1
0
mirror of https://github.com/open-telemetry/opentelemetry-go.git synced 2026-05-22 09:35:21 +02:00

chore(deps): update otel/weaver docker tag to v0.23.0 (#8255)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [otel/weaver](https://redirect.github.com/open-telemetry/weaver) |
stage | minor | `v0.22.1` → `v0.23.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/weaver (otel/weaver)</summary>

###
[`v0.23.0`](https://redirect.github.com/open-telemetry/weaver/releases/tag/v0.23.0):
0.23.0 - 2026-04-22

[Compare
Source](https://redirect.github.com/open-telemetry/weaver/compare/v0.22.1...v0.23.0)

#### Release Notes

- New feature
([#&#8203;1247](https://redirect.github.com/open-telemetry/weaver/issues/1247),
[#&#8203;1248](https://redirect.github.com/open-telemetry/weaver/issues/1248))
- `.weaver.toml` project configuration file for `live-check`. Covers all
`live-check` CLI flags plus `[[live_check.finding_filters]]` for
dropping findings by ID, minimum level, sample name, and signal type.
CLI flags take precedence over config values. Use `--config` or
auto-discovery from CWD.
([#&#8203;1256](https://redirect.github.com/open-telemetry/weaver/pull/1256)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- Fix attribute catalog sorting for attributes with the same key when
converting from v1 to v2 catalog.
([#&#8203;1359](https://redirect.github.com/open-telemetry/weaver/pull/1359)
by
[@&#8203;michaelvanstraten](https://redirect.github.com/michaelvanstraten))
- Fix
([#&#8203;1323](https://redirect.github.com/open-telemetry/weaver/issues/1323))
- Live-check: treat observed `int` as compatible with expected `double`
attribute type, avoiding false violations from OTLP serializers (e.g.
JS) that emit `int_value` for integral numbers.
([#&#8203;1331](https://redirect.github.com/open-telemetry/weaver/pull/1331)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- Fix CLI so it doesn't error out early when loading a resolved schema.
([#&#8203;1304](https://redirect.github.com/open-telemetry/weaver/pull/1304)
by [@&#8203;jsuereth](https://redirect.github.com/jsuereth))
- 💥 BREAKING CHANGE 💥 Use `schema_url` to track registries consistently
in lineage / provenance
([#&#8203;1298](https://redirect.github.com/open-telemetry/weaver/pull/1298)
by [@&#8203;jsuereth](https://redirect.github.com/jsuereth))
- Publish and document missing JSON schemas. Add
`head_schema_url`/`baseline_schema_url` to diff v2.
([#&#8203;1106](https://redirect.github.com/open-telemetry/weaver/pull/1106)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Add `--allow-git-credentials` global flag to enable system credential
helpers (e.g. `osxkeychain`, `git-credential-manager`) when cloning
private registries. By default, git operations remain isolated for
security.
([#&#8203;1306](https://redirect.github.com/open-telemetry/weaver/pull/1306)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- MCP: Add `browse_namespace` tool and `findings_only` output mode for
`live_check`. Add configurable namespace separator via
`--namespace-separator`.
([#&#8203;1324](https://redirect.github.com/open-telemetry/weaver/pull/1324)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- chore(deps): update all patch versions.
([#&#8203;1379](https://redirect.github.com/open-telemetry/weaver/pull/1379)
by [@&#8203;renovate](https://redirect.github.com/renovate)\[bot])
- Remove vendored openssl dependency.
([#&#8203;1380](https://redirect.github.com/open-telemetry/weaver/pull/1380)
by [@&#8203;sapatrjv](https://redirect.github.com/sapatrjv))

#### Install weaver 0.23.0

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.sh | sh
```

##### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-installer.ps1 | iex"
```

#### Download weaver 0.23.0

| File | Platform | Checksum |
|
-------------------------------------------------------------------------------------------------------------------------------------------------------
| ------------------- |
------------------------------------------------------------------------------------------------------------------------------
|
|
[weaver-aarch64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz)
| Apple Silicon macOS |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-apple-darwin.tar.xz.sha256)
|
|
[weaver-x86\_64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz)
| Intel macOS |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-apple-darwin.tar.xz.sha256)
|
|
[weaver-x86\_64-pc-windows-msvc.zip](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip)
| x64 Windows |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.zip.sha256)
|
|
[weaver-x86\_64-pc-windows-msvc.msi](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi)
| x64 Windows |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-pc-windows-msvc.msi.sha256)
|
|
[weaver-aarch64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz)
| ARM64 Linux |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-gnu.tar.xz.sha256)
|
|
[weaver-x86\_64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz)
| x64 Linux |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256)
|
|
[weaver-aarch64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz)
| ARM64 MUSL Linux |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-aarch64-unknown-linux-musl.tar.xz.sha256)
|
|
[weaver-x86\_64-unknown-linux-musl.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz)
| x64 MUSL Linux |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.23.0/weaver-x86_64-unknown-linux-musl.tar.xz.sha256)
|

#### Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub
Artifact Attestations. These can be verified by using the [GitHub
CLI](https://cli.github.com/manual/gh_attestation_verify):

```sh
gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver
```

You can also download the attestation from
[GitHub](https://redirect.github.com/open-telemetry/weaver/attestations)
and verify against that directly:

```sh
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
```

</details>

---

### Configuration

📅 **Schedule**: (UTC)

- Branch creation
  - At any time (no schedule defined)
- Automerge
  - At any time (no schedule defined)

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My4xMzkuNCIsInVwZGF0ZWRJblZlciI6IjQzLjEzOS40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJTa2lwIENoYW5nZWxvZyIsImRlcGVuZGVuY2llcyJdfQ==-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This commit is contained in:
renovate[bot]
2026-04-23 09:28:25 +02:00
committed by GitHub
parent 1b8ba66d38
commit e9e6dc1c87
+1 -1
View File
@@ -1,4 +1,4 @@
# This is a renovate-friendly source of Docker images.
FROM python:3.13.6-slim-bullseye@sha256:e98b521460ee75bca92175c16247bdf7275637a8faaeb2bcfa19d879ae5c4b9a AS python
FROM otel/weaver:v0.22.1@sha256:33ae522ae4b71c1c562563c1d81f46aa0f79f088a0873199143a1f11ac30e5c9 AS weaver
FROM otel/weaver:v0.23.0@sha256:7984ecb55b859eb3034ae9d836c4eeda137e2bdd0873b7ba2bb6c3d24d6ff457 AS weaver
FROM avtodev/markdown-lint:v1@sha256:6aeedc2f49138ce7a1cd0adffc1b1c0321b841dc2102408967d9301c031949ee AS markdown