Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security(go): bump go.opentelemetry.io/otel/sdk/log from 0.7.0 to 0.9.0 #369

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 16, 2024

Bumps go.opentelemetry.io/otel/sdk/log from 0.7.0 to 0.9.0.

Release notes

Sourced from go.opentelemetry.io/otel/sdk/log's releases.

Release v0.9.0

This release includes a new Resource auto-detector interface and a generation of the OTLP locally.

Added

  • A new Resource Detector interface is included to allow resources to be automatically detected and included. (#939)
  • A Detector to automatically detect resources from an environment variable. (#939)
  • Github action to generate protobuf Go bindings locally in internal/opentelemetry-proto-gen. (#938)
  • OTLP .proto files from open-telemetry/opentelemetry-proto imported as a git submodule under internal/opentelemetry-proto. References to github.com/open-telemetry/opentelemetry-proto changed to go.opentelemetry.io/otel/internal/opentelemetry-proto-gen. (#942)

Changed

  • Non-nil value structs for key-value pairs will be marshalled using JSON rather than Sprintf. (#948)

Removed

  • Removed dependency on github.com/open-telemetry/opentelemetry-collector. (#943)

Raw changes made between v0.8.0 and v0.9.0

58e50e249fe4c57f64e421e300b5d2316ae96811 (HEAD -> master, tag: v0.9.0, tag: exporters/trace/zipkin/v0.9.0, tag: exporters/trace/jaeger/v0.9.0, tag: exporters/otlp/v0.9.0, tag: exporters/metric/prometheus/v0.9.0, tag: example/zipkin/v0.9.0, tag: example/prometheus/v0.9.0, tag: example/otel-collector/v0.9.0, tag: example/namedtracer/v0.9.0, tag: example/jaeger/v0.9.0, tag: example/http/v0.9.0, tag: example/grpc/v0.9.0, tag: example/basic/v0.9.0, upstream/master, origin/master, origin/HEAD) Release v0.9.0 (#952) e6537c6aa6f287660d76f939cb5b24a407db03fb Fix typo in comment (#951) 99c299877dbd70df7455bd7df65e5ed8ac5c114f OT resource detector (#939) b2b23e15e5724d2fdb3107ee8aa2d022de3af508 supports marshaling values as json (#948) d6ad4d4d6e27b41c3e5d34e32333e8a71fbcca9a [jaeger] Stop ignoring uints (#945) 4f3fab3ba7df677205e673ae743ee067c99dbe87 Remove github.com/open-telemetry/opentelemetry-collector dependency (#943) 166c703bd031040c8c3976863c901ae56fd74473 Import open-telemetry/opentelemetry-proto submodule and generate protobuf bindings locally (#942) dd79483e20e449c586ef573249afbd76cb71fe93 Create protobuf generation GitHub action (#938) 31dd06af9d8add6752adf5f7dea5b9bfb1b9882e Bump github.com/golangci/golangci-lint from 1.28.2 to 1.28.3 in /tools (#936) 9edcad38296cb53cd9357ddcb4df75344e1cc0d2 Backport tag script from contrib repo (#934)

Release v0.8.0

This release includes additions and changes to implements the v0.6.0 OpenTelemetry specification and other fixes.

Added

  • The B3Encoding type to represent the B3 encoding(s) the B3 propagator can inject. A value for HTTP supported encodings (Multiple Header: MultipleHeader, Single Header: SingleHeader) are included. (#882)
  • The FlagsDeferred trace flag to indicate if the trace sampling decision has been deferred. (#882)
  • The FlagsDebug trace flag to indicate if the trace is a debug trace. (#882)
  • Add peer.service semantic attribute. (#898)
  • Add database-specific semantic attributes. (#899)
  • Add semantic convention for faas.coldstart and container.id. (#909)
  • Add http content size semantic conventions. (#905)
  • Include http.request_content_length in HTTP request basic attributes. (#905)
  • Add semantic conventions for operating system process resource attribute keys. (#919)
  • The Jaeger exporter now has a WithBatchMaxCount option to specify the maximum number of spans sent in a batch. (#931)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/otel/sdk/log's changelog.

[1.33.0/0.55.0/0.9.0/0.0.12] 2024-12-12

Added

  • Add Reset method to SpanRecorder in go.opentelemetry.io/otel/sdk/trace/tracetest. (#5994)
  • Add EnabledInstrument interface in go.opentelemetry.io/otel/sdk/metric/internal/x. This is an experimental interface that is implemented by synchronous instruments provided by go.opentelemetry.io/otel/sdk/metric. Users can use it to avoid performing computationally expensive operations when recording measurements. It does not fall within the scope of the OpenTelemetry Go versioning and stability policy and it may be changed in backwards incompatible ways or removed in feature releases. (#6016)

Changed

  • The default global API now supports full auto-instrumentation from the go.opentelemetry.io/auto package. See that package for more information. (#5920)
  • Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5929)
  • Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5929)
  • Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5929)
  • Performance improvements for attribute value AsStringSlice, AsFloat64Slice, AsInt64Slice, AsBoolSlice. (#6011)
  • Change EnabledParameters to have a Severity field instead of a getter and setter in go.opentelemetry.io/otel/log. (#6009)

Fixed

  • Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5954)
  • Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5954)
  • Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5954)
  • Fix invalid exemplar keys in go.opentelemetry.io/otel/exporters/prometheus. (#5995)
  • Fix attribute value truncation in go.opentelemetry.io/otel/sdk/trace. (#5997)
  • Fix attribute value truncation in go.opentelemetry.io/otel/sdk/log. (#6032)

[1.32.0/0.54.0/0.8.0/0.0.11] 2024-11-08

Added

  • Add go.opentelemetry.io/otel/sdk/metric/exemplar.AlwaysOffFilter, which can be used to disable exemplar recording. (#5850)
  • Add go.opentelemetry.io/otel/sdk/metric.WithExemplarFilter, which can be used to configure the exemplar filter used by the metrics SDK. (#5850)
  • Add ExemplarReservoirProviderSelector and DefaultExemplarReservoirProviderSelector to go.opentelemetry.io/otel/sdk/metric, which defines the exemplar reservoir to use based on the aggregation of the metric. (#5861)
  • Add ExemplarReservoirProviderSelector to go.opentelemetry.io/otel/sdk/metric.Stream to allow using views to configure the exemplar reservoir to use for a metric. (#5861)
  • Add ReservoirProvider, HistogramReservoirProvider and FixedSizeReservoirProvider to go.opentelemetry.io/otel/sdk/metric/exemplar to make it convenient to use providers of Reservoirs. (#5861)
  • The go.opentelemetry.io/otel/semconv/v1.27.0 package. The package contains semantic conventions from the v1.27.0 version of the OpenTelemetry Semantic Conventions. (#5894)
  • Add Attributes attribute.Set field to Scope in go.opentelemetry.io/otel/sdk/instrumentation. (#5903)
  • Add Attributes attribute.Set field to ScopeRecords in go.opentelemetry.io/otel/log/logtest. (#5927)
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc adds instrumentation scope attributes. (#5934)
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp adds instrumentation scope attributes. (#5934)
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc adds instrumentation scope attributes. (#5935)
  • go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp adds instrumentation scope attributes. (#5935)
  • go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc adds instrumentation scope attributes. (#5933)

... (truncated)

Commits
  • 58e50e2 Release v0.9.0 (#952)
  • e6537c6 Fix typo in comment (#951)
  • 99c2998 OT resource detector (#939)
  • b2b23e1 supports marshaling values as json (#948)
  • d6ad4d4 [jaeger] Stop ignoring uints (#945)
  • 4f3fab3 Remove github.com/open-telemetry/opentelemetry-collector dependency (#943)
  • 166c703 Import open-telemetry/opentelemetry-proto submodule and generate protobuf bin...
  • dd79483 Create protobuf generation GitHub action (#938)
  • 31dd06a Bump github.com/golangci/golangci-lint from 1.28.2 to 1.28.3 in /tools (#936)
  • 9edcad3 Backport tag script from contrib repo (#934)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [go.opentelemetry.io/otel/sdk/log](https://github.com/open-telemetry/opentelemetry-go) from 0.7.0 to 0.9.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v0.7.0...v0.9.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk/log
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 16, 2024
Copy link
Contributor

Libyears decreased from 2.12 to 1.48

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 21, 2024

Looks like go.opentelemetry.io/otel/sdk/log is up-to-date now, so this is no longer needed.

@dependabot dependabot bot closed this Dec 21, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go.opentelemetry.io/otel/sdk/log-0.9.0 branch December 21, 2024 18:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants