Skip to content

Update otel/weaver Docker tag to v0.24.2#28

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-2.0from
konflux/mintmaker/release-2.0/otel-weaver-0.x
Open

Update otel/weaver Docker tag to v0.24.2#28
red-hat-konflux[bot] wants to merge 1 commit into
release-2.0from
konflux/mintmaker/release-2.0/otel-weaver-0.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jun 26, 2026

Copy link
Copy Markdown

This PR contains the following updates:

Package Type Update Change
otel/weaver stage minor v0.22.1v0.24.2

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

open-telemetry/weaver (otel/weaver)

v0.24.2: 0.24.2 - 2026-06-23

Compare Source

Release Notes

  • Fix boolean flags (--v2, --skip-policies, etc.) consuming the following positional argument; bare flags work again and --flag=false overrides .weaver.toml. (#​1532 by @​jerbly)

Install weaver 0.24.2

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.2/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.2/weaver-installer.ps1 | iex"

Download weaver 0.24.2

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
weaver-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
weaver-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.24.1: 0.24.1 - 2026-06-21

Compare Source

Release Notes

Install weaver 0.24.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.1/weaver-installer.ps1 | iex"

Download weaver 0.24.1

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
weaver-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
weaver-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.24.0: 0.24.0 - 2026-06-19

Compare Source

Release Notes

  • Add requirement_level (recommended/opt_in) for all v2 signals (metrics, spans, events, entities). (#​1515 by @​lmolkova)

  • Add dependency_resolution.exclude annotation to hide attributes, groups, and signals from registries that depend on this one. (#​1458 by @​lmolkova)

  • Add one_of and all_of combinators to entity_associations, letting a signal (span, metric, or event) require any-of or all-of a set of entities, nested arbitrarily. A bare list of entity references remains supported and is treated as an implicit one_of. See semconv-syntax.v2.md. (#​1493 by @​jerbly)

  • Add weaver-live-check-start and weaver-live-check-stop composite GitHub Actions for CI integration. (#​1448)

  • Rename resolved_schema_uri to resolved_registry_uri in publication manifest and in package command. (#​1425)

  • Fix V2 resolver overwriting SpanName.note with the span type id during resolution. (#​1401)

  • Add semconv_grouped_events JQ helper with v1/v2 options parity and coverage. (#​1439)

  • New feature (#​1344) - Support authenticated HTTP downloads of remote registries, including GitHub private release assets. Auth is configured per-URL via [[auth]] entries in .weaver.toml (longest url_prefix wins), with tokens sourced from a literal token, a token_env variable, or a token_command helper (e.g. ["gh", "auth", "token"]). (#​1356 by @​jerbly)

  • New feature - .weaver.toml project configuration now covers all subcommands allowing for simplified configuration management. See the README.md (#​1410 by @​jerbly)

  • Fix (#​1297) - Live-check: entity validation now supported. (#​1426 by @​jerbly)

  • Live-check OTLP log findings are now dog-fooded: the event schema, attributes, and enumerations are defined in a semconv model and code-generated using Weaver's own templates. See finding.md for the generated reference documentation and dog-fooding.md for the full dog-fooding guide.

    💥 BREAKING CHANGES 💥 to the log schema:

    • attribute_nameattribute_key (in weaver.finding.context)
    • weaver.finding.sample_typeweaver.finding.sample.type
    • weaver.finding.signal_typeweaver.finding.signal.type
    • weaver.finding.signal_nameweaver.finding.signal.name
    • weaver.finding.resource_attribute.<key>weaver.finding.resource.attribute.<key>

    (#​1232 by @​jerbly)

Install weaver 0.24.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.24.0/weaver-installer.ps1 | iex"

Download weaver 0.24.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
weaver-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
weaver-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.23.0: 0.23.0 - 2026-04-22

Compare Source

Release Notes

  • New feature (#​1247, #​1248) - .weaver.toml project configuration file for live-check. Covers all live-check CLI flags plus [[live_check.finding_filters]] for dropping findings by ID, minimum level, sample name, and signal type. CLI flags take precedence over config values. Use --config or auto-discovery from CWD. (#​1256 by @​jerbly)
  • Fix attribute catalog sorting for attributes with the same key when converting from v1 to v2 catalog. (#​1359 by @​michaelvanstraten)
  • Fix (#​1323) - Live-check: treat observed int as compatible with expected double attribute type, avoiding false violations from OTLP serializers (e.g. JS) that emit int_value for integral numbers. (#​1331 by @​jerbly)
  • Fix CLI so it doesn't error out early when loading a resolved schema. (#​1304 by @​jsuereth)
  • 💥 BREAKING CHANGE 💥 Use schema_url to track registries consistently in lineage / provenance (#​1298 by @​jsuereth)
  • Publish and document missing JSON schemas. Add head_schema_url/baseline_schema_url to diff v2. (#​1106 by @​lmolkova)
  • Add --allow-git-credentials global flag to enable system credential helpers (e.g. osxkeychain, git-credential-manager) when cloning private registries. By default, git operations remain isolated for security. (#​1306 by @​jerbly)
  • MCP: Add browse_namespace tool and findings_only output mode for live_check. Add configurable namespace separator via --namespace-separator. (#​1324 by @​jerbly)
  • chore(deps): update all patch versions. (#​1379 by @​renovate[bot])
  • Remove vendored openssl dependency. (#​1380 by @​sapatrjv)

Install weaver 0.23.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex"

Download weaver 0.23.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-aarch64-unknown-linux-gnu.tar.xz ARM64 Linux checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum
weaver-aarch64-unknown-linux-musl.tar.xz ARM64 MUSL Linux checksum
weaver-x86_64-unknown-linux-musl.tar.xz x64 MUSL Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@openshift-ci openshift-ci Bot requested review from jotak and stleerh June 26, 2026 17:25
@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign oliviercazade for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants