chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.42.0 in /services/feature-flags

[dependabot]

Bumps go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.42.0.

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc's changelog.

[1.42.0/0.64.0/0.18.0/0.0.16] 2026-03-06

Added

• Add go.opentelemetry.io/otel/semconv/v1.40.0 package. The package contains semantic conventions from the v1.40.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.39.0. (#7985)
• Add Err and SetErr on Record in go.opentelemetry.io/otel/log to attach an error and set record exception attributes in go.opentelemetry.io/otel/log/sdk. (#7924)

Changed

• TracerProvider.ForceFlush in go.opentelemetry.io/otel/sdk/trace joins errors together and continues iteration through SpanProcessors as opposed to returning the first encountered error without attempting exports on subsequent SpanProcessors. (#7856)

Fixed

• Fix missing request.GetBody in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp to correctly handle HTTP2 GOAWAY frame. (#7931)
• Fix semconv v1.39.0 generated metric helpers skipping required attributes when extra attributes were empty. (#7964)
• Preserve W3C TraceFlags bitmask (including the random Trace ID flag) during trace context extraction and injection in go.opentelemetry.io/otel/propagation. (#7834)

Removed

• Drop support for [Go 1.24]. (#7984)

[1.41.0/0.63.0/0.17.0/0.0.15] 2026-03-02

This release is the last to support [Go 1.24]. The next release will require at least [Go 1.25].

Added

• Support testing of [Go 1.26]. (#7902)

Fixed

• Update Baggage in go.opentelemetry.io/otel/propagation and Parse and New in go.opentelemetry.io/otel/baggage to comply with W3C Baggage specification limits. New and Parse now return partial baggage along with an error when limits are exceeded. Errors from baggage extraction are reported to the global error handler. (#7880)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#7914)
• Return an error when the endpoint is configured as insecure and with TLS configuration in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#7914)

Commits

• a3941ff Release v1.42.0/v0.64.0/v0.18.0/v0.0.16 (#8006)
• 6059c47 chore(deps): update golang.org/x/telemetry digest to e526e8a (#8010)
• 44c7edf chore(deps): update module github.com/mgechev/revive to v1.15.0 (#8009)
• de5fb3a fix(deps): update module google.golang.org/grpc to v1.79.2 (#8007)
• 0b82ded chore(deps): update codspeedhq/action action to v4.11.1 (#8001)
• aa3660f chore(deps): update github/codeql-action action to v4.32.6 (#8004)
• 9be8c92 chore(deps): update dependency codespell to v2.4.2 (#8003)
• c9d2015 log: add error field to Record and make SDK to emit exception attributes (#7924)
• fdd1320 TracerProvider ForceFlush() Error Fix (#7856)
• 78f9904 chore(deps): update golang.org/x/telemetry digest to 18da590 (#8000)
• Additional commits viewable in compare view

[greptile-apps]

Greptile Summary

This Dependabot PR bumps go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc from 1.40.0 to 1.42.0 in services/feature-flags, pulling in the full OTel v1.42.0 suite and several transitive dependency updates. Importantly, OTel v1.42.0 dropped Go 1.24 support, so the go directive in go.mod was also silently bumped from 1.24.0 to 1.25.0.

Changes included beyond the stated bump:

• All go.opentelemetry.io/otel/* packages updated from 1.40.0 → 1.42.0
• github.com/grpc-ecosystem/grpc-gateway/v2 bumped 2.27.7 → 2.28.0
• golang.org/x/crypto bumped 0.47.0 → 0.48.0
• golang.org/x/net bumped 0.49.0 → 0.51.0
• golang.org/x/sys bumped 0.40.0 → 0.41.0
• golang.org/x/text bumped 0.33.0 → 0.34.0
• google.golang.org/genproto snapshots updated
• Go minimum version bumped from 1.24.0 to 1.25.0 — CI pipelines and Dockerfiles targeting this service should be confirmed to use Go 1.25+.

Confidence Score: 4/5

Safe to merge once the Go 1.25 runtime requirement is verified across CI and any Dockerfiles for this service.

The dependency bump is routine and mechanically correct — all checksums are updated, transitive deps are consistent, and the OTel changes are additive (bug-fixes and W3C conformance improvements). The one concrete item to verify before merging is that the implicit Go version requirement change (1.24 → 1.25) is compatible with the build environment, since it was not called out in the PR title or description.

services/feature-flags/go.mod — specifically the Go version directive change from 1.24.0 to 1.25.0

Important Files Changed

Filename	Overview
services/feature-flags/go.mod	Go version bumped from 1.24.0 to 1.25.0, OTel packages bumped 1.40.0→1.42.0, and several transitive dependencies updated; the minimum Go version change goes beyond the stated scope of the PR.
services/feature-flags/go.sum	Checksum file updated to match new dependency versions — machine-generated, no manual issues.

Flowchart

%%{init: {'theme': 'neutral'}}%%
flowchart TD
    A["dependabot bump\notlptracegrpc\n1.40.0 → 1.42.0"] --> B["OTel v1.42.0\nDrops Go 1.24 support\n(#7984)"]
    B --> C["go.mod: go 1.24.0 + toolchain\n→ go 1.25.0"]
    A --> D["Transitive dep updates"]
    D --> E["golang.org/x/crypto\n0.47.0 → 0.48.0"]
    D --> F["golang.org/x/net\n0.49.0 → 0.51.0"]
    D --> G["grpc-gateway/v2\n2.27.7 → 2.28.0"]
    D --> H["google.golang.org/genproto\n→ 20260209 snapshot"]
    C --> I{CI / Dockerfiles\nusing Go 1.24?}
    I -- Yes --> J["⚠️ Build will break\nNeed Go 1.25+"]
    I -- No --> K["✅ Safe to merge"]

Loading

_{Reviews (1): Last reviewed commit: "chore(deps): bump go.opentelemetry.io/ot..." | Re-trigger Greptile}

[greptile-apps]

Go minimum version silently bumped to 1.25

The go directive changed from go 1.24.0 (with toolchain go1.24.13) to go 1.25.0. This is because the OTel 1.42.0 release explicitly dropped support for Go 1.24 (#7984).

While this is expected when pulling in a transitive minimum-Go bump, the PR title only mentions the otlptracegrpc version bump. This change means:

• All developers and CI runners must now use Go 1.25+.
• Any Dockerfile or toolchain spec pinned to Go 1.24.x in this service will break at build time.

It's worth verifying that your CI pipelines and any Dockerfiles in or referencing services/feature-flags have been (or will be) updated to Go 1.25 before merging.