build(deps): bump opentelemetry-exporter-otlp from 1.31.1 to 1.37.0

[dependabot]

Bumps opentelemetry-exporter-otlp from 1.31.1 to 1.37.0.

Changelog

Sourced from opentelemetry-exporter-otlp's changelog.

Version 1.37.0/0.58b0 (2025-09-11)

• Add experimental composite samplers (#4714)
• Add new environment variables to the SDK OTEL_PYTHON_EXPORTER_OTLP_{HTTP/GRPC}_{METRICS/TRACES/LOGS}_CREDENTIAL_PROVIDER that can be used to inject a requests.Session or grpc.ChannelCredentials object into OTLP exporters created during auto instrumentation #4689.
• Filter duplicate logs out of some internal logger's logs on the export logs path that might otherwise endlessly log or cause a recursion depth exceeded issue in cases where logging itself results in an exception. (#4695).
• docs: linked the examples with their github source code location and added Prometheus example (#4728)
• Permit to override default HTTP OTLP exporters headers (#4634)
• semantic-conventions: Bump to 1.37.0 (#4731)
• opentelemetry-sdk: fix handling of OTEL_ATTRIBUTE_COUNT_LIMIT in logs (#4677)
• Performance: Cache importlib_metadata.entry_points (#4735)
• opentelemetry-sdk: fix calling Logger.emit with an API LogRecord instance (#4741)

Version 1.36.0/0.57b0 (2025-07-29)

• Add missing Prometheus exporter documentation (#4485)

• Overwrite logging.config.fileConfig and logging.config.dictConfig to ensure the OTLP LogHandler remains attached to the root logger. Fix a bug that can cause a deadlock to occur over logging._lock in some cases (#4636).

• otlp-http-exporter: set default value for param timeout_sec in _export method (#4691)

• Update OTLP gRPC/HTTP exporters: calling shutdown will now interrupt exporters that are sleeping before a retry attempt, and cause them to return failure immediately. Update BatchSpan/LogRecordProcessors: shutdown will now complete after 30 seconds of trying to finish exporting any buffered telemetry, instead of continuing to export until all telemetry was exported. (#4638).

Version 1.35.0/0.56b0 (2025-07-11)

• Update OTLP proto to v1.7 #4645.
• Add event_name as a top level field in the LogRecord. Events are now simply logs with the event_name field set, the logs SDK should be used to emit events (#4652).
• Update OTLP gRPC/HTTP exporters: the export timeout is now inclusive of all retries and backoffs. A +/-20% jitter was added to all backoffs. A pointless 32 second sleep that occurred after all retries had completed/failed was removed. (#4564).
• Update ConsoleLogExporter.export to handle LogRecord's containing bytes type in the body (#4614).
• opentelemetry-sdk: Fix invalid type: ignore that causes mypy to ignore the whole file (#4618)

... (truncated)

Commits

• bc413fc [release/v1.37.x-0.58bx] Prepare release 1.37.0/0.58b0 (#4745)
• 712ed5d OTEL attribute count limit not respected, causing columns dropped (#4677)
• dd93fa7 infra: ignore pushes on otelbot branches (#4742)
• 22d1fd1 Fix API LogRecord serialization (#4741)
• d6c0441 Add credentials environment variables to let ChannelCredentials and `Sessio...
• c71c4a4 Cache importlib_metadata.entry_points (#4735)
• 64de448 Permit to override default OTLP HTTP exporter headers (#4634)
• 0d9e1b4 semantic-conventions: bump to 1.37.0 (#4731)
• 31289bd fix: make client.py runnable without CLI arguments (#4694)
• 8bca97d Add experimental composite sampler (#4714)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.