chore(deps): bump go.opentelemetry.io/otel from 1.39.0 to 1.41.0 in /tools (#38)

Bumps
[go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go)
from 1.39.0 to 1.41.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md">go.opentelemetry.io/otel's
changelog</a>.</em></p>
<blockquote>
<h2>[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02</h2>
<p>This release is the last to support [Go 1.24].
The next release will require at least [Go 1.25].</p>
<h3>Added</h3>
<ul>
<li>Support testing of [Go 1.26]. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7902">#7902</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Update <code>Baggage</code> in
<code>go.opentelemetry.io/otel/propagation</code> and <code>Parse</code>
and <code>New</code> in <code>go.opentelemetry.io/otel/baggage</code> to
comply with W3C Baggage specification limits.
<code>New</code> and <code>Parse</code> now return partial baggage along
with an error when limits are exceeded.
Errors from baggage extraction are reported to the global error handler.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7880">#7880</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
<li>Return an error when the endpoint is configured as insecure and with
TLS configuration in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>.
(<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7914">#7914</a>)</li>
</ul>
<h2>[1.40.0/0.62.0/0.16.0] 2026-02-02</h2>
<h3>Added</h3>
<ul>
<li>Add <code>AlwaysRecord</code> sampler in
<code>go.opentelemetry.io/otel/sdk/trace</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7724">#7724</a>)</li>
<li>Add <code>Enabled</code> method to all synchronous instrument
interfaces (<code>Float64Counter</code>,
<code>Float64UpDownCounter</code>, <code>Float64Histogram</code>,
<code>Float64Gauge</code>, <code>Int64Counter</code>,
<code>Int64UpDownCounter</code>, <code>Int64Histogram</code>,
<code>Int64Gauge</code>,) in
<code>go.opentelemetry.io/otel/metric</code>.
This stabilizes the synchronous instrument enabled feature, allowing
users to check if an instrument will process measurements before
performing computationally expensive operations. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7763">#7763</a>)</li>
<li>Add <code>go.opentelemetry.io/otel/semconv/v1.39.0</code> package.
The package contains semantic conventions from the <code>v1.39.0</code>
version of the OpenTelemetry Semantic Conventions.
See the <a
href="https://github.com/open-telemetry/opentelemetry-go/blob/main/semconv/v1.39.0/MIGRATION.md">migration
documentation</a> for information on how to upgrade from
<code>go.opentelemetry.io/otel/semconv/v1.38.0.</code> (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7783">#7783</a>,
<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7789">#7789</a>)</li>
</ul>
<h3>Changed</h3>
<ul>
<li>Improve the concurrent performance of
<code>HistogramReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code> by 4x. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7443">#7443</a>)</li>
<li>Improve the concurrent performance of
<code>FixedSizeReservoir</code> in
<code>go.opentelemetry.io/otel/sdk/metric/exemplar</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7447">#7447</a>)</li>
<li>Improve performance of concurrent histogram measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7474">#7474</a>)</li>
<li>Improve performance of concurrent synchronous gauge measurements in
<code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7478">#7478</a>)</li>
<li>Add experimental observability metrics in
<code>go.opentelemetry.io/otel/exporters/stdout/stdoutmetric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7492">#7492</a>)</li>
<li><code>Exporter</code> in
<code>go.opentelemetry.io/otel/exporters/prometheus</code> ignores
metrics with the scope
<code>go.opentelemetry.io/contrib/bridges/prometheus</code>.
This prevents scrape failures when the Prometheus exporter is
misconfigured to get data from the Prometheus bridge. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7688">#7688</a>)</li>
<li>Improve performance of concurrent exponential histogram measurements
in <code>go.opentelemetry.io/otel/sdk/metric</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7702">#7702</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
<li>The <code>rpc.grpc.status_code</code> attribute in the experimental
metrics emitted from
<code>go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc</code>
is replaced with the <code>rpc.response.status_code</code> attribute to
align with the semantic conventions. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7854">#7854</a>)</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>Fix bad log message when key-value pairs are dropped because of key
duplication in <code>go.opentelemetry.io/otel/sdk/log</code>. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>DroppedAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not count the
non-attribute key-value pairs dropped because of key duplication. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix <code>SetAttributes</code> on <code>Record</code> in
<code>go.opentelemetry.io/otel/sdk/log</code> to not log that attributes
are dropped when they are actually not dropped. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7662">#7662</a>)</li>
<li>Fix missing <code>request.GetBody</code> in
<code>go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp</code>
to correctly handle HTTP/2 <code>GOAWAY</code> frame. (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7794">#7794</a>)</li>
<li><code>WithHostID</code> detector in
<code>go.opentelemetry.io/otel/sdk/resource</code> to use full path for
<code>ioreg</code> command on Darwin (macOS). (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7818">#7818</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/4575a9774dd9415ffc858dd34955493b0031065a"><code>4575a97</code></a>
Release 1.41.0/0.63.0/0.17.0/0.0.15 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7977">#7977</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/66fc10d9dff9653c65bcca111b965137d06f09aa"><code>66fc10d</code></a>
fix: add error handling for insecure HTTP endpoints with TLS client
configura...</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/76e6eec88f186f06a0708b5620324d2b002d9a97"><code>76e6eec</code></a>
chore(deps): update github/codeql-action action to v4.32.5 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7980">#7980</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/0d50f9008c8c93fe49a7caa45c88c30370479d27"><code>0d50f90</code></a>
Revert &quot;Generate semconv/v1.40.0&quot; (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7978">#7978</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/c38a4a57c320b6098ca5c92f0a85201034780b1f"><code>c38a4a5</code></a>
Generate semconv/v1.40.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7929">#7929</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/0f1a22484ec52d6beb1efdb0fa1b63a31e7405af"><code>0f1a224</code></a>
chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7899">#7899</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/c79ebf43eb1cff6dd76a33bb1549f2c082dab604"><code>c79ebf4</code></a>
chore(deps): update module github.com/daixiang0/gci to v0.14.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7973">#7973</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/f75815746541d0d4ac84e1c5955bdcd1a2df2d7d"><code>f758157</code></a>
chore(deps): update module github.com/sonatard/noctx to v0.5.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7968">#7968</a>)</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/92a11645724515630187def073ae39f1b6cb3c69"><code>92a1164</code></a>
fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to
d566b...</li>
<li><a
href="https://github.com/open-telemetry/opentelemetry-go/commit/3cd7c27e840ea3114115459db2e299a27fffaff8"><code>3cd7c27</code></a>
chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (<a
href="https://redirect.github.com/open-telemetry/opentelemetry-go/issues/7969">#7969</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/open-telemetry/opentelemetry-go/compare/v1.39.0...v1.41.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=go.opentelemetry.io/otel&package-manager=go_modules&previous-version=1.39.0&new-version=1.41.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/oxidecomputer/omni-infra-provider-oxide/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

tools/go.mod

@@ -121,7 +121,7 @@ require (
 	github.com/gobwas/glob v0.2.3 // indirect
 	github.com/godoc-lint/godoc-lint v0.11.2 // indirect
 	github.com/gofrs/flock v0.13.0 // indirect
-	github.com/golang/protobuf v1.5.3 // indirect
+	github.com/golang/protobuf v1.5.4 // indirect
 	github.com/golangci/asciicheck v0.5.0 // indirect
 	github.com/golangci/dupl v0.0.0-20250308024227-f665c8d69b32 // indirect
 	github.com/golangci/go-printf-func-name v0.1.1 // indirect
@@ -142,6 +142,7 @@ require (
 	github.com/gostaticanalysis/comment v1.5.0 // indirect
 	github.com/gostaticanalysis/forcetypeassert v0.2.0 // indirect
 	github.com/gostaticanalysis/nilerr v0.1.2 // indirect
+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0 // indirect
 	github.com/hashicorp/go-immutable-radix/v2 v2.1.0 // indirect
 	github.com/hashicorp/go-version v1.8.0 // indirect
 	github.com/hashicorp/golang-lru/v2 v2.0.7 // indirect
@@ -267,24 +268,25 @@ require (
 	go.lsp.dev/uri v0.3.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
 	go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 // indirect
-	go.opentelemetry.io/otel v1.39.0 // indirect
-	go.opentelemetry.io/otel/metric v1.39.0 // indirect
-	go.opentelemetry.io/otel/trace v1.39.0 // indirect
+	go.opentelemetry.io/otel v1.41.0 // indirect
+	go.opentelemetry.io/otel/metric v1.41.0 // indirect
+	go.opentelemetry.io/otel/trace v1.41.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
 	go.uber.org/zap v1.27.1 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
-	golang.org/x/crypto v0.48.0 // indirect
+	golang.org/x/crypto v0.49.0 // indirect
 	golang.org/x/exp v0.0.0-20260112195511-716be5621a96 // indirect
 	golang.org/x/exp/typeparams v0.0.0-20260209203927-2842357ff358 // indirect
-	golang.org/x/mod v0.33.0 // indirect
-	golang.org/x/net v0.50.0 // indirect
-	golang.org/x/sync v0.19.0 // indirect
-	golang.org/x/sys v0.41.0 // indirect
-	golang.org/x/term v0.40.0 // indirect
-	golang.org/x/text v0.34.0 // indirect
-	golang.org/x/tools v0.42.0 // indirect
-	google.golang.org/genproto/googleapis/api v0.0.0-20260217215200-42d3e9bedb6d // indirect
-	google.golang.org/genproto/googleapis/rpc v0.0.0-20260217215200-42d3e9bedb6d // indirect
+	golang.org/x/mod v0.34.0 // indirect
+	golang.org/x/net v0.52.0 // indirect
+	golang.org/x/sync v0.20.0 // indirect
+	golang.org/x/sys v0.42.0 // indirect
+	golang.org/x/term v0.41.0 // indirect
+	golang.org/x/text v0.36.0 // indirect
+	golang.org/x/tools v0.43.0 // indirect
+	google.golang.org/genproto/googleapis/api v0.0.0-20260414002931-afd174a4e478 // indirect
+	google.golang.org/genproto/googleapis/rpc v0.0.0-20260414002931-afd174a4e478 // indirect
+	google.golang.org/grpc v1.80.0 // indirect
 	google.golang.org/protobuf v1.36.11 // indirect
 	gopkg.in/ini.v1 v1.67.0 // indirect
 	gopkg.in/yaml.v2 v2.4.0 // indirect