1
0
mirror of https://github.com/open-telemetry/opentelemetry-go.git synced 2026-06-03 18:35:08 +02:00
Files
opentelemetry-go/dependencies.Dockerfile
T
renovate[bot] a029201d1b chore(deps): update otel/weaver docker tag to v0.22.1 (#8061)
This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [otel/weaver](https://redirect.github.com/open-telemetry/weaver) |
stage | patch | `v0.22.0` → `v0.22.1` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the [Dependency
Dashboard](../issues/5322) for more information.

---

### Release Notes

<details>
<summary>open-telemetry/weaver (otel/weaver)</summary>

###
[`v0.22.1`](https://redirect.github.com/open-telemetry/weaver/releases/tag/v0.22.1):
0.22.1 - 2026-03-13

[Compare
Source](https://redirect.github.com/open-telemetry/weaver/compare/v0.22.0...v0.22.1)

#### Release Notes

*Note: 0.22.0 release was skipped due to release CI/CD issues.*

- Fix: Update release workflow for pnpm migration (use pnpm lockfile
instead of npm lockfile).
([#&#8203;1289](https://redirect.github.com/open-telemetry/weaver/pull/1289)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- Add support for git references in the registry url
([#&#8203;182](https://redirect.github.com/open-telemetry/weaver/issues/182)
by [@&#8203;sebasnabas](https://redirect.github.com/sebasnabas))
- New feature
([#&#8203;1153](https://redirect.github.com/open-telemetry/weaver/issues/1153))
- Live-check now has a `/health` endpoint that can be used in
long-running scenarios to confirm readiness and liveness of the
live-check server.
([#&#8203;1193](https://redirect.github.com/open-telemetry/weaver/pull/1193)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- New feature
([#&#8203;1100](https://redirect.github.com/open-telemetry/weaver/issues/1100))
- Set `--output=http` to have live-check send its report as the response
to `/stop`.
([#&#8203;1193](https://redirect.github.com/open-telemetry/weaver/pull/1193)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- Unified output handling across all registry subcommands. Builtin
output formats (json, yaml, jsonl) are now available in `registry
stats`, `registry diff`, and `registry resolve`. `registry stats` also
supports `--templates` for custom text output templates.
([#&#8203;1200](https://redirect.github.com/open-telemetry/weaver/pull/1200)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- New feature
([#&#8203;1152](https://redirect.github.com/open-telemetry/weaver/issues/1152))
- Live-check with `--emit-otlp-logs` will now include the attributes
from the resource in the emitted log record, this helps to identify the
source of the finding in a multi-source environment.
([#&#8203;1206](https://redirect.github.com/open-telemetry/weaver/pull/1206)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- New Experimental feature: `weaver registry infer` command that listens
for OTLP telemetry and infers a semantic convention registry file from
the received data. Supports spans, metrics, events, and resource
attributes. Includes configurable gRPC address/port, admin server for
graceful shutdown, and inactivity timeout.
([#&#8203;1138](https://redirect.github.com/open-telemetry/weaver/pull/1138)
by [@&#8203;ArthurSens](https://redirect.github.com/ArthurSens))
- Fix: Include unit in inferred schema even if empty to prevent
live-check failures.
([#&#8203;1284](https://redirect.github.com/open-telemetry/weaver/pull/1284)
by [@&#8203;ArthurSens](https://redirect.github.com/ArthurSens))
- Use `schema_url` in registry manifest, dependencies, and resolved
schema instead of `registry_url`. Parse registry name and version
from it.
([#&#8203;1202](https://redirect.github.com/open-telemetry/weaver/pull/1202)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Default to `manifest.yaml` for registry manifest file, deprecate
`registry_manifest.yaml` and add warning when it's used.
([#&#8203;1202](https://redirect.github.com/open-telemetry/weaver/pull/1202)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- 💥 BREAKING CHANGE 💥 (Fixes
[#&#8203;760](https://redirect.github.com/open-telemetry/weaver/issues/760))
- Auto-escaping is now off by default (`none`) for all templates,
regardless of file extension. To opt in, set `auto_escape: html` or
`auto_escape: json` per template in `weaver.yaml`. Within a template,
`{% autoescape false %}` blocks can selectively disable escaping for
sections. Use `|tojson` for explicit JSON/YAML value escaping where
needed.
([#&#8203;1239](https://redirect.github.com/open-telemetry/weaver/pull/1239)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- 💥 BREAKING CHANGE 💥 Replace `version: "2"` with `file_format:
definition/2` for v2 definition schema
([#&#8203;1154](https://redirect.github.com/open-telemetry/weaver/pull/1154)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Add JSON schema for resolved registry v2
([#&#8203;1261](https://redirect.github.com/open-telemetry/weaver/pull/1261)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Add `weaver registry package` command to generate manifest and write
resolved schema.
([#&#8203;1254](https://redirect.github.com/open-telemetry/weaver/pull/1254)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Fix: `weaver registry package` command not producing output due to
warnings.
([#&#8203;1271](https://redirect.github.com/open-telemetry/weaver/pull/1271)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Update JSON Schema v2 to include `file_format`
([#&#8203;1262](https://redirect.github.com/open-telemetry/weaver/pull/1262)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Add JSON schema for `PolicyFinding`, make `context` field optional.
([#&#8203;1270](https://redirect.github.com/open-telemetry/weaver/pull/1270)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Deprecate `weaver registry resolve` command, please use `weaver
registry generate` or `package` instead
([#&#8203;1255](https://redirect.github.com/open-telemetry/weaver/pull/1255)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Support `imports` for all signal types and public attribute groups in
v2 registry.
([#&#8203;1267](https://redirect.github.com/open-telemetry/weaver/pull/1267)
by [@&#8203;jsuereth](https://redirect.github.com/jsuereth))
- Support refinements in v2 syntax: metric names, notes, etc. are now
copied from the refined group.
([#&#8203;1250](https://redirect.github.com/open-telemetry/weaver/pull/1250)
by [@&#8203;jsuereth](https://redirect.github.com/jsuereth))
- Fix stability/ordering issues in v2 publishing; attributes are now
sorted and deduplicated consistently.
([#&#8203;1282](https://redirect.github.com/open-telemetry/weaver/pull/1282)
by [@&#8203;jsuereth](https://redirect.github.com/jsuereth))
- Fix resolution for dependencies: both v1 and v2 resolution now returns
the correct attribute from the right registry when using dependencies.
([#&#8203;1280](https://redirect.github.com/open-telemetry/weaver/pull/1280)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- JQ helper v2 for spans: fixes and improvements.
([#&#8203;1251](https://redirect.github.com/open-telemetry/weaver/pull/1251)
by [@&#8203;lmolkova](https://redirect.github.com/lmolkova))
- Fix 404 on template-type attributes in the `weaver serve` API.
([#&#8203;1240](https://redirect.github.com/open-telemetry/weaver/pull/1240)
by [@&#8203;jerbly](https://redirect.github.com/jerbly))
- New Experimental feature: `weaver serve` UI migrated to React.
([#&#8203;1147](https://redirect.github.com/open-telemetry/weaver/pull/1147)
by [@&#8203;nicolastakashi](https://redirect.github.com/nicolastakashi))

#### Install weaver 0.22.1

##### Install prebuilt binaries via shell script

```sh
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.sh | sh
```

##### Install prebuilt binaries via powershell script

```sh
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.ps1 | iex"
```

#### Download weaver 0.22.1

| File | Platform | Checksum |
|
----------------------------------------------------------------------------------------------------------------------------------------------------
| ------------------- |
----------------------------------------------------------------------------------------------------------------------------
|
|
[weaver-aarch64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-aarch64-apple-darwin.tar.xz)
| Apple Silicon macOS |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-aarch64-apple-darwin.tar.xz.sha256)
|
|
[weaver-x86\_64-apple-darwin.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-apple-darwin.tar.xz)
| Intel macOS |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-apple-darwin.tar.xz.sha256)
|
|
[weaver-x86\_64-pc-windows-msvc.zip](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.zip)
| x64 Windows |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.zip.sha256)
|
|
[weaver-x86\_64-pc-windows-msvc.msi](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.msi)
| x64 Windows |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-pc-windows-msvc.msi.sha256)
|
|
[weaver-x86\_64-unknown-linux-gnu.tar.xz](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-unknown-linux-gnu.tar.xz)
| x64 Linux |
[checksum](https://redirect.github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-x86_64-unknown-linux-gnu.tar.xz.sha256)
|

#### Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub
Artifact Attestations. These can be verified by using the [GitHub
CLI](https://cli.github.com/manual/gh_attestation_verify):

```sh
gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver
```

You can also download the attestation from
[GitHub](https://redirect.github.com/open-telemetry/weaver/attestations)
and verify against that directly:

```sh
gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>
```

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR is behind base branch, or you tick the
rebase/retry checkbox.

🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR was generated by [Mend Renovate](https://mend.io/renovate/).
View the [repository job
log](https://developer.mend.io/github/open-telemetry/opentelemetry-go).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0My42Ni40IiwidXBkYXRlZEluVmVyIjoiNDMuNjYuNCIsInRhcmdldEJyYW5jaCI6Im1haW4iLCJsYWJlbHMiOlsiU2tpcCBDaGFuZ2Vsb2ciLCJkZXBlbmRlbmNpZXMiXX0=-->

Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2026-03-16 09:31:56 +01:00

5 lines
391 B
Docker

# This is a renovate-friendly source of Docker images.
FROM python:3.13.6-slim-bullseye@sha256:e98b521460ee75bca92175c16247bdf7275637a8faaeb2bcfa19d879ae5c4b9a AS python
FROM otel/weaver:v0.22.1@sha256:33ae522ae4b71c1c562563c1d81f46aa0f79f088a0873199143a1f11ac30e5c9 AS weaver
FROM avtodev/markdown-lint:v1@sha256:6aeedc2f49138ce7a1cd0adffc1b1c0321b841dc2102408967d9301c031949ee AS markdown