Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security(go): bump go.opentelemetry.io/contrib/bridges/otelslog from 0.6.0 to 0.7.0 #322

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2024

Bumps go.opentelemetry.io/contrib/bridges/otelslog from 0.6.0 to 0.7.0.

Release notes

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's releases.

Release v0.7.0

Add support for go.opentelemetry.io/otel v0.7.0

Raw changes made between v0.6.1 and v0.7.0

be5af6fc17a1fd313d1d8267aa9a51738ef1c85c Create RELEASE instructions (#101) a3a136f9689a5f8a97164247ad5f7b831bb981ad Modify Datadog example test to send UDP packets and validate them (#96) 41015b560c38fbe78cbee75762d2a29575727042 Bump google.golang.org/grpc from 1.29.1 to 1.30.0 (#99) d8b0c8e48eec5634aeec3baeea7cc7641c839d48 Bump google.golang.org/grpc in /instrumentation/labstack/echo (#100) 2638e7be887225775c6c0be423d3e1a77d19febf Bump google.golang.org/grpc in /instrumentation/gin-gonic/gin (#98) 90ce241afaf68d6b7ae58372dbb71c4ce2b86bc8 Using latest version of mod-tidier which supports go.{mod,sum} check (#97) 6c478fe44e10f331991bd669fca4d351445b34d9 Upgrade Exporter to match new API (#46) 64e21834f1d5eab534cfcdd488f65e2aa658ca77 Bump github.com/golangci/golangci-lint from 1.21.0 to 1.27.0 in /tools (#77) c83cc1e777f281e48d115b1203e0a31fcb0acd0f Bump go.mongodb.org/mongo-driver from 1.3.2 to 1.3.4 in /instrumentation/go.mongodb.org/mongo-driver (#76) e719fe6664b5d9d36a606adb0acd41e2c8626433 Bump github.com/stretchr/testify in /instrumentation/gin-gonic/gin (#75) 0f251cced76664295957efcf6d674ecbcc787329 Bump github.com/stretchr/testify (#74) b421721973ea11fbda6ace827893632cd3187056 Bump github.com/gin-gonic/gin from 1.6.2 to 1.6.3 in /instrumentation/gin-gonic/gin (#73) d923ef694483717c2af48491990a03465f704a76 Bump google.golang.org/grpc from 1.28.1 to 1.29.1 (#72) c1fd2a1d09019e81acc8874fcdff49943b82efe9 Bump google.golang.org/grpc in /instrumentation/labstack/echo (#71) ea450490e8a242a230e0e63d5ba801b3caa08247 Bump github.com/stretchr/testify from 1.5.1 to 1.6.1 in /instrumentation/macaron (#70) d5e8ef29f8e8ca02cf4af879c6057100fbea092c Bump google.golang.org/grpc in /instrumentation/gin-gonic/gin (#69) efaf37aab3fe80516baedf046a612a92c0ea7b96 Bump gopkg.in/macaron.v1 from 1.3.5 to 1.3.9 in /instrumentation/macaron (#68) db6e6c5976861d5bacb4ec4d6850c1828bb0837c Bump github.com/stretchr/testify in /instrumentation/labstack/echo (#67) eecea29c84eb76c488edf68dbd3639be3f01efdb Bump github.com/stretchr/testify from 1.4.0 to 1.6.1 (#66) 69723897af771300c95ef6149245a3953cb43bc1 Bump github.com/stretchr/testify in /instrumentation/gorilla/mux (#65) f0fb8bc25e3649d9999f7f97006fae18c7b8acfa Bump github.com/stretchr/testify from 1.5.1 to 1.6.1 in /exporters/metric/dogstatsd (#62) 325b321e22547732db28d517f7f18ba455a41157 Update project docs and layout (#92) 135745a8c3d789a23cc3b46e4afa711d50f8bfef Bump github.com/stretchr/testify from 1.4.0 to 1.6.1 in /instrumentation/runtime (#64) 9f68b4e3ffb07c5273047bd82dd23181d2c88e20 Fix company affiliation (#95) e4d3a09bb4f8ba8e55f1297aec5c0b71ad20a73e Add dependabot tidy github workflow (#94) f45ec6ba0da286bfa160894e5491a24420aaa932 Bump github.com/DataDog/datadog-go from 3.5.0+incompatible to 3.7.2+incompatible in /exporters/metric/datadog (#78) 5e5d6f13ffa6e8e27c7646c9025ed787b8d73482 Create dependabot.yml (#61) 25bcf274ad2fe009a3cf1e792235f306f41db1e0 Add tagging script for release process (#60)

Release v0.6.1

Update all sub-packages dependencies to explicitly depend on released version of go.opentelemetry.io/contrib.


  • 0de142a419fb105cd5861c4ad8a1ae494596b321 Prepare for releasing v0.6.1 (#57)
Changelog

Sourced from go.opentelemetry.io/contrib/bridges/otelslog's changelog.

[1.32.0/0.57.0/0.26.0/0.12.0/0.7.0/0.5.0/0.4.0] - 2024-11-08

Added

  • Add the WithSource option to the go.opentelemetry.io/contrib/bridges/otelslog log bridge to set the code.* attributes in the log record that includes the source location where the record was emitted. (#6253)
  • Add ContextWithStartTime and StartTimeFromContext to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp, which allows setting the start time using go context. (#6137)
  • Set the code.* attributes in go.opentelemetry.io/contrib/bridges/otelzap if the zap.Logger was created with the AddCaller or AddStacktrace option. (#6268)
  • Add a LogProcessor to go.opentelemetry.io/contrib/processors/baggagecopy to copy baggage members to log records. (#6277)
    • Use baggagecopy.NewLogProcessor when configuring a Log Provider.
      • NewLogProcessor accepts a Filter function type that selects which baggage members are added to the log record.

Changed

  • Transform raw (slog.KindAny) attribute values to matching log.Value types. For example, []string{"foo", "bar"} attribute value is now transformed to log.SliceValue(log.StringValue("foo"), log.StringValue("bar")) instead of log.String("[foo bar"]). (#6254)
  • Upgrade go.opentelemetry.io/otel/semconv/v1.17.0 to go.opentelemetry.io/otel/semconv/v1.21.0 in go.opentelemetry.io/contrib/instrumentation/go.mongodb.org/mongo-driver/mongo/otelmongo. (#6272)
  • Resource doesn't merge with defaults if a valid resource is configured in go.opentelemetry.io/contrib/config. (#6289)

Fixed

  • Transform nil attribute values to log.Value zero value instead of panicking in go.opentelemetry.io/contrib/bridges/otellogrus. (#6237)
  • Transform nil attribute values to log.Value zero value instead of panicking in go.opentelemetry.io/contrib/bridges/otelzap. (#6237)
  • Transform nil attribute values to log.Value zero value instead of log.StringValue("<nil>") in go.opentelemetry.io/contrib/bridges/otelslog. (#6246)
  • Fix NewClientHandler so that rpc.client.request.* metrics measure requests instead of responses and rpc.client.responses.* metrics measure responses instead of requests in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#6250)
  • Fix issue in go.opentelemetry.io/contrib/config causing otelprom.WithResourceAsConstantLabels configuration to not be respected. (#6260)
  • otel.Handle is no longer called on a successful shutdown of the Prometheus exporter in go.opentelemetry.io/contrib/config. (#6299)
Commits
  • 99b417a Use trace convention helpers from main otel-go repo (#112)
  • 9890acb Prepare for v0.7.0 release of contrib (#103)
  • be5af6f Create RELEASE instructions (#101)
  • a3a136f Modify Datadog example test to send UDP packets and validate them (#96)
  • 41015b5 Bump google.golang.org/grpc from 1.29.1 to 1.30.0 (#99)
  • d8b0c8e Bump google.golang.org/grpc in /instrumentation/labstack/echo (#100)
  • 2638e7b Bump google.golang.org/grpc in /instrumentation/gin-gonic/gin (#98)
  • 90ce241 Using latest version of mod-tidier which supports go.{mod,sum} check (#97)
  • 6c478fe Upgrade Exporter to match new API (#46)
  • 64e2183 Bump github.com/golangci/golangci-lint from 1.21.0 to 1.27.0 in /tools (#77)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 11, 2024
Copy link
Contributor

Libyears is 1.85

Copy link
Contributor

Code coverage is 89.0%

Bumps [go.opentelemetry.io/contrib/bridges/otelslog](https://github.com/open-telemetry/opentelemetry-go-contrib) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/bridges/otelslog
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go.opentelemetry.io/contrib/bridges/otelslog-0.7.0 branch from b3cb2f8 to 47df03b Compare November 16, 2024 04:51
Copy link
Contributor

Libyears is 2.05

Copy link
Contributor

Code coverage is 89.1%

@Michad Michad merged commit 345851e into main Nov 16, 2024
14 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/go.opentelemetry.io/contrib/bridges/otelslog-0.7.0 branch November 16, 2024 05:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant