chore(deps): bump io.opentelemetry:opentelemetry-bom from 1.59.0 to 1.60.1

[dependabot]

Bumps io.opentelemetry:opentelemetry-bom from 1.59.0 to 1.60.1.

Release notes

Sourced from io.opentelemetry:opentelemetry-bom's releases.

Version 1.60.1

This is a patch release on the previous 1.60.0 release, fixing the issue(s) below.

SDK

Extensions

• Autoconfigure: fix warning always emitted (#8157)

Version 1.60.0

API

• Support W3C trace context random flag (#8012)
• Clarify that SpanBuilder.setAttribute allows null values (#8072)

Incubating

• Implement environment variable context propagation carriers (#8074)
• Deprecate ExtendedAttributes, ExtendedAttributeKey, ExtendedAttributeType, ExtendedAttributesBuilder (#8060)
• Deprecate peerServiceMapping accessor from InstrumentationConfigUtil (#8088)

SDK

Traces

• Disable warning when using TraceIdRatioBasedSampler as root sampler (#8065)
• User-supplied attributes take precedence over exception-derived attributes (#7993)
• Exclude META-INF/maven from traces SDK shaded dependencies (#8096)
• Fix inverted condition in LegacySpanProcessorInstrumentation#finishSpans (#8145)

Metrics

• Split out cumulative vs. delta storage (#8015)
• Add metrics for PeriodicMetricReader (#8038)
• Allow configuring min/max in histograms (#8095)
• Remove deprecated otel.experimental.metrics.cardinality.limit property (#8124)
• BREAKING bug fix: GlobUtil and IncludePatternMatching, used in views and declarative config matching, previously were inconsistent in case sensitivity. If a glob char (* or ?) was present, it was evaluated with case sensitivity. If no glob chars were present, it was evaluated with case insensitivity. Now, all are consistently evaluated with case sensitivity. (#8152)

Logs

• Stabilize LogRecordBuilder.setException (#8089)
• Clarify setTimestamp javadoc for event timestamp behavior (#8104)

Exporters

• OTLP: Fix marshaling for empty string attributes (#8014)
• Prometheus: Update Prometheus client to 1.5.0 (#8080)
• OTLP: Serialize exponential histogram sum as optional double (#8107)
• OTLP: Use KeyManagerFactory.getDefaultAlgorithm() in TlsUtil.keyManager() (#8122)
• OTLP: Ensure proto serializer idCache is cleared when exception is thrown (#8147)

... (truncated)

Changelog

Sourced from io.opentelemetry:opentelemetry-bom's changelog.

Version 1.60.1 (2026-03-07)

SDK

Extensions

• Autoconfigure: fix warning always emitted (#8157)

Version 1.60.0 (2026-03-06)

API

• Support W3C trace context random flag (#8012)
• Clarify that SpanBuilder.setAttribute allows null values (#8072)

Incubating

• Implement environment variable context propagation carriers (#8074)
• Deprecate ExtendedAttributes, ExtendedAttributeKey, ExtendedAttributeType, ExtendedAttributesBuilder (#8060)
• Deprecate peerServiceMapping accessor from InstrumentationConfigUtil (#8088)

SDK

Traces

• Disable warning when using TraceIdRatioBasedSampler as root sampler (#8065)
• User-supplied attributes take precedence over exception-derived attributes (#7993)
• Exclude META-INF/maven from traces SDK shaded dependencies (#8096)
• Fix inverted condition in LegacySpanProcessorInstrumentation#finishSpans (#8145)

Metrics

• Split out cumulative vs. delta storage (#8015)
• Add metrics for PeriodicMetricReader (#8038)
• Allow configuring min/max in histograms (#8095)
• Remove deprecated otel.experimental.metrics.cardinality.limit property

... (truncated)

Commits

• b1273b5 [release/v1.60.x] Prepare release 1.60.1 (#8161)
• 76e74af Prepare changelog for 1.60.1 (#8160)
• e4235e2 [release/v1.60.x] Fix warning always emitted (#8158)
• 58a5590 [release/v1.60.x] Change GlobUtil, IncludeExcludePredicate to use case sensit...
• 299d893 Add changelog entry for #8152 to 1.60.x release branch (#8154)
• 5d329ae [release/v1.60.x] Prepare release 1.60.0 (#8151)
• 99857c6 Prepare for 1.60.0 release (#8146)
• 50f5607 Fix proto serializer (#8147)
• e8920e7 Fix inverted condition in LegacySpanProcessorInstrumentation#finishSpans (#8145)
• f08b49c fix(deps): update dependency com.squareup.wire:wire-bom to v5.5.1 (#8144)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[cla-assistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

📢 Thoughts on this report? Let us know!