From cf97f421b0a7be3967dc6c10d288f03dfb5c2f05 Mon Sep 17 00:00:00 2001
From: Knative Automation <automation@knative.team>
Date: Tue, 7 Apr 2026 01:47:14 +0000
Subject: [PATCH] upgrade to latest dependencies

bumping go.yaml.in/yaml/v2 3b57511...43b627a:
  > 43b627a Replace gopkg.in/check.v1 with the standard testing library
bumping knative.dev/pkg 396dbaa...cb58ae5:
  > cb58ae5 Bump the otel group with 11 updates (# 3341)
bumping go.opentelemetry.io/otel/metric a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping go.opentelemetry.io/otel/trace a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)
bumping go.opentelemetry.io/otel a3941ff...9276201:
  > 9276201 Release v1.43.0 / v0.65.0 / v0.19.0 (# 8128)
  > 61b8c94 chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (# 8131)
  > 97a086e chore(deps): update github.com/golangci/dupl digest to c99c5cf (# 8122)
  > 5e363de limit response body size for OTLP HTTP exporters (# 8108)
  > 35214b6 Use an absolute path when calling bsd kenv (# 8113)
  > 290024c fix(deps): update module google.golang.org/grpc to v1.80.0 (# 8121)
  > e70658e fix: support getBody in otelploghttp (# 8096)
  > 4afe468 fix(deps): update googleapis to 9d38bb4 (# 8117)
  > b9ca729 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (# 8115)
  > 69472ec chore(deps): update fossas/fossa-action action to v1.9.0 (# 8118)
  > 07448a8 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.55.0 (# 8119)
  > 858cabf chore(deps): update codspeedhq/action action to v4.13.0 (# 8114)
  > 493504d fix(deps): update googleapis to d5a96ad (# 8112)
  > ab27913 metricdatatest: Improve printing of diffs (# 8073)
  > 3ff9ad7 chore(deps): update module github.com/hashicorp/go-version to v1.9.0 (# 8109)
  > f932c7e chore(deps): update github/codeql-action action to v4.35.1 (# 8102)
  > c2abc1e chore(deps): update module github.com/lucasb-eyer/go-colorful to v1.4.0 (# 8103)
  > 624f646 chore(deps): update module github.com/go-git/go-git/v5 to v5.17.1 (# 8106)
  > 47e4b06 chore(deps): update actions/setup-go action to v6.4.0 (# 8107)
  > eb698ed chore(deps): update github/codeql-action action to v4.35.0 (# 8101)
  > 099a8d1 chore(deps): update module github.com/butuzov/ireturn to v0.4.1 (# 8100)
  > 0d3cd1d chore(deps): update module github.com/tetafro/godot to v1.5.6 (# 8099)
  > 5c12b73 chore(deps): update codecov/codecov-action action to v6 (# 8098)
  > b8ea873 chore(deps): update codecov/codecov-action action to v5.5.4 (# 8097)
  > 853704b chore(deps): update module github.com/pelletier/go-toml/v2 to v2.3.0 (# 8095)
  > e9449e3 chore: fix noctx issues (# 8008)
  > 717c1b3 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.4 (# 8092)
  > edcfb1a chore(deps): update github/codeql-action action to v4.34.1 (# 8090)
  > b8301a2 chore(deps): update codspeedhq/action action to v4.12.1 (# 8089)
  > 94ec25a chore(deps): update github/codeql-action action to v4.34.0 (# 8088)
  > 015ed1a sdk/metric: Support specifying cardinality limits per instrument kinds (# 7855)
  > e604da5 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (# 8075)
  > 8742ba9 chore(deps): update golang.org/x/telemetry digest to b6b0c46 (# 8076)
  > 8ae173e fix(deps): update googleapis to d00831a (# 8078)
  > e6120a6 chore(deps): update module github.com/fatih/color to v1.19.0 (# 8087)
  > 69e9181 chore(deps): update actions/cache action to v5.0.4 (# 8079)
  > 09fb3e0 fix(deps): update module go.opentelemetry.io/collector/pdata to v1.54.0 (# 8086)
  > 68f28d6 chore(deps): update module github.com/protonmail/go-crypto to v1.4.1 (# 8081)
  > 47509ac chore(deps): update module github.com/securego/gosec/v2 to v2.25.0 (# 8084)
  > 02d1881 chore(deps): update module go.opentelemetry.io/collector/featuregate to v1.54.0 (# 8085)
  > b471ef1 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to de6f1cc (# 8082)
  > ec4a159 chore(deps): update module github.com/ryanrolds/sqlclosecheck to v0.6.0 (# 8083)
  > 8f3f095 chore(deps): update codecov/codecov-action action to v5.5.3 (# 8080)
  > 911ed35 Cleanup exemplar featuregate readme (# 8072)
  > 528ebab sdk/trace/internal/observ: guard SpanStarted and spanLive with Enabled (# 8067)
  > 025b01b Add support for the development per-series starttime feature (# 8060)
  > 768e930 Added the `internal/observ` package to stdoutlog (# 7735)
  > 5576bc2 Use atomics for exponential histogram buckets (# 8057)
  > d5f403c sdk/resource: add WithContext variants for Default and Environment (# 7808) (# 8051)
  > 08efeb4 Migrate to new bare metal runner (Ubuntu 24) (# 8068)
  > 7e13b02 chore(deps): update github.com/securego/gosec/v2 digest to 744bfb5 (# 8064)
  > 206ac29 Fix race in the lastvalue aggregation where 0 could be observed (# 8056)
  > b201d73 chore(deps): update github/codeql-action action to v4.33.0 (# 8065)
  > a029201 chore(deps): update otel/weaver docker tag to v0.22.1 (# 8061)
  > fc02fe0 chore(deps): update github.com/securego/gosec/v2 digest to dec52c4 (# 8063)
  > 972a6e5 chore(deps): update otel/weaver docker tag to v0.22.0 (# 8058)
  > bdc1b51 chore(deps): update github.com/securego/gosec/v2 digest to c2dfcec (# 8055)
  > 4c89d33 exphist: replace min, max, sum, and count with atomics (# 8025)
  > 82d57cc Add tests for exponential histogram concurrent-safety edge-cases (# 8024)
  > 65f85fc Improve aggregation concurrent safe tests (# 8021)
  > 2ffde5a trace: add Random Trace ID Flag (# 8012)
  > 9c5a5df chore(deps): update github.com/securego/gosec/v2 digest to befce8d (# 8053)
  > 362bd1f fix(deps): update golang.org/x (# 8052)
  > f0294a3 Add benchmarks for end-to-end metrics SDK usage (# 7768)
  > 9587c57 Optimize attribute slice conversion (# 8039)
  > 6d79ac3 fix(deps): update golang.org/x (# 8045)
  > 45173ad chore(deps): update github.com/securego/gosec/v2 digest to b7b2c7b (# 8044)
  > e04a399 chore(deps): update actions/download-artifact action to v8.0.1 (# 8046)
  > 88f8c10 linting: add depguard rule to enforce semconv version (# 8041)
  > ddd2b0e fix(sdk/trace): return spec-compliant TraceIdRatioBased description (# 8027)
  > f4da59e attribute: change INVALID Type to EMPTY and mark INVALID as deprecated (# 8038)
  > 205e244 fix(deps): update googleapis to 84a4fc4 (# 8048)
  > aff375a chore(sdk/trace): join errors properly (# 8030)
  > cb0de1f Rebuild semconvkit and verifyreadmes on changes (# 7995)
  > 526b68f docs(otlp): document HTTP/protobuf insecure env vars (# 8037)
  > 3447d09 chore(deps): update github.com/securego/gosec/v2 digest to 6e66a94 (# 8043)
  > 6eb9d64 chore(deps): update module github.com/sonatard/noctx to v0.5.1 (# 8040)
  > eee0fe3 chore(deps): update github.com/securego/gosec/v2 digest to 8895462 (# 8036)
  > 8d19296 chore(deps): update module github.com/prometheus/procfs to v0.20.1 (# 8034)
  > 5e8decc fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.3 (# 8032)
  > d15b533 fix(deps): update googleapis to a57be14 (# 8031)
  > fabe666 resource: add WithService detector option (# 7642)
  > 1d91055 fix(deps): update module go.opentelemetry.io/proto/otlp to v1.10.0 (# 8028)
  > ba2747c Add doc on how to upgrade to new semconv (# 7807)
  > 4b025b4 chore(deps): update module codeberg.org/chavacava/garif to v0.2.1 (# 8019)
  > d8504fb chore(deps): update module github.com/mattn/go-runewidth to v0.0.21 (# 8017)
  > 6258792 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.2 (# 8020)
  > 1f39f18 fix(deps): update golang.org/x (# 8023)
  > 8b05173 fix(deps): update module github.com/golangci/golangci-lint/v2 to v2.11.1 (# 8011)
  > fad8e90 chore(deps): update module go.yaml.in/yaml/v2 to v2.4.4 (# 8016)
  > a61e02f fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to 190d7d4 (# 8013)
  > 758b5a5 chore(deps): update module github.com/jgautheron/goconst to v1.9.0 (# 8014)

Signed-off-by: Knative Automation <automation@knative.team>
---
 go.mod                                        |  10 +-
 go.sum                                        |  28 ++---
 vendor/go.opentelemetry.io/otel/.golangci.yml |  11 ++
 vendor/go.opentelemetry.io/otel/CHANGELOG.md  |  46 +++++++-
 vendor/go.opentelemetry.io/otel/Makefile      |   4 +
 vendor/go.opentelemetry.io/otel/RELEASING.md  |  41 ++++++-
 .../otel/attribute/encoder.go                 |   4 +-
 .../otel/attribute/hash.go                    |   4 +-
 .../otel/attribute/internal/attribute.go      | 103 ++++++++----------
 .../go.opentelemetry.io/otel/attribute/kv.go  |   2 +-
 .../otel/attribute/type_string.go             |   6 +-
 .../otel/attribute/value.go                   |  61 +++++++----
 .../otel/dependencies.Dockerfile              |   2 +-
 .../go.opentelemetry.io/otel/trace/trace.go   |  19 ++++
 vendor/go.opentelemetry.io/otel/version.go    |   2 +-
 vendor/go.opentelemetry.io/otel/versions.yaml |   9 +-
 vendor/modules.txt                            |  10 +-
 17 files changed, 245 insertions(+), 117 deletions(-)

diff --git a/go.mod b/go.mod
index 450a89fbd..dc9a84a4b 100644
--- a/go.mod
+++ b/go.mod
@@ -11,7 +11,7 @@ require (
 	k8s.io/code-generator v0.35.3
 	k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
 	knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad
-	knative.dev/pkg v0.0.0-20260329160701-396dbaacd652
+	knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894
 )
 
 require (
@@ -40,11 +40,11 @@ require (
 	github.com/spf13/pflag v1.0.10 // indirect
 	github.com/x448/float16 v0.8.4 // indirect
 	go.opentelemetry.io/auto/sdk v1.2.1 // indirect
-	go.opentelemetry.io/otel v1.42.0 // indirect
-	go.opentelemetry.io/otel/metric v1.42.0 // indirect
-	go.opentelemetry.io/otel/trace v1.42.0 // indirect
+	go.opentelemetry.io/otel v1.43.0 // indirect
+	go.opentelemetry.io/otel/metric v1.43.0 // indirect
+	go.opentelemetry.io/otel/trace v1.43.0 // indirect
 	go.uber.org/multierr v1.11.0 // indirect
-	go.yaml.in/yaml/v2 v2.4.3 // indirect
+	go.yaml.in/yaml/v2 v2.4.4 // indirect
 	go.yaml.in/yaml/v3 v3.0.4 // indirect
 	golang.org/x/mod v0.34.0 // indirect
 	golang.org/x/net v0.52.0 // indirect
diff --git a/go.sum b/go.sum
index 39890d34a..648146d3a 100644
--- a/go.sum
+++ b/go.sum
@@ -83,16 +83,16 @@ github.com/x448/float16 v0.8.4 h1:qLwI1I70+NjRFUR3zs1JPUCgaCXSh3SW62uAKT1mSBM=
 github.com/x448/float16 v0.8.4/go.mod h1:14CWIYCyZA/cWjXOioeEpHeN/83MdbZDRQHoFcYsOfg=
 go.opentelemetry.io/auto/sdk v1.2.1 h1:jXsnJ4Lmnqd11kwkBV2LgLoFMZKizbCi5fNZ/ipaZ64=
 go.opentelemetry.io/auto/sdk v1.2.1/go.mod h1:KRTj+aOaElaLi+wW1kO/DZRXwkF4C5xPbEe3ZiIhN7Y=
-go.opentelemetry.io/otel v1.42.0 h1:lSQGzTgVR3+sgJDAU/7/ZMjN9Z+vUip7leaqBKy4sho=
-go.opentelemetry.io/otel v1.42.0/go.mod h1:lJNsdRMxCUIWuMlVJWzecSMuNjE7dOYyWlqOXWkdqCc=
-go.opentelemetry.io/otel/metric v1.42.0 h1:2jXG+3oZLNXEPfNmnpxKDeZsFI5o4J+nz6xUlaFdF/4=
-go.opentelemetry.io/otel/metric v1.42.0/go.mod h1:RlUN/7vTU7Ao/diDkEpQpnz3/92J9ko05BIwxYa2SSI=
-go.opentelemetry.io/otel/sdk v1.42.0 h1:LyC8+jqk6UJwdrI/8VydAq/hvkFKNHZVIWuslJXYsDo=
-go.opentelemetry.io/otel/sdk v1.42.0/go.mod h1:rGHCAxd9DAph0joO4W6OPwxjNTYWghRWmkHuGbayMts=
-go.opentelemetry.io/otel/sdk/metric v1.42.0 h1:D/1QR46Clz6ajyZ3G8SgNlTJKBdGp84q9RKCAZ3YGuA=
-go.opentelemetry.io/otel/sdk/metric v1.42.0/go.mod h1:Ua6AAlDKdZ7tdvaQKfSmnFTdHx37+J4ba8MwVCYM5hc=
-go.opentelemetry.io/otel/trace v1.42.0 h1:OUCgIPt+mzOnaUTpOQcBiM/PLQ/Op7oq6g4LenLmOYY=
-go.opentelemetry.io/otel/trace v1.42.0/go.mod h1:f3K9S+IFqnumBkKhRJMeaZeNk9epyhnCmQh/EysQCdc=
+go.opentelemetry.io/otel v1.43.0 h1:mYIM03dnh5zfN7HautFE4ieIig9amkNANT+xcVxAj9I=
+go.opentelemetry.io/otel v1.43.0/go.mod h1:JuG+u74mvjvcm8vj8pI5XiHy1zDeoCS2LB1spIq7Ay0=
+go.opentelemetry.io/otel/metric v1.43.0 h1:d7638QeInOnuwOONPp4JAOGfbCEpYb+K6DVWvdxGzgM=
+go.opentelemetry.io/otel/metric v1.43.0/go.mod h1:RDnPtIxvqlgO8GRW18W6Z/4P462ldprJtfxHxyKd2PY=
+go.opentelemetry.io/otel/sdk v1.43.0 h1:pi5mE86i5rTeLXqoF/hhiBtUNcrAGHLKQdhg4h4V9Dg=
+go.opentelemetry.io/otel/sdk v1.43.0/go.mod h1:P+IkVU3iWukmiit/Yf9AWvpyRDlUeBaRg6Y+C58QHzg=
+go.opentelemetry.io/otel/sdk/metric v1.43.0 h1:S88dyqXjJkuBNLeMcVPRFXpRw2fuwdvfCGLEo89fDkw=
+go.opentelemetry.io/otel/sdk/metric v1.43.0/go.mod h1:C/RJtwSEJ5hzTiUz5pXF1kILHStzb9zFlIEe85bhj6A=
+go.opentelemetry.io/otel/trace v1.43.0 h1:BkNrHpup+4k4w+ZZ86CZoHHEkohws8AY+WTX09nk+3A=
+go.opentelemetry.io/otel/trace v1.43.0/go.mod h1:/QJhyVBUUswCphDVxq+8mld+AvhXZLhe+8WVFxiFff0=
 go.uber.org/atomic v1.4.0/go.mod h1:gD2HeocX3+yG+ygLZcrzQJaqmWj9AIm7n08wl/qW/PE=
 go.uber.org/goleak v1.3.0 h1:2K3zAYmnTNqV73imy9J1T3WC+gmCePx2hEGkimedGto=
 go.uber.org/goleak v1.3.0/go.mod h1:CoHD4mav9JJNrW/WLlf7HGZPjdw8EucARQHekz1X6bE=
@@ -102,8 +102,8 @@ go.uber.org/multierr v1.11.0/go.mod h1:20+QtiLqy0Nd6FdQB9TLXag12DsQkrbs3htMFfDN8
 go.uber.org/zap v1.10.0/go.mod h1:vwi/ZaCAaUcBkycHslxD9B2zi4UTXhF60s6SWpuDF0Q=
 go.uber.org/zap v1.27.1 h1:08RqriUEv8+ArZRYSTXy1LeBScaMpVSTBhCeaZYfMYc=
 go.uber.org/zap v1.27.1/go.mod h1:GB2qFLM7cTU87MWRP2mPIjqfIDnGu+VIO4V/SdhGo2E=
-go.yaml.in/yaml/v2 v2.4.3 h1:6gvOSjQoTB3vt1l+CU+tSyi/HOjfOjRLJ4YwYZGwRO0=
-go.yaml.in/yaml/v2 v2.4.3/go.mod h1:zSxWcmIDjOzPXpjlTTbAsKokqkDNAVtZO0WOMiT90s8=
+go.yaml.in/yaml/v2 v2.4.4 h1:tuyd0P+2Ont/d6e2rl3be67goVK4R6deVxCUX5vyPaQ=
+go.yaml.in/yaml/v2 v2.4.4/go.mod h1:gMZqIpDtDqOfM0uNfy0SkpRhvUryYH0Z6wdMYcacYXQ=
 go.yaml.in/yaml/v3 v3.0.4 h1:tfq32ie2Jv2UxXFdLJdh3jXuOzWiL1fo0bu/FbuKpbc=
 go.yaml.in/yaml/v3 v3.0.4/go.mod h1:DhzuOOF2ATzADvBadXxruRBLzYTpT36CKvDb3+aBEFg=
 golang.org/x/mod v0.34.0 h1:xIHgNUUnW6sYkcM5Jleh05DvLOtwc6RitGHbDk4akRI=
@@ -159,8 +159,8 @@ k8s.io/utils v0.0.0-20251002143259-bc988d571ff4 h1:SjGebBtkBqHFOli+05xYbK8YF1Dzk
 k8s.io/utils v0.0.0-20251002143259-bc988d571ff4/go.mod h1:OLgZIPagt7ERELqWJFomSt595RzquPNLL48iOWgYOg0=
 knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad h1:yH957Dv5HrPgllwTs7e1wvCKcjg/PC0QPQGEWkK7QFw=
 knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad/go.mod h1:L5RzHgbvam0u8QFHfzCX6MKxu/a/gIGEdaRBqNiVbl0=
-knative.dev/pkg v0.0.0-20260329160701-396dbaacd652 h1:oqNQsNewkItkKI2LUfQgYGwdZzIxZ73N/L0AMwVBp80=
-knative.dev/pkg v0.0.0-20260329160701-396dbaacd652/go.mod h1:D1bZ7hFnBZaA9Y6I/TCymeaF22z9qkwbhcA1b/1nHeM=
+knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894 h1:Zabll+2HVz/YH9JLIIL/o7FH8tQP7m2neAgUNSJUjGk=
+knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894/go.mod h1:pqHAkUWsa/DsOKJvubQ7JjesfbA+W7ph3nOXt7DCiAw=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 h1:IpInykpT6ceI+QxKBbEflcR5EXP7sU1kvOlxwZh5txg=
 sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730/go.mod h1:mdzfpAEoE6DHQEN0uh9ZbOCuHbLK5wOm7dK4ctXE9Tg=
 sigs.k8s.io/randfill v1.0.0 h1:JfjMILfT8A6RbawdsK2JXGBR5AQVfd+9TbzrlneTyrU=
diff --git a/vendor/go.opentelemetry.io/otel/.golangci.yml b/vendor/go.opentelemetry.io/otel/.golangci.yml
index d12c8920a..db1f55101 100644
--- a/vendor/go.opentelemetry.io/otel/.golangci.yml
+++ b/vendor/go.opentelemetry.io/otel/.golangci.yml
@@ -17,6 +17,7 @@ linters:
     - ineffassign
     - misspell
     - modernize
+    - noctx
     - perfsprint
     - revive
     - staticcheck
@@ -88,6 +89,16 @@ linters:
           deny:
             - pkg: go.opentelemetry.io/otel/exporters/otlp/otlptrace/internal
               desc: Do not use cross-module internal packages.
+        semconv:
+          list-mode: lax
+          files:
+            - "!**/semconv/**"
+            - "!**/exporters/zipkin/**"
+          deny:
+            - pkg: go.opentelemetry.io/otel/semconv
+              desc: "Use go.opentelemetry.io/otel/semconv/v1.40.0 instead. If a newer semconv version has been released, update the depguard rule."
+          allow:
+            - go.opentelemetry.io/otel/semconv/v1.40.0
     gocritic:
       disabled-checks:
         - appendAssign
diff --git a/vendor/go.opentelemetry.io/otel/CHANGELOG.md b/vendor/go.opentelemetry.io/otel/CHANGELOG.md
index ab7263014..20edda441 100644
--- a/vendor/go.opentelemetry.io/otel/CHANGELOG.md
+++ b/vendor/go.opentelemetry.io/otel/CHANGELOG.md
@@ -11,6 +11,49 @@ This project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.htm
 <!-- Released section -->
 <!-- Don't change this section unless doing release -->
 
+## [1.43.0/0.65.0/0.19.0] 2026-04-02
+
+### Added
+
+- Add `IsRandom` and `WithRandom` on `TraceFlags`, and `IsRandom` on `SpanContext` in `go.opentelemetry.io/otel/trace` for [W3C Trace Context Level 2 Random Trace ID Flag](https://www.w3.org/TR/trace-context-2/#random-trace-id-flag) support. (#8012)
+- Add service detection with `WithService` in `go.opentelemetry.io/otel/sdk/resource`. (#7642)
+- Add `DefaultWithContext` and `EnvironmentWithContext` in `go.opentelemetry.io/otel/sdk/resource` to support plumbing `context.Context` through default and environment detectors. (#8051)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp`. (#8038)
+- Support attributes with empty value (`attribute.EMPTY`) in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8038)
+- Add support for per-series start time tracking for cumulative metrics in `go.opentelemetry.io/otel/sdk/metric`.
+  Set `OTEL_GO_X_PER_SERIES_START_TIMESTAMPS=true` to enable. (#8060)
+- Add `WithCardinalityLimitSelector` for metric reader for configuring cardinality limits specific to the instrument kind. (#7855)
+
+### Changed
+
+- Introduce the `EMPTY` Type in `go.opentelemetry.io/otel/attribute` to reflect that an empty value is now a valid value, with `INVALID` remaining as a deprecated alias of `EMPTY`. (#8038)
+- Improve slice handling in `go.opentelemetry.io/otel/attribute` to optimize short slice values with fixed-size fast paths. (#8039)
+- Improve performance of span metric recording in `go.opentelemetry.io/otel/sdk/trace` by returning early if self-observability is not enabled. (#8067)
+- Improve formatting of metric data diffs in `go.opentelemetry.io/otel/sdk/metric/metricdata/metricdatatest`. (#8073)
+
+### Deprecated
+
+- Deprecate `INVALID` in `go.opentelemetry.io/otel/attribute`. Use `EMPTY` instead. (#8038)
+
+### Fixed
+
+- Return spec-compliant `TraceIdRatioBased` description. This is a breaking behavioral change, but it is necessary to
+  make the implementation [spec-compliant](https://opentelemetry.io/docs/specs/otel/trace/sdk/#traceidratiobased). (#8027)
+- Fix a race condition in `go.opentelemetry.io/otel/sdk/metric` where the lastvalue aggregation could collect the value 0 even when no zero-value measurements were recorded. (#8056)
+- Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` to mitigate excessive memory usage caused by a misconfigured or malicious server.
+  Responses exceeding the limit are treated as non-retryable errors. (#8108)
+- Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp` to mitigate excessive memory usage caused by a misconfigured or malicious server.
+  Responses exceeding the limit are treated as non-retryable errors. (#8108)
+- Limit HTTP response body to 4 MiB in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to mitigate excessive memory usage caused by a misconfigured or malicious server.
+  Responses exceeding the limit are treated as non-retryable errors. (#8108)
+- `WithHostID` detector in `go.opentelemetry.io/otel/sdk/resource` to use full path for `kenv` command on BSD. (#8113)
+- Fix missing `request.GetBody` in `go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp` to correctly handle HTTP2 GOAWAY frame. (#8096)
+
 ## [1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06
 
 ### Added
@@ -3576,7 +3619,8 @@ It contains api and sdk for trace and meter.
 - CircleCI build CI manifest files.
 - CODEOWNERS file to track owners of this project.
 
-[Unreleased]: https://github.com/open-telemetry/opentelemetry-go/compare/v1.42.0...HEAD
+[Unreleased]: https://github.com/open-telemetry/opentelemetry-go/compare/v1.43.0...HEAD
+[1.43.0/0.65.0/0.19.0]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.43.0
 [1.42.0/0.64.0/0.18.0/0.0.16]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.42.0
 [1.41.0/0.63.0/0.17.0/0.0.15]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.41.0
 [1.40.0/0.62.0/0.16.0]: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.40.0
diff --git a/vendor/go.opentelemetry.io/otel/Makefile b/vendor/go.opentelemetry.io/otel/Makefile
index 9f6e6b511..42466f2d6 100644
--- a/vendor/go.opentelemetry.io/otel/Makefile
+++ b/vendor/go.opentelemetry.io/otel/Makefile
@@ -38,10 +38,14 @@ CROSSLINK = $(TOOLS)/crosslink
 $(TOOLS)/crosslink: PACKAGE=go.opentelemetry.io/build-tools/crosslink
 
 SEMCONVKIT = $(TOOLS)/semconvkit
+SEMCONVKIT_FILES := $(sort $(shell find $(TOOLS_MOD_DIR)/semconvkit -type f))
 $(TOOLS)/semconvkit: PACKAGE=go.opentelemetry.io/otel/$(TOOLS_MOD_DIR)/semconvkit
+$(TOOLS)/semconvkit: $(SEMCONVKIT_FILES)
 
 VERIFYREADMES = $(TOOLS)/verifyreadmes
+VERIFYREADMES_FILES := $(sort $(shell find $(TOOLS_MOD_DIR)/verifyreadmes -type f))
 $(TOOLS)/verifyreadmes: PACKAGE=go.opentelemetry.io/otel/$(TOOLS_MOD_DIR)/verifyreadmes
+$(TOOLS)/verifyreadmes: $(VERIFYREADMES_FILES)
 
 GOLANGCI_LINT = $(TOOLS)/golangci-lint
 $(TOOLS)/golangci-lint: PACKAGE=github.com/golangci/golangci-lint/v2/cmd/golangci-lint
diff --git a/vendor/go.opentelemetry.io/otel/RELEASING.md b/vendor/go.opentelemetry.io/otel/RELEASING.md
index 861756fd7..6aff7548c 100644
--- a/vendor/go.opentelemetry.io/otel/RELEASING.md
+++ b/vendor/go.opentelemetry.io/otel/RELEASING.md
@@ -4,7 +4,9 @@
 
 Create a `Version Release` issue to track the release process.
 
-## Semantic Convention Generation
+## Semantic Convention Upgrade
+
+### Semantic Convention Generation
 
 New versions of the [OpenTelemetry Semantic Conventions] mean new versions of the `semconv` package need to be generated.
 The `semconv-generate` make target is used for this.
@@ -22,6 +24,43 @@ make semconv-generate # Uses the exported TAG.
 This should create a new sub-package of [`semconv`](./semconv).
 Ensure things look correct before submitting a pull request to include the addition.
 
+The `CHANGELOG.md` should also be updated to reflect the new changes:
+
+```md
+- The `go.opentelemetry.io/otel/semconv/<NEW VERSION>` package. The package contains semantic conventions from the `<NEW VERSION>` version of the OpenTelemetry Semantic Conventions. See the [migration documentation](./semconv/<NEW VERSION>/MIGRATION.md) for information on how to upgrade from `go.opentelemetry.io/otel/semconv/<PREVIOUS VERSION>`. (#PR_NUMBER)
+```
+
+> **Tip:** Change to the release and prior version to match the changes
+
+### Update semconv imports
+
+Once the new semconv module has been generated, update all semconv imports throughout the codebase to reference the new version:
+
+```go
+// Before
+semconv "go.opentelemetry.io/otel/semconv/v1.37.0"
+"go.opentelemetry.io/otel/semconv/v1.37.0/otelconv"
+
+
+// After
+semconv "go.opentelemetry.io/otel/semconv/v1.39.0"
+"go.opentelemetry.io/otel/semconv/v1.39.0/otelconv"
+```
+
+Once complete, run `make` to check for any compilation or test failures.
+
+#### Handling attribute changes
+
+Some semconv releases might add new attributes or impact attributes that are currently being used. Changes could stem from a simple renaming, to more complex changes like merging attributes and property values being changed.
+
+One should update the code to the new attributes that supersede the impacted ones, hence sticking to the semantic conventions. However, legacy attributes might still be emitted in accordance to the `OTEL_SEMCONV_STABILITY_OPT_IN` environment variable.
+
+For an example on how such migration might have to be tracked and performed, see issue [#7806](https://github.com/open-telemetry/opentelemetry-go/issues/7806).
+
+### Go contrib linter update
+
+Update [.golangci.yml](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/.golangci.yml) in [opentelemetry-go-contrib](https://github.com/open-telemetry/opentelemetry-go-contrib/) to mandate the new semconv version.
+
 ## Breaking changes validation
 
 You can run `make gorelease` which runs [gorelease](https://pkg.go.dev/golang.org/x/exp/cmd/gorelease) to ensure that there are no unwanted changes made in the public API.
diff --git a/vendor/go.opentelemetry.io/otel/attribute/encoder.go b/vendor/go.opentelemetry.io/otel/attribute/encoder.go
index 6cc1a1655..771dd69c5 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/encoder.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/encoder.go
@@ -53,7 +53,7 @@ var (
 	_ Encoder = &defaultAttrEncoder{}
 
 	// encoderIDCounter is for generating IDs for other attribute encoders.
-	encoderIDCounter uint64
+	encoderIDCounter atomic.Uint64
 
 	defaultEncoderOnce     sync.Once
 	defaultEncoderID       = NewEncoderID()
@@ -64,7 +64,7 @@ var (
 // once per each type of attribute encoder. Preferably in init() or in var
 // definition.
 func NewEncoderID() EncoderID {
-	return EncoderID{value: atomic.AddUint64(&encoderIDCounter, 1)}
+	return EncoderID{value: encoderIDCounter.Add(1)}
 }
 
 // DefaultEncoder returns an attribute encoder that encodes attributes in such
diff --git a/vendor/go.opentelemetry.io/otel/attribute/hash.go b/vendor/go.opentelemetry.io/otel/attribute/hash.go
index 6aa69aeae..b09caaa6d 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/hash.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/hash.go
@@ -27,6 +27,7 @@ const (
 	int64SliceID   uint64 = 3762322556277578591 // "_[]int64" (little endian)
 	float64SliceID uint64 = 7308324551835016539 // "[]double" (little endian)
 	stringSliceID  uint64 = 7453010373645655387 // "[]string" (little endian)
+	emptyID        uint64 = 7305809155345288421 // "__empty_" (little endian)
 )
 
 // hashKVs returns a new xxHash64 hash of kvs.
@@ -80,7 +81,8 @@ func hashKV(h xxhash.Hash, kv KeyValue) xxhash.Hash {
 		for i := 0; i < rv.Len(); i++ {
 			h = h.String(rv.Index(i).String())
 		}
-	case INVALID:
+	case EMPTY:
+		h = h.Uint64(emptyID)
 	default:
 		// Logging is an alternative, but using the internal logger here
 		// causes an import cycle so it is not done.
diff --git a/vendor/go.opentelemetry.io/otel/attribute/internal/attribute.go b/vendor/go.opentelemetry.io/otel/attribute/internal/attribute.go
index 7f5eae877..d9f51fa2d 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/internal/attribute.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/internal/attribute.go
@@ -11,80 +11,63 @@ import (
 	"reflect"
 )
 
-// BoolSliceValue converts a bool slice into an array with same elements as slice.
-func BoolSliceValue(v []bool) any {
-	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[bool]())).Elem()
-	reflect.Copy(cp, reflect.ValueOf(v))
-	return cp.Interface()
+// sliceElem is the exact set of element types stored in attribute slice values.
+// Using a closed set prevents accidental instantiations for unsupported types.
+type sliceElem interface {
+	bool | int64 | float64 | string
 }
 
-// Int64SliceValue converts an int64 slice into an array with same elements as slice.
-func Int64SliceValue(v []int64) any {
-	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[int64]())).Elem()
-	reflect.Copy(cp, reflect.ValueOf(v))
-	return cp.Interface()
-}
-
-// Float64SliceValue converts a float64 slice into an array with same elements as slice.
-func Float64SliceValue(v []float64) any {
-	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[float64]())).Elem()
-	reflect.Copy(cp, reflect.ValueOf(v))
-	return cp.Interface()
-}
+// SliceValue converts a slice into an array with the same elements.
+func SliceValue[T sliceElem](v []T) any {
+	// Keep only the common tiny-slice cases out of reflection. Extending this
+	// much further increases code size for diminishing benefit while larger
+	// slices still need the generic reflective path to preserve comparability.
+	// This matches the short lengths that show up most often in local
+	// benchmarks and semantic convention examples while leaving larger, less
+	// predictable slices on the generic reflective path.
+	switch len(v) {
+	case 0:
+		return [0]T{}
+	case 1:
+		return [1]T{v[0]}
+	case 2:
+		return [2]T{v[0], v[1]}
+	case 3:
+		return [3]T{v[0], v[1], v[2]}
+	}
 
-// StringSliceValue converts a string slice into an array with same elements as slice.
-func StringSliceValue(v []string) any {
-	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[string]())).Elem()
-	reflect.Copy(cp, reflect.ValueOf(v))
-	return cp.Interface()
+	return sliceValueReflect(v)
 }
 
-// AsBoolSlice converts a bool array into a slice into with same elements as array.
-func AsBoolSlice(v any) []bool {
-	rv := reflect.ValueOf(v)
-	if rv.Type().Kind() != reflect.Array {
-		return nil
+// AsSlice converts an array into a slice with the same elements.
+func AsSlice[T sliceElem](v any) []T {
+	// Mirror the small fixed-array fast path used by SliceValue.
+	switch a := v.(type) {
+	case [0]T:
+		return []T{}
+	case [1]T:
+		return []T{a[0]}
+	case [2]T:
+		return []T{a[0], a[1]}
+	case [3]T:
+		return []T{a[0], a[1], a[2]}
 	}
-	cpy := make([]bool, rv.Len())
-	if len(cpy) > 0 {
-		_ = reflect.Copy(reflect.ValueOf(cpy), rv)
-	}
-	return cpy
-}
 
-// AsInt64Slice converts an int64 array into a slice into with same elements as array.
-func AsInt64Slice(v any) []int64 {
-	rv := reflect.ValueOf(v)
-	if rv.Type().Kind() != reflect.Array {
-		return nil
-	}
-	cpy := make([]int64, rv.Len())
-	if len(cpy) > 0 {
-		_ = reflect.Copy(reflect.ValueOf(cpy), rv)
-	}
-	return cpy
+	return asSliceReflect[T](v)
 }
 
-// AsFloat64Slice converts a float64 array into a slice into with same elements as array.
-func AsFloat64Slice(v any) []float64 {
-	rv := reflect.ValueOf(v)
-	if rv.Type().Kind() != reflect.Array {
-		return nil
-	}
-	cpy := make([]float64, rv.Len())
-	if len(cpy) > 0 {
-		_ = reflect.Copy(reflect.ValueOf(cpy), rv)
-	}
-	return cpy
+func sliceValueReflect[T sliceElem](v []T) any {
+	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[T]())).Elem()
+	reflect.Copy(cp, reflect.ValueOf(v))
+	return cp.Interface()
 }
 
-// AsStringSlice converts a string array into a slice into with same elements as array.
-func AsStringSlice(v any) []string {
+func asSliceReflect[T sliceElem](v any) []T {
 	rv := reflect.ValueOf(v)
-	if rv.Type().Kind() != reflect.Array {
+	if !rv.IsValid() || rv.Kind() != reflect.Array || rv.Type().Elem() != reflect.TypeFor[T]() {
 		return nil
 	}
-	cpy := make([]string, rv.Len())
+	cpy := make([]T, rv.Len())
 	if len(cpy) > 0 {
 		_ = reflect.Copy(reflect.ValueOf(cpy), rv)
 	}
diff --git a/vendor/go.opentelemetry.io/otel/attribute/kv.go b/vendor/go.opentelemetry.io/otel/attribute/kv.go
index 8c6928ca7..0cc368018 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/kv.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/kv.go
@@ -15,7 +15,7 @@ type KeyValue struct {
 
 // Valid reports whether kv is a valid OpenTelemetry attribute.
 func (kv KeyValue) Valid() bool {
-	return kv.Key.Defined() && kv.Value.Type() != INVALID
+	return kv.Key.Defined()
 }
 
 // Bool creates a KeyValue with a BOOL Value type.
diff --git a/vendor/go.opentelemetry.io/otel/attribute/type_string.go b/vendor/go.opentelemetry.io/otel/attribute/type_string.go
index 24f1fa37d..6c04448d6 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/type_string.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/type_string.go
@@ -8,7 +8,7 @@ func _() {
 	// An "invalid array index" compiler error signifies that the constant values have changed.
 	// Re-run the stringer command to generate them again.
 	var x [1]struct{}
-	_ = x[INVALID-0]
+	_ = x[EMPTY-0]
 	_ = x[BOOL-1]
 	_ = x[INT64-2]
 	_ = x[FLOAT64-3]
@@ -19,9 +19,9 @@ func _() {
 	_ = x[STRINGSLICE-8]
 }
 
-const _Type_name = "INVALIDBOOLINT64FLOAT64STRINGBOOLSLICEINT64SLICEFLOAT64SLICESTRINGSLICE"
+const _Type_name = "EMPTYBOOLINT64FLOAT64STRINGBOOLSLICEINT64SLICEFLOAT64SLICESTRINGSLICE"
 
-var _Type_index = [...]uint8{0, 7, 11, 16, 23, 29, 38, 48, 60, 71}
+var _Type_index = [...]uint8{0, 5, 9, 14, 21, 27, 36, 46, 58, 69}
 
 func (i Type) String() string {
 	idx := int(i) - 0
diff --git a/vendor/go.opentelemetry.io/otel/attribute/value.go b/vendor/go.opentelemetry.io/otel/attribute/value.go
index 5931e7129..db04b1326 100644
--- a/vendor/go.opentelemetry.io/otel/attribute/value.go
+++ b/vendor/go.opentelemetry.io/otel/attribute/value.go
@@ -6,7 +6,6 @@ package attribute // import "go.opentelemetry.io/otel/attribute"
 import (
 	"encoding/json"
 	"fmt"
-	"reflect"
 	"strconv"
 
 	attribute "go.opentelemetry.io/otel/attribute/internal"
@@ -18,6 +17,8 @@ import (
 type Type int // nolint: revive  // redefines builtin Type.
 
 // Value represents the value part in key-value pairs.
+//
+// Note that the zero value is a valid empty value.
 type Value struct {
 	vtype    Type
 	numeric  uint64
@@ -26,8 +27,8 @@ type Value struct {
 }
 
 const (
-	// INVALID is used for a Value with no value set.
-	INVALID Type = iota
+	// EMPTY is used for a Value with no value set.
+	EMPTY Type = iota
 	// BOOL is a boolean Type Value.
 	BOOL
 	// INT64 is a 64-bit signed integral Type Value.
@@ -44,6 +45,10 @@ const (
 	FLOAT64SLICE
 	// STRINGSLICE is a slice of strings Type Value.
 	STRINGSLICE
+	// INVALID is used for a Value with no value set.
+	//
+	// Deprecated: Use EMPTY instead as an empty value is a valid value.
+	INVALID = EMPTY
 )
 
 // BoolValue creates a BOOL Value.
@@ -56,7 +61,7 @@ func BoolValue(v bool) Value {
 
 // BoolSliceValue creates a BOOLSLICE Value.
 func BoolSliceValue(v []bool) Value {
-	return Value{vtype: BOOLSLICE, slice: attribute.BoolSliceValue(v)}
+	return Value{vtype: BOOLSLICE, slice: attribute.SliceValue(v)}
 }
 
 // IntValue creates an INT64 Value.
@@ -64,16 +69,30 @@ func IntValue(v int) Value {
 	return Int64Value(int64(v))
 }
 
-// IntSliceValue creates an INTSLICE Value.
+// IntSliceValue creates an INT64SLICE Value.
 func IntSliceValue(v []int) Value {
-	cp := reflect.New(reflect.ArrayOf(len(v), reflect.TypeFor[int64]()))
-	for i, val := range v {
-		cp.Elem().Index(i).SetInt(int64(val))
-	}
-	return Value{
-		vtype: INT64SLICE,
-		slice: cp.Elem().Interface(),
+	val := Value{vtype: INT64SLICE}
+
+	// Avoid the common tiny-slice cases from allocating a new slice.
+	switch len(v) {
+	case 0:
+		val.slice = [0]int64{}
+	case 1:
+		val.slice = [1]int64{int64(v[0])}
+	case 2:
+		val.slice = [2]int64{int64(v[0]), int64(v[1])}
+	case 3:
+		val.slice = [3]int64{int64(v[0]), int64(v[1]), int64(v[2])}
+	default:
+		// Fallback to a new slice for larger slices.
+		cp := make([]int64, len(v))
+		for i, val := range v {
+			cp[i] = int64(val)
+		}
+		val.slice = attribute.SliceValue(cp)
 	}
+
+	return val
 }
 
 // Int64Value creates an INT64 Value.
@@ -86,7 +105,7 @@ func Int64Value(v int64) Value {
 
 // Int64SliceValue creates an INT64SLICE Value.
 func Int64SliceValue(v []int64) Value {
-	return Value{vtype: INT64SLICE, slice: attribute.Int64SliceValue(v)}
+	return Value{vtype: INT64SLICE, slice: attribute.SliceValue(v)}
 }
 
 // Float64Value creates a FLOAT64 Value.
@@ -99,7 +118,7 @@ func Float64Value(v float64) Value {
 
 // Float64SliceValue creates a FLOAT64SLICE Value.
 func Float64SliceValue(v []float64) Value {
-	return Value{vtype: FLOAT64SLICE, slice: attribute.Float64SliceValue(v)}
+	return Value{vtype: FLOAT64SLICE, slice: attribute.SliceValue(v)}
 }
 
 // StringValue creates a STRING Value.
@@ -112,7 +131,7 @@ func StringValue(v string) Value {
 
 // StringSliceValue creates a STRINGSLICE Value.
 func StringSliceValue(v []string) Value {
-	return Value{vtype: STRINGSLICE, slice: attribute.StringSliceValue(v)}
+	return Value{vtype: STRINGSLICE, slice: attribute.SliceValue(v)}
 }
 
 // Type returns a type of the Value.
@@ -136,7 +155,7 @@ func (v Value) AsBoolSlice() []bool {
 }
 
 func (v Value) asBoolSlice() []bool {
-	return attribute.AsBoolSlice(v.slice)
+	return attribute.AsSlice[bool](v.slice)
 }
 
 // AsInt64 returns the int64 value. Make sure that the Value's type is
@@ -155,7 +174,7 @@ func (v Value) AsInt64Slice() []int64 {
 }
 
 func (v Value) asInt64Slice() []int64 {
-	return attribute.AsInt64Slice(v.slice)
+	return attribute.AsSlice[int64](v.slice)
 }
 
 // AsFloat64 returns the float64 value. Make sure that the Value's
@@ -174,7 +193,7 @@ func (v Value) AsFloat64Slice() []float64 {
 }
 
 func (v Value) asFloat64Slice() []float64 {
-	return attribute.AsFloat64Slice(v.slice)
+	return attribute.AsSlice[float64](v.slice)
 }
 
 // AsString returns the string value. Make sure that the Value's type
@@ -193,7 +212,7 @@ func (v Value) AsStringSlice() []string {
 }
 
 func (v Value) asStringSlice() []string {
-	return attribute.AsStringSlice(v.slice)
+	return attribute.AsSlice[string](v.slice)
 }
 
 type unknownValueType struct{}
@@ -217,6 +236,8 @@ func (v Value) AsInterface() any {
 		return v.stringly
 	case STRINGSLICE:
 		return v.asStringSlice()
+	case EMPTY:
+		return nil
 	}
 	return unknownValueType{}
 }
@@ -252,6 +273,8 @@ func (v Value) Emit() string {
 		return string(j)
 	case STRING:
 		return v.stringly
+	case EMPTY:
+		return ""
 	default:
 		return "unknown"
 	}
diff --git a/vendor/go.opentelemetry.io/otel/dependencies.Dockerfile b/vendor/go.opentelemetry.io/otel/dependencies.Dockerfile
index f0cc942ba..7a9b3c055 100644
--- a/vendor/go.opentelemetry.io/otel/dependencies.Dockerfile
+++ b/vendor/go.opentelemetry.io/otel/dependencies.Dockerfile
@@ -1,4 +1,4 @@
 # This is a renovate-friendly source of Docker images.
 FROM python:3.13.6-slim-bullseye@sha256:e98b521460ee75bca92175c16247bdf7275637a8faaeb2bcfa19d879ae5c4b9a AS python
-FROM otel/weaver:v0.21.2@sha256:2401de985c38bdb98b43918e2f43aa36b2afed4aa5669ac1c1de0a17301cd36d AS weaver
+FROM otel/weaver:v0.22.1@sha256:33ae522ae4b71c1c562563c1d81f46aa0f79f088a0873199143a1f11ac30e5c9 AS weaver
 FROM avtodev/markdown-lint:v1@sha256:6aeedc2f49138ce7a1cd0adffc1b1c0321b841dc2102408967d9301c031949ee AS markdown
diff --git a/vendor/go.opentelemetry.io/otel/trace/trace.go b/vendor/go.opentelemetry.io/otel/trace/trace.go
index 96c06ec32..e3d103c4b 100644
--- a/vendor/go.opentelemetry.io/otel/trace/trace.go
+++ b/vendor/go.opentelemetry.io/otel/trace/trace.go
@@ -196,6 +196,20 @@ func (tf TraceFlags) WithSampled(sampled bool) TraceFlags { // nolint:revive  //
 	return tf &^ FlagsSampled
 }
 
+// IsRandom reports whether the random bit is set in the TraceFlags.
+func (tf TraceFlags) IsRandom() bool {
+	return tf&FlagsRandom == FlagsRandom
+}
+
+// WithRandom sets the random bit in a new copy of the TraceFlags.
+func (tf TraceFlags) WithRandom(random bool) TraceFlags { // nolint:revive  // random is not a control flag.
+	if random {
+		return tf | FlagsRandom
+	}
+
+	return tf &^ FlagsRandom
+}
+
 // MarshalJSON implements a custom marshal function to encode TraceFlags
 // as a hex string.
 func (tf TraceFlags) MarshalJSON() ([]byte, error) {
@@ -322,6 +336,11 @@ func (sc SpanContext) IsSampled() bool {
 	return sc.traceFlags.IsSampled()
 }
 
+// IsRandom reports whether the random bit is set in the SpanContext's TraceFlags.
+func (sc SpanContext) IsRandom() bool {
+	return sc.traceFlags.IsRandom()
+}
+
 // WithTraceFlags returns a new SpanContext with the TraceFlags replaced.
 func (sc SpanContext) WithTraceFlags(flags TraceFlags) SpanContext {
 	return SpanContext{
diff --git a/vendor/go.opentelemetry.io/otel/version.go b/vendor/go.opentelemetry.io/otel/version.go
index 2dae06f25..1db4f47e4 100644
--- a/vendor/go.opentelemetry.io/otel/version.go
+++ b/vendor/go.opentelemetry.io/otel/version.go
@@ -5,5 +5,5 @@ package otel // import "go.opentelemetry.io/otel"
 
 // Version is the current release version of OpenTelemetry in use.
 func Version() string {
-	return "1.42.0"
+	return "1.43.0"
 }
diff --git a/vendor/go.opentelemetry.io/otel/versions.yaml b/vendor/go.opentelemetry.io/otel/versions.yaml
index 6c634ef31..bcc6ee78a 100644
--- a/vendor/go.opentelemetry.io/otel/versions.yaml
+++ b/vendor/go.opentelemetry.io/otel/versions.yaml
@@ -3,7 +3,7 @@
 
 module-sets:
   stable-v1:
-    version: v1.42.0
+    version: v1.43.0
     modules:
       - go.opentelemetry.io/otel
       - go.opentelemetry.io/otel/bridge/opencensus
@@ -22,11 +22,11 @@ module-sets:
       - go.opentelemetry.io/otel/sdk/metric
       - go.opentelemetry.io/otel/trace
   experimental-metrics:
-    version: v0.64.0
+    version: v0.65.0
     modules:
       - go.opentelemetry.io/otel/exporters/prometheus
   experimental-logs:
-    version: v0.18.0
+    version: v0.19.0
     modules:
       - go.opentelemetry.io/otel/log
       - go.opentelemetry.io/otel/log/logtest
@@ -64,3 +64,6 @@ modules:
   go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp:
     version-refs:
       - ./internal/version.go
+  go.opentelemetry.io/otel/exporters/stdout/stdoutlog:
+    version-refs:
+      - ./internal/version.go
diff --git a/vendor/modules.txt b/vendor/modules.txt
index fe1219420..633367c13 100644
--- a/vendor/modules.txt
+++ b/vendor/modules.txt
@@ -92,7 +92,7 @@ github.com/x448/float16
 ## explicit; go 1.24.0
 go.opentelemetry.io/auto/sdk
 go.opentelemetry.io/auto/sdk/internal/telemetry
-# go.opentelemetry.io/otel v1.42.0
+# go.opentelemetry.io/otel v1.43.0
 ## explicit; go 1.25.0
 go.opentelemetry.io/otel
 go.opentelemetry.io/otel/attribute
@@ -107,12 +107,12 @@ go.opentelemetry.io/otel/propagation
 go.opentelemetry.io/otel/semconv/v1.37.0
 go.opentelemetry.io/otel/semconv/v1.40.0
 go.opentelemetry.io/otel/semconv/v1.40.0/httpconv
-# go.opentelemetry.io/otel/metric v1.42.0
+# go.opentelemetry.io/otel/metric v1.43.0
 ## explicit; go 1.25.0
 go.opentelemetry.io/otel/metric
 go.opentelemetry.io/otel/metric/embedded
 go.opentelemetry.io/otel/metric/noop
-# go.opentelemetry.io/otel/trace v1.42.0
+# go.opentelemetry.io/otel/trace v1.43.0
 ## explicit; go 1.25.0
 go.opentelemetry.io/otel/trace
 go.opentelemetry.io/otel/trace/embedded
@@ -132,7 +132,7 @@ go.uber.org/zap/internal/exit
 go.uber.org/zap/internal/pool
 go.uber.org/zap/internal/stacktrace
 go.uber.org/zap/zapcore
-# go.yaml.in/yaml/v2 v2.4.3
+# go.yaml.in/yaml/v2 v2.4.4
 ## explicit; go 1.15
 go.yaml.in/yaml/v2
 # go.yaml.in/yaml/v3 v3.0.4
@@ -733,7 +733,7 @@ k8s.io/utils/trace
 # knative.dev/hack v0.0.0-20260318014029-7eede7fdcbad
 ## explicit; go 1.24
 knative.dev/hack
-# knative.dev/pkg v0.0.0-20260329160701-396dbaacd652
+# knative.dev/pkg v0.0.0-20260406140200-cb58ae50e894
 ## explicit; go 1.25.0
 knative.dev/pkg/apis
 knative.dev/pkg/apis/duck