fix(deps): Update otel/weaver Docker tag to v0.22.1 by cq-bot · Pull Request #121 · cloudquery/distribution

open-telemetry/weaver (otel/weaver)

v0.22.1: 0.22.1 - 2026-03-13

Compare Source

Release Notes

Note: 0.22.0 release was skipped due to release CI/CD issues.

  • Fix: Update release workflow for pnpm migration (use pnpm lockfile instead of npm lockfile). (#​1289 by @​jerbly)
  • Add support for git references in the registry url (#​182 by @​sebasnabas)
  • New feature (#​1153) - Live-check now has a /health endpoint that can be used in long-running scenarios to confirm readiness and liveness of the live-check server. (#​1193 by @​jerbly)
  • New feature (#​1100) - Set --output=http to have live-check send its report as the response to /stop. (#​1193 by @​jerbly)
  • Unified output handling across all registry subcommands. Builtin output formats (json, yaml, jsonl) are now available in registry stats, registry diff, and registry resolve. registry stats also supports --templates for custom text output templates. (#​1200 by @​jerbly)
  • New feature (#​1152) - Live-check with --emit-otlp-logs will now include the attributes from the resource in the emitted log record, this helps to identify the source of the finding in a multi-source environment. (#​1206 by @​jerbly)
  • New Experimental feature: weaver registry infer command that listens for OTLP telemetry and infers a semantic convention registry file from the received data. Supports spans, metrics, events, and resource attributes. Includes configurable gRPC address/port, admin server for graceful shutdown, and inactivity timeout. (#​1138 by @​ArthurSens)
  • Fix: Include unit in inferred schema even if empty to prevent live-check failures. (#​1284 by @​ArthurSens)
  • Use schema_url in registry manifest, dependencies, and resolved schema instead of registry_url. Parse registry name and version
    from it. (#​1202 by @​lmolkova)
  • Default to manifest.yaml for registry manifest file, deprecate registry_manifest.yaml and add warning when it's used. (#​1202 by @​lmolkova)
  • 💥 BREAKING CHANGE 💥 (Fixes #​760) - Auto-escaping is now off by default (none) for all templates, regardless of file extension. To opt in, set auto_escape: html or auto_escape: json per template in weaver.yaml. Within a template, {% autoescape false %} blocks can selectively disable escaping for sections. Use |tojson for explicit JSON/YAML value escaping where needed. (#​1239 by @​jerbly)
  • 💥 BREAKING CHANGE 💥 Replace version: "2" with file_format: definition/2 for v2 definition schema (#​1154 by @​lmolkova)
  • Add JSON schema for resolved registry v2 (#​1261 by @​lmolkova)
  • Add weaver registry package command to generate manifest and write resolved schema. (#​1254 by @​lmolkova)
  • Fix: weaver registry package command not producing output due to warnings. (#​1271 by @​lmolkova)
  • Update JSON Schema v2 to include file_format (#​1262 by @​lmolkova)
  • Add JSON schema for PolicyFinding, make context field optional. (#​1270 by @​lmolkova)
  • Deprecate weaver registry resolve command, please use weaver registry generate or package instead (#​1255 by @​lmolkova)
  • Support imports for all signal types and public attribute groups in v2 registry. (#​1267 by @​jsuereth)
  • Support refinements in v2 syntax: metric names, notes, etc. are now copied from the refined group. (#​1250 by @​jsuereth)
  • Fix stability/ordering issues in v2 publishing; attributes are now sorted and deduplicated consistently. (#​1282 by @​jsuereth)
  • Fix resolution for dependencies: both v1 and v2 resolution now returns the correct attribute from the right registry when using dependencies. (#​1280 by @​lmolkova)
  • JQ helper v2 for spans: fixes and improvements. (#​1251 by @​lmolkova)
  • Fix 404 on template-type attributes in the weaver serve API. (#​1240 by @​jerbly)
  • New Experimental feature: weaver serve UI migrated to React. (#​1147 by @​nicolastakashi)

Install weaver 0.22.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.22.1/weaver-installer.ps1 | iex"

Download weaver 0.22.1

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.22.0

Compare Source

v0.21.2: 0.21.2 - 2026-02-03

Compare Source

Release Notes

Install weaver 0.21.2

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.ps1 | iex"

Download weaver 0.21.2

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.0: 0.20.0 - 2025-12-11

Compare Source

Release Notes

  • Add support for V2 schema in weaver diff (#​1053 by @​jsuereth)
  • Add support for V2 schema in JQ helpers (#​1058 by @​lmolkova)
  • Add support for V2 schema in weaver_forge (#​980 by @​jsuereth)
  • Add support for V2 schema in weaver check (#​1016 by @​jsuereth)
  • Add support for V2 schema in emit (#​1019 by @​jerbly)
  • Add support for V2 schema in live-check (#​1022 by @​jerbly)
  • 💥 BREAKING CHANGE 💥 Violation and Advice have been renamed
    to PolicyFinding. We now use the same structure between all
    rego policies in weaver. (#​1038 by @​jsuereth)
  • Add Log support for emit and live-check (#​1042 by @​jerbly)
  • Add OTLP log emission for policy findings in live-check. Whenever a PolicyFinding is created, a log_record is emitted to your configured OTLP endpoint. (#​1045 by @​jerbly)
  • Deprecate weaver registry search command. This command is not compatible with V2 schema and will be removed in a future version. Users should search the generated documentation instead. (#​1057 by @​jerbly)
  • Add support for continuous live-check sessions with --inactivity-timeout=0, --output=none and --no-stats (#​1066 by @​jerbly)

Install weaver 0.20.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.ps1 | iex"

Download weaver 0.20.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.19.0: 0.19.0 - 2025-11-04

Compare Source

Release Notes

  • Add support for attribute_group (public and internal) in schema v2 (#​933 by @​lmolkova)
  • Live-check report changes (#​943 by @​lmolkova)
    • 💥 BREAKING CHANGE 💥 value property in Advice is renamed to advice_context
    • Advice now contains signal_type and signal_name properties to simplify post-processing
    • Message format is changed to include all dynamic details about the advice
  • The target and the registry sub-directory are now optional for the
    weaver registry generate command. (#​962 by @​lquerel)
  • Deterministic sorting of output (#​982 by @​kuklyy)
  • Fix panic in update-markdown (#​990 by @​jsuereth)
  • Cleanup log output (#​995 by @​lmolkova)

Install weaver 0.19.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.19.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.19.0/weaver-installer.ps1 | iex"

Download weaver 0.19.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.18.0: 0.18.0 - 2025-09-17

Compare Source

Release Notes

Install weaver 0.18.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.18.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.18.0/weaver-installer.ps1 | iex"

Download weaver 0.18.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.17.1: 0.17.1 - 2025-08-15

Compare Source

Release Notes

Install weaver 0.17.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.17.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.17.1/weaver-installer.ps1 | iex"

Download weaver 0.17.1

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.17.0: 0.17.0 - 2025-08-08

Compare Source

Release Notes

  • Filter based on deprecation, stability, and annotations in signal JQ helpers
    (#​870 by @​lmolkova)
  • Documentation and Repo cleanup (#​873 by @​lquerel))
  • Support structured deprecation info on enum members.
    (#​823 by @​lmolkova)
  • Don't serialize default values and empty arrays when resolving semantic conventions.
    (#​822 by @​lmolkova)
  • Add support for registry dependency chain, a->b->c. This pattern is useful when making narrow application registries that depend on a corporate registry based on the OpenTelemetry semantic conventions. Max depth is 10.
    (#​856 by @​jerbly)
  • Improve doc usage section (#​851 by @​tombrk)

Install weaver 0.17.0

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.17.0/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.17.0/weaver-installer.ps1 | iex"

Download weaver 0.17.0

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.16.1: 0.16.1 - 2025-07-04

Compare Source

Release Notes

  • Fix github release actions.

Install weaver 0.16.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.16.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.16.1/weaver-installer.ps1 | iex"

Download weaver 0.16.1

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.16.0: - 2025-07-03

Compare Source

Note: This release had automation failures which prevented the binary distributions. A Docker image is available for this release.

Changes

v0.15.3: 0.15.3 - 2025-06-24

Compare Source

Release Notes

  • Add imports section to semconv spec. Custom registries can now import groups
    by name or by wildcard. (#​769 by @​lquerel)
  • Add support for metrics to registry emit
    (#​767 by @​jerbly)
  • Adds value_type to metric: int or double. Data-point and exemplar values are live-checked.
    (#​773 by @​jerbly)

Install weaver 0.15.3

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.15.3/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.15.3/weaver-installer.ps1 | iex"

Download weaver 0.15.3

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.15.2: 0.15.2 - 2025-05-30

Compare Source

Release Notes

  • Improve the quality of error messages emitted by Weaver
    (#​759 by @​lquerel)
  • Remove deprecated allow_custom_values from the codebase and YAML files
    (#​758 by @​trisch-me)
    As a result of this change, allow_custom_values will be ignored in registry
    version 1.26.0, which was the last version to support it.

Install weaver 0.15.2

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.15.2/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.15.2/weaver-installer.ps1 | iex"

Download weaver 0.15.2

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

v0.15.1: 0.15.1 - 2025-05-27

Compare Source

Release Notes

Install weaver 0.15.1

Install prebuilt binaries via shell script
curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.15.1/weaver-installer.sh | sh
Install prebuilt binaries via powershell script
powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.15.1/weaver-installer.ps1 | iex"

Download weaver 0.15.1

File Platform Checksum
weaver-aarch64-apple-darwin.tar.xz Apple Silicon macOS checksum
weaver-x86_64-apple-darwin.tar.xz Intel macOS checksum
weaver-x86_64-pc-windows-msvc.zip x64 Windows checksum
weaver-x86_64-pc-windows-msvc.msi x64 Windows checksum
weaver-x86_64-unknown-linux-gnu.tar.xz x64 Linux checksum

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, on day 1 of the month ( * 0-3 1 * * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.