Add bundle version of utf8_range to validate attributes

[owent]

Fixes #3491

Changes

• Add bundle version of utf8_range to validate attribute values

For significant contributions please make sure you have completed the following items:

• CHANGELOG.md updated for non-trivial changes
• Unit tests have been added
• Changes in public API reviewed

[netlify]

✅ Deploy Preview for opentelemetry-cpp-api-docs canceled.

Name	Link
🔨 Latest commit	2ab31e8
🔍 Latest deploy log	https://app.netlify.com/projects/opentelemetry-cpp-api-docs/deploys/68a8d5196a46540008c6326f

[Copilot]

Pull Request Overview

This PR introduces a bundled UTF-8 validation library (utf8_range) and integrates it into attribute validation throughout the SDK, ensuring that span, resource, and instrumentation-scope attributes containing invalid UTF-8 are filtered out with warnings.

• Add attribute_validity module wrapping the new utf8_range library
• Integrate attribute validation/filtering into Span, Resource, and InstrumentationScope
• Add build rules for utf8_range and update CMake/Bazel files accordingly

Reviewed Changes

Copilot reviewed 16 out of 16 changed files in this pull request and generated 1 comment.

Show a summary per file

File	Description
sdk/src/common/internal/utf8_range/uft8_range.cc	Added bundled UTF-8 validation implementation
sdk/src/common/internal/utf8_range/utf8_range.h	Declared public API for UTF-8 validation (IsValid, ValidPrefix)
sdk/src/common/attribute_validity.cc	Wrapped validation logic around SDK attribute values
sdk/src/common/BUILD	Added utf8_range and attribute_validity libraries
sdk/src/common/CMakeLists.txt	Updated to include new source in common build
sdk/src/trace/span.cc	Applied attribute validation in Span::SetAttribute and AddLink
sdk/src/resource/resource.cc	Applied attribute validation in Resource constructor
sdk/include/opentelemetry/sdk/instrumentationscope/instrumentation_scope.h	Applied attribute validation in instrumentation scope factories and setters
sdk/test/instrumentationscope/CMakeLists.txt	Updated linkage to include opentelemetry_common
sdk/test/instrumentationscope/BUILD	Added dependency on attribute_validity for tests

Comments suppressed due to low confidence (2)

sdk/src/common/internal/utf8_range/uft8_range.cc:1

• The source file is named uft8_range.cc, which looks like a typo. Renaming it to utf8_range.cc would align with the header (utf8_range.h) and improve consistency.

// Copyright 2023 Google LLC

sdk/src/common/BUILD:6

• The new utf8_range library adds core validation logic but there are no accompanying unit tests verifying valid and invalid UTF-8 sequences. Consider adding tests under sdk/test/common/ to cover edge cases.

cc_library(

[codecov]

Codecov Report

❌ Patch coverage is 58.62069% with 96 lines in your changes missing coverage. Please review.
✅ Project coverage is 88.97%. Comparing base (9de3493) to head (893fc56).

Files with missing lines	Patch %	Lines
sdk/src/common/attribute_validity.cc	56.10%	36 Missing ⚠️
sdk/src/common/internal/utf8_range/uft8_range.cc	50.00%	33 Missing ⚠️
...lude/opentelemetry/sdk/common/attribute_validity.h	63.64%	12 Missing ⚠️
...y/sdk/instrumentationscope/instrumentation_scope.h	61.12%	7 Missing ⚠️
sdk/src/trace/span.cc	64.71%	6 Missing ⚠️
...ntelemetry/sdk/metrics/view/attributes_processor.h	66.67%	1 Missing ⚠️
sdk/src/resource/resource.cc	92.31%	1 Missing ⚠️

Additional details and impacted files

@@            Coverage Diff             @@
##             main    #3512      +/-   ##
==========================================
- Coverage   89.93%   88.97%   -0.96%     
==========================================
  Files         225      228       +3     
  Lines        7158     7376     +218     
==========================================
+ Hits         6437     6562     +125     
- Misses        721      814      +93     

Files with missing lines	Coverage Δ
...ntelemetry/sdk/metrics/view/attributes_processor.h	84.62% <66.67%> (ø)
sdk/src/resource/resource.cc	95.13% <92.31%> (-1.65%)	⬇️
sdk/src/trace/span.cc	85.72% <64.71%> (-4.05%)	⬇️
...y/sdk/instrumentationscope/instrumentation_scope.h	87.28% <61.12%> (-12.72%)	⬇️
...lude/opentelemetry/sdk/common/attribute_validity.h	63.64% <63.64%> (ø)
sdk/src/common/internal/utf8_range/uft8_range.cc	50.00% <50.00%> (ø)
sdk/src/common/attribute_validity.cc	56.10% <56.10%> (ø)

... and 1 file with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[owent]

The clang-tidy check failure does not appear to be caused by this PR.