Repository navigation
Update all patch and minor versions - #591
Merged
Merged
Conversation
There was a problem hiding this comment.
Copilot review overview
🟢 Approval recommended
The version updates are consistent, narrowly scoped, and unaffected by Weaver’s documented breaking changes.
Review effort: Balanced
Findings: None
What changed in this PR
Updates build-time dependencies and Weaver generation tooling to current patch/minor releases.
Changes:
- Updates Gummy Bears API signature to 0.16.0.
- Updates Guava to 33.7.2-jre.
- Updates Weaver to v0.27.0 with a pinned digest.
| File | Description |
|---|---|
buildSrc/src/main/kotlin/otel.animalsniffer-conventions.gradle.kts |
Updates Android API signatures. |
buildSrc/build.gradle.kts |
Updates the Guava build dependency. |
build.gradle.kts |
Updates the Weaver generator image. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
trask
approved these changes
Oct 6, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.26.1→v0.27.033.7.1-jre→33.7.2-jre0.15.0→0.16.0Release Notes
open-telemetry/weaver (otel/weaver)
v0.27.0: 0.27.0 - 2026-10-02Compare Source
Release Notes
--advice-policiesand--advice-datain live-check. (#1760 by @lmolkova)registry live-check --output http:POST /stopno longer returns the report. It stops the run and returns once the report is ready. Read the report with the newGET /report, then end the process with the newPOST /shutdown. Reading the report is no longer tied to the process exiting, so large reports are never truncated. In this mode--inactivity-timeoutis ignored: the client owns the run. Fixes #1657. (#1770 by @jerbly)[[live-check.matchers]]. A matcher uses a CEL expression to select samples, and names the v2 signal and attribute groups they are checked against. v2 registries only.attribute_groupslists the attribute groups allowed on a sample. Their definitions are used for the attribute checks, but an attribute missing from the sample is not reported. To enforce a group's requirement levels, name it in the newstrict_attribute_groups. A signal's own attributes are always enforced.span_eventmatcher cannot name asignal. A semantic convention event is a log-based event, and a span event has a different data model, so the two are not comparable. A span event's attributes are checked withattribute_groupsorstrict_attribute_groups, or with a Rego policy, and span events do not count toward event coverage. (#1793 by @jerbly)kind_mismatchandunexpected_attribute. A v2 metric or log raisesunexpected_attributeagainst the signal its name resolves to, or against the matcher's signal when a matcher setssignal.search_all_attributes, it also searches the whole registry and its dependencies. v1 is unchanged.match_infowith the signal, the attribute groups, and what each applied matcher contributed.-D/--paramand--paramsto pass parameters to the output template. The ansi format readsshow_finding_id, which labels a finding with its id instead of its level.[live_check]to[live-check]. The underscore form was silently ignored.http.request.headers.hostno longer matches the templatehttp.request.header, and now raisesmissing_attribute. A dot must follow the template name. The namespace separator is a fixed.throughout, soregistry mcp --namespace-separatorand its[mcp] namespace_separatorconfig key are removed. Fixes #1743 - (#1775 by @jerbly).weaver.tomlthat does not deserialize, or an unknown key under[live-check], now stops the run instead of being ignored. (#1721 by @jerbly)registry inferrenames--grpc-addressand--grpc-portto--otlp-grpc-addressand--otlp-grpc-portto matchregistry live-check. Its listener settings move from[infer]to[infer.otlp](grpc_address,grpc_port,admin_port,inactivity_timeout), the same shape as[live-check.otlp], and an unknown key under[infer]now stops the run. (#1780 by @jerbly)refto an attribute of a published (packaged) dependency resolving asrequiredwhen it sets norequirement_level. It now takes the default,recommended, as it already did when the dependency is resolved from source. A new signal, an attribute group, or a refinement adding an attribute its parent does not carry were all affected. (#1789 by @jerbly)registry.attributes, as if it defined them. A dependent registry could thenrefthose attributes through it, reaching past the dependencies it declares. An imported span, metric, event, entity or attribute group now records each attribute as a reference to the registry that defines it, as it already did when the dependency is resolved from source. (#1790 by @jerbly)Install weaver 0.27.0
Install prebuilt binaries via shell script
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.27.0/weaver-installer.ps1 | iex"Download weaver 0.27.0
Verifying GitHub Artifact Attestations
The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:
You can also download the attestation from GitHub and verify against that directly:
open-toast/gummy-bears (com.toasttab.android:gummy-bears-api-23)
v0.16.0Compare Source
What's Changed
New functionality
Chores
Full Changelog: open-toast/gummy-bears@0.15.0...0.16.0
Configuration
📅 Schedule: (UTC)
* 0-7 * * 2)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.