Skip to content

chore(deps): update docker base images#151

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker-base-images
Open

chore(deps): update docker base images#151
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/docker-base-images

Conversation

@renovate

@renovate renovate Bot commented Feb 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
docker.io/otel/ebpf-instrument minor v0.4.1 → v0.10.0
golang (source) final minor 1.25-alpine → 1.26-alpine
nginx final minor 1.29-alpine → 1.31-alpine
ollama/ollama minor 0.15.4 → 0.32.2

Release Notes

open-telemetry/opentelemetry-ebpf-instrumentation (docker.io/otel/ebpf-instrument)

v0.10.0

Compare Source

v0.10.0 is a minor release with new gRPC/HTTP2 context propagation, Go channel span links, Go and JVM runtime metrics, SunRPC and expanded GenAI instrumentation, signal-specific dynamic process selection, configuration v2 groundwork, and extensive reliability and security hardening.

New instrumentation and context propagation
  • Added gRPC/HTTP2 context propagation through sk_msg HPACK injection. (#​1832)
  • Added span links for direct and buffered Go channel handoffs, including runtime offset discovery, event reconstruction, OTLP export, and documentation. (#​2239, #​2272, #​2281, #​2417, #​2432, #​2491)
  • Added SunRPC/ONC RPC protocol detection and extraction. (#​2210)
  • Added a health-check endpoint for monitoring OBI pipeline liveness, with Unix domain socket support for both health checks and OTLP export. (#​2136, #​2224)
  • Added automatic OpenShift cluster-name detection. (#​2268)
  • Added multi-segment iovec support to the log enricher and split NUL-delimited log lines. (#​2078)
Generative AI and extraction coverage
  • Aligned GenAI attributes with the OpenTelemetry semantic conventions and normalized OpenAI, Anthropic, Gemini, Qwen, and Bedrock messages into the common parts-based representation. (#​2005)
  • Added LLM tool-call detection for OpenAI, Anthropic, Gemini, and Qwen. (#​2118)
  • Added vector retrieval observability for RAG pipelines, including Pinecone, Qdrant, Milvus, Zilliz, Chroma, Weaviate, and generic retrieval endpoints. (#​2087)
  • Added MCP tool-call argument and result extraction with independent attribute-selection controls for potentially sensitive payloads. (#​2408, #​2518)
  • Added extraction for retrieval top_k, nested rerank formats, and embedding dimensions derived from response data. (#​2409, #​2410, #​2411)
  • Added SSE streaming support for OpenAI-compatible, Anthropic, and Qwen responses, increased the accumulated HTTP capture limit to 256 KiB, and improved recovery from truncated TLS and request-body captures. (#​2394, #​2407, #​2505)
  • Added JSON-RPC details to span debug output and fixed top-level JSON fallback extraction. (#​2385, #​2353)
Runtime metrics and dynamic process selection
  • Added initial Go runtime metrics for memory limits, completed GC cycles, GOMAXPROCS, and GOGC. (#​2255)
  • Added HotSpot JVM memory metrics using GCTracer uprobes and USDT probes, together with the generic USDT attachment support needed to collect them. (#​2305)
  • Expanded the dynamic PID selector into signal-specific views for application traces, application metrics, network metrics, and stats metrics. (#​2250, #​2279, #​2340, #​2421, #​2442)
  • Added per-process service identity and resource attributes to the dynamic selector and gated runtime metrics through its application-metrics view. (#​2458, #​2461)
Metrics, exporters, and configuration
  • Added TCP byte-transfer and retransmission metrics, a network flow packet counter, and a configurable StatsO11y ring-buffer wakeup threshold. (#​2157, #​2124, #​2294, #​2198)
  • Added internal pipeline queue occupancy metrics to help diagnose backpressure and blocked-node failures. (#​2430)
  • Added resource-attribute selection for metric and trace target information. (#​2403)
  • Made TCP RTT histograms respect the configured histogram aggregation. (#​2105)
  • Added configuration v2 design, schema, migration documentation, typed builders, parity validation, and internal bidirectional conversion for capture rules, telemetry, HTTP settings, network metadata, and enrichment. Configuration v2 remains internal groundwork and is not yet a public runtime configuration interface. (#​1351, #​2252, #​2253, #​2288, #​2321, #​2322, #​2462, #​2465, #​2466, #​2467, #​2468)
  • Added selector-specific route refinements to config v2 export and fixed daemon log-format conversion. (#​2523, #​2524)
Security hardening
  • Bounded protocol and trace-context parsing to fresh, frame-local data, including Go readMimeHeader, UDP DNS, Kafka request headers, SSL payloads, Java SSL receive packets, and HTTP/2 HPACK traceparent entries. (#​2233, #​2230, #​2235, #​2237, #​2218, #​2359)
  • Corrected Java proxy stream range handling so reused application buffers cannot contribute stale bytes to telemetry. (#​2229)
  • Bounded Node.js inspector I/O and fallback JavaScript source scanning to prevent stalled endpoints, special files, or oversized sources from blocking instrumentation. (#​2231, #​2244)
  • Rejected symlinked Java classpath paths below process roots to prevent monitored processes from redirecting route harvesting into host filesystem paths. (#​2499)
  • Hardened user-space protocol processing against resource exhaustion and panics by bounding SunRPC fragments and safely handling oversized chunked HTTP response lengths and missing MQTT response buffers. (#​2516, #​2520, #​2515)
  • Switched Go connection and manual-span helpers to explicit user-memory reads for pointers originating in instrumented processes. (#​2192, #​2522)
  • Restricted privileged VM-test dispatches to users with write access and prevented Docker credentials from being exposed to workflows executing arbitrary dispatched refs. (#​2352)
  • Added automatic query-parameter redaction for emitted URLs, including legacy AWS signed-URL credentials. (#​2415, #​2509)
  • Prevented raw GenAI provider errors from bypassing attribute selection through span status messages. (#​2503)
  • Updated security-affected Go, Java, JavaScript, and Python dependencies, including gRPC, pgx, Flask, Werkzeug, Requests, urllib3, and @grpc/grpc-js. (#​2106, #​2107, #​2308, #​2309, #​2311, #​2316, #​2317, #​2318, #​2319)
Runtime, tracing, and protocol fixes
  • Fixed stale trace context across Kafka requests, Go HTTP processing, and gRPC client connections. (#​2226, #​2232, #​2131)
  • Fixed Java trace correlation across virtual-thread mounts, added context-aware JVM attachment, and improved attach sequencing. (#​2261, #​2360, #​2388)
  • Added support for JDK 26 and 27. (#​2287)
  • Moved JVM attachment tooling to a hardened internal fork. (#​2307, #​2326, #​2351)
  • Fixed route harvesting and matching behavior for Rails, Sinatra, Java, wildcard fallbacks, and cancellation. (#​2364, #​2440, #​2423, #​2501)
  • Fixed metrics exporter memory growth, stale reporter-pool cache entries, OTEL Collector shutdown hangs, and readiness-check connection and goroutine leaks. (#​2184, #​2354, #​2387, #​2436)
  • Fixed SQL++ query text extraction, Kafka operation mapping, and JSON-RPC span names. (#​2214, #​2306, #​1967)
  • Removed environment-based language detection that could produce false positives from Kubernetes Service Links. (#​2271)
  • Fixed forwarding of host processes through Kubernetes discovery. (#​2490)
  • Fixed USDT probe cleanup when links are closed. (#​2500)
Behavior changes and compatibility notes
  • url.query is now emitted by default for HTTP spans when present, and client url.full includes the query string. Sensitive values are automatically redacted, the redaction list can be extended with attributes.extra_redact_query_params, and url.query can be excluded through trace attribute selection. (#​2415)
  • GraphQL documents are no longer exported by default. (#​2240)
  • Java route harvesting is disabled by default while JVM-blocking edge cases are investigated. (#​2303)
  • The ip context-propagation value is deprecated and now warns without enabling propagation. The undocumented http alias has been removed; use headers instead. (#​2278)
  • The dynamic selector moved from the AppO11y-specific context to the global context and now exposes signal-specific views. Direct users of the previous internal field will need to migrate to the selector API. (#​2250, #​2340)
Performance and validation improvements
  • Improved Redis, Memcached, and unmatched TCP parsing performance. (#​2202, #​2197, #​2148)
  • Improved large-buffer parsing and reduced queue allocation and locking overhead. (#​2191, #​2397, #​2413)
  • Expanded verifier testing across RHEL and Amazon Linux 2023 kernels and increased verifier-test coverage and reliability. (#​2171, #​2386, #​2484)
Build, CI, docs, and project maintenance
  • Added cosign bundles when signing release artifacts. (#​2480)
  • Updated the project to Go 1.25.11 and LLVM 22. (#​2439, #​2172)
  • Added the OBI Store Demo example. (#​2257)
  • Added the OpenTelemetry eBPF Instrumentation Generative AI Policy. (#​2152)
  • Added k8s-cache documentation and updated developer checklists for adding NetO11y and StatsO11y metrics. (#​1886, #​2339)
Dependencies

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone America/New_York)

  • Branch creation
    • "before 5am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the dependencies label Feb 9, 2026
@renovate renovate Bot changed the title chore(deps): update ollama/ollama docker tag to v0.15.6 chore(deps): update docker base images Feb 11, 2026
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 4 times, most recently from 02fb821 to 2f84211 Compare February 17, 2026 02:50
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 5 times, most recently from c3182ee to 5f7d6f7 Compare February 27, 2026 02:07
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 4 times, most recently from 82a6d99 to 3ebbf26 Compare March 6, 2026 04:59
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch from 3ebbf26 to daa46c3 Compare March 7, 2026 01:36
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 3 times, most recently from 2d231db to 70490e1 Compare March 19, 2026 01:04
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 2 times, most recently from b20a8c6 to cd32c2b Compare March 30, 2026 04:52
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 6 times, most recently from 73e39ed to 2da6fa6 Compare April 8, 2026 22:35
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 3 times, most recently from c543410 to 78ef542 Compare April 14, 2026 05:13
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 3 times, most recently from 197109a to 54d8ea5 Compare April 24, 2026 06:35
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 4 times, most recently from e5c9e35 to 912dcfa Compare May 5, 2026 21:35
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 5 times, most recently from acd51ad to 7e14e70 Compare May 15, 2026 00:44
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 7 times, most recently from 5187158 to 7cf709a Compare June 8, 2026 20:03
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 3 times, most recently from 40c0043 to 947a11e Compare June 18, 2026 02:01
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 3 times, most recently from ebb6523 to 46438a9 Compare June 30, 2026 22:14
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch 2 times, most recently from 3c16ac6 to ca97a62 Compare July 14, 2026 02:08
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch from ca97a62 to 3a5cb99 Compare July 16, 2026 09:51
@renovate
renovate Bot force-pushed the renovate/docker-base-images branch from 3a5cb99 to 417d6e4 Compare July 22, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants