[gh-worker-campaigns-3e9aa4]

Summary: Security update — 5 packages upgraded (MINOR changes included)

Manifests changed:

• go.mod (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
go.opentelemetry.io/otel/exporters/otlp/otlptrace	v1.44.0	v1.46.0	minor	Transitive	2 LOW
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	v1.44.0	v1.46.0	minor	Transitive	2 LOW
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	v1.44.0	v1.46.0	minor	Transitive	2 LOW
go.opentelemetry.io/otel/sdk	v1.44.0	v1.46.0	minor	Transitive	2 LOW
golang.org/x/crypto	v0.56.0	v0.57.0	minor	Transitive	1 UNKNOWN

---

Security Details

ℹ️ Other Vulnerabilities (9)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
go.opentelemetry.io/otel/exporters/otlp/otlptrace	GHSA-8wmf-6v46-5gfg	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	1.45.0	-
go.opentelemetry.io/otel/exporters/otlp/otlptrace	CVE-2026-81870	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	-	-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	GHSA-8wmf-6v46-5gfg	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	1.45.0	-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	CVE-2026-81870	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	-	-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	GHSA-8wmf-6v46-5gfg	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	1.45.0	-
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	CVE-2026-81870	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	-	-
go.opentelemetry.io/otel/sdk	GHSA-8wmf-6v46-5gfg	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	1.45.0	-
go.opentelemetry.io/otel/sdk	CVE-2026-81870	LOW	OpenTelemetry-Go: Exporter config logging may leak endpoint URLs in info logs	v1.44.0	-	-
golang.org/x/crypto	GO-2026-5932	unknown	The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues	v0.56.0	-	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[datadog-official]

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 6 Pipeline jobs failed

DataDog/datadog-operator | check-golang-version — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

DataDog/datadog-operator | go_e2e_deps — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

validation | build — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

View all 6 failed jobs.

Useful? React with 👍 / 👎

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 507e0a9 | Docs | View more details | Give us feedback!}

[gh-worker-campaigns-3e9aa4]

Auto-rebase complete

Branch is up to date with main — rebased onto dbe132e.

---

_{Auto-Rebase · Add no-auto-rebase to opt out}