Release Notes

• New Experimental feature: weaver serve command to serve a REST API and web UI. (#1076 by @jerbly)
• Add support for diff schemas in registry json-schema(#1105 by @lmolkova)
• 💥 BREAKING CHANGE 💥 Upgraded JSON schema generation to 2020-12 version of JSON Schema. (#1125 by @jerbly)
• New Experimental feature: weaver registry mcp MCP server for a registry with search, get and live_check tools. (#1113 by @jerbly)
• Fix (#1133) - Live-check: correctly handle --no-stats in report mode. (#1142 by @jerbly)
• Feature (#1132) - Live-check: builtin output rendering for json, jsonl and yaml. (#1157 by @jerbly)

Install weaver 0.21.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.21.2/weaver-installer.ps1 | iex"

Download weaver 0.21.2

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Add support for V2 schema in weaver diff (#1053 by @jsuereth)
• Add support for V2 schema in JQ helpers (#1058 by @lmolkova)
• Add support for V2 schema in weaver_forge (#980 by @jsuereth)
• Add support for V2 schema in weaver check (#1016 by @jsuereth)
• Add support for V2 schema in emit (#1019 by @jerbly)
• Add support for V2 schema in live-check (#1022 by @jerbly)
• 💥 BREAKING CHANGE 💥 Violation and Advice have been renamed
  to PolicyFinding. We now use the same structure between all
  rego policies in weaver. (#1038 by @jsuereth)
• Add Log support for emit and live-check (#1042 by @jerbly)
• Add OTLP log emission for policy findings in live-check. Whenever a PolicyFinding is created, a log_record is emitted to your configured OTLP endpoint. (#1045 by @jerbly)
• Deprecate weaver registry search command. This command is not compatible with V2 schema and will be removed in a future version. Users should search the generated documentation instead. (#1057 by @jerbly)
• Add support for continuous live-check sessions with --inactivity-timeout=0, --output=none and --no-stats (#1066 by @jerbly)

Install weaver 0.20.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.20.0/weaver-installer.ps1 | iex"

Download weaver 0.20.0

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Add support for attribute_group (public and internal) in schema v2 (#933 by @lmolkova)
• Live-check report changes (#943 by @lmolkova)
  • 💥 BREAKING CHANGE 💥 value property in Advice is renamed to advice_context
  • Advice now contains signal_type and signal_name properties to simplify post-processing
  • Message format is changed to include all dynamic details about the advice
• The target and the registry sub-directory are now optional for the
  weaver registry generate command. (#962 by @lquerel)
• Deterministic sorting of output (#982 by @kuklyy)
• Fix panic in update-markdown (#990 by @jsuereth)
• Cleanup log output (#995 by @lmolkova)

Install weaver 0.19.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.19.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -ExecutionPolicy Bypass -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.19.0/weaver-installer.ps1 | iex"

Download weaver 0.19.0

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Fix error messages to ignore new version variants (#880 by @jsuereth)

Install weaver 0.17.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.17.1/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.17.1/weaver-installer.ps1 | iex"

Download weaver 0.17.1

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Filter based on deprecation, stability, and annotations in signal JQ helpers
  (#870 by @lmolkova)
• Documentation and Repo cleanup (#873 by @lquerel))
• Support structured deprecation info on enum members.
  (#823 by @lmolkova)
• Don't serialize default values and empty arrays when resolving semantic conventions.
  (#822 by @lmolkova)
• Add support for registry dependency chain, a->b->c. This pattern is useful when making narrow application registries that depend on a corporate registry based on the OpenTelemetry semantic conventions. Max depth is 10.
  (#856 by @jerbly)
• Improve doc usage section (#851 by @tombrk)

Install weaver 0.17.0

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.17.0/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.17.0/weaver-installer.ps1 | iex"

Download weaver 0.17.0

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Fix github release actions.

Install weaver 0.16.1

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.16.1/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.16.1/weaver-installer.ps1 | iex"

Download weaver 0.16.1

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Note: This release had automation failures which prevented the binary distributions. A Docker image is available for this release.

Changes

• Reverts the value_type feature. (#816 by @jerbly)
• Adds annotations to enum members (#812 by @lmolkova)

Release Notes

• Add imports section to semconv spec. Custom registries can now import groups
  by name or by wildcard. (#769 by @lquerel)
• Add support for metrics to registry emit
  (#767 by @jerbly)
• Adds value_type to metric: int or double. Data-point and exemplar values are live-checked.
  (#773 by @jerbly)

Install weaver 0.15.3

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.15.3/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.15.3/weaver-installer.ps1 | iex"

Download weaver 0.15.3

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>

Release Notes

• Improve the quality of error messages emitted by Weaver
  (#759 by @lquerel)
• Remove deprecated allow_custom_values from the codebase and YAML files
  (#758 by @trisch-me)
  As a result of this change, allow_custom_values will be ignored in registry
  version 1.26.0, which was the last version to support it.

Install weaver 0.15.2

Install prebuilt binaries via shell script

curl --proto '=https' --tlsv1.2 -LsSf https://github.com/open-telemetry/weaver/releases/download/v0.15.2/weaver-installer.sh | sh

Install prebuilt binaries via powershell script

powershell -c "irm https://github.com/open-telemetry/weaver/releases/download/v0.15.2/weaver-installer.ps1 | iex"

Download weaver 0.15.2

Verifying GitHub Artifact Attestations

The artifacts in this release have attestations generated with GitHub Artifact Attestations. These can be verified by using the GitHub CLI:

gh attestation verify <file-path of downloaded artifact> --repo open-telemetry/weaver

You can also download the attestation from GitHub and verify against that directly:

gh attestation verify <file-path of downloaded artifact> --bundle <file-path of downloaded attestation>