SECURESIGN-5296 bump go.opentelemetry.io/otel to v1.44.0

[jkopriva]

Bump the OpenTelemetry-Go family to v1.44.0 (fixes CVE-2026-41178, baggage-parsing DoS). Also covers SECURESIGN-5253.

Assisted-by: Claude

[qodo-for-securesign]

PR Summary by Qodo

Upgrade OpenTelemetry Go to v1.44.0 for CVE-2026-41178

🐞 Bug fix ⚙️ Configuration changes 🕐 Less than 5 minutes

AI Description

• Upgrades OpenTelemetry Go modules to v1.44.0, fixing the baggage-parsing denial of service.
• Refreshes related transitive dependencies and module checksums.

High-Level Assessment

The synchronized upgrade of the complete OpenTelemetry module family is the safest approach because it applies the CVE fix while avoiding mixed-version compatibility risks. Accepting Go's associated transitive dependency updates and regenerated checksums keeps the module graph consistent.

Files changed (2) +32 / -32

Other (2) +32 / -32

go.modUpgrade OpenTelemetry modules to v1.44.0 +10/-10

Upgrade OpenTelemetry modules to v1.44.0

• Upgrades the OpenTelemetry API, trace, metric, SDK, and OTLP exporter modules to v1.44.0 to address CVE-2026-41178. Also advances resolved transitive networking, system, and Google API modules.

go.mod

go.sumRefresh checksums for upgraded dependencies +22/-22

Refresh checksums for upgraded dependencies

• Replaces checksums for OpenTelemetry v1.43.0 with v1.44.0 entries and records updated transitive dependency checksums.

go.sum

[qodo-for-securesign]

Code Review by Qodo

🐞 Bugs (0) 📘 Rule violations (0) 📎 Requirement gaps (0)

Great, no issues found!

Qodo reviewed your code and found no material issues that require review

Tip of the day

💡 Did you know, you can copy the agent prompt from any finding and feed it to your IDE agent

More tips ↗ | Customize Qodo ↗ | Qodo docs ↗

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 32.14%. Comparing base (acf3b4a) to head (405684e).

Additional details and impacted files

@@             Coverage Diff              @@
##           release-1.4     #149   +/-   ##
============================================
  Coverage        32.14%   32.14%           
============================================
  Files               57       57           
  Lines             3394     3394           
============================================
  Hits              1091     1091           
  Misses            2198     2198           
  Partials           105      105           

Flag	Coverage Δ
unit	32.14% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.