NH-135273 OTelCol: opentelemetry-lambda security vulnerabilities - #69
Merged
Conversation
jerrytfleung
changed the title
jerrytfleung
marked this pull request as ready for review
April 16, 2026 17:51
There was a problem hiding this comment.
Pull request overview
Updates OpenTelemetry Lambda Collector modules to newer dependency versions (to address reported security vulnerabilities) and removes unused internal type definitions from the telemetry API receiver.
Changes:
- Bumped OpenTelemetry Collector/Contrib and related dependencies across collector submodules (go.mod/go.sum sync).
- Updated various transitive dependencies (e.g., hashicorp/go-version, golang.org/x/, google.golang.org/).
- Removed unused (unreferenced) platform event/type structs from
telemetryapireceiver/types.go.
Reviewed changes
Copilot reviewed 6 out of 12 changed files in this pull request and generated 2 comments.
Show a summary per file
| File | Description |
|---|---|
| collector/receiver/telemetryapireceiver/types.go | Removes a large set of unused internal type definitions, leaving only event. |
| collector/receiver/telemetryapireceiver/go.mod | Updates receiver module dependencies to newer OTel Collector/Contrib versions. |
| collector/receiver/telemetryapireceiver/go.sum | Syncs checksums for updated receiver dependencies. |
| collector/processor/decoupleprocessor/go.mod | Updates decoupleprocessor module dependencies to newer OTel Collector versions. |
| collector/processor/decoupleprocessor/go.sum | Syncs checksums for updated decoupleprocessor dependencies. |
| collector/processor/coldstartprocessor/go.mod | Updates coldstartprocessor module dependencies to newer OTel Collector versions. |
| collector/processor/coldstartprocessor/go.sum | Syncs checksums for updated coldstartprocessor dependencies. |
| collector/lambdacomponents/go.mod | Updates lambdacomponents module dependencies (OTel + various cloud/infra libs). |
| collector/lambdacomponents/go.sum | Syncs checksums for updated lambdacomponents dependencies. |
| collector/internal/tools/go.sum | Updates tooling checksums (removes no-longer-needed entries). |
| collector/go.mod | Updates top-level collector module dependencies to newer OTel Collector versions and transitive bumps. |
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
Comment on lines
+10
to
+19
| go.opentelemetry.io/collector/client v1.56.0 | ||
| go.opentelemetry.io/collector/component v1.56.0 | ||
| go.opentelemetry.io/collector/confmap v1.56.0 | ||
| go.opentelemetry.io/collector/confmap/xconfmap v0.150.0 | ||
| go.opentelemetry.io/collector/consumer v1.56.0 | ||
| go.opentelemetry.io/collector/consumer/consumertest v0.150.0 | ||
| go.opentelemetry.io/collector/pdata v1.56.0 | ||
| go.opentelemetry.io/collector/processor v1.56.0 | ||
| go.opentelemetry.io/collector/processor/processorhelper v0.150.0 | ||
| go.opentelemetry.io/collector/processor/processortest v0.150.0 |
Comment on lines
+8
to
+14
| go.opentelemetry.io/collector/component v1.56.0 | ||
| go.opentelemetry.io/collector/consumer v1.56.0 | ||
| go.opentelemetry.io/collector/consumer/consumertest v0.150.0 | ||
| go.opentelemetry.io/collector/pdata v1.56.0 | ||
| go.opentelemetry.io/collector/processor v1.56.0 | ||
| go.opentelemetry.io/collector/processor/processorhelper v0.150.0 | ||
| go.opentelemetry.io/collector/processor/processortest v0.150.0 |
cleverchuk
approved these changes
Apr 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
https://my.na-01.cloud.solarwinds.com/140638900734749696/entities/services/e-2749747667679508261/overview?duration=3600