chore(deps): update module go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp to v0.19.0 [security] (main) (#14965)

This PR contains the following updates:

| Package | Change |
[Age](https://docs.renovatebot.com/merge-confidence/) |
[Confidence](https://docs.renovatebot.com/merge-confidence/) |
|---|---|---|---|
|
[go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp](https://redirect.github.com/open-telemetry/opentelemetry-go)
| `v0.18.0` → `v0.19.0` |
![age](https://developer.mend.io/api/mc/badges/age/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlplog%2fotlploghttp/v0.19.0?slim=true)
|
![confidence](https://developer.mend.io/api/mc/badges/confidence/go/go.opentelemetry.io%2fotel%2fexporters%2fotlp%2fotlplog%2fotlploghttp/v0.18.0/v0.19.0?slim=true)
|

---

> [!WARNING]
> Some dependencies could not be looked up. Check the warning logs for
more information.

### GitHub Vulnerability Alerts

####
[CVE-2026-39882](https://redirect.github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w8rr-5gcm-pp58)

overview:
this report shows that the otlp HTTP exporters (traces/metrics/logs)
read the full HTTP response body into an in-memory `bytes.Buffer`
without a size cap.

this is exploitable for memory exhaustion when the configured collector
endpoint is attacker-controlled (or a network attacker can mitm the
exporter connection).

severity

HIGH

not claiming: this is a remote dos against every default deployment.
claiming: if the exporter sends traces to an untrusted collector
endpoint (or over a network segment where mitm is realistic), that
endpoint can crash the process via a large response body.

callsite (pinned):
- exporters/otlp/otlptrace/otlptracehttp/client.go:199
- exporters/otlp/otlptrace/otlptracehttp/client.go:230
- exporters/otlp/otlpmetric/otlpmetrichttp/client.go:170
- exporters/otlp/otlpmetric/otlpmetrichttp/client.go:201
- exporters/otlp/otlplog/otlploghttp/client.go:190
- exporters/otlp/otlplog/otlploghttp/client.go:221

permalinks (pinned):
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlptrace/otlptracehttp/client.go#L199
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlptrace/otlptracehttp/client.go#L230
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlpmetric/otlpmetrichttp/client.go#L170
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlpmetric/otlpmetrichttp/client.go#L201
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlplog/otlploghttp/client.go#L190
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlplog/otlploghttp/client.go#L221

root cause:
each exporter client reads `resp.Body` using `io.Copy(&respData,
resp.Body)` into a `bytes.Buffer` on both success and error paths, with
no upper bound.

impact:
a malicious collector can force large transient heap allocations during
export (peak memory scales with attacker-chosen response size) and can
potentially crash the instrumented process (oom).

affected component:
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp

repro (local-only):

```bash
unzip poc.zip -d poc
cd poc
make canonical resp_bytes=33554432 chunk_delay_ms=0
```

expected output contains:

```
[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[PROOF_MARKER]: resp_bytes=33554432 peak_alloc_bytes=118050512
```

control (same env, patched target):

```bash
unzip poc.zip -d poc
cd poc
make control resp_bytes=33554432 chunk_delay_ms=0
```

expected control output contains:

```
[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[NC_MARKER]: resp_bytes=33554432 peak_alloc_bytes=512232
```

attachments: poc.zip (attached)


[PR_DESCRIPTION.md](https://redirect.github.com/user-attachments/files/25564272/PR_DESCRIPTION.md)


[attack_scenario.md](https://redirect.github.com/user-attachments/files/25564273/attack_scenario.md)


[poc.zip](https://redirect.github.com/user-attachments/files/25564271/poc.zip)

Fixed in:
[https://github.com/open-telemetry/opentelemetry-go/pull/8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108)

---

### opentelemetry-go: OTLP HTTP exporters read unbounded HTTP response
bodies
[CVE-2026-39882](https://nvd.nist.gov/vuln/detail/CVE-2026-39882) /
[GHSA-w8rr-5gcm-pp58](https://redirect.github.com/advisories/GHSA-w8rr-5gcm-pp58)

<details>
<summary>More information</summary>

#### Details
overview:
this report shows that the otlp HTTP exporters (traces/metrics/logs)
read the full HTTP response body into an in-memory `bytes.Buffer`
without a size cap.

this is exploitable for memory exhaustion when the configured collector
endpoint is attacker-controlled (or a network attacker can mitm the
exporter connection).

severity

HIGH

not claiming: this is a remote dos against every default deployment.
claiming: if the exporter sends traces to an untrusted collector
endpoint (or over a network segment where mitm is realistic), that
endpoint can crash the process via a large response body.

callsite (pinned):
- exporters/otlp/otlptrace/otlptracehttp/client.go:199
- exporters/otlp/otlptrace/otlptracehttp/client.go:230
- exporters/otlp/otlpmetric/otlpmetrichttp/client.go:170
- exporters/otlp/otlpmetric/otlpmetrichttp/client.go:201
- exporters/otlp/otlplog/otlploghttp/client.go:190
- exporters/otlp/otlplog/otlploghttp/client.go:221

permalinks (pinned):
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlptrace/otlptracehttp/client.go#L199
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlptrace/otlptracehttp/client.go#L230
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlpmetric/otlpmetrichttp/client.go#L170
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlpmetric/otlpmetrichttp/client.go#L201
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlplog/otlploghttp/client.go#L190
-
https://github.com/open-telemetry/opentelemetry-go/blob/248da958375e4dfb4a1105645107be3ef04b1c59/exporters/otlp/otlplog/otlploghttp/client.go#L221

root cause:
each exporter client reads `resp.Body` using `io.Copy(&respData,
resp.Body)` into a `bytes.Buffer` on both success and error paths, with
no upper bound.

impact:
a malicious collector can force large transient heap allocations during
export (peak memory scales with attacker-chosen response size) and can
potentially crash the instrumented process (oom).

affected component:
- go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp
- go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp
- go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp

repro (local-only):

```bash
unzip poc.zip -d poc
cd poc
make canonical resp_bytes=33554432 chunk_delay_ms=0
```

expected output contains:

```
[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[PROOF_MARKER]: resp_bytes=33554432 peak_alloc_bytes=118050512
```

control (same env, patched target):

```bash
unzip poc.zip -d poc
cd poc
make control resp_bytes=33554432 chunk_delay_ms=0
```

expected control output contains:

```
[CALLSITE_HIT]: otlptracehttp.UploadTraces::io.Copy(resp.Body)
[NC_MARKER]: resp_bytes=33554432 peak_alloc_bytes=512232
```

attachments: poc.zip (attached)


[PR_DESCRIPTION.md](https://redirect.github.com/user-attachments/files/25564272/PR_DESCRIPTION.md)


[attack_scenario.md](https://redirect.github.com/user-attachments/files/25564273/attack_scenario.md)


[poc.zip](https://redirect.github.com/user-attachments/files/25564271/poc.zip)

Fixed in:
[https://github.com/open-telemetry/opentelemetry-go/pull/8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108)

#### Severity
- CVSS Score: 5.3 / 10 (Medium)
- Vector String: `CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H`

#### References
-
[https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w8rr-5gcm-pp58](https://redirect.github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-w8rr-5gcm-pp58)
-
[https://nvd.nist.gov/vuln/detail/CVE-2026-39882](https://nvd.nist.gov/vuln/detail/CVE-2026-39882)
-
[https://github.com/open-telemetry/opentelemetry-go/pull/8108](https://redirect.github.com/open-telemetry/opentelemetry-go/pull/8108)
-
[https://github.com/open-telemetry/opentelemetry-go](https://redirect.github.com/open-telemetry/opentelemetry-go)
-
[http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0](http://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0)

This data is provided by
[OSV](https://osv.dev/vulnerability/GHSA-w8rr-5gcm-pp58) and the [GitHub
Advisory Database](https://redirect.github.com/github/advisory-database)
([CC-BY
4.0](https://redirect.github.com/github/advisory-database/blob/main/LICENSE.md)).
</details>

---

### Release Notes

<details>
<summary>open-telemetry/opentelemetry-go
(go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp)</summary>

###
[`v0.19.0`](https://redirect.github.com/open-telemetry/opentelemetry-go/releases/tag/v0.19.0)

[Compare
Source](https://redirect.github.com/open-telemetry/opentelemetry-go/compare/v0.18.0...v0.19.0)

##### Added

- Added `Marshaler` config option to `otlphttp` to enable otlp over json
or protobufs.
([#&#8203;1586](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1586))
- A `ForceFlush` method to the
`"go.opentelemetry.io/otel/sdk/trace".TracerProvider` to flush all
registered `SpanProcessor`s.
([#&#8203;1608](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608))
- Added `WithSampler` and `WithSpanLimits` to tracer provider.
([#&#8203;1633](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1633),
[#&#8203;1702](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1702))
- `"go.opentelemetry.io/otel/trace".SpanContext` now has a `remote`
property, and `IsRemote()` predicate, that is true when the
`SpanContext` has been extracted from remote context data.
([#&#8203;1701](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1701))
- A `Valid` method to the
`"go.opentelemetry.io/otel/attribute".KeyValue` type.
([#&#8203;1703](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703))

##### Changed

- `trace.SpanContext` is now immutable and has no exported fields.
([#&#8203;1573](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1573))
- `trace.NewSpanContext()` can be used in conjunction with the
`trace.SpanContextConfig` struct to initialize a new `SpanContext` where
all values are known.
- Update the `ForceFlush` method signature to the
`"go.opentelemetry.io/otel/sdk/trace".SpanProcessor` to accept a
`context.Context` and return an error.
([#&#8203;1608](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608))
- Update the `Shutdown` method to the
`"go.opentelemetry.io/otel/sdk/trace".TracerProvider` return an error on
shutdown failure.
([#&#8203;1608](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608))
- The SimpleSpanProcessor will now shut down the enclosed `SpanExporter`
and gracefully ignore subsequent calls to `OnEnd` after `Shutdown` is
called.
([#&#8203;1612](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1612))
- `"go.opentelemetry.io/sdk/metric/controller.basic".WithPusher` is
replaced with `WithExporter` to provide consistent naming across
project.
([#&#8203;1656](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1656))
- Added non-empty string check for trace `Attribute` keys.
([#&#8203;1659](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1659))
- Add `description` to SpanStatus only when `StatusCode` is set to
error.
([#&#8203;1662](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1662))
- Jaeger exporter falls back to `resource.Default`'s `service.name` if
the exported Span does not have one.
([#&#8203;1673](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673))
- Jaeger exporter populates Jaeger's Span Process from Resource.
([#&#8203;1673](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673))
- Renamed the `LabelSet` method of
`"go.opentelemetry.io/otel/sdk/resource".Resource` to `Set`.
([#&#8203;1692](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1692))
- Changed `WithSDK` to `WithSDKOptions` to accept variadic arguments of
`TracerProviderOption` type in
`go.opentelemetry.io/otel/exporters/trace/jaeger` package.
([#&#8203;1693](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693))
- Changed `WithSDK` to `WithSDKOptions` to accept variadic arguments of
`TracerProviderOption` type in
`go.opentelemetry.io/otel/exporters/trace/zipkin` package.
([#&#8203;1693](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693))
- `"go.opentelemetry.io/otel/sdk/resource".NewWithAttributes` will now
drop any invalid attributes passed.
([#&#8203;1703](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703))
- `"go.opentelemetry.io/otel/sdk/resource".StringDetector` will now
error if the produced attribute is invalid.
([#&#8203;1703](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703))

##### Removed

- Removed `serviceName` parameter from Zipkin exporter and uses resource
instead.
([#&#8203;1549](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1549))
- Removed `WithConfig` from tracer provider to avoid overriding
configuration.
([#&#8203;1633](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1633))
- Removed the exported `SimpleSpanProcessor` and `BatchSpanProcessor`
structs.
These are now returned as a SpanProcessor interface from their
respective constructors.
([#&#8203;1638](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1638))
- Removed `WithRecord()` from `trace.SpanOption` when creating a span.
([#&#8203;1660](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1660))
- Removed setting status to `Error` while recording an error as a span
event in `RecordError`.
([#&#8203;1663](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1663))
- Removed `jaeger.WithProcess` configuration option.
([#&#8203;1673](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673))
- Removed `ApplyConfig` method from
`"go.opentelemetry.io/otel/sdk/trace".TracerProvider` and the now
unneeded `Config` struct.
([#&#8203;1693](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693))

##### Fixed

- Jaeger Exporter: Ensure mapping between OTEL and Jaeger span data
complies with the specification.
([#&#8203;1626](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1626))
- `SamplingResult.TraceState` is correctly propagated to a newly created
span's `SpanContext`.
([#&#8203;1655](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1655))
- The `otel-collector` example now correctly flushes metric events prior
to shutting down the exporter.
([#&#8203;1678](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1678))
- Do not set span status message in `SpanStatusFromHTTPStatusCode` if it
can be inferred from `http.status_code`.
([#&#8203;1681](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1681))
- Synchronization issues in global trace delegate implementation.
([#&#8203;1686](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1686))
- Reduced excess memory usage by global `TracerProvider`.
([#&#8203;1687](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1687))

***

#### Raw changes made between v0.18.0 and v0.19.0


[`2b4fa96`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/2b4fa9681bd0c69574aaa879039382002b220204)
(HEAD -> main, tag: v0.19.0, tag: trace/v0.19.0, tag: sdk/v0.19.0, tag:
sdk/metric/v0.19.0, tag: sdk/export/metric/v0.19.0, tag:
oteltest/v0.19.0, tag: metric/v0.19.0, tag:
exporters/trace/zipkin/v0.19.0, tag: exporters/trace/jaeger/v0.19.0,
tag: exporters/stdout/v0.19.0, tag: exporters/otlp/v0.19.0, tag:
exporters/metric/prometheus/v0.19.0, tag: example/zipkin/v0.19.0, tag:
example/prometheus/v0.19.0, tag: example/prom-collector/v0.19.0, tag:
example/otel-collector/v0.19.0, tag: example/opencensus/v0.19.0, tag:
example/namedtracer/v0.19.0, tag: example/jaeger/v0.19.0, tag:
bridge/opentracing/v0.19.0, tag: bridge/opencensus/v0.19.0,
upstream/main, origin/main) Release v0.19.0
([#&#8203;1710](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1710))

[`4beb704`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/4beb70416e1272c578edfe1d5f88a3a2236da178)
sdk/trace: removing ApplyConfig and Config
([#&#8203;1693](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1693))

[`1d42be1`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/1d42be1601e2d9bbd1101780759520e3f3960a29)
Rename WithDefaultSampler TracerProvider option to WithSampler and
update docs
([#&#8203;1702](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1702))

[`860d5d8`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/860d5d86e7ace12bf2b2ca8e437d2d4fc68a6913)
Add flag to determine whether SpanContext is remote
([#&#8203;1701](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1701))

[`0fe65e6`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/0fe65e6bd2b3fad00289427e0bac1974086d4326)
Comply with OpenTelemetry attributes specification
([#&#8203;1703](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1703))

[`8888435`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/888843519dae308f165d1d20c095bb6352baeb52)
Bump google.golang.org/api from 0.40.0 to 0.41.0 in
/exporters/trace/jaeger
([#&#8203;1700](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1700))

[`345f264`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/345f264a137ed7162c30d14dd4739b5b72f76537)
(global-docs) breaking(zipkin): removes servicName from zipkin exporter.
([#&#8203;1697](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1697))

[`62cbf0f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/62cbf0f240112813105d7056506496b59740e0c2)
Populate Jaeger's Span.Process from Resource
([#&#8203;1673](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1673))

[`28eaaa9`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/28eaaa9a919d03227856d83e2149b85f78d57775)
Add a test to prove the Tracer is safe for concurrent calls
([#&#8203;1665](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1665))

[`8b1be11`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/8b1be11a549eefb6efeda2f940cbda70b3c3d08d)
Rename resource pkg label vars and methods
([#&#8203;1692](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1692))

[`a1539d4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a1539d44857a29ea43c9da9bc95e0229f79c2663)
OpenCensus metric exporter bridge
([#&#8203;1444](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1444))

[`77aa218`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/77aa218d4d8fa2ebda14a7a0b58db22fd20398b7)
Fix issue
[#&#8203;1490](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1490),
apply same logic as in the SDK
([#&#8203;1687](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1687))

[`9d3416c`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9d3416cc915ba4bfe0e7328da24bb6a3000549f9)
Fix synchronization issues in global trace delegate implementation
([#&#8203;1686](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1686))

[`58f69f0`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/58f69f091e61db2ca7a8ca31d518c5de02411184)
Span status from HTTP code: Do not set status message if it can be
inferred
([#&#8203;1681](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1681))

[`9c305bd`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/9c305bde9c27bc2252f13ca21fc869918601b124)
Flush metric events prior to shutdown in OTLP example
([#&#8203;1678](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1678))

[`66b1135`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/66b1135af4afdd1740d1c0738b9e2c5e6fe4e937)
Fix CHANGELOG
([#&#8203;1680](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1680))

[`90bd4ab`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/90bd4ab50c6e85743f2b8f3a1768a5afceeb1fc0)
Update employer information for maintainers
([#&#8203;1683](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1683))

[`3684191`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/368419133859dcd7a97a881ce57082d1c0a3fbfe)
Remove WithRecord() option from trace.SpanOption when starting a span
([#&#8203;1660](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1660))

[`65c7de2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/65c7de206921411cc4220c107bcad893a12033c5)
Remove trace prefix from NoOp src files.
([#&#8203;1679](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1679))

[`e88a091`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e88a091a72e4cf4c3f3a6d6e4b440d757bd3ecac)
Make SpanContext Immutable
([#&#8203;1573](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1573))

[`d75e268`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/d75e268053a7a3fc19394cb48a98d22fd15eb36a)
Avoid overriding configuration of tracer provider
([#&#8203;1633](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1633))

[`2b4d5ac`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/2b4d5ac3293eee30536754a5d5efec5124433ded)
Bump github.com/golangci/golangci-lint in /internal/tools
([#&#8203;1671](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1671))

[`150b868`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/150b868d02c8b9844f3db446d91267ad4e75beb9)
Bump github.com/google/go-cmp from 0.5.4 to 0.5.5
([#&#8203;1667](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1667))

[`76aa924`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/76aa924e75b22f95bb189337fb9d46b64bc66c53)
Fix the examples target info messaging
([#&#8203;1676](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1676))

[`a3aa9fd`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a3aa9fdab061197aae67ac4a2c57712cfe5ef38e)
Bump github.com/itchyny/gojq from 0.12.1 to 0.12.2 in /internal/tools
([#&#8203;1672](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1672))

[`a5edd79`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a5edd79e312675f0cccf75aa324495205c95fe73)
Removed setting error status while recording err as span event
([#&#8203;1663](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1663))

[`e981475`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e9814758278b57ef5bd939aa6fcb6a1a10772db0)
chore(zipkin): improves zipkin example to not to depend on timeouts.
([#&#8203;1566](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1566))

[`3dc91f2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/3dc91f2d76146ac6a08012b8c451cc00e59ef481)
Add ForceFlush method to TracerProvider
([#&#8203;1608](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1608))

[`bd0bba4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/bd0bba43b5a1edb1da059760462fa15d81ff7cd9)
exporter: swap pusher for exporter
([#&#8203;1656](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1656))

[`5690485`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/569048591c2661808ebddbd953c41c6808289454)
Update the SimpleSpanProcessor
([#&#8203;1612](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1612))

[`a7f7aba`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/a7f7abac654d0c3fc93732c7f47c2bef05976eb4)
SpanStatus description set only when status code is set to Error
([#&#8203;1662](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1662))

[`05252f4`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/05252f40d807999388813afb2802918a38cc0e8a)
Jaeger Exporter: Fix minor mapping discrepancies
([#&#8203;1626](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1626))

[`238e7c6`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/238e7c61ba9e5b2ca3f66f20a5db5711e062f36e)
Add non-empty string check for attribute keys
([#&#8203;1659](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1659))

[`e9b9aca`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/e9b9aca8a6dc8cd0b13ffea4f7a26186f4b316fd)
Add tests for propagation of Sampler Tracestate changes
([#&#8203;1655](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1655))

[`875a258`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/875a25835fcfcddd61e94d87b1a0b14db4d5a0e5)
Add docs on when reviews should be cleared
([#&#8203;1556](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1556))

[`7153ef2`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/7153ef2dc294fbfebaafd355ab98050b4181ff1f)
Add HTTP/JSON to the otlp exporter
([#&#8203;1586](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1586))

[`62e2a0f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/62e2a0f766d001e48867866ba7293565b9caa0c0)
Unexport the simple and batch SpanProcessors
([#&#8203;1638](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1638))

[`992837f`](https://redirect.github.com/open-telemetry/opentelemetry-go/commit/992837f195eacbd84f0596bfaa79470dba7408e5)
Add TracerProvider tests to oteltest harness
([#&#8203;1607](https://redirect.github.com/open-telemetry/opentelemetry-go/issues/1607))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "" (UTC), Automerge - At any time (no
schedule defined).

🚦 **Automerge**: Enabled.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

## Need help?
You can ask for more help in the following Slack channel:
#proj-renovate-self-hosted. In that channel you can also find ADR and
FAQ docs in the Resources section.

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My45Mi4xIiwidXBkYXRlZEluVmVyIjoiNDMuOTIuMSIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsic2VjdXJpdHktdXBkYXRlIiwidXBkYXRlLW1pbm9yIl19-->

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Co-authored-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>

Author: renovate-sh-app[bot]

go.mod

@@ -44,7 +44,7 @@ require (
 	golang.org/x/net v0.52.0
 	golang.org/x/sync v0.20.0
 	golang.org/x/time v0.15.0
-	google.golang.org/grpc v1.79.3
+	google.golang.org/grpc v1.80.0
 	gopkg.in/yaml.v3 v3.0.1 // indirect
 )
 
@@ -88,9 +88,9 @@ require (
 	go.opentelemetry.io/collector/pdata v1.53.0
 	go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0
 	go.opentelemetry.io/contrib/propagators/jaeger v1.42.0
-	go.opentelemetry.io/otel v1.42.0
-	go.opentelemetry.io/otel/sdk v1.42.0
-	go.opentelemetry.io/otel/trace v1.42.0
+	go.opentelemetry.io/otel v1.43.0
+	go.opentelemetry.io/otel/sdk v1.43.0
+	go.opentelemetry.io/otel/trace v1.43.0
 	go.opentelemetry.io/proto/otlp v1.10.0
 	go.uber.org/multierr v1.11.0
 	go.yaml.in/yaml/v3 v3.0.4
@@ -109,7 +109,7 @@ require (
 	github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1 // indirect
 	github.com/Azure/azure-sdk-for-go/sdk/internal v1.11.2 // indirect
 	github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0 // indirect
-	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 // indirect
+	github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 // indirect
 	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0 // indirect
 	github.com/aws/aws-sdk-go v1.55.7 // indirect
@@ -206,7 +206,7 @@ require (
 	go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0 // indirect
 	go.opentelemetry.io/otel/exporters/jaeger v1.17.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0 // indirect
-	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.18.0 // indirect
+	go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.42.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.42.0 // indirect
 	go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0 // indirect
@@ -216,9 +216,9 @@ require (
 	go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.18.0 // indirect
 	go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.42.0 // indirect
 	go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0 // indirect
-	go.opentelemetry.io/otel/log v0.18.0 // indirect
-	go.opentelemetry.io/otel/sdk/log v0.18.0 // indirect
-	go.opentelemetry.io/otel/sdk/metric v1.42.0 // indirect
+	go.opentelemetry.io/otel/log v0.19.0 // indirect
+	go.opentelemetry.io/otel/sdk/log v0.19.0 // indirect
+	go.opentelemetry.io/otel/sdk/metric v1.43.0 // indirect
 	go.yaml.in/yaml/v2 v2.4.3 // indirect
 	go.yaml.in/yaml/v4 v4.0.0-rc.4 // indirect
 	golang.org/x/tools/godoc v0.1.0-deprecated // indirect
@@ -335,7 +335,7 @@ require (
 	go.etcd.io/etcd/client/pkg/v3 v3.6.9 // indirect
 	go.etcd.io/etcd/client/v3 v3.6.9 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
-	go.opentelemetry.io/otel/metric v1.42.0 // indirect
+	go.opentelemetry.io/otel/metric v1.43.0 // indirect
 	go.uber.org/zap v1.27.1 // indirect
 	golang.org/x/exp v0.0.0-20260312153236-7ab1446f8b90
 	golang.org/x/mod v0.34.0 // indirect
@@ -344,8 +344,8 @@ require (
 	golang.org/x/text v0.35.0 // indirect
 	golang.org/x/tools v0.43.0
 	google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260401001100-f93e5f3e9f0f // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260401001100-f93e5f3e9f0f
+	google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912 // indirect
 	k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 // indirect
 	sigs.k8s.io/yaml v1.6.0 // indirect

go.sum

@@ -104,8 +104,8 @@ github.com/DataDog/datadog-go v3.2.0+incompatible/go.mod h1:LButxg5PwREeZtORoXG3
 github.com/DataDog/zstd v1.5.2/go.mod h1:g4AWEaM3yOg3HYfnJ3YIawPnVdXJh9QME85blwSAmyw=
 github.com/DmitriyVTitov/size v1.5.0 h1:/PzqxYrOyOUX1BXj6J9OuVRVGe+66VL4D9FlUaW515g=
 github.com/DmitriyVTitov/size v1.5.0/go.mod h1:le6rNI4CoLQV1b9gzp1+3d7hMAD/uu2QcJ+aYbNgiU0=
-github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0 h1:sBEjpZlNHzK1voKq9695PJSX2o5NEXl7/OL3coiIY0c=
-github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.30.0/go.mod h1:P4WPRUkOhJC13W//jWpyfJNDAIpvRbAUIYLX/4jtlE0=
+github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 h1:DHa2U07rk8syqvCge0QIGMCE1WxGj9njT44GH7zNJLQ=
+github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0/go.mod h1:P4WPRUkOhJC13W//jWpyfJNDAIpvRbAUIYLX/4jtlE0=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0 h1:UnDZ/zFfG1JhH/DqxIZYU/1CUAlTUScoXD/LcM2Ykk8=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0/go.mod h1:IA1C1U7jO/ENqm/vhi7V9YYpBsp+IMyqNrEN94N7tVc=
 github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/cloudmock v0.55.0 h1:7t/qx5Ost0s0wbA/VDrByOooURhp+ikYwv20i9Y07TQ=
@@ -1145,14 +1145,14 @@ go.opentelemetry.io/contrib/propagators/jaeger v1.42.0/go.mod h1:xd89e/pUyPatUP1
 go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0 h1:h8kHGv9+VIiJbQ2Qx6BbORZwcvVnd0le/SFK8Vom0bA=
 go.opentelemetry.io/contrib/samplers/jaegerremote v0.36.0/go.mod h1:tjrgaYHDx+1CmTk5YzNAUCbLX1ZrjrsogXBQHaVf7rI=
 go.opentelemetry.io/otel v1.21.0/go.mod h1:QZzNPQPm1zLX4gZK4cMi+71eaorMSGT3A4znnUvNNEo=
-go.opentelemetry.io/otel v1.42.0 h1:lSQGzTgVR3+sgJDAU/7/ZMjN9Z+vUip7leaqBKy4sho=
-go.opentelemetry.io/otel v1.42.0/go.mod h1:lJNsdRMxCUIWuMlVJWzecSMuNjE7dOYyWlqOXWkdqCc=
+go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
+go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
 go.opentelemetry.io/otel/exporters/jaeger v1.17.0 h1:D7UpUy2Xc2wsi1Ras6V40q806WM07rqoCWzXu7Sqy+4=
 go.opentelemetry.io/otel/exporters/jaeger v1.17.0/go.mod h1:nPCqOnEH9rNLKqH/+rrUjiMzHJdV1BlpKcTwRTyKkKI=
 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0 h1:deI9UQMoGFgrg5iLPgzueqFPHevDl+28YKfSpPTI6rY=
 go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.18.0/go.mod h1:PFx9NgpNUKXdf7J4Q3agRxMs3Y07QhTCVipKmLsMKnU=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.18.0 h1:icqq3Z34UrEFk2u+HMhTtRsvo7Ues+eiJVjaJt62njs=
-go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.18.0/go.mod h1:W2m8P+d5Wn5kipj4/xmbt9uMqezEKfBjzVJadfABSBE=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0 h1:HIBTQ3VO5aupLKjC90JgMqpezVXwFuq6Ryjn0/izoag=
+go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.19.0/go.mod h1:ji9vId85hMxqfvICA0Jt8JqEdrXaAkcpkI9HPXya0ro=
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.42.0 h1:MdKucPl/HbzckWWEisiNqMPhRrAOQX8r4jTuGr636gk=
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.42.0/go.mod h1:RolT8tWtfHcjajEH5wFIZ4Dgh5jpPdFXYV9pTAk/qjc=
 go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.42.0 h1:H7O6RlGOMTizyl3R08Kn5pdM06bnH8oscSj7o11tmLA=
@@ -1171,23 +1171,23 @@ go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.42.0 h1:lSZHgNHfbmQTPf
 go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.42.0/go.mod h1:so9ounLcuoRDu033MW/E0AD4hhUjVqswrMF5FoZlBcw=
 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0 h1:s/1iRkCKDfhlh1JF26knRneorus8aOwVIDhvYx9WoDw=
 go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0/go.mod h1:UI3wi0FXg1Pofb8ZBiBLhtMzgoTm1TYkMvn71fAqDzs=
-go.opentelemetry.io/otel/log v0.18.0 h1:XgeQIIBjZZrliksMEbcwMZefoOSMI1hdjiLEiiB0bAg=
-go.opentelemetry.io/otel/log v0.18.0/go.mod h1:KEV1kad0NofR3ycsiDH4Yjcoj0+8206I6Ox2QYFSNgI=
+go.opentelemetry.io/otel/log v0.19.0 h1:KUZs/GOsw79TBBMfDWsXS+KZ4g2Ckzksd1ymzsIEbo4=
+go.opentelemetry.io/otel/log v0.19.0/go.mod h1:5DQYeGmxVIr4n0/BcJvF4upsraHjg6vudJJpnkL6Ipk=
 go.opentelemetry.io/otel/metric v1.21.0/go.mod h1:o1p3CA8nNHW8j5yuQLdc1eeqEaPfzug24uvsyIEJRWM=
-go.opentelemetry.io/otel/metric v1.42.0 h1:2jXG+3oZLNXEPfNmnpxKDeZsFI5o4J+nz6xUlaFdF/4=
-go.opentelemetry.io/otel/metric v1.42.0/go.mod h1:RlUN/7vTU7Ao/diDkEpQpnz3/92J9ko05BIwxYa2SSI=
+go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
+go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
 go.opentelemetry.io/otel/sdk v1.21.0/go.mod h1:Nna6Yv7PWTdgJHVRD9hIYywQBRx7pbox6nwBnZIxl/E=
-go.opentelemetry.io/otel/sdk v1.42.0 h1:LyC8+jqk6UJwdrI/8VydAq/hvkFKNHZVIWuslJXYsDo=
-go.opentelemetry.io/otel/sdk v1.42.0/go.mod h1:rGHCAxd9DAph0joO4W6OPwxjNTYWghRWmkHuGbayMts=
-go.opentelemetry.io/otel/sdk/log v0.18.0 h1:n8OyZr7t7otkeTnPTbDNom6rW16TBYGtvyy2Gk6buQw=
-go.opentelemetry.io/otel/sdk/log v0.18.0/go.mod h1:C0+wxkTwKpOCZLrlJ3pewPiiQwpzycPI/u6W0Z9fuYk=
-go.opentelemetry.io/otel/sdk/log/logtest v0.18.0 h1:l3mYuPsuBx6UKE47BVcPrZoZ0q/KER57vbj2qkgDLXA=
-go.opentelemetry.io/otel/sdk/log/logtest v0.18.0/go.mod h1:7cHtiVJpZebB3wybTa4NG+FUo5NPe3PROz1FqB0+qdw=
-go.opentelemetry.io/otel/sdk/metric v1.42.0 h1:D/1QR46Clz6ajyZ3G8SgNlTJKBdGp84q9RKCAZ3YGuA=
-go.opentelemetry.io/otel/sdk/metric v1.42.0/go.mod h1:Ua6AAlDKdZ7tdvaQKfSmnFTdHx37+J4ba8MwVCYM5hc=
+go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
+go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
+go.opentelemetry.io/otel/sdk/log v0.19.0 h1:scYVLqT22D2gqXItnWiocLUKGH9yvkkeql5dBDiXyko=
+go.opentelemetry.io/otel/sdk/log v0.19.0/go.mod h1:vFBowwXGLlW9AvpuF7bMgnNI95LiW10szrOdvzBHlAg=
+go.opentelemetry.io/otel/sdk/log/logtest v0.19.0 h1:BEbF7ZBB6qQloV/Ub1+3NQoOUnVtcGkU3XX4Ws3GQfk=
+go.opentelemetry.io/otel/sdk/log/logtest v0.19.0/go.mod h1:Lua81/3yM0wOmoHTokLj9y9ADeA02v1naRrVrkAZuKk=
+go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
+go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
 go.opentelemetry.io/otel/trace v1.21.0/go.mod h1:LGbsEB0f9LGjN+OZaQQ26sohbOmiMR+BaslueVtS/qQ=
-go.opentelemetry.io/otel/trace v1.42.0 h1:OUCgIPt+mzOnaUTpOQcBiM/PLQ/Op7oq6g4LenLmOYY=
-go.opentelemetry.io/otel/trace v1.42.0/go.mod h1:f3K9S+IFqnumBkKhRJMeaZeNk9epyhnCmQh/EysQCdc=
+go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
+go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
 go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI=
 go.opentelemetry.io/proto/otlp v1.10.0 h1:IQRWgT5srOCYfiWnpqUYz9CVmbO8bFmKcwYxpuCSL2g=
 go.opentelemetry.io/proto/otlp v1.10.0/go.mod h1:/CV4QoCR/S9yaPj8utp3lvQPoqMtxXdzn7ozvvozVqk=
@@ -1592,8 +1592,8 @@ golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1/go.mod h1:I/5z698sn9Ka8T
 golang.org/x/xerrors v0.0.0-20220411194840-2f41105eb62f/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0=
 golang.org/x/xerrors v0.0.0-20220517211312-f3a8303e98df/go.mod h1:K8+ghG5WaK9qNqU5K3HdILfMLy1f3aNYFI/wnl100a8=
 gonum.org/v1/gonum v0.0.0-20181121035319-3f7ecaa7e8ca/go.mod h1:Y+Yx5eoAFn32cQvJDxZx5Dpnq+c3wtXuadVZAcxbbBo=
-gonum.org/v1/gonum v0.16.0 h1:5+ul4Swaf3ESvrOnidPp4GZbzf0mxVQpDCYUQE7OJfk=
-gonum.org/v1/gonum v0.16.0/go.mod h1:fef3am4MQ93R2HHpKnLk4/Tbh/s0+wqD5nfa6Pnwy4E=
+gonum.org/v1/gonum v0.17.0 h1:VbpOemQlsSMrYmn7T2OUvQ4dqxQXU+ouZFQsZOx50z4=
+gonum.org/v1/gonum v0.17.0/go.mod h1:El3tOrEuMpv2UdMrbNlKEh9vd86bmQ6vqIcDwxEOc1E=
 gonum.org/v1/netlib v0.0.0-20181029234149-ec6d1f5cefe6/go.mod h1:wa6Ws7BG/ESfp6dHfk7C6KdzKA7wR7u/rKwOGE66zvw=
 google.golang.org/api v0.4.0/go.mod h1:8k5glujaEP+g9n7WNsDg8QP6cUVNI86fCNMcbazEtwE=
 google.golang.org/api v0.7.0/go.mod h1:WtwebWUNSVBH/HAw79HIFXZNqEvBhG+Ra+ax0hx3E3M=
@@ -1724,10 +1724,10 @@ google.golang.org/genproto v0.0.0-20220505152158-f39f71e6c8f3/go.mod h1:RAyBrSAP
 google.golang.org/genproto v0.0.0-20220519153652-3a47de7e79bd/go.mod h1:RAyBrSAP7Fh3Nc84ghnVLDPuV51xc9agzmm4Ph6i0Q4=
 google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 h1:XzmzkmB14QhVhgnawEVsOn6OFsnpyxNPRY9QV01dNB0=
 google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7/go.mod h1:L43LFes82YgSonw6iTXTxXUX1OlULt4AQtkik4ULL/I=
-google.golang.org/genproto/googleapis/api v0.0.0-20260401001100-f93e5f3e9f0f h1:K3zPU40OFjwD5YKADLMLoiL0L7JJpBgEdLqGuCNPfp0=
-google.golang.org/genproto/googleapis/api v0.0.0-20260401001100-f93e5f3e9f0f/go.mod h1:EIQZ5bFCfRQDV4MhRle7+OgjNtZ6P1PiZBgAKuxXu/Y=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260401001100-f93e5f3e9f0f h1:Rka45QInERYknkHYfJEPBQaoobXl+YpxTMjAKgWUq2A=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20260401001100-f93e5f3e9f0f/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
+google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 h1:VPWxll4HlMw1Vs/qXtN7BvhZqsS9cdAittCNvVENElA=
+google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9/go.mod h1:7QBABkRtR8z+TEnmXTqIqwJLlzrZKVfAUm7tY3yGv0M=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9 h1:m8qni9SQFH0tJc1X0vmnpw/0t+AImlSvp30sEupozUg=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20260401024825-9d38bb4040a9/go.mod h1:4Hqkh8ycfw05ld/3BWL7rJOSfebL2Q+DVDeRgYgxUU8=
 google.golang.org/grpc v1.12.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=
 google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38=
@@ -1760,8 +1760,8 @@ google.golang.org/grpc v1.44.0/go.mod h1:k+4IHHFw41K8+bbowsex27ge2rCb65oeWqe4jJ5
 google.golang.org/grpc v1.45.0/go.mod h1:lN7owxKUQEqMfSyQikvvk5tf/6zMPsrK+ONuO11+0rQ=
 google.golang.org/grpc v1.46.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
 google.golang.org/grpc v1.46.2/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACuMGWk=
-google.golang.org/grpc v1.79.3 h1:sybAEdRIEtvcD68Gx7dmnwjZKlyfuc61Dyo9pGXXkKE=
-google.golang.org/grpc v1.79.3/go.mod h1:KmT0Kjez+0dde/v2j9vzwoAScgEPx/Bw1CYChhHLrHQ=
+google.golang.org/grpc v1.80.0 h1:Xr6m2WmWZLETvUNvIUmeD5OAagMw3FiKmMlTdViWsHM=
+google.golang.org/grpc v1.80.0/go.mod h1:ho/dLnxwi3EDJA4Zghp7k2Ec1+c2jqup0bFkw07bwF4=
 google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw=
 google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8=
 google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0=