Skip to content

Bump go.opentelemetry.io/otel/sdk/metric from 1.36.0 to 1.38.0 #2753

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Bump go.opentelemetry.io/otel/sdk/metric from 1.36.0 to 1.38.0 #2753

wants to merge 1 commit into from
+6 −6

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 8, 2025 •
edited
Loading

Bumps go.opentelemetry.io/otel/sdk/metric from 1.36.0 to 1.38.0.

Changelog

Sourced from go.opentelemetry.io/otel/sdk/metric's changelog.

[1.38.0/0.60.0/0.14.0/0.0.13] 2025-08-29

This release is the last to support [Go 1.23]. The next release will require at least [Go 1.24].

Added

  • Add native histogram exemplar support in go.opentelemetry.io/otel/exporters/prometheus. (#6772)
  • Add template attribute functions to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6939)
    • ContainerLabel
    • DBOperationParameter
    • DBSystemParameter
    • HTTPRequestHeader
    • HTTPResponseHeader
    • K8SCronJobAnnotation
    • K8SCronJobLabel
    • K8SDaemonSetAnnotation
    • K8SDaemonSetLabel
    • K8SDeploymentAnnotation
    • K8SDeploymentLabel
    • K8SJobAnnotation
    • K8SJobLabel
    • K8SNamespaceAnnotation
    • K8SNamespaceLabel
    • K8SNodeAnnotation
    • K8SNodeLabel
    • K8SPodAnnotation
    • K8SPodLabel
    • K8SReplicaSetAnnotation
    • K8SReplicaSetLabel
    • K8SStatefulSetAnnotation
    • K8SStatefulSetLabel
    • ProcessEnvironmentVariable
    • RPCConnectRPCRequestMetadata
    • RPCConnectRPCResponseMetadata
    • RPCGRPCRequestMetadata
    • RPCGRPCResponseMetadata
  • Add ErrorType attribute helper function to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6962)
  • Add WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log which can be used to disable deduplication for log records. (#6968)
  • Add WithCardinalityLimit option to configure the cardinality limit in go.opentelemetry.io/otel/sdk/metric. (#6996, #7065, #7081, #7164, #7165, #7179)
  • Add Clone method to Record in go.opentelemetry.io/otel/log that returns a copy of the record with no shared state. (#7001)
  • Add experimental self-observability span and batch span processor metrics in go.opentelemetry.io/otel/sdk/trace. Check the go.opentelemetry.io/otel/sdk/trace/internal/x package documentation for more information. (#7027, #6393, #7209)
  • The go.opentelemetry.io/otel/semconv/v1.36.0 package. The package contains semantic conventions from the v1.36.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.34.0.(#7032, #7041)
  • Add support for configuring Prometheus name translation using WithTranslationStrategy option in go.opentelemetry.io/otel/exporters/prometheus. The current default translation strategy when UTF-8 mode is enabled is NoUTF8EscapingWithSuffixes, but a future release will change the default strategy to UnderscoreEscapingWithSuffixes for compliance with the specification. (#7111)
  • Add experimental self-observability log metrics in go.opentelemetry.io/otel/sdk/log. Check the go.opentelemetry.io/otel/sdk/log/internal/x package documentation for more information. (#7121)
  • Add experimental self-observability trace exporter metrics in go.opentelemetry.io/otel/exporters/stdout/stdouttrace.

... (truncated)

Commits

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 8, 2025
@dependabot dependabot bot mentioned this pull request Sep 8, 2025
Closed
@kusari-inspector
Copy link

kusari-inspector bot commented Sep 8, 2025 •
edited
Loading

Kusari Inspector

Kusari Analysis Results:

Proceed with these changes

✅ No Flagged Issues Detected
All values appear to be within acceptable risk parameters.

Both dependency and code security analyses independently confirm this is a safe OpenTelemetry SDK update from v1.36.0 to v1.38.0. The dependency analysis validates excellent maintenance scores (10/10), permissive licensing, and zero known vulnerabilities in a well-established CNCF project. The code analysis confirms zero security issues, no exposed secrets, successful govulncheck validation, and appropriate file modifications limited to go.mod and go.sum. All security scans passed cleanly with no conflicting findings. This represents a routine, low-risk dependency update with strong security validation from multiple perspectives.

Note

View full detailed analysis result for more information on the output and the checks that were run.

@kusari-inspector rerun - Trigger a re-analysis of this PR
@kusari-inspector feedback [your message] - Send feedback to our AI and team
See Kusari's documentation for setup and configuration.
Commit: c81b556, performed at: 2025-10-02T13:39:17Z

Found this helpful? Give it a 👍 or 👎 reaction!

@pxp928
Copy link
Collaborator

pxp928 commented Sep 16, 2025

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from 053eb27 to 635d9bd Compare September 16, 2025 17:14
@kusari-inspector
Copy link

Kusari PR Analysis rerun based on - 635d9bd performed at: 2025-09-16T17:17:26Z - link to updated analysis

@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from 635d9bd to 93ce94b Compare September 17, 2025 16:32
@kusari-inspector
Copy link

Kusari PR Analysis rerun based on - 93ce94b performed at: 2025-09-17T16:36:52Z - link to updated analysis

@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from 93ce94b to 3724a52 Compare September 17, 2025 23:36
@kusari-inspector
Copy link

Kusari PR Analysis rerun based on - 3724a52 performed at: 2025-09-17T23:39:55Z - link to updated analysis

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 17, 2025

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

@mihaimaruseac
Copy link
Collaborator

@dependabot rebase

@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from 3724a52 to 39bf567 Compare September 18, 2025 15:38
@kusari-inspector
Copy link

Kusari PR Analysis rerun based on - 39bf567 performed at: 2025-09-18T15:42:46Z - link to updated analysis

@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from 39bf567 to c81b556 Compare October 2, 2025 13:28
@pull-request-size pull-request-size bot added size/XS and removed size/S labels Oct 2, 2025
@kusari-inspector
Copy link

Kusari PR Analysis rerun based on - c81b556 performed at: 2025-10-02T13:40:41Z - link to updated analysis

@mihaimaruseac
Copy link
Collaborator

@dependabot rebase

1 similar comment
@mihaimaruseac
Copy link
Collaborator

@dependabot rebase

@dependabot
Bump go.opentelemetry.io/otel/sdk/metric from 1.36.0 to 1.38.0
f16952d 
Bumps [go.opentelemetry.io/otel/sdk/metric](https://github.com/open-telemetry/opentelemetry-go) from 1.36.0 to 1.38.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.36.0...v1.38.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk/metric
  dependency-version: 1.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/otel/sdk/metric-1.38.0 branch from c81b556 to f16952d Compare October 29, 2025 16:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@mihaimaruseac mihaimaruseac mihaimaruseac approved these changes

@kodiakhq kodiakhq[bot] kodiakhq[bot] approved these changes

@pxp928 pxp928 pxp928 approved these changes

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code size/XS

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@pxp928 @mihaimaruseac