fix(deps): vuln minor upgrades — 4 packages (minor: 3 · patch: 1) [examples/single_service/src/go-project/go.mod]

[gh-worker-campaigns-3e9aa4]

Summary: Security update — 4 packages upgraded (MINOR changes included)

Manifests changed:

• examples/single_service/src/go-project/go.mod (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
go.opentelemetry.io/otel	v1.41.0	v1.45.0	minor	Transitive	3 MEDIUM
golang.org/x/crypto	v0.53.0	v0.55.0	minor	Transitive	1 UNKNOWN
golang.org/x/mod	v0.34.0	v0.40.0	minor	Transitive	2 UNKNOWN
github.com/klauspost/compress	v1.18.6	v1.18.7	patch	Transitive	1 UNKNOWN

---

Security Details

ℹ️ Other Vulnerabilities (7)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
go.opentelemetry.io/otel	GO-2026-5158	medium	Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel	v1.41.0	1.42.0	-
go.opentelemetry.io/otel	CVE-2026-41178	medium	OpenTelemetry-Go's baggage parsing no longer caps raw header length	v1.41.0	-	-
go.opentelemetry.io/otel	GHSA-5wrp-cwcj-q835	MODERATE	opentelemetry-go's baggage parsing no longer caps raw header length	v1.41.0	-	-
github.com/klauspost/compress	GO-2026-5841	unknown	OOB read in github.com/klauspost/compress/s2	v1.18.6	1.18.7	-
golang.org/x/crypto	GO-2026-5932	unknown	The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues	v0.53.0	-	-
golang.org/x/mod	GO-2026-6179	unknown	Fix transparency log tile verification bypass in golang.org/x/mod/sumdb/tlog	v0.34.0	0.40.0	-
golang.org/x/mod	GO-2026-6180	unknown	Ignore unrelated, unauthenticated hashes in Lookup in golang.org/x/mod/sumdb	v0.34.0	0.40.0	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System

[datadog-datadog-prod-us1]

🔄 Datadog auto-retried 3 jobs - 0 passed on retry

_{This comment will be updated automatically if new data arrives.
🔗 Commit SHA: 31883a1 | Docs | View more details | Give us feedback!}