[dependabot]

Bumps opentelemetry-api from 1.45.1 to 1.45.2.

Release notes

Sourced from opentelemetry-api's releases.

Version 1.45.2/0.66b2

This is a patch release on the previous 1.45.1/0.66b1 release, fixing the issue(s) below.

Added

• opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

• opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Changelog

Sourced from opentelemetry-api's changelog.

Version 1.45.2/0.66b2 (2026-10-29)

Added

• opentelemetry-sdk, opentelemetry-configuration, opentelemetry-exporter-prometheus: enforce metric cardinality limits (default 2000) with the otel.metric.overflow attribute, configurable through View(aggregation_cardinality_limit=...), reader cardinality_limits and declarative configuration (#5809)

Fixed

• opentelemetry-api: limit traceparent header length to 512 characters in TraceContextTextMapPropagator during extraction (#5818)

Commits

• ad75594 [release/v1.45.x-0.66bx] Prepare release 1.45.2/0.66b2 (#5862)
• 78123a2 [release/v1.45.x-0.66bx] Backport metric cardinality limits and traceparent p...
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[github-actions]

OC Claude review: fail

Result for run 43563369096, attempt 1.
Computed for head SHA b54e47098fd05b9a19b433dbb87b6d5be08cdcc9, merge base df8ff51304f79d226ac8c2d1e13e0b71fe84262c, base ref main.
The result that counts is the required workflow in the merge box.

Reasons

• pass-records (not waivable): pass review failed: authentication failed
• pass-records (not waivable): pass security failed: authentication failed
• pass-records (not waivable): pass supply-chain failed: authentication failed

Prefilter (code, no LLM)

Hard blocks: 0.
Signals: 1.

• first-time-contributor: author_association NONE (context only)
  Coverage: complete (files in comparison 1, files collected 1, trees complete).

Dependency delta

• pypi opentelemetry-api: 1.45.1 to 1.45.2, source registry pypi.org, in review/uv.lock, published 2026-10-29T17:29:06.955093+00:00

Findings per pass

Model output from untrusted input. Check it before you act on it. Verified means only that the quoted text is at that place. It does not mean the claim is true.

review: failed, authentication failed

No verified findings.

security: failed, authentication failed

No verified findings.

supply-chain: failed, authentication failed

No verified findings.

Token usage

• review: no usage recorded
• security: no usage recorded
• supply-chain: no usage recorded
• total: no usage recorded

Workflow run. The result that counts is the required workflow in the merge box.