- Clarify in `go.opentelemetry.io/otel/log` that `LoggerProvider`
implementations should retain an empty `Logger` name instead of
replacing it with a default.
([#&#8203;8587](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8587))
- Ensure that the built-in processors in
`go.opentelemetry.io/otel/sdk/log` call exporter `ForceFlush` during
`Shutdown`.
([#&#8203;8599](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8599))
- Prevent panics in `go.opentelemetry.io/otel/bridge/opentracing` when
OpenTracing baggage is propagated concurrently with
`Span.SetBaggageItem`.
([GHSA-42cj-99w8-cp2p](https://redirect.github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-42cj-99w8-cp2p))
- Prevent processor operations in `go.opentelemetry.io/otel/sdk/log`
from overlapping with processor shutdown or running after
`LoggerProvider` shutdown.
([#&#8203;8608](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8608))
- Prevent `BatchProcessor` in `go.opentelemetry.io/otel/sdk/log` from
busy-spinning under exporter backpressure and serialize dequeue, export,
force-flush, and shutdown work in one worker.
([#&#8203;8620](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8620))
- Make `BatchProcessor` in `go.opentelemetry.io/otel/sdk/log` return
errors encountered while draining records during `ForceFlush` and
`Shutdown`, while continuing to attempt later batches as long as the
request context remains valid.
([#&#8203;8620](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8620))
- Keep the default `BatchProcessor` maximum export batch size in
`go.opentelemetry.io/otel/sdk/log` at or below the configured maximum
queue size.
([#&#8203;8620](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/8620))

#### What's Changed

- fix(semconv): share metric option pools by
[@&#8203;macayu17](https://redirect.github.com/macayu17) in
[#&#8203;8371](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8371)
- chore(deps): update module github.com/alecthomas/chroma/v2 to v2.26.1
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8381](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8381)
- chore(deps): update codspeedhq/action action to v4.17.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8388](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8388)
- chore(deps): update module github.com/rogpeppe/go-internal to v1.15.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8382](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8382)
- chore(deps): update module github.com/jgautheron/goconst to v1.10.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8380](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8380)
- chore(deps): update module github.com/mattn/go-runewidth to v0.0.24 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8394](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8394)
- fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to
[`bc171b2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/bc171b2)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8405](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8405)
- chore(deps): update module github.com/securego/gosec/v2 to v2.27.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8406](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8406)
- fix(deps): update golang.org/x to
[`c761662`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c761662)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8384](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8384)
- chore(deps): update module github.com/butuzov/mirror to v1.3.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8390](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8390)
- chore(deps): update module github.com/securego/gosec/v2 to v2.27.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8413](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8413)
- fix(otlphttp): honor retry-after seconds by
[@&#8203;AbhiPrasad](https://redirect.github.com/AbhiPrasad) in
[#&#8203;8383](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8383)
- chore(deps): update module github.com/mattn/go-colorable to v0.1.15 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8391](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8391)
- fix(deps): update module github.com/prometheus/common to v0.68.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8395](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8395)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`6cf7526`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/6cf7526)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8408](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8408)
- docs: update AGENTS.md with CHANGELOG conventions by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8393](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8393)
- chore(deps): update github/codeql-action action to v4.36.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8416](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8416)
- chore(deps): update actions/checkout action to v6.0.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8418](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8418)
- chore(deps): update github.com/golangci/rowserrcheck digest to
[`0ec5bd2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/0ec5bd2)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8419](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8419)
- sdk/metric/internal/x: generate x package from x component template by
[@&#8203;Mentigen](https://redirect.github.com/Mentigen) in
[#&#8203;8397](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8397)
- chore(deps): update github/codeql-action action to v4.36.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8426](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8426)
- fix(deps): update module github.com/prometheus/common to v0.68.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8420](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8420)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8421](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8421)
- chore(deps): update module github.com/ldez/gomoddirectives to v0.9.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8422](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8422)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.1.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8429](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8429)
- chore(deps): update codecov/codecov-action action to v7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8435](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8435)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8437](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8437)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.2.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8434](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8434)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.60.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8442](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8442)
- fix(deps): update googleapis to
[`4308a22`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4308a22)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8440](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8440)
- chore(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8439](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8439)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`35bcb73`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/35bcb73)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8436](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8436)
- fix(stdouttrace/observ): record error.type on opDuration when
exportedSpans is disabled by
[@&#8203;yumosx](https://redirect.github.com/yumosx) in
[#&#8203;8432](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8432)
- sdk/trace: avoid logging exporter endpoint configuration by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8438](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8438)
- Cleanup limitedSyncMap, and add tests by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8302](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8302)
- fix(otlphttp): support retry-after HTTP-date by
[@&#8203;AbhiPrasad](https://redirect.github.com/AbhiPrasad) in
[#&#8203;8417](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8417)
- Fix incorrect formatting verbs in opencensus bridge by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8424](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8424)
- fix: off-by-one bug for FixedSizeReservoir by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8309](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8309)
- sdk/metric: reuse cumulative-histogram Collect buffers to reduce heap
usage by [@&#8203;sudowork](https://redirect.github.com/sudowork) in
[#&#8203;8428](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8428)
- Fix memory leak in exemplar reservoir by storing SpanContext instead
of Context by [@&#8203;dashpole](https://redirect.github.com/dashpole)
in
[#&#8203;8389](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8389)
- fix: clear stale histogram fields on datapoint reuse by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8403](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8403)
- prometheus: avoid preallocating scope attributes when disabled by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8404](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8404)
- Document that WithExemplarFilter(nil) is not supported by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8392](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8392)
- fix(deps): update googleapis to
[`7ab31c2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/7ab31c2)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8447](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8447)
- chore(deps): update golang.org/x to
[`fb80ec8`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/fb80ec8)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8444](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8444)
- chore(deps): update golang.org/x to v0.56.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8448](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8448)
- Add WithUnsafeAttributes to support no-copy dynamic metric API calls
by [@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8251](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8251)
- fix(attribute): prevent zero-hash collapse to empty set by
[@&#8203;dashpole](https://redirect.github.com/dashpole) in
[#&#8203;8402](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8402)
- chore(deps): update codspeedhq/action action to v4.17.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8452](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8452)
- attribute: add MAP type support by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8445](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8445)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8451](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8451)
- chore(deps): update module charm.land/lipgloss/v2 to v2.0.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8455](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8455)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`2399af7`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/2399af7)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8460](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8460)
- chore(deps): update golang.org/x to
[`72dfd24`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/72dfd24)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8462](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8462)
- fix(deps): update googleapis to
[`62b3387`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/62b3387)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8463](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8463)
- sdk/trace: apply AttributeValueLengthLimit to attribute.MAP by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8454](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8454)
- exporters: support MAP attributes by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8453](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8453)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.2.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8464](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8464)
- chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8470](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8470)
- chore(deps): update module github.com/alecthomas/chroma/v2 to v2.27.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8469](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8469)
- fix(deps): update module github.com/prometheus/common to v0.69.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8472](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8472)
- chore(deps): update module github.com/firefart/nonamedreturns to
v1.0.7 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;8467](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8467)
- chore(deps): update golang.org/x to
[`4de325e`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4de325e)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8466](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8466)
- Exporter code cleanup by
[@&#8203;ash2k](https://redirect.github.com/ash2k) in
[#&#8203;8457](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8457)
- \[chore] add CNCF Slack join instructions by
[@&#8203;cijothomas](https://redirect.github.com/cijothomas) in
[#&#8203;8456](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8456)
- chore(deps): update golang.org/x to
[`9b6dc03`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9b6dc03)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8474](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8474)
- fix(deps): update golang.org/x to v1.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8478](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8478)
- sdk: deduplicate MAP attribute keys by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8471](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8471)
- attribute: inline hashing for small SLICE and MAP values by
[@&#8203;Dipanshusinghh](https://redirect.github.com/Dipanshusinghh) in
[#&#8203;8476](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8476)
- attribute: test map equivalence with duplicate keys by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8473](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8473)
- fix(deps): update googleapis to
[`87f3d3e`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/87f3d3e)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8483](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8483)
- chore(deps): update module github.com/cyphar/filepath-securejoin to
v0.7.0 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;8486](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8486)
- chore(deps): update golang.org/x to
[`a6991f1`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a6991f1)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8482](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8482)
- chore(deps): update actions/checkout action to v7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8487](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8487)
- chore(deps): update codspeedhq/action action to v4.17.6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8485](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8485)
- chore(deps): update golang.org/x to
[`e028bae`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e028bae)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8493](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8493)
- Generate and upgrade to `semconv/v1.42.0` by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;8484](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8484)
- chore(deps): update otel/weaver docker tag to v0.24.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8494](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8494)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`f39628c`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/f39628c)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8498](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8498)
- chore(deps): update module github.com/cloudflare/circl to v1.6.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8500](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8500)
- fix(deps): update googleapis to
[`b703f56`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b703f56)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8502](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8502)
- chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.1
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8503](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8503)
- log: use attribute values for records by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8490](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8490)
- codes: fix invalid code format string by
[@&#8203;HNO3Miracle](https://redirect.github.com/HNO3Miracle) in
[#&#8203;8497](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8497)
- chore(deps): update module github.com/rogpeppe/go-internal to v1.15.0
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8505](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8505)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.61.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8506](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8506)
- chore(deps): update actions/cache action to v6 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8507](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8507)
- chore(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8508](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8508)
- chore(deps): update otel/weaver docker tag to v0.24.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8509](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8509)
- Fix/makefile go version by
[@&#8203;Vatsal-Chaudhary](https://redirect.github.com/Vatsal-Chaudhary)
in
[#&#8203;8496](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8496)
- chore(deps): update actions/setup-go action to v6.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8516](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8516)
- chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.2
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8513](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8513)
- attribute: improve attribute types GoDoc by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8489](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8489)
- otlpmetricgrpc: avoid DNS in self-observability test by
[@&#8203;JuvenR](https://redirect.github.com/JuvenR) in
[#&#8203;8514](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8514)
- fix(deps): update github.com/opentracing-contrib/go-grpc/test digest
to
[`c961bd5`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/c961bd5)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8512](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8512)
- chore(deps): update module github.com/go-critic/go-critic to v0.14.4
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8519](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8519)
- chore(deps): update golang.org/x/telemetry digest to
[`59b4966`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/59b4966)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8520](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8520)
- fix(deps): update module github.com/opentracing-contrib/go-grpc to
v0.1.4 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;8515](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8515)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8521](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8521)
- chore(deps): update codspeedhq/action action to v4.18.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8517](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8517)
- chore(deps): update module go.augendre.info/fatcontext to v0.10.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8524](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8524)
- chore(deps): update golang.org/x/telemetry digest to
[`b709645`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/b709645)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8523](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8523)
- chore(deps): update actions/cache action to v6.1.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8525](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8525)
- gotmpl: update headers to enable golangci-lint on generated files by
[@&#8203;Dipanshusinghh](https://redirect.github.com/Dipanshusinghh) in
[#&#8203;8481](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8481)
- chore(deps): update module github.com/prometheus/procfs to v0.21.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8526](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8526)
- attribute: skip reflection for short slices in hashValue by
[@&#8203;lavish-gambhir](https://redirect.github.com/lavish-gambhir) in
[#&#8203;8511](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8511)
- chore(deps): update module github.com/klauspost/cpuid/v2 to v2.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8529](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8529)
- chore(deps): update module github.com/prometheus/procfs to v0.21.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8528](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8528)
- fix(deps): update module google.golang.org/grpc to v1.82.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8530](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8530)
- fix(deps): update googleapis to
[`925bb5d`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/925bb5d)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8533](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8533)
- chore: Move inactive members to emeritus by
[@&#8203;opentelemetrybot](https://redirect.github.com/opentelemetrybot)
in
[#&#8203;8398](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8398)
- chore(deps): update github.com/golangci/rowserrcheck digest to
[`399602f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/399602f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8539](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8539)
- chore(deps): update fossas/fossa-action action to v2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8558](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8558)
- chore(deps): update github/codeql-action action to v4.36.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8557](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8557)
- chore(deps): update module github.com/firefart/nonamedreturns to
v1.0.8 by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot]
in
[#&#8203;8559](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8559)
- chore(deps): update module github.com/pelletier/go-toml/v2 to v2.4.3
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8563](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8563)
- chore(deps): update module charm.land/lipgloss/v2 to v2.0.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8562](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8562)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`f5a850f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/f5a850f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8561](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8561)
- fix(otlptracehttp,otlpmetrichttp): do not append default signal path
by [@&#8203;basti1302](https://redirect.github.com/basti1302) in
[#&#8203;8538](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8538)
- fix(deps): update googleapis to
[`f0a9213`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/f0a9213)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8567](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8567)
- log: clarify Logger.Enabled guidance by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8565](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8565)
- chore(deps): update module golang.org/x/text to v0.39.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8568](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8568)
- chore(deps): update module go.opentelemetry.io/collector/featuregate
to v1.62.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8569](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8569)
- fix(deps): update module go.opentelemetry.io/collector/pdata to
v1.62.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8572](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8572)
- chore(deps): update codspeedhq/action action to v4.18.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8571](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8571)
- sdk/log/logtest: remove attribute limit fields from RecordFactory by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8556](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8556)
- sdk/log: honor zero attribute count limit by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8570](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8570)
- fix(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8577](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8577)
- chore(deps): update github/codeql-action action to v4.37.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8576](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8576)
- Clarify that Histogram's Record method expect non-negative values by
[@&#8203;psx95](https://redirect.github.com/psx95) in
[#&#8203;8574](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8574)
- chore(deps): update golang.org/x by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8579](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8579)
- chore(deps): update codspeedhq/action action to v4.18.4 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8580](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8580)
- sdk/log: derive missing exception attributes by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8566](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8566)
- chore(deps): update lycheeverse/lychee-action action to v2.9.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8589](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8589)
- sdk/trace: add WithoutPanicRecording provider option by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8532](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8532)
- chore(deps): update codspeedhq/action action to v4.18.5 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8590](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8590)
- log: clarify EventName uniqueness guidance by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8586](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8586)
- sdk/log: document duplicate key receiver behavior by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8588](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8588)
- chore(deps): update actions/stale action to v10.4.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8593](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8593)
- fix(deps): update module github.com/prometheus/common to v0.70.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8594](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8594)
- log: clarify empty Logger name handling by
[@&#8203;pellared](https://redirect.github.com/pellared) in
[#&#8203;8587](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8587)
- chore(deps): update github.com/charmbracelet/ultraviolet digest to
[`4bee191`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4bee191)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8597](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8597)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.5.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8596](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8596)
- ci: run bare metal benchmarks in a container by
[@&#8203;trask](https://redirect.github.com/trask) in
[#&#8203;8575](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8575)
- chore(deps): update ubuntu:24.04 docker digest to
[`4fbb8e6`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4fbb8e6)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8600](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8600)
- fix(deps): update googleapis by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8602](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8602)
- chore(deps): update ubuntu docker tag to v26 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8601](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8601)
- chore(deps): update google.golang.org/genproto/googleapis/api digest
to
[`142c488`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/142c488)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8603](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8603)
- fix(deps): update googleapis to
[`f5fc221`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/f5fc221)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8604](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8604)
- Remove vanity import tooling by
[@&#8203;MrAlias](https://redirect.github.com/MrAlias) in
[#&#8203;8609](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8609)
- chore(deps): update module github.com/securego/gosec/v2 to v2.28.0 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8605](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8605)
- chore(deps): update dependency codespell to v2.4.3 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8612](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8612)
- chore(deps): update ubuntu:26.04 docker digest to
[`651ba3f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/651ba3f)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8616](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8616)
- fix(deps): update module google.golang.org/grpc to v1.82.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8615](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8615)
- chore(deps): update actions/setup-go action to v7 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8617](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8617)
- chore(deps): update github/codeql-action action to v4.37.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8621](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8621)
- chore(deps): update golang.org/x/telemetry digest to
[`dad6939`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/dad6939)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8582](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8582)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.5.1 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8625](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8625)
- chore(deps): update module github.com/mattn/go-isatty to v0.0.23 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8619](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8619)
- fix(deps): update googleapis to
[`e75dac1`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e75dac1)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8614](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8614)
- chore(deps): update golang.org/x/telemetry digest to
[`bdb8988`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/bdb8988)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8627](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8627)
- chore(deps): update ubuntu:26.04 docker digest to
[`3131b4c`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/3131b4c)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8624](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8624)
- chore(deps): update module github.com/nunnatsa/ginkgolinter to v0.23.1
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8638](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8638)
- chore(deps): update module github.com/dlclark/regexp2/v2 to v2.5.2 by
[@&#8203;renovate](https://redirect.github.com/renovate)\[bot] in
[#&#8203;8636](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8636)
- chore(deps): upda

> ✂ **Note**
> 
> PR body was truncated to here.


</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - Monday through Friday (`* * * * 1-5`)

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://redirect.github.com/renovatebot/renovate).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI1OS4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiLCJpbXBhY3Qvbm8tY2hhbmdlbG9nLXJlcXVpcmVkIl19-->

Co-authored-by: pulumi-renovate[bot] <189166143+pulumi-renovate[bot]@users.noreply.github.com>

Author: pulumi-renovate[bot]

integration_tests/go.mod

@@ -192,7 +192,7 @@ require (
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 // indirect
 	go.opentelemetry.io/otel v1.45.0 // indirect
-	go.opentelemetry.io/otel/bridge/opentracing v1.33.0 // indirect
+	go.opentelemetry.io/otel/bridge/opentracing v1.45.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.21.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.45.0 // indirect

integration_tests/go.sum

@@ -338,6 +338,10 @@ github.com/mxschmitt/golang-combinations v1.0.0 h1:NFoO7CSP8MUcFlHpe1YdewKwMa15d
 github.com/mxschmitt/golang-combinations v1.0.0/go.mod h1:RbMhWvfCelHR6WROvT2bVfxJvZHoEvBj71SKe+H0MYU=
 github.com/natefinch/atomic v1.0.1 h1:ZPYKxkqQOx3KZ+RsbnP/YsgvxWQPGxjC0oBt2AhwV0A=
 github.com/natefinch/atomic v1.0.1/go.mod h1:N/D/ELrljoqDyT3rZrsUmtsuzvHkeB/wWjHV22AZRbM=
+github.com/opentracing-contrib/go-grpc v0.1.4 h1:m9VukGYQ+tfcgtwdsifjjFtAoWRqmcbnGhgRQcZ+ZQA=
+github.com/opentracing-contrib/go-grpc v0.1.4/go.mod h1:xP8rkWX/qdQJVTkf01D6Fc002zN0WUMKsvuKg7Tf93E=
+github.com/opentracing-contrib/go-grpc/test v0.0.0-20260727233914-064b4d2bcbbf h1:xfFA+XblffDh3LsTrbSG1MHpmrXsY/9GQI4sbCnY+kI=
+github.com/opentracing-contrib/go-grpc/test v0.0.0-20260727233914-064b4d2bcbbf/go.mod h1:AYO7D5MbvWwD7/UggkDbqyW0pDt7KZyQkHCn4IC2i/w=
 github.com/opentracing/basictracer-go v1.1.0 h1:Oa1fTSBvAl8pa3U+IJYqrKm0NALwH9OsgwOqDv4xJW0=
 github.com/opentracing/basictracer-go v1.1.0/go.mod h1:V2HZueSJEp879yv285Aap1BS69fQMD+MNP1mRs6mBQc=
 github.com/opentracing/opentracing-go v1.1.0/go.mod h1:UkNAQd3GIcIGf0SeVgPpRdFStlNbqXla1AfSYxPUl2o=
@@ -452,8 +456,8 @@ go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0 h1:LMuyCAy
 go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.70.0/go.mod h1:085m8qbm4hgc8rZWGDEa4vmyyo2c3nPxUslYUKUIU04=
 go.opentelemetry.io/otel v1.45.0 h1:pdrWmLHofpubmArBv1LgFSv1Z0Ie/ppdZzu+kUN5EeU=
 go.opentelemetry.io/otel v1.45.0/go.mod h1:XZxIqPapzEYnhNSScF5DIqXhm/rYi0FzCe2XddAwZfQ=
-go.opentelemetry.io/otel/bridge/opentracing v1.33.0 h1:eH88qvKdY7ns7Xu6WlJBQNOzZ3MVvBR6tEl2euaYS9w=
-go.opentelemetry.io/otel/bridge/opentracing v1.33.0/go.mod h1:FNai/nhRSn/kHyv+V1zaf/30BU8hO/DXo0MvV0PaUS8=
+go.opentelemetry.io/otel/bridge/opentracing v1.45.0 h1:hFf959SYHZpFc8ZWlqiYlnH3Ke5w4fcWZh7He+CmqXk=
+go.opentelemetry.io/otel/bridge/opentracing v1.45.0/go.mod h1:etOoQoentzhTX0XTaRJmwlsiQx8TXD7mHo76YxNeBYg=
 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.21.0 h1:WseeVYf5dJZTsyPiyW5L14k5qsSibqXAMTSiFEDiWr0=
 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.21.0/go.mod h1:SiLZnQS6Qk2eCpvr2CH/XMAOa64TWGXxEZJZCpD2Lmc=
 go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.45.0 h1:QRefszxJmfPdjXUUm3j6iDzY03mTPXMjqErFqQ67vUg=