Address CVEs from dependencies (#68509)

Bumps golang/go.opentelemetry.io/otel to 1.44.0
Bumps oras.land/oras-go/v2 to 2.6.1

The updates were performed via socket fix --ecosystem=go --all --json

```
{
  "ok": true,
  "data": {
    "fixedAll": true,
    "ghsaDetails": [
      {
        "type": "applied-fixes",
        "fixes": {
          "GHSA-xf85-363p-868w": [
            {
              "purl": "pkg:golang/oras.land/oras-go/[email protected]",
              "fixedVersion": "2.6.1"
            }
          ],
          "GHSA-vh4v-2xq2-g5cg": [
            {
              "purl": "pkg:golang/oras.land/oras-go/[email protected]",
              "fixedVersion": "2.6.1"
            }
          ],
          "GHSA-fxhp-mv3v-67qp": [
            {
              "purl": "pkg:golang/oras.land/oras-go/[email protected]",
              "fixedVersion": "2.6.1"
            }
          ],
          "GHSA-8xwf-rjm4-xvhv": [
            {
              "purl": "pkg:golang/oras.land/oras-go/[email protected]",
              "fixedVersion": "2.6.1"
            }
          ],
          "GHSA-jxpm-75mh-9fp7": [
            {
              "purl": "pkg:golang/oras.land/oras-go/[email protected]",
              "fixedVersion": "2.6.1"
            }
          ],
          "GHSA-5wrp-cwcj-q835": [
            {
              "purl": "pkg:golang/go.opentelemetry.io/[email protected].0",
              "fixedVersion": "1.44.0"
            }
          ]
        }
      }
    ]
  }
}
```
This commit is contained in:
rosstimothy
2026-07-09 20:18:58 +00:00
committed by GitHub
parent bc7cd3aa03
commit b249a7349a
24 changed files with 268 additions and 268 deletions
+2 -2
View File
@@ -244,7 +244,7 @@ require (
go.opentelemetry.io/otel v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.43.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
go.opentelemetry.io/otel/sdk v1.44.0
go.opentelemetry.io/otel/trace v1.44.0
go.opentelemetry.io/proto/otlp v1.10.0
@@ -620,7 +620,7 @@ require (
modernc.org/mathutil v1.7.1 // indirect
modernc.org/memory v1.11.0 // indirect
mvdan.cc/sh/v3 v3.7.0 // indirect
oras.land/oras-go/v2 v2.6.0 // indirect
oras.land/oras-go/v2 v2.6.1 // indirect
sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730 // indirect
sigs.k8s.io/kustomize/api v0.20.1 // indirect
sigs.k8s.io/kustomize/kustomize/v5 v5.7.1 // indirect