deps: update opentelemetry-cpp to 1.25.0

deps/opentelemetry-cpp/.bazelrc

@@ -17,9 +17,9 @@ build --copt -DGRPC_BAZEL_BUILD
 build:windows --dynamic_mode=off
 
 # Set minimum supported C++ version
-build:macos --host_cxxopt=-std=c++14 --cxxopt=-std=c++14
-build:linux --host_cxxopt=-std=c++14 --cxxopt=-std=c++14
-build:windows --host_cxxopt=/std:c++14 --cxxopt=/std:c++14
+build:macos --host_cxxopt=-std=c++17 --cxxopt=-std=c++17
+build:linux --host_cxxopt=-std=c++17 --cxxopt=-std=c++17
+build:windows --host_cxxopt=/std:c++17 --cxxopt=/std:c++17
 
 # --config=asan : Address Sanitizer.
 common:asan --copt -DADDRESS_SANITIZER

deps/opentelemetry-cpp/.bazelversion

@@ -1 +1 @@
-7.1.1
+8.5.0

deps/opentelemetry-cpp/.bcr/README.md

@@ -0,0 +1,58 @@
+# BCR Publishing Configuration
+
+This directory contains the template files required for publishing opentelemetry-cpp to the [Bazel Central Registry (BCR)](https://github.com/bazelbuild/bazel-central-registry).
+
+## Files
+
+### metadata.template.json
+Contains the module metadata including homepage, maintainers, and repository information. This is used to create/update the BCR metadata for the module.
+
+### source.template.json
+Defines the source archive location and format. Placeholders like `{OWNER}`, `{REPO}`, `{TAG}`, and `{VERSION}` are automatically replaced during publishing.
+
+### presubmit.yml
+Defines the BCR presubmit tests that run when a new version is published. Currently configured to test on:
+- Platforms: debian10, macos, ubuntu2004, windows
+- Bazel versions: 7.x, 8.x, 9.*
+
+## Publishing Process
+
+The publish-to-bcr workflow (`.github/workflows/publish-to-bcr.yml`) automates publishing to BCR.
+
+### Prerequisites
+
+**Create a Personal Access Token (PAT)**:
+   - Create a Classic PAT with `workflow` and `repo` permissions
+   - Add it as a secret named `BCR_PUBLISH_TOKEN` in repository settings
+
+### How to Publish
+
+The workflow can be triggered in two ways:
+
+1. **Automatically**: When a new GitHub release is published
+2. **Manually**: Via workflow dispatch in GitHub Actions UI
+   - Go to Actions → Publish to BCR → Run workflow
+   - Enter the tag name (e.g., `v1.24.0`)
+
+### What Happens
+
+When triggered, the workflow:
+1. Generates a BCR entry using these templates
+2. Pushes the entry to your BCR fork
+3. Opens a pull request against the upstream BCR
+
+### Using a Fork Registry
+
+For development and testing, you can use a fork of the Bazel Central Registry:
+
+1. Fork https://github.com/bazelbuild/bazel-central-registry
+2. Configure your fork URL in the workflow (modify the `publish-to-bcr.yml` file)
+3. Test changes in your fork before submitting to the official BCR
+
+The configuration in this repository points to the **official** Bazel Central Registry at https://github.com/bazelbuild/bazel-central-registry. However, using a fork registry is recommended for testing and development to avoid polluting the official registry during experimentation.
+
+## References
+
+- [Publish to BCR Action](https://github.com/bazel-contrib/publish-to-bcr)
+- [Bazel Central Registry](https://github.com/bazelbuild/bazel-central-registry)
+- [BCR Module: opentelemetry-cpp](https://github.com/bazelbuild/bazel-central-registry/tree/main/modules/opentelemetry-cpp)

deps/opentelemetry-cpp/.bcr/metadata.template.json

@@ -0,0 +1,22 @@
+{
+  "homepage": "https://github.com/open-telemetry/opentelemetry-cpp",
+  "maintainers": [
+    {
+      "name": "Keith Smiley",
+      "email": "[email protected]",
+      "github": "keith",
+      "github_user_id": 283886
+    },
+    {
+      "name": "Marc Alff",
+      "email": "[email protected]",
+      "github": "marcalff",
+      "github_user_id": 17238896
+    }
+  ],
+  "repository": [
+    "github:open-telemetry/opentelemetry-cpp"
+  ],
+  "versions": [],
+  "yanked_versions": {}
+}

deps/opentelemetry-cpp/.bcr/presubmit.yml

@@ -0,0 +1,14 @@
+# Copyright The OpenTelemetry Authors
+# SPDX-License-Identifier: Apache-2.0
+matrix:
+  platform: ["debian10", "macos", "ubuntu2004", "windows"]
+  bazel: ["7.x", "8.x", "9.x"]
+tasks:
+  verify_targets:
+    platform: ${{ platform }}
+    bazel: ${{ bazel }}
+    build_flags:
+    - '--cxxopt=-std=c++17'
+    - '--host_cxxopt=-std=c++17'
+    build_targets:
+    - '@opentelemetry-cpp//api'

deps/opentelemetry-cpp/.bcr/source.template.json

@@ -0,0 +1,5 @@
+{
+  "integrity": "",
+  "strip_prefix": "opentelemetry-cpp-{VERSION}",
+  "url": "https://github.com/{OWNER}/{REPO}/archive/refs/tags/{TAG}.tar.gz"
+}

deps/opentelemetry-cpp/.clang-tidy

@@ -35,8 +35,7 @@ Checks: >
   -cppcoreguidelines-avoid-do-while,
   -cppcoreguidelines-avoid-c-arrays,
   -cppcoreguidelines-avoid-magic-numbers,
-  -cppcoreguidelines-init-variables,
   -cppcoreguidelines-macro-usage,
   -cppcoreguidelines-non-private-member-variables-in-classes,
   -cppcoreguidelines-avoid-non-const-global-variables,
-  -cppcoreguidelines-pro-*
+  -cppcoreguidelines-pro-*

deps/opentelemetry-cpp/.clomonitor.yml

@@ -0,0 +1,6 @@
+# Copyright The OpenTelemetry Authors
+# SPDX-License-Identifier: Apache-2.0
+# see https://github.com/cncf/clomonitor/blob/main/docs/checks.md#exemptions
+exemptions:
+  - check: artifacthub_badge
+    reason: "Artifact Hub doesn't support c++ packages"

deps/opentelemetry-cpp/.devcontainer/Dockerfile.dev

@@ -15,13 +15,18 @@ COPY ci /opt/ci
 
 RUN apt update && apt install -y wget \
     ninja-build \
-    llvm-dev \
-    libclang-dev \
-    clang-tidy \
+    llvm-20-dev \
+    libclang-20-dev \
+    clang-tidy-20 \
     shellcheck \
     sudo \
     cmake
 
+RUN update-alternatives --install /usr/bin/clang-tidy clang-tidy /usr/bin/clang-tidy-20 200 && \
+    update-alternatives --install /usr/bin/llvm-config llvm-config /usr/bin/llvm-config-20 200 && \
+    update-alternatives --config clang-tidy && \
+    update-alternatives --config llvm-config
+
 RUN cd /opt/ci && bash setup_ci_environment.sh
 RUN cd /opt/ci && bash install_iwyu.sh
 

deps/opentelemetry-cpp/.gitignore

@@ -80,3 +80,7 @@ functional/cert/server_cert_b.csr
 functional/cert/server_cert_b.pem
 functional/cert/server_cert_b-key.pem
 functional/cert/unreadable.pem
+
+# CodeQL build artifacts
+_codeql_build_dir/
+_codeql_detected_source_root

deps/opentelemetry-cpp/.iwyu.imp

@@ -11,6 +11,18 @@
   { "include": ["<bits/types/struct_tm.h>", "private", "<time.h>", "public"] },
   { "include": ["<bits/types/struct_FILE.h>", "private", "<stdio.h>", "public"] },
 
+  # Work around for ryml
+  { "include": ["<c4/std/string.hpp>", "private", "<ryml_std.hpp>", "public"] },
+
+  { "include": ["<c4/yml/common.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/yml/node.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/yml/parse.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/yml/parse_engine.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/yml/tree.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/yml/event_handler_tree.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/substr.hpp>", "private", "<ryml.hpp>", "public"] },
+  { "include": ["<c4/substr_fwd.hpp>", "private", "<ryml.hpp>", "public"] },
+
   # Local opentelemetry-cpp style
 
   # We prefer to include <gtest/gtest.h> for simplicity

deps/opentelemetry-cpp/.markdownlint.json

@@ -4,5 +4,9 @@
     {
         "code_blocks": false,
         "tables": false
+    },
+    "MD059":
+    {
+        "prohibited_texts": []
     }
 }

deps/opentelemetry-cpp/MODULE.bazel

@@ -3,7 +3,7 @@
 
 module(
     name = "opentelemetry-cpp",
-    version = "1.23.0",
+    version = "1.25.0",
     compatibility_level = 0,
     repo_name = "io_opentelemetry_cpp",
 )
@@ -13,11 +13,14 @@ bazel_dep(name = "bazel_skylib", version = "1.7.1")
 bazel_dep(name = "curl", version = "8.8.0")
 bazel_dep(name = "grpc", version = "1.66.0.bcr.2", repo_name = "com_github_grpc_grpc")
 bazel_dep(name = "nlohmann_json", version = "3.12.0", repo_name = "github_nlohmann_json")
-bazel_dep(name = "opentelemetry-proto", version = "1.7.0", repo_name = "com_github_opentelemetry_proto")
+bazel_dep(name = "opentelemetry-proto", version = "1.8.0", repo_name = "com_github_opentelemetry_proto")
 bazel_dep(name = "opentracing-cpp", version = "1.6.0", repo_name = "com_github_opentracing")
 bazel_dep(name = "platforms", version = "0.0.11")
 bazel_dep(name = "prometheus-cpp", version = "1.3.0", repo_name = "com_github_jupp0r_prometheus_cpp")
 bazel_dep(name = "protobuf", version = "29.0", repo_name = "com_google_protobuf")
+bazel_dep(name = "rapidyaml", version = "0.9.0")
+bazel_dep(name = "rules_cc", version = "0.2.9")
+bazel_dep(name = "rules_foreign_cc", version = "0.15.1")
 bazel_dep(name = "rules_proto", version = "7.0.2")
 bazel_dep(name = "zlib", version = "1.3.1.bcr.5")
 

deps/opentelemetry-cpp/api/BUILD

@@ -2,6 +2,7 @@
 # SPDX-License-Identifier: Apache-2.0
 
 load("@bazel_skylib//rules:common_settings.bzl", "bool_flag", "int_flag", "string_flag")
+load("@rules_cc//cc:cc_library.bzl", "cc_library")
 
 package(default_visibility = ["//visibility:public"])
 

deps/opentelemetry-cpp/api/include/opentelemetry/baggage/baggage.h

@@ -274,8 +274,13 @@ class OPENTELEMETRY_EXPORT Baggage
       {
         ret.push_back(' ');
       }
-      else if (std::isalnum(str[i]) || str[i] == '-' || str[i] == '_' || str[i] == '.' ||
-               str[i] == '~')
+      // See https://www.w3.org/TR/baggage/#definition
+      else if ((str[i] >= '!')      /* 21 */
+               && (str[i] <= '~')   /* 7E */
+               && (str[i] != '"')   /* 22 */
+               && (str[i] != ',')   /* 2C */
+               && (str[i] != ';')   /* 3B */
+               && (str[i] != '\\')) /* 5C */
       {
         ret.push_back(str[i]);
       }

deps/opentelemetry-cpp/api/include/opentelemetry/context/runtime_context.h

@@ -26,11 +26,11 @@ class Token
 public:
   bool operator==(const Context &other) const noexcept { return context_ == other; }
 
-  ~Token() noexcept;
+  virtual ~Token() noexcept;
 
-private:
   friend class RuntimeContextStorage;
 
+protected:
   // A constructor that sets the token's Context object to the
   // one that was passed in.
   Token(const Context &context) : context_(context) {}
@@ -241,6 +241,26 @@ class ThreadLocalContextStorage : public RuntimeContextStorage
   {
     friend class ThreadLocalContextStorage;
 
+    /**
+     * Limit the max stack depth.
+     * The stack will still work beyond this limit,
+     * counting push() and pop() properly,
+     * but will not record contexts.
+     *
+     * In practice, this should not affect instrumented applications,
+     * the limit is set to 1 million nested scopes.
+     *
+     * The whole reason for this limit to exist is to prevent
+     * compiler warnings like:
+     *   error: argument 1 value ‘18446744073709551615’
+     *   exceeds maximum object size 9223372036854775807
+     *   [-Werror=alloc-size-larger-than=]
+     * on this line of code:
+     *   Context *temp = new Context[new_capacity];
+     * when compiling with gcc and optimizations (-flto).
+     */
+    static constexpr size_t max_capacity_ = 1000000;
+
     Stack() noexcept : size_(0), capacity_(0), base_(nullptr) {}
 
     // Pops the top Context off the stack.
@@ -250,6 +270,11 @@ class ThreadLocalContextStorage : public RuntimeContextStorage
       {
         return;
       }
+      if (size_ > max_capacity_)
+      {
+        size_ -= 1;
+        return;
+      }
       // Store empty Context before decrementing `size`, to ensure
       // the shared_ptr object (if stored in prev context object ) are released.
       // The stack is not resized, and the unused memory would be reutilised
@@ -278,6 +303,10 @@ class ThreadLocalContextStorage : public RuntimeContextStorage
       {
         return Context();
       }
+      if (size_ > max_capacity_)
+      {
+        return Context();
+      }
       return base_[size_ - 1];
     }
 
@@ -286,6 +315,10 @@ class ThreadLocalContextStorage : public RuntimeContextStorage
     void Push(const Context &context) noexcept
     {
       size_++;
+      if (size_ > max_capacity_)
+      {
+        return;
+      }
       if (size_ > capacity_)
       {
         Resize(size_ * 2);
@@ -299,8 +332,14 @@ class ThreadLocalContextStorage : public RuntimeContextStorage
       size_t old_size = size_ - 1;
       if (new_capacity == 0)
       {
+        // First increase
         new_capacity = 2;
       }
+      if (new_capacity > max_capacity_)
+      {
+        // Last increase
+        new_capacity = max_capacity_;
+      }
       Context *temp = new Context[new_capacity];
       if (base_ != nullptr)
       {

deps/opentelemetry-cpp/api/include/opentelemetry/logs/event_logger.h

@@ -15,6 +15,17 @@ OPENTELEMETRY_BEGIN_NAMESPACE
 namespace logs
 {
 #if OPENTELEMETRY_ABI_VERSION_NO < 2
+#  if defined(_MSC_VER)
+#    pragma warning(push)
+#    pragma warning(disable : 4996)
+#  elif defined(__GNUC__) && !defined(__clang__) && !defined(__apple_build_version__)
+#    pragma GCC diagnostic push
+#    pragma GCC diagnostic ignored "-Wdeprecated-declarations"
+#  elif defined(__clang__) || defined(__apple_build_version__)
+#    pragma clang diagnostic push
+#    pragma clang diagnostic ignored "-Wdeprecated-declarations"
+#  endif
+
 /**
  * Handles event log record creation.
  **/
@@ -77,6 +88,14 @@ class OPENTELEMETRY_DEPRECATED EventLogger
   void IgnoreTraitResult(ValueType &&...)
   {}
 };
+
+#  if defined(_MSC_VER)
+#    pragma warning(pop)
+#  elif defined(__GNUC__) && !defined(__clang__) && !defined(__apple_build_version__)
+#    pragma GCC diagnostic pop
+#  elif defined(__clang__) || defined(__apple_build_version__)
+#    pragma clang diagnostic pop
+#  endif
 #endif
 }  // namespace logs
 OPENTELEMETRY_END_NAMESPACE