fix(deps): vuln minor: go.opentelemetry.io/otel, golang.org/x/crypto · patch: github.com/klauspost/compress [examples/single_service]

[gh-worker-campaigns-3e9aa4]

Summary: Security update — 3 packages upgraded (MINOR changes included)

Manifests changed:

• examples/single_service (go)

---

✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.

---

Updates

Package	From	To	Type	Dep Type	Vulnerabilities Fixed
go.opentelemetry.io/otel	v1.41.0	v1.44.0	minor	Transitive	3 MEDIUM
golang.org/x/crypto	v0.53.0	v0.54.0	minor	Transitive	1 UNKNOWN
github.com/klauspost/compress	v1.18.6	v1.18.7	patch	Transitive	1 UNKNOWN

---

Security Details

ℹ️ Other Vulnerabilities (5)

Package	CVE	Severity	Summary	Unsafe Version	Fixed In	Case
go.opentelemetry.io/otel	GO-2026-5158	medium	Opentelemetry-go's baggage parsing no longer caps raw header length in go.opentelemetry.io/otel	v1.41.0	1.42.0	-
go.opentelemetry.io/otel	CVE-2026-41178	medium	OpenTelemetry-Go's baggage parsing no longer caps raw header length	v1.41.0	-	-
go.opentelemetry.io/otel	GHSA-5wrp-cwcj-q835	MODERATE	opentelemetry-go's baggage parsing no longer caps raw header length	v1.41.0	-	-
github.com/klauspost/compress	GO-2026-5841	unknown	OOB read in github.com/klauspost/compress/s2	v1.18.6	1.18.7	-
golang.org/x/crypto	GO-2026-5932	unknown	The golang.org/x/crypto/openpgp package is unmaintained, unsafe by design, and has known security issues	v0.53.0	-	-

---

Review Checklist

Standard review:

• Review changes for compatibility with your code
• Check for breaking changes in release notes
• Run tests locally or wait for CI
• Approve and merge this PR

---

Update Mode: all_vulns

🤖 Generated by DataDog Automated Dependency Management System