build(deps): bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.38.0

[dependabot]

Bumps go.opentelemetry.io/otel/sdk from 1.35.0 to 1.38.0.

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.38.0/0.60.0/0.14.0/0.0.13] 2025-08-29

This release is the last to support [Go 1.23]. The next release will require at least [Go 1.24].

Added

• Add native histogram exemplar support in go.opentelemetry.io/otel/exporters/prometheus. (#6772)
• Add template attribute functions to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6939)
  • ContainerLabel
  • DBOperationParameter
  • DBSystemParameter
  • HTTPRequestHeader
  • HTTPResponseHeader
  • K8SCronJobAnnotation
  • K8SCronJobLabel
  • K8SDaemonSetAnnotation
  • K8SDaemonSetLabel
  • K8SDeploymentAnnotation
  • K8SDeploymentLabel
  • K8SJobAnnotation
  • K8SJobLabel
  • K8SNamespaceAnnotation
  • K8SNamespaceLabel
  • K8SNodeAnnotation
  • K8SNodeLabel
  • K8SPodAnnotation
  • K8SPodLabel
  • K8SReplicaSetAnnotation
  • K8SReplicaSetLabel
  • K8SStatefulSetAnnotation
  • K8SStatefulSetLabel
  • ProcessEnvironmentVariable
  • RPCConnectRPCRequestMetadata
  • RPCConnectRPCResponseMetadata
  • RPCGRPCRequestMetadata
  • RPCGRPCResponseMetadata
• Add ErrorType attribute helper function to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6962)
• Add WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log which can be used to disable deduplication for log records. (#6968)
• Add WithCardinalityLimit option to configure the cardinality limit in go.opentelemetry.io/otel/sdk/metric. (#6996, #7065, #7081, #7164, #7165, #7179)
• Add Clone method to Record in go.opentelemetry.io/otel/log that returns a copy of the record with no shared state. (#7001)
• Add experimental self-observability span and batch span processor metrics in go.opentelemetry.io/otel/sdk/trace. Check the go.opentelemetry.io/otel/sdk/trace/internal/x package documentation for more information. (#7027, #6393, #7209)
• The go.opentelemetry.io/otel/semconv/v1.36.0 package. The package contains semantic conventions from the v1.36.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.34.0.(#7032, #7041)
• Add support for configuring Prometheus name translation using WithTranslationStrategy option in go.opentelemetry.io/otel/exporters/prometheus. The current default translation strategy when UTF-8 mode is enabled is NoUTF8EscapingWithSuffixes, but a future release will change the default strategy to UnderscoreEscapingWithSuffixes for compliance with the specification. (#7111)
• Add experimental self-observability log metrics in go.opentelemetry.io/otel/sdk/log. Check the go.opentelemetry.io/otel/sdk/log/internal/x package documentation for more information. (#7121)
• Add experimental self-observability trace exporter metrics in go.opentelemetry.io/otel/exporters/stdout/stdouttrace.

... (truncated)

Commits

• 84e3f3a Release v1.38.0 (#7271)
• 18424a4 Add tests for attribute JSON marshalling (#7268)
• 9798759 Statically define trace observability attributes (#7263)
• be1e57f Refactor BSP observability setup (#7264)
• d99c68c chore(deps): update module github.com/mgechev/revive to v1.12.0 (#7269)
• 0724539 Add benchmark for set equality (#7262)
• 5358fd7 Upgrade semconv dependencies to v1.37.0 (#7260)
• 25d0274 fix(deps): update module github.com/stretchr/testify to v1.11.1 (#7261)
• d0cab86 prometheus: Add support for setting Translation Strategy config option (#7111)
• 3342341 Generate the semconv/v1.37.0 packages (#7254)
• Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

---

Important

Bump go.opentelemetry.io/otel/sdk to 1.38.0 and update several other dependencies in go.mod and go.sum.

• Dependencies:
  • Bump go.opentelemetry.io/otel/sdk from 1.35.0 to 1.38.0 in go.mod and go.sum.
  • Update github.com/stretchr/testify from 1.10.0 to 1.11.1 in go.mod and go.sum.
  • Update github.com/go-logr/logr from 1.4.2 to 1.4.3 in go.mod and go.sum.
  • Update golang.org/x/sys from 0.33.0 to 0.35.0 in go.mod and go.sum.

^{This description was created by for 12c9d0c. You can customize this summary. It will automatically update as commits are pushed.}

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[dependabot]

Labels

The following labels could not be found: go. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

[ellipsis-dev]

Important

Looks good to me! 👍

Reviewed everything up to 12c9d0c in 1 minute and 53 seconds. Click for details.

• Reviewed 117 lines of code in 2 files
• Skipped 0 files when reviewing.
• Skipped posting 8 draft comments. View those below.
• Modify your settings and rules to customize what types of comments Ellipsis leaves. And don't forget to react with 👍 or 👎 to teach Ellipsis.

1. go.mod:23

• Draft comment:
  Bump 'github.com/stretchr/testify' to v1.11.1. Confirm that all test assertions work as expected.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is about a dependency change and asks the author to confirm that test assertions work as expected. This violates the rule against commenting on dependency changes and asking the author to confirm behavior.

2. go.mod:26

• Draft comment:
  Update 'go.opentelemetry.io/otel' to v1.38.0. Ensure it remains aligned with the SDK and related components.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is about updating a dependency and ensuring alignment with the SDK and related components. This falls under the rule of not commenting on dependency changes or library versions that are not recognized. The comment does not provide a specific code suggestion or ask for a specific test to be written, so it should be removed.

3. go.mod:28

• Draft comment:
  Bump 'go.opentelemetry.io/otel/sdk' to v1.38.0. Verify that no breaking changes affect its usage.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is related to a dependency change and asks the PR author to verify for breaking changes, which violates the rules. It should be removed.

4. go.mod:29

• Draft comment:
  Upgrade 'go.opentelemetry.io/otel/trace' to v1.38.0. Check that API usages are still compliant.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is about upgrading a dependency and checking API usages for compliance. It indirectly asks the author to ensure compliance, which is not allowed. The comment does not provide a specific suggestion or point out a specific issue with the code.

5. go.mod:54

• Draft comment:
  Update 'github.com/go-logr/logr' to v1.4.3. This minor version bump should be backward compatible.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is purely informative about a dependency version change. It doesn't provide any actionable feedback or suggestions for the PR author.

6. go.mod:103

• Draft comment:
  Ensure 'go.opentelemetry.io/otel/metric' is updated to v1.38.0 for consistency with other OTEL components.
• Reason this comment was not posted:
  Comment looked like it was already resolved.

7. go.mod:111

• Draft comment:
  Bump 'golang.org/x/sys' to v0.35.0. Confirm it doesn't introduce regressions in system calls.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% The comment is asking the PR author to confirm that a dependency update doesn't introduce regressions, which is against the rules. It doesn't provide a specific suggestion or point out a specific issue with the code.

8. go.sum:225

• Draft comment:
  The go.sum checksums have been updated (e.g. for go.opentelemetry.io/otel v1.38.0). Verify that these hash changes correspond correctly to the new versions.
• Reason this comment was not posted:
  Comment did not seem useful. Confidence is useful = 0% <= threshold 50% This comment is asking the PR author to verify hash changes in the go.sum file, which is related to dependency management. According to the rules, comments on dependency changes or asking the author to verify things are not allowed.

Workflow ID: wflow_ejfoQmxfCpAATO1P

^{You can customize by changing your verbosity settings, reacting with 👍 or 👎, replying to comments, or adding code review rules.}