deps(deps): bump the minor-and-patch group across 1 directory with 4 updates

[dependabot]

Bumps the minor-and-patch group with 4 updates in the / directory: github.com/coder/websocket, golang.org/x/oauth2, go.opentelemetry.io/otel and golang.org/x/time.

Updates github.com/coder/websocket from 1.8.13 to 1.8.14

Release notes

Sourced from github.com/coder/websocket's releases.

v1.8.14

Changes

• fix: match Origin scheme if defined in OriginPatterns by @​mafredri in coder/websocket#536
• refactor: use context.AfterFunc to track timeouts instead of goroutine by @​ash2k in coder/websocket#532
• refactor: add ErrMessageTooBig sentinel error for limited reads by @​DanielleMaywood in coder/websocket#535
• build: update to Go 1.23 by @​mafredri in coder/websocket#524
• build: add Makefile by @​mafredri in coder/websocket#525
• chore: update LICENSE file by @​mtojek in coder/websocket#526
• chore: apply various modernisations by @​Jacalz in coder/websocket#531

New Contributors

• @​mtojek made their first contribution in coder/websocket#526
• @​ash2k made their first contribution in coder/websocket#532
• @​DanielleMaywood made their first contribution in coder/websocket#535

Full Changelog: coder/websocket@v1.8.13...v1.8.14

Commits

• 7d7c644 refactor: add ErrMessageTooBig sentinel error for limited reads (#535)
• c7846ea refactor: use context.AfterFunc to track timeouts instead of goroutine (#532)
• e11dd4e fix: match Origin scheme if defined in OriginPatterns (#536)
• 91013c1 chore: apply various modernisations (#531)
• efb626b chore: update LICENSE file (#526)
• 246891f build: add Makefile (#525)
• 778d161 build: update to Go 1.23 (#524)
• See full diff in compare view

Updates golang.org/x/oauth2 from 0.30.0 to 0.31.0

Commits

• 014cf77 all: upgrade go directive to at least 1.24.0 [generated]
• 3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
• See full diff in compare view

Updates go.opentelemetry.io/otel from 1.37.0 to 1.38.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.38.0/0.60.0/0.14.0/0.0.13] 2025-08-29

This release is the last to support [Go 1.23]. The next release will require at least [Go 1.24].

Added

• Add native histogram exemplar support in go.opentelemetry.io/otel/exporters/prometheus. (#6772)
• Add template attribute functions to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6939)
  • ContainerLabel
  • DBOperationParameter
  • DBSystemParameter
  • HTTPRequestHeader
  • HTTPResponseHeader
  • K8SCronJobAnnotation
  • K8SCronJobLabel
  • K8SDaemonSetAnnotation
  • K8SDaemonSetLabel
  • K8SDeploymentAnnotation
  • K8SDeploymentLabel
  • K8SJobAnnotation
  • K8SJobLabel
  • K8SNamespaceAnnotation
  • K8SNamespaceLabel
  • K8SNodeAnnotation
  • K8SNodeLabel
  • K8SPodAnnotation
  • K8SPodLabel
  • K8SReplicaSetAnnotation
  • K8SReplicaSetLabel
  • K8SStatefulSetAnnotation
  • K8SStatefulSetLabel
  • ProcessEnvironmentVariable
  • RPCConnectRPCRequestMetadata
  • RPCConnectRPCResponseMetadata
  • RPCGRPCRequestMetadata
  • RPCGRPCResponseMetadata
• Add ErrorType attribute helper function to the go.opentelmetry.io/otel/semconv/v1.34.0 package. (#6962)
• Add WithAllowKeyDuplication in go.opentelemetry.io/otel/sdk/log which can be used to disable deduplication for log records. (#6968)
• Add WithCardinalityLimit option to configure the cardinality limit in go.opentelemetry.io/otel/sdk/metric. (#6996, #7065, #7081, #7164, #7165, #7179)
• Add Clone method to Record in go.opentelemetry.io/otel/log that returns a copy of the record with no shared state. (#7001)
• Add experimental self-observability span and batch span processor metrics in go.opentelemetry.io/otel/sdk/trace. Check the go.opentelemetry.io/otel/sdk/trace/internal/x package documentation for more information. (#7027, #6393, #7209)
• The go.opentelemetry.io/otel/semconv/v1.36.0 package. The package contains semantic conventions from the v1.36.0 version of the OpenTelemetry Semantic Conventions. See the migration documentation for information on how to upgrade from go.opentelemetry.io/otel/semconv/v1.34.0.(#7032, #7041)
• Add support for configuring Prometheus name translation using WithTranslationStrategy option in go.opentelemetry.io/otel/exporters/prometheus. The current default translation strategy when UTF-8 mode is enabled is NoUTF8EscapingWithSuffixes, but a future release will change the default strategy to UnderscoreEscapingWithSuffixes for compliance with the specification. (#7111)
• Add experimental self-observability log metrics in go.opentelemetry.io/otel/sdk/log. Check the go.opentelemetry.io/otel/sdk/log/internal/x package documentation for more information. (#7121)
• Add experimental self-observability trace exporter metrics in go.opentelemetry.io/otel/exporters/stdout/stdouttrace.

... (truncated)

Commits

• 84e3f3a Release v1.38.0 (#7271)
• 18424a4 Add tests for attribute JSON marshalling (#7268)
• 9798759 Statically define trace observability attributes (#7263)
• be1e57f Refactor BSP observability setup (#7264)
• d99c68c chore(deps): update module github.com/mgechev/revive to v1.12.0 (#7269)
• 0724539 Add benchmark for set equality (#7262)
• 5358fd7 Upgrade semconv dependencies to v1.37.0 (#7260)
• 25d0274 fix(deps): update module github.com/stretchr/testify to v1.11.1 (#7261)
• d0cab86 prometheus: Add support for setting Translation Strategy config option (#7111)
• 3342341 Generate the semconv/v1.37.0 packages (#7254)
• Additional commits viewable in compare view

Updates golang.org/x/time from 0.12.0 to 0.13.0

Commits

• c0b0320 all: upgrade go directive to at least 1.24.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot rebase.

[dependabot]

Dependabot tried to update this pull request, but something went wrong. We're looking into it, but in the meantime you can retry the update by commenting @dependabot recreate.